roles/chronicle.soarServiceAgent
Title: Chronicle SOAR Service Agent
Description: Gives Chronicle SOAR the ability to perform remediation on Cloud Platform resources.
Stage: GA
34 Assigned Permissions:
- cloudasset.assets.analyzeIamPolicy
- cloudasset.assets.exportIamPolicy
- cloudasset.assets.exportResource
- cloudasset.assets.searchAllIamPolicies
- cloudasset.assets.searchAllResources
- compute.firewalls.get
- compute.firewalls.update
- compute.instances.deleteAccessConfig
- compute.instances.get
- compute.instances.list
- compute.instances.stop
- compute.instances.updateNetworkInterface
- compute.networks.updatePolicy
- compute.zones.list
- iam.serviceAccounts.disable
- iam.serviceAccounts.list
- recommender.iamPolicyRecommendations.get
- recommender.iamPolicyRecommendations.list
- recommender.iamPolicyRecommendations.update
- resourcemanager.organizations.getIamPolicy
- securitycenter.findingexternalsystems.update
- securitycenter.findings.list
- securitycenter.findings.setMute
- securitycenter.findings.setState
- securitycenter.findings.update
- securitycenter.notificationconfig.create
- securitycenter.notificationconfig.delete
- securitycenter.notificationconfig.get
- securitycenter.notificationconfig.update
- securitycenter.sources.list
- storage.buckets.get
- storage.buckets.getIamPolicy
- storage.buckets.list
- storage.buckets.update