Controllo dell'accesso con IAM

Identity and Access Management (IAM) ti consente di concedere l'accesso a risorse specifiche. Per concedere l'accesso a una risorsa, assegni un ruolo specifico a un utente, che gli concede determinate autorizzazioni.

In questa pagina sono elencati tutti i ruoli IAM di Workload Manager e le autorizzazioni concesse da questi ruoli.

Ruoli di Workload Manager

Role	Permissions
Workload Manager Admin ^Beta (roles/workloadmanager.admin) Full access to Workload Manager all resources.	compute.acceleratorTypes.list compute.diskTypes.list compute.machineTypes.list compute.networks.list compute.projects.get compute.regions.list compute.subnetworks.list compute.zones.list dns.managedZones.list iam.serviceAccounts.list monitoring.timeSeries.list orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list serviceusage.quotas.get serviceusage.services.get storage.buckets.list storage.objects.list workloadmanager.* workloadmanager.actuations.create workloadmanager.actuations.delete workloadmanager.actuations.get workloadmanager.actuations.list workloadmanager.deployments.create workloadmanager.deployments.delete workloadmanager.deployments.get workloadmanager.deployments.list workloadmanager.discoveredprofiles.get workloadmanager.discoveredprofiles.getHealth workloadmanager.discoveredprofiles.list workloadmanager.evaluations.create workloadmanager.evaluations.delete workloadmanager.evaluations.get workloadmanager.evaluations.list workloadmanager.evaluations.run workloadmanager.evaluations.update workloadmanager.executions.delete workloadmanager.executions.get workloadmanager.executions.list workloadmanager.insights.export workloadmanager.insights.listSapSystems workloadmanager.insights.write workloadmanager.locations.get workloadmanager.locations.list workloadmanager.operations.cancel workloadmanager.operations.delete workloadmanager.operations.get workloadmanager.operations.list workloadmanager.results.list workloadmanager.rules.list
Workload Manager Deployment Admin ^Beta (roles/workloadmanager.deploymentAdmin) Full access to Workload Manager deployment resources.	compute.acceleratorTypes.list compute.diskTypes.list compute.machineTypes.list compute.networks.list compute.projects.get compute.regions.list compute.subnetworks.list compute.zones.list dns.managedZones.list iam.serviceAccounts.list monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list serviceusage.quotas.get serviceusage.services.get storage.buckets.list storage.objects.list workloadmanager.actuations.* workloadmanager.actuations.create workloadmanager.actuations.delete workloadmanager.actuations.get workloadmanager.actuations.list workloadmanager.deployments.* workloadmanager.deployments.create workloadmanager.deployments.delete workloadmanager.deployments.get workloadmanager.deployments.list workloadmanager.locations.* workloadmanager.locations.get workloadmanager.locations.list workloadmanager.operations.* workloadmanager.operations.cancel workloadmanager.operations.delete workloadmanager.operations.get workloadmanager.operations.list
Workload Manager Deployment Viewer ^Beta (roles/workloadmanager.deploymentViewer) Read-only access to Workload Manager deployment resources.	resourcemanager.projects.get resourcemanager.projects.list workloadmanager.actuations.get workloadmanager.actuations.list workloadmanager.deployments.get workloadmanager.deployments.list
Workload Manager Evaluation Admin ^Beta (roles/workloadmanager.evaluationAdmin) Full access to Workload Manager evaluation resources.	orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.list workloadmanager.evaluations.* workloadmanager.evaluations.create workloadmanager.evaluations.delete workloadmanager.evaluations.get workloadmanager.evaluations.list workloadmanager.evaluations.run workloadmanager.evaluations.update workloadmanager.executions.* workloadmanager.executions.delete workloadmanager.executions.get workloadmanager.executions.list workloadmanager.locations.* workloadmanager.locations.get workloadmanager.locations.list workloadmanager.operations.* workloadmanager.operations.cancel workloadmanager.operations.delete workloadmanager.operations.get workloadmanager.operations.list workloadmanager.results.list workloadmanager.rules.list
Workload Manager Evaluation Viewer ^Beta (roles/workloadmanager.evaluationViewer) Read-only access to Workload Manager evaluation resources.	orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.list workloadmanager.evaluations.get workloadmanager.evaluations.list workloadmanager.executions.get workloadmanager.executions.list workloadmanager.results.list workloadmanager.rules.list
Workload Manager Insights Writer ^Beta (roles/workloadmanager.insightWriter) The role used to write data to WLM data warehouse.	workloadmanager.insights.write
Workload Manager Service Agent (roles/workloadmanager.serviceAgent) Gives Workload Manager Service Agent access to CAI export functions and Cloud Monitoring. Warning: Do not grant service agent roles to any principals except service agents.	cloudasset.assets.exportAccessPolicy cloudasset.assets.exportIamPolicy cloudasset.assets.exportOSInventories cloudasset.assets.exportOrgPolicy cloudasset.assets.exportResource cloudasset.assets.listAccessPolicy cloudasset.assets.listIamPolicy cloudasset.assets.listOSInventories cloudasset.assets.listOrgPolicy cloudasset.assets.listResource cloudasset.assets.searchAllResources config.deployments.create config.deployments.delete config.deployments.get config.deployments.list config.deployments.update config.locations.* config.locations.get config.locations.list config.operations.* config.operations.cancel config.operations.delete config.operations.get config.operations.list config.resources.list config.revisions.get config.revisions.list monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list monitoring.timeSeries.list serviceusage.services.use workloadmanager.insights.export workloadmanager.insights.listSapSystems
Workload Manager Viewer ^Beta (roles/workloadmanager.viewer) Read-only access to Workload Manager all resources.	orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.list workloadmanager.actuations.get workloadmanager.actuations.list workloadmanager.deployments.get workloadmanager.deployments.list workloadmanager.discoveredprofiles.* workloadmanager.discoveredprofiles.get workloadmanager.discoveredprofiles.getHealth workloadmanager.discoveredprofiles.list workloadmanager.evaluations.get workloadmanager.evaluations.list workloadmanager.executions.get workloadmanager.executions.list workloadmanager.results.list workloadmanager.rules.list
Workload Manager Worker ^Beta (roles/workloadmanager.worker) The role used by Workload Manager application runners to read and update workloads.	orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.list workloadmanager.actuations.* workloadmanager.actuations.create workloadmanager.actuations.delete workloadmanager.actuations.get workloadmanager.actuations.list workloadmanager.deployments.* workloadmanager.deployments.create workloadmanager.deployments.delete workloadmanager.deployments.get workloadmanager.deployments.list workloadmanager.discoveredprofiles.* workloadmanager.discoveredprofiles.get workloadmanager.discoveredprofiles.getHealth workloadmanager.discoveredprofiles.list workloadmanager.evaluations.* workloadmanager.evaluations.create workloadmanager.evaluations.delete workloadmanager.evaluations.get workloadmanager.evaluations.list workloadmanager.evaluations.run workloadmanager.evaluations.update workloadmanager.executions.* workloadmanager.executions.delete workloadmanager.executions.get workloadmanager.executions.list workloadmanager.insights.write workloadmanager.results.list workloadmanager.rules.list
Workload Manager Workload Viewer ^Beta (roles/workloadmanager.workloadViewer) The role used to view the workload related data.	resourcemanager.projects.get resourcemanager.projects.list workloadmanager.discoveredprofiles.* workloadmanager.discoveredprofiles.get workloadmanager.discoveredprofiles.getHealth workloadmanager.discoveredprofiles.list

Autorizzazioni di Workload Manager

Autorizzazione	Inclusi nei ruoli
workloadmanager.actuations.create	Proprietario (roles/owner) Editor (roles/editor) Amministratore di Workload Manager (roles/workloadmanager.admin) Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin) Workload Manager Worker (roles/workloadmanager.worker)
workloadmanager.actuations.delete	Proprietario (roles/owner) Editor (roles/editor) Amministratore di Workload Manager (roles/workloadmanager.admin) Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin) Workload Manager Worker (roles/workloadmanager.worker)
workloadmanager.actuations.get	Proprietario (roles/owner) Editor (roles/editor) Visualizzatore (roles/viewer) Utente dell'assistenza (roles/iam.supportUser) Amministratore di Workload Manager (roles/workloadmanager.admin) Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin) Visualizzatore deployment di Workload Manager (roles/workloadmanager.deploymentViewer) Visualizzatore di Workload Manager (roles/workloadmanager.viewer) Workload Manager Worker (roles/workloadmanager.worker)
workloadmanager.actuations.list	Proprietario (roles/owner) Editor (roles/editor) Visualizzatore (roles/viewer) Amministratore della sicurezza (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Revisore della sicurezza (roles/iam.securityReviewer) Utente dell'assistenza (roles/iam.supportUser) Amministratore di Workload Manager (roles/workloadmanager.admin) Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin) Visualizzatore deployment di Workload Manager (roles/workloadmanager.deploymentViewer) Visualizzatore di Workload Manager (roles/workloadmanager.viewer) Workload Manager Worker (roles/workloadmanager.worker)
workloadmanager.deployments.create	Proprietario (roles/owner) Editor (roles/editor) Amministratore di Workload Manager (roles/workloadmanager.admin) Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin) Workload Manager Worker (roles/workloadmanager.worker)
workloadmanager.deployments.delete	Proprietario (roles/owner) Editor (roles/editor) Amministratore di Workload Manager (roles/workloadmanager.admin) Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin) Workload Manager Worker (roles/workloadmanager.worker)
workloadmanager.deployments.get	Proprietario (roles/owner) Editor (roles/editor) Visualizzatore (roles/viewer) Utente dell'assistenza (roles/iam.supportUser) Amministratore di Workload Manager (roles/workloadmanager.admin) Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin) Visualizzatore deployment di Workload Manager (roles/workloadmanager.deploymentViewer) Visualizzatore di Workload Manager (roles/workloadmanager.viewer) Workload Manager Worker (roles/workloadmanager.worker)
workloadmanager.deployments.list	Proprietario (roles/owner) Editor (roles/editor) Visualizzatore (roles/viewer) Amministratore della sicurezza (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Revisore della sicurezza (roles/iam.securityReviewer) Utente dell'assistenza (roles/iam.supportUser) Amministratore di Workload Manager (roles/workloadmanager.admin) Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin) Visualizzatore deployment di Workload Manager (roles/workloadmanager.deploymentViewer) Visualizzatore di Workload Manager (roles/workloadmanager.viewer) Workload Manager Worker (roles/workloadmanager.worker)
workloadmanager.discoveredprofiles.get	Proprietario (roles/owner) Editor (roles/editor) Visualizzatore (roles/viewer) Utente dell'assistenza (roles/iam.supportUser) Amministratore di Workload Manager (roles/workloadmanager.admin) Visualizzatore di Workload Manager (roles/workloadmanager.viewer) Workload Manager Worker (roles/workloadmanager.worker) Workload Manager Workload Viewer (roles/workloadmanager.workloadViewer)
workloadmanager.discoveredprofiles.getHealth	Proprietario (roles/owner) Editor (roles/editor) Visualizzatore (roles/viewer) Utente dell'assistenza (roles/iam.supportUser) Amministratore di Workload Manager (roles/workloadmanager.admin) Visualizzatore di Workload Manager (roles/workloadmanager.viewer) Workload Manager Worker (roles/workloadmanager.worker) Workload Manager Workload Viewer (roles/workloadmanager.workloadViewer)
workloadmanager.discoveredprofiles.list	Proprietario (roles/owner) Editor (roles/editor) Visualizzatore (roles/viewer) Amministratore della sicurezza (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Revisore della sicurezza (roles/iam.securityReviewer) Utente dell'assistenza (roles/iam.supportUser) Amministratore di Workload Manager (roles/workloadmanager.admin) Visualizzatore di Workload Manager (roles/workloadmanager.viewer) Workload Manager Worker (roles/workloadmanager.worker) Workload Manager Workload Viewer (roles/workloadmanager.workloadViewer)
workloadmanager.evaluations.create	Proprietario (roles/owner) Editor (roles/editor) Amministratore di Workload Manager (roles/workloadmanager.admin) Amministratore della valutazione del Gestore carichi di lavoro (roles/workloadmanager.evaluationAdmin) Workload Manager Worker (roles/workloadmanager.worker)
workloadmanager.evaluations.delete	Proprietario (roles/owner) Editor (roles/editor) Amministratore di Workload Manager (roles/workloadmanager.admin) Amministratore della valutazione del Gestore carichi di lavoro (roles/workloadmanager.evaluationAdmin) Workload Manager Worker (roles/workloadmanager.worker)
workloadmanager.evaluations.get	Proprietario (roles/owner) Editor (roles/editor) Visualizzatore (roles/viewer) Utente dell'assistenza (roles/iam.supportUser) Amministratore di Workload Manager (roles/workloadmanager.admin) Amministratore della valutazione del Gestore carichi di lavoro (roles/workloadmanager.evaluationAdmin) Workload Manager Evaluation Viewer (roles/workloadmanager.evaluationViewer) Visualizzatore di Workload Manager (roles/workloadmanager.viewer) Workload Manager Worker (roles/workloadmanager.worker)
workloadmanager.evaluations.list	Proprietario (roles/owner) Editor (roles/editor) Visualizzatore (roles/viewer) Amministratore della sicurezza (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Revisore della sicurezza (roles/iam.securityReviewer) Utente dell'assistenza (roles/iam.supportUser) Amministratore di Workload Manager (roles/workloadmanager.admin) Amministratore della valutazione del Gestore carichi di lavoro (roles/workloadmanager.evaluationAdmin) Workload Manager Evaluation Viewer (roles/workloadmanager.evaluationViewer) Visualizzatore di Workload Manager (roles/workloadmanager.viewer) Workload Manager Worker (roles/workloadmanager.worker)
workloadmanager.evaluations.run	Proprietario (roles/owner) Editor (roles/editor) Amministratore di Workload Manager (roles/workloadmanager.admin) Amministratore della valutazione del Gestore carichi di lavoro (roles/workloadmanager.evaluationAdmin) Workload Manager Worker (roles/workloadmanager.worker)
workloadmanager.evaluations.update	Proprietario (roles/owner) Editor (roles/editor) Amministratore di Workload Manager (roles/workloadmanager.admin) Amministratore della valutazione del Gestore carichi di lavoro (roles/workloadmanager.evaluationAdmin) Workload Manager Worker (roles/workloadmanager.worker)
workloadmanager.executions.delete	Proprietario (roles/owner) Editor (roles/editor) Amministratore di Workload Manager (roles/workloadmanager.admin) Amministratore della valutazione del Gestore carichi di lavoro (roles/workloadmanager.evaluationAdmin) Workload Manager Worker (roles/workloadmanager.worker)
workloadmanager.executions.get	Proprietario (roles/owner) Editor (roles/editor) Visualizzatore (roles/viewer) Utente dell'assistenza (roles/iam.supportUser) Amministratore di Workload Manager (roles/workloadmanager.admin) Amministratore della valutazione del Gestore carichi di lavoro (roles/workloadmanager.evaluationAdmin) Workload Manager Evaluation Viewer (roles/workloadmanager.evaluationViewer) Visualizzatore di Workload Manager (roles/workloadmanager.viewer) Workload Manager Worker (roles/workloadmanager.worker)
workloadmanager.executions.list	Proprietario (roles/owner) Editor (roles/editor) Visualizzatore (roles/viewer) Amministratore della sicurezza (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Revisore della sicurezza (roles/iam.securityReviewer) Utente dell'assistenza (roles/iam.supportUser) Amministratore di Workload Manager (roles/workloadmanager.admin) Amministratore della valutazione del Gestore carichi di lavoro (roles/workloadmanager.evaluationAdmin) Workload Manager Evaluation Viewer (roles/workloadmanager.evaluationViewer) Visualizzatore di Workload Manager (roles/workloadmanager.viewer) Workload Manager Worker (roles/workloadmanager.worker)
workloadmanager.insights.export	Proprietario (roles/owner) Editor (roles/editor) Visualizzatore (roles/viewer) Utente dell'assistenza (roles/iam.supportUser) Amministratore di Workload Manager (roles/workloadmanager.admin) Ruoli di agente di servizio Avviso:non concedere ruoli di service agent a nessun principal, ad eccezione dei service agent. Workload Manager Service Agent (roles/workloadmanager.serviceAgent)
workloadmanager.insights.listSapSystems	Proprietario (roles/owner) Editor (roles/editor) Visualizzatore (roles/viewer) Utente dell'assistenza (roles/iam.supportUser) Amministratore di Workload Manager (roles/workloadmanager.admin) Ruoli di agente di servizio Avviso:non concedere ruoli di service agent a nessun principal, ad eccezione dei service agent. Workload Manager Service Agent (roles/workloadmanager.serviceAgent)
workloadmanager.insights.write	Proprietario (roles/owner) Editor (roles/editor) Amministratore di Workload Manager (roles/workloadmanager.admin) Workload Manager Insights Writer (roles/workloadmanager.insightWriter) Workload Manager Worker (roles/workloadmanager.worker)
workloadmanager.locations.get	Proprietario (roles/owner) Editor (roles/editor) Visualizzatore (roles/viewer) Utente dell'assistenza (roles/iam.supportUser) Amministratore di Workload Manager (roles/workloadmanager.admin) Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin) Amministratore della valutazione del Gestore carichi di lavoro (roles/workloadmanager.evaluationAdmin)
workloadmanager.locations.list	Proprietario (roles/owner) Editor (roles/editor) Visualizzatore (roles/viewer) Amministratore della sicurezza (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Revisore della sicurezza (roles/iam.securityReviewer) Utente dell'assistenza (roles/iam.supportUser) Amministratore di Workload Manager (roles/workloadmanager.admin) Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin) Amministratore della valutazione del Gestore carichi di lavoro (roles/workloadmanager.evaluationAdmin)
workloadmanager.operations.cancel	Proprietario (roles/owner) Editor (roles/editor) Amministratore di Workload Manager (roles/workloadmanager.admin) Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin) Amministratore della valutazione del Gestore carichi di lavoro (roles/workloadmanager.evaluationAdmin)
workloadmanager.operations.delete	Proprietario (roles/owner) Editor (roles/editor) Amministratore di Workload Manager (roles/workloadmanager.admin) Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin) Amministratore della valutazione del Gestore carichi di lavoro (roles/workloadmanager.evaluationAdmin)
workloadmanager.operations.get	Proprietario (roles/owner) Editor (roles/editor) Visualizzatore (roles/viewer) Utente dell'assistenza (roles/iam.supportUser) Amministratore di Workload Manager (roles/workloadmanager.admin) Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin) Amministratore della valutazione del Gestore carichi di lavoro (roles/workloadmanager.evaluationAdmin)
workloadmanager.operations.list	Proprietario (roles/owner) Editor (roles/editor) Visualizzatore (roles/viewer) Amministratore della sicurezza (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Revisore della sicurezza (roles/iam.securityReviewer) Utente dell'assistenza (roles/iam.supportUser) Amministratore di Workload Manager (roles/workloadmanager.admin) Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin) Amministratore della valutazione del Gestore carichi di lavoro (roles/workloadmanager.evaluationAdmin)
workloadmanager.results.list	Proprietario (roles/owner) Editor (roles/editor) Visualizzatore (roles/viewer) Amministratore della sicurezza (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Revisore della sicurezza (roles/iam.securityReviewer) Utente dell'assistenza (roles/iam.supportUser) Amministratore di Workload Manager (roles/workloadmanager.admin) Amministratore della valutazione del Gestore carichi di lavoro (roles/workloadmanager.evaluationAdmin) Workload Manager Evaluation Viewer (roles/workloadmanager.evaluationViewer) Visualizzatore di Workload Manager (roles/workloadmanager.viewer) Workload Manager Worker (roles/workloadmanager.worker)
workloadmanager.rules.list	Proprietario (roles/owner) Editor (roles/editor) Visualizzatore (roles/viewer) Amministratore della sicurezza (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Revisore della sicurezza (roles/iam.securityReviewer) Utente dell'assistenza (roles/iam.supportUser) Amministratore di Workload Manager (roles/workloadmanager.admin) Amministratore della valutazione del Gestore carichi di lavoro (roles/workloadmanager.evaluationAdmin) Workload Manager Evaluation Viewer (roles/workloadmanager.evaluationViewer) Visualizzatore di Workload Manager (roles/workloadmanager.viewer) Workload Manager Worker (roles/workloadmanager.worker)

Passaggi successivi

• Scopri di più su Workload Manager