[Google Cloud] IAM - Permissions Change Log

121 views
Skip to first unread message

Cloud IAM - Permissions Change Log

unread,
May 22, 2021, 3:54:47 AM5/22/21
to gcp-release-notes...@googlegroups.com

[Google Cloud] IAM - Permissions Change Log

Link to Cloud IAM - Permissions Change Log

Upcoming Cloud IAM changes for the week of 2021-05-17

Posted: 16 May 2021 05:00 PM PDT

Service Change Description
Anthos Service Mesh Role Updated

The following permissions have been added to the role roles/anthosservicemesh.serviceAgent (Anthos Service Mesh Service Agent):

container.clusters.get
Apigee Role Updated

The following permissions have been added to the role roles/apigee.developerAdmin (Apigee Developer Admin):

apigee.developersubscriptions.create
apigee.developersubscriptions.get
apigee.developersubscriptions.list
apigee.developersubscriptions.update
apigee.rateplans.get
apigee.rateplans.list
Apigee Role Updated

The following permissions have been added to the role roles/apigee.serviceAgent (Apigee Service Agent):

iam.serviceAccounts.getAccessToken
iam.serviceAccounts.getOpenIdToken
Content Warehouse Now GA

The role roles/contentwarehouse.serviceAgent (Content Warehouse Service Agent) is now GA.

Resource Settings Now GA

The role roles/resourcesettings.admin (Resource Settings Administrator) is now GA.

Resource Settings Now GA

The role roles/resourcesettings.viewer (Resource Settings Viewer) is now GA.

Cloud Asset Inventory Added cloudasset.assets.analyzeMove
Cloud Asset Inventory Now GA cloudasset.assets.analyzeMove
Dialogflow Added dialogflow.securitySettings.create
dialogflow.securitySettings.delete
dialogflow.securitySettings.get
dialogflow.securitySettings.list
dialogflow.securitySettings.update
Dialogflow Now GA dialogflow.securitySettings.create
dialogflow.securitySettings.delete
dialogflow.securitySettings.get
dialogflow.securitySettings.list
dialogflow.securitySettings.update
Cloud DNS Added dns.resourceRecordSets.get
Cloud DNS Supported In Custom Roles dns.resourceRecordSets.get
Cloud DNS Now GA dns.resourceRecordSets.get
Resource Settings Added resourcesettings.settings.get
resourcesettings.settings.list
resourcesettings.settings.update
Resource Settings Supported In Custom Roles resourcesettings.settings.get
resourcesettings.settings.list
Resource Settings Now GA resourcesettings.settings.get
resourcesettings.settings.list
resourcesettings.settings.update

Cloud IAM changes as of 2021-05-14

Posted: 13 May 2021 05:00 PM PDT

Service Change Description
Cloud Data Loss Prevention Now GA

The role roles/dlp.columnDataProfilesReader (DLP Column Data Profiles Reader) is now GA.

Cloud Data Loss Prevention Now GA

The role roles/dlp.dataProfilesReader (DLP Data Profiles Reader) is now GA.

Cloud Data Loss Prevention Now GA

The role roles/dlp.estimatesAdmin (DLP Cost Estimation) is now GA.

Cloud Data Loss Prevention Now GA

The role roles/dlp.projectDataProfilesReader (DLP Project Data Profiles Reader) is now GA.

Cloud Data Loss Prevention Now GA

The role roles/dlp.tableDataProfilesReader (DLP Table Data Profiles Reader) is now GA.

Security Command Center Role Updated

The following permissions have been added to the role roles/securitycenter.admin (Security Center Admin):

resourcemanager.folders.get
Security Command Center Role Updated

The following permissions have been added to the role roles/securitycenter.adminEditor (Security Center Admin Editor):

resourcemanager.folders.get
Security Command Center Role Updated

The following permissions have been added to the role roles/securitycenter.adminViewer (Security Center Admin Viewer):

resourcemanager.folders.get
resourcemanager.projects.get
Security Command Center Role Updated

The following permissions have been added to the role roles/securitycenter.assetsViewer (Security Center Assets Viewer):

resourcemanager.folders.get
resourcemanager.projects.get
Security Command Center Role Updated

The following permissions have been added to the role roles/securitycenter.findingsEditor (Security Center Findings Editor):

resourcemanager.folders.get
resourcemanager.projects.get
Security Command Center Role Updated

The following permissions have been added to the role roles/securitycenter.findingsViewer (Security Center Findings Viewer):

resourcemanager.folders.get
resourcemanager.projects.get
Security Command Center Role Updated

The following permissions have been added to the role roles/securitycenter.securityHealthAnalyticsServiceAgent (Security Health Analytics Service Agent):

resourcemanager.folders.get
Cloud Asset Inventory Added cloudasset.assets.listCloudkmsCryptoKeys
Google Cloud Support Added cloudsupport.accounts.purchase
Google Cloud Support Supported In Custom Roles cloudsupport.accounts.purchase
Google Cloud Support Now GA cloudsupport.accounts.purchase
Dataflow Now GA dataflow.jobs.snapshot
dataflow.snapshots.delete
dataflow.snapshots.get
dataflow.snapshots.list
Cloud Data Loss Prevention Added dlp.columnDataProfiles.get
dlp.columnDataProfiles.list
dlp.estimates.cancel
dlp.estimates.create
dlp.estimates.delete
dlp.estimates.get
dlp.estimates.list
dlp.projectDataProfiles.get
dlp.projectDataProfiles.list
dlp.tableDataProfiles.get
dlp.tableDataProfiles.list
Cloud Data Loss Prevention Now GA dlp.columnDataProfiles.get
dlp.columnDataProfiles.list
dlp.estimates.cancel
dlp.estimates.create
dlp.estimates.delete
dlp.estimates.get
dlp.estimates.list
dlp.projectDataProfiles.get
dlp.projectDataProfiles.list
dlp.tableDataProfiles.get
dlp.tableDataProfiles.list
Cloud Logging Added logging.fields.access
Cloud Logging Supported In Custom Roles logging.fields.access
You are subscribed to email updates from Cloud IAM - Permissions Change Log.
To stop receiving these emails, you may unsubscribe now.
Email delivery powered by Google
Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States
Reply all
Reply to author
Forward
0 new messages