IAM Scope — Referência Multi-Cloud de IAM

Tier

Admin

Categoria

Database

Escopo

project

Privilégios

Role IDroles/alloydb.admin

Esta é uma role privilegiada — concede capacidades de controle elevado. Aplique o princípio do menor privilégio e monitore atribuições via Cloud Audit Logs.

Admin

Administrative control over a service, may include IAM

Descrição

Full control of AlloyDB clusters, instances, and databases.

Privilégios / Capacidades(4)

Create and delete clusters and instances

Manage databases and users

Configure backups and maintenance

Set IAM policies

Role Definition (JSON)

{
  "name": "roles/alloydb.admin",
  "title": "AlloyDB Admin",
  "description": "Full control of AlloyDB clusters, instances, and databases.",
  "stage": "GA",
  "includedPermissions": [
    "Create and delete clusters and instances",
    "Manage databases and users",
    "Configure backups and maintenance",
    "Set IAM policies"
  ]
}

Roles relacionadasDatabase

Cloud SQL Admin

Full control of all Cloud SQL resources including creating and deleting instances.

Cloud SQL Editor

Full access to manage Cloud SQL instances excluding delete and IAM policy changes.

Cloud SQL Viewer

Read-only access to view Cloud SQL instance configurations and metadata.

Cloud SQL Client

Connect to Cloud SQL instances via Cloud SQL Auth Proxy for application connections.

Cloud SQL Instance User

Docs GCP