事前定義された Application Integration の IAM ロール

事前定義ロールを使用すると、特定の Google Cloud リソースに対してきめ細かいアクセス権を付与できます。これらのロールは Google によって作成され、管理されます。Google は、Google Cloud によって新しい機能やサービスが追加された場合など、必要に応じて権限を自動的に更新します。

次の表に、Application Integration のすべての事前定義 IAM ロールを示します。

Cloud Integrations のロールと権限

このページでは、Cloud Integrations の IAM ロールと権限の一覧を示します。すべてのロールと権限を検索するには、ロールと権限のインデックスをご覧ください。

Cloud Integrations のロール

Cloud Integrations の権限
Role Permissions

(roles/integrations.admin)

Admin role for integrations

integrations.*

  • integrations.apigeeAuthConfigs.create
  • integrations.apigeeAuthConfigs.delete
  • integrations.apigeeAuthConfigs.get
  • integrations.apigeeAuthConfigs.list
  • integrations.apigeeAuthConfigs.update
  • integrations.apigeeCertificates.create
  • integrations.apigeeCertificates.delete
  • integrations.apigeeCertificates.get
  • integrations.apigeeCertificates.list
  • integrations.apigeeCertificates.update
  • integrations.apigeeExecutions.list
  • integrations.apigeeIntegrationVers.create
  • integrations.apigeeIntegrationVers.delete
  • integrations.apigeeIntegrationVers.deploy
  • integrations.apigeeIntegrationVers.get
  • integrations.apigeeIntegrationVers.list
  • integrations.apigeeIntegrationVers.update
  • integrations.apigeeIntegrations.invoke
  • integrations.apigeeIntegrations.list
  • integrations.apigeeSfdcChannels.create
  • integrations.apigeeSfdcChannels.delete
  • integrations.apigeeSfdcChannels.get
  • integrations.apigeeSfdcChannels.list
  • integrations.apigeeSfdcChannels.update
  • integrations.apigeeSfdcInstances.create
  • integrations.apigeeSfdcInstances.delete
  • integrations.apigeeSfdcInstances.get
  • integrations.apigeeSfdcInstances.list
  • integrations.apigeeSfdcInstances.update
  • integrations.apigeeSuspensions.lift
  • integrations.apigeeSuspensions.list
  • integrations.apigeeSuspensions.resolve
  • integrations.authConfigs.create
  • integrations.authConfigs.delete
  • integrations.authConfigs.get
  • integrations.authConfigs.list
  • integrations.authConfigs.update
  • integrations.certificates.create
  • integrations.certificates.delete
  • integrations.certificates.get
  • integrations.certificates.list
  • integrations.certificates.update
  • integrations.executions.cancel
  • integrations.executions.get
  • integrations.executions.list
  • integrations.executions.replay
  • integrations.integrationVersions.create
  • integrations.integrationVersions.delete
  • integrations.integrationVersions.deploy
  • integrations.integrationVersions.get
  • integrations.integrationVersions.invoke
  • integrations.integrationVersions.list
  • integrations.integrationVersions.update
  • integrations.integrations.create
  • integrations.integrations.delete
  • integrations.integrations.deploy
  • integrations.integrations.generateOpenApiSpec
  • integrations.integrations.get
  • integrations.integrations.invoke
  • integrations.integrations.list
  • integrations.integrations.update
  • integrations.securityAuthConfigs.create
  • integrations.securityAuthConfigs.delete
  • integrations.securityAuthConfigs.get
  • integrations.securityAuthConfigs.list
  • integrations.securityAuthConfigs.update
  • integrations.securityExecutions.cancel
  • integrations.securityExecutions.get
  • integrations.securityExecutions.list
  • integrations.securityIntegTempVers.create
  • integrations.securityIntegTempVers.get
  • integrations.securityIntegTempVers.list
  • integrations.securityIntegrationVers.create
  • integrations.securityIntegrationVers.delete
  • integrations.securityIntegrationVers.deploy
  • integrations.securityIntegrationVers.get
  • integrations.securityIntegrationVers.list
  • integrations.securityIntegrationVers.update
  • integrations.securityIntegrations.invoke
  • integrations.securityIntegrations.list
  • integrations.sfdcChannels.create
  • integrations.sfdcChannels.delete
  • integrations.sfdcChannels.get
  • integrations.sfdcChannels.list
  • integrations.sfdcChannels.update
  • integrations.sfdcInstances.create
  • integrations.sfdcInstances.delete
  • integrations.sfdcInstances.get
  • integrations.sfdcInstances.list
  • integrations.sfdcInstances.update
  • integrations.suspensions.lift
  • integrations.suspensions.list
  • integrations.suspensions.resolve
  • integrations.templates.create
  • integrations.templates.delete
  • integrations.templates.get
  • integrations.templates.list
  • integrations.templates.share
  • integrations.templates.unshare
  • integrations.templates.update
  • integrations.templates.use
  • integrations.testCases.create
  • integrations.testCases.delete
  • integrations.testCases.get
  • integrations.testCases.invoke
  • integrations.testCases.list
  • integrations.testCases.update

resourcemanager.projects.get

resourcemanager.projects.list

(roles/integrations.viewer)

Viewer role for integrations

integrations.apigeeAuthConfigs.get

integrations.apigeeAuthConfigs.list

integrations.apigeeCertificates.get

integrations.apigeeCertificates.list

integrations.apigeeExecutions.list

integrations.apigeeIntegrationVers.get

integrations.apigeeIntegrationVers.list

integrations.apigeeIntegrations.list

integrations.apigeeSfdcChannels.get

integrations.apigeeSfdcChannels.list

integrations.apigeeSfdcInstances.get

integrations.apigeeSfdcInstances.list

integrations.apigeeSuspensions.list

integrations.authConfigs.get

integrations.authConfigs.list

integrations.certificates.get

integrations.certificates.list

integrations.executions.get

integrations.executions.list

integrations.integrationVersions.get

integrations.integrationVersions.list

integrations.integrations.generateOpenApiSpec

integrations.integrations.get

integrations.integrations.list

integrations.securityAuthConfigs.get

integrations.securityAuthConfigs.list

integrations.securityExecutions.get

integrations.securityExecutions.list

integrations.securityIntegTempVers.get

integrations.securityIntegTempVers.list

integrations.securityIntegrationVers.get

integrations.securityIntegrationVers.list

integrations.securityIntegrations.list

integrations.sfdcChannels.get

integrations.sfdcChannels.list

integrations.sfdcInstances.get

integrations.sfdcInstances.list

integrations.suspensions.list

integrations.templates.get

integrations.templates.list

integrations.templates.share

integrations.templates.unshare

integrations.templates.use

integrations.testCases.get

integrations.testCases.list

resourcemanager.projects.get

resourcemanager.projects.list

(roles/integrations.apigeeIntegrationAdminRole)

A user that has full access to all Apigee integrations.

connectors.actions.*

  • connectors.actions.execute
  • connectors.actions.list

connectors.connections.executeSqlQuery

connectors.entities.*

  • connectors.entities.create
  • connectors.entities.delete
  • connectors.entities.deleteEntitiesWithConditions
  • connectors.entities.get
  • connectors.entities.list
  • connectors.entities.update
  • connectors.entities.updateEntitiesWithConditions

connectors.entityTypes.list

integrations.apigeeAuthConfigs.*

  • integrations.apigeeAuthConfigs.create
  • integrations.apigeeAuthConfigs.delete
  • integrations.apigeeAuthConfigs.get
  • integrations.apigeeAuthConfigs.list
  • integrations.apigeeAuthConfigs.update

integrations.apigeeCertificates.*

  • integrations.apigeeCertificates.create
  • integrations.apigeeCertificates.delete
  • integrations.apigeeCertificates.get
  • integrations.apigeeCertificates.list
  • integrations.apigeeCertificates.update

integrations.apigeeExecutions.list

integrations.apigeeIntegrationVers.*

  • integrations.apigeeIntegrationVers.create
  • integrations.apigeeIntegrationVers.delete
  • integrations.apigeeIntegrationVers.deploy
  • integrations.apigeeIntegrationVers.get
  • integrations.apigeeIntegrationVers.list
  • integrations.apigeeIntegrationVers.update

integrations.apigeeIntegrations.*

  • integrations.apigeeIntegrations.invoke
  • integrations.apigeeIntegrations.list

integrations.apigeeSfdcChannels.*

  • integrations.apigeeSfdcChannels.create
  • integrations.apigeeSfdcChannels.delete
  • integrations.apigeeSfdcChannels.get
  • integrations.apigeeSfdcChannels.list
  • integrations.apigeeSfdcChannels.update

integrations.apigeeSfdcInstances.*

  • integrations.apigeeSfdcInstances.create
  • integrations.apigeeSfdcInstances.delete
  • integrations.apigeeSfdcInstances.get
  • integrations.apigeeSfdcInstances.list
  • integrations.apigeeSfdcInstances.update

integrations.apigeeSuspensions.*

  • integrations.apigeeSuspensions.lift
  • integrations.apigeeSuspensions.list
  • integrations.apigeeSuspensions.resolve

integrations.authConfigs.*

  • integrations.authConfigs.create
  • integrations.authConfigs.delete
  • integrations.authConfigs.get
  • integrations.authConfigs.list
  • integrations.authConfigs.update

integrations.certificates.*

  • integrations.certificates.create
  • integrations.certificates.delete
  • integrations.certificates.get
  • integrations.certificates.list
  • integrations.certificates.update

integrations.executions.get

integrations.executions.list

integrations.integrationVersions.create

integrations.integrationVersions.delete

integrations.integrationVersions.deploy

integrations.integrationVersions.get

integrations.integrationVersions.list

integrations.integrationVersions.update

integrations.integrations.create

integrations.integrations.delete

integrations.integrations.deploy

integrations.integrations.get

integrations.integrations.invoke

integrations.integrations.list

integrations.integrations.update

integrations.sfdcChannels.*

  • integrations.sfdcChannels.create
  • integrations.sfdcChannels.delete
  • integrations.sfdcChannels.get
  • integrations.sfdcChannels.list
  • integrations.sfdcChannels.update

integrations.sfdcInstances.*

  • integrations.sfdcInstances.create
  • integrations.sfdcInstances.delete
  • integrations.sfdcInstances.get
  • integrations.sfdcInstances.list
  • integrations.sfdcInstances.update

integrations.suspensions.*

  • integrations.suspensions.lift
  • integrations.suspensions.list
  • integrations.suspensions.resolve

resourcemanager.projects.get

resourcemanager.projects.list

(roles/integrations.apigeeIntegrationDeployerRole)

A developer that can deploy/undeploy Apigee integrations to the integration runtime.

integrations.apigeeIntegrationVers.deploy

integrations.apigeeIntegrationVers.get

integrations.apigeeIntegrationVers.list

integrations.apigeeIntegrations.list

integrations.integrationVersions.deploy

integrations.integrationVersions.get

integrations.integrationVersions.list

integrations.integrations.deploy

integrations.integrations.get

integrations.integrations.list

resourcemanager.projects.get

resourcemanager.projects.list

(roles/integrations.apigeeIntegrationEditorRole)

A developer that can list, create and update Apigee integrations.

connectors.actions.*

  • connectors.actions.execute
  • connectors.actions.list

connectors.connections.executeSqlQuery

connectors.entities.*

  • connectors.entities.create
  • connectors.entities.delete
  • connectors.entities.deleteEntitiesWithConditions
  • connectors.entities.get
  • connectors.entities.list
  • connectors.entities.update
  • connectors.entities.updateEntitiesWithConditions

connectors.entityTypes.list

integrations.apigeeAuthConfigs.create

integrations.apigeeAuthConfigs.get

integrations.apigeeAuthConfigs.list

integrations.apigeeAuthConfigs.update

integrations.apigeeCertificates.create

integrations.apigeeCertificates.get

integrations.apigeeCertificates.list

integrations.apigeeCertificates.update

integrations.apigeeExecutions.list

integrations.apigeeIntegrationVers.*

  • integrations.apigeeIntegrationVers.create
  • integrations.apigeeIntegrationVers.delete
  • integrations.apigeeIntegrationVers.deploy
  • integrations.apigeeIntegrationVers.get
  • integrations.apigeeIntegrationVers.list
  • integrations.apigeeIntegrationVers.update

integrations.apigeeIntegrations.*

  • integrations.apigeeIntegrations.invoke
  • integrations.apigeeIntegrations.list

integrations.apigeeSfdcChannels.create

integrations.apigeeSfdcChannels.get

integrations.apigeeSfdcChannels.list

integrations.apigeeSfdcChannels.update

integrations.apigeeSfdcInstances.create

integrations.apigeeSfdcInstances.get

integrations.apigeeSfdcInstances.list

integrations.apigeeSfdcInstances.update

integrations.authConfigs.create

integrations.authConfigs.get

integrations.authConfigs.list

integrations.authConfigs.update

integrations.certificates.get

integrations.executions.get

integrations.executions.list

integrations.integrationVersions.create

integrations.integrationVersions.delete

integrations.integrationVersions.deploy

integrations.integrationVersions.get

integrations.integrationVersions.list

integrations.integrationVersions.update

integrations.integrations.create

integrations.integrations.get

integrations.integrations.invoke

integrations.integrations.list

integrations.integrations.update

integrations.sfdcChannels.*

  • integrations.sfdcChannels.create
  • integrations.sfdcChannels.delete
  • integrations.sfdcChannels.get
  • integrations.sfdcChannels.list
  • integrations.sfdcChannels.update

integrations.sfdcInstances.*

  • integrations.sfdcInstances.create
  • integrations.sfdcInstances.delete
  • integrations.sfdcInstances.get
  • integrations.sfdcInstances.list
  • integrations.sfdcInstances.update

resourcemanager.projects.get

resourcemanager.projects.list

(roles/integrations.apigeeIntegrationInvokerRole)

A role that can invoke Apigee integrations.

connectors.actions.*

  • connectors.actions.execute
  • connectors.actions.list

connectors.connections.executeSqlQuery

connectors.entities.*

  • connectors.entities.create
  • connectors.entities.delete
  • connectors.entities.deleteEntitiesWithConditions
  • connectors.entities.get
  • connectors.entities.list
  • connectors.entities.update
  • connectors.entities.updateEntitiesWithConditions

connectors.entityTypes.list

integrations.apigeeExecutions.list

integrations.apigeeIntegrationVers.get

integrations.apigeeIntegrationVers.list

integrations.apigeeIntegrations.*

  • integrations.apigeeIntegrations.invoke
  • integrations.apigeeIntegrations.list

integrations.executions.get

integrations.executions.list

integrations.integrationVersions.get

integrations.integrationVersions.invoke

integrations.integrationVersions.list

integrations.integrations.get

integrations.integrations.invoke

integrations.integrations.list

resourcemanager.projects.get

resourcemanager.projects.list

(roles/integrations.apigeeIntegrationsViewer)

A developer that can list and view Apigee integrations.

integrations.apigeeAuthConfigs.list

integrations.apigeeCertificates.list

integrations.apigeeIntegrationVers.get

integrations.apigeeIntegrationVers.list

integrations.apigeeIntegrations.list

integrations.apigeeSfdcChannels.list

integrations.apigeeSfdcInstances.list

integrations.authConfigs.get

integrations.authConfigs.list

integrations.certificates.get

integrations.certificates.list

integrations.executions.get

integrations.executions.list

integrations.integrationVersions.get

integrations.integrationVersions.list

integrations.integrations.get

integrations.integrations.list

integrations.sfdcChannels.list

integrations.sfdcInstances.list

resourcemanager.projects.get

resourcemanager.projects.list

(roles/integrations.apigeeSuspensionResolver)

A role that can approve / reject Apigee integrations that contain a suspension/wait task.

integrations.apigeeSuspensions.*

  • integrations.apigeeSuspensions.lift
  • integrations.apigeeSuspensions.list