permissions.yaml

AccountAuthenticationMethodCreate:
  - role:organization:admin
AccountAuthenticationMethodDelete:
  - role:organization:admin
AccountAuthenticationMethodGet:
  - role:organization:admin
AccountAuthenticationMethodUpdate:
  - role:organization:admin
AccountAuthenticationMethodsList:
  - role:organization:admin
AlloyDbOmniGoogleCloudPrivateKeyIdentify:
  - service:data:write
AlloyDbOmniGoogleCloudPrivateKeyRemove:
  - service:data:write
AlloyDbOmniGoogleCloudPrivateKeySet:
  - service:data:write
ApplicationUserAccessTokenCreate:
  - organization:app_users:write
ApplicationUserAccessTokenDelete:
  - organization:app_users:write
ApplicationUserAccessTokensList:
  - organization:app_users:write
ApplicationUserCreate:
  - organization:app_users:write
ApplicationUserDelete:
  - organization:app_users:write
ApplicationUserGet:
  - organization:app_users:write
ApplicationUserUpdate:
  - organization:app_users:write
ApplicationUsersList:
  - organization:app_users:write
BillingGroupCreditsClaim:
  - developer
  - operator
BillingGroupCreditsList:
  - developer
  - operator
  - read_only
BillingGroupEventList:
  - developer
  - operator
  - read_only
BillingGroupGet:
  - developer
  - operator
  - read_only
BillingGroupInvoiceCsvGet:
  - operator
BillingGroupInvoiceLinesList:
  - operator
BillingGroupInvoiceList:
  - developer
  - operator
  - read_only
BillingGroupProjectList:
  - developer
  - operator
  - read_only
ListProjectClouds:
  - project:services:write
ListProjectServiceTypes:
  - project:services:read
ListProjectVpcPeeringConnectionTypes:
  - project:networking:read
MySQLServiceQueryStatistics:
  - service:data:write
OrganizationAddressCreate:
  - organization:billing:write
OrganizationAddressDelete:
  - organization:billing:write
OrganizationAddressGet:
  - organization:billing:read
  - organization:billing:write
OrganizationAddressList:
  - organization:billing:read
  - organization:billing:write
OrganizationAddressUpdate:
  - organization:billing:write
OrganizationBillingGroupCreate:
  - organization:billing:write
OrganizationBillingGroupDelete:
  - organization:billing:write
OrganizationBillingGroupGet:
  - organization:billing:read
  - organization:billing:write
OrganizationBillingGroupList:
  - organization:billing:read
  - organization:billing:write
  - organization:projects:write
OrganizationBillingGroupUpdate:
  - organization:billing:write
OrganizationDomainAdd:
  - organization:domains:write
OrganizationDomainUpdate:
  - organization:domains:write
OrganizationDomainVerify:
  - organization:domains:write
OrganizationDomainsList:
  - organization:domains:write
OrganizationDomainsRemove:
  - organization:domains:write
OrganizationProjectsDelete:
  - organization:projects:write
OrganizationProjectsGet:
  - project:services:read
OrganizationProjectsUpdate:
  - organization:projects:write
OrganizationUserAuthenticationMethodsList:
  - organization:users:write
OrganizationUserDelete:
  - organization:users:write
OrganizationUserInvitationDelete:
  - organization:users:write
OrganizationUserInvitationsList:
  - organization:users:write
OrganizationUserInvite:
  - organization:users:write
OrganizationUserPasswordReset:
  - organization:users:write
OrganizationUserRevokeToken:
  - organization:users:write
OrganizationUserTokensList:
  - organization:users:write
OrganizationUserUpdate:
  - organization:users:write
OrganizationVpcCreate:
  - organization:networking:write
OrganizationVpcDelete:
  - organization:networking:write
OrganizationVpcGet:
  - organization:networking:read
OrganizationVpcList:
  - organization:networking:read
OrganizationVpcPeeringConnectionCreate:
  - organization:networking:write
OrganizationVpcPeeringConnectionDeleteById:
  - organization:networking:write
PGServiceAvailableExtensions:
  - service:data:write
PGServiceQueryStatistics:
  - service:data:write
ProjectAlertsList:
  - developer
  - operator
  - read_only
ProjectCreditsClaim:
  - developer
  - operator
ProjectCreditsList:
  - developer
  - operator
  - read_only
ProjectDelete:
  - organization:projects:write
ProjectDownloadSBOMReport:
  - developer
  - operator
  - read_only
ProjectGenerateSbomDownloadUrl:
  - developer
  - operator
  - read_only
ProjectGet:
  - project:services:read
ProjectGetEventLogs:
  - project:audit_logs:read
ProjectGetServiceLogs:
  - service:logs:read
ProjectInvoiceList:
  - developer
  - operator
  - read_only
ProjectKmsGetCA:
  - organization:projects:write
ProjectPrivatelinkAvailabilityList:
  - project:services:write
ProjectServicePlanList:
  - developer
  - operator
  - read_only
ProjectServicePlanPriceGet:
  - developer
  - operator
  - read_only
ProjectServicePlanSpecsGet:
  - developer
  - operator
  - read_only
ProjectServiceTagsList:
  - service:configuration:write
ProjectServiceTagsReplace:
  - service:configuration:write
ProjectServiceTagsUpdate:
  - service:configuration:write
ProjectServiceTypesGet:
  - developer
  - operator
  - read_only
ProjectServiceTypesList:
  - project:services:read
ProjectStaticIPAssociate:
  - service:configuration:write
ProjectStaticIPAvailabilityList:
  - developer
  - operator
  - read_only
ProjectStaticIPDissociate:
  - service:configuration:write
ProjectStaticIPPatch:
  - operator
ProjectTagsList:
  - developer
  - operator
  - read_only
ProjectUpdate:
  - organization:projects:write
ProjectUserList:
  - developer
  - operator
  - read_only
ServiceAlertsList:
  - developer
  - operator
  - read_only
ServiceBackupToAnotherRegionReport:
  - service:configuration:write
ServiceBackupsGet:
  - service:configuration:write
ServiceCancelQuery:
  - developer
  - operator
ServiceClickHouseCurrentQueries:
  - service:data:write
ServiceClickHouseDatabaseCreate:
  - service:data:write
ServiceClickHouseDatabaseDelete:
  - service:data:write
ServiceClickHouseDatabaseList:
  - service:data:write
ServiceClickHousePasswordReset:
  - service:data:write
  - service:users:write
ServiceClickHouseQuery:
  - service:data:write
ServiceClickHouseQueryStats:
  - service:data:write
ServiceClickHouseTieredStorageSummary:
  - service:data:write
ServiceClickHouseUserCreate:
  - service:data:write
  - service:users:write
ServiceClickHouseUserDelete:
  - service:data:write
  - service:users:write
ServiceClickHouseUserList:
  - service:data:write
  - service:users:write
ServiceCreate:
  - project:services:write
  - role:services:recover
ServiceDatabaseCreate:
  - developer
  - operator
ServiceDatabaseDelete:
  - developer
  - operator
ServiceDatabaseList:
  - developer
  - operator
  - read_only
ServiceDelete:
  - project:services:write
ServiceEnableWrites:
  - operator
ServiceFlinkCancelApplicationDeployment:
  - service:data:write
ServiceFlinkCancelJarApplicationDeployment:
  - service:data:write
ServiceFlinkCreateApplication:
  - service:data:write
ServiceFlinkCreateApplicationDeployment:
  - service:data:write
ServiceFlinkCreateApplicationVersion:
  - service:data:write
ServiceFlinkCreateJarApplication:
  - service:data:write
ServiceFlinkCreateJarApplicationDeployment:
  - service:data:write
ServiceFlinkCreateJarApplicationVersion:
  - service:data:write
ServiceFlinkDeleteApplication:
  - service:data:write
ServiceFlinkDeleteApplicationDeployment:
  - service:data:write
ServiceFlinkDeleteApplicationVersion:
  - service:data:write
ServiceFlinkDeleteJarApplication:
  - service:data:write
ServiceFlinkDeleteJarApplicationDeployment:
  - service:data:write
ServiceFlinkDeleteJarApplicationVersion:
  - service:data:write
ServiceFlinkGetApplication:
  - service:data:write
ServiceFlinkGetApplicationDeployment:
  - service:data:write
ServiceFlinkGetApplicationVersion:
  - service:data:write
ServiceFlinkGetJarApplication:
  - service:data:write
ServiceFlinkGetJarApplicationDeployment:
  - service:data:write
ServiceFlinkGetJarApplicationVersion:
  - service:data:write
ServiceFlinkJobDetails:
  - service:data:write
ServiceFlinkJobsList:
  - service:data:write
ServiceFlinkListApplicationDeployments:
  - service:data:write
ServiceFlinkListApplications:
  - service:data:write
ServiceFlinkListJarApplicationDeployments:
  - service:data:write
ServiceFlinkListJarApplications:
  - service:data:write
ServiceFlinkOverview:
  - service:data:write
ServiceFlinkStopApplicationDeployment:
  - service:data:write
ServiceFlinkStopJarApplicationDeployment:
  - service:data:write
ServiceFlinkUpdateApplication:
  - service:data:write
ServiceFlinkUpdateJarApplication:
  - service:data:write
ServiceFlinkValidateApplicationVersion:
  - service:data:write
ServiceGet:
  - project:services:read
ServiceGetMigrationStatus:
  - developer
  - operator
  - read_only
ServiceIntegrationCreate:
  - project:integrations:write
ServiceIntegrationDelete:
  - project:integrations:write
  - role:services:recover
ServiceIntegrationEndpointCreate:
  - project:integrations:write
ServiceIntegrationEndpointDelete:
  - project:integrations:write
ServiceIntegrationEndpointGet:
  - project:integrations:read
ServiceIntegrationEndpointList:
  - project:integrations:read
ServiceIntegrationEndpointTypes:
  - project:integrations:read
ServiceIntegrationEndpointUpdate:
  - project:integrations:write
ServiceIntegrationGet:
  - project:integrations:read
ServiceIntegrationList:
  - project:integrations:read
  - role:services:recover
ServiceIntegrationTypes:
  - project:integrations:read
ServiceIntegrationUpdate:
  - project:integrations:write
ServiceKafkaAclAdd:
  - service:data:write
ServiceKafkaAclDelete:
  - service:data:write
ServiceKafkaAclList:
  - service:data:write
ServiceKafkaConnectCreateConnector:
  - service:data:write
ServiceKafkaConnectDeleteConnector:
  - service:data:write
ServiceKafkaConnectEditConnector:
  - service:data:write
ServiceKafkaConnectGetAvailableConnectors:
  - service:data:write
ServiceKafkaConnectGetConnectorConfiguration:
  - service:data:write
ServiceKafkaConnectGetConnectorStatus:
  - service:data:write
ServiceKafkaConnectList:
  - service:data:write
ServiceKafkaConnectPauseConnector:
  - service:data:write
ServiceKafkaConnectRestartConnector:
  - service:data:write
ServiceKafkaConnectRestartConnectorTask:
  - service:data:write
ServiceKafkaConnectResumeConnector:
  - service:data:write
ServiceKafkaMirrorMakerCreateReplicationFlow:
  - service:data:write
ServiceKafkaMirrorMakerDeleteReplicationFlow:
  - service:data:write
ServiceKafkaMirrorMakerGetReplicationFlow:
  - service:data:write
ServiceKafkaMirrorMakerGetReplicationFlows:
  - service:data:write
ServiceKafkaMirrorMakerPatchReplicationFlow:
  - service:data:write
ServiceKafkaNativeAclAdd:
  - service:data:write
ServiceKafkaNativeAclDelete:
  - service:data:write
ServiceKafkaNativeAclGet:
  - service:data:write
ServiceKafkaNativeAclList:
  - service:data:write
ServiceKafkaQuotaCreate:
  - service:data:write
ServiceKafkaQuotaDelete:
  - service:data:write
ServiceKafkaQuotaDescribe:
  - service:data:write
ServiceKafkaQuotaList:
  - service:data:write
ServiceKafkaTieredStorageStorageUsageByTopic:
  - service:data:write
ServiceKafkaTieredStorageStorageUsageTotal:
  - service:data:write
ServiceKafkaTieredStorageSummary:
  - service:data:write
ServiceKafkaTopicCreate:
  - developer
  - operator
ServiceKafkaTopicDelete:
  - service:data:write
ServiceKafkaTopicGet:
  - service:data:write
ServiceKafkaTopicList:
  - service:data:write
ServiceKafkaTopicMessageList:
  - service:data:write
ServiceKafkaTopicMessageProduce:
  - service:data:write
ServiceKafkaTopicUpdate:
  - service:data:write
ServiceKmsGetCA:
  - developer
  - operator
  - read_only
ServiceKmsGetKeypair:
  - operator
ServiceList:
  - project:services:read
ServiceMaintenanceStart:
  - role:services:maintenance
ServiceMetricsFetch:
  - developer
  - operator
  - read_only
ServiceOpenSearchAclGet:
  - service:data:write
ServiceOpenSearchAclSet:
  - service:data:write
ServiceOpenSearchAclUpdate:
  - service:data:write
ServiceOpenSearchIndexDelete:
  - service:data:write
ServiceOpenSearchIndexList:
  - service:data:write
ServiceOpenSearchSecurityGet:
  - service:data:write
ServiceOpenSearchSecurityReset:
  - service:data:write
ServiceOpenSearchSecuritySet:
  - service:data:write
ServicePGBouncerCreate:
  - service:data:write
ServicePGBouncerDelete:
  - service:data:write
ServicePGBouncerUpdate:
  - service:data:write
ServicePrivatelinkAWSConnectionList:
  - service:configuration:write
ServicePrivatelinkAWSCreate:
  - service:configuration:write
ServicePrivatelinkAWSDelete:
  - service:configuration:write
ServicePrivatelinkAWSGet:
  - service:configuration:write
ServicePrivatelinkAWSUpdate:
  - service:configuration:write
ServicePrivatelinkAzureConnectionApproval:
  - service:configuration:write
ServicePrivatelinkAzureConnectionList:
  - service:configuration:write
ServicePrivatelinkAzureConnectionUpdate:
  - service:configuration:write
ServicePrivatelinkAzureCreate:
  - service:configuration:write
ServicePrivatelinkAzureDelete:
  - service:configuration:write
ServicePrivatelinkAzureGet:
  - service:configuration:write
ServicePrivatelinkAzureUpdate:
  - service:configuration:write
ServiceQueryActivity:
  - developer
  - operator
  - read_only
ServiceQueryStatisticsReset:
  - developer
  - operator
ServiceSchemaRegistryAclAdd:
  - service:data:write
ServiceSchemaRegistryAclDelete:
  - service:data:write
ServiceSchemaRegistryAclList:
  - service:data:write
ServiceSchemaRegistryCompatibility:
  - service:data:write
ServiceSchemaRegistryGlobalConfigGet:
  - service:data:write
ServiceSchemaRegistryGlobalConfigPut:
  - service:data:write
ServiceSchemaRegistrySchemaGet:
  - service:data:write
ServiceSchemaRegistrySubjectConfigGet:
  - service:data:write
ServiceSchemaRegistrySubjectConfigPut:
  - service:data:write
ServiceSchemaRegistrySubjectDelete:
  - service:data:write
ServiceSchemaRegistrySubjectVersionDelete:
  - service:data:write
ServiceSchemaRegistrySubjectVersionGet:
  - service:data:write
ServiceSchemaRegistrySubjectVersionPost:
  - service:data:write
ServiceSchemaRegistrySubjectVersionSchemaGet:
  - service:data:write
ServiceSchemaRegistrySubjectVersionsGet:
  - service:data:write
ServiceSchemaRegistrySubjects:
  - service:data:write
ServiceTaskCreate:
  - operator
ServiceTaskGet:
  - operator
ServiceThanosStorageSummary:
  - service:data:write
ServiceUpdate:
  - project:services:write
  - role:services:maintenance
  - role:services:recover
  - service:configuration:write
ServiceUserCreate:
  - service:users:write
ServiceUserCredentialsModify:
  - service:users:write
ServiceUserCredentialsReset:
  - service:users:write
ServiceUserDelete:
  - service:users:write
ServiceUserGet:
  - service:configuration:write
  - service:users:write
StaticIPCreate:
  - operator
StaticIPList:
  - developer
  - operator
  - read_only
UserGroupCreate:
  - organization:groups:write
UserGroupDelete:
  - organization:groups:write
UserGroupMembersUpdate:
  - organization:groups:write
UserGroupUpdate:
  - organization:groups:write
VpcCreate:
  - project:networking:write
VpcDelete:
  - project:networking:write
VpcGet:
  - project:networking:read
VpcList:
  - project:networking:read
VpcPeeringConnectionCreate:
  - project:networking:write
VpcPeeringConnectionDelete:
  - project:networking:write
VpcPeeringConnectionUpdate:
  - project:networking:write
VpcPeeringConnectionWithRegionDelete:
  - project:networking:write
VpcPeeringConnectionWithResourceGroupDelete:
  - project:networking:write