Cloud Trace 역할 및 권한

이 페이지에는 Cloud Trace의 IAM 역할과 권한이 나와 있습니다. 모든 역할과 권한을 검색하려면 역할 및 권한 색인을 참조하세요.

Cloud Trace 역할

Role Permissions

Role	Permissions
Cloud Trace Admin (`roles/cloudtrace.admin`) Provides full access to the Trace console and read-write access to traces. Lowest-level resources where you can grant this role: Project	`cloudtrace.` `cloudtrace.insights.get` `cloudtrace.insights.list` `cloudtrace.stats.get` `cloudtrace.tasks.create` `cloudtrace.tasks.delete` `cloudtrace.tasks.get` `cloudtrace.tasks.list` `cloudtrace.traceScopes.create` `cloudtrace.traceScopes.delete` `cloudtrace.traceScopes.get` `cloudtrace.traceScopes.list` `cloudtrace.traceScopes.update` `cloudtrace.traces.get` `cloudtrace.traces.list` `cloudtrace.traces.patch` `observability.scopes.get` `observability.traceScopes.` `observability.traceScopes.create` `observability.traceScopes.delete` `observability.traceScopes.get` `observability.traceScopes.list` `observability.traceScopes.update` `resourcemanager.projects.get` `resourcemanager.projects.list` `telemetry.traces.write`
Cloud Trace Agent (`roles/cloudtrace.agent`) For service accounts. Provides ability to write traces by sending the data to Stackdriver Trace. Lowest-level resources where you can grant this role: Project	`cloudtrace.traces.patch` `telemetry.traces.write`
Cloud Trace User (`roles/cloudtrace.user`) Provides full access to the Trace console and read access to traces. Lowest-level resources where you can grant this role: Project	`cloudtrace.insights.` `cloudtrace.insights.get` `cloudtrace.insights.list` `cloudtrace.stats.get` `cloudtrace.tasks.` `cloudtrace.tasks.create` `cloudtrace.tasks.delete` `cloudtrace.tasks.get` `cloudtrace.tasks.list` `cloudtrace.traceScopes.` `cloudtrace.traceScopes.create` `cloudtrace.traceScopes.delete` `cloudtrace.traceScopes.get` `cloudtrace.traceScopes.list` `cloudtrace.traceScopes.update` `cloudtrace.traces.get` `cloudtrace.traces.list` `observability.scopes.get` `observability.traceScopes.` `observability.traceScopes.create` `observability.traceScopes.delete` `observability.traceScopes.get` `observability.traceScopes.list` `observability.traceScopes.update` `resourcemanager.projects.get` `resourcemanager.projects.list`

Cloud Trace Admin

(roles/cloudtrace.admin)

Provides full access to the Trace console and read-write access to traces.

Lowest-level resources where you can grant this role:

Project

cloudtrace.*

cloudtrace.insights.get
cloudtrace.insights.list
cloudtrace.stats.get
cloudtrace.tasks.create
cloudtrace.tasks.delete
cloudtrace.tasks.get
cloudtrace.tasks.list
cloudtrace.traceScopes.create
cloudtrace.traceScopes.delete
cloudtrace.traceScopes.get
cloudtrace.traceScopes.list
cloudtrace.traceScopes.update
cloudtrace.traces.get
cloudtrace.traces.list
cloudtrace.traces.patch

observability.scopes.get

observability.traceScopes.*

observability.traceScopes.create
observability.traceScopes.delete
observability.traceScopes.get
observability.traceScopes.list
observability.traceScopes.update

resourcemanager.projects.get

resourcemanager.projects.list

telemetry.traces.write

Cloud Trace Agent

(roles/cloudtrace.agent)

For service accounts. Provides ability to write traces by sending the data to Stackdriver Trace.

Lowest-level resources where you can grant this role:

Project

cloudtrace.traces.patch

telemetry.traces.write

Cloud Trace User

(roles/cloudtrace.user)

Provides full access to the Trace console and read access to traces.

Lowest-level resources where you can grant this role:

Project

cloudtrace.insights.*

cloudtrace.insights.get
cloudtrace.insights.list

cloudtrace.stats.get

cloudtrace.tasks.*

cloudtrace.tasks.create
cloudtrace.tasks.delete
cloudtrace.tasks.get
cloudtrace.tasks.list

cloudtrace.traceScopes.*

cloudtrace.traceScopes.create
cloudtrace.traceScopes.delete
cloudtrace.traceScopes.get
cloudtrace.traceScopes.list
cloudtrace.traceScopes.update

cloudtrace.traces.get

cloudtrace.traces.list

observability.scopes.get

observability.traceScopes.*

observability.traceScopes.create
observability.traceScopes.delete
observability.traceScopes.get
observability.traceScopes.list
observability.traceScopes.update

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Trace 권한

권한	역할에 포함됨
`cloudtrace.insights.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) Cloud Trace 관리자(`roles/cloudtrace.admin`) Cloud Trace 사용자(`roles/cloudtrace.user`)
`cloudtrace.insights.list`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) Cloud Trace 관리자(`roles/cloudtrace.admin`) Cloud Trace 사용자(`roles/cloudtrace.user`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`)
`cloudtrace.stats.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) Cloud Trace 관리자(`roles/cloudtrace.admin`) Cloud Trace 사용자(`roles/cloudtrace.user`)
`cloudtrace.tasks.create`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) Cloud Trace 관리자(`roles/cloudtrace.admin`) Cloud Trace 사용자(`roles/cloudtrace.user`)
`cloudtrace.tasks.delete`	소유자(`roles/owner`) 편집자(`roles/editor`) Cloud Trace 관리자(`roles/cloudtrace.admin`) Cloud Trace 사용자(`roles/cloudtrace.user`)
`cloudtrace.tasks.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) Cloud Trace 관리자(`roles/cloudtrace.admin`) Cloud Trace 사용자(`roles/cloudtrace.user`)
`cloudtrace.tasks.list`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) Cloud Trace 관리자(`roles/cloudtrace.admin`) Cloud Trace 사용자(`roles/cloudtrace.user`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`)
`cloudtrace.traceScopes.create`	소유자(`roles/owner`) 편집자(`roles/editor`) Cloud Trace 관리자(`roles/cloudtrace.admin`) Cloud Trace 사용자(`roles/cloudtrace.user`)
`cloudtrace.traceScopes.delete`	소유자(`roles/owner`) 편집자(`roles/editor`) Cloud Trace 관리자(`roles/cloudtrace.admin`) Cloud Trace 사용자(`roles/cloudtrace.user`)
`cloudtrace.traceScopes.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) Cloud Trace 관리자(`roles/cloudtrace.admin`) Cloud Trace 사용자(`roles/cloudtrace.user`)
`cloudtrace.traceScopes.list`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) Cloud Trace 관리자(`roles/cloudtrace.admin`) Cloud Trace 사용자(`roles/cloudtrace.user`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`)
`cloudtrace.traceScopes.update`	소유자(`roles/owner`) 편집자(`roles/editor`) Cloud Trace 관리자(`roles/cloudtrace.admin`) Cloud Trace 사용자(`roles/cloudtrace.user`)
`cloudtrace.traces.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) Cloud Trace 관리자(`roles/cloudtrace.admin`) Cloud Trace 사용자(`roles/cloudtrace.user`)
`cloudtrace.traces.list`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) Cloud Trace 관리자(`roles/cloudtrace.admin`) Cloud Trace 사용자(`roles/cloudtrace.user`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`)
`cloudtrace.traces.patch`	소유자(`roles/owner`) 편집자(`roles/editor`) Cloud Trace 관리자(`roles/cloudtrace.admin`) Cloud Trace 에이전트(`roles/cloudtrace.agent`) 서비스 에이전트 역할 경고: 서비스 에이전트를 제외하고 주 구성원에 서비스 에이전트 역할을 부여하지 마세요. Apigee 서비스 에이전트(`roles/apigee.serviceAgent`) KubeRun Events 데이터 플레인 서비스 에이전트(`roles/kuberun.eventsDataPlaneServiceAgent`) 메시 데이터 플레인 서비스 에이전트(`roles/meshdataplane.serviceAgent`) Monitoring 서비스 에이전트(`roles/monitoring.notificationServiceAgent`) Vertex AI Reasoning Engine 서비스 에이전트(`roles/aiplatform.reasoningEngineServiceAgent`)

Cloud Trace 역할 및 권한