| roles/osconfig.patchJobViewer |
Get and list Patch Jobs. |
Patch Job Viewer |
['osconfig.patchJobs.get', 'osconfig.patchJobs.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/osconfig.osPolicyAssignmentAdmin |
Full admin access to OS Policy Assignments |
OSPolicyAssignment Admin |
['osconfig.osPolicyAssignments.create', 'osconfig.osPolicyAssignments.delete', 'osconfig.osPolicyAssignments.get', 'osconfig.osPolicyAssignments.list', 'osconfig.osPolicyAssignments.searchPolicies', 'osconfig.osPolicyAssignments.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/osconfig.vulnerabilityReportViewer |
Viewer of OS VulnerabilityReports |
OS VulnerabilityReport Viewer |
['osconfig.vulnerabilityReports.get', 'osconfig.vulnerabilityReports.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/osconfig.osPolicyAssignmentReportViewer |
Viewer of OS policy assignment reports for VM instances |
OSPolicyAssignmentReport Viewer |
['osconfig.osPolicyAssignmentReports.get', 'osconfig.osPolicyAssignmentReports.list', 'osconfig.osPolicyAssignmentReports.searchSummaries', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/osconfig.guestPolicyViewer |
Viewer of GuestPolicy resources |
GuestPolicy Viewer |
['osconfig.guestPolicies.get', 'osconfig.guestPolicies.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/osconfig.osPolicyAssignmentEditor |
Editor of OS Policy Assignments |
OSPolicyAssignment Editor |
['osconfig.osPolicyAssignments.get', 'osconfig.osPolicyAssignments.list', 'osconfig.osPolicyAssignments.searchPolicies', 'osconfig.osPolicyAssignments.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/osconfig.projectFeatureSettingsEditor |
Read/write access to project feature settings |
Project Feature Settings Editor |
['osconfig.projectFeatureSettings.get', 'osconfig.projectFeatureSettings.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/osconfig.serviceAgent |
Grants OS Config Service Account access to Google Compute Engine instances. |
Cloud OS Config Service Agent |
['cloudasset.assets.listOSConfigOSPolicyAssignments', 'cloudasset.assets.listPatchDeployments', 'compute.globalOperations.get', 'compute.instances.get', 'compute.instances.getGuestAttributes', 'compute.instances.list', 'compute.instances.setMetadata', 'compute.projects.get', 'compute.projects.setCommonInstanceMetadata', 'compute.zones.get', 'compute.zones.list', 'containeranalysis.notes.attachOccurrence', 'containeranalysis.notes.create', 'containeranalysis.notes.delete', 'containeranalysis.notes.get', 'containeranalysis.notes.list', 'containeranalysis.notes.update', 'containeranalysis.occurrences.create', 'containeranalysis.occurrences.delete', 'containeranalysis.occurrences.get', 'containeranalysis.occurrences.list', 'containeranalysis.occurrences.update', 'iam.serviceAccounts.actAs', 'osconfig.projectFeatureSettings.get', 'osconfig.projectFeatureSettings.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/osconfig.upgradeReportViewer |
Provides read-only access to VM Manager Upgrade Reports |
Upgrade Report Viewer |
['osconfig.upgradeReports.get', 'osconfig.upgradeReports.getSummary', 'osconfig.upgradeReports.list', 'osconfig.upgradeReports.searchSummaries', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/osconfig.patchDeploymentViewer |
Viewer of PatchDeployment resources |
PatchDeployment Viewer |
['osconfig.patchDeployments.get', 'osconfig.patchDeployments.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/osconfig.projectFeatureSettingsViewer |
Read access to project feature settings |
Project Feature Settings Viewer |
['osconfig.projectFeatureSettings.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/osconfig.inventoryViewer |
Viewer of OS Inventories |
OS Inventory Viewer |
['osconfig.inventories.get', 'osconfig.inventories.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/osconfig.patchJobExecutor |
Access to execute Patch Jobs. |
Patch Job Executor |
['osconfig.patchJobs.exec', 'osconfig.patchJobs.get', 'osconfig.patchJobs.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/osconfig.viewer |
Readonly access to OS Config resources |
OS Config Viewer |
['osconfig.guestPolicies.get', 'osconfig.guestPolicies.list', 'osconfig.instanceOSPoliciesCompliances.get', 'osconfig.instanceOSPoliciesCompliances.list', 'osconfig.inventories.get', 'osconfig.inventories.list', 'osconfig.osPolicyAssignmentReports.get', 'osconfig.osPolicyAssignmentReports.list', 'osconfig.osPolicyAssignmentReports.searchSummaries', 'osconfig.osPolicyAssignments.get', 'osconfig.osPolicyAssignments.list', 'osconfig.osPolicyAssignments.searchPolicies', 'osconfig.patchDeployments.get', 'osconfig.patchDeployments.list', 'osconfig.patchJobs.get', 'osconfig.patchJobs.list', 'osconfig.projectFeatureSettings.get', 'osconfig.upgradeReports.get', 'osconfig.upgradeReports.getSummary', 'osconfig.upgradeReports.list', 'osconfig.upgradeReports.searchSummaries', 'osconfig.vulnerabilityReports.get', 'osconfig.vulnerabilityReports.list'] |
|
BETA |
| roles/osconfig.instanceOSPoliciesComplianceViewer |
Viewer of OS Policies Compliance of VM instances |
InstanceOSPoliciesCompliance Viewer |
['osconfig.instanceOSPoliciesCompliances.get', 'osconfig.instanceOSPoliciesCompliances.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/osconfig.osPolicyAssignmentViewer |
Viewer of OS Policy Assignments |
OSPolicyAssignment Viewer |
['osconfig.osPolicyAssignments.get', 'osconfig.osPolicyAssignments.list', 'osconfig.osPolicyAssignments.searchPolicies', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/osconfig.guestPolicyAdmin |
Full admin access to GuestPolicies |
GuestPolicy Admin |
['osconfig.guestPolicies.create', 'osconfig.guestPolicies.delete', 'osconfig.guestPolicies.get', 'osconfig.guestPolicies.list', 'osconfig.guestPolicies.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/osconfig.guestPolicyEditor |
Editor of GuestPolicy resources |
GuestPolicy Editor |
['osconfig.guestPolicies.get', 'osconfig.guestPolicies.list', 'osconfig.guestPolicies.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/osconfig.admin |
Full access to OS Config resources |
OS Config Admin |
['osconfig.guestPolicies.create', 'osconfig.guestPolicies.delete', 'osconfig.guestPolicies.get', 'osconfig.guestPolicies.list', 'osconfig.guestPolicies.update', 'osconfig.instanceOSPoliciesCompliances.get', 'osconfig.instanceOSPoliciesCompliances.list', 'osconfig.inventories.get', 'osconfig.inventories.list', 'osconfig.osPolicyAssignmentReports.get', 'osconfig.osPolicyAssignmentReports.list', 'osconfig.osPolicyAssignmentReports.searchSummaries', 'osconfig.osPolicyAssignments.create', 'osconfig.osPolicyAssignments.delete', 'osconfig.osPolicyAssignments.get', 'osconfig.osPolicyAssignments.list', 'osconfig.osPolicyAssignments.searchPolicies', 'osconfig.osPolicyAssignments.update', 'osconfig.patchDeployments.create', 'osconfig.patchDeployments.delete', 'osconfig.patchDeployments.execute', 'osconfig.patchDeployments.get', 'osconfig.patchDeployments.list', 'osconfig.patchDeployments.pause', 'osconfig.patchDeployments.resume', 'osconfig.patchDeployments.update', 'osconfig.patchJobs.exec', 'osconfig.patchJobs.get', 'osconfig.patchJobs.list', 'osconfig.projectFeatureSettings.get', 'osconfig.projectFeatureSettings.update', 'osconfig.upgradeReports.get', 'osconfig.upgradeReports.getSummary', 'osconfig.upgradeReports.list', 'osconfig.upgradeReports.searchSummaries', 'osconfig.vulnerabilityReports.get', 'osconfig.vulnerabilityReports.list'] |
|
BETA |
| roles/osconfig.patchDeploymentAdmin |
Full admin access to PatchDeployments |
PatchDeployment Admin |
['osconfig.patchDeployments.create', 'osconfig.patchDeployments.delete', 'osconfig.patchDeployments.execute', 'osconfig.patchDeployments.get', 'osconfig.patchDeployments.list', 'osconfig.patchDeployments.pause', 'osconfig.patchDeployments.resume', 'osconfig.patchDeployments.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |