| roles/modelarmor.floorSettingsAdmin |
Grants full access to all Model Armor Floor Setting resources. Intended for administrators & owners. |
Model Armor Floor Setting Admin |
['modelarmor.floorSettings.get', 'modelarmor.floorSettings.update', 'modelarmor.locations.get', 'modelarmor.locations.list', 'resourcemanager.folders.get', 'resourcemanager.folders.list', 'resourcemanager.organizations.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/modelarmor.admin |
Grants full access to all modelarmor resources. Intended for administrators & owners. |
Model Armor Admin |
['modelarmor.locations.get', 'modelarmor.locations.list', 'modelarmor.templates.create', 'modelarmor.templates.delete', 'modelarmor.templates.get', 'modelarmor.templates.list', 'modelarmor.templates.update', 'modelarmor.templates.useToSanitizeModelResponse', 'modelarmor.templates.useToSanitizeUserPrompt', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/modelarmor.calloutUser |
Grants access to use Model Armor Callout service. Intended for users & applications which plan to use Model Armor Callout service. |
Model Armor Callout User |
['modelarmor.callouts.invoke', 'modelarmor.locations.get', 'modelarmor.locations.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/modelarmor.floorSettingsViewer |
Grants read access to all Model Armor Floor Setting resources. Intended for viewers. |
Model Armor Floor Setting Viewer |
['modelarmor.floorSettings.get', 'modelarmor.locations.get', 'modelarmor.locations.list', 'resourcemanager.folders.get', 'resourcemanager.folders.list', 'resourcemanager.organizations.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/modelarmor.viewer |
Grants read access to all model armor resources. Intended for viewers. |
Model Armor Viewer |
['modelarmor.locations.get', 'modelarmor.locations.list', 'modelarmor.templates.get', 'modelarmor.templates.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/modelarmor.serviceAgent |
Gives Model Armor Service Account permission to make DLP calls. |
Model Armor Service Agent |
['dlp.analyzeRiskTemplates.get', 'dlp.analyzeRiskTemplates.list', 'dlp.deidentifyTemplates.get', 'dlp.deidentifyTemplates.list', 'dlp.inspectFindings.list', 'dlp.inspectTemplates.get', 'dlp.inspectTemplates.list', 'dlp.jobTriggers.get', 'dlp.jobTriggers.list', 'dlp.jobs.get', 'dlp.jobs.list', 'dlp.kms.encrypt', 'dlp.locations.get', 'dlp.locations.list', 'dlp.storedInfoTypes.get', 'dlp.storedInfoTypes.list', 'serviceusage.services.use'] |
|
GA |
| roles/modelarmor.user |
Grants access to sanitize APIs for templates. Intended for users & applications which plan to use a template. |
Model Armor User |
['modelarmor.locations.get', 'modelarmor.locations.list', 'modelarmor.templates.useToSanitizeModelResponse', 'modelarmor.templates.useToSanitizeUserPrompt', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |