projects/979620418102/services/clientauthconfig.googleapis.com

OAuth API

oauth

oauthAka

gcp-oauth

A calculated policy that Guardrails uses to create a compiled list of ALL&#92;npermissions for GCP OAuth that is used as&#92;ninput to the control that manages the IAM stack.&#92;n

GCP > Turbot > Permissions > Compiled > Service Permissions

GCP > Project

GCP > Turbot > Permissions > Compiled > Service Permissions > @turbot/gcp-oauth

A calculated policy that Guardrails uses to create a compiled list of ALL permission&#92;nlevels for GCP OAuth that is used as input to&#92;nthe stack that manages the Guardrails IAM permissions objects.&#92;n

GCP > Turbot > Permissions > Compiled > Levels

GCP > Turbot > Permissions > Compiled > Levels > @turbot/gcp-oauth

GCP > OAuth

GCP > OAuth > Enabled

GCP > OAuth > Permissions > Levels

Configure whether permissions policies are in effect for GCP OAuth.&#92;nThis setting does not affect Project level permissions (GCP/Admin, GCP/Owner, etc).&#92;n&#92;n**Note:** The behavior of this policy depends on the value of GCP &gt; Permissions.&#92;n

GCP > OAuth > Permissions

GCP > OAuth > Permissions > Levels > Modifiers

Define the permissions levels that can be used to grant access to OAuth&#92;nan GCP project. Permissions levels defined will appear in the UI to assign access to Guardrails users.&#92;n&#92;n**Note:** Some services do not use all permissions levels, and any permissions level that has&#92;nno permissions associated will not be created even if it is selected here.&#92;n

A map of GCP API to Guardrails Permission Level used to customize Guardrails&#39; standard permissions.&#92;nYou can add, remove or redefine the mapping of GCP API operations to Guardrails permissions levels here.&#92;n&#92;n**Note:** Modifiers are cumulative - if you add a permission to the metadata level, it is also added&#92;n to readOnly, operator and admin. Modifier policies set here will “roll up” to the GCP level too - if&#92;n you add a permission to Admin, it will be granted to GCP/Storage/Admin and also GCP/Admin&#92;n&#92;n```&#92;nexample:&#92;n  - &quot;storage.bucket.create&quot;: admin&#92;n  - &quot;sql.database.create&quot;: metadata&#92;n```&#92;n

GCP/OAuth/Admin

GCP/OAuth/Metadata

gcp-appengine

gcp-bigquery

gcp-bigquerydatatransfer

gcp-bigtable

gcp-build

gcp-cisv1

gcp-cisv2-0

gcp-composer

gcp-computeengine

gcp-datacatalog

gcp-dataflow

gcp-datapipeline

gcp-dataplex

gcp-dataproc

gcp-dns

gcp-firebase

gcp-functions

gcp-iam

gcp-kms

gcp-kubernetesengine

gcp-logging

gcp-memorystore

gcp-monitoring

gcp-network

gcp-notebooks

gcp-orgpolicy

gcp-pubsub

gcp-run

gcp-scheduler

gcp-secretmanager

gcp-spanner

gcp-sql

gcp-storage

gcp-vertexai

Mod: gcp-oauth

Recommended Version

Resource Types

IAM Roles

Policies