| roles/networksecurity.interceptEndpointAdmin |
Enables full access to intercept resources on the consumer's side. |
Intercept Endpoint Admin |
['networksecurity.interceptEndpointGroupAssociations.create', 'networksecurity.interceptEndpointGroupAssociations.delete', 'networksecurity.interceptEndpointGroupAssociations.get', 'networksecurity.interceptEndpointGroupAssociations.list', 'networksecurity.interceptEndpointGroupAssociations.update', 'networksecurity.interceptEndpointGroups.create', 'networksecurity.interceptEndpointGroups.delete', 'networksecurity.interceptEndpointGroups.get', 'networksecurity.interceptEndpointGroups.list', 'networksecurity.interceptEndpointGroups.update', 'networksecurity.interceptEndpointGroups.use', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/networksecurity.firewallEndpointAdmin |
Enables full access to firewall endpoint and firewall endpoint association resources. |
Firewall Endpoint Admin |
['networksecurity.firewallEndpointAssociations.create', 'networksecurity.firewallEndpointAssociations.delete', 'networksecurity.firewallEndpointAssociations.get', 'networksecurity.firewallEndpointAssociations.list', 'networksecurity.firewallEndpointAssociations.update', 'networksecurity.firewallEndpoints.create', 'networksecurity.firewallEndpoints.delete', 'networksecurity.firewallEndpoints.get', 'networksecurity.firewallEndpoints.list', 'networksecurity.firewallEndpoints.update', 'networksecurity.firewallEndpoints.use', 'networksecurity.operations.get', 'networksecurity.operations.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/networksecurity.mirroringEndpointAdmin |
Enables full access to mirroring resources on the consumer's side. |
Mirroring Endpoint Admin |
['networksecurity.mirroringEndpointGroupAssociations.create', 'networksecurity.mirroringEndpointGroupAssociations.delete', 'networksecurity.mirroringEndpointGroupAssociations.get', 'networksecurity.mirroringEndpointGroupAssociations.list', 'networksecurity.mirroringEndpointGroupAssociations.update', 'networksecurity.mirroringEndpointGroups.create', 'networksecurity.mirroringEndpointGroups.delete', 'networksecurity.mirroringEndpointGroups.get', 'networksecurity.mirroringEndpointGroups.list', 'networksecurity.mirroringEndpointGroups.update', 'networksecurity.mirroringEndpointGroups.use', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/networksecurity.mirroringDeploymentExternalUser |
Allows an external consumer to a producer's mirroringDeploymentGroup. |
Mirroring Deployment External User |
['networksecurity.mirroringDeploymentGroups.use'] |
|
BETA |
| roles/networksecurity.securityProfileAdmin |
Enables full access to security profile and security profile group resources. |
Security Profile Admin |
['networksecurity.operations.get', 'networksecurity.operations.list', 'networksecurity.securityProfileGroups.create', 'networksecurity.securityProfileGroups.delete', 'networksecurity.securityProfileGroups.get', 'networksecurity.securityProfileGroups.list', 'networksecurity.securityProfileGroups.update', 'networksecurity.securityProfileGroups.use', 'networksecurity.securityProfiles.create', 'networksecurity.securityProfiles.delete', 'networksecurity.securityProfiles.get', 'networksecurity.securityProfiles.list', 'networksecurity.securityProfiles.update', 'networksecurity.securityProfiles.use', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/networksecurity.dnsThreatDetectorViewer |
Enables view access to DNS Threat Detector resources. |
DNS Threat Detector Viewer |
['networksecurity.dnsThreatDetectors.get', 'networksecurity.dnsThreatDetectors.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/networksecurity.mirroringDeploymentViewer |
Enables read-only access to mirroring resources on the Producer's side. |
Mirroring Deployment Viewer |
['networksecurity.mirroringDeploymentGroups.get', 'networksecurity.mirroringDeploymentGroups.list', 'networksecurity.mirroringDeployments.get', 'networksecurity.mirroringDeployments.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/networksecurity.interceptDeploymentViewer |
Enables read-only access to intercept resources on the Producer's side. |
Intercept Deployment Viewer |
['networksecurity.interceptDeploymentGroups.get', 'networksecurity.interceptDeploymentGroups.list', 'networksecurity.interceptDeployments.get', 'networksecurity.interceptDeployments.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/networksecurity.mirroringEndpointUser |
Allows a consumer to connect their networks to a mirroringEndpointGroup. |
Mirroring Endpoint User |
['networksecurity.mirroringEndpointGroups.get', 'networksecurity.mirroringEndpointGroups.list', 'networksecurity.mirroringEndpointGroups.use'] |
|
BETA |
| roles/networksecurity.interceptEndpointViewer |
Enables read-only access to intercept resources on the Consumer's side. |
Intercept Endpoint Viewer |
['networksecurity.interceptEndpointGroupAssociations.get', 'networksecurity.interceptEndpointGroupAssociations.list', 'networksecurity.interceptEndpointGroups.get', 'networksecurity.interceptEndpointGroups.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/networksecurity.authzServiceAgent |
Allows the Network Security service to access dependent resources |
Network Security Authz Service Agent |
['compute.forwardingRules.list', 'compute.forwardingRules.update', 'compute.globalForwardingRules.list', 'compute.globalForwardingRules.update', 'networkservices.authzExtensions.list', 'networkservices.authzExtensions.use'] |
|
GA |
| roles/networksecurity.interceptDeploymentAdmin |
Enables full access to intercept resources on the Producer's side. |
Intercept Deployment Admin |
['networksecurity.interceptDeploymentGroups.create', 'networksecurity.interceptDeploymentGroups.delete', 'networksecurity.interceptDeploymentGroups.get', 'networksecurity.interceptDeploymentGroups.list', 'networksecurity.interceptDeploymentGroups.update', 'networksecurity.interceptDeploymentGroups.use', 'networksecurity.interceptDeployments.create', 'networksecurity.interceptDeployments.delete', 'networksecurity.interceptDeployments.get', 'networksecurity.interceptDeployments.list', 'networksecurity.interceptDeployments.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/networksecurity.interceptDeploymentUser |
Allows a consumer to view and connect to a producer's interceptDeploymentGroup. |
Intercept Deployment User |
['networksecurity.interceptDeploymentGroups.get', 'networksecurity.interceptDeploymentGroups.list', 'networksecurity.interceptDeploymentGroups.use'] |
|
BETA |
| roles/networksecurity.mirroringDeploymentAdmin |
Enables full access to mirroring resources on the Producer's side. |
Mirroring Deployment Admin |
['networksecurity.mirroringDeploymentGroups.create', 'networksecurity.mirroringDeploymentGroups.delete', 'networksecurity.mirroringDeploymentGroups.get', 'networksecurity.mirroringDeploymentGroups.list', 'networksecurity.mirroringDeploymentGroups.update', 'networksecurity.mirroringDeploymentGroups.use', 'networksecurity.mirroringDeployments.create', 'networksecurity.mirroringDeployments.delete', 'networksecurity.mirroringDeployments.get', 'networksecurity.mirroringDeployments.list', 'networksecurity.mirroringDeployments.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/networksecurity.mirroringDeploymentUser |
Allows a consumer to view and connect to a Producer's mirroringDeploymentGroup. |
Mirroring Deployment User |
['networksecurity.mirroringDeploymentGroups.get', 'networksecurity.mirroringDeploymentGroups.list', 'networksecurity.mirroringDeploymentGroups.use'] |
|
BETA |
| roles/networksecurity.dnsThreatDetectorAdmin |
Enables full access to DNS Threat Detector resources. |
DNS Threat Detector Admin |
['networksecurity.dnsThreatDetectors.create', 'networksecurity.dnsThreatDetectors.delete', 'networksecurity.dnsThreatDetectors.get', 'networksecurity.dnsThreatDetectors.list', 'networksecurity.dnsThreatDetectors.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/networksecurity.mirroringEndpointViewer |
Enables read-only access to mirroring resources on the Consumer's side. |
Mirroring Endpoint Viewer |
['networksecurity.mirroringEndpointGroupAssociations.get', 'networksecurity.mirroringEndpointGroupAssociations.list', 'networksecurity.mirroringEndpointGroups.get', 'networksecurity.mirroringEndpointGroups.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/networksecurity.interceptDeploymentExternalUser |
Allows an external consumer to connect to a producer's interceptDeploymentGroup. |
Intercept Deployment External User |
['networksecurity.interceptDeploymentGroups.use'] |
|
BETA |
| roles/networksecurity.interceptEndpointUser |
Allows a consumer to connect their networks to a interceptEndpointGroup. |
Intercept Endpoint User |
['networksecurity.interceptEndpointGroups.get', 'networksecurity.interceptEndpointGroups.list', 'networksecurity.interceptEndpointGroups.use'] |
|
BETA |