Contrôle des accès avec IAM

Cette page décrit les rôles et les autorisations d'Application Design Center. Pour contrôler l'accès à App Design Center, utilisez Identity and Access Management (IAM) pour attribuer des rôles aux utilisateurs, aux groupes et aux comptes de service.

Rôles Application Design Center prédéfinis

Pour accorder l'accès à des ressources Google Cloud spécifiques et empêcher tout accès non autorisé à d'autres ressources, attribuez les rôles prédéfinis d'App Design Center au dossier compatible avec les applications ou au projet de gestion.

Utilisez les rôles IAM suivants pour gérer les espaces et créer des modèles :

• Administrateur Application Design Center (roles/designcenter.admin)
• Utilisateur d'Application Design Center (roles/designcenter.user)
• Lecteur Application Design Center (roles/designcenter.viewer)

Utilisez les rôles IAM suivants pour créer des configurations d'application et gérer les cycles de vie des déploiements :

• Administrateur d'application (roles/designcenter.applicationAdmin)
• Éditeur d'application (roles/designcenter.applicationEditor)
• Lecteur de l'application (roles/designcenter.applicationViewer)

Le rôle d'administrateur Application Design Center inclut toutes les autorisations des autres rôles Application Design Center.

Descriptions des rôles Application Design Center

Le tableau suivant décrit les rôles d'App Design Center et leurs responsabilités types.

Rôle	Description	Purpose
Administrateur Application Design Center	Créer et gérer tous les artefacts d'App Design Center, et déléguer le contrôle des applications à d'autres utilisateurs.	Pour gérer l'intégralité du cycle de vie d'une application. Pour les administrateurs de plate-forme, qui disposent d'autorisations d'administration et d'une visibilité complète sur l'architecture de bout en bout.
Utilisateur d'Application Design Center	Créer et mettre à jour des modèles d'application.	Pour faire évoluer la capacité à créer, mettre à jour ou supprimer des modèles d'application afin de réduire la charge de travail des administrateurs de la plate-forme. Pour les ingénieurs de plate-forme, qui créent et gèrent des modèles d'application.
Lecteur Application Design Center	Afficher les espaces, les catalogues, les modèles, les applications et leurs attributs.	Pour afficher les espaces, les catalogues, les modèles, les applications et leurs dépendances dans App Design Center. Pour la plupart des membres du personnel de l'organisation. Attribuez ce rôle aux utilisateurs qui ont uniquement besoin d'afficher les espaces, les catalogues, les modèles et les applications.
Administrateur de l'application	Créer, gérer et déployer des applications, et déléguer le contrôle des applications à d'autres développeurs d'applications.	Pour gérer les brouillons et les déploiements d'applications, et associer les projets de service requis pour stocker des ressources individuelles. Pour les administrateurs et les développeurs chargés de la création d'applications.
Éditeur d'application	Créez, gérez et déployez des applications.	Pour gérer les brouillons et les déploiements, et réduire la charge de travail des administrateurs d'applications. Pour les opérateurs d'applications qui comprennent les déploiements.
Lecteur d'applications	Afficher les applications.	Pour afficher les modèles, les applications et leurs dépendances. Pour la plupart des membres du personnel de l'organisation. Attribuez ce rôle aux utilisateurs qui n'ont besoin que d'afficher les modèles et l'application.

Autorisations Application Design Center

Le tableau suivant liste les rôles IAM d'App Design Center et leurs autorisations.

Administrateur Application Design Center Utilisateur d'Application Design Center Lecteur Application Design Center Administrateur de l'application Éditeur de l'application Lecteur de l'application Tout effacer

Administrateur Application Design Center (roles/designcenter.admin) Accès complet aux ressources Application Design Center.	apphub.applications.create apphub.applications.delete apphub.applications.get apphub.applications.list apphub.applications.update apphub.boundaries.attach apphub.boundaries.update apphub.locations.* apphub.locations.get apphub.locations.list apphub.serviceProjectAttachments.list auditmanager.auditReports.get auditmanager.auditReports.list auditmanager.auditSchedules.get auditmanager.auditSchedules.list auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controlReports.get auditmanager.controlReports.list auditmanager.controls.list auditmanager.findings.list auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.operations.get auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.* auditmanager.resourceEnrollmentStatuses.get auditmanager.resourceEnrollmentStatuses.list cloudbuild.builds.get cloudbuild.builds.list cloudsecuritycompliance.auditReports.get cloudsecuritycompliance.auditReports.list cloudsecuritycompliance.billingSettings.get cloudsecuritycompliance.cloudControlDeployments.get cloudsecuritycompliance.cloudControlDeployments.list cloudsecuritycompliance.cloudControlPredictions.get cloudsecuritycompliance.cloudControlPredictions.list cloudsecuritycompliance.cloudControls.get cloudsecuritycompliance.cloudControls.list cloudsecuritycompliance.cmEnrollments.get cloudsecuritycompliance.controlComplianceSummaries.list cloudsecuritycompliance.controlReports.get cloudsecuritycompliance.controls.* cloudsecuritycompliance.controls.get cloudsecuritycompliance.controls.list cloudsecuritycompliance.findingSummaries.list cloudsecuritycompliance.findings.list cloudsecuritycompliance.frameworkAudits.get cloudsecuritycompliance.frameworkAudits.list cloudsecuritycompliance.frameworkComplianceReports.* cloudsecuritycompliance.frameworkComplianceReports.aggregate cloudsecuritycompliance.frameworkComplianceReports.get cloudsecuritycompliance.frameworkComplianceSummaries.list cloudsecuritycompliance.frameworkDeployments.get cloudsecuritycompliance.frameworkDeployments.list cloudsecuritycompliance.frameworks.get cloudsecuritycompliance.frameworks.list cloudsecuritycompliance.locations.get cloudsecuritycompliance.locations.list cloudsecuritycompliance.operations.get cloudsecuritycompliance.operations.list cloudsecuritycompliance.resourceEnrollmentStatuses.* cloudsecuritycompliance.resourceEnrollmentStatuses.get cloudsecuritycompliance.resourceEnrollmentStatuses.list config.automigrationconfig.get config.deploymentgrouprevisions.* config.deploymentgrouprevisions.get config.deploymentgrouprevisions.list config.deploymentgroups.get config.deploymentgroups.list config.deploymentgroups.listEffectiveTags config.deploymentgroups.listTagBindings config.deployments.get config.deployments.getIamPolicy config.deployments.list config.deployments.listEffectiveTags config.deployments.listTagBindings config.locations.* config.locations.get config.locations.list config.operations.get config.operations.list config.previews.export config.previews.get config.previews.list config.previews.listEffectiveTags config.previews.listTagBindings config.resources.* config.resources.get config.resources.list config.revisions.get config.revisions.list config.terraformversions.* config.terraformversions.get config.terraformversions.list container.clusters.list designcenter.* designcenter.applicationTemplateRevisions.delete designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.create designcenter.applicationTemplates.delete designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applicationTemplates.update designcenter.applications.create designcenter.applications.delete designcenter.applications.get designcenter.applications.list designcenter.applications.update designcenter.catalogTemplateRevisions.create designcenter.catalogTemplateRevisions.delete designcenter.catalogTemplateRevisions.get designcenter.catalogTemplateRevisions.list designcenter.catalogTemplates.create designcenter.catalogTemplates.delete designcenter.catalogTemplates.get designcenter.catalogTemplates.list designcenter.catalogTemplates.update designcenter.catalogs.create designcenter.catalogs.delete designcenter.catalogs.get designcenter.catalogs.list designcenter.catalogs.update designcenter.components.create designcenter.components.delete designcenter.components.get designcenter.components.list designcenter.components.update designcenter.connections.create designcenter.connections.delete designcenter.connections.get designcenter.connections.list designcenter.connections.update designcenter.locations.get designcenter.locations.list designcenter.operations.cancel designcenter.operations.delete designcenter.operations.get designcenter.operations.list designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.create designcenter.shares.delete designcenter.shares.get designcenter.shares.list designcenter.spaces.create designcenter.spaces.delete designcenter.spaces.get designcenter.spaces.getIamPolicy designcenter.spaces.list designcenter.spaces.setIamPolicy designcenter.spaces.update developerconnect.connections.constructGitHubAppManifest developerconnect.connections.create developerconnect.connections.createTagBinding developerconnect.connections.delete developerconnect.connections.deleteTagBinding developerconnect.connections.fetchGitHubInstallations developerconnect.connections.fetchLinkableGitRepositories developerconnect.connections.generateGitHubStateToken developerconnect.connections.get developerconnect.connections.list developerconnect.connections.listEffectiveTags developerconnect.connections.listTagBindings developerconnect.connections.processGitHubAppCreationCallback developerconnect.connections.processGitHubOAuthCallback developerconnect.connections.update developerconnect.gitRepositoryLinks.addPullRequestComment developerconnect.gitRepositoryLinks.addPullRequestReviewComment developerconnect.gitRepositoryLinks.create developerconnect.gitRepositoryLinks.delete developerconnect.gitRepositoryLinks.diffCommit developerconnect.gitRepositoryLinks.fetchCommit developerconnect.gitRepositoryLinks.fetchCommitList developerconnect.gitRepositoryLinks.fetchFileBlame developerconnect.gitRepositoryLinks.fetchGitRefs developerconnect.gitRepositoryLinks.fetchPullRequest developerconnect.gitRepositoryLinks.fetchPullRequestList developerconnect.gitRepositoryLinks.get developerconnect.gitRepositoryLinks.gitProxyRead developerconnect.gitRepositoryLinks.gitProxyWrite developerconnect.gitRepositoryLinks.list developerconnect.gitRepositoryLinks.modifyPullRequest developerconnect.gitRepositoryLinks.openPullRequest developerconnect.locations.* developerconnect.locations.get developerconnect.locations.list developerconnect.operations.* developerconnect.operations.cancel developerconnect.operations.delete developerconnect.operations.get developerconnect.operations.list monitoring.timeSeries.create orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.list storage.folders.* storage.folders.create storage.folders.delete storage.folders.get storage.folders.list storage.folders.rename storage.managedFolders.create storage.managedFolders.delete storage.managedFolders.get storage.managedFolders.list storage.managedFolders.update storage.multipartUploads.* storage.multipartUploads.abort storage.multipartUploads.create storage.multipartUploads.list storage.multipartUploads.listParts storage.objects.create storage.objects.createContext storage.objects.delete storage.objects.deleteContext storage.objects.get storage.objects.list storage.objects.move storage.objects.restore storage.objects.update storage.objects.updateContext
Utilisateur d'Application Design Center (roles/designcenter.user) Accès en lecture seule aux ressources Application Design Center.	apphub.serviceProjectAttachments.list auditmanager.auditReports.get auditmanager.auditReports.list auditmanager.auditSchedules.get auditmanager.auditSchedules.list auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controlReports.get auditmanager.controlReports.list auditmanager.controls.list auditmanager.findings.list auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.operations.get auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.* auditmanager.resourceEnrollmentStatuses.get auditmanager.resourceEnrollmentStatuses.list cloudsecuritycompliance.auditReports.get cloudsecuritycompliance.auditReports.list cloudsecuritycompliance.billingSettings.get cloudsecuritycompliance.cloudControlDeployments.get cloudsecuritycompliance.cloudControlDeployments.list cloudsecuritycompliance.cloudControlPredictions.get cloudsecuritycompliance.cloudControlPredictions.list cloudsecuritycompliance.cloudControls.get cloudsecuritycompliance.cloudControls.list cloudsecuritycompliance.cmEnrollments.get cloudsecuritycompliance.controlComplianceSummaries.list cloudsecuritycompliance.controlReports.get cloudsecuritycompliance.controls.* cloudsecuritycompliance.controls.get cloudsecuritycompliance.controls.list cloudsecuritycompliance.findingSummaries.list cloudsecuritycompliance.findings.list cloudsecuritycompliance.frameworkAudits.get cloudsecuritycompliance.frameworkAudits.list cloudsecuritycompliance.frameworkComplianceReports.* cloudsecuritycompliance.frameworkComplianceReports.aggregate cloudsecuritycompliance.frameworkComplianceReports.get cloudsecuritycompliance.frameworkComplianceSummaries.list cloudsecuritycompliance.frameworkDeployments.get cloudsecuritycompliance.frameworkDeployments.list cloudsecuritycompliance.frameworks.get cloudsecuritycompliance.frameworks.list cloudsecuritycompliance.locations.get cloudsecuritycompliance.locations.list cloudsecuritycompliance.operations.get cloudsecuritycompliance.operations.list cloudsecuritycompliance.resourceEnrollmentStatuses.* cloudsecuritycompliance.resourceEnrollmentStatuses.get cloudsecuritycompliance.resourceEnrollmentStatuses.list container.clusters.list designcenter.applicationTemplateRevisions.* designcenter.applicationTemplateRevisions.delete designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.* designcenter.applicationTemplates.create designcenter.applicationTemplates.delete designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applicationTemplates.update designcenter.applications.get designcenter.applications.list designcenter.catalogTemplateRevisions.get designcenter.catalogTemplateRevisions.list designcenter.catalogTemplates.get designcenter.catalogTemplates.list designcenter.catalogs.get designcenter.catalogs.list designcenter.components.* designcenter.components.create designcenter.components.delete designcenter.components.get designcenter.components.list designcenter.components.update designcenter.connections.* designcenter.connections.create designcenter.connections.delete designcenter.connections.get designcenter.connections.list designcenter.connections.update designcenter.locations.* designcenter.locations.get designcenter.locations.list designcenter.operations.get designcenter.operations.list designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.get designcenter.shares.list designcenter.spaces.get designcenter.spaces.getIamPolicy designcenter.spaces.list monitoring.timeSeries.create orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.list storage.folders.* storage.folders.create storage.folders.delete storage.folders.get storage.folders.list storage.folders.rename storage.managedFolders.create storage.managedFolders.delete storage.managedFolders.get storage.managedFolders.list storage.managedFolders.update storage.multipartUploads.* storage.multipartUploads.abort storage.multipartUploads.create storage.multipartUploads.list storage.multipartUploads.listParts storage.objects.create storage.objects.createContext storage.objects.delete storage.objects.deleteContext storage.objects.get storage.objects.list storage.objects.move storage.objects.restore storage.objects.update storage.objects.updateContext
Lecteur Application Design Center (roles/designcenter.viewer) Accès en lecture seule aux ressources Application Design Center.	auditmanager.auditReports.get auditmanager.auditReports.list auditmanager.auditSchedules.get auditmanager.auditSchedules.list auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controlReports.get auditmanager.controlReports.list auditmanager.controls.list auditmanager.findings.list auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.operations.get auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.* auditmanager.resourceEnrollmentStatuses.get auditmanager.resourceEnrollmentStatuses.list cloudsecuritycompliance.auditReports.get cloudsecuritycompliance.auditReports.list cloudsecuritycompliance.billingSettings.get cloudsecuritycompliance.cloudControlDeployments.get cloudsecuritycompliance.cloudControlDeployments.list cloudsecuritycompliance.cloudControlPredictions.get cloudsecuritycompliance.cloudControlPredictions.list cloudsecuritycompliance.cloudControls.get cloudsecuritycompliance.cloudControls.list cloudsecuritycompliance.cmEnrollments.get cloudsecuritycompliance.controlComplianceSummaries.list cloudsecuritycompliance.controlReports.get cloudsecuritycompliance.controls.* cloudsecuritycompliance.controls.get cloudsecuritycompliance.controls.list cloudsecuritycompliance.findingSummaries.list cloudsecuritycompliance.findings.list cloudsecuritycompliance.frameworkAudits.get cloudsecuritycompliance.frameworkAudits.list cloudsecuritycompliance.frameworkComplianceReports.* cloudsecuritycompliance.frameworkComplianceReports.aggregate cloudsecuritycompliance.frameworkComplianceReports.get cloudsecuritycompliance.frameworkComplianceSummaries.list cloudsecuritycompliance.frameworkDeployments.get cloudsecuritycompliance.frameworkDeployments.list cloudsecuritycompliance.frameworks.get cloudsecuritycompliance.frameworks.list cloudsecuritycompliance.locations.get cloudsecuritycompliance.locations.list cloudsecuritycompliance.operations.get cloudsecuritycompliance.operations.list cloudsecuritycompliance.resourceEnrollmentStatuses.* cloudsecuritycompliance.resourceEnrollmentStatuses.get cloudsecuritycompliance.resourceEnrollmentStatuses.list container.clusters.list designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applications.get designcenter.applications.list designcenter.catalogTemplateRevisions.get designcenter.catalogTemplateRevisions.list designcenter.catalogTemplates.get designcenter.catalogTemplates.list designcenter.catalogs.get designcenter.catalogs.list designcenter.components.get designcenter.components.list designcenter.connections.get designcenter.connections.list designcenter.locations.* designcenter.locations.get designcenter.locations.list designcenter.operations.get designcenter.operations.list designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.get designcenter.shares.list designcenter.spaces.get designcenter.spaces.getIamPolicy designcenter.spaces.list resourcemanager.projects.get resourcemanager.projects.list storage.folders.get storage.folders.list storage.managedFolders.get storage.managedFolders.list storage.objects.get storage.objects.list
Administrateur de l'application (roles/designcenter.applicationAdmin) Accès administrateur à l'application.	apphub.applications.create apphub.applications.delete apphub.applications.get apphub.applications.list apphub.applications.update apphub.locations.* apphub.locations.get apphub.locations.list apphub.serviceProjectAttachments.list auditmanager.auditReports.get auditmanager.auditReports.list auditmanager.auditSchedules.get auditmanager.auditSchedules.list auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controlReports.get auditmanager.controlReports.list auditmanager.controls.list auditmanager.findings.list auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.operations.get auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.* auditmanager.resourceEnrollmentStatuses.get auditmanager.resourceEnrollmentStatuses.list cloudbuild.builds.get cloudbuild.builds.list cloudsecuritycompliance.auditReports.get cloudsecuritycompliance.auditReports.list cloudsecuritycompliance.billingSettings.get cloudsecuritycompliance.cloudControlDeployments.get cloudsecuritycompliance.cloudControlDeployments.list cloudsecuritycompliance.cloudControlPredictions.get cloudsecuritycompliance.cloudControlPredictions.list cloudsecuritycompliance.cloudControls.get cloudsecuritycompliance.cloudControls.list cloudsecuritycompliance.cmEnrollments.get cloudsecuritycompliance.controlComplianceSummaries.list cloudsecuritycompliance.controlReports.get cloudsecuritycompliance.controls.* cloudsecuritycompliance.controls.get cloudsecuritycompliance.controls.list cloudsecuritycompliance.findingSummaries.list cloudsecuritycompliance.findings.list cloudsecuritycompliance.frameworkAudits.get cloudsecuritycompliance.frameworkAudits.list cloudsecuritycompliance.frameworkComplianceReports.* cloudsecuritycompliance.frameworkComplianceReports.aggregate cloudsecuritycompliance.frameworkComplianceReports.get cloudsecuritycompliance.frameworkComplianceSummaries.list cloudsecuritycompliance.frameworkDeployments.get cloudsecuritycompliance.frameworkDeployments.list cloudsecuritycompliance.frameworks.get cloudsecuritycompliance.frameworks.list cloudsecuritycompliance.locations.get cloudsecuritycompliance.locations.list cloudsecuritycompliance.operations.get cloudsecuritycompliance.operations.list cloudsecuritycompliance.resourceEnrollmentStatuses.* cloudsecuritycompliance.resourceEnrollmentStatuses.get cloudsecuritycompliance.resourceEnrollmentStatuses.list config.automigrationconfig.get config.deploymentgrouprevisions.* config.deploymentgrouprevisions.get config.deploymentgrouprevisions.list config.deploymentgroups.get config.deploymentgroups.list config.deploymentgroups.listEffectiveTags config.deploymentgroups.listTagBindings config.deployments.get config.deployments.getIamPolicy config.deployments.list config.deployments.listEffectiveTags config.deployments.listTagBindings config.locations.* config.locations.get config.locations.list config.operations.get config.operations.list config.previews.export config.previews.get config.previews.list config.previews.listEffectiveTags config.previews.listTagBindings config.resources.* config.resources.get config.resources.list config.revisions.get config.revisions.list config.terraformversions.* config.terraformversions.get config.terraformversions.list container.clusters.list designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applications.* designcenter.applications.create designcenter.applications.delete designcenter.applications.get designcenter.applications.list designcenter.applications.update designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.get designcenter.shares.list designcenter.spaces.get designcenter.spaces.list developerconnect.connections.constructGitHubAppManifest developerconnect.connections.create developerconnect.connections.createTagBinding developerconnect.connections.delete developerconnect.connections.deleteTagBinding developerconnect.connections.fetchGitHubInstallations developerconnect.connections.fetchLinkableGitRepositories developerconnect.connections.generateGitHubStateToken developerconnect.connections.get developerconnect.connections.list developerconnect.connections.listEffectiveTags developerconnect.connections.listTagBindings developerconnect.connections.processGitHubAppCreationCallback developerconnect.connections.processGitHubOAuthCallback developerconnect.connections.update developerconnect.gitRepositoryLinks.addPullRequestComment developerconnect.gitRepositoryLinks.addPullRequestReviewComment developerconnect.gitRepositoryLinks.create developerconnect.gitRepositoryLinks.delete developerconnect.gitRepositoryLinks.diffCommit developerconnect.gitRepositoryLinks.fetchCommit developerconnect.gitRepositoryLinks.fetchCommitList developerconnect.gitRepositoryLinks.fetchFileBlame developerconnect.gitRepositoryLinks.fetchGitRefs developerconnect.gitRepositoryLinks.fetchPullRequest developerconnect.gitRepositoryLinks.fetchPullRequestList developerconnect.gitRepositoryLinks.get developerconnect.gitRepositoryLinks.gitProxyRead developerconnect.gitRepositoryLinks.gitProxyWrite developerconnect.gitRepositoryLinks.list developerconnect.gitRepositoryLinks.modifyPullRequest developerconnect.gitRepositoryLinks.openPullRequest developerconnect.locations.* developerconnect.locations.get developerconnect.locations.list developerconnect.operations.* developerconnect.operations.cancel developerconnect.operations.delete developerconnect.operations.get developerconnect.operations.list resourcemanager.projects.get resourcemanager.projects.list
Éditeur de l'application (roles/designcenter.applicationEditor) Accès en lecture et en écriture à l'application.	apphub.applications.create apphub.applications.delete apphub.applications.get apphub.applications.list apphub.applications.update apphub.locations.* apphub.locations.get apphub.locations.list apphub.serviceProjectAttachments.list auditmanager.auditReports.get auditmanager.auditReports.list auditmanager.auditSchedules.get auditmanager.auditSchedules.list auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controlReports.get auditmanager.controlReports.list auditmanager.controls.list auditmanager.findings.list auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.operations.get auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.* auditmanager.resourceEnrollmentStatuses.get auditmanager.resourceEnrollmentStatuses.list cloudbuild.builds.get cloudbuild.builds.list cloudsecuritycompliance.auditReports.get cloudsecuritycompliance.auditReports.list cloudsecuritycompliance.billingSettings.get cloudsecuritycompliance.cloudControlDeployments.get cloudsecuritycompliance.cloudControlDeployments.list cloudsecuritycompliance.cloudControlPredictions.get cloudsecuritycompliance.cloudControlPredictions.list cloudsecuritycompliance.cloudControls.get cloudsecuritycompliance.cloudControls.list cloudsecuritycompliance.cmEnrollments.get cloudsecuritycompliance.controlComplianceSummaries.list cloudsecuritycompliance.controlReports.get cloudsecuritycompliance.controls.* cloudsecuritycompliance.controls.get cloudsecuritycompliance.controls.list cloudsecuritycompliance.findingSummaries.list cloudsecuritycompliance.findings.list cloudsecuritycompliance.frameworkAudits.get cloudsecuritycompliance.frameworkAudits.list cloudsecuritycompliance.frameworkComplianceReports.* cloudsecuritycompliance.frameworkComplianceReports.aggregate cloudsecuritycompliance.frameworkComplianceReports.get cloudsecuritycompliance.frameworkComplianceSummaries.list cloudsecuritycompliance.frameworkDeployments.get cloudsecuritycompliance.frameworkDeployments.list cloudsecuritycompliance.frameworks.get cloudsecuritycompliance.frameworks.list cloudsecuritycompliance.locations.get cloudsecuritycompliance.locations.list cloudsecuritycompliance.operations.get cloudsecuritycompliance.operations.list cloudsecuritycompliance.resourceEnrollmentStatuses.* cloudsecuritycompliance.resourceEnrollmentStatuses.get cloudsecuritycompliance.resourceEnrollmentStatuses.list config.automigrationconfig.get config.deploymentgrouprevisions.* config.deploymentgrouprevisions.get config.deploymentgrouprevisions.list config.deploymentgroups.get config.deploymentgroups.list config.deploymentgroups.listEffectiveTags config.deploymentgroups.listTagBindings config.deployments.get config.deployments.getIamPolicy config.deployments.list config.deployments.listEffectiveTags config.deployments.listTagBindings config.locations.* config.locations.get config.locations.list config.operations.get config.operations.list config.previews.export config.previews.get config.previews.list config.previews.listEffectiveTags config.previews.listTagBindings config.resources.* config.resources.get config.resources.list config.revisions.get config.revisions.list config.terraformversions.* config.terraformversions.get config.terraformversions.list container.clusters.list designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applications.* designcenter.applications.create designcenter.applications.delete designcenter.applications.get designcenter.applications.list designcenter.applications.update designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.get designcenter.shares.list designcenter.spaces.get designcenter.spaces.list resourcemanager.projects.get resourcemanager.projects.list
Lecteur de l'application (roles/designcenter.applicationViewer) Accès en lecture seule à l'application.	apphub.applications.get apphub.applications.list apphub.locations.* apphub.locations.get apphub.locations.list auditmanager.auditReports.get auditmanager.auditReports.list auditmanager.auditSchedules.get auditmanager.auditSchedules.list auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controlReports.get auditmanager.controlReports.list auditmanager.controls.list auditmanager.findings.list auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.operations.get auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.* auditmanager.resourceEnrollmentStatuses.get auditmanager.resourceEnrollmentStatuses.list cloudsecuritycompliance.auditReports.get cloudsecuritycompliance.auditReports.list cloudsecuritycompliance.billingSettings.get cloudsecuritycompliance.cloudControlDeployments.get cloudsecuritycompliance.cloudControlDeployments.list cloudsecuritycompliance.cloudControlPredictions.get cloudsecuritycompliance.cloudControlPredictions.list cloudsecuritycompliance.cloudControls.get cloudsecuritycompliance.cloudControls.list cloudsecuritycompliance.cmEnrollments.get cloudsecuritycompliance.controlComplianceSummaries.list cloudsecuritycompliance.controlReports.get cloudsecuritycompliance.controls.* cloudsecuritycompliance.controls.get cloudsecuritycompliance.controls.list cloudsecuritycompliance.findingSummaries.list cloudsecuritycompliance.findings.list cloudsecuritycompliance.frameworkAudits.get cloudsecuritycompliance.frameworkAudits.list cloudsecuritycompliance.frameworkComplianceReports.* cloudsecuritycompliance.frameworkComplianceReports.aggregate cloudsecuritycompliance.frameworkComplianceReports.get cloudsecuritycompliance.frameworkComplianceSummaries.list cloudsecuritycompliance.frameworkDeployments.get cloudsecuritycompliance.frameworkDeployments.list cloudsecuritycompliance.frameworks.get cloudsecuritycompliance.frameworks.list cloudsecuritycompliance.locations.get cloudsecuritycompliance.locations.list cloudsecuritycompliance.operations.get cloudsecuritycompliance.operations.list cloudsecuritycompliance.resourceEnrollmentStatuses.* cloudsecuritycompliance.resourceEnrollmentStatuses.get cloudsecuritycompliance.resourceEnrollmentStatuses.list config.automigrationconfig.get config.deploymentgrouprevisions.* config.deploymentgrouprevisions.get config.deploymentgrouprevisions.list config.deploymentgroups.get config.deploymentgroups.list config.deploymentgroups.listEffectiveTags config.deploymentgroups.listTagBindings config.deployments.get config.deployments.getIamPolicy config.deployments.list config.deployments.listEffectiveTags config.deployments.listTagBindings config.locations.* config.locations.get config.locations.list config.operations.get config.operations.list config.previews.get config.previews.list config.previews.listEffectiveTags config.previews.listTagBindings config.resources.* config.resources.get config.resources.list config.revisions.get config.revisions.list config.terraformversions.* config.terraformversions.get config.terraformversions.list container.clusters.list designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applications.get designcenter.applications.list designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.get designcenter.shares.list designcenter.spaces.get designcenter.spaces.list resourcemanager.projects.get resourcemanager.projects.list

Étapes suivantes

• Gérez l'accès à vos ressources de déploiement en attribuant des rôles à votre compte de service.
• Organisez les espaces d'équipe et les contrôles d'accès en gérant et en attribuant des espaces.