Informazioni sui ruoli

In questa pagina vengono descritti i ruoli IAM e vengono elencati i ruoli predefiniti che puoi concedere alle entità.

Un ruolo contiene un set di autorizzazioni che consentono di eseguire azioni specifiche sulle risorse di Google Cloud. Per rendere le autorizzazioni disponibili alle entità, inclusi utenti, gruppi e account di servizio, devi concedere i ruoli alle entità.

Prerequisiti per questa guida

• Comprendi i concetti di base di IAM

Tipi di ruolo

In IAM esistono questi tre tipi di ruoli:

• Ruoli di base, che includono i ruoli Proprietario, Editor e Visualizzatore esistenti prima dell'introduzione di IAM.
• Ruoli predefiniti, che forniscono un accesso granulare per un servizio specifico e sono gestiti da Google Cloud.
• Ruoli personalizzati, che forniscono un accesso granulare in base a un elenco di autorizzazioni specificato dall'utente.

Per determinare se un'autorizzazione è inclusa in un ruolo di base, predefinito o personalizzato, puoi utilizzare uno dei seguenti metodi:

• Esegui il comando gcloud iam roles describe per elencare le autorizzazioni nel ruolo.
• Chiama il metodo API REST roles.get() per elencare le autorizzazioni nel ruolo.
• Solo per i ruoli di base e predefiniti: cerca nel riferimento autorizzazioni per verificare se l'autorizzazione è stata concessa dal ruolo.
• Solo per i ruoli predefiniti: cerca le descrizioni dei ruoli predefinite in questa pagina per vedere quali autorizzazioni include il ruolo.

Le sezioni seguenti descrivono ogni tipo di ruolo e forniscono esempi su come utilizzarle.

Ruoli di base

Esistono diversi ruoli di base che esistevano prima dell'introduzione di IAM: Proprietario, Editor e Visualizzatore. Questi ruoli sono concentrici, ovvero il ruolo Proprietario include le autorizzazioni del ruolo Editor e quest'ultimo include le autorizzazioni del ruolo Visualizzatore. Originariamente erano noti come "ruoli originari".

Attenzione: i ruoli di base includono migliaia di autorizzazioni per tutti i servizi Google Cloud. Negli ambienti di produzione, non concedere ruoli di base a meno che non esistano alternative. Assegna invece i ruoli predefiniti più limitati o i ruoli personalizzati che soddisfano le tue esigenze.

La tabella seguente riepiloga le autorizzazioni che i ruoli di base includono in tutti i servizi Google Cloud:

Definizioni di base dei ruoli

Nome	Titolo	Autorizzazioni
roles/viewer	Visualizzatore	Autorizzazioni relative ad azioni di sola lettura senza effetto sullo stato, ad esempio la visualizzazione (ma non la modifica) di risorse o dati esistenti.
roles/editor	Editor	Tutte le autorizzazioni di visualizzazione, con autorizzazione più per le azioni che modificano lo stato, ad esempio la modifica di risorse esistenti. Nota: il ruolo Editor contiene le autorizzazioni per creare ed eliminare risorse per la maggior parte dei servizi Google Cloud. ma non include le autorizzazioni per eseguire tutte le azioni per tutti i servizi. Per ulteriori informazioni su come verificare se un ruolo ha le autorizzazioni necessarie, consulta la pagina Tipi di ruoli in questa pagina.
roles/owner	Proprietario	Tutte le autorizzazioni Editor e le autorizzazioni per le azioni seguenti: Gestisci i ruoli e le autorizzazioni per un progetto e tutte le risorse che fanno parte del progetto. Impostazione dei pagamenti di un progetto. Nota: La concessione del ruolo Proprietario a livello di risorsa, ad esempio un argomento Pub/Sub, non concede il ruolo Proprietario nel progetto padre. La concessione del ruolo di Proprietario a livello di organizzazione non ti permette di aggiornare i metadati dell'organizzazione. Tuttavia, consente di modificare tutti i progetti e altre risorse nell'organizzazione. Per concedere il ruolo Proprietario su un progetto a un utente esterno all'organizzazione, devi utilizzare Google Cloud Console, non l'interfaccia a riga di comando gcloud. Se il tuo progetto non fa parte di un'organizzazione, devi utilizzare la console Google Cloud per concedere il ruolo Proprietario.

Puoi concedere ruoli di base con Google Cloud Console, tramite l'API e l'interfaccia a riga di comando gcloud. Per concedere i ruoli di base su un progetto, una cartella o un'organizzazione, consulta Gestire l'accesso a progetti, cartelle e organizzazioni. Per concedere i ruoli di base su altre risorse, consulta la pagina Gestire l'accesso ad altre risorse.

Ruoli predefiniti

Beta

Eventuali ruoli IAM beta descritti in questa sezione potrebbero essere modificati in modi incompatibili con le versioni precedenti e non sono consigliati per l'utilizzo in produzione. Non sono soggetti a SLA o norme sul ritiro.

Oltre ai ruoli di base, IAM fornisce ruoli predefiniti aggiuntivi che offrono un accesso granulare a determinate risorse Google Cloud e impediscono l'accesso indesiderato ad altre risorse. Questi ruoli vengono creati e gestiti da Google. Google aggiorna automaticamente le autorizzazioni in base alle esigenze, ad esempio quando Google Cloud aggiunge nuove funzionalità o servizi.

Le seguenti tabelle elencano questi ruoli, la loro descrizione e il tipo di risorsa di livello più basso in cui è possibile impostare i ruoli. Un ruolo specifico può essere concesso a questo tipo di risorsa o nella maggior parte dei casi a qualsiasi tipo superiore nella gerarchia di risorse di Google Cloud.

Puoi concedere più ruoli allo stesso utente, a qualsiasi livello della gerarchia delle risorse. Ad esempio, lo stesso utente può avere i ruoli Amministratore rete Compute e Visualizzatore log su un progetto e anche il ruolo Publisher Pub/Sub su un argomento Pub/Sub all'interno di quel progetto. Per elencare le autorizzazioni contenute in un ruolo, consulta la sezione Ottenere i metadati del ruolo.

Per assistenza nella scelta dei ruoli predefiniti più appropriati, consulta la pagina Scegliere i ruoli predefiniti.

Ruoli di Access Approval

Ruolo	Autorizzazioni
Approvatore di Access Approval ^beta (roles/accessapproval.approver) Può visualizzare o intervenire sulle richieste di approvazione dell'accesso e visualizzare la configurazione Contiene tre autorizzazioni di proprietario	accessapproval.requests.* accessapproval.richieste.approva accessapproval.richieste.ignora accessapproval.requests.get accessapproval.richieste.invalidate accessapproval.requests.list accessapproval.serviceAccounts.get accessapproval.settings.get resourcemanager.projects.get resourcemanager.projects.list
Editor configurazione di Access Approval ^Beta (roles/accessapproval.configEditor) Può aggiornare la configurazione di approvazione dell'accesso Contiene 2 autorizzazioni proprietario	accessapproval.serviceAccounts.get accessapproval.settings.* accessapproval.settings.delete accessapproval.settings.get accessapproval.settings.update resourcemanager.projects.get resourcemanager.projects.list
Strumento di convalida dell'approvazione di accesso ^Beta (roles/accessapproval.invalidator) Capacità di annullare la convalida di richieste di approvazione approvate esistenti Contiene 1 autorizzazione di proprietario	accessapproval.richieste.invalidate accessapproval.serviceAccounts.get accessapproval.settings.get resourcemanager.projects.get resourcemanager.projects.list
Visualizzatore Access Approval ^Beta (roles/accessapproval.viewer) Può visualizzare le richieste di approvazione dell'accesso e la configurazione	accessapproval.requests.get accessapproval.requests.list accessapproval.serviceAccounts.get accessapproval.settings.get resourcemanager.projects.get resourcemanager.projects.list

Ruoli di Gestore contesto accesso

Ruolo	Autorizzazioni
Amministratore associazioni accessi Cloud (roles/accesscontextmanager.gcpAccessAdmin) Creazione, modifica e cambiamento delle associazioni accessi Cloud.	accesscontextmanager.gcpUserAccessBindings.* accesscontextmanager.gcpUserAccessBindings.crea accesscontextmanager.gcpUserAccessBindings.elimina accesscontextmanager.gcpUserAccessBindings.scarica accesscontextmanager.Elenco di gcpUserAccessBindings. accesscontextmanager.gcpUserAccessBindings.Aggiorna
Lettore associazioni accessi Cloud (roles/accesscontextmanager.gcpAccessReader) Accesso in lettura alle associazioni accessi Cloud.	accesscontextmanager.gcpUserAccessBindings.scarica accesscontextmanager.Elenco di gcpUserAccessBindings.
Amministratore Gestore contesto accesso (roles/accesscontextmanager.policyAdmin) Accesso completo a criteri, livelli di accesso, zone di accesso e descrizioni di organizzazioni attendibili. Contiene 2 autorizzazioni proprietario	accesscontextmanager.accessLevels.* accesscontextmanager.accessLevels.crea accesscontextmanager.accessLevels.elimina accesscontextmanager.accessLevels.get accesscontextmanager.accessLevels. accesscontextmanager.accessLevels.replaceAll accesscontextmanager.accessLevels.Aggiorna accesscontextmanager.accessPolicies.* accesscontextmanager.accessPolicies.creazione accesscontextmanager.accessPolicies.elimina accesscontextmanager.accessPolicies.get accesscontextmanager.accessPolicies.getIamPolicy accesscontextmanager.accessPolicies.list accesscontextmanager.accessPolicies.setIamPolicy accesscontextmanager.accessPolicies.aggiornamento accesscontextmanager.accessZones.* accesscontextmanager.accessZones.creazione accesscontextmanager.accessZones.elimina accesscontextmanager.accessZones.recupero accesscontextmanager.accessZones.elenco accesscontextmanager.accessZones.Aggiornamento policies.manager..* accesscontextmanager.criteri.creazione accesscontextmanager.criteri.eliminazione accesscontextmanager.policies.Scarica accesscontextmanager.criteri.getIamPolicy accesscontextmanager.criteri.Elenco accesscontextmanager.policies.setIamPolicy accesscontextmanager.criteri.Aggiornamento accesscontextmanager.servicePerimeters.* accesscontextmanager.servicePerimeters.commit accesscontextmanager.servicePerimeters.crea accesscontextmanager.servicePerimeters.elimina accesscontextmanager.servicePerimeters. accesscontextmanager.Elenco dei perimetri di servizio. accesscontextmanager.servicePerimeters.replaceAll accesscontextmanager.servicePerimeters.Aggiorna cloudasset.risorse.searchAllResources resourcemanager.organizations.get resourcemanager.projects.get resourcemanager.projects.list
Editor Gestore contesto accesso (roles/accesscontextmanager.policyEditor) Accesso in modifica ai criteri. Crea e modifica livelli di accesso, zone di accesso e descrizioni di organizzazioni attendibili.	accesscontextmanager.accessLevels.* accesscontextmanager.accessLevels.crea accesscontextmanager.accessLevels.elimina accesscontextmanager.accessLevels.get accesscontextmanager.accessLevels. accesscontextmanager.accessLevels.replaceAll accesscontextmanager.accessLevels.Aggiorna accesscontextmanager.accessPolicies.creazione accesscontextmanager.accessPolicies.elimina accesscontextmanager.accessPolicies.get accesscontextmanager.accessPolicies.getIamPolicy accesscontextmanager.accessPolicies.list accesscontextmanager.accessPolicies.aggiornamento accesscontextmanager.accessZones.* accesscontextmanager.accessZones.creazione accesscontextmanager.accessZones.elimina accesscontextmanager.accessZones.recupero accesscontextmanager.accessZones.elenco accesscontextmanager.accessZones.Aggiornamento accesscontextmanager.criteri.creazione accesscontextmanager.criteri.eliminazione accesscontextmanager.policies.Scarica accesscontextmanager.criteri.getIamPolicy accesscontextmanager.criteri.Elenco accesscontextmanager.criteri.Aggiornamento accesscontextmanager.servicePerimeters.* accesscontextmanager.servicePerimeters.commit accesscontextmanager.servicePerimeters.crea accesscontextmanager.servicePerimeters.elimina accesscontextmanager.servicePerimeters. accesscontextmanager.Elenco dei perimetri di servizio. accesscontextmanager.servicePerimeters.replaceAll accesscontextmanager.servicePerimeters.Aggiorna cloudasset.risorse.searchAllResources resourcemanager.organizations.get resourcemanager.projects.get resourcemanager.projects.list
Lettore Gestore contesto accesso (roles/accesscontextmanager.policyReader) Accesso in lettura a criteri, livelli di accesso, zone di accesso e descrizioni di organizzazioni attendibili.	accesscontextmanager.accessLevels.get accesscontextmanager.accessLevels. accesscontextmanager.accessPolicies.get accesscontextmanager.accessPolicies.getIamPolicy accesscontextmanager.accessPolicies.list accesscontextmanager.accessZones.recupero accesscontextmanager.accessZones.elenco accesscontextmanager.policies.Scarica accesscontextmanager.criteri.getIamPolicy accesscontextmanager.criteri.Elenco accesscontextmanager.servicePerimeters. accesscontextmanager.Elenco dei perimetri di servizio. resourcemanager.organizations.get resourcemanager.projects.get resourcemanager.projects.list
Visualizzatore strumento per la risoluzione dei problemi Controlli di servizio VPC (roles/accesscontextmanager.vpcScTroubleshooterViewer)	accesscontextmanager.accessLevels.get accesscontextmanager.accessLevels. accesscontextmanager.policies.Scarica accesscontextmanager.criteri.getIamPolicy accesscontextmanager.criteri.Elenco accesscontextmanager.servicePerimeters. accesscontextmanager.Elenco dei perimetri di servizio. logging.exclusions.get logging.exclusions.list logging.logEntries.list logging.logMetrics.get logging.logMetrics.list logging.logServiceIndexes.list Logging.logServices.list logging.logs.list logging.sink.get logging.sink logging.usage.get resourcemanager.organizations.get resourcemanager.projects.get resourcemanager.projects.list

Ruoli

Ruolo	Autorizzazioni
Amministratore azioni (roles/actions.Admin) Accesso per modificare un'azione ed eseguirne il deployment	azioni.* Actions.agent.claimContentProvider Actions.agent.get Actions.agent.update Actions.agentVersions.create Actions.agentVersions.delete Actions.agentVersions.deploy Actions.agentVersions.get Actions.agentVersions.list firebase.projects.get firebase.projects.update resourcemanager.projects.get resourcemanager.projects.list serviceusage.services.use
Visualizzatore azioni (roles/actions.Viewer) Accesso per visualizzare un'azione	Actions.agent.get Actions.agentVersions.get Actions.agentVersions.list firebase.projects.get resourcemanager.projects.get resourcemanager.projects.list serviceusage.services.use

Ruoli di AI Notebooks

Ruolo	Autorizzazioni
Amministratore Notebooks (roles/notebooks.admin) Accesso completo a tutti i blocchi note. Risorse di livello più basso in cui puoi concedere questo ruolo: Istanza Contiene 5 autorizzazioni proprietario	compute.acceleratorTypes.* compute.acceleratorTypes.get compute.acceleratorTypes.list compute.addresses.get compute.addresses.list compute.autoscalers.get compute.autoscalers.list compute.backendBuckets.get compute.backendBuckets.list compute.backendServices.get compute.backendServices.getIamPolicy compute.backendServices.list compute.commitments.get compute.commitments.list compute.diskTypes.* compute.diskTypes.get compute.diskTypes.list compute.disks.get compute.disks.getIamPolicy compute.disks.list compute.dischi.listEffectiveTag compute.disks.listTagBindings compute.externalVpnGateways.get compute.listVpnGateways.esterni compute.firewallPolicies.get compute.Policywallfire.PolicyIamPolicy compute.firewallPolicies.list compute.firewalls.get compute.firewalls.list compute.forwardingrules.get compute.forwardingrules.list compute.globalAddresses.get compute.globalAddresses.list compute.globalInoltroRegole.get compute.globalInoltroRegole.elenco compute.globalForwardingRule.pscGet compute.globalNetworkEndpointGroups.get compute.globalNetworkEndpointGroups.elenco compute.globalOperations.get compute.globalOperations.getIamPolicy compute.globalOperations.list compute.globalPublicDelegatedPrefixes.get compute.globalPublicDelegatedPrefixes.list compute.healthChecks.get compute.healthChecks.list compute.httpHealthChecks.get compute.httpHealthChecks.list compute.httpsHealthChecks.get compute.httpsHealthChecks.list compute.images.get compute.images.getFromFamily compute.images.getIamPolicy compute.images.list compute.images.listEffectiveTag compute.images.listTagBindings compute.instanceGroupManagers.get compute.listGroupManagers.elenco compute.instanceGroups.get compute.instanceGroups.list compute.instanceTemplates.get compute.instanceTemplates.getIamPolicy compute.instanceTemplates.list compute.instances.get compute.instances.getEffectiveFirewalls compute.instances.getguestAttributes compute.instances.getIamPolicy compute.instances.getScreenshot compute.instances.getSerialPortOutput compute.instances.getShieldedInstanceIdentity compute.instances.getShieldedVmIdentity compute.instances.list compute.instances.listEffectiveTag compute.instances.listReferrer compute.instances.listTagBindings compute.interconnectAttachments.get compute.interconnectAttachments.elenco compute.interconnectLocations.* compute.interconnectLocations. compute.interconnectLocations.elenco compute.interconnects.get compute.interconnects.list compute.licenseCodes.get compute.Codes.getIamPolicy compute.liceCodes.list compute.lice.get policy.lice.getIamPolicy compute.lice.list compute.machineImages.get compute.machineImages.getIamPolicy compute.machineImages.list compute.machineTypes.* compute.machineTypes.get compute.machineTypes.list compute.maintenancePolicies.get compute.maintenancePolicies.getIamPolicy compute.maintenancePolicies.list compute.networkEdgeSecurityServices.get compute.networkEdgeSecurityServices.elenco compute.networkEndpointGroups.get compute.networkEndpointGroups.getIamPolicy compute.networkEndpointGroups.list compute.networks.get compute.network.getEffectiveFirewalls compute.network.getRegionEffectiveFirewalls compute.networks.list compute.network.listPeeringRoutes compute.nodeGroups.get compute.nodeGroups.getIamPolicy compute.nodeGroups.list compute.nodeTemplates.get compute.nodeTemplates.getIamPolicy compute.nodeTemplates.list compute.nodeTypes.* compute.nodeTypes.get compute.nodeTypes.list compute.organizations.listAssociations compute.packetMirrorings.get compute.packetMirrorings.list compute.projects.get compute.publicPubdPrefixes.get compute.publicPubdPrefixes.list compute.publicDelegatedPrefixes.get compute.publicDelegatedPrefixes.list compute.regionBackendServices.scarica Compute.regionBackendServices.getIamPolicy compute.listBackendServices.elenco compute.regionFirewallPolicies.get compute.regionFirewallPolicies.getIamPolicy compute.listFirewallPolicies.list compute.regionHealthCheckServices.get compute.listHealthCheckServices.elenco compute.regionHealthChecks.get compute.listHealthChecks.elenco compute.regionNetworkEndpointGroups.get compute.regionNetworkEndpointGroups.elenco compute.regionNotificationEndpoints.get compute.regionNotificationEndpoints.elenco compute.regionOperations.get compute.regionOperations.getIamPolicy compute.regionOperations.list compute.regionSecurityPolicies.get compute.listSecurityPolicies.list compute.regionSslCertificates.get compute.listSslCertificates.elenco compute.regionTargetHttpProxies.get compute.regionTargetHttpProxies.list compute.regionTargetHttpsProxies.get compute.regionTargetHttpsProxies.list (Elenco) compute.regionUrlMaps.get compute.regionUrlMaps.list compute.regionUrlMaps.validate compute.regions.* compute.regions.get compute.regions.list computes.reservations.get compute.reservations.list compute.resourcePolicies.get compute.resourcePolicies.list compute.routers.get compute.routers.list compute.routes.get compute.routes.list compute.securityPolicies.get compute.securityPolicies.getIamPolicy compute.securityPolicies.list compute.serviceAttachments.get compute.serviceAttachments.list compute.snapshots.get compute.snapshots.getIamPolicy compute.snapshots.list compute.snapshot.listEffectiveTag compute.snapshot.listTagBindings compute.sslCertificates.get compute.sslCertificates.list compute.sslPolicies.get compute.sslPolicies.list compute.sslPolicies.listAvailableFunzionalità compute.subnetworks.get compute.subnetwork.getIamPolicy compute.subnetworks.list compute.targetGrpcProxies.get compute.targetGrpcProxies.list compute.targetHttpProxies.get compute.targetHttpProxies.list compute.targetHttpsProxies.get compute.listtargetHttpsProxies. compute.targetInstances.get compute.targetInstances.list compute.targetPools.get compute.targetPools.list compute.targetSslProxies.get compute.targetSslProxies.list compute.targetTcpProxies.get compute.targetTcpProxies.list compute.targetVpnGateways.get compute.targetVpnGateways.list compute.urlMaps.get compute.urlMaps.list compute.urlMaps.convalida compute.vpnGateways.get compute.vpnGateways.list compute.vpnTunnels.get compute.vpnTunnels.list compute.zoneOperations.get compute.zoneOperations.getIamPolicy compute.zoneOperations.list compute.zones.* compute.zones.get compute.zones.list notebooks.* Notebooks.environments.create Notebooks.environments.delete Notebooks.environments.get blocchi note.ambienti.getIamPolicy Notebooks.environments.list blocco note.ambienti.setIamPolicy Notebooks.executions.create Notebooks.executions.delete notebooks.executions.get Notebooks.executions.getIamPolicy notebooks.executions.list notebooks.executions.setIamPolicy Notebooks.instances.checkUpgradability Notebooks.instances.create Notebooks.instances.delete notebooks.instances.diagnose Notebooks.instances.get notebooks.instances.getHealth Notebooks.instances.getIamPolicy notebooks.instances.list Notebooks.instances.reset Notebooks.instances.setAccelerator notebooks.istanze.setIamPolicy Notebooks.instances.setLabels Notebooks.instances.setMachineType Notebooks.instances.start Notebooks.instances.stop Notebooks.instances.update Notebooks.instances.updateConfig Notebooks.instances.updateShieldInstanceConfig Notebooks.instances.upgrade Notebooks.instances.use notebooks.locations.get notebooks.locations.list notebooks.operations.cancel Notebooks.operazioni.delete Notebooks.operazioni.get Notebooks.operazioni.list Notebooks.runtimes.create Notebooks.runtimes.delete notebooks.runtimes.diagnose notebooks.runtimes.get Notebooks.runtimes.getIamPolicy notebooks.runtimes.list Notebooks.runtimes.reset notebooks.runtime.setIamPolicy Notebooks.runtimes.start notebooks.runtimes.stop notebooks.runtimes.switch Notebooks.runtimes.update Notebooks.schedules.create Notebooks.schedules.delete Notebooks.schedules.get Notebooks.schedules.getIamPolicy Notebooks.schedules.list notebooks.schedules.setIamPolicy resourcemanager.projects.get resourcemanager.projects.list serviceusage.quotas.get serviceusage.services.get serviceusage.services.list
Amministratore Notebooks legacy (roles/notebooks.legacyAdmin) Accesso completo a tutte le risorse di Notebooks tramite l'API Compute. Contiene 35 autorizzazioni di proprietario	compute.* compute.acceleratorTypes.get compute.acceleratorTypes.list compute.addresses.create compute.indirizzi.createInternal compute.addresses.delete compute.indirizzi.deleteInternal compute.addresses.get compute.addresses.list compute.addresses.setLabels compute.addresses.use compute.addresses.useInternal compute.autoscalers.create compute.autoscalers.delete compute.autoscalers.get compute.autoscalers.list compute.autoscalers.update compute.backendBuckets.create compute.backendBuckets.delete compute.backendBuckets.get compute.backendBuckets.list compute.backendBuckets.setSecurityPolicy compute.backendBuckets.update compute.backendBuckets.use compute.backendServices.create compute.backendServices.delete compute.backendServices.get compute.backendServices.getIamPolicy compute.backendServices.list compute.backendServices.setIamPolicy compute.backendServices.setSecurityPolicy compute.backendServices.update compute.backendServices.use compute.commitments.create compute.commitments.get compute.commitments.list compute.commitments.update compute.impegni.updateReservations compute.diskTypes.get compute.diskTypes.list compute.dischi.addResourcePolicies compute.disks.create compute.disks.createSnapshot compute.disks.createTagBinding compute.disks.delete compute.disks.deleteTagBinding compute.disks.get compute.disks.getIamPolicy compute.disks.list compute.dischi.listEffectiveTag compute.disks.listTagBindings compute.dischi.removeResourcePolicies compute.disks.resize compute.disks.setIamPolicy compute.disks.setLabels compute.disks.update compute.disks.use compute.disks.useReadOnly compute.externalVpnGateways.create compute.externalVpnGateways.elimina compute.externalVpnGateways.get compute.listVpnGateways.esterni compute.externalVpnGateways.setLabels compute.externalVpnGateways.Utilizza compute.firewallPolicies.addAssociation compute.Policieswallfire.cloneRegole compute.firewallPolicies.copyRegole Compute.firewallPolicies.creazione compute.Policieswallfire.elimina compute.firewallPolicies.get compute.Policywallfire.PolicyIamPolicy compute.firewallPolicies.list compute.firewallPolicies.move compute.Policieswallfire.rimuoviAssociazione compute.firewallPolicies.setIamPolicy compute.firewallPolicies.aggiornamento compute.firewallPolicies.use compute.firewalls.create compute.firewalls.delete compute.firewalls.get compute.firewalls.list compute.firewalls.update compute.forwardingrules.create compute.forwardingrules.delete compute.forwardingrules.get compute.forwardingrules.list compute.forwardingrules.pscCreate compute.forwardingrules.pscDelete compute.forwardingrules.pscSetLabels compute.forwardingrules.pscSetTarget compute.forwardingrules.pscUpdate compute.forwardingrules.setLabels compute.forwardingrules.setTarget compute.forwardingrules.update compute.forwardingrules.use compute.globalAddresses.create compute.globalAddresses.createInternal compute.globalAddresses.delete compute.globalAddresses.deleteInternal compute.globalAddresses.get compute.globalAddresses.list compute.globalAddresses.setLabels compute.globalAddresses.use compute.globalInoltroRegole.creazione compute.global forwardingRule.elimina compute.globalInoltroRegole.get compute.globalInoltroRegole.elenco compute.globalForwardingRule.pscCreate compute.globalInoltroRegole.pscDelete compute.globalForwardingRule.pscGet compute.globalForwardingRule.pscSetLabels compute.globalInoltroRegole.pscSetTarget compute.globalInoltroRegole.pscUpdate compute.globalInoltroRegole.setLabels compute.globalForwardingRule.setTarget compute.globalInoltroRegole.Aggiornamento compute.globalNetworkEndpointGroups.attachNetworkEndpoints compute.globalNetworkEndpointGroups.creazione compute.globalNetworkEndpointGroups.elimina compute.globalNetworkEndpointGroups.connectNetworkEndpoints compute.globalNetworkEndpointGroups.get compute.globalNetworkEndpointGroups.elenco compute.globalNetworkEndpointGroups.utilizza compute.globalOperations.delete compute.globalOperations.get compute.globalOperations.getIamPolicy compute.globalOperations.list compute.globalOperations.setIamPolicy compute.globalPublicDelegatedPrefixes.create compute.globalPublicDelegatedPrefixes.elimina compute.globalPublicDelegatedPrefixes.get compute.globalPublicDelegatedPrefixes.list compute.globalPublicDelegatedPrefixes.Aggiorna compute.globalPublicDelegatedPrefixes.updatePolicy compute.globalPublicDelegatedPrefixes.utilizza compute.healthChecks.create compute.healthChecks.delete compute.healthChecks.get compute.healthChecks.list compute.healthChecks.update compute.healthChecks.use compute.healthChecks.useReadOnly compute.httpHealthChecks.crea compute.httpHealthChecks.elimina compute.httpHealthChecks.get compute.httpHealthChecks.list compute.httpHealthChecks.Aggiornamento compute.httpHealthChecks.use compute.httpHealthChecks.useReadOnly computing.httpsHealthChecks.creare compute.httpsHealthChecks.elimina compute.httpsHealthChecks.get compute.httpsHealthChecks.list compute.httpsHealthChecks.Aggiorna compute.httpsHealthChecks.use compute.httpsHealthChecks.useReadOnly compute.images.create compute.images.createTagBinding compute.images.delete compute.images.deleteTagBinding compute.images.deprecate compute.images.get compute.images.getFromFamily compute.images.getIamPolicy compute.images.list compute.images.listEffectiveTag compute.images.listTagBindings compute.images.setIamPolicy compute.images.setLabels compute.images.update compute.images.useReadOnly compute.instanceGroupManagers.crea compute.instanceGroupManagers.elimina compute.instanceGroupManagers.get compute.listGroupManagers.elenco compute.instanceGroupManagers.aggiornamento compute.instanceGroupManagers.utilizza compute.instanceGroups.create compute.instanceGroups.delete compute.instanceGroups.get compute.instanceGroups.list compute.instanceGroups.update compute.instanceGroups.use compute.instanceTemplates.crea compute.instanceTemplates.elimina compute.instanceTemplates.get compute.instanceTemplates.getIamPolicy compute.instanceTemplates.list compute.instanceTemplates.setIamPolicy compute.instanceTemplates.useReadOnly compute.instances.addAccessConfig compute.instances.addManagementPolicies compute.instances.addResourcePolicies compute.instances.attachDisk compute.instances.create compute.instances.createTagBinding compute.instances.delete compute.instances.deleteAccessConfig compute.instances.deleteTagBinding compute.instances.connectDisk compute.instances.get compute.instances.getEffectiveFirewalls compute.instances.getguestAttributes compute.instances.getIamPolicy compute.instances.getScreenshot compute.instances.getSerialPortOutput compute.instances.getShieldedInstanceIdentity compute.instances.getShieldedVmIdentity compute.instances.list compute.instances.listEffectiveTag compute.instances.listReferrer compute.instances.listTagBindings compute.instances.osAdminLogin compute.instances.osLogin compute.instances.removePeriodPolicies compute.instances.removeResourcePolicies compute.instances.reset compute.instances.resume compute.instances.sendDiagnosticInterrupt compute.instances.setDeletionProtection compute.instances.setDiskAutoDelete compute.instances.setIamPolicy compute.instances.setLabels compute.instances.setMachineResources compute.instances.setMachineType compute.instances.setMetadata compute.instances.setMinCpuPlatform compute.instances.setScheduling compute.instances.setServiceAccount compute.instances.setShieldedInstanceIntegrityPolicy compute.instances.setShieldedVmIntegrityPolicy compute.instances.setTag compute.instances.start compute.instances.startWithEncryptionKey compute.instances.stop compute.instances.suspend compute.instances.update compute.instances.updateAccessConfig compute.instances.updateDisplayDevice compute.instances.updateNetworkInterface compute.instances.updateSecurity compute.instances.updateShieldedInstanceConfig compute.instances.updateShieldedVmConfig compute.instances.use compute.instances.useReadOnly compute.interconnectAttachments.crea compute.interconnectAttachments.elimina compute.interconnectAttachments.get compute.interconnectAttachments.elenco compute.interconnectAttachments.setLabels compute.interconnectAttachments.aggiornamento compute.interconnectAttachments.utilizza compute.interconnectLocations. compute.interconnectLocations.elenco compute.interconnects.create compute.interconnects.delete compute.interconnects.get compute.interconnects.list compute.interconnect.setLabel compute.interconnects.update compute.interconnects.use compute.licenseCodes.get compute.Codes.getIamPolicy compute.liceCodes.list compute.licenseCodes.setIamPolicy compute.licenseCodes.update compute.liceCodes.use compute.lice.create compute.lice.delete compute.lice.get policy.lice.getIamPolicy compute.lice.list compute.lice.setIamPolicy compute.machineImages.create compute.machineImages.delete compute.machineImages.get compute.machineImages.getIamPolicy compute.machineImages.list compute.machineImages.setIamPolicy compute.machineImages.useReadOnly compute.machineTypes.get compute.machineTypes.list compute.maintenancePolicies.crea compute.maintenancePolicies.elimina compute.maintenancePolicies.get compute.maintenancePolicies.getIamPolicy compute.maintenancePolicies.list compute.maintenancePolicies.setIamPolicy compute.maintenancePolicies.utilizza compute.networkEdgeSecurityServices.crea compute.networkEdgeSecurityServices.elimina compute.networkEdgeSecurityServices.get compute.networkEdgeSecurityServices.elenco compute.networkEdgeSecurityServices.Aggiorna compute.networkEndpointGroups.attachNetworkEndpoints compute.networkEndpointGroups.crea compute.networkEndpointGroups.elimina compute.networkEndpointGroups.connectNetworkEndpoints compute.networkEndpointGroups.get compute.networkEndpointGroups.getIamPolicy compute.networkEndpointGroups.list compute.networkEndpointGroups.setIamPolicy compute.networkEndpointGroups.utilizza compute.networks.access compute.networks.addPeering compute.networks.create compute.networks.delete compute.networks.get compute.network.getEffectiveFirewalls compute.network.getRegionEffectiveFirewalls compute.networks.list compute.network.listPeeringRoutes compute.networks.mirror compute.networks.removePeering compute.network.setFirewallPolicy compute.network.switchToCustomMode compute.networks.update compute.networks.updatePeering compute.networks.updatePolicy compute.networks.use compute.networks.useExternalIp compute.nodeGroups.addNodes compute.nodeGroups.create compute.nodeGroups.delete compute.nodeGroups.deleteNodes compute.nodeGroups.get compute.nodeGroups.getIamPolicy compute.nodeGroups.list compute.nodeGroups.setIamPolicy compute.nodeGroups.setNodeTemplate compute.nodeGroups.update compute.nodeTemplates.create compute.nodeTemplates.delete compute.nodeTemplates.get compute.nodeTemplates.getIamPolicy compute.nodeTemplates.list compute.nodeTemplates.setIamPolicy compute.nodeTypes.get compute.nodeTypes.list compute.organizations.administerXpn compute..disableXpnHost compute..disableXpnResource compute.organizzazioni.enableXpnHost compute.organization.enableXpnResource compute.organizations.listAssociations compute.organizzazioni.setFirewallPolicy compute.organizzazioni.setSecurityPolicy compute.oslogin.updateExternalUser compute.packetMirroring.crea compute.packetMirroring.elimina compute.packetMirrorings.get compute.packetMirrorings.list compute.packetMirroring.Aggiornamento compute.projects.get compute.projects.setCommonInstanceMetadata compute.projects.setDefaultNetworkTier compute.projects.setDefaultServiceAccount compute.projects.setUsageExportBucket compute.publicPubdPrefixes.create compute.publicAdvertisingdPrefixes.elimina compute.publicPubdPrefixes.get compute.publicPubdPrefixes.list compute.publicPubdPrefixes.aggiorna compute.publicPubdPrefixes.updatePolicy compute.publicPubdPrefixes.utilizza compute.publicDelegatedPrefixes.create compute.publicDelegatedPrefixes.delete compute.publicDelegatedPrefixes.get compute.publicDelegatedPrefixes.list compute.publicDelegatedPrefixes.Aggiorna compute.publicDelegatedPrefixes.updatePolicy compute.publicDelegatedPrefixes.utilizza compute.regionBackendServices.crea compute.regionBackendServices.elimina compute.regionBackendServices.scarica Compute.regionBackendServices.getIamPolicy compute.listBackendServices.elenco compute.regionBackendServices.setIamPolicy compute.regionBackendServices.setSecurityPolicy compute.regionBackendServices.aggiornamento compute.regionBackendServices.utilizza compute.regionFirewallPolicies.cloneRule compute.regionFirewallPolicies.crea compute.regionFirewallPolicies.elimina compute.regionFirewallPolicies.get compute.regionFirewallPolicies.getIamPolicy compute.listFirewallPolicies.list compute.regionFirewallPolicies.setIamPolicy compute.regionFirewallPolicies.Aggiornamento compute.regionFirewallPolicies.utilizza compute.regionHealthCheckServices.crea compute.regionHealthCheckServices.elimina compute.regionHealthCheckServices.get compute.listHealthCheckServices.elenco compute.regionHealthCheckServices.aggiornamento compute.regionHealthCheckServices.utilizza compute.regionHealthChecks.crea compute.regionHealthChecks.elimina compute.regionHealthChecks.get compute.listHealthChecks.elenco compute.regionHealthChecks.aggiornamento compute.regionHealthChecks.use compute.regionHealthChecks.useReadOnly compute.regionNetworkEndpointGroups.crea compute.regionNetworkEndpointGroups.elimina compute.regionNetworkEndpointGroups.get compute.regionNetworkEndpointGroups.elenco compute.regionNetworkEndpointGroups.utilizza compute.regionNotificationEndpoints.crea compute.regionNotificationEndpoints.elimina compute.regionNotificationEndpoints.get compute.regionNotificationEndpoints.elenco compute.regionNotificationEndpoints.aggiornamento compute.regionNotificationEndpoints.utilizza compute.regionOperations.elimina compute.regionOperations.get compute.regionOperations.getIamPolicy compute.regionOperations.list compute.regionOperations.setIamPolicy compute.regionSecurityPolicies.create compute.regionSecurityPolicies.elimina compute.regionSecurityPolicies.get compute.listSecurityPolicies.list compute.regionSecurityPolicies.aggiornamento compute.regionSecurityPolicies.utilizza compute.regionSslCertificates.crea compute.regionSslCertificates.elimina compute.regionSslCertificates.get compute.listSslCertificates.elenco compute.regionTargetHttpProxies.crea compute.regionTargetHttpProxies.elimina compute.regionTargetHttpProxies.get compute.regionTargetHttpProxies.list compute.regionTargetHttpProxies.setUrlMap compute.regionTargetHttpProxies.utilizza compute.regionTargetHttpsProxies.crea compute.regionTargetHttpsProxies.elimina compute.regionTargetHttpsProxies.get compute.regionTargetHttpsProxies.list (Elenco) compute.regionTargetHttpsProxies.setSslCertificates compute.regionTargetHttpsProxies.setUrlMap compute.regionTargetHttpsProxies.Aggiorna compute.regionTargetHttpsProxies.utilizza compute.regionUrlMaps.create compute.regionUrlMaps.delete compute.regionUrlMaps.get compute.regionUrlMaps.invalidateCache compute.regionUrlMaps.list compute.regionUrlMaps.update compute.regionUrlMaps.use compute.regionUrlMaps.validate compute.regions.get compute.regions.list compute.reservations.create compute.reservations.delete computes.reservations.get compute.reservations.list compute.reservations.resize compute.reservations.update compute.resourcePolicies.Crea compute.resourcePolicies.Elimina compute.resourcePolicies.get compute.resourcePolicies.list compute.resourcePolicies.use compute.routers.create compute.routers.delete compute.routers.get compute.routers.list compute.routers.update compute.routers.use compute.routes.create compute.routes.delete compute.routes.get compute.routes.list compute.securityPolicies.addAssociation compute.securityPolicies.copyRegole compute.securityPolicies.crea compute.securityPolicies.elimina compute.securityPolicies.get compute.securityPolicies.getIamPolicy compute.securityPolicies.list compute.securityPolicies.move compute.securityPolicies.removeAssociation compute.securityPolicies.setIamPolicy compute.securityPolicies.setLabels compute.securityPolicies.Aggiorna compute.securityPolicies.use compute.serviceAttachments.crea compute.serviceAttachments.elimina compute.serviceAttachments.get compute.serviceAttachments.list compute.serviceAttachments.aggiorna compute.snapshots.create compute.snapshots.createTagBinding compute.snapshots.delete compute.snapshots.deleteTagBinding compute.snapshots.get compute.snapshots.getIamPolicy compute.snapshots.list compute.snapshot.listEffectiveTag compute.snapshot.listTagBindings compute.snapshots.setIamPolicy compute.snapshots.setLabels compute.snapshots.useReadOnly compute.sslCertificates.create compute.sslCertificates.delete compute.sslCertificates.get compute.sslCertificates.list compute.sslPolicies.create compute.sslPolicies.delete compute.sslPolicies.get compute.sslPolicies.list compute.sslPolicies.listAvailableFunzionalità compute.sslPolicies.update compute.sslPolicies.use compute.subnetworks.create compute.subnetworks.delete compute.subnetwork.expandIpCidrRange compute.subnetworks.get compute.subnetwork.getIamPolicy compute.subnetworks.list compute.subnetworks.mirror compute.subnetworks.setIamPolicy compute.subnetwork.setPrivateIpGoogleAccess compute.subnetworks.update compute.subnetworks.use compute.subnetwork.useExternalIp compute.targetGrpcProxies.creare compute.targetGrpcProxies.elimina compute.targetGrpcProxies.get compute.targetGrpcProxies.list compute.targetGrpcProxies.aggiornare compute.targetGrpcProxies.use compute.targetHttpProxies.crea compute.targetHttpProxies.elimina compute.targetHttpProxies.get compute.targetHttpProxies.list compute.targetHttpProxies.setUrlMap compute.targetHttpProxies.use compute.targetHttpsProxies.crea compute.targetHttpsProxies.elimina compute.targetHttpsProxies.get compute.listtargetHttpsProxies. compute.targetHttpsProxies.setSslCertificates compute.targetHttpsProxies.setSslPolicy compute.targetHttpsProxies.setUrlMap compute.targetHttpsProxies.Aggiorna compute.targetHttpsProxies.use compute.targetInstances.create compute.targetInstances.delete compute.targetInstances.get compute.targetInstances.list compute.targetInstances.use compute.targetPools.addHealthCheck compute.targetPools.addInstance compute.targetPools.create compute.targetPools.delete compute.targetPools.get compute.targetPools.list compute.targetPools.removeHealthCheck compute.targetPools.removeInstance compute.targetPools.update compute.targetPools.use compute.targetSslProxies.crea compute.targetSslProxies.elimina compute.targetSslProxies.get compute.targetSslProxies.list compute.targetSslProxies.setBackendService compute.targetSslProxies.setProxyHeader compute.targetSslProxies.setSslCertificates compute.targetSslProxies.use compute.targetTcpProxies.crea compute.targetTcpProxies.elimina compute.targetTcpProxies.get compute.targetTcpProxies.list compute.targetTcpProxies.Aggiorna compute.targetTcpProxies.use compute.targetVpnGateways.crea compute.targetVpnGateways.Elimina compute.targetVpnGateways.get compute.targetVpnGateways.list compute.targetVpnGateways.setLabels compute.targetVpnGateways.use compute.urlMaps.create compute.urlMaps.delete compute.urlMaps.get compute.urlMaps.invalidateCache compute.urlMaps.list compute.urlMaps.update compute.urlMaps.use compute.urlMaps.convalida compute.vpnGateways.create compute.vpnGateways.delete compute.vpnGateways.get compute.vpnGateways.list compute.vpnGateways.setLabels compute.vpnGateways.use compute.vpnTunnels.create compute.vpnTunnels.delete compute.vpnTunnels.get compute.vpnTunnels.list compute.vpnTunnels.setLabels compute.zoneOperations.delete compute.zoneOperations.get compute.zoneOperations.getIamPolicy compute.zoneOperations.list compute.zoneOperations.setIamPolicy compute.zones.get compute.zones.list notebooks.* Notebooks.environments.create Notebooks.environments.delete Notebooks.environments.get blocchi note.ambienti.getIamPolicy Notebooks.environments.list blocco note.ambienti.setIamPolicy Notebooks.executions.create Notebooks.executions.delete notebooks.executions.get Notebooks.executions.getIamPolicy notebooks.executions.list notebooks.executions.setIamPolicy Notebooks.instances.checkUpgradability Notebooks.instances.create Notebooks.instances.delete notebooks.instances.diagnose Notebooks.instances.get notebooks.instances.getHealth Notebooks.instances.getIamPolicy notebooks.instances.list Notebooks.instances.reset Notebooks.instances.setAccelerator notebooks.istanze.setIamPolicy Notebooks.instances.setLabels Notebooks.instances.setMachineType Notebooks.instances.start Notebooks.instances.stop Notebooks.instances.update Notebooks.instances.updateConfig Notebooks.instances.updateShieldInstanceConfig Notebooks.instances.upgrade Notebooks.instances.use notebooks.locations.get notebooks.locations.list notebooks.operations.cancel Notebooks.operazioni.delete Notebooks.operazioni.get Notebooks.operazioni.list Notebooks.runtimes.create Notebooks.runtimes.delete notebooks.runtimes.diagnose notebooks.runtimes.get Notebooks.runtimes.getIamPolicy notebooks.runtimes.list Notebooks.runtimes.reset notebooks.runtime.setIamPolicy Notebooks.runtimes.start notebooks.runtimes.stop notebooks.runtimes.switch Notebooks.runtimes.update Notebooks.schedules.create Notebooks.schedules.delete Notebooks.schedules.get Notebooks.schedules.getIamPolicy Notebooks.schedules.list notebooks.schedules.setIamPolicy resourcemanager.projects.get resourcemanager.projects.list serviceusage.quotas.get serviceusage.services.get serviceusage.services.list
Visualizzatore legacy Notebooks (roles/notebooks.legacyViewer) Accesso in sola lettura a tutte le risorse di Notebooks tramite l'API Compute.	compute.acceleratorTypes.* compute.acceleratorTypes.get compute.acceleratorTypes.list compute.addresses.get compute.addresses.list compute.autoscalers.get compute.autoscalers.list compute.backendBuckets.get compute.backendBuckets.list compute.backendServices.get compute.backendServices.getIamPolicy compute.backendServices.list compute.commitments.get compute.commitments.list compute.diskTypes.* compute.diskTypes.get compute.diskTypes.list compute.disks.get compute.disks.getIamPolicy compute.disks.list compute.dischi.listEffectiveTag compute.disks.listTagBindings compute.externalVpnGateways.get compute.listVpnGateways.esterni compute.firewallPolicies.get compute.Policywallfire.PolicyIamPolicy compute.firewallPolicies.list compute.firewalls.get compute.firewalls.list compute.forwardingrules.get compute.forwardingrules.list compute.globalAddresses.get compute.globalAddresses.list compute.globalInoltroRegole.get compute.globalInoltroRegole.elenco compute.globalForwardingRule.pscGet compute.globalNetworkEndpointGroups.get compute.globalNetworkEndpointGroups.elenco compute.globalOperations.get compute.globalOperations.getIamPolicy compute.globalOperations.list compute.globalPublicDelegatedPrefixes.get compute.globalPublicDelegatedPrefixes.list compute.healthChecks.get compute.healthChecks.list compute.httpHealthChecks.get compute.httpHealthChecks.list compute.httpsHealthChecks.get compute.httpsHealthChecks.list compute.images.get compute.images.getFromFamily compute.images.getIamPolicy compute.images.list compute.images.listEffectiveTag compute.images.listTagBindings compute.instanceGroupManagers.get compute.listGroupManagers.elenco compute.instanceGroups.get compute.instanceGroups.list compute.instanceTemplates.get compute.instanceTemplates.getIamPolicy compute.instanceTemplates.list compute.instances.get compute.instances.getEffectiveFirewalls compute.instances.getguestAttributes compute.instances.getIamPolicy compute.instances.getScreenshot compute.instances.getSerialPortOutput compute.instances.getShieldedInstanceIdentity compute.instances.getShieldedVmIdentity compute.instances.list compute.instances.listEffectiveTag compute.instances.listReferrer compute.instances.listTagBindings compute.interconnectAttachments.get compute.interconnectAttachments.elenco compute.interconnectLocations.* compute.interconnectLocations. compute.interconnectLocations.elenco compute.interconnects.get compute.interconnects.list compute.licenseCodes.get compute.Codes.getIamPolicy compute.liceCodes.list compute.lice.get policy.lice.getIamPolicy compute.lice.list compute.machineImages.get compute.machineImages.getIamPolicy compute.machineImages.list compute.machineTypes.* compute.machineTypes.get compute.machineTypes.list compute.maintenancePolicies.get compute.maintenancePolicies.getIamPolicy compute.maintenancePolicies.list compute.networkEdgeSecurityServices.get compute.networkEdgeSecurityServices.elenco compute.networkEndpointGroups.get compute.networkEndpointGroups.getIamPolicy compute.networkEndpointGroups.list compute.networks.get compute.network.getEffectiveFirewalls compute.network.getRegionEffectiveFirewalls compute.networks.list compute.network.listPeeringRoutes compute.nodeGroups.get compute.nodeGroups.getIamPolicy compute.nodeGroups.list compute.nodeTemplates.get compute.nodeTemplates.getIamPolicy compute.nodeTemplates.list compute.nodeTypes.* compute.nodeTypes.get compute.nodeTypes.list compute.organizations.listAssociations compute.packetMirrorings.get compute.packetMirrorings.list compute.projects.get compute.publicPubdPrefixes.get compute.publicPubdPrefixes.list compute.publicDelegatedPrefixes.get compute.publicDelegatedPrefixes.list compute.regionBackendServices.scarica Compute.regionBackendServices.getIamPolicy compute.listBackendServices.elenco compute.regionFirewallPolicies.get compute.regionFirewallPolicies.getIamPolicy compute.listFirewallPolicies.list compute.regionHealthCheckServices.get compute.listHealthCheckServices.elenco compute.regionHealthChecks.get compute.listHealthChecks.elenco compute.regionNetworkEndpointGroups.get compute.regionNetworkEndpointGroups.elenco compute.regionNotificationEndpoints.get compute.regionNotificationEndpoints.elenco compute.regionOperations.get compute.regionOperations.getIamPolicy compute.regionOperations.list compute.regionSecurityPolicies.get compute.listSecurityPolicies.list compute.regionSslCertificates.get compute.listSslCertificates.elenco compute.regionTargetHttpProxies.get compute.regionTargetHttpProxies.list compute.regionTargetHttpsProxies.get compute.regionTargetHttpsProxies.list (Elenco) compute.regionUrlMaps.get compute.regionUrlMaps.list compute.regionUrlMaps.validate compute.regions.* compute.regions.get compute.regions.list computes.reservations.get compute.reservations.list compute.resourcePolicies.get compute.resourcePolicies.list compute.routers.get compute.routers.list compute.routes.get compute.routes.list compute.securityPolicies.get compute.securityPolicies.getIamPolicy compute.securityPolicies.list compute.serviceAttachments.get compute.serviceAttachments.list compute.snapshots.get compute.snapshots.getIamPolicy compute.snapshots.list compute.snapshot.listEffectiveTag compute.snapshot.listTagBindings compute.sslCertificates.get compute.sslCertificates.list compute.sslPolicies.get compute.sslPolicies.list compute.sslPolicies.listAvailableFunzionalità compute.subnetworks.get compute.subnetwork.getIamPolicy compute.subnetworks.list compute.targetGrpcProxies.get compute.targetGrpcProxies.list compute.targetHttpProxies.get compute.targetHttpProxies.list compute.targetHttpsProxies.get compute.listtargetHttpsProxies. compute.targetInstances.get compute.targetInstances.list compute.targetPools.get compute.targetPools.list compute.targetSslProxies.get compute.targetSslProxies.list compute.targetTcpProxies.get compute.targetTcpProxies.list compute.targetVpnGateways.get compute.targetVpnGateways.list compute.urlMaps.get compute.urlMaps.list compute.urlMaps.convalida compute.vpnGateways.get compute.vpnGateways.list compute.vpnTunnels.get compute.vpnTunnels.list compute.zoneOperations.get compute.zoneOperations.getIamPolicy compute.zoneOperations.list compute.zones.* compute.zones.get compute.zones.list Notebooks.environments.get blocchi note.ambienti.getIamPolicy Notebooks.environments.list notebooks.executions.get Notebooks.executions.getIamPolicy notebooks.executions.list Notebooks.instances.checkUpgradability Notebooks.instances.get notebooks.instances.getHealth Notebooks.instances.getIamPolicy notebooks.instances.list notebooks.locations.* notebooks.locations.get notebooks.locations.list Notebooks.operazioni.get Notebooks.operazioni.list notebooks.runtimes.get Notebooks.runtimes.getIamPolicy notebooks.runtimes.list Notebooks.schedules.get Notebooks.schedules.getIamPolicy Notebooks.schedules.list resourcemanager.projects.get resourcemanager.projects.list serviceusage.quotas.get serviceusage.services.get serviceusage.services.list
Esecutore blocchi note (roles/notebooks.runner) Accesso limitato per eseguire i blocchi note pianificati.	compute.acceleratorTypes.* compute.acceleratorTypes.get compute.acceleratorTypes.list compute.addresses.get compute.addresses.list compute.autoscalers.get compute.autoscalers.list compute.backendBuckets.get compute.backendBuckets.list compute.backendServices.get compute.backendServices.getIamPolicy compute.backendServices.list compute.commitments.get compute.commitments.list compute.diskTypes.* compute.diskTypes.get compute.diskTypes.list compute.disks.get compute.disks.getIamPolicy compute.disks.list compute.dischi.listEffectiveTag compute.disks.listTagBindings compute.externalVpnGateways.get compute.listVpnGateways.esterni compute.firewallPolicies.get compute.Policywallfire.PolicyIamPolicy compute.firewallPolicies.list compute.firewalls.get compute.firewalls.list compute.forwardingrules.get compute.forwardingrules.list compute.globalAddresses.get compute.globalAddresses.list compute.globalInoltroRegole.get compute.globalInoltroRegole.elenco compute.globalForwardingRule.pscGet compute.globalNetworkEndpointGroups.get compute.globalNetworkEndpointGroups.elenco compute.globalOperations.get compute.globalOperations.getIamPolicy compute.globalOperations.list compute.globalPublicDelegatedPrefixes.get compute.globalPublicDelegatedPrefixes.list compute.healthChecks.get compute.healthChecks.list compute.httpHealthChecks.get compute.httpHealthChecks.list compute.httpsHealthChecks.get compute.httpsHealthChecks.list compute.images.get compute.images.getFromFamily compute.images.getIamPolicy compute.images.list compute.images.listEffectiveTag compute.images.listTagBindings compute.instanceGroupManagers.get compute.listGroupManagers.elenco compute.instanceGroups.get compute.instanceGroups.list compute.instanceTemplates.get compute.instanceTemplates.getIamPolicy compute.instanceTemplates.list compute.instances.get compute.instances.getEffectiveFirewalls compute.instances.getguestAttributes compute.instances.getIamPolicy compute.instances.getScreenshot compute.instances.getSerialPortOutput compute.instances.getShieldedInstanceIdentity compute.instances.getShieldedVmIdentity compute.instances.list compute.instances.listEffectiveTag compute.instances.listReferrer compute.instances.listTagBindings compute.interconnectAttachments.get compute.interconnectAttachments.elenco compute.interconnectLocations.* compute.interconnectLocations. compute.interconnectLocations.elenco compute.interconnects.get compute.interconnects.list compute.licenseCodes.get compute.Codes.getIamPolicy compute.liceCodes.list compute.lice.get policy.lice.getIamPolicy compute.lice.list compute.machineImages.get compute.machineImages.getIamPolicy compute.machineImages.list compute.machineTypes.* compute.machineTypes.get compute.machineTypes.list compute.maintenancePolicies.get compute.maintenancePolicies.getIamPolicy compute.maintenancePolicies.list compute.networkEdgeSecurityServices.get compute.networkEdgeSecurityServices.elenco compute.networkEndpointGroups.get compute.networkEndpointGroups.getIamPolicy compute.networkEndpointGroups.list compute.networks.get compute.network.getEffectiveFirewalls compute.network.getRegionEffectiveFirewalls compute.networks.list compute.network.listPeeringRoutes compute.nodeGroups.get compute.nodeGroups.getIamPolicy compute.nodeGroups.list compute.nodeTemplates.get compute.nodeTemplates.getIamPolicy compute.nodeTemplates.list compute.nodeTypes.* compute.nodeTypes.get compute.nodeTypes.list compute.organizations.listAssociations compute.packetMirrorings.get compute.packetMirrorings.list compute.projects.get compute.publicPubdPrefixes.get compute.publicPubdPrefixes.list compute.publicDelegatedPrefixes.get compute.publicDelegatedPrefixes.list compute.regionBackendServices.scarica Compute.regionBackendServices.getIamPolicy compute.listBackendServices.elenco compute.regionFirewallPolicies.get compute.regionFirewallPolicies.getIamPolicy compute.listFirewallPolicies.list compute.regionHealthCheckServices.get compute.listHealthCheckServices.elenco compute.regionHealthChecks.get compute.listHealthChecks.elenco compute.regionNetworkEndpointGroups.get compute.regionNetworkEndpointGroups.elenco compute.regionNotificationEndpoints.get compute.regionNotificationEndpoints.elenco compute.regionOperations.get compute.regionOperations.getIamPolicy compute.regionOperations.list compute.regionSecurityPolicies.get compute.listSecurityPolicies.list compute.regionSslCertificates.get compute.listSslCertificates.elenco compute.regionTargetHttpProxies.get compute.regionTargetHttpProxies.list compute.regionTargetHttpsProxies.get compute.regionTargetHttpsProxies.list (Elenco) compute.regionUrlMaps.get compute.regionUrlMaps.list compute.regionUrlMaps.validate compute.regions.* compute.regions.get compute.regions.list computes.reservations.get compute.reservations.list compute.resourcePolicies.get compute.resourcePolicies.list compute.routers.get compute.routers.list compute.routes.get compute.routes.list compute.securityPolicies.get compute.securityPolicies.getIamPolicy compute.securityPolicies.list compute.serviceAttachments.get compute.serviceAttachments.list compute.snapshots.get compute.snapshots.getIamPolicy compute.snapshots.list compute.snapshot.listEffectiveTag compute.snapshot.listTagBindings compute.sslCertificates.get compute.sslCertificates.list compute.sslPolicies.get compute.sslPolicies.list compute.sslPolicies.listAvailableFunzionalità compute.subnetworks.get compute.subnetwork.getIamPolicy compute.subnetworks.list compute.targetGrpcProxies.get compute.targetGrpcProxies.list compute.targetHttpProxies.get compute.targetHttpProxies.list compute.targetHttpsProxies.get compute.listtargetHttpsProxies. compute.targetInstances.get compute.targetInstances.list compute.targetPools.get compute.targetPools.list compute.targetSslProxies.get compute.targetSslProxies.list compute.targetTcpProxies.get compute.targetTcpProxies.list compute.targetVpnGateways.get compute.targetVpnGateways.list compute.urlMaps.get compute.urlMaps.list compute.urlMaps.convalida compute.vpnGateways.get compute.vpnGateways.list compute.vpnTunnels.get compute.vpnTunnels.list compute.zoneOperations.get compute.zoneOperations.getIamPolicy compute.zoneOperations.list compute.zones.* compute.zones.get compute.zones.list Notebooks.environments.get blocchi note.ambienti.getIamPolicy Notebooks.environments.list Notebooks.executions.create notebooks.executions.get Notebooks.executions.getIamPolicy notebooks.executions.list Notebooks.instances.checkUpgradability Notebooks.instances.create Notebooks.instances.get notebooks.instances.getHealth Notebooks.instances.getIamPolicy notebooks.instances.list notebooks.locations.* notebooks.locations.get notebooks.locations.list Notebooks.operazioni.get Notebooks.operazioni.list Notebooks.runtimes.create notebooks.runtimes.get Notebooks.runtimes.getIamPolicy notebooks.runtimes.list Notebooks.schedules.create Notebooks.schedules.get Notebooks.schedules.getIamPolicy Notebooks.schedules.list resourcemanager.projects.get resourcemanager.projects.list serviceusage.quotas.get serviceusage.services.get serviceusage.services.list
Visualizzatore Notebooks (roles/notebooks.viewer) Accesso in sola lettura a tutti i blocchi note, tutte le risorse. Risorse di livello più basso in cui puoi concedere questo ruolo: Istanza	compute.acceleratorTypes.* compute.acceleratorTypes.get compute.acceleratorTypes.list compute.addresses.get compute.addresses.list compute.autoscalers.get compute.autoscalers.list compute.backendBuckets.get compute.backendBuckets.list compute.backendServices.get compute.backendServices.getIamPolicy compute.backendServices.list compute.commitments.get compute.commitments.list compute.diskTypes.* compute.diskTypes.get compute.diskTypes.list compute.disks.get compute.disks.getIamPolicy compute.disks.list compute.dischi.listEffectiveTag compute.disks.listTagBindings compute.externalVpnGateways.get compute.listVpnGateways.esterni compute.firewallPolicies.get compute.Policywallfire.PolicyIamPolicy compute.firewallPolicies.list compute.firewalls.get compute.firewalls.list compute.forwardingrules.get compute.forwardingrules.list compute.globalAddresses.get compute.globalAddresses.list compute.globalInoltroRegole.get compute.globalInoltroRegole.elenco compute.globalForwardingRule.pscGet compute.globalNetworkEndpointGroups.get compute.globalNetworkEndpointGroups.elenco compute.globalOperations.get compute.globalOperations.getIamPolicy compute.globalOperations.list compute.globalPublicDelegatedPrefixes.get compute.globalPublicDelegatedPrefixes.list compute.healthChecks.get compute.healthChecks.list compute.httpHealthChecks.get compute.httpHealthChecks.list compute.httpsHealthChecks.get compute.httpsHealthChecks.list compute.images.get compute.images.getFromFamily compute.images.getIamPolicy compute.images.list compute.images.listEffectiveTag compute.images.listTagBindings compute.instanceGroupManagers.get compute.listGroupManagers.elenco compute.instanceGroups.get compute.instanceGroups.list compute.instanceTemplates.get compute.instanceTemplates.getIamPolicy compute.instanceTemplates.list compute.instances.get compute.instances.getEffectiveFirewalls compute.instances.getguestAttributes compute.instances.getIamPolicy compute.instances.getScreenshot compute.instances.getSerialPortOutput compute.instances.getShieldedInstanceIdentity compute.instances.getShieldedVmIdentity compute.instances.list compute.instances.listEffectiveTag compute.instances.listReferrer compute.instances.listTagBindings compute.interconnectAttachments.get compute.interconnectAttachments.elenco compute.interconnectLocations.* compute.interconnectLocations. compute.interconnectLocations.elenco compute.interconnects.get compute.interconnects.list compute.licenseCodes.get compute.Codes.getIamPolicy compute.liceCodes.list compute.lice.get policy.lice.getIamPolicy compute.lice.list compute.machineImages.get compute.machineImages.getIamPolicy compute.machineImages.list compute.machineTypes.* compute.machineTypes.get compute.machineTypes.list compute.maintenancePolicies.get compute.maintenancePolicies.getIamPolicy compute.maintenancePolicies.list compute.networkEdgeSecurityServices.get compute.networkEdgeSecurityServices.elenco compute.networkEndpointGroups.get compute.networkEndpointGroups.getIamPolicy compute.networkEndpointGroups.list compute.networks.get compute.network.getEffectiveFirewalls compute.network.getRegionEffectiveFirewalls compute.networks.list compute.network.listPeeringRoutes compute.nodeGroups.get compute.nodeGroups.getIamPolicy compute.nodeGroups.list compute.nodeTemplates.get compute.nodeTemplates.getIamPolicy compute.nodeTemplates.list compute.nodeTypes.* compute.nodeTypes.get compute.nodeTypes.list compute.organizations.listAssociations compute.packetMirrorings.get compute.packetMirrorings.list compute.projects.get compute.publicPubdPrefixes.get compute.publicPubdPrefixes.list compute.publicDelegatedPrefixes.get compute.publicDelegatedPrefixes.list compute.regionBackendServices.scarica Compute.regionBackendServices.getIamPolicy compute.listBackendServices.elenco compute.regionFirewallPolicies.get compute.regionFirewallPolicies.getIamPolicy compute.listFirewallPolicies.list compute.regionHealthCheckServices.get compute.listHealthCheckServices.elenco compute.regionHealthChecks.get compute.listHealthChecks.elenco compute.regionNetworkEndpointGroups.get compute.regionNetworkEndpointGroups.elenco compute.regionNotificationEndpoints.get compute.regionNotificationEndpoints.elenco compute.regionOperations.get compute.regionOperations.getIamPolicy compute.regionOperations.list compute.regionSecurityPolicies.get compute.listSecurityPolicies.list compute.regionSslCertificates.get compute.listSslCertificates.elenco compute.regionTargetHttpProxies.get compute.regionTargetHttpProxies.list compute.regionTargetHttpsProxies.get compute.regionTargetHttpsProxies.list (Elenco) compute.regionUrlMaps.get compute.regionUrlMaps.list compute.regionUrlMaps.validate compute.regions.* compute.regions.get compute.regions.list computes.reservations.get compute.reservations.list compute.resourcePolicies.get compute.resourcePolicies.list compute.routers.get compute.routers.list compute.routes.get compute.routes.list compute.securityPolicies.get compute.securityPolicies.getIamPolicy compute.securityPolicies.list compute.serviceAttachments.get compute.serviceAttachments.list compute.snapshots.get compute.snapshots.getIamPolicy compute.snapshots.list compute.snapshot.listEffectiveTag compute.snapshot.listTagBindings compute.sslCertificates.get compute.sslCertificates.list compute.sslPolicies.get compute.sslPolicies.list compute.sslPolicies.listAvailableFunzionalità compute.subnetworks.get compute.subnetwork.getIamPolicy compute.subnetworks.list compute.targetGrpcProxies.get compute.targetGrpcProxies.list compute.targetHttpProxies.get compute.targetHttpProxies.list compute.targetHttpsProxies.get compute.listtargetHttpsProxies. compute.targetInstances.get compute.targetInstances.list compute.targetPools.get compute.targetPools.list compute.targetSslProxies.get compute.targetSslProxies.list compute.targetTcpProxies.get compute.targetTcpProxies.list compute.targetVpnGateways.get compute.targetVpnGateways.list compute.urlMaps.get compute.urlMaps.list compute.urlMaps.convalida compute.vpnGateways.get compute.vpnGateways.list compute.vpnTunnels.get compute.vpnTunnels.list compute.zoneOperations.get compute.zoneOperations.getIamPolicy compute.zoneOperations.list compute.zones.* compute.zones.get compute.zones.list Notebooks.environments.get blocchi note.ambienti.getIamPolicy Notebooks.environments.list notebooks.executions.get Notebooks.executions.getIamPolicy notebooks.executions.list Notebooks.instances.checkUpgradability Notebooks.instances.get notebooks.instances.getHealth Notebooks.instances.getIamPolicy notebooks.instances.list notebooks.locations.* notebooks.locations.get notebooks.locations.list Notebooks.operazioni.get Notebooks.operazioni.list notebooks.runtimes.get Notebooks.runtimes.getIamPolicy notebooks.runtimes.list Notebooks.schedules.get Notebooks.schedules.getIamPolicy Notebooks.schedules.list resourcemanager.projects.get resourcemanager.projects.list serviceusage.quotas.get serviceusage.services.get serviceusage.services.list

Ruoli di AI Platform

Ruolo	Autorizzazioni
Amministratore AI Platform (roles/ml.admin) Fornisce l'accesso completo alle risorse di AI Platform e ai relativi job, operazioni, modelli e versioni. Risorse di livello più basso in cui puoi concedere questo ruolo: Progetto Contiene tre autorizzazioni di proprietario	ml.* ml.jobs.cancel ml.jobs.create ml.jobs.get ml.jobs.getIamPolicy ml.jobs.list ml.jobs.setIamPolicy ml.jobs.update ml.locations.get ml.locations.list ml.models.create ml.models.delete ml.models.get ml.models.getIamPolicy ml.models.list ml.models.recommend ml.models.setIamPolicy ml.models.update ml.operations.cancel ml.operazioni.get ml.suites.list ml.projects.getConfig ml.studies.create ml.studies.delete ml.studies.get ml.studies.getIamPolicy ml.studies.list ml.studies.setIamPolicy ml.prove.create ml.trials.delete ml.prove.get ml.prove.list ml.trials.update ml.versioni.create ml.versions.delete ml.versioni.get ml.versions.list ml.versioni.previsione ml.versions.update resourcemanager.projects.get
Sviluppatore AI Platform (roles/ml.developer) Fornisce la possibilità di utilizzare le risorse AI Platform per creare modelli, versioni, job per l'addestramento e la previsione e inviare richieste di previsione online. Risorse di livello più basso in cui puoi concedere questo ruolo: Progetto Contiene 1 autorizzazione di proprietario	ml.jobs.create ml.jobs.get ml.jobs.getIamPolicy ml.jobs.list ml.locations.* ml.locations.get ml.locations.list ml.models.create ml.models.get ml.models.getIamPolicy ml.models.list ml.models.recommend ml.operazioni.get ml.suites.list ml.projects.getConfig ml.studies.* ml.studies.create ml.studies.delete ml.studies.get ml.studies.getIamPolicy ml.studies.list ml.studies.setIamPolicy ml.trial.* ml.prove.create ml.trials.delete ml.prove.get ml.prove.list ml.trials.update ml.versioni.get ml.versions.list ml.versioni.previsione resourcemanager.projects.get
Proprietario job AI Platform (roles/ml.jobOwner) Fornisce l'accesso completo a tutte le autorizzazioni per una particolare risorsa del job. Questo ruolo viene concesso automaticamente all'utente che crea il job. Risorse di livello più basso in cui puoi concedere questo ruolo: Job Contiene 1 autorizzazione di proprietario	ml.jobs.* ml.jobs.cancel ml.jobs.create ml.jobs.get ml.jobs.getIamPolicy ml.jobs.list ml.jobs.setIamPolicy ml.jobs.update
Proprietario modello AI Platform (roles/ml.modelOwner) Fornisce l'accesso completo al modello e alle relative versioni. Questo ruolo viene concesso automaticamente all'utente che crea il modello. Risorse di livello più basso in cui puoi concedere questo ruolo: Modello Contiene 1 autorizzazione di proprietario	ml.models.* ml.models.create ml.models.delete ml.models.get ml.models.getIamPolicy ml.models.list ml.models.recommend ml.models.setIamPolicy ml.models.update ml.versions.* ml.versioni.create ml.versions.delete ml.versioni.get ml.versions.list ml.versioni.previsione ml.versions.update
Utente modello AI Platform (roles/ml.modelUser) Fornisce le autorizzazioni per leggere il modello e le relative versioni e utilizzarle per la previsione. Risorse di livello più basso in cui puoi concedere questo ruolo: Modello	ml.models.get ml.models.recommend ml.versioni.get ml.versions.list ml.versioni.previsione
Proprietario operazione AI Platform (roles/ml.operationOwner) Fornisce l'accesso completo a tutte le autorizzazioni per una particolare risorsa dell'operazione. Risorse di livello più basso in cui puoi concedere questo ruolo: Operazione	ml.operations.* ml.operations.cancel ml.operazioni.get ml.suites.list
Visualizzatore AI Platform (roles/ml.viewer) Fornisce l'accesso di sola lettura alle risorse di AI Platform. Risorse di livello più basso in cui puoi concedere questo ruolo: Progetto	ml.jobs.get ml.jobs.list ml.locations.* ml.locations.get ml.locations.list ml.models.get ml.models.list ml.operazioni.get ml.suites.list ml.projects.getConfig ml.studies.get ml.studies.getIamPolicy ml.studies.list ml.prove.get ml.prove.list ml.versioni.get ml.versions.list resourcemanager.projects.get

Ruoli di Analytics Hub

Ruolo	Autorizzazioni
Amministratore Analytics Hub (roles/analyticshub.admin) Amministrazione di Data Exchange e schede Contiene 2 autorizzazioni proprietario	analyticshub.dataExchanges.* analyticshub.dataExchanges.crea analyticshub.dataExchanges.elimina analyticshub.dataExchanges.get analyticshub.dataExchanges.getIamPolicy analyticshub.dataExchanges.elenco analyticshub.dataExchanges.setIamPolicy analyticshub.dataExchanges.aggiornamento analyticshub.listings.create analyticshub.listings.delete analyticshub.listings.get analyticshub.listings.getIamPolicy analyticshub.listings.list analyticshub.schede.setIamPolicy analyticshub.listings.update resourcemanager.projects.get resourcemanager.projects.list
Amministratore elenco Analytics Hub (roles/analyticshub.listingAdmin) Concede il pieno controllo sugli elenchi, inclusi l'aggiornamento, l'eliminazione e l'impostazione degli ACL Contiene 1 autorizzazione di proprietario	analyticshub.dataExchanges.get analyticshub.dataExchanges.getIamPolicy analyticshub.dataExchanges.elenco analyticshub.listings.delete analyticshub.listings.get analyticshub.listings.getIamPolicy analyticshub.listings.list analyticshub.schede.setIamPolicy analyticshub.listings.update resourcemanager.projects.get resourcemanager.projects.list
Publisher Analytics Hub (roles/analyticshub.publisher) Può pubblicare su Data Exchange e creare schede	analyticshub.dataExchanges.get analyticshub.dataExchanges.getIamPolicy analyticshub.dataExchanges.elenco analyticshub.listings.create analyticshub.listings.get analyticshub.listings.getIamPolicy analyticshub.listings.list resourcemanager.projects.get resourcemanager.projects.list
Abbonato Analytics Hub (roles/analyticshub.subscriber) Può sfogliare Data Exchange e iscriversi alle schede Contiene 1 autorizzazione di proprietario	analyticshub.dataExchanges.get analyticshub.dataExchanges.getIamPolicy analyticshub.dataExchanges.elenco analyticshub.listings.get analyticshub.listings.getIamPolicy analyticshub.listings.list analyticshub.schede.iscriversi resourcemanager.projects.get resourcemanager.projects.list
Visualizzatore Analytics Hub (roles/analyticshub.viewer) Può sfogliare Data Exchange e le schede	analyticshub.dataExchanges.get analyticshub.dataExchanges.getIamPolicy analyticshub.dataExchanges.elenco analyticshub.listings.get analyticshub.listings.getIamPolicy analyticshub.listings.list resourcemanager.projects.get resourcemanager.projects.list

Ruoli di Gestione Android

Role	Permissions
Android Management User (roles/androidmanagement.user) Full access to manage devices.	androidmanagement.enterprises.manage serviceusage.quotas.get serviceusage.services.get serviceusage.services.list

Ruoli multi-cloud di Anthos

Ruolo	Autorizzazioni
Amministratore multi-cloud Anthos (roles/gkemulticloud.admin) Accesso come Amministratore alle risorse multi-cloud di Anthos. Contiene 2 autorizzazioni proprietario	gkemulti-cloud.* gkemulticloud.awsClusters.crea gkemulticloud.awsClusters.elimina gkemulticloud.awsClusters.generateAccessToken gkemulticloud.awsClusters.get gkemulticloud.awsClusters.getAdminKubeconfig gkemulticloud.awsClusters.list gkemulticloud.awsClusters.Aggiorna gkemulticloud.awsNodePools.create gkemulticloud.awsNodePools.elimina gkemulticloud.awsNodePools.get gkemulticloud.awsNodePools.list gkemulticloud.awsNodePools.aggiorna gkemulticloud.awsServerConfigs.get gkemulticloud.azureClients.crea gkemulticloud.azureClients.elimina gkemulticloud.azureClients.get gkemulticloud.azureClients.elenco gkemulticloud.azureClusters.crea gkemulticloud.azureClusters.elimina gkemulticloud.azureClusters.generateAccessToken gkemulticloud.azureClusters.get gkemulticloud.azureClusters.getAdminKubeconfig gkemulticloud.azureClusters.elenco gkemulticloud.azureClusters.aggiorna gkemulticloud.azureNodePools.create gkemulticloud.azureNodePools.elimina gkemulticloud.azureNodePools.get gkemulticloud.azureNodePools.list gkemulticloud.azureNodePools.aggiorna gkemulticloud.azureServerConfigs.get gkemulticloud..annulla gkemulti-cloud.operazioni.elimina gkemulticloud.operations.get gkemulticloud.operations.list gkemulticloud.operations.wait resourcemanager.projects.get resourcemanager.projects.list
Writer telemetria multi-cloud di Anthos (roles/gkemulticloud.telemetryWriter) Concede l'accesso in scrittura ai dati di telemetria del cluster, come log, metriche e metadati delle risorse.	Logging.logEntries.create monitoraggio.metricDescriptors.create monitoraggio.metricDescriptors.get monitoraggio.metricaDescriptor.elenco monitoring.monitoredResourceDescriptors.* monitoraggio.monitoredResourceDescriptors.get monitoraggio.monitoredResourceDescriptors.elenco monitoring.timeSeries.create opsconfigmonitoring.resourceMetadata.scrittura
Visualizzatore multi-cloud Anthos (roles/gkemulticloud.viewer) Accesso come Visualizzatore alle risorse multi-cloud di Anthos.	gkemulticloud.awsClusters.generateAccessToken gkemulticloud.awsClusters.get gkemulticloud.awsClusters.list gkemulticloud.awsNodePools.get gkemulticloud.awsNodePools.list gkemulticloud.awsServerConfigs.get gkemulticloud.azureClients.get gkemulticloud.azureClients.elenco gkemulticloud.azureClusters.generateAccessToken gkemulticloud.azureClusters.get gkemulticloud.azureClusters.elenco gkemulticloud.azureNodePools.get gkemulticloud.azureNodePools.list gkemulticloud.azureServerConfigs.get gkemulticloud.operations.get gkemulticloud.operations.list gkemulticloud.operations.wait resourcemanager.projects.get resourcemanager.projects.list

Ruoli gateway API

Ruolo	Autorizzazioni
Amministratore ApiGateway (roles/apigateway.admin) Accesso completo ad ApiGateway e risorse correlate. Contiene tre autorizzazioni di proprietario	apigateway.* apigateway.apiconfigs.create apigateway.apiconfigs.delete apigateway.apiconfigs.get apigateway.apiconfigs.getIamPolicy apigateway.apiconfigs.list apigateway.apiconfigs.setIamPolicy apigateway.apiconfigs.update apigateway.apis.create apigateway.apis.delete apigateway.apis.get apigateway.apis.getIamPolicy apigateway.apis.list apigateway.apis.setIamPolicy apigateway.apis.update apigateway.gateways.create apigateway.gateways.delete apigateway.gateways.get apigateway.gateway.getIamPolicy apigateway.gateways.list apigateway.gateway.setIamPolicy apigateway.gateways.update apigateway.locations.get apigateway.locations.list apigateway.operations.cancel apigateway.operations.delete apigateway.operations.get apigateway.operations.list monitoraggio.metricaDescriptor.elenco monitoraggio.monitoredResourceDescriptors.get monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.list servicemanagement.services.get serviceusage.services.list
Visualizzatore ApiGateway (roles/apigateway.viewer) Accesso in sola lettura ad ApiGateway e alle risorse correlate.	apigateway.apiconfigs.get apigateway.apiconfigs.getIamPolicy apigateway.apiconfigs.list apigateway.apis.get apigateway.apis.getIamPolicy apigateway.apis.list apigateway.gateways.get apigateway.gateway.getIamPolicy apigateway.gateways.list apigateway.locations.* apigateway.locations.get apigateway.locations.list apigateway.operations.get apigateway.operations.list monitoraggio.metricaDescriptor.elenco monitoraggio.monitoredResourceDescriptors.get monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.list servicemanagement.services.get serviceusage.services.list

Ruoli Apigee

Ruolo	Autorizzazioni
Amministratore organizzazione Apigee (roles/apigee.admin) Accesso completo a tutte le funzionalità delle risorse Apigee Contiene 1 autorizzazione di proprietario	Apigee.* Apigee.apiproductattributes.createOrUpdateAll Apigee.apiproductattributes.delete Apigee.apiproductattributes.get Apigee.apiproductattributes.list Aggiornamento di Apigee. apiproduct. Apigee.apiproducts.create Apigee.apiproducts.delete Apigee.apiproducts.get Apigee.apiproducts.list Apigee.apiproducts.update Apigee.appkeys.create Apigee.appkeys.delete Apigee.appkeys.get Apigee.appkeys.manage Apigee.apps.get Apigee.apps.list Deployment.archivio.Creare Deployments.archiviare.eliminare Deployment.dell'archivio.Download Apigee.archiviodeployments.get Apigee.archiviodeployments.list Apigee.archiviodeployment.aggiornamento Deployment.di deployment degli archivi. apigee.caches.delete apigee.caches.list Apigee.canaryvalutazione.creare Apigee.canaryvalutazioni.get Apigee.datacollectors.create Apigee.datacollectors.delete Apigee.datacollectors.get Apigee.datacollectors.list Apigee.datacollectors.update Apigee.datalocation.get Apigee.datastores.create Apigee.datastores.delete Apigee.datastores.get Apigee.datastores.list Apigee.datastores.update Apigee.deployments.create Deploy.deployments.delete Deploy.deployments.get Deploy.deployments.list Apigee.deployments.update Apigee.attributesappapp.createOrUpdateAll Apigee.developerappattributes.delete (elimina) Apigee.attributesappapp.get Apigee.developerappattributes.list (Elenco) Apigee.developerappattributes.update (Aggiorna) Apigee.developerapps.create Apigee.developerapps.delete Apigee.developerapps.get Apigee.developerapps.list Apigee.developerapps.manage Apigee.developerattributes.createOrUpdateAll apigee.developerattributes.delete Apigee.developerattributes.get Apigee.listattributes.list (Elenco degli attributi) Aggiornamenti Apigee.developer. Regolazioni.per sviluppatori.regolazione Apigee.developerbalances.get Aggiornamento di Apigee.developer. apigee.developermonetizationconfigs.get Apigee.aggiornamento della monetizzazione degli sviluppatori.Aggiornamento Apigee.developers.create Apigee.developers.delete Apigee.developers.get Apigee.developers.list Apigee.developers.update Abbonati.gli sviluppatori.crea. Abbonati.gli sviluppatori.get Apigee.developersubscriptions.list Aggiornamento di Apigee.developer. Apigee.attachmentattachments.crea Endpoint.endpoint allegati.Elimina Apigee.endpointattachments.get Elenco degli allegati.degli endpoint. span.envgroupattachments.crea Anthos.envgroupattachments.elimina Apigee.envgroupattachments.get span.envgroupattachments.elenco Apigee.envgroups.create Apigee.envgroups.delete Apigee.envgroups.get Apigee.envgroups.list Apigee.envgroups.update Apigee.environments.create Apigee.environments.delete Apigee.ambient.get Ambienti.ambienti.getDataLocation Ambienti.ambienti.getIamPolicy Apigee.environments.getStats Apigee.environments.list Ambienti.ambienti.manageRuntime Ambienti..setIamPolicy Apigee.environments.update Apigee.exports.create Apigee.exports.get Apigee.exports.list hook.flowhook.attachSharedFlow hook.flowhook.connectSharedFlow Apigee.flowhooks.getSharedFlow Apigee.flowhooks.list Apigee.hostqueries.create Apigee.hostqueries.get Apigee.hostqueries.list Apigee.hostsecurityreport.crea Apigee.hostsecurityreports.get Elenco Apigee.hostsecurity.list Apigee.hoststats.get Apigee.ingressconfigs.get Apigee.Crea un'istanza di allegati.crea Apigee.instanceattachments.elimina Apigee.instanceattachments.get Elenco.allegati di istanza. Apigee.instances.create Apigee.instances.delete Apigee.instances.get Apigee.instances.list Apigee.instances.reportStatus Apigee.keystorealiases.create Apigee.keystorealiases.delete Apigee.keystorealiases.exportCertificate Apigee.keystorealiases.generateCSR Apigee.keystorealiases.get Apigee.keystorealiases.list Apigee.keystorealiases.update Apigee.keystores.create Apigee.keystores.delete Esportazione.keystores.export Apigee.keystores.get Apigee.keystores.list Apigee.keyvaluemapentries.create Apigee.keyvaluemapentries.delete Apigee.keyvaluemapentries.get Apigee.keyvaluemapentries.list Apigee.keyvaluemaps.create Apigee.keyvaluemaps.delete Apigee.keyvaluemaps.list Apigee.maskconfigs.get Apigee.maskconfigs.update Operazioni.volte.get Ops.suite.list Apigee.organizations.create Organizzazioni.delete.delete Apigee.organizations.get Apigee.organizations.list Apigee.organizations.update Apigee.portals.create Apigee.portals.delete Apigee.portals.get Apigee.portals.list Apigee.portals.update Apigee.projects.update Apigee.proxies.create Apigee.proxies.delete Apigee.proxies.get Apigee.proxies.list Apigee.proxies.update Apigee.proxyrevisions.delete Apigee.proxyrevisions.deploy Apigee.proxyrevisions.get Apigee.proxyrevisions.list Apigee.proxyrevisions.undeploy Apigee.proxyrevisions.update Apigee.queries.create Apigee.queries.get Apigee.queries.list Apigee.rateplans.create Apigee.rateplans.delete Apigee.rateplans.get Apigee.rateplans.list Apigee.rateplans.update Apigee.references.create Apigee.references.delete Apigee.references.get Apigee.references.list Apigee.references.update Apigee.reports.create Apigee.reports.delete Apigee.reports.get Apigee.reports.list Apigee.reports.update Apigee.resourcefiles.create Apigee.resourcefiles.delete Apigee.resourcefiles.get apigee.resourcefiles.list apigee.resourcefiles.update Apigee.runtimeconfigs.get Apigee.securityProfileEnvironments.computeScore Apigee.securityProfileEnvironments.create Apigee.securityProfileEnvironments.elimina Apigee.securityProfiles.get Apigee.securityProfiles.list Apigee.securityStats.queryTabularStats Apigee.securityStats.queryTimeSeriesStats Apigee.securityreports.create Apigee.securityreports.get Apigee.securityreports.list Apigee.sharedflowrevisions.elimina Apigee.sharedflowrevisions.esegui il deployment Apigee.sharedflowrevisions.get Elenco Apigee.sharedflowrevisions. Apigee.sharedflowrevisions.annullamento del deployment Aggiornamento Apigee.sharedflowrevisions. Apigee.sharedflows.create Apigee.sharedflows.delete Apigee.sharedflows.get Apigee.sharedflows.list Apigee.targetservers.create Apigee.targetservers.delete Apigee.targetservers.get Apigee.targetservers.list Apigee.targetservers.update Apigee.tracesessions.create Apigee.tracesessions.delete Apigee.tracesessions.get Apigee.tracesessions.list monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list
Agente di analisi Apigee (roles/apigee.analyticsAgent) Set selezionato di autorizzazioni per permettere ad Apigee Universal Data Collection Agent di gestire le analisi per un'organizzazione Apigee	Apigee.datalocation.get Ambienti.ambienti.getDataLocation Apigee.runtimeconfigs.get
Editor dati analitici Apigee (roles/apigee.analyticsEditor) Editor di dati analitici per un'organizzazione Apigee	Apigee.datacollectors.* Apigee.datacollectors.create Apigee.datacollectors.delete Apigee.datacollectors.get Apigee.datacollectors.list Apigee.datacollectors.update Apigee.datastores.* Apigee.datastores.create Apigee.datastores.delete Apigee.datastores.get Apigee.datastores.list Apigee.datastores.update Apigee.envgroupattachments.get span.envgroupattachments.elenco Apigee.envgroups.get Apigee.envgroups.list Apigee.ambient.get Apigee.environments.getStats Apigee.environments.list Apigee.export.* Apigee.exports.create Apigee.exports.get Apigee.exports.list Apigee.hostqueries.* Apigee.hostqueries.create Apigee.hostqueries.get Apigee.hostqueries.list Apigee.hoststats.get Apigee.organizations.get Apigee.organizations.list Query query Apigee.* Apigee.queries.create Apigee.queries.get Apigee.queries.list Apigee.report.* Apigee.reports.create Apigee.reports.delete Apigee.reports.get Apigee.reports.list Apigee.reports.update resourcemanager.projects.get resourcemanager.projects.list
Visualizzatore dati analitici Apigee (roles/apigee.analyticsViewer) Visualizzatore di dati analitici per un'organizzazione Apigee	Apigee.datacollectors.get Apigee.datacollectors.list Apigee.datastores.get Apigee.datastores.list Apigee.envgroupattachments.get span.envgroupattachments.elenco Apigee.envgroups.get Apigee.envgroups.list Apigee.ambient.get Apigee.environments.getStats Apigee.environments.list Apigee.exports.get Apigee.exports.list Apigee.hostqueries.get Apigee.hostqueries.list Apigee.hoststats.get Apigee.organizations.get Apigee.organizations.list Apigee.queries.get Apigee.queries.list Apigee.reports.get Apigee.reports.list resourcemanager.projects.get resourcemanager.projects.list
Amministratore API Apigee (roles/apigee.apiAdminV2) Accesso completo in lettura/scrittura a tutte le risorse dell'API Apigee	Apigee.apiproductattributes.* Apigee.apiproductattributes.createOrUpdateAll Apigee.apiproductattributes.delete Apigee.apiproductattributes.get Apigee.apiproductattributes.list Aggiornamento di Apigee. apiproduct. Apigee.apiproducts.* Apigee.apiproducts.create Apigee.apiproducts.delete Apigee.apiproducts.get Apigee.apiproducts.list Apigee.apiproducts.update Apigee.envgroupattachments.get span.envgroupattachments.elenco Apigee.envgroups.get Apigee.envgroups.list Apigee.ambient.get Apigee.environments.getStats Apigee.environments.list Apigee.keyvaluemapentries.* Apigee.keyvaluemapentries.create Apigee.keyvaluemapentries.delete Apigee.keyvaluemapentries.get Apigee.keyvaluemapentries.list Apigee.keyvaluemaps.* Apigee.keyvaluemaps.create Apigee.keyvaluemaps.delete Apigee.keyvaluemaps.list Apigee.organizations.get Apigee.organizations.list Apigee.proxies.* Apigee.proxies.create Apigee.proxies.delete Apigee.proxies.get Apigee.proxies.list Apigee.proxies.update Apigee.proxyrevisions.* Apigee.proxyrevisions.delete Apigee.proxyrevisions.deploy Apigee.proxyrevisions.get Apigee.proxyrevisions.list Apigee.proxyrevisions.undeploy Apigee.proxyrevisions.update Apigee.sharedflowrevisions.* Apigee.sharedflowrevisions.elimina Apigee.sharedflowrevisions.esegui il deployment Apigee.sharedflowrevisions.get Elenco Apigee.sharedflowrevisions. Apigee.sharedflowrevisions.annullamento del deployment Aggiornamento Apigee.sharedflowrevisions. Apigee.sharedflows.* Apigee.sharedflows.create Apigee.sharedflows.delete Apigee.sharedflows.get Apigee.sharedflows.list resourcemanager.projects.get resourcemanager.projects.list
Lettore API Apigee (roles/apigee.apiReaderV2) Lettore di risorse Apigee	Apigee.apiproductattributes.get Apigee.apiproductattributes.list Apigee.apiproducts.get Apigee.apiproducts.list Apigee.envgroupattachments.get span.envgroupattachments.elenco Apigee.envgroups.get Apigee.envgroups.list Apigee.ambient.get Apigee.environments.getStats Apigee.environments.list Apigee.keyvaluemapentries.get Apigee.keyvaluemapentries.list Apigee.keyvaluemaps.list Apigee.organizations.get Apigee.organizations.list Apigee.proxies.get Apigee.proxies.list Apigee.proxyrevisions.deploy Apigee.proxyrevisions.get Apigee.proxyrevisions.list Apigee.proxyrevisions.undeploy Apigee.sharedflowrevisions.esegui il deployment Apigee.sharedflowrevisions.get Elenco Apigee.sharedflowrevisions. Apigee.sharedflowrevisions.annullamento del deployment Apigee.sharedflows.get Apigee.sharedflows.list resourcemanager.projects.get resourcemanager.projects.list
Amministratore sviluppatore Apigee (roles/apigee.developerAdmin) Amministratore sviluppatore di risorse Apigee	Apigee.apiproductattributes.get Apigee.apiproductattributes.list Apigee.apiproducts.get Apigee.apiproducts.list Apigee.appkeys.* Apigee.appkeys.create Apigee.appkeys.delete Apigee.appkeys.get Apigee.appkeys.manage App Apigee.* Apigee.apps.get Apigee.apps.list Apigee.datacollectors.* Apigee.datacollectors.create Apigee.datacollectors.delete Apigee.datacollectors.get Apigee.datacollectors.list Apigee.datacollectors.update Anthos.developerappattributes.* Apigee.attributesappapp.createOrUpdateAll Apigee.developerappattributes.delete (elimina) Apigee.attributesappapp.get Apigee.developerappattributes.list (Elenco) Apigee.developerappattributes.update (Aggiorna) Apigee.developerapps.* Apigee.developerapps.create Apigee.developerapps.delete Apigee.developerapps.get Apigee.developerapps.list Apigee.developerapps.manage Apigee.developerattributes.* Apigee.developerattributes.createOrUpdateAll apigee.developerattributes.delete Apigee.developerattributes.get Apigee.listattributes.list (Elenco degli attributi) Aggiornamenti Apigee.developer. Ricevitori.sviluppatori.* Regolazioni.per sviluppatori.regolazione Apigee.developerbalances.get Aggiornamento di Apigee.developer. Anthos.developermonetizationconfigs.* apigee.developermonetizationconfigs.get Apigee.aggiornamento della monetizzazione degli sviluppatori.Aggiornamento Apigee.developers.* Apigee.developers.create Apigee.developers.delete Apigee.developers.get Apigee.developers.list Apigee.developers.update Abbonamenti Apigee.sviluppatori.* Abbonati.gli sviluppatori.crea. Abbonati.gli sviluppatori.get Apigee.developersubscriptions.list Aggiornamento di Apigee.developer. Apigee.ambient.get Apigee.environments.getStats Apigee.hoststats.get Apigee.organizations.get Apigee.organizations.list Apigee.rateplans.get Apigee.rateplans.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list
Amministratore ambiente Apigee (roles/apigee.environmentAdmin) Accesso completo in lettura/scrittura alle risorse dell'ambiente Apigee, inclusi i deployment. Contiene 1 autorizzazione di proprietario	Implementazioni di archivio.* Deployment.archivio.Creare Deployments.archiviare.eliminare Deployment.dell'archivio.Download Apigee.archiviodeployments.get Apigee.archiviodeployments.list Apigee.archiviodeployment.aggiornamento Deployment.di deployment degli archivi. Apigee.datacollectors.get Apigee.datacollectors.list deployment.* Apigee.deployments.create Deploy.deployments.delete Deploy.deployments.get Deploy.deployments.list Apigee.deployments.update Apigee.envgroupattachments.get span.envgroupattachments.elenco Apigee.envgroups.get Apigee.envgroups.list Apigee.ambient.get Ambienti.ambienti.getIamPolicy Apigee.environments.getStats Apigee.environments.list Ambienti..setIamPolicy Apigee.environments.update Apigee.flowhook.* hook.flowhook.attachSharedFlow hook.flowhook.connectSharedFlow Apigee.flowhooks.getSharedFlow Apigee.flowhooks.list Apigee.ingressconfigs.get Apigee.keystorealiases.* Apigee.keystorealiases.create Apigee.keystorealiases.delete Apigee.keystorealiases.exportCertificate Apigee.keystorealiases.generateCSR Apigee.keystorealiases.get Apigee.keystorealiases.list Apigee.keystorealiases.update Apigee.keystores.* Apigee.keystores.create Apigee.keystores.delete Esportazione.keystores.export Apigee.keystores.get Apigee.keystores.list Apigee.keyvaluemaps.* Apigee.keyvaluemaps.create Apigee.keyvaluemaps.delete Apigee.keyvaluemaps.list Apigee.maskconfigs.* Apigee.maskconfigs.get Apigee.maskconfigs.update Apigee.organizations.get Apigee.organizations.list Apigee.proxies.get Apigee.proxies.list Apigee.proxyrevisions.deploy Apigee.proxyrevisions.get Apigee.proxyrevisions.list Apigee.proxyrevisions.undeploy Apigee.references.* Apigee.references.create Apigee.references.delete Apigee.references.get Apigee.references.list Apigee.references.update File risorse.* Apigee.resourcefiles.create Apigee.resourcefiles.delete Apigee.resourcefiles.get apigee.resourcefiles.list apigee.resourcefiles.update Apigee.sharedflowrevisions.esegui il deployment Apigee.sharedflowrevisions.get Elenco Apigee.sharedflowrevisions. Apigee.sharedflowrevisions.annullamento del deployment Apigee.sharedflows.get Apigee.sharedflows.list Apigee.targetservers.* Apigee.targetservers.create Apigee.targetservers.delete Apigee.targetservers.get Apigee.targetservers.list Apigee.targetservers.update Apigee.tracesessions.* Apigee.tracesessions.create Apigee.tracesessions.delete Apigee.tracesessions.get Apigee.tracesessions.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list
Amministratore monetizzazione Apigee (roles/apigee.monetizationAdmin) Tutte le autorizzazioni correlate alla monetizzazione	Apigee.apiproducts.get Apigee.apiproducts.list Ricevitori.sviluppatori.* Regolazioni.per sviluppatori.regolazione Apigee.developerbalances.get Aggiornamento di Apigee.developer. Anthos.developermonetizationconfigs.* apigee.developermonetizationconfigs.get Apigee.aggiornamento della monetizzazione degli sviluppatori.Agg