| roles/securitycentermanagement.viewer |
Readonly access to Cloud Security Command Center services and custom modules configuration. |
Security Center Management Viewer |
['resourcemanager.organizations.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'securitycenter.organizationsettings.get', 'securitycenter.securitycentersettings.get', 'securitycentermanagement.effectiveEventThreatDetectionCustomModules.get', 'securitycentermanagement.effectiveEventThreatDetectionCustomModules.list', 'securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get', 'securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list', 'securitycentermanagement.eventThreatDetectionCustomModules.get', 'securitycentermanagement.eventThreatDetectionCustomModules.list', 'securitycentermanagement.eventThreatDetectionCustomModules.validate', 'securitycentermanagement.locations.get', 'securitycentermanagement.locations.list', 'securitycentermanagement.securityCenterServices.get', 'securitycentermanagement.securityCenterServices.list', 'securitycentermanagement.securityCommandCenter.get', 'securitycentermanagement.securityHealthAnalyticsCustomModules.get', 'securitycentermanagement.securityHealthAnalyticsCustomModules.list', 'securitycentermanagement.securityHealthAnalyticsCustomModules.simulate', 'securitycentermanagement.securityHealthAnalyticsCustomModules.test'] |
|
GA |
| roles/securitycentermanagement.admin |
Full access to manage Cloud Security Command Center services and custom modules configuration. |
Security Center Management Admin |
['resourcemanager.organizations.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'securitycenter.organizationsettings.get', 'securitycenter.organizationsettings.update', 'securitycenter.securitycentersettings.get', 'securitycenter.securitycentersettings.update', 'securitycentermanagement.effectiveEventThreatDetectionCustomModules.get', 'securitycentermanagement.effectiveEventThreatDetectionCustomModules.list', 'securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get', 'securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list', 'securitycentermanagement.eventThreatDetectionCustomModules.create', 'securitycentermanagement.eventThreatDetectionCustomModules.delete', 'securitycentermanagement.eventThreatDetectionCustomModules.get', 'securitycentermanagement.eventThreatDetectionCustomModules.list', 'securitycentermanagement.eventThreatDetectionCustomModules.update', 'securitycentermanagement.eventThreatDetectionCustomModules.validate', 'securitycentermanagement.locations.get', 'securitycentermanagement.locations.list', 'securitycentermanagement.securityCenterServices.get', 'securitycentermanagement.securityCenterServices.list', 'securitycentermanagement.securityCenterServices.update', 'securitycentermanagement.securityCommandCenter.activate', 'securitycentermanagement.securityCommandCenter.checkActivationOperation', 'securitycentermanagement.securityCommandCenter.checkEligibility', 'securitycentermanagement.securityCommandCenter.generateServiceAccounts', 'securitycentermanagement.securityCommandCenter.get', 'securitycentermanagement.securityCommandCenter.update', 'securitycentermanagement.securityHealthAnalyticsCustomModules.create', 'securitycentermanagement.securityHealthAnalyticsCustomModules.delete', 'securitycentermanagement.securityHealthAnalyticsCustomModules.get', 'securitycentermanagement.securityHealthAnalyticsCustomModules.list', 'securitycentermanagement.securityHealthAnalyticsCustomModules.simulate', 'securitycentermanagement.securityHealthAnalyticsCustomModules.test', 'securitycentermanagement.securityHealthAnalyticsCustomModules.update'] |
|
GA |
| roles/securitycentermanagement.settingsViewer |
Readonly access to Cloud Security Command Center settings |
Security Center Management Settings Viewer |
['resourcemanager.organizations.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'securitycenter.organizationsettings.get', 'securitycenter.securitycentersettings.get', 'securitycentermanagement.effectiveEventThreatDetectionCustomModules.get', 'securitycentermanagement.effectiveEventThreatDetectionCustomModules.list', 'securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get', 'securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list', 'securitycentermanagement.eventThreatDetectionCustomModules.get', 'securitycentermanagement.eventThreatDetectionCustomModules.list', 'securitycentermanagement.eventThreatDetectionCustomModules.validate', 'securitycentermanagement.locations.get', 'securitycentermanagement.locations.list', 'securitycentermanagement.securityCenterServices.get', 'securitycentermanagement.securityCenterServices.list', 'securitycentermanagement.securityCommandCenter.get', 'securitycentermanagement.securityHealthAnalyticsCustomModules.get', 'securitycentermanagement.securityHealthAnalyticsCustomModules.list', 'securitycentermanagement.securityHealthAnalyticsCustomModules.simulate', 'securitycentermanagement.securityHealthAnalyticsCustomModules.test'] |
|
GA |
| roles/securitycentermanagement.customModulesViewer |
Readonly access to Cloud Security Command Center custom modules. |
Security Center Management Custom Modules Viewer |
['resourcemanager.organizations.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'securitycentermanagement.effectiveEventThreatDetectionCustomModules.get', 'securitycentermanagement.effectiveEventThreatDetectionCustomModules.list', 'securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get', 'securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list', 'securitycentermanagement.eventThreatDetectionCustomModules.get', 'securitycentermanagement.eventThreatDetectionCustomModules.list', 'securitycentermanagement.eventThreatDetectionCustomModules.validate', 'securitycentermanagement.locations.get', 'securitycentermanagement.locations.list', 'securitycentermanagement.securityHealthAnalyticsCustomModules.get', 'securitycentermanagement.securityHealthAnalyticsCustomModules.list', 'securitycentermanagement.securityHealthAnalyticsCustomModules.simulate', 'securitycentermanagement.securityHealthAnalyticsCustomModules.test'] |
|
GA |
| roles/securitycentermanagement.shaCustomModulesViewer |
Readonly access to Cloud Security Command Center SHA custom modules. |
Security Center Management SHA Custom Modules Viewer |
['resourcemanager.organizations.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get', 'securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list', 'securitycentermanagement.locations.get', 'securitycentermanagement.locations.list', 'securitycentermanagement.securityHealthAnalyticsCustomModules.get', 'securitycentermanagement.securityHealthAnalyticsCustomModules.list', 'securitycentermanagement.securityHealthAnalyticsCustomModules.simulate', 'securitycentermanagement.securityHealthAnalyticsCustomModules.test'] |
|
GA |
| roles/securitycentermanagement.shaCustomModulesEditor |
Full access to manage Cloud Security Command Center SHA custom modules. |
Security Center Management SHA Custom Modules Editor |
['resourcemanager.organizations.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get', 'securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list', 'securitycentermanagement.locations.get', 'securitycentermanagement.locations.list', 'securitycentermanagement.securityHealthAnalyticsCustomModules.create', 'securitycentermanagement.securityHealthAnalyticsCustomModules.delete', 'securitycentermanagement.securityHealthAnalyticsCustomModules.get', 'securitycentermanagement.securityHealthAnalyticsCustomModules.list', 'securitycentermanagement.securityHealthAnalyticsCustomModules.simulate', 'securitycentermanagement.securityHealthAnalyticsCustomModules.test', 'securitycentermanagement.securityHealthAnalyticsCustomModules.update'] |
|
GA |
| roles/securitycentermanagement.etdCustomModulesViewer |
Readonly access to Cloud Security Command Center ETD custom modules. |
Security Center Management ETD Custom Modules Viewer |
['resourcemanager.organizations.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'securitycentermanagement.effectiveEventThreatDetectionCustomModules.get', 'securitycentermanagement.effectiveEventThreatDetectionCustomModules.list', 'securitycentermanagement.eventThreatDetectionCustomModules.get', 'securitycentermanagement.eventThreatDetectionCustomModules.list', 'securitycentermanagement.eventThreatDetectionCustomModules.validate', 'securitycentermanagement.locations.get', 'securitycentermanagement.locations.list'] |
|
GA |
| roles/securitycentermanagement.securityCenterServicesEditor |
Full access to manage Cloud Security Command Center services configuration. |
Security Center Management Services Editor |
['securitycentermanagement.securityCenterServices.get', 'securitycentermanagement.securityCenterServices.list', 'securitycentermanagement.securityCenterServices.update'] |
|
GA |
| roles/securitycentermanagement.securityCenterServicesViewer |
Readonly access to Cloud Security Command Center services configuration. |
Security Center Management Services Viewer |
['securitycentermanagement.securityCenterServices.get', 'securitycentermanagement.securityCenterServices.list'] |
|
GA |
| roles/securitycentermanagement.etdCustomModulesEditor |
Full access to manage Cloud Security Command Center ETD custom modules. |
Security Center Management Custom ETD Modules Editor |
['resourcemanager.organizations.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'securitycentermanagement.effectiveEventThreatDetectionCustomModules.get', 'securitycentermanagement.effectiveEventThreatDetectionCustomModules.list', 'securitycentermanagement.eventThreatDetectionCustomModules.create', 'securitycentermanagement.eventThreatDetectionCustomModules.delete', 'securitycentermanagement.eventThreatDetectionCustomModules.get', 'securitycentermanagement.eventThreatDetectionCustomModules.list', 'securitycentermanagement.eventThreatDetectionCustomModules.update', 'securitycentermanagement.eventThreatDetectionCustomModules.validate', 'securitycentermanagement.locations.get', 'securitycentermanagement.locations.list'] |
|
GA |
| roles/securitycentermanagement.customModulesEditor |
Full access to manage Cloud Security Command Center custom modules. |
Security Center Management Custom Modules Editor |
['resourcemanager.organizations.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'securitycentermanagement.effectiveEventThreatDetectionCustomModules.get', 'securitycentermanagement.effectiveEventThreatDetectionCustomModules.list', 'securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get', 'securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list', 'securitycentermanagement.eventThreatDetectionCustomModules.create', 'securitycentermanagement.eventThreatDetectionCustomModules.delete', 'securitycentermanagement.eventThreatDetectionCustomModules.get', 'securitycentermanagement.eventThreatDetectionCustomModules.list', 'securitycentermanagement.eventThreatDetectionCustomModules.update', 'securitycentermanagement.eventThreatDetectionCustomModules.validate', 'securitycentermanagement.locations.get', 'securitycentermanagement.locations.list', 'securitycentermanagement.securityHealthAnalyticsCustomModules.create', 'securitycentermanagement.securityHealthAnalyticsCustomModules.delete', 'securitycentermanagement.securityHealthAnalyticsCustomModules.get', 'securitycentermanagement.securityHealthAnalyticsCustomModules.list', 'securitycentermanagement.securityHealthAnalyticsCustomModules.simulate', 'securitycentermanagement.securityHealthAnalyticsCustomModules.test', 'securitycentermanagement.securityHealthAnalyticsCustomModules.update'] |
|
GA |
| roles/securitycentermanagement.settingsEditor |
Full access to manage Cloud Security Command Center settings |
Security Center Management Settings Editor |
['resourcemanager.organizations.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'securitycenter.organizationsettings.get', 'securitycenter.organizationsettings.update', 'securitycenter.securitycentersettings.get', 'securitycenter.securitycentersettings.update', 'securitycentermanagement.effectiveEventThreatDetectionCustomModules.get', 'securitycentermanagement.effectiveEventThreatDetectionCustomModules.list', 'securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get', 'securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list', 'securitycentermanagement.eventThreatDetectionCustomModules.create', 'securitycentermanagement.eventThreatDetectionCustomModules.delete', 'securitycentermanagement.eventThreatDetectionCustomModules.get', 'securitycentermanagement.eventThreatDetectionCustomModules.list', 'securitycentermanagement.eventThreatDetectionCustomModules.update', 'securitycentermanagement.eventThreatDetectionCustomModules.validate', 'securitycentermanagement.locations.get', 'securitycentermanagement.locations.list', 'securitycentermanagement.securityCenterServices.get', 'securitycentermanagement.securityCenterServices.list', 'securitycentermanagement.securityCenterServices.update', 'securitycentermanagement.securityCommandCenter.activate', 'securitycentermanagement.securityCommandCenter.checkActivationOperation', 'securitycentermanagement.securityCommandCenter.checkEligibility', 'securitycentermanagement.securityCommandCenter.generateServiceAccounts', 'securitycentermanagement.securityCommandCenter.get', 'securitycentermanagement.securityCommandCenter.update', 'securitycentermanagement.securityHealthAnalyticsCustomModules.create', 'securitycentermanagement.securityHealthAnalyticsCustomModules.delete', 'securitycentermanagement.securityHealthAnalyticsCustomModules.get', 'securitycentermanagement.securityHealthAnalyticsCustomModules.list', 'securitycentermanagement.securityHealthAnalyticsCustomModules.simulate', 'securitycentermanagement.securityHealthAnalyticsCustomModules.test', 'securitycentermanagement.securityHealthAnalyticsCustomModules.update'] |
|
GA |