Google Security Operations Service Management 角色和权限

本页面列出了 Google Security Operations Service Management 的 IAM 角色和权限。如需搜索所有角色和权限，请参阅角色和权限索引。

Google Security Operations Service Management 角色

Role	Permissions
Chronicle Service Admin (roles/chroniclesm.admin) Admins can view and modify Chronicle service details.	chroniclesm.* chroniclesm.gcpAssociations.create chroniclesm.gcpAssociations.delete chroniclesm.gcpAssociations.get chroniclesm.gcpAssociations.list chroniclesm.gcpLogFlowFilters.get chroniclesm.gcpLogFlowFilters.update chroniclesm.gcpSettings.get chroniclesm.gcpSettings.update
Chronicle Service Viewer (roles/chroniclesm.viewer) Viewers can see Chronicle service details but not change them.	chroniclesm.gcpAssociations.get chroniclesm.gcpAssociations.list chroniclesm.gcpLogFlowFilters.get chroniclesm.gcpSettings.get

Google Security Operations Service Management 权限

权限	以下角色拥有此权限
chroniclesm.gcpAssociations.create	Owner (roles/owner) Chronicle Service Admin (roles/chroniclesm.admin)
chroniclesm.gcpAssociations.delete	Owner (roles/owner) Chronicle Service Admin (roles/chroniclesm.admin)
chroniclesm.gcpAssociations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Chronicle Service Admin (roles/chroniclesm.admin) Chronicle Service Viewer (roles/chroniclesm.viewer)
chroniclesm.gcpAssociations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Chronicle Service Admin (roles/chroniclesm.admin) Chronicle Service Viewer (roles/chroniclesm.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer)
chroniclesm.gcpLogFlowFilters.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Chronicle Service Admin (roles/chroniclesm.admin) Chronicle Service Viewer (roles/chroniclesm.viewer)
chroniclesm.gcpLogFlowFilters.update	Owner (roles/owner) Editor (roles/editor) Chronicle Service Admin (roles/chroniclesm.admin)
chroniclesm.gcpSettings.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Chronicle Service Admin (roles/chroniclesm.admin) Chronicle Service Viewer (roles/chroniclesm.viewer)
chroniclesm.gcpSettings.update	Owner (roles/owner) Editor (roles/editor) Chronicle Service Admin (roles/chroniclesm.admin)