gcp-iam-catalog Roles Permissions
🔐

roles/iam.denyAdmin

Title Deny Admin
Stage GA
Role Type Predefined
Permissions 11
Description Deny admin role, with permissions to read and modify deny policies
🔍
cloudasset.assets.listResource
iam.denypolicies.create
iam.denypolicies.delete
iam.denypolicies.get
iam.denypolicies.list
iam.denypolicies.update
policyanalyzer.resourceAuthorizationActivities.query
policysimulator.accessPolicySimulationResults.list
policysimulator.accessPolicySimulations.create
policysimulator.accessPolicySimulations.get
policysimulator.accessPolicySimulations.list
🔍