roles/iam.denyAdmin
Title: Deny Admin
Description: Deny admin role, with permissions to read and modify deny policies
Stage: GA
11 Assigned Permissions:
- cloudasset.assets.listResource
- iam.denypolicies.create
- iam.denypolicies.delete
- iam.denypolicies.get
- iam.denypolicies.list
- iam.denypolicies.update
- policyanalyzer.resourceAuthorizationActivities.query
- policysimulator.accessPolicySimulationResults.list
- policysimulator.accessPolicySimulations.create
- policysimulator.accessPolicySimulations.get
- policysimulator.accessPolicySimulations.list