Control de acceso con la IAM

Identity and Access Management (IAM) te permite controlar el acceso a los recursos de Application Design Center asignando roles y permisos predefinidos a usuarios, grupos y cuentas de servicio. Estos roles rigen quién puede administrar espacios, crear plantillas y, luego, implementar aplicaciones.

Roles predefinidos de Application Design Center

Para otorgar acceso a recursos específicos de Google Cloud y evitar el acceso no autorizado a otros recursos, asigna los roles predefinidos del Centro de diseño de apps en la carpeta habilitada para apps o el proyecto de administración.

Usa los siguientes roles de IAM para administrar espacios y crear plantillas:

• Administrador de Application Design Center (roles/designcenter.admin)
• Usuario de Application Design Center (roles/designcenter.user)
• Visualizador de Application Design Center (roles/designcenter.viewer)

Usa los siguientes roles de IAM para crear parámetros de configuración de aplicaciones y administrar los ciclos de vida de las implementaciones:

• Administrador de aplicaciones (roles/designcenter.applicationAdmin)
• Editor de aplicaciones (roles/designcenter.applicationEditor)
• Visualizador de aplicaciones (roles/designcenter.applicationViewer)

El rol de administrador de Application Design Center incluye todos los permisos de los otros roles de Application Design Center.

Descripciones de los roles de Application Design Center

En la siguiente tabla, se describen los roles del Centro de diseño de apps y sus responsabilidades típicas.

Función	Descripción	Purpose
Administrador de Application Design Center	Crea y administra todos los artefactos de App Design Center, y delega el control de las aplicaciones a otros usuarios.	Administrar todo el ciclo de vida de una aplicación Para los administradores de plataformas, que tienen permisos administrativos y visibilidad completa de la arquitectura de extremo a extremo.
Usuario de Application Design Center	Crear y actualizar plantillas de aplicaciones	Escalar la capacidad de crear, actualizar o borrar plantillas de aplicaciones para reducir la carga de trabajo de los administradores de la plataforma Para ingenieros de plataformas, que crean y administran plantillas de aplicaciones.
Visualizador de Application Design Center	Ver espacios, catálogos, plantillas, aplicaciones y sus atributos	Para ver los espacios, catálogos, plantillas, aplicaciones y sus dependencias de App Design Center. Para la mayoría del personal de la organización. Otorga este rol a los usuarios que solo necesitan ver espacios, catálogos, plantillas y aplicaciones.
Administrador de aplicaciones	Crear, administrar e implementar aplicaciones, y delegar el control de las aplicaciones a otros desarrolladores de aplicaciones	Administrar borradores y las implementaciones de aplicaciones, y adjuntar los proyectos de servicio necesarios para almacenar recursos individuales. Para administradores y desarrolladores responsables de la creación de aplicaciones.
Editor de aplicaciones	Crear, administrar e implementar aplicaciones	Administrar borradores e implementaciones, y reducir la carga de trabajo de los administradores de aplicaciones Para operadores de aplicaciones que comprenden las implementaciones.
Visualizador de aplicaciones	Ver aplicaciones	Para ver plantillas, aplicaciones y sus dependencias Para la mayoría del personal de la organización. Otorga este rol a los usuarios que solo necesitan ver plantillas y aplicaciones.

Permisos de Application Design Center

En la siguiente tabla, se enumeran los roles de IAM de App Design Center y sus permisos.

Administrador de Application Design Center Usuario de Application Design Center Visualizador del Centro de diseño de aplicaciones Administrador de aplicaciones Editor de aplicaciones Visualizador de aplicaciones Borrar todo

Administrador de Application Design Center (roles/designcenter.admin) Tiene acceso completo a los recursos de Application Design Center.	apphub.applications.create apphub.applications.delete apphub.applications.get apphub.applications.list apphub.applications.update apphub.boundaries.attach apphub.boundaries.update apphub.locations.* apphub.locations.get apphub.locations.list apphub.serviceProjectAttachments.list auditmanager.auditReports.get auditmanager.auditReports.list auditmanager.auditSchedules.get auditmanager.auditSchedules.list auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controlReports.get auditmanager.controlReports.list auditmanager.controls.list auditmanager.findings.list auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.operations.get auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.* auditmanager.resourceEnrollmentStatuses.get auditmanager.resourceEnrollmentStatuses.list cloudbuild.builds.get cloudbuild.builds.list cloudsecuritycompliance.auditReports.get cloudsecuritycompliance.auditReports.list cloudsecuritycompliance.billingSettings.get cloudsecuritycompliance.cloudControlDeployments.get cloudsecuritycompliance.cloudControlDeployments.list cloudsecuritycompliance.cloudControlPredictions.get cloudsecuritycompliance.cloudControlPredictions.list cloudsecuritycompliance.cloudControls.get cloudsecuritycompliance.cloudControls.list cloudsecuritycompliance.cmEnrollments.get cloudsecuritycompliance.controlComplianceSummaries.list cloudsecuritycompliance.controlReports.get cloudsecuritycompliance.controls.* cloudsecuritycompliance.controls.get cloudsecuritycompliance.controls.list cloudsecuritycompliance.findingSummaries.list cloudsecuritycompliance.findings.list cloudsecuritycompliance.frameworkAudits.get cloudsecuritycompliance.frameworkAudits.list cloudsecuritycompliance.frameworkComplianceReports.* cloudsecuritycompliance.frameworkComplianceReports.aggregate cloudsecuritycompliance.frameworkComplianceReports.get cloudsecuritycompliance.frameworkComplianceSummaries.list cloudsecuritycompliance.frameworkDeployments.get cloudsecuritycompliance.frameworkDeployments.list cloudsecuritycompliance.frameworks.get cloudsecuritycompliance.frameworks.list cloudsecuritycompliance.locations.get cloudsecuritycompliance.locations.list cloudsecuritycompliance.operations.get cloudsecuritycompliance.operations.list cloudsecuritycompliance.resourceEnrollmentStatuses.* cloudsecuritycompliance.resourceEnrollmentStatuses.get cloudsecuritycompliance.resourceEnrollmentStatuses.list config.automigrationconfig.get config.deploymentgrouprevisions.* config.deploymentgrouprevisions.get config.deploymentgrouprevisions.list config.deploymentgroups.get config.deploymentgroups.list config.deploymentgroups.listEffectiveTags config.deploymentgroups.listTagBindings config.deployments.get config.deployments.getIamPolicy config.deployments.list config.deployments.listEffectiveTags config.deployments.listTagBindings config.locations.* config.locations.get config.locations.list config.operations.get config.operations.list config.previews.export config.previews.get config.previews.list config.previews.listEffectiveTags config.previews.listTagBindings config.resources.* config.resources.get config.resources.list config.revisions.get config.revisions.list config.terraformversions.* config.terraformversions.get config.terraformversions.list container.clusters.list designcenter.* designcenter.applicationTemplateRevisions.delete designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.create designcenter.applicationTemplates.delete designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applicationTemplates.update designcenter.applications.create designcenter.applications.delete designcenter.applications.get designcenter.applications.list designcenter.applications.update designcenter.catalogTemplateRevisions.create designcenter.catalogTemplateRevisions.delete designcenter.catalogTemplateRevisions.get designcenter.catalogTemplateRevisions.list designcenter.catalogTemplates.create designcenter.catalogTemplates.delete designcenter.catalogTemplates.get designcenter.catalogTemplates.list designcenter.catalogTemplates.update designcenter.catalogs.create designcenter.catalogs.delete designcenter.catalogs.get designcenter.catalogs.list designcenter.catalogs.update designcenter.components.create designcenter.components.delete designcenter.components.get designcenter.components.list designcenter.components.update designcenter.connections.create designcenter.connections.delete designcenter.connections.get designcenter.connections.list designcenter.connections.update designcenter.locations.get designcenter.locations.list designcenter.operations.cancel designcenter.operations.delete designcenter.operations.get designcenter.operations.list designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.create designcenter.shares.delete designcenter.shares.get designcenter.shares.list designcenter.spaces.create designcenter.spaces.delete designcenter.spaces.get designcenter.spaces.getIamPolicy designcenter.spaces.list designcenter.spaces.setIamPolicy designcenter.spaces.update developerconnect.connections.constructGitHubAppManifest developerconnect.connections.create developerconnect.connections.createTagBinding developerconnect.connections.delete developerconnect.connections.deleteTagBinding developerconnect.connections.fetchGitHubInstallations developerconnect.connections.fetchLinkableGitRepositories developerconnect.connections.generateGitHubStateToken developerconnect.connections.get developerconnect.connections.list developerconnect.connections.listEffectiveTags developerconnect.connections.listTagBindings developerconnect.connections.processGitHubAppCreationCallback developerconnect.connections.processGitHubOAuthCallback developerconnect.connections.update developerconnect.gitRepositoryLinks.addPullRequestComment developerconnect.gitRepositoryLinks.addPullRequestReviewComment developerconnect.gitRepositoryLinks.create developerconnect.gitRepositoryLinks.delete developerconnect.gitRepositoryLinks.diffCommit developerconnect.gitRepositoryLinks.fetchCommit developerconnect.gitRepositoryLinks.fetchCommitList developerconnect.gitRepositoryLinks.fetchFileBlame developerconnect.gitRepositoryLinks.fetchGitRefs developerconnect.gitRepositoryLinks.fetchPullRequest developerconnect.gitRepositoryLinks.fetchPullRequestList developerconnect.gitRepositoryLinks.get developerconnect.gitRepositoryLinks.gitProxyRead developerconnect.gitRepositoryLinks.gitProxyWrite developerconnect.gitRepositoryLinks.list developerconnect.gitRepositoryLinks.modifyPullRequest developerconnect.gitRepositoryLinks.openPullRequest developerconnect.locations.* developerconnect.locations.get developerconnect.locations.list developerconnect.operations.* developerconnect.operations.cancel developerconnect.operations.delete developerconnect.operations.get developerconnect.operations.list monitoring.timeSeries.create orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.list storage.folders.* storage.folders.create storage.folders.delete storage.folders.get storage.folders.list storage.folders.rename storage.managedFolders.create storage.managedFolders.delete storage.managedFolders.get storage.managedFolders.list storage.managedFolders.update storage.multipartUploads.* storage.multipartUploads.abort storage.multipartUploads.create storage.multipartUploads.list storage.multipartUploads.listParts storage.objects.create storage.objects.createContext storage.objects.delete storage.objects.deleteContext storage.objects.get storage.objects.list storage.objects.move storage.objects.restore storage.objects.update storage.objects.updateContext
Usuario de Application Design Center (roles/designcenter.user) Tiene acceso de solo lectura a los recursos de Application Design Center.	apphub.serviceProjectAttachments.list auditmanager.auditReports.get auditmanager.auditReports.list auditmanager.auditSchedules.get auditmanager.auditSchedules.list auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controlReports.get auditmanager.controlReports.list auditmanager.controls.list auditmanager.findings.list auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.operations.get auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.* auditmanager.resourceEnrollmentStatuses.get auditmanager.resourceEnrollmentStatuses.list cloudsecuritycompliance.auditReports.get cloudsecuritycompliance.auditReports.list cloudsecuritycompliance.billingSettings.get cloudsecuritycompliance.cloudControlDeployments.get cloudsecuritycompliance.cloudControlDeployments.list cloudsecuritycompliance.cloudControlPredictions.get cloudsecuritycompliance.cloudControlPredictions.list cloudsecuritycompliance.cloudControls.get cloudsecuritycompliance.cloudControls.list cloudsecuritycompliance.cmEnrollments.get cloudsecuritycompliance.controlComplianceSummaries.list cloudsecuritycompliance.controlReports.get cloudsecuritycompliance.controls.* cloudsecuritycompliance.controls.get cloudsecuritycompliance.controls.list cloudsecuritycompliance.findingSummaries.list cloudsecuritycompliance.findings.list cloudsecuritycompliance.frameworkAudits.get cloudsecuritycompliance.frameworkAudits.list cloudsecuritycompliance.frameworkComplianceReports.* cloudsecuritycompliance.frameworkComplianceReports.aggregate cloudsecuritycompliance.frameworkComplianceReports.get cloudsecuritycompliance.frameworkComplianceSummaries.list cloudsecuritycompliance.frameworkDeployments.get cloudsecuritycompliance.frameworkDeployments.list cloudsecuritycompliance.frameworks.get cloudsecuritycompliance.frameworks.list cloudsecuritycompliance.locations.get cloudsecuritycompliance.locations.list cloudsecuritycompliance.operations.get cloudsecuritycompliance.operations.list cloudsecuritycompliance.resourceEnrollmentStatuses.* cloudsecuritycompliance.resourceEnrollmentStatuses.get cloudsecuritycompliance.resourceEnrollmentStatuses.list container.clusters.list designcenter.applicationTemplateRevisions.* designcenter.applicationTemplateRevisions.delete designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.* designcenter.applicationTemplates.create designcenter.applicationTemplates.delete designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applicationTemplates.update designcenter.applications.get designcenter.applications.list designcenter.catalogTemplateRevisions.get designcenter.catalogTemplateRevisions.list designcenter.catalogTemplates.get designcenter.catalogTemplates.list designcenter.catalogs.get designcenter.catalogs.list designcenter.components.* designcenter.components.create designcenter.components.delete designcenter.components.get designcenter.components.list designcenter.components.update designcenter.connections.* designcenter.connections.create designcenter.connections.delete designcenter.connections.get designcenter.connections.list designcenter.connections.update designcenter.locations.* designcenter.locations.get designcenter.locations.list designcenter.operations.get designcenter.operations.list designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.get designcenter.shares.list designcenter.spaces.get designcenter.spaces.getIamPolicy designcenter.spaces.list monitoring.timeSeries.create orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.list storage.folders.* storage.folders.create storage.folders.delete storage.folders.get storage.folders.list storage.folders.rename storage.managedFolders.create storage.managedFolders.delete storage.managedFolders.get storage.managedFolders.list storage.managedFolders.update storage.multipartUploads.* storage.multipartUploads.abort storage.multipartUploads.create storage.multipartUploads.list storage.multipartUploads.listParts storage.objects.create storage.objects.createContext storage.objects.delete storage.objects.deleteContext storage.objects.get storage.objects.list storage.objects.move storage.objects.restore storage.objects.update storage.objects.updateContext
Visualizador del Centro de diseño de aplicaciones (roles/designcenter.viewer) Tiene acceso de solo lectura a los recursos de Application Design Center.	auditmanager.auditReports.get auditmanager.auditReports.list auditmanager.auditSchedules.get auditmanager.auditSchedules.list auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controlReports.get auditmanager.controlReports.list auditmanager.controls.list auditmanager.findings.list auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.operations.get auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.* auditmanager.resourceEnrollmentStatuses.get auditmanager.resourceEnrollmentStatuses.list cloudsecuritycompliance.auditReports.get cloudsecuritycompliance.auditReports.list cloudsecuritycompliance.billingSettings.get cloudsecuritycompliance.cloudControlDeployments.get cloudsecuritycompliance.cloudControlDeployments.list cloudsecuritycompliance.cloudControlPredictions.get cloudsecuritycompliance.cloudControlPredictions.list cloudsecuritycompliance.cloudControls.get cloudsecuritycompliance.cloudControls.list cloudsecuritycompliance.cmEnrollments.get cloudsecuritycompliance.controlComplianceSummaries.list cloudsecuritycompliance.controlReports.get cloudsecuritycompliance.controls.* cloudsecuritycompliance.controls.get cloudsecuritycompliance.controls.list cloudsecuritycompliance.findingSummaries.list cloudsecuritycompliance.findings.list cloudsecuritycompliance.frameworkAudits.get cloudsecuritycompliance.frameworkAudits.list cloudsecuritycompliance.frameworkComplianceReports.* cloudsecuritycompliance.frameworkComplianceReports.aggregate cloudsecuritycompliance.frameworkComplianceReports.get cloudsecuritycompliance.frameworkComplianceSummaries.list cloudsecuritycompliance.frameworkDeployments.get cloudsecuritycompliance.frameworkDeployments.list cloudsecuritycompliance.frameworks.get cloudsecuritycompliance.frameworks.list cloudsecuritycompliance.locations.get cloudsecuritycompliance.locations.list cloudsecuritycompliance.operations.get cloudsecuritycompliance.operations.list cloudsecuritycompliance.resourceEnrollmentStatuses.* cloudsecuritycompliance.resourceEnrollmentStatuses.get cloudsecuritycompliance.resourceEnrollmentStatuses.list container.clusters.list designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applications.get designcenter.applications.list designcenter.catalogTemplateRevisions.get designcenter.catalogTemplateRevisions.list designcenter.catalogTemplates.get designcenter.catalogTemplates.list designcenter.catalogs.get designcenter.catalogs.list designcenter.components.get designcenter.components.list designcenter.connections.get designcenter.connections.list designcenter.locations.* designcenter.locations.get designcenter.locations.list designcenter.operations.get designcenter.operations.list designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.get designcenter.shares.list designcenter.spaces.get designcenter.spaces.getIamPolicy designcenter.spaces.list resourcemanager.projects.get resourcemanager.projects.list storage.folders.get storage.folders.list storage.managedFolders.get storage.managedFolders.list storage.objects.get storage.objects.list
Administrador de aplicaciones (roles/designcenter.applicationAdmin) Acceso de administrador a la aplicación.	apphub.applications.create apphub.applications.delete apphub.applications.get apphub.applications.list apphub.applications.update apphub.locations.* apphub.locations.get apphub.locations.list apphub.serviceProjectAttachments.list auditmanager.auditReports.get auditmanager.auditReports.list auditmanager.auditSchedules.get auditmanager.auditSchedules.list auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controlReports.get auditmanager.controlReports.list auditmanager.controls.list auditmanager.findings.list auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.operations.get auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.* auditmanager.resourceEnrollmentStatuses.get auditmanager.resourceEnrollmentStatuses.list cloudbuild.builds.get cloudbuild.builds.list cloudsecuritycompliance.auditReports.get cloudsecuritycompliance.auditReports.list cloudsecuritycompliance.billingSettings.get cloudsecuritycompliance.cloudControlDeployments.get cloudsecuritycompliance.cloudControlDeployments.list cloudsecuritycompliance.cloudControlPredictions.get cloudsecuritycompliance.cloudControlPredictions.list cloudsecuritycompliance.cloudControls.get cloudsecuritycompliance.cloudControls.list cloudsecuritycompliance.cmEnrollments.get cloudsecuritycompliance.controlComplianceSummaries.list cloudsecuritycompliance.controlReports.get cloudsecuritycompliance.controls.* cloudsecuritycompliance.controls.get cloudsecuritycompliance.controls.list cloudsecuritycompliance.findingSummaries.list cloudsecuritycompliance.findings.list cloudsecuritycompliance.frameworkAudits.get cloudsecuritycompliance.frameworkAudits.list cloudsecuritycompliance.frameworkComplianceReports.* cloudsecuritycompliance.frameworkComplianceReports.aggregate cloudsecuritycompliance.frameworkComplianceReports.get cloudsecuritycompliance.frameworkComplianceSummaries.list cloudsecuritycompliance.frameworkDeployments.get cloudsecuritycompliance.frameworkDeployments.list cloudsecuritycompliance.frameworks.get cloudsecuritycompliance.frameworks.list cloudsecuritycompliance.locations.get cloudsecuritycompliance.locations.list cloudsecuritycompliance.operations.get cloudsecuritycompliance.operations.list cloudsecuritycompliance.resourceEnrollmentStatuses.* cloudsecuritycompliance.resourceEnrollmentStatuses.get cloudsecuritycompliance.resourceEnrollmentStatuses.list config.automigrationconfig.get config.deploymentgrouprevisions.* config.deploymentgrouprevisions.get config.deploymentgrouprevisions.list config.deploymentgroups.get config.deploymentgroups.list config.deploymentgroups.listEffectiveTags config.deploymentgroups.listTagBindings config.deployments.get config.deployments.getIamPolicy config.deployments.list config.deployments.listEffectiveTags config.deployments.listTagBindings config.locations.* config.locations.get config.locations.list config.operations.get config.operations.list config.previews.export config.previews.get config.previews.list config.previews.listEffectiveTags config.previews.listTagBindings config.resources.* config.resources.get config.resources.list config.revisions.get config.revisions.list config.terraformversions.* config.terraformversions.get config.terraformversions.list container.clusters.list designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applications.* designcenter.applications.create designcenter.applications.delete designcenter.applications.get designcenter.applications.list designcenter.applications.update designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.get designcenter.shares.list designcenter.spaces.get designcenter.spaces.list developerconnect.connections.constructGitHubAppManifest developerconnect.connections.create developerconnect.connections.createTagBinding developerconnect.connections.delete developerconnect.connections.deleteTagBinding developerconnect.connections.fetchGitHubInstallations developerconnect.connections.fetchLinkableGitRepositories developerconnect.connections.generateGitHubStateToken developerconnect.connections.get developerconnect.connections.list developerconnect.connections.listEffectiveTags developerconnect.connections.listTagBindings developerconnect.connections.processGitHubAppCreationCallback developerconnect.connections.processGitHubOAuthCallback developerconnect.connections.update developerconnect.gitRepositoryLinks.addPullRequestComment developerconnect.gitRepositoryLinks.addPullRequestReviewComment developerconnect.gitRepositoryLinks.create developerconnect.gitRepositoryLinks.delete developerconnect.gitRepositoryLinks.diffCommit developerconnect.gitRepositoryLinks.fetchCommit developerconnect.gitRepositoryLinks.fetchCommitList developerconnect.gitRepositoryLinks.fetchFileBlame developerconnect.gitRepositoryLinks.fetchGitRefs developerconnect.gitRepositoryLinks.fetchPullRequest developerconnect.gitRepositoryLinks.fetchPullRequestList developerconnect.gitRepositoryLinks.get developerconnect.gitRepositoryLinks.gitProxyRead developerconnect.gitRepositoryLinks.gitProxyWrite developerconnect.gitRepositoryLinks.list developerconnect.gitRepositoryLinks.modifyPullRequest developerconnect.gitRepositoryLinks.openPullRequest developerconnect.locations.* developerconnect.locations.get developerconnect.locations.list developerconnect.operations.* developerconnect.operations.cancel developerconnect.operations.delete developerconnect.operations.get developerconnect.operations.list resourcemanager.projects.get resourcemanager.projects.list
Editor de aplicaciones (roles/designcenter.applicationEditor) Tiene acceso de lectura y escritura a la aplicación.	apphub.applications.create apphub.applications.delete apphub.applications.get apphub.applications.list apphub.applications.update apphub.locations.* apphub.locations.get apphub.locations.list apphub.serviceProjectAttachments.list auditmanager.auditReports.get auditmanager.auditReports.list auditmanager.auditSchedules.get auditmanager.auditSchedules.list auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controlReports.get auditmanager.controlReports.list auditmanager.controls.list auditmanager.findings.list auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.operations.get auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.* auditmanager.resourceEnrollmentStatuses.get auditmanager.resourceEnrollmentStatuses.list cloudbuild.builds.get cloudbuild.builds.list cloudsecuritycompliance.auditReports.get cloudsecuritycompliance.auditReports.list cloudsecuritycompliance.billingSettings.get cloudsecuritycompliance.cloudControlDeployments.get cloudsecuritycompliance.cloudControlDeployments.list cloudsecuritycompliance.cloudControlPredictions.get cloudsecuritycompliance.cloudControlPredictions.list cloudsecuritycompliance.cloudControls.get cloudsecuritycompliance.cloudControls.list cloudsecuritycompliance.cmEnrollments.get cloudsecuritycompliance.controlComplianceSummaries.list cloudsecuritycompliance.controlReports.get cloudsecuritycompliance.controls.* cloudsecuritycompliance.controls.get cloudsecuritycompliance.controls.list cloudsecuritycompliance.findingSummaries.list cloudsecuritycompliance.findings.list cloudsecuritycompliance.frameworkAudits.get cloudsecuritycompliance.frameworkAudits.list cloudsecuritycompliance.frameworkComplianceReports.* cloudsecuritycompliance.frameworkComplianceReports.aggregate cloudsecuritycompliance.frameworkComplianceReports.get cloudsecuritycompliance.frameworkComplianceSummaries.list cloudsecuritycompliance.frameworkDeployments.get cloudsecuritycompliance.frameworkDeployments.list cloudsecuritycompliance.frameworks.get cloudsecuritycompliance.frameworks.list cloudsecuritycompliance.locations.get cloudsecuritycompliance.locations.list cloudsecuritycompliance.operations.get cloudsecuritycompliance.operations.list cloudsecuritycompliance.resourceEnrollmentStatuses.* cloudsecuritycompliance.resourceEnrollmentStatuses.get cloudsecuritycompliance.resourceEnrollmentStatuses.list config.automigrationconfig.get config.deploymentgrouprevisions.* config.deploymentgrouprevisions.get config.deploymentgrouprevisions.list config.deploymentgroups.get config.deploymentgroups.list config.deploymentgroups.listEffectiveTags config.deploymentgroups.listTagBindings config.deployments.get config.deployments.getIamPolicy config.deployments.list config.deployments.listEffectiveTags config.deployments.listTagBindings config.locations.* config.locations.get config.locations.list config.operations.get config.operations.list config.previews.export config.previews.get config.previews.list config.previews.listEffectiveTags config.previews.listTagBindings config.resources.* config.resources.get config.resources.list config.revisions.get config.revisions.list config.terraformversions.* config.terraformversions.get config.terraformversions.list container.clusters.list designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applications.* designcenter.applications.create designcenter.applications.delete designcenter.applications.get designcenter.applications.list designcenter.applications.update designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.get designcenter.shares.list designcenter.spaces.get designcenter.spaces.list resourcemanager.projects.get resourcemanager.projects.list
Visualizador de aplicaciones (roles/designcenter.applicationViewer) Acceso de solo lectura a la aplicación.	apphub.applications.get apphub.applications.list apphub.locations.* apphub.locations.get apphub.locations.list auditmanager.auditReports.get auditmanager.auditReports.list auditmanager.auditSchedules.get auditmanager.auditSchedules.list auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controlReports.get auditmanager.controlReports.list auditmanager.controls.list auditmanager.findings.list auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.operations.get auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.* auditmanager.resourceEnrollmentStatuses.get auditmanager.resourceEnrollmentStatuses.list cloudsecuritycompliance.auditReports.get cloudsecuritycompliance.auditReports.list cloudsecuritycompliance.billingSettings.get cloudsecuritycompliance.cloudControlDeployments.get cloudsecuritycompliance.cloudControlDeployments.list cloudsecuritycompliance.cloudControlPredictions.get cloudsecuritycompliance.cloudControlPredictions.list cloudsecuritycompliance.cloudControls.get cloudsecuritycompliance.cloudControls.list cloudsecuritycompliance.cmEnrollments.get cloudsecuritycompliance.controlComplianceSummaries.list cloudsecuritycompliance.controlReports.get cloudsecuritycompliance.controls.* cloudsecuritycompliance.controls.get cloudsecuritycompliance.controls.list cloudsecuritycompliance.findingSummaries.list cloudsecuritycompliance.findings.list cloudsecuritycompliance.frameworkAudits.get cloudsecuritycompliance.frameworkAudits.list cloudsecuritycompliance.frameworkComplianceReports.* cloudsecuritycompliance.frameworkComplianceReports.aggregate cloudsecuritycompliance.frameworkComplianceReports.get cloudsecuritycompliance.frameworkComplianceSummaries.list cloudsecuritycompliance.frameworkDeployments.get cloudsecuritycompliance.frameworkDeployments.list cloudsecuritycompliance.frameworks.get cloudsecuritycompliance.frameworks.list cloudsecuritycompliance.locations.get cloudsecuritycompliance.locations.list cloudsecuritycompliance.operations.get cloudsecuritycompliance.operations.list cloudsecuritycompliance.resourceEnrollmentStatuses.* cloudsecuritycompliance.resourceEnrollmentStatuses.get cloudsecuritycompliance.resourceEnrollmentStatuses.list config.automigrationconfig.get config.deploymentgrouprevisions.* config.deploymentgrouprevisions.get config.deploymentgrouprevisions.list config.deploymentgroups.get config.deploymentgroups.list config.deploymentgroups.listEffectiveTags config.deploymentgroups.listTagBindings config.deployments.get config.deployments.getIamPolicy config.deployments.list config.deployments.listEffectiveTags config.deployments.listTagBindings config.locations.* config.locations.get config.locations.list config.operations.get config.operations.list config.previews.get config.previews.list config.previews.listEffectiveTags config.previews.listTagBindings config.resources.* config.resources.get config.resources.list config.revisions.get config.revisions.list config.terraformversions.* config.terraformversions.get config.terraformversions.list container.clusters.list designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applications.get designcenter.applications.list designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.get designcenter.shares.list designcenter.spaces.get designcenter.spaces.list resourcemanager.projects.get resourcemanager.projects.list

¿Qué sigue?

• Administra el acceso a tus recursos de implementación otorgando roles a tu cuenta de servicio.
• Organiza los espacios de los equipos y los controles de acceso administrando y asignando espacios.