roles/dspm.serviceAgent
Title: DSPM Service Agent
Description: Gives DSPM Service Account access to consumer resources.
Stage: GA
48 Assigned Permissions:
- bigquery.datasets.createTagBinding
- bigquery.datasets.deleteTagBinding
- bigquery.datasets.listEffectiveTags
- bigquery.datasets.listTagBindings
- bigquery.tables.createTagBinding
- bigquery.tables.deleteTagBinding
- bigquery.tables.listEffectiveTags
- bigquery.tables.listTagBindings
- cloudasset.assets.exportResource
- cloudasset.assets.listResource
- cloudasset.assets.queryResource
- cloudasset.assets.searchAllResources
- cloudasset.feeds.create
- cloudasset.feeds.delete
- cloudasset.feeds.update
- resourcemanager.hierarchyNodes.createTagBinding
- resourcemanager.hierarchyNodes.deleteTagBinding
- resourcemanager.hierarchyNodes.listEffectiveTags
- resourcemanager.hierarchyNodes.listTagBindings
- resourcemanager.tagKeys.create
- resourcemanager.tagKeys.delete
- resourcemanager.tagKeys.get
- resourcemanager.tagKeys.getIamPolicy
- resourcemanager.tagKeys.list
- resourcemanager.tagKeys.update
- resourcemanager.tagValueBindings.create
- resourcemanager.tagValueBindings.delete
- resourcemanager.tagValues.create
- resourcemanager.tagValues.delete
- resourcemanager.tagValues.get
- resourcemanager.tagValues.getIamPolicy
- resourcemanager.tagValues.list
- resourcemanager.tagValues.update
- securitycenter.securityhealthanalyticssettings.calculate
- securitycenter.securityhealthanalyticssettings.get
- securitycenter.securityhealthanalyticssettings.update
- securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get
- securitycentermanagement.securityHealthAnalyticsCustomModules.create
- securitycentermanagement.securityHealthAnalyticsCustomModules.get
- securityposture.operations.get
- securityposture.postureDeployments.create
- securityposture.postureDeployments.delete
- securityposture.postures.create
- securityposture.postures.get
- storage.buckets.createTagBinding
- storage.buckets.deleteTagBinding
- storage.buckets.listEffectiveTags
- storage.buckets.listTagBindings