[Google Cloud] IAM - Permissions Change Log

1 view
Skip to first unread message

Cloud IAM - Permissions Change Log

unread,
Sep 13, 2019, 3:30:28 AM9/13/19
to gcp-release-notes...@googlegroups.com

[Google Cloud] IAM - Permissions Change Log

Link to Cloud IAM - Permissions Change Log

Upcoming Cloud IAM changes for the week of 2019-09-09

Posted: 08 Sep 2019 05:00 PM PDT

Service Change Description
Firebase Remote Config Now GA

The role roles/cloudconfig.admin (Firebase Remote Config Admin) is now GA.

Firebase Remote Config Now GA

The role roles/cloudconfig.viewer (Firebase Remote Config Viewer) is now GA.

Firebase Now GA

The role roles/firebase.admin (Firebase Admin) is now GA.

Firebase Now GA

The role roles/firebase.analyticsAdmin (Firebase Analytics Admin) is now GA.

Firebase Now GA

The role roles/firebase.analyticsViewer (Firebase Analytics Viewer) is now GA.

Firebase Now GA

The role roles/firebase.developAdmin (Firebase Develop Admin) is now GA.

Firebase Now GA

The role roles/firebase.developViewer (Firebase Develop Viewer) is now GA.

Firebase Now GA

The role roles/firebase.growthAdmin (Firebase Grow Admin) is now GA.

Firebase Now GA

The role roles/firebase.growthViewer (Firebase Grow Viewer) is now GA.

Firebase Now GA

The role roles/firebase.qualityAdmin (Firebase Quality Admin) is now GA.

Firebase Now GA

The role roles/firebase.qualityViewer (Firebase Quality Viewer) is now GA.

Firebase Now GA

The role roles/firebase.viewer (Firebase Viewer) is now GA.

Firebase Authentication Now GA

The role roles/firebaseauth.admin (Firebase Authentication Admin) is now GA.

Firebase Authentication Now GA

The role roles/firebaseauth.viewer (Firebase Authentication Viewer) is now GA.

Firebase Crashlytics Now GA

The role roles/firebasecrashlytics.admin (Firebase Crashlytics Admin) is now GA.

Firebase Crashlytics Now GA

The role roles/firebasecrashlytics.viewer (Firebase Crashlytics Viewer) is now GA.

Firebase Realtime Database Now GA

The role roles/firebasedatabase.admin (Firebase Realtime Database Admin) is now GA.

Firebase Realtime Database Now GA

The role roles/firebasedatabase.viewer (Firebase Realtime Database Viewer) is now GA.

Firebase Dynamic Links Now GA

The role roles/firebasedynamiclinks.admin (Firebase Dynamic Links Admin) is now GA.

Firebase Dynamic Links Now GA

The role roles/firebasedynamiclinks.viewer (Firebase Dynamic Links Viewer) is now GA.

Firebase Hosting Now GA

The role roles/firebasehosting.admin (Firebase Hosting Admin) is now GA.

Firebase Hosting Now GA

The role roles/firebasehosting.viewer (Firebase Hosting Viewer) is now GA.

Firebase Cloud Messaging Now GA

The role roles/firebasenotifications.admin (Firebase Cloud Messaging Admin) is now GA.

Firebase Cloud Messaging Now GA

The role roles/firebasenotifications.viewer (Firebase Cloud Messaging Viewer) is now GA.

Firebase Performance Monitoring Now GA

The role roles/firebaseperformance.admin (Firebase Performance Reporting Admin) is now GA.

Firebase Performance Monitoring Now GA

The role roles/firebaseperformance.viewer (Firebase Performance Reporting Viewer) is now GA.

Firebase Predictions Now GA

The role roles/firebasepredictions.admin (Firebase Predictions Admin) is now GA.

Firebase Predictions Now GA

The role roles/firebasepredictions.viewer (Firebase Predictions Viewer) is now GA.

Firebase Remote Config Now GA cloudconfig.configs.get
cloudconfig.configs.update
Cloud DNS Now GA dns.networks.bindPrivateDNSPolicy
dns.policies.create
dns.policies.delete
dns.policies.get
dns.policies.getIamPolicy
dns.policies.list
dns.policies.setIamPolicy
dns.policies.update
Firebase Now GA firebase.billingPlans.get
firebase.billingPlans.update
firebase.clients.create
firebase.clients.delete
firebase.clients.get
firebase.links.create
firebase.links.delete
firebase.links.list
firebase.links.update
firebase.projects.delete
firebase.projects.get
firebase.projects.update
Firebase Authentication Now GA firebaseauth.configs.create
firebaseauth.configs.get
firebaseauth.configs.getHashConfig
firebaseauth.configs.update
firebaseauth.users.create
firebaseauth.users.createSession
firebaseauth.users.delete
firebaseauth.users.get
firebaseauth.users.sendEmail
firebaseauth.users.update
Firebase Crashlytics Now GA firebasecrashlytics.config.get
firebasecrashlytics.config.update
firebasecrashlytics.data.get
firebasecrashlytics.issues.get
firebasecrashlytics.issues.list
firebasecrashlytics.issues.update
firebasecrashlytics.sessions.get
Firebase Realtime Database Now GA firebasedatabase.instances.create
firebasedatabase.instances.get
firebasedatabase.instances.list
firebasedatabase.instances.update
Firebase Dynamic Links Now GA firebasedynamiclinks.destinations.list
firebasedynamiclinks.destinations.update
firebasedynamiclinks.domains.create
firebasedynamiclinks.domains.delete
firebasedynamiclinks.domains.get
firebasedynamiclinks.domains.list
firebasedynamiclinks.domains.update
firebasedynamiclinks.links.create
firebasedynamiclinks.links.get
firebasedynamiclinks.links.list
firebasedynamiclinks.links.update
firebasedynamiclinks.stats.get
Firebase Hosting Now GA firebasehosting.sites.create
firebasehosting.sites.delete
firebasehosting.sites.get
firebasehosting.sites.list
firebasehosting.sites.update
Firebase Cloud Messaging Now GA firebasenotifications.messages.create
firebasenotifications.messages.delete
firebasenotifications.messages.get
firebasenotifications.messages.list
firebasenotifications.messages.update
Firebase Performance Monitoring Now GA firebaseperformance.config.create
firebaseperformance.config.delete
firebaseperformance.config.update
firebaseperformance.data.get
Firebase Predictions Now GA firebasepredictions.predictions.create
firebasepredictions.predictions.delete
firebasepredictions.predictions.list
firebasepredictions.predictions.update
NetApp Cloud Volumes Service Added netappcloudvolumes.activeDirectories.create
netappcloudvolumes.activeDirectories.delete
netappcloudvolumes.activeDirectories.get
netappcloudvolumes.activeDirectories.list
netappcloudvolumes.activeDirectories.update
netappcloudvolumes.ipRanges.list
netappcloudvolumes.regions.list
netappcloudvolumes.serviceLevels.list
netappcloudvolumes.snapshots.create
netappcloudvolumes.snapshots.delete
netappcloudvolumes.snapshots.get
netappcloudvolumes.snapshots.list
netappcloudvolumes.snapshots.update
netappcloudvolumes.volumes.create
netappcloudvolumes.volumes.delete
netappcloudvolumes.volumes.get
netappcloudvolumes.volumes.list
netappcloudvolumes.volumes.update
Event Threat Detection Supported In Custom Roles threatdetection.detectorSettings.clear
threatdetection.detectorSettings.get
threatdetection.detectorSettings.update
threatdetection.sinkSettings.get
threatdetection.sinkSettings.update
threatdetection.sourceSettings.get
threatdetection.sourceSettings.update

Cloud IAM changes as of 2019-09-06

Posted: 05 Sep 2019 05:00 PM PDT

Service Change Description
Primitive Role Role Updated

The following permissions have been added to the role roles/owner (Owner):

dataprocessing.iamaccesshistory.exportData
Serverless VPC Access Now GA

The role roles/vpaccess.user (Serverless VPC Access User) is now GA.

Serverless VPC Access Now GA

The role roles/vpaccess.viewer (Serverless VPC Access Viewer) is now GA.

Serverless VPC Access Now GA

The role roles/vpcaccess.admin (Serverless VPC Access Admin) is now GA.

Compute Engine Added compute.externalVpnGateways.create
compute.externalVpnGateways.delete
compute.externalVpnGateways.get
compute.externalVpnGateways.list
compute.externalVpnGateways.setLabels
compute.externalVpnGateways.use
Compute Engine Supported In Custom Roles compute.externalVpnGateways.create
compute.externalVpnGateways.delete
compute.externalVpnGateways.get
compute.externalVpnGateways.list
compute.externalVpnGateways.setLabels
compute.externalVpnGateways.use
Compute Engine Now GA compute.externalVpnGateways.create
compute.externalVpnGateways.delete
compute.externalVpnGateways.get
compute.externalVpnGateways.list
compute.externalVpnGateways.setLabels
compute.externalVpnGateways.use
Serverless VPC Access Now GA vpcaccess.connectors.create
vpcaccess.connectors.delete
vpcaccess.connectors.get
vpcaccess.connectors.list
vpcaccess.connectors.use
vpcaccess.locations.list
vpcaccess.operations.get
vpcaccess.operations.list

Cloud IAM changes as of 2019-08-30

Posted: 29 Aug 2019 05:00 PM PDT

Service Change Description
Firebase Test Lab Role Updated

The following permissions have been added to the role roles/cloudtestservice.testAdmin (Firebase Test Lab Admin):

firebase.clients.get
firebase.projects.get
Firebase Test Lab Role Updated

The following permissions have been added to the role roles/cloudtestservice.testViewer (Firebase Test Lab Viewer):

firebase.clients.get
firebase.projects.get
Compute Engine Role Updated

The following permissions have been added to the role roles/compute.orgSecurityPolicyAdmin (Compute Organization Security Policy Admin):

compute.globalOperations.get
compute.globalOperations.getIamPolicy
compute.globalOperations.list
compute.globalOperations.setIamPolicy
Compute Engine Role Updated

The following permissions have been added to the role roles/compute.orgSecurityPolicyUser (Compute Organization Security Policy User):

compute.globalOperations.get
compute.globalOperations.getIamPolicy
compute.globalOperations.list
compute.globalOperations.setIamPolicy
Compute Engine Role Updated

The following permissions have been added to the role roles/compute.orgSecurityResourceAdmin (Compute Organization Resource Admin):

compute.globalOperations.get
compute.globalOperations.getIamPolicy
compute.globalOperations.list
compute.globalOperations.setIamPolicy

Cloud IAM changes as of 2019-08-23

Posted: 22 Aug 2019 05:00 PM PDT

Service Change Description
Cloud Translation Now GA

The role roles/cloudtranslate.admin (Cloud Translation API Admin) is now GA.

Cloud Translation Now GA

The role roles/cloudtranslate.editor (Cloud Translation API Editor) is now GA.

Cloud Translation Now GA

The role roles/cloudtranslate.user (Cloud Translation API User) is now GA.

Cloud Translation Now GA

The role roles/cloudtranslate.viewer (Cloud Translation API Viewer) is now GA.

Cloud Healthcare API Role Updated

The following permissions have been added to the role roles/healthcare.dicomEditor (Healthcare DICOM Editor):

healthcare.dicomStores.dicomWebDelete
Cloud Translation Now GA cloudtranslate.generalModels.batchPredict
cloudtranslate.generalModels.get
cloudtranslate.generalModels.predict
cloudtranslate.glossaries.batchPredict
cloudtranslate.glossaries.create
cloudtranslate.glossaries.delete
cloudtranslate.glossaries.get
cloudtranslate.glossaries.list
cloudtranslate.glossaries.predict
cloudtranslate.languageDetectionModels.predict
cloudtranslate.locations.get
cloudtranslate.locations.list
cloudtranslate.operations.cancel
cloudtranslate.operations.delete
cloudtranslate.operations.get
cloudtranslate.operations.list
cloudtranslate.operations.wait

Cloud IAM changes as of 2019-08-16

Posted: 15 Aug 2019 05:00 PM PDT

Service Change Description
Cloud Translation Supported In Custom Roles cloudtranslate.locations.get
cloudtranslate.locations.list
Compute Engine Now GA compute.networks.updatePeering
Data Catalog Added datacatalog.entries.create
datacatalog.entries.delete
datacatalog.entries.get
datacatalog.entries.getIamPolicy
datacatalog.entries.setIamPolicy
datacatalog.entries.update
datacatalog.entryGroups.create
datacatalog.entryGroups.delete
datacatalog.entryGroups.get
datacatalog.entryGroups.getIamPolicy
datacatalog.entryGroups.setIamPolicy
Data Catalog Supported In Custom Roles datacatalog.entries.create
datacatalog.entries.delete
datacatalog.entries.get
datacatalog.entries.getIamPolicy
datacatalog.entries.setIamPolicy
datacatalog.entries.update
datacatalog.entryGroups.create
datacatalog.entryGroups.delete
datacatalog.entryGroups.get
datacatalog.entryGroups.getIamPolicy
datacatalog.entryGroups.setIamPolicy

Cloud IAM changes as of 2019-08-09

Posted: 08 Aug 2019 05:00 PM PDT

Service Change Description
Compute Engine Role Updated

The following permissions have been added to the role roles/compute.orgSecurityPolicyAdmin (Compute Organization Security Policy Admin):

compute.projects.get
resourcemanager.projects.get
resourcemanager.projects.list
serviceusage.quotas.get
serviceusage.services.get
serviceusage.services.list
Compute Engine Role Updated

The following permissions have been added to the role roles/compute.orgSecurityPolicyUser (Compute Organization Security Policy User):

compute.projects.get
resourcemanager.projects.get
resourcemanager.projects.list
serviceusage.quotas.get
serviceusage.services.get
serviceusage.services.list
Compute Engine Role Updated

The following permissions have been added to the role roles/compute.orgSecurityResourceAdmin (Compute organization resource Admin):

compute.projects.get
resourcemanager.projects.get
resourcemanager.projects.list
serviceusage.quotas.get
serviceusage.services.get
serviceusage.services.list
Cloud Storage Now GA

The role roles/storage.hmacKeyAdmin (Storage HMAC Key Admin) is now GA.

Cloud Storage Added storage.hmacKeys.create
storage.hmacKeys.delete
storage.hmacKeys.get
storage.hmacKeys.list
storage.hmacKeys.update
Cloud Storage Supported In Custom Roles storage.hmacKeys.create
storage.hmacKeys.delete
storage.hmacKeys.get
storage.hmacKeys.list
storage.hmacKeys.update
Cloud Storage Now GA storage.hmacKeys.create
storage.hmacKeys.delete
storage.hmacKeys.get
storage.hmacKeys.list
storage.hmacKeys.update
You are subscribed to email updates from Cloud IAM - Permissions Change Log.
To stop receiving these emails, you may unsubscribe now.
Email delivery powered by Google
Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States
Reply all
Reply to author
Forward
0 new messages