Escopo
project
Permissões
—
Role ID
roles/ownerEsta é uma role privilegiada — concede capacidades de controle elevado. Aplique o princípio do menor privilégio e monitore atribuições via Cloud Audit Logs.
Project Owner
Full control over the project and all resources
Descrição
All Editor permissions, plus permissions for actions like the following: Completing sensitive tasks, like managing tag bindings for Compute Engine resources; Managing roles and permissions for a project and all resources within the project; Setting up billing for a project.
O Google não publica a lista de permissões das basic roles na documentação. Use `gcloud iam roles describe <roleId>` ou o console para obtê-la.
gcloud iam roles describe roles/ownerRole Definition (JSON)
{
"name": "roles/owner",
"title": "Owner",
"description": "All Editor permissions, plus permissions for actions like the following: Completing sensitive tasks, like managing tag bindings for Compute Engine resources; Managing roles and permissions for a project and all resources within the project; Setting up billing for a project.",
"stage": "GA",
"includedPermissions": []
}Roles relacionadasManagement
Access Approval Admin
Admin role for Access Approval
Access Approval Approver
Ability to view or act on access approval requests and view configuration.
Access Approval Config Editor
Ability to update the Access Approval configuration
Access Approval Editor
Editor role for Access Approval
Access Approval Invalidator
Ability to invalidate existing approved approval requests