이 페이지의 일부 또는 모든 정보는 Trusted Cloud by S3NS에 적용되지 않을 수 있습니다. 자세한 내용은 Google Cloud와의 차이점을 참조하세요.

Config Delivery 역할 및 권한

이 페이지에는 Config Delivery의 IAM 역할과 권한이 나와 있습니다. 모든 역할과 권한을 검색하려면 역할 및 권한 색인을 참조하세요.

Config Delivery 역할

Role Permissions

Role	Permissions
ConfigDelivery Admin ^Beta (`roles/configdelivery.configDeliveryAdmin`) Grants full access to all Config Delivery resources. Lets users create, remove and manage fleet packages and resource bundles.	`configdelivery.*` `configdelivery.fleetPackages.create` `configdelivery.fleetPackages.delete` `configdelivery.fleetPackages.get` `configdelivery.fleetPackages.list` `configdelivery.fleetPackages.update` `configdelivery.locations.get` `configdelivery.locations.list` `configdelivery.operations.cancel` `configdelivery.operations.delete` `configdelivery.operations.get` `configdelivery.operations.list` `configdelivery.releases.create` `configdelivery.releases.delete` `configdelivery.releases.get` `configdelivery.releases.list` `configdelivery.releases.update` `configdelivery.resourceBundles.create` `configdelivery.resourceBundles.delete` `configdelivery.resourceBundles.get` `configdelivery.resourceBundles.list` `configdelivery.resourceBundles.update` `configdelivery.rollouts.abort` `configdelivery.rollouts.get` `configdelivery.rollouts.list` `configdelivery.rollouts.resume` `configdelivery.rollouts.suspend` `resourcemanager.projects.get` `resourcemanager.projects.list`
ConfigDelivery Viewer ^Beta (`roles/configdelivery.configDeliveryViewer`) Grants read access to all Config Delivery resources. Lets users view existing fleet packages and resource bundles, but they will not be able to make any changes.	`configdelivery.fleetPackages.get` `configdelivery.fleetPackages.list` `configdelivery.locations.*` `configdelivery.locations.get` `configdelivery.locations.list` `configdelivery.operations.get` `configdelivery.operations.list` `configdelivery.releases.get` `configdelivery.releases.list` `configdelivery.resourceBundles.get` `configdelivery.resourceBundles.list` `configdelivery.rollouts.get` `configdelivery.rollouts.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Config Delivery Resource Bundle Publisher ^Beta (`roles/configdelivery.resourceBundlePublisher`) Grants read and write permissions to Config Delivery ResourceBundles and Releases.	`configdelivery.locations.*` `configdelivery.locations.get` `configdelivery.locations.list` `configdelivery.operations.get` `configdelivery.operations.list` `configdelivery.releases.create` `configdelivery.releases.get` `configdelivery.releases.list` `configdelivery.releases.update` `configdelivery.resourceBundles.create` `configdelivery.resourceBundles.get` `configdelivery.resourceBundles.list` `configdelivery.resourceBundles.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Config Delivery Service Agent (`roles/configdelivery.serviceAgent`) Gives the Config Delivery service account permission to manage resources Warning: Do not grant service agent roles to any principals except service agents.	`artifactregistry.dockerimages.` `artifactregistry.dockerimages.get` `artifactregistry.dockerimages.list` `artifactregistry.projectsettings.get` `artifactregistry.repositories.create` `artifactregistry.repositories.downloadArtifacts` `artifactregistry.repositories.get` `artifactregistry.repositories.getIamPolicy` `artifactregistry.repositories.list` `artifactregistry.repositories.listEffectiveTags` `artifactregistry.repositories.listTagBindings` `artifactregistry.repositories.setIamPolicy` `artifactregistry.repositories.uploadArtifacts` `artifactregistry.tags.` `artifactregistry.tags.create` `artifactregistry.tags.delete` `artifactregistry.tags.get` `artifactregistry.tags.list` `artifactregistry.tags.update` `artifactregistry.versions.delete` `artifactregistry.versions.get` `artifactregistry.versions.list` `cloudbuild.builds.create` `cloudbuild.builds.get` `cloudbuild.builds.list` `cloudbuild.builds.update` `cloudbuild.repositories.get` `container.customResourceDefinitions.get` `container.customResourceDefinitions.list` `container.serviceAccounts.get` `container.serviceAccounts.list` `container.thirdPartyObjects.*` `container.thirdPartyObjects.create` `container.thirdPartyObjects.delete` `container.thirdPartyObjects.get` `container.thirdPartyObjects.list` `container.thirdPartyObjects.update` `gkehub.gateway.delete` `gkehub.gateway.generateCredentials` `gkehub.gateway.get` `gkehub.gateway.patch` `gkehub.gateway.post` `gkehub.gateway.put` `gkehub.memberships.get` `iam.serviceAccounts.actAs`

ConfigDelivery Admin ^Beta

(roles/configdelivery.configDeliveryAdmin)

Grants full access to all Config Delivery resources. Lets users create, remove and manage fleet packages and resource bundles.

configdelivery.*

configdelivery.fleetPackages.create
configdelivery.fleetPackages.delete
configdelivery.fleetPackages.get
configdelivery.fleetPackages.list
configdelivery.fleetPackages.update
configdelivery.locations.get
configdelivery.locations.list
configdelivery.operations.cancel
configdelivery.operations.delete
configdelivery.operations.get
configdelivery.operations.list
configdelivery.releases.create
configdelivery.releases.delete
configdelivery.releases.get
configdelivery.releases.list
configdelivery.releases.update
configdelivery.resourceBundles.create
configdelivery.resourceBundles.delete
configdelivery.resourceBundles.get
configdelivery.resourceBundles.list
configdelivery.resourceBundles.update
configdelivery.rollouts.abort
configdelivery.rollouts.get
configdelivery.rollouts.list
configdelivery.rollouts.resume
configdelivery.rollouts.suspend

resourcemanager.projects.get

resourcemanager.projects.list

ConfigDelivery Viewer ^Beta

(roles/configdelivery.configDeliveryViewer)

Grants read access to all Config Delivery resources. Lets users view existing fleet packages and resource bundles, but they will not be able to make any changes.

configdelivery.fleetPackages.get

configdelivery.fleetPackages.list

configdelivery.locations.*

configdelivery.locations.get
configdelivery.locations.list

configdelivery.operations.get

configdelivery.operations.list

configdelivery.releases.get

configdelivery.releases.list

configdelivery.resourceBundles.get

configdelivery.resourceBundles.list

configdelivery.rollouts.get

configdelivery.rollouts.list

resourcemanager.projects.get

resourcemanager.projects.list

Config Delivery Resource Bundle Publisher ^Beta

(roles/configdelivery.resourceBundlePublisher)

Grants read and write permissions to Config Delivery ResourceBundles and Releases.

configdelivery.locations.*

configdelivery.locations.get
configdelivery.locations.list

configdelivery.operations.get

configdelivery.operations.list

configdelivery.releases.create

configdelivery.releases.get

configdelivery.releases.list

configdelivery.releases.update

configdelivery.resourceBundles.create

configdelivery.resourceBundles.get

configdelivery.resourceBundles.list

configdelivery.resourceBundles.update

resourcemanager.projects.get

resourcemanager.projects.list

Config Delivery Service Agent

(roles/configdelivery.serviceAgent)

Gives the Config Delivery service account permission to manage resources

artifactregistry.dockerimages.*

artifactregistry.dockerimages.get
artifactregistry.dockerimages.list

artifactregistry.projectsettings.get

artifactregistry.repositories.create

artifactregistry.repositories.downloadArtifacts

artifactregistry.repositories.get

artifactregistry.repositories.getIamPolicy

artifactregistry.repositories.list

artifactregistry.repositories.listEffectiveTags

artifactregistry.repositories.listTagBindings

artifactregistry.repositories.setIamPolicy

artifactregistry.repositories.uploadArtifacts

artifactregistry.tags.*

artifactregistry.tags.create
artifactregistry.tags.delete
artifactregistry.tags.get
artifactregistry.tags.list
artifactregistry.tags.update

artifactregistry.versions.delete

artifactregistry.versions.get

artifactregistry.versions.list

cloudbuild.builds.create

cloudbuild.builds.get

cloudbuild.builds.list

cloudbuild.builds.update

cloudbuild.repositories.get

container.customResourceDefinitions.get

container.customResourceDefinitions.list

container.serviceAccounts.get

container.serviceAccounts.list

container.thirdPartyObjects.*

container.thirdPartyObjects.create
container.thirdPartyObjects.delete
container.thirdPartyObjects.get
container.thirdPartyObjects.list
container.thirdPartyObjects.update

gkehub.gateway.delete

gkehub.gateway.generateCredentials

gkehub.gateway.get

gkehub.gateway.patch

gkehub.gateway.post

gkehub.gateway.put

gkehub.memberships.get

iam.serviceAccounts.actAs

Config Delivery 권한

권한	역할에 포함됨
`configdelivery.fleetPackages.create`	소유자(`roles/owner`) 편집자(`roles/editor`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`)
`configdelivery.fleetPackages.delete`	소유자(`roles/owner`) 편집자(`roles/editor`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`)
`configdelivery.fleetPackages.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`) ConfigDelivery 뷰어(`roles/configdelivery.configDeliveryViewer`)
`configdelivery.fleetPackages.list`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`) ConfigDelivery 뷰어(`roles/configdelivery.configDeliveryViewer`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`)
`configdelivery.fleetPackages.update`	소유자(`roles/owner`) 편집자(`roles/editor`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`)
`configdelivery.locations.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`) ConfigDelivery 뷰어(`roles/configdelivery.configDeliveryViewer`) Config Delivery 리소스 번들 게시자(`roles/configdelivery.resourceBundlePublisher`)
`configdelivery.locations.list`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`) ConfigDelivery 뷰어(`roles/configdelivery.configDeliveryViewer`) Config Delivery 리소스 번들 게시자(`roles/configdelivery.resourceBundlePublisher`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`)
`configdelivery.operations.cancel`	소유자(`roles/owner`) 편집자(`roles/editor`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`)
`configdelivery.operations.delete`	소유자(`roles/owner`) 편집자(`roles/editor`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`)
`configdelivery.operations.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`) ConfigDelivery 뷰어(`roles/configdelivery.configDeliveryViewer`) Config Delivery 리소스 번들 게시자(`roles/configdelivery.resourceBundlePublisher`)
`configdelivery.operations.list`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`) ConfigDelivery 뷰어(`roles/configdelivery.configDeliveryViewer`) Config Delivery 리소스 번들 게시자(`roles/configdelivery.resourceBundlePublisher`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`)
`configdelivery.releases.create`	소유자(`roles/owner`) 편집자(`roles/editor`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`) Config Delivery 리소스 번들 게시자(`roles/configdelivery.resourceBundlePublisher`)
`configdelivery.releases.delete`	소유자(`roles/owner`) 편집자(`roles/editor`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`)
`configdelivery.releases.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`) ConfigDelivery 뷰어(`roles/configdelivery.configDeliveryViewer`) Config Delivery 리소스 번들 게시자(`roles/configdelivery.resourceBundlePublisher`)
`configdelivery.releases.list`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`) ConfigDelivery 뷰어(`roles/configdelivery.configDeliveryViewer`) Config Delivery 리소스 번들 게시자(`roles/configdelivery.resourceBundlePublisher`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`)
`configdelivery.releases.update`	소유자(`roles/owner`) 편집자(`roles/editor`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`) Config Delivery 리소스 번들 게시자(`roles/configdelivery.resourceBundlePublisher`)
`configdelivery.resourceBundles.create`	소유자(`roles/owner`) 편집자(`roles/editor`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`) Config Delivery 리소스 번들 게시자(`roles/configdelivery.resourceBundlePublisher`)
`configdelivery.resourceBundles.delete`	소유자(`roles/owner`) 편집자(`roles/editor`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`)
`configdelivery.resourceBundles.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`) ConfigDelivery 뷰어(`roles/configdelivery.configDeliveryViewer`) Config Delivery 리소스 번들 게시자(`roles/configdelivery.resourceBundlePublisher`)
`configdelivery.resourceBundles.list`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`) ConfigDelivery 뷰어(`roles/configdelivery.configDeliveryViewer`) Config Delivery 리소스 번들 게시자(`roles/configdelivery.resourceBundlePublisher`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`)
`configdelivery.resourceBundles.update`	소유자(`roles/owner`) 편집자(`roles/editor`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`) Config Delivery 리소스 번들 게시자(`roles/configdelivery.resourceBundlePublisher`)
`configdelivery.rollouts.abort`	소유자(`roles/owner`) 편집자(`roles/editor`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`)
`configdelivery.rollouts.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`) ConfigDelivery 뷰어(`roles/configdelivery.configDeliveryViewer`)
`configdelivery.rollouts.list`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`) ConfigDelivery 뷰어(`roles/configdelivery.configDeliveryViewer`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`)
`configdelivery.rollouts.resume`	소유자(`roles/owner`) 편집자(`roles/editor`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`)
`configdelivery.rollouts.suspend`	소유자(`roles/owner`) 편집자(`roles/editor`) ConfigDelivery 관리자(`roles/configdelivery.configDeliveryAdmin`)

Config Delivery 역할 및 권한

Config Delivery 역할

ConfigDelivery Admin ^Beta

ConfigDelivery Viewer ^Beta

Config Delivery Resource Bundle Publisher ^Beta

Config Delivery Service Agent

Config Delivery 권한

`configdelivery.fleetPackages.create`

`configdelivery.fleetPackages.delete`

`configdelivery.fleetPackages.get`

`configdelivery.fleetPackages.list`

`configdelivery.fleetPackages.update`

`configdelivery.locations.get`

`configdelivery.locations.list`

`configdelivery.operations.cancel`

`configdelivery.operations.delete`

`configdelivery.operations.get`

`configdelivery.operations.list`

`configdelivery.releases.create`

`configdelivery.releases.delete`

`configdelivery.releases.get`

`configdelivery.releases.list`

`configdelivery.releases.update`

`configdelivery.resourceBundles.create`

`configdelivery.resourceBundles.delete`

`configdelivery.resourceBundles.get`

`configdelivery.resourceBundles.list`

`configdelivery.resourceBundles.update`

`configdelivery.rollouts.abort`

`configdelivery.rollouts.get`

`configdelivery.rollouts.list`

`configdelivery.rollouts.resume`

`configdelivery.rollouts.suspend`

Config Delivery 역할 및 권한

Config Delivery 역할

ConfigDelivery Admin Beta

ConfigDelivery Viewer Beta

Config Delivery Resource Bundle Publisher Beta

Config Delivery Service Agent

Config Delivery 권한

configdelivery.fleetPackages.create

configdelivery.fleetPackages.delete

configdelivery.fleetPackages.get

configdelivery.fleetPackages.list

configdelivery.fleetPackages.update

configdelivery.locations.get

configdelivery.locations.list

configdelivery.operations.cancel

configdelivery.operations.delete

configdelivery.operations.get

configdelivery.operations.list

configdelivery.releases.create

configdelivery.releases.delete

configdelivery.releases.get

configdelivery.releases.list

configdelivery.releases.update

configdelivery.resourceBundles.create

configdelivery.resourceBundles.delete

configdelivery.resourceBundles.get

configdelivery.resourceBundles.list

configdelivery.resourceBundles.update

configdelivery.rollouts.abort

configdelivery.rollouts.get

configdelivery.rollouts.list

configdelivery.rollouts.resume

configdelivery.rollouts.suspend

ConfigDelivery Admin ^Beta

ConfigDelivery Viewer ^Beta

Config Delivery Resource Bundle Publisher ^Beta

`configdelivery.fleetPackages.create`

`configdelivery.fleetPackages.delete`

`configdelivery.fleetPackages.get`

`configdelivery.fleetPackages.list`

`configdelivery.fleetPackages.update`

`configdelivery.locations.get`

`configdelivery.locations.list`

`configdelivery.operations.cancel`

`configdelivery.operations.delete`

`configdelivery.operations.get`

`configdelivery.operations.list`

`configdelivery.releases.create`

`configdelivery.releases.delete`

`configdelivery.releases.get`

`configdelivery.releases.list`

`configdelivery.releases.update`

`configdelivery.resourceBundles.create`

`configdelivery.resourceBundles.delete`

`configdelivery.resourceBundles.get`

`configdelivery.resourceBundles.list`

`configdelivery.resourceBundles.update`

`configdelivery.rollouts.abort`

`configdelivery.rollouts.get`

`configdelivery.rollouts.list`

`configdelivery.rollouts.resume`

`configdelivery.rollouts.suspend`