| roles/accessapproval.configEditor |
Ability to update the Access Approval configuration |
Access Approval Config Editor |
['accessapproval.serviceAccounts.get', 'accessapproval.settings.delete', 'accessapproval.settings.get', 'accessapproval.settings.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/accessapproval.invalidator |
Ability to invalidate existing approved approval requests |
Access Approval Invalidator |
['accessapproval.requests.invalidate', 'accessapproval.serviceAccounts.get', 'accessapproval.settings.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/accessapproval.viewer |
Ability to view access approval requests and configuration |
Access Approval Viewer |
['accessapproval.requests.get', 'accessapproval.requests.list', 'accessapproval.serviceAccounts.get', 'accessapproval.settings.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/accessapproval.approver |
Ability to view or act on access approval requests and view configuration. |
Access Approval Approver |
['accessapproval.requests.approve', 'accessapproval.requests.dismiss', 'accessapproval.requests.get', 'accessapproval.requests.invalidate', 'accessapproval.requests.list', 'accessapproval.serviceAccounts.get', 'accessapproval.settings.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |