Cloud SQL 권한

MySQL | PostgreSQL | SQL Server

Google Cloud 콘솔에서 일반적인 작업에 필요한 권한

역할 및 관련된 권한 목록은 Cloud SQL 역할을 참조하세요.

작업	필요한 추가 권한
인스턴스 목록 페이지 표시	`cloudsql.instances.list` `resourcemanager.projects.get`
인스턴스 만들기	`cloudsql.instances.create` `cloudsql.instances.get` `cloudsql.instances.list` `resourcemanager.projects.get`
Cloud Shell에서 인스턴스에 연결	`cloudsql.instances.get` `cloudsql.instances.list` `cloudsql.instances.update` `resourcemanager.projects.get`
사용자 만들기	`cloudsql.instances.get` `cloudsql.instances.list` `cloudsql.users.create` `cloudsql.users.list` `resourcemanager.projects.get`
인스턴스 정보 보기	`cloudsql.databases.list` `cloudsql.instances.get` `cloudsql.instances.list` `cloudsql.users.list` `monitoring.timeSeries.list` `resourcemanager.projects.get`
Dataplex 카탈로그에서 인스턴스 메타데이터 보기	`cloudsql.schemas.view`

gcloud sql 명령어에 필요한 권한

명령어	필수 권한
`gcloud sql backups create`	`cloudsql.backupRuns.create`
`gcloud sql backups delete`	`cloudsql.backupRuns.delete`
`gcloud sql backups describe`	`cloudsql.backupRuns.get`
`gcloud sql backups list`	`cloudsql.backupRuns.list`
`gcloud sql backups restore`	`cloudsql.backupRuns.get` `cloudsql.instances.restoreBackup`
`gcloud sql connect`	`cloudsql.instances.get` `cloudsql.instances.update`
`gcloud sql databases create`	`cloudsql.databases.create`
`gcloud sql databases delete`	`cloudsql.databases.delete`
`gcloud sql databases describe`	`cloudsql.databases.get`
`gcloud sql databases list`	`cloudsql.databases.list`
`gcloud sql databases patch`	`cloudsql.databases.get` `cloudsql.databases.update`
`gcloud sql export`	`cloudsql.instances.export` `cloudsql.instances.get`
`gcloud sql flags list`	없음
`gcloud sql import`	`cloudsql.instances.import`
`gcloud sql instances clone`	`cloudsql.instances.clone`
`gcloud sql instances create`	`cloudsql.instances.create`
`gcloud sql instances delete`	`cloudsql.instances.delete`
`gcloud sql instances describe`	`cloudsql.instances.get`
`gcloud sql instances failover`	`cloudsql.instances.failover`
`gcloud sql instances import`	`cloudsql.instances.import`
`gcloud sql instances list`	`cloudsql.instances.list`
`gcloud sql instances patch`	`cloudsql.instances.get` `cloudsql.instances.update`
`gcloud sql instances promote-replica`	`cloudsql.instances.promoteReplica`
`gcloud sql instances reset-ssl-config`	`cloudsql.instances.resetSslConfig`
`gcloud sql instances restart`	`cloudsql.instances.restart`
`gcloud sql instances restore-backup`	`cloudsql.backupRuns.get` `cloudsql.instances.restoreBackup`
`gcloud sql operations describe`	`cloudsql.instances.get`
`gcloud sql operations list`	`cloudsql.instances.get`
`gcloud sql operations wait`	`cloudsql.instances.get`
`gcloud sql ssl client-certs create`	`cloudsql.sslCerts.create`
`gcloud sql ssl client-certs delete`	`cloudsql.sslCerts.delete`
`gcloud sql ssl client-certs describe`	`cloudsql.sslCerts.list`
`gcloud sql ssl client-certs list`	`cloudsql.sslCerts.list`
`gcloud sql tiers list`	없음
`gcloud sql users create`	`cloudsql.users.create`
`gcloud sql users delete`	`cloudsql.users.delete`
`gcloud sql users list`	`cloudsql.users.list`
`gcloud sql users set-password`	`cloudsql.users.update`

Cloud SQL Admin API 메서드에 필요한 권한

다음 표에는 호출자가 Cloud SQL Admin API의 각 메서드를 호출하거나, API를 사용하는 Google Cloud 도구(예: Google Cloud 콘솔 또는 gcloud 명령줄 도구)를 사용하여 태스크를 수행하는 데 필요한 권한이 나와 있습니다.

자세한 내용은 OAuth 2.0으로 요청 승인을 참조하세요. 모든 권한은 프로젝트에 적용됩니다. 인스턴스나 기타 하위 수준의 객체에 기초하여 다른 권한을 적용할 수 없습니다.

메서드	필수 권한
`backupRuns.delete`	`cloudsql.backupRuns.delete`
`backupRuns.get`	`cloudsql.backupRuns.get`
`backupRuns.insert`	`cloudsql.backupRuns.create`
`backupRuns.list`	`cloudsql.backupRuns.list`
`databases.delete`	`cloudsql.databases.delete`
`databases.get`	`cloudsql.databases.get`
`databases.insert`	`cloudsql.databases.create`
`databases.list`	`cloudsql.databases.list`
`databases.patch`	`cloudsql.databases.update`, `cloudsql.databases.get`
`databases.update`	`cloudsql.databases.update`
`flags.list`	없음
`instances.clone`	`cloudsql.instances.clone`
`instances.delete`	`cloudsql.instances.delete`
`instances.export`	`cloudsql.instances.export`
`instances.failover`	`cloudsql.instances.failover`
`instances.get`	`cloudsql.instances.get`
`instances.import`	`cloudsql.instances.import`
`instances.insert`	`cloudsql.instances.create`
`instances.list`	`cloudsql.instances.list`
`instances.patch`	`cloudsql.instances.get`, `cloudsql.instances.update`
`instances.promoteReplica`	`cloudsql.instances.promoteReplica`
`instances.resetSslConfig`	`cloudsql.instances.resetSslConfig`
`instances.restart`	`cloudsql.instances.restart`
`instances.restoreBackup`	`cloudsql.instances.restoreBackup`, `cloudsql.backupRuns.get`
`instances.startReplica`	`cloudsql.instances.startReplica`
`instances.stopReplica`	`cloudsql.instances.stopReplica`
`instances.truncateLog`	`cloudsql.instances.truncateLog`
`instances.update`	`cloudsql.instances.update`
`operations.get`	`cloudsql.instances.get`
`operations.list`	`cloudsql.instances.get`
`sslCerts.delete`	`cloudsql.sslCerts.delete`
`sslCerts.get`	`cloudsql.sslCerts.get`
`sslCerts.insert`	`cloudsql.sslCerts.create`
`sslCerts.list`	`cloudsql.sslCerts.list`
`users.delete`	`cloudsql.users.delete`
`users.insert`	`cloudsql.users.create`
`users.list`	`cloudsql.users.list`
`users.update`	`cloudsql.users.update`