roles/dspm.serviceAgent 📋 Copy

Title: DSPM Service Agent

Description: Gives DSPM Service Account access to consumer resources.

Stage: GA

Role Type: Service Agent

64 Assigned Permissions:

• aiplatform.artifacts.list
• aiplatform.contexts.list
• aiplatform.dataItems.list
• aiplatform.datasets.get
• aiplatform.datasets.list
• aiplatform.endpoints.list
• aiplatform.entityTypes.list
• aiplatform.executions.list
• aiplatform.metadataSchemas.list
• aiplatform.modelEvaluations.list
• aiplatform.models.list
• aiplatform.trainingPipelines.list
• aiplatform.tuningJobs.list
• bigquery.datasets.createTagBinding
• bigquery.datasets.deleteTagBinding
• bigquery.datasets.listEffectiveTags
• bigquery.datasets.listTagBindings
• bigquery.jobs.create
• bigquery.tables.createTagBinding
• bigquery.tables.deleteTagBinding
• bigquery.tables.getData
• bigquery.tables.list
• bigquery.tables.listEffectiveTags
• bigquery.tables.listTagBindings
• cloudasset.assets.exportResource
• cloudasset.assets.listResource
• cloudasset.assets.queryResource
• cloudasset.assets.searchAllResources
• cloudasset.feeds.create
• cloudasset.feeds.delete
• cloudasset.feeds.update
• resourcemanager.hierarchyNodes.createTagBinding
• resourcemanager.hierarchyNodes.deleteTagBinding
• resourcemanager.hierarchyNodes.listEffectiveTags
• resourcemanager.hierarchyNodes.listTagBindings
• resourcemanager.tagKeys.create
• resourcemanager.tagKeys.delete
• resourcemanager.tagKeys.get
• resourcemanager.tagKeys.getIamPolicy
• resourcemanager.tagKeys.list
• resourcemanager.tagKeys.update
• resourcemanager.tagValueBindings.create
• resourcemanager.tagValueBindings.delete
• resourcemanager.tagValues.create
• resourcemanager.tagValues.delete
• resourcemanager.tagValues.get
• resourcemanager.tagValues.getIamPolicy
• resourcemanager.tagValues.list
• resourcemanager.tagValues.update
• securitycenter.securityhealthanalyticssettings.calculate
• securitycenter.securityhealthanalyticssettings.get
• securitycenter.securityhealthanalyticssettings.update
• securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get
• securitycentermanagement.securityHealthAnalyticsCustomModules.create
• securitycentermanagement.securityHealthAnalyticsCustomModules.get
• securityposture.operations.get
• securityposture.postureDeployments.create
• securityposture.postureDeployments.delete
• securityposture.postures.create
• securityposture.postures.get
• storage.buckets.createTagBinding
• storage.buckets.deleteTagBinding
• storage.buckets.listEffectiveTags
• storage.buckets.listTagBindings