IAM으로 액세스 제어

Identity and Access Management (IAM)를 사용하면 특정 리소스에 대한 액세스 권한을 부여할 수 있습니다. 리소스에 대한 액세스 권한을 부여하려면 사용자에게 특정 역할을 부여해야 합니다. 그러면 사용자에게 특정 권한이 부여됩니다.

이 페이지에는 모든 워크로드 관리자 IAM 역할과 이러한 역할에 의해 부여되는 권한이 나와 있습니다.

워크로드 관리자 역할

Role	Permissions
Workload Manager Admin ^Beta (roles/workloadmanager.admin) Full access to Workload Manager all resources.	compute.acceleratorTypes.list compute.diskTypes.list compute.machineTypes.list compute.networks.list compute.projects.get compute.regions.list compute.subnetworks.list compute.zones.list dns.managedZones.list iam.serviceAccounts.list monitoring.timeSeries.list orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.quotas.get serviceusage.services.get serviceusage.values.test storage.buckets.list storage.objects.list workloadmanager.* workloadmanager.actuations.create workloadmanager.actuations.delete workloadmanager.actuations.get workloadmanager.actuations.list workloadmanager.deployments.create workloadmanager.deployments.delete workloadmanager.deployments.get workloadmanager.deployments.list workloadmanager.discoveredprofiles.get workloadmanager.discoveredprofiles.getHealth workloadmanager.discoveredprofiles.list workloadmanager.evaluations.create workloadmanager.evaluations.delete workloadmanager.evaluations.get workloadmanager.evaluations.list workloadmanager.evaluations.run workloadmanager.evaluations.update workloadmanager.executions.delete workloadmanager.executions.get workloadmanager.executions.list workloadmanager.insights.export workloadmanager.insights.listSapSystems workloadmanager.insights.write workloadmanager.locations.get workloadmanager.locations.list workloadmanager.operations.cancel workloadmanager.operations.delete workloadmanager.operations.get workloadmanager.operations.list workloadmanager.results.list workloadmanager.rules.list
Workload Manager Deployment Admin ^Beta (roles/workloadmanager.deploymentAdmin) Full access to Workload Manager deployment resources.	compute.acceleratorTypes.list compute.diskTypes.list compute.machineTypes.list compute.networks.list compute.projects.get compute.regions.list compute.subnetworks.list compute.zones.list dns.managedZones.list iam.serviceAccounts.list monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.quotas.get serviceusage.services.get serviceusage.values.test storage.buckets.list storage.objects.list workloadmanager.actuations.* workloadmanager.actuations.create workloadmanager.actuations.delete workloadmanager.actuations.get workloadmanager.actuations.list workloadmanager.deployments.* workloadmanager.deployments.create workloadmanager.deployments.delete workloadmanager.deployments.get workloadmanager.deployments.list workloadmanager.locations.* workloadmanager.locations.get workloadmanager.locations.list workloadmanager.operations.* workloadmanager.operations.cancel workloadmanager.operations.delete workloadmanager.operations.get workloadmanager.operations.list
Workload Manager Deployment Viewer ^Beta (roles/workloadmanager.deploymentViewer) Read-only access to Workload Manager deployment resources.	resourcemanager.projects.get resourcemanager.projects.list workloadmanager.actuations.get workloadmanager.actuations.list workloadmanager.deployments.get workloadmanager.deployments.list
Workload Manager Evaluation Admin ^Beta (roles/workloadmanager.evaluationAdmin) Full access to Workload Manager evaluation resources.	orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.list workloadmanager.evaluations.* workloadmanager.evaluations.create workloadmanager.evaluations.delete workloadmanager.evaluations.get workloadmanager.evaluations.list workloadmanager.evaluations.run workloadmanager.evaluations.update workloadmanager.executions.* workloadmanager.executions.delete workloadmanager.executions.get workloadmanager.executions.list workloadmanager.locations.* workloadmanager.locations.get workloadmanager.locations.list workloadmanager.operations.* workloadmanager.operations.cancel workloadmanager.operations.delete workloadmanager.operations.get workloadmanager.operations.list workloadmanager.results.list workloadmanager.rules.list
Workload Manager Evaluation Viewer ^Beta (roles/workloadmanager.evaluationViewer) Read-only access to Workload Manager evaluation resources.	orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.list workloadmanager.evaluations.get workloadmanager.evaluations.list workloadmanager.executions.get workloadmanager.executions.list workloadmanager.results.list workloadmanager.rules.list
Workload Manager Insights Writer ^Beta (roles/workloadmanager.insightWriter) The role used to write data to WLM data warehouse.	workloadmanager.insights.write
Workload Manager Service Agent (roles/workloadmanager.serviceAgent) Gives Workload Manager Service Agent access to CAI export functions and Cloud Monitoring. Warning: Do not grant service agent roles to any principals except service agents.	cloudasset.assets.exportAccessPolicy cloudasset.assets.exportIamPolicy cloudasset.assets.exportOSInventories cloudasset.assets.exportOrgPolicy cloudasset.assets.exportResource cloudasset.assets.listAccessPolicy cloudasset.assets.listIamPolicy cloudasset.assets.listOSInventories cloudasset.assets.listOrgPolicy cloudasset.assets.listResource cloudasset.assets.searchAllResources config.deployments.create config.deployments.delete config.deployments.get config.deployments.list config.deployments.update config.locations.* config.locations.get config.locations.list config.operations.* config.operations.cancel config.operations.delete config.operations.get config.operations.list config.resources.list config.revisions.get config.revisions.list monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list monitoring.timeSeries.list serviceusage.services.use workloadmanager.insights.export workloadmanager.insights.listSapSystems
Workload Manager Viewer ^Beta (roles/workloadmanager.viewer) Read-only access to Workload Manager all resources.	orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.list workloadmanager.actuations.get workloadmanager.actuations.list workloadmanager.deployments.get workloadmanager.deployments.list workloadmanager.discoveredprofiles.* workloadmanager.discoveredprofiles.get workloadmanager.discoveredprofiles.getHealth workloadmanager.discoveredprofiles.list workloadmanager.evaluations.get workloadmanager.evaluations.list workloadmanager.executions.get workloadmanager.executions.list workloadmanager.results.list workloadmanager.rules.list
Workload Manager Worker ^Beta (roles/workloadmanager.worker) The role used by Workload Manager application runners to read and update workloads.	orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.list workloadmanager.actuations.* workloadmanager.actuations.create workloadmanager.actuations.delete workloadmanager.actuations.get workloadmanager.actuations.list workloadmanager.deployments.* workloadmanager.deployments.create workloadmanager.deployments.delete workloadmanager.deployments.get workloadmanager.deployments.list workloadmanager.discoveredprofiles.* workloadmanager.discoveredprofiles.get workloadmanager.discoveredprofiles.getHealth workloadmanager.discoveredprofiles.list workloadmanager.evaluations.* workloadmanager.evaluations.create workloadmanager.evaluations.delete workloadmanager.evaluations.get workloadmanager.evaluations.list workloadmanager.evaluations.run workloadmanager.evaluations.update workloadmanager.executions.* workloadmanager.executions.delete workloadmanager.executions.get workloadmanager.executions.list workloadmanager.insights.write workloadmanager.results.list workloadmanager.rules.list
Workload Manager Workload Viewer ^Beta (roles/workloadmanager.workloadViewer) The role used to view the workload related data.	resourcemanager.projects.get resourcemanager.projects.list workloadmanager.discoveredprofiles.* workloadmanager.discoveredprofiles.get workloadmanager.discoveredprofiles.getHealth workloadmanager.discoveredprofiles.list

워크로드 관리자 권한

권한	역할에 포함됨
workloadmanager.actuations.create	소유자(roles/owner) 편집자(roles/editor) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 배포 관리자(roles/workloadmanager.deploymentAdmin) 워크로드 관리자 작업자(roles/workloadmanager.worker)
workloadmanager.actuations.delete	소유자(roles/owner) 편집자(roles/editor) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 배포 관리자(roles/workloadmanager.deploymentAdmin) 워크로드 관리자 작업자(roles/workloadmanager.worker)
workloadmanager.actuations.get	소유자(roles/owner) 편집자(roles/editor) 뷰어 (roles/viewer) 지원 사용자(roles/iam.supportUser) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 배포 관리자(roles/workloadmanager.deploymentAdmin) 워크로드 관리자 배포 뷰어 (roles/workloadmanager.deploymentViewer) 워크로드 관리자 뷰어(roles/workloadmanager.viewer) 워크로드 관리자 작업자(roles/workloadmanager.worker)
workloadmanager.actuations.list	소유자(roles/owner) 편집자(roles/editor) 뷰어 (roles/viewer) 보안 관리자(roles/iam.securityAdmin) 보안 감사자(roles/iam.securityAuditor) 보안 검토자(roles/iam.securityReviewer) 지원 사용자(roles/iam.supportUser) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 배포 관리자(roles/workloadmanager.deploymentAdmin) 워크로드 관리자 배포 뷰어 (roles/workloadmanager.deploymentViewer) 워크로드 관리자 뷰어(roles/workloadmanager.viewer) 워크로드 관리자 작업자(roles/workloadmanager.worker)
workloadmanager.deployments.create	소유자(roles/owner) 편집자(roles/editor) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 배포 관리자(roles/workloadmanager.deploymentAdmin) 워크로드 관리자 작업자(roles/workloadmanager.worker)
workloadmanager.deployments.delete	소유자(roles/owner) 편집자(roles/editor) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 배포 관리자(roles/workloadmanager.deploymentAdmin) 워크로드 관리자 작업자(roles/workloadmanager.worker)
workloadmanager.deployments.get	소유자(roles/owner) 편집자(roles/editor) 뷰어 (roles/viewer) 지원 사용자(roles/iam.supportUser) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 배포 관리자(roles/workloadmanager.deploymentAdmin) 워크로드 관리자 배포 뷰어 (roles/workloadmanager.deploymentViewer) 워크로드 관리자 뷰어(roles/workloadmanager.viewer) 워크로드 관리자 작업자(roles/workloadmanager.worker)
workloadmanager.deployments.list	소유자(roles/owner) 편집자(roles/editor) 뷰어 (roles/viewer) 보안 관리자(roles/iam.securityAdmin) 보안 감사자(roles/iam.securityAuditor) 보안 검토자(roles/iam.securityReviewer) 지원 사용자(roles/iam.supportUser) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 배포 관리자(roles/workloadmanager.deploymentAdmin) 워크로드 관리자 배포 뷰어 (roles/workloadmanager.deploymentViewer) 워크로드 관리자 뷰어(roles/workloadmanager.viewer) 워크로드 관리자 작업자(roles/workloadmanager.worker)
workloadmanager.discoveredprofiles.get	소유자(roles/owner) 편집자(roles/editor) 뷰어 (roles/viewer) 지원 사용자(roles/iam.supportUser) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 뷰어(roles/workloadmanager.viewer) 워크로드 관리자 작업자(roles/workloadmanager.worker) 워크로드 관리자 워크로드 뷰어 (roles/workloadmanager.workloadViewer)
workloadmanager.discoveredprofiles.getHealth	소유자(roles/owner) 편집자(roles/editor) 뷰어 (roles/viewer) 지원 사용자(roles/iam.supportUser) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 뷰어(roles/workloadmanager.viewer) 워크로드 관리자 작업자(roles/workloadmanager.worker) 워크로드 관리자 워크로드 뷰어 (roles/workloadmanager.workloadViewer)
workloadmanager.discoveredprofiles.list	소유자(roles/owner) 편집자(roles/editor) 뷰어 (roles/viewer) 보안 관리자(roles/iam.securityAdmin) 보안 감사자(roles/iam.securityAuditor) 보안 검토자(roles/iam.securityReviewer) 지원 사용자(roles/iam.supportUser) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 뷰어(roles/workloadmanager.viewer) 워크로드 관리자 작업자(roles/workloadmanager.worker) 워크로드 관리자 워크로드 뷰어 (roles/workloadmanager.workloadViewer)
workloadmanager.evaluations.create	소유자(roles/owner) 편집자(roles/editor) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 평가 관리자(roles/workloadmanager.evaluationAdmin) 워크로드 관리자 작업자(roles/workloadmanager.worker)
workloadmanager.evaluations.delete	소유자(roles/owner) 편집자(roles/editor) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 평가 관리자(roles/workloadmanager.evaluationAdmin) 워크로드 관리자 작업자(roles/workloadmanager.worker)
workloadmanager.evaluations.get	소유자(roles/owner) 편집자(roles/editor) 뷰어 (roles/viewer) 지원 사용자(roles/iam.supportUser) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 평가 관리자(roles/workloadmanager.evaluationAdmin) 워크로드 관리자 평가 뷰어(roles/workloadmanager.evaluationViewer) 워크로드 관리자 뷰어(roles/workloadmanager.viewer) 워크로드 관리자 작업자(roles/workloadmanager.worker)
workloadmanager.evaluations.list	소유자(roles/owner) 편집자(roles/editor) 뷰어 (roles/viewer) 보안 관리자(roles/iam.securityAdmin) 보안 감사자(roles/iam.securityAuditor) 보안 검토자(roles/iam.securityReviewer) 지원 사용자(roles/iam.supportUser) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 평가 관리자(roles/workloadmanager.evaluationAdmin) 워크로드 관리자 평가 뷰어(roles/workloadmanager.evaluationViewer) 워크로드 관리자 뷰어(roles/workloadmanager.viewer) 워크로드 관리자 작업자(roles/workloadmanager.worker)
workloadmanager.evaluations.run	소유자(roles/owner) 편집자(roles/editor) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 평가 관리자(roles/workloadmanager.evaluationAdmin) 워크로드 관리자 작업자(roles/workloadmanager.worker)
workloadmanager.evaluations.update	소유자(roles/owner) 편집자(roles/editor) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 평가 관리자(roles/workloadmanager.evaluationAdmin) 워크로드 관리자 작업자(roles/workloadmanager.worker)
workloadmanager.executions.delete	소유자(roles/owner) 편집자(roles/editor) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 평가 관리자(roles/workloadmanager.evaluationAdmin) 워크로드 관리자 작업자(roles/workloadmanager.worker)
workloadmanager.executions.get	소유자(roles/owner) 편집자(roles/editor) 뷰어 (roles/viewer) 지원 사용자(roles/iam.supportUser) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 평가 관리자(roles/workloadmanager.evaluationAdmin) 워크로드 관리자 평가 뷰어(roles/workloadmanager.evaluationViewer) 워크로드 관리자 뷰어(roles/workloadmanager.viewer) 워크로드 관리자 작업자(roles/workloadmanager.worker)
workloadmanager.executions.list	소유자(roles/owner) 편집자(roles/editor) 뷰어 (roles/viewer) 보안 관리자(roles/iam.securityAdmin) 보안 감사자(roles/iam.securityAuditor) 보안 검토자(roles/iam.securityReviewer) 지원 사용자(roles/iam.supportUser) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 평가 관리자(roles/workloadmanager.evaluationAdmin) 워크로드 관리자 평가 뷰어(roles/workloadmanager.evaluationViewer) 워크로드 관리자 뷰어(roles/workloadmanager.viewer) 워크로드 관리자 작업자(roles/workloadmanager.worker)
workloadmanager.insights.export	소유자(roles/owner) 편집자(roles/editor) 뷰어 (roles/viewer) 지원 사용자(roles/iam.supportUser) 워크로드 관리자 관리(roles/workloadmanager.admin) 서비스 에이전트 역할 경고: 서비스 에이전트를 제외하고 주 구성원에 서비스 에이전트 역할을 부여하지 마세요. 워크로드 관리자 서비스 에이전트(roles/workloadmanager.serviceAgent)
workloadmanager.insights.listSapSystems	소유자(roles/owner) 편집자(roles/editor) 뷰어 (roles/viewer) 지원 사용자(roles/iam.supportUser) 워크로드 관리자 관리(roles/workloadmanager.admin) 서비스 에이전트 역할 경고: 서비스 에이전트를 제외하고 주 구성원에 서비스 에이전트 역할을 부여하지 마세요. 워크로드 관리자 서비스 에이전트(roles/workloadmanager.serviceAgent)
workloadmanager.insights.write	소유자(roles/owner) 편집자(roles/editor) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 통계 작성자 (roles/workloadmanager.insightWriter) 워크로드 관리자 작업자(roles/workloadmanager.worker)
workloadmanager.locations.get	소유자(roles/owner) 편집자(roles/editor) 뷰어 (roles/viewer) 지원 사용자(roles/iam.supportUser) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 배포 관리자(roles/workloadmanager.deploymentAdmin) 워크로드 관리자 평가 관리자(roles/workloadmanager.evaluationAdmin)
workloadmanager.locations.list	소유자(roles/owner) 편집자(roles/editor) 뷰어 (roles/viewer) 보안 관리자(roles/iam.securityAdmin) 보안 감사자(roles/iam.securityAuditor) 보안 검토자(roles/iam.securityReviewer) 지원 사용자(roles/iam.supportUser) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 배포 관리자(roles/workloadmanager.deploymentAdmin) 워크로드 관리자 평가 관리자(roles/workloadmanager.evaluationAdmin)
workloadmanager.operations.cancel	소유자(roles/owner) 편집자(roles/editor) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 배포 관리자(roles/workloadmanager.deploymentAdmin) 워크로드 관리자 평가 관리자(roles/workloadmanager.evaluationAdmin)
workloadmanager.operations.delete	소유자(roles/owner) 편집자(roles/editor) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 배포 관리자(roles/workloadmanager.deploymentAdmin) 워크로드 관리자 평가 관리자(roles/workloadmanager.evaluationAdmin)
workloadmanager.operations.get	소유자(roles/owner) 편집자(roles/editor) 뷰어 (roles/viewer) 지원 사용자(roles/iam.supportUser) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 배포 관리자(roles/workloadmanager.deploymentAdmin) 워크로드 관리자 평가 관리자(roles/workloadmanager.evaluationAdmin)
workloadmanager.operations.list	소유자(roles/owner) 편집자(roles/editor) 뷰어 (roles/viewer) 보안 관리자(roles/iam.securityAdmin) 보안 감사자(roles/iam.securityAuditor) 보안 검토자(roles/iam.securityReviewer) 지원 사용자(roles/iam.supportUser) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 배포 관리자(roles/workloadmanager.deploymentAdmin) 워크로드 관리자 평가 관리자(roles/workloadmanager.evaluationAdmin)
workloadmanager.results.list	소유자(roles/owner) 편집자(roles/editor) 뷰어 (roles/viewer) 보안 관리자(roles/iam.securityAdmin) 보안 감사자(roles/iam.securityAuditor) 보안 검토자(roles/iam.securityReviewer) 지원 사용자(roles/iam.supportUser) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 평가 관리자(roles/workloadmanager.evaluationAdmin) 워크로드 관리자 평가 뷰어(roles/workloadmanager.evaluationViewer) 워크로드 관리자 뷰어(roles/workloadmanager.viewer) 워크로드 관리자 작업자(roles/workloadmanager.worker)
workloadmanager.rules.list	소유자(roles/owner) 편집자(roles/editor) 뷰어 (roles/viewer) 보안 관리자(roles/iam.securityAdmin) 보안 감사자(roles/iam.securityAuditor) 보안 검토자(roles/iam.securityReviewer) 지원 사용자(roles/iam.supportUser) 워크로드 관리자 관리(roles/workloadmanager.admin) 워크로드 관리자 평가 관리자(roles/workloadmanager.evaluationAdmin) 워크로드 관리자 평가 뷰어(roles/workloadmanager.evaluationViewer) 워크로드 관리자 뷰어(roles/workloadmanager.viewer) 워크로드 관리자 작업자(roles/workloadmanager.worker)

다음 단계

• 워크로드 관리자 알아보기