infra/iam/roles/beam_admin.role.yaml (654 lines of code) (raw):

# Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # This file is auto-generated by generate_roles.py. # Do not edit manually. # This file was generated on 2025-08-11 14:34:54 UTC description: This is the beam_admin role permissions: - artifactregistry.attachments.delete - artifactregistry.files.delete - artifactregistry.packages.delete - artifactregistry.repositories.createTagBinding - artifactregistry.repositories.delete - artifactregistry.repositories.deleteTagBinding - artifactregistry.repositories.setIamPolicy - artifactregistry.rules.delete - artifactregistry.tags.delete - artifactregistry.versions.delete - biglake.catalogs.delete - biglake.catalogs.setIamPolicy - biglake.databases.delete - biglake.locks.delete - biglake.namespaces.delete - biglake.namespaces.setIamPolicy - biglake.tables.delete - biglake.tables.setIamPolicy - bigquery.capacityCommitments.create - bigquery.capacityCommitments.delete - bigquery.connections.delegate - bigquery.connections.delete - bigquery.connections.setIamPolicy - bigquery.dataPolicies.delete - bigquery.dataPolicies.setIamPolicy - bigquery.datasets.createTagBinding - bigquery.datasets.delete - bigquery.datasets.deleteTagBinding - bigquery.datasets.link - bigquery.datasets.listSharedDatasetUsage - bigquery.datasets.setIamPolicy - bigquery.datasets.update - bigquery.jobs.delete - bigquery.jobs.listAll - bigquery.jobs.update - bigquery.models.delete - bigquery.reservationAssignments.delete - bigquery.reservationGroups.delete - bigquery.reservations.delete - bigquery.routines.delete - bigquery.rowAccessPolicies.delete - bigquery.rowAccessPolicies.setIamPolicy - bigquery.savedqueries.delete - bigquery.tables.create - bigquery.tables.createTagBinding - bigquery.tables.delete - bigquery.tables.deleteSnapshot - bigquery.tables.deleteTagBinding - bigquery.tables.setCategory - bigquery.tables.setIamPolicy - bigquery.tables.update - bigquery.tables.updateData - bigquery.tables.updateTag - bigquerymigration.workflows.delete - cloudasset.feeds.list - cloudasset.othercloudconnections.delete - cloudasset.savedqueries.delete - cloudbuild.connections.delete - cloudbuild.connections.setIamPolicy - cloudbuild.integrations.delete - cloudbuild.repositories.delete - cloudbuild.workerpools.delete - cloudfunctions.functions.delete - cloudfunctions.functions.setIamPolicy - cloudkms.cryptoKeys.setIamPolicy - cloudkms.ekmConfigs.setIamPolicy - cloudkms.ekmConnections.setIamPolicy - cloudkms.importJobs.setIamPolicy - cloudkms.keyRings.setIamPolicy - cloudsql.backupRuns.delete - cloudsql.databases.delete - cloudsql.instances.delete - cloudsql.sslCerts.delete - cloudsql.users.delete - compute.addresses.createTagBinding - compute.addresses.delete - compute.addresses.deleteTagBinding - compute.advice.calendarMode - compute.autoscalers.delete - compute.backendBuckets.createTagBinding - compute.backendBuckets.delete - compute.backendBuckets.deleteTagBinding - compute.backendBuckets.setIamPolicy - compute.backendServices.createTagBinding - compute.backendServices.delete - compute.backendServices.deleteTagBinding - compute.backendServices.setIamPolicy - compute.crossSiteNetworks.delete - compute.disks.createTagBinding - compute.disks.delete - compute.disks.deleteTagBinding - compute.disks.setIamPolicy - compute.externalVpnGateways.createTagBinding - compute.externalVpnGateways.delete - compute.externalVpnGateways.deleteTagBinding - compute.firewallPolicies.createTagBinding - compute.firewallPolicies.delete - compute.firewallPolicies.deleteTagBinding - compute.firewallPolicies.setIamPolicy - compute.firewalls.createTagBinding - compute.firewalls.delete - compute.firewalls.deleteTagBinding - compute.forwardingRules.createTagBinding - compute.forwardingRules.delete - compute.forwardingRules.deleteTagBinding - compute.futureReservations.cancel - compute.futureReservations.delete - compute.futureReservations.setIamPolicy - compute.globalAddresses.createTagBinding - compute.globalAddresses.delete - compute.globalAddresses.deleteTagBinding - compute.globalForwardingRules.createTagBinding - compute.globalForwardingRules.delete - compute.globalForwardingRules.deleteTagBinding - compute.globalNetworkEndpointGroups.createTagBinding - compute.globalNetworkEndpointGroups.delete - compute.globalNetworkEndpointGroups.deleteTagBinding - compute.globalOperations.delete - compute.globalPublicDelegatedPrefixes.delete - compute.healthChecks.createTagBinding - compute.healthChecks.delete - compute.healthChecks.deleteTagBinding - compute.httpHealthChecks.createTagBinding - compute.httpHealthChecks.delete - compute.httpHealthChecks.deleteTagBinding - compute.httpsHealthChecks.createTagBinding - compute.httpsHealthChecks.delete - compute.httpsHealthChecks.deleteTagBinding - compute.images.createTagBinding - compute.images.delete - compute.images.deleteTagBinding - compute.instanceGroupManagers.createTagBinding - compute.instanceGroupManagers.delete - compute.instanceGroupManagers.deleteTagBinding - compute.instanceGroups.createTagBinding - compute.instanceGroups.delete - compute.instanceGroups.deleteTagBinding - compute.instanceTemplates.delete - compute.instanceTemplates.setIamPolicy - compute.instances.createTagBinding - compute.instances.delete - compute.instances.deleteTagBinding - compute.instances.setIamPolicy - compute.instances.stop - compute.instantSnapshots.delete - compute.instantSnapshots.setIamPolicy - compute.interconnectAttachmentGroups.delete - compute.interconnectAttachments.createTagBinding - compute.interconnectAttachments.deleteTagBinding - compute.interconnectGroups.delete - compute.interconnects.createTagBinding - compute.interconnects.deleteTagBinding - compute.interconnects.getMacsecConfig - compute.licenseCodes.setIamPolicy - compute.licenses.setIamPolicy - compute.machineImages.delete - compute.machineImages.setIamPolicy - compute.multiMig.delete - compute.networkAttachments.createTagBinding - compute.networkAttachments.delete - compute.networkAttachments.deleteTagBinding - compute.networkAttachments.setIamPolicy - compute.networkEdgeSecurityServices.createTagBinding - compute.networkEdgeSecurityServices.delete - compute.networkEdgeSecurityServices.deleteTagBinding - compute.networkEndpointGroups.createTagBinding - compute.networkEndpointGroups.delete - compute.networkEndpointGroups.deleteTagBinding - compute.networks.createTagBinding - compute.networks.delete - compute.networks.deleteTagBinding - compute.nodeGroups.delete - compute.nodeGroups.setIamPolicy - compute.nodeTemplates.delete - compute.nodeTemplates.setIamPolicy - compute.organizations.disableXpnHost - compute.organizations.disableXpnResource - compute.organizations.enableXpnHost - compute.organizations.enableXpnResource - compute.packetMirrorings.createTagBinding - compute.packetMirrorings.delete - compute.packetMirrorings.deleteTagBinding - compute.publicAdvertisedPrefixes.delete - compute.publicDelegatedPrefixes.createTagBinding - compute.publicDelegatedPrefixes.delete - compute.publicDelegatedPrefixes.deleteTagBinding - compute.regionBackendServices.createTagBinding - compute.regionBackendServices.delete - compute.regionBackendServices.deleteTagBinding - compute.regionBackendServices.setIamPolicy - compute.regionFirewallPolicies.createTagBinding - compute.regionFirewallPolicies.delete - compute.regionFirewallPolicies.deleteTagBinding - compute.regionFirewallPolicies.setIamPolicy - compute.regionHealthCheckServices.delete - compute.regionHealthChecks.createTagBinding - compute.regionHealthChecks.delete - compute.regionHealthChecks.deleteTagBinding - compute.regionNetworkEndpointGroups.createTagBinding - compute.regionNetworkEndpointGroups.delete - compute.regionNetworkEndpointGroups.deleteTagBinding - compute.regionNotificationEndpoints.delete - compute.regionOperations.delete - compute.regionSecurityPolicies.createTagBinding - compute.regionSecurityPolicies.delete - compute.regionSecurityPolicies.deleteTagBinding - compute.regionSslCertificates.createTagBinding - compute.regionSslCertificates.delete - compute.regionSslCertificates.deleteTagBinding - compute.regionSslPolicies.createTagBinding - compute.regionSslPolicies.delete - compute.regionSslPolicies.deleteTagBinding - compute.regionTargetHttpProxies.createTagBinding - compute.regionTargetHttpProxies.delete - compute.regionTargetHttpProxies.deleteTagBinding - compute.regionTargetHttpsProxies.createTagBinding - compute.regionTargetHttpsProxies.delete - compute.regionTargetHttpsProxies.deleteTagBinding - compute.regionTargetTcpProxies.createTagBinding - compute.regionTargetTcpProxies.delete - compute.regionTargetTcpProxies.deleteTagBinding - compute.regionUrlMaps.createTagBinding - compute.regionUrlMaps.delete - compute.regionUrlMaps.deleteTagBinding - compute.reservations.delete - compute.resourcePolicies.delete - compute.resourcePolicies.setIamPolicy - compute.routers.createTagBinding - compute.routers.delete - compute.routers.deleteTagBinding - compute.routes.createTagBinding - compute.routes.delete - compute.routes.deleteTagBinding - compute.securityPolicies.createTagBinding - compute.securityPolicies.deleteTagBinding - compute.serviceAttachments.createTagBinding - compute.serviceAttachments.delete - compute.serviceAttachments.deleteTagBinding - compute.serviceAttachments.setIamPolicy - compute.snapshots.createTagBinding - compute.snapshots.delete - compute.snapshots.deleteTagBinding - compute.snapshots.setIamPolicy - compute.sslCertificates.createTagBinding - compute.sslCertificates.delete - compute.sslCertificates.deleteTagBinding - compute.sslPolicies.createTagBinding - compute.sslPolicies.deleteTagBinding - compute.storagePools.delete - compute.storagePools.setIamPolicy - compute.subnetworks.createTagBinding - compute.subnetworks.delete - compute.subnetworks.deleteTagBinding - compute.subnetworks.setIamPolicy - compute.targetGrpcProxies.createTagBinding - compute.targetGrpcProxies.delete - compute.targetGrpcProxies.deleteTagBinding - compute.targetHttpProxies.createTagBinding - compute.targetHttpProxies.delete - compute.targetHttpProxies.deleteTagBinding - compute.targetHttpsProxies.createTagBinding - compute.targetHttpsProxies.delete - compute.targetHttpsProxies.deleteTagBinding - compute.targetInstances.createTagBinding - compute.targetInstances.delete - compute.targetInstances.deleteTagBinding - compute.targetPools.createTagBinding - compute.targetPools.delete - compute.targetPools.deleteTagBinding - compute.targetSslProxies.createTagBinding - compute.targetSslProxies.delete - compute.targetSslProxies.deleteTagBinding - compute.targetTcpProxies.createTagBinding - compute.targetTcpProxies.delete - compute.targetTcpProxies.deleteTagBinding - compute.targetVpnGateways.createTagBinding - compute.targetVpnGateways.delete - compute.targetVpnGateways.deleteTagBinding - compute.urlMaps.createTagBinding - compute.urlMaps.deleteTagBinding - compute.vpnGateways.createTagBinding - compute.vpnGateways.delete - compute.vpnGateways.deleteTagBinding - compute.vpnTunnels.createTagBinding - compute.vpnTunnels.delete - compute.vpnTunnels.deleteTagBinding - compute.wireGroups.delete - compute.zoneOperations.delete - container.apiServices.delete - container.auditSinks.delete - container.backendConfigs.delete - container.certificateSigningRequests.approve - container.certificateSigningRequests.delete - container.clusterRoleBindings.create - container.clusterRoleBindings.delete - container.clusterRoleBindings.update - container.clusterRoles.bind - container.clusterRoles.create - container.clusterRoles.delete - container.clusterRoles.update - container.clusters.createTagBinding - container.clusters.delete - container.clusters.deleteTagBinding - container.configMaps.delete - container.controllerRevisions.delete - container.cronJobs.delete - container.csiDrivers.delete - container.csiNodeInfos.delete - container.csiNodes.delete - container.customResourceDefinitions.delete - container.daemonSets.delete - container.deployments.delete - container.endpointSlices.delete - container.endpoints.delete - container.events.delete - container.frontendConfigs.delete - container.horizontalPodAutoscalers.delete - container.hostServiceAgent.use - container.ingresses.delete - container.jobs.delete - container.leases.delete - container.limitRanges.delete - container.managedCertificates.delete - container.mutatingWebhookConfigurations.delete - container.namespaces.delete - container.networkPolicies.delete - container.nodes.delete - container.persistentVolumeClaims.delete - container.persistentVolumes.delete - container.podDisruptionBudgets.delete - container.podSecurityPolicies.delete - container.podTemplates.delete - container.pods.delete - container.priorityClasses.delete - container.replicaSets.delete - container.replicationControllers.delete - container.resourceQuotas.delete - container.roleBindings.create - container.roleBindings.delete - container.roleBindings.update - container.roles.bind - container.roles.create - container.roles.delete - container.roles.update - container.runtimeClasses.delete - container.secrets.delete - container.serviceAccounts.delete - container.services.delete - container.statefulSets.delete - container.storageClasses.delete - container.storageStates.delete - container.storageVersionMigrations.delete - container.thirdPartyObjects.delete - container.updateInfos.delete - container.validatingWebhookConfigurations.delete - container.volumeAttachments.delete - container.volumeSnapshotClasses.delete - container.volumeSnapshotContents.delete - container.volumeSnapshots.delete - containeranalysis.notes.delete - containeranalysis.notes.setIamPolicy - containeranalysis.occurrences.delete - containeranalysis.occurrences.setIamPolicy - dataflow.jobs.cancel - dataflow.snapshots.delete - dataform.commentThreads.delete - dataform.comments.delete - dataform.releaseConfigs.delete - dataform.repositories.delete - dataform.repositories.setIamPolicy - dataform.workflowConfigs.delete - dataform.workflowInvocations.cancel - dataform.workflowInvocations.delete - dataform.workspaces.delete - dataform.workspaces.setIamPolicy - dataplex.aspectTypes.delete - dataplex.aspectTypes.setIamPolicy - dataplex.assets.delete - dataplex.assets.setIamPolicy - dataplex.content.delete - dataplex.content.setIamPolicy - dataplex.dataAttributeBindings.delete - dataplex.dataAttributeBindings.setIamPolicy - dataplex.dataAttributes.delete - dataplex.dataAttributes.setIamPolicy - dataplex.dataTaxonomies.delete - dataplex.dataTaxonomies.setIamPolicy - dataplex.datascans.delete - dataplex.datascans.setIamPolicy - dataplex.entities.delete - dataplex.entries.delete - dataplex.entryGroups.delete - dataplex.entryGroups.setIamPolicy - dataplex.entryLinks.delete - dataplex.entryTypes.delete - dataplex.entryTypes.setIamPolicy - dataplex.environments.delete - dataplex.environments.setIamPolicy - dataplex.glossaries.delete - dataplex.glossaries.setIamPolicy - dataplex.glossaryCategories.delete - dataplex.glossaryTerms.delete - dataplex.lakes.delete - dataplex.lakes.setIamPolicy - dataplex.metadataJobs.cancel - dataplex.operations.cancel - dataplex.operations.delete - dataplex.partitions.delete - dataplex.tasks.cancel - dataplex.tasks.delete - dataplex.tasks.setIamPolicy - dataplex.zones.delete - dataplex.zones.setIamPolicy - dataproc.agents.delete - dataproc.autoscalingPolicies.delete - dataproc.autoscalingPolicies.setIamPolicy - dataproc.batches.cancel - dataproc.batches.delete - dataproc.clusters.delete - dataproc.clusters.setIamPolicy - dataproc.clusters.stop - dataproc.jobs.cancel - dataproc.jobs.delete - dataproc.jobs.setIamPolicy - dataproc.operations.cancel - dataproc.operations.delete - dataproc.operations.setIamPolicy - dataproc.sessionTemplates.delete - dataproc.sessions.delete - dataproc.sessions.terminate - dataproc.workflowTemplates.delete - dataproc.workflowTemplates.setIamPolicy - dataprocrm.nodePools.delete - dataprocrm.operations.cancel - dataprocrm.operations.delete - dataprocrm.workloads.cancel - dataprocrm.workloads.delete - datastore.backupSchedules.delete - datastore.backups.delete - datastore.backups.restoreDatabase - datastore.databases.bulkDelete - datastore.databases.clone - datastore.databases.create - datastore.databases.createTagBinding - datastore.databases.delete - datastore.databases.deleteTagBinding - datastore.databases.export - datastore.databases.import - datastore.entities.delete - datastore.indexes.delete - datastore.locations.get - datastore.locations.list - datastore.operations.cancel - datastore.operations.delete - datastore.userCreds.delete - dns.managedZones.delete - dns.managedZones.setIamPolicy - dns.policies.delete - dns.resourceRecordSets.delete - dns.responsePolicies.delete - dns.responsePolicyRules.delete - firebase.billingPlans.update - firebase.clients.delete - firebase.links.create - firebase.links.delete - firebase.links.update - firebase.playLinks.update - firebase.projects.delete - firebaseabt.experiments.delete - firebaseappcheck.appCheckTokens.verify - firebaseappcheck.automations.delete - firebaseauth.users.delete - firebasedatabase.instances.delete - firebasedataconnect.connectorRevisions.delete - firebasedataconnect.connectors.delete - firebasedataconnect.operations.cancel - firebasedataconnect.operations.delete - firebasedataconnect.schemaRevisions.delete - firebasedataconnect.schemas.delete - firebasedataconnect.services.delete - firebasedynamiclinks.destinations.update - firebasedynamiclinks.domains.delete - firebaseextensions.configs.create - firebaseextensions.configs.delete - firebaseextensions.configs.update - firebaseextensionspublisher.extensions.delete - firebasehosting.sites.delete - firebaseinappmessaging.campaigns.delete - firebasemessagingcampaigns.campaigns.delete - firebasemessagingcampaigns.campaigns.stop - firebaseml.models.delete - firebasenotifications.messages.delete - firebaserules.releases.delete - firebaserules.rulesets.delete - firebasestorage.defaultBucket.delete - iam.googleapis.com/workloadIdentityPoolProviderKeys.create - iam.googleapis.com/workloadIdentityPoolProviderKeys.delete - iam.googleapis.com/workloadIdentityPoolProviderKeys.undelete - iam.googleapis.com/workloadIdentityPoolProviders.create - iam.googleapis.com/workloadIdentityPoolProviders.delete - iam.googleapis.com/workloadIdentityPoolProviders.undelete - iam.googleapis.com/workloadIdentityPoolProviders.update - iam.googleapis.com/workloadIdentityPools.create - iam.googleapis.com/workloadIdentityPools.delete - iam.googleapis.com/workloadIdentityPools.undelete - iam.googleapis.com/workloadIdentityPools.update - iam.roles.create - iam.roles.delete - iam.roles.undelete - iam.roles.update - iam.serviceAccountApiKeyBindings.delete - iam.serviceAccountKeys.delete - iam.serviceAccounts.createTagBinding - iam.serviceAccounts.delete - iam.serviceAccounts.deleteTagBinding - iam.serviceAccounts.setIamPolicy - iam.serviceAccounts.undelete - iap.tunnel.getIamPolicy - iap.tunnel.setIamPolicy - iap.tunnelDestGroups.delete - iap.tunnelDestGroups.getIamPolicy - iap.tunnelDestGroups.setIamPolicy - iap.tunnelInstances.getIamPolicy - iap.tunnelInstances.setIamPolicy - iap.tunnelLocations.getIamPolicy - iap.tunnelLocations.setIamPolicy - iap.tunnelZones.getIamPolicy - iap.tunnelZones.setIamPolicy - iap.web.getIamPolicy - iap.web.setIamPolicy - iap.webServiceVersions.getIamPolicy - iap.webServiceVersions.setIamPolicy - iap.webServices.getIamPolicy - iap.webServices.setIamPolicy - iap.webTypes.getIamPolicy - iap.webTypes.setIamPolicy - monitoring.alertPolicies.createTagBinding - monitoring.alertPolicies.delete - monitoring.alertPolicies.deleteTagBinding - monitoring.dashboards.createTagBinding - monitoring.dashboards.delete - monitoring.dashboards.deleteTagBinding - monitoring.groups.delete - monitoring.metricDescriptors.delete - monitoring.metricsScopes.link - monitoring.services.delete - monitoring.slos.delete - monitoring.uptimeCheckConfigs.delete - pubsub.schemas.delete - pubsub.schemas.setIamPolicy - pubsub.snapshots.delete - pubsub.subscriptions.delete - pubsub.subscriptions.getIamPolicy - pubsub.subscriptions.setIamPolicy - pubsub.topics.delete - pubsub.topics.getIamPolicy - pubsub.topics.setIamPolicy - pubsublite.reservations.delete - pubsublite.subscriptions.delete - pubsublite.topics.delete - redis.backupCollections.delete - redis.backups.delete - redis.clusters.delete - redis.instances.createTagBinding - redis.instances.delete - redis.instances.deleteTagBinding - redis.operations.cancel - redis.operations.delete - resourcemanager.projects.setIamPolicy - resourcemanager.tagHolds.delete - resourcemanager.tagKeys.delete - resourcemanager.tagKeys.setIamPolicy - resourcemanager.tagValueBindings.delete - resourcemanager.tagValues.delete - resourcemanager.tagValues.setIamPolicy - secretmanager.secrets.createTagBinding - secretmanager.secrets.delete - secretmanager.secrets.deleteTagBinding - secretmanager.secrets.setIamPolicy - secretmanager.versions.access - secretmanager.versions.destroy - servicemanagement.services.delete - servicemanagement.services.getIamPolicy - servicemanagement.services.setIamPolicy - spanner.backupOperations.cancel - spanner.backupSchedules.delete - spanner.backupSchedules.setIamPolicy - spanner.backups.delete - spanner.backups.setIamPolicy - spanner.databaseOperations.cancel - spanner.databases.setIamPolicy - spanner.instanceConfigOperations.cancel - spanner.instanceConfigOperations.delete - spanner.instanceConfigs.delete - spanner.instanceOperations.cancel - spanner.instanceOperations.delete - spanner.instancePartitionOperations.cancel - spanner.instancePartitionOperations.delete - spanner.instancePartitions.delete - spanner.instances.createTagBinding - spanner.instances.delete - spanner.instances.deleteTagBinding - spanner.instances.setIamPolicy - spanner.sessions.delete - storage.anywhereCaches.create - storage.anywhereCaches.disable - storage.anywhereCaches.get - storage.anywhereCaches.list - storage.anywhereCaches.pause - storage.anywhereCaches.resume - storage.anywhereCaches.update - storage.bucketOperations.cancel - storage.bucketOperations.get - storage.bucketOperations.list - storage.buckets.createTagBinding - storage.buckets.delete - storage.buckets.deleteTagBinding - storage.buckets.enableObjectRetention - storage.buckets.get - storage.buckets.getIamPolicy - storage.buckets.getIpFilter - storage.buckets.getObjectInsights - storage.buckets.relocate - storage.buckets.restore - storage.buckets.setIamPolicy - storage.buckets.setIpFilter - storage.buckets.update - storage.folders.delete - storage.hmacKeys.delete - storage.intelligenceConfigs.update - storage.managedFolders.delete - storage.managedFolders.getIamPolicy - storage.managedFolders.setIamPolicy - storage.multipartUploads.list - storage.objects.delete - storage.objects.getIamPolicy - storage.objects.move - storage.objects.overrideUnlockedRetention - storage.objects.restore - storage.objects.setIamPolicy - storage.objects.setRetention - storage.objects.update - storageinsights.datasetConfigs.delete - storageinsights.operations.cancel - storageinsights.operations.delete - storageinsights.reportConfigs.delete - storagetransfer.agentpools.delete - storagetransfer.jobs.delete - storagetransfer.operations.cancel role_id: beam_admin stage: GA title: beam_admin