Voltar

Compute Engine Service Agent

GCP IAM · Compute · Specialized

Compute Engine Service Agent

Privilegiada
SpecializedIAM ScopeCompute

Dado verificado em · Fonte

Escopo
project
Permissões
100
Role IDroles/compute.serviceAgent

Esta é uma role privilegiada — concede capacidades de controle elevado. Aplique o princípio do menor privilégio e monitore atribuições via Cloud Audit Logs.

Specialized

Narrow-scope role for a specific action or use case

Descrição

Gives Compute Engine Service Account access to assert service account authority. Includes access to service accounts.

Permissions(100)

Carregando permissões…

Role Definition (JSON)

{
  "name": "roles/compute.serviceAgent",
  "title": "Compute Engine Service Agent",
  "description": "Gives Compute Engine Service Account access to assert service account authority. Includes access to service accounts.",
  "stage": "GA",
  "includedPermissions": []
}

Roles relacionadasCompute

Appengine Admin
Admin role for appengine
App Engine Admin
Read/Write/Modify access to all application configuration and settings. To deploy new versions, a principal must have the Service Account User (roles/iam.serviceAccountUser) role on the assigned App Engine service account, and the Cloud Build Editor (roles/cloudbuild.builds.editor), and Cloud Storage Object Admin (roles/storage.objectAdmin) roles on the project.
App Engine Creator
Ability to create the App Engine resource for the project.
App Engine Viewer
Read-only access to all application configuration and settings.
App Engine Code Viewer
Read-only access to all application configuration, settings, and deployed source code.
Docs GCP