roles/compliancescanning.serviceAgent
Title: Compliance Scanning Service Agent
Description: Gives Compliance Scanning the access it needs to analyze containers and VMs for compliance and create occurrences using the Container Analysis API
Stage: GA
49 Assigned Permissions:
- artifactregistry.dockerimages.get
- artifactregistry.dockerimages.list
- artifactregistry.files.download
- artifactregistry.files.get
- artifactregistry.files.list
- artifactregistry.locations.get
- artifactregistry.locations.list
- artifactregistry.mavenartifacts.get
- artifactregistry.mavenartifacts.list
- artifactregistry.npmpackages.get
- artifactregistry.npmpackages.list
- artifactregistry.packages.get
- artifactregistry.packages.list
- artifactregistry.projectsettings.get
- artifactregistry.pythonpackages.get
- artifactregistry.pythonpackages.list
- artifactregistry.repositories.downloadArtifacts
- artifactregistry.repositories.get
- artifactregistry.repositories.list
- artifactregistry.repositories.listEffectiveTags
- artifactregistry.repositories.listTagBindings
- artifactregistry.repositories.readViaVirtualRepository
- artifactregistry.tags.get
- artifactregistry.tags.list
- artifactregistry.versions.get
- artifactregistry.versions.list
- compute.images.get
- compute.images.list
- compute.images.useReadOnly
- compute.instances.get
- compute.instances.getGuestAttributes
- compute.instances.list
- compute.zones.get
- compute.zones.list
- containeranalysis.notes.attachOccurrence
- containeranalysis.notes.create
- containeranalysis.notes.delete
- containeranalysis.notes.get
- containeranalysis.notes.list
- containeranalysis.notes.update
- containeranalysis.occurrences.create
- containeranalysis.occurrences.delete
- containeranalysis.occurrences.get
- containeranalysis.occurrences.list
- containeranalysis.occurrences.update
- resourcemanager.projects.get
- resourcemanager.projects.list
- storage.objects.get
- storage.objects.list