IAM Scope — Referência Multi-Cloud de IAM

Tier

Admin

Categoria

Database

Escopo

project

Privilégios

Role IDroles/datastore.owner

Esta é uma role privilegiada — concede capacidades de controle elevado. Aplique o princípio do menor privilégio e monitore atribuições via Cloud Audit Logs.

Admin

Administrative control over a service, may include IAM

Descrição

Full access to Cloud Datastore and Firestore in Datastore mode, including IAM.

Privilégios / Capacidades(4)

Read and write all entities

Manage indexes and queries

Import and export data

Set IAM policies

Role Definition (JSON)

{
  "name": "roles/datastore.owner",
  "title": "Cloud Datastore Owner",
  "description": "Full access to Cloud Datastore and Firestore in Datastore mode, including IAM.",
  "stage": "GA",
  "includedPermissions": [
    "Read and write all entities",
    "Manage indexes and queries",
    "Import and export data",
    "Set IAM policies"
  ]
}

Roles relacionadasDatabase

Cloud SQL Admin

Full control of all Cloud SQL resources including creating and deleting instances.

Cloud SQL Editor

Full access to manage Cloud SQL instances excluding delete and IAM policy changes.

Cloud SQL Viewer

Read-only access to view Cloud SQL instance configurations and metadata.

Cloud SQL Client

Connect to Cloud SQL instances via Cloud SQL Auth Proxy for application connections.

Cloud SQL Instance User

Docs GCP