Policy: Turbot > IAM > Permissions > Compiled > Levels > GCP [Turbot]

A list of GCP permissions that Guardrails may use to grant permissions on guardrails and its folder.

Targets

This policy targets the following resource types:

Policy Specification

Examples [YAML]	`- type: tmod:@turbot/gcp-storage#/permission/types/storage level: tmod:@turbot/turbot-iam#/permission/levels/admin - type: tmod:@turbot/gcp-storage#/permission/types/storage level: tmod:@turbot/turbot-iam#/permission/levels/operator`

Examples [YAML]

- type: tmod:@turbot/gcp-storage#/permission/types/storage
  level: tmod:@turbot/turbot-iam#/permission/levels/admin
- type: tmod:@turbot/gcp-storage#/permission/types/storage
  level: tmod:@turbot/turbot-iam#/permission/levels/operator

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/iamPermissions

Policy Type URI

tmod:@turbot/gcp-iam#/policy/types/turbotPermissionsCompiledLevels

GraphQL

query policyType(id: "tmod:@turbot/gcp-iam#/policy/types/turbotPermissionsCompiledLevels") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/gcp-iam#/policy/types/turbotPermissionsCompiledLevels'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/gcp-iam#/policy/types/turbotPermissionsCompiledLevels'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/gcp-iam#/policy/types/turbotPermissionsCompiledLevels"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/gcp-iam#/policy/types/turbotPermissionsCompiledLevels"