{
  "title": "DDetectiveReadOnly",
  "description": "Least-privilege custom role for the Cloudkeel-DD GCP connector - Cloud Asset Inventory listing plus read-only access to GKE clusters, firewall rules, global forwarding rules, Compute instances, Cloud SQL instances, Cloud Storage bucket metadata, Cloud KMS crypto keys, service accounts, and custom IAM roles.",
  "stage": "GA",
  "includedPermissions": [
    "apigee.organizations.get",
    "artifactregistry.repositories.get",
    "bigquery.datasets.get",
    "bigquery.tables.get",
    "certificatemanager.certs.get",
    "cloudasset.assets.listResource",
    "cloudfunctions.functions.get",
    "cloudkms.cryptoKeys.get",
    "cloudsql.instances.get",
    "cloudsql.instances.list",
    "compute.addresses.get",
    "compute.backendServices.get",
    "compute.disks.get",
    "compute.firewalls.get",
    "compute.firewalls.list",
    "compute.forwardingRules.get",
    "compute.globalAddresses.get",
    "compute.globalForwardingRules.get",
    "compute.globalForwardingRules.list",
    "compute.healthChecks.get",
    "compute.images.get",
    "compute.instanceGroupManagers.get",
    "compute.instances.get",
    "compute.instances.list",
    "compute.networkEndpointGroups.get",
    "compute.packetMirrorings.get",
    "compute.regionBackendServices.get",
    "compute.regionHealthChecks.get",
    "compute.routers.get",
    "compute.routes.get",
    "compute.securityPolicies.get",
    "compute.snapshots.get",
    "compute.sslCertificates.get",
    "compute.sslPolicies.get",
    "compute.targetHttpProxies.get",
    "compute.targetHttpsProxies.get",
    "compute.urlMaps.get",
    "compute.vpnTunnels.get",
    "compute.zones.list",
    "container.clusters.get",
    "container.clusters.list",
    "dataproc.clusters.get",
    "dns.managedZones.get",
    "dns.policies.get",
    "dns.responsePolicies.get",
    "file.instances.get",
    "iam.roles.get",
    "iam.serviceAccounts.get",
    "logging.logMetrics.get",
    "memcache.instances.get",
    "monitoring.alertPolicies.get",
    "monitoring.notificationChannels.get",
    "monitoring.uptimeCheckConfigs.get",
    "notebooks.instances.get",
    "pubsub.subscriptions.get",
    "pubsub.topics.get",
    "redis.instances.get",
    "run.services.get",
    "secretmanager.secrets.get",
    "spanner.instances.get",
    "storage.buckets.get",
    "vpcaccess.connectors.get",
    "workflows.workflows.get"
  ]
}