本页面列出了每种资源类型的导出权限。这些权限仅适用于 RESOURCE
或未指定的内容类型。在使用 Cloud Asset API 导出资产时,可使用这些政策来限制允许的资源类型。例如,导出具有 RESOURCE
或未指定内容类型的资产时,对项目具有 cloudasset.assets.exportResource
权限的用户可以导出任何资源类型的资源。不过,如果用户仅对项目拥有 cloudasset.assets.exportComputeDisks
权限,那么在尝试导出资源类型不是 compute.googleapis.com/Disk
或资源类型未指定的资产时,会收到 PERMISSION_DENIED
错误。如需详细了解如何使用 IAM 权限,请参阅 IAM 方法指南。
资源类型 | 每种资源类型的导出权限 |
---|---|
appengine.googleapis.com/Application |
cloudasset.assets.exportAppengineApplications |
appengine.googleapis.com/Service |
cloudasset.assets.exportAppengineServices |
appengine.googleapis.com/Version |
cloudasset.assets.exportAppengineVersions |
bigquery.googleapis.com/Dataset |
cloudasset.assets.exportBigqueryDatasets |
bigquery.googleapis.com/Table |
cloudasset.assets.exportBigqueryTables |
bigtableadmin.googleapis.com/Cluster |
cloudasset.assets.exportBigtableCluster |
bigtableadmin.googleapis.com/Instance |
cloudasset.assets.exportBigtableInstance |
bigtableadmin.googleapis.com/Table |
cloudasset.assets.exportBigtableTable |
cloudbilling.googleapis.com/BillingAccount |
cloudasset.assets.exportCloudbillingBillingAccounts |
cloudkms.googleapis.com/CryptoKey |
cloudasset.assets.exportCloudkmsCryptoKeys |
cloudkms.googleapis.com/CryptoKeyVersion |
cloudasset.assets.exportCloudkmsCryptoKeyVersions |
cloudkms.googleapis.com/ImportJob |
cloudasset.assets.exportCloudkmsImportJobs |
cloudkms.googleapis.com/KeyRing |
cloudasset.assets.exportCloudkmsKeyRings |
cloudresourcemanager.googleapis.com/Folder |
cloudasset.assets.exportCloudresourcemanagerFolders |
cloudresourcemanager.googleapis.com/Organization |
cloudasset.assets.exportCloudresourcemanagerOrganizations |
cloudresourcemanager.googleapis.com/Project |
cloudasset.assets.exportCloudresourcemanagerProjects |
compute.googleapis.com/Address |
cloudasset.assets.exportComputeAddress |
compute.googleapis.com/Autoscaler |
cloudasset.assets.exportComputeAutoscalers |
compute.googleapis.com/BackendBucket |
cloudasset.assets.exportComputeBackendBuckets |
compute.googleapis.com/BackendService |
cloudasset.assets.exportComputeBackendServices |
compute.googleapis.com/Disk |
cloudasset.assets.exportComputeDisks |
compute.googleapis.com/Firewall |
cloudasset.assets.exportComputeFirewalls |
compute.googleapis.com/ForwardingRule |
cloudasset.assets.exportComputeForwardingRules |
compute.googleapis.com/GlobalAddress |
cloudasset.assets.exportComputeGlobalAddress |
compute.googleapis.com/HealthCheck |
cloudasset.assets.exportComputeHealthChecks |
compute.googleapis.com/HttpHealthCheck |
cloudasset.assets.exportComputeHttpHealthChecks |
compute.googleapis.com/HttpsHealthCheck |
cloudasset.assets.exportComputeHttpsHealthChecks |
compute.googleapis.com/Image |
cloudasset.assets.exportComputeImages |
compute.googleapis.com/Instance |
cloudasset.assets.exportComputeInstances |
compute.googleapis.com/InstanceGroup |
cloudasset.assets.exportComputeInstanceGroups |
compute.googleapis.com/InstanceGroupManager |
cloudasset.assets.exportComputeInstanceGroupManagers |
compute.googleapis.com/InstanceTemplate |
cloudasset.assets.exportComputeInstanceTemplates |
compute.googleapis.com/Interconnect |
cloudasset.assets.exportComputeInterconnect |
compute.googleapis.com/InterconnectAttachment |
cloudasset.assets.exportComputeInterconnectAttachment |
compute.googleapis.com/License |
cloudasset.assets.exportComputeLicenses |
compute.googleapis.com/Network |
cloudasset.assets.exportComputeNetworks |
compute.googleapis.com/Project |
cloudasset.assets.exportComputeProjects |
compute.googleapis.com/RegionDisk |
cloudasset.assets.exportComputeRegionDisk |
compute.googleapis.com/Route |
cloudasset.assets.exportComputeRoutes |
compute.googleapis.com/Router |
cloudasset.assets.exportComputeRouters |
compute.googleapis.com/Snapshot |
cloudasset.assets.exportComputeSnapshots |
compute.googleapis.com/SslCertificate |
cloudasset.assets.exportComputeSslCertificates |
compute.googleapis.com/Subnetwork |
cloudasset.assets.exportComputeSubnetworks |
compute.googleapis.com/TargetHttpProxy |
cloudasset.assets.exportComputeTargetHttpProxies |
compute.googleapis.com/TargetHttpsProxy |
cloudasset.assets.exportComputeTargetHttpsProxies |
compute.googleapis.com/TargetInstance |
cloudasset.assets.exportComputeTargetInstances |
compute.googleapis.com/TargetPool |
cloudasset.assets.exportComputeTargetPools |
compute.googleapis.com/TargetTcpProxy |
cloudasset.assets.exportComputeTargetTcpProxies |
compute.googleapis.com/TargetSslProxy |
cloudasset.assets.exportComputeTargetSslProxies |
compute.googleapis.com/TargetVpnGateway |
cloudasset.assets.exportComputeTargetVpnGateways |
compute.googleapis.com/UrlMap |
cloudasset.assets.exportComputeUrlMaps |
compute.googleapis.com/VpnTunnel |
cloudasset.assets.exportComputeVpnTunnels |
container.googleapis.com/Cluster |
cloudasset.assets.exportContainerClusters |
container.googleapis.com/NodePool |
cloudasset.assets.exportContainerNodepool |
dataproc.googleapis.com/Cluster |
cloudasset.assets.exportDataprocClusters |
dataproc.googleapis.com/Job |
cloudasset.assets.exportDataprocJobs |
dns.googleapis.com/ManagedZone |
cloudasset.assets.exportDnsManagedZones |
dns.googleapis.com/Policy |
cloudasset.assets.exportDnsPolicies |
iam.googleapis.com/Role |
cloudasset.assets.exportIamRoles |
iam.googleapis.com/ServiceAccount |
cloudasset.assets.exportIamServiceAccounts |
k8s.io/Namespace |
cloudasset.assets.exportContainerNamespace |
k8s.io/Node |
cloudasset.assets.exportContainerNode |
k8s.io/Pod |
cloudasset.assets.exportContainerPod |
osconfig.googleapis.com/PatchDeployment |
cloudasset.assets.exportPatchDeployments |
pubsub.googleapis.com/Subscription |
cloudasset.assets.exportPubsubSubscriptions |
pubsub.googleapis.com/Topic |
cloudasset.assets.exportPubsubTopics |
rbac.authorization.k8s.io/ClusterRole |
cloudasset.assets.exportContainerClusterrole |
rbac.authorization.k8s.io/ClusterRoleBinding |
cloudasset.assets.exportContainerClusterrolebinding |
rbac.authorization.k8s.io/Role |
cloudasset.assets.exportContainerRole |
rbac.authorization.k8s.io/RoleBinding |
cloudasset.assets.exportContainerRolebinding |
spanner.googleapis.com/Backup |
cloudasset.assets.exportSpannerBackups |
spanner.googleapis.com/Database |
cloudasset.assets.exportSpannerDatabases |
spanner.googleapis.com/Instance |
cloudasset.assets.exportSpannerInstances |
sqladmin.googleapis.com/Instance |
cloudasset.assets.exportSqladminInstances |
storage.googleapis.com/Bucket |
cloudasset.assets.exportStorageBuckets |