Google Cloud 콘솔에서 일반적인 작업에 필요한 권한
역할 및 관련된 권한 목록은 Cloud SQL 역할을 참조하세요.
| 작업 | 필요한 추가 권한 |
|---|---|
| 인스턴스 목록 페이지 표시 | cloudsql.instances.listresourcemanager.projects.get |
| 인스턴스 만들기 | cloudsql.instances.createcloudsql.instances.getcloudsql.instances.listresourcemanager.projects.getcompute.machineTypes.listcompute.machineTypes.getcompute.projects.get roles/compute.viewer |
| Cloud Shell에서 인스턴스에 연결 | cloudsql.instances.getcloudsql.instances.listcloudsql.instances.updateresourcemanager.projects.get |
| 사용자 생성 | cloudsql.instances.getcloudsql.instances.listcloudsql.users.createcloudsql.users.listresourcemanager.projects.get |
| 인스턴스 정보 보기 | cloudsql.databases.listcloudsql.instances.getcloudsql.instances.listcloudsql.users.listmonitoring.timeSeries.listresourcemanager.projects.get |
| 인스턴스의 작업 나열 | cloudsql.instances.list |
| 인스턴스의 작업 가져오기 | cloudsql.instances.get |
| 프로젝트의 작업 가져오기 | cloudsql.instances.get |
| Dataplex Universal Catalog에서 인스턴스 메타데이터 보기 | cloudsql.schemas.view |
| 최종 백업 나열 | cloudsql.backupRuns.list |
| 최종 백업 설명 | cloudsql.backupRuns.get |
| 최종 백업 업데이트 | cloudsql.backupRuns.update |
| 새 인스턴스에 최종 백업 복원 | cloudsql.backupRuns.getcloudsql.instances.restoreBackupcloudsql.instances.create |
| 기존 인스턴스에 최종 백업 복원 | cloudsql.backupRuns.getcloudsql.instances.restoreBackup |
| 최종 백업 삭제 | cloudsql.backupRuns.delete |
gcloud sql 명령어에 필요한 권한
| 명령어 | 필수 권한 |
|---|---|
gcloud sql backups create | cloudsql.backupRuns.create |
gcloud sql backups delete | cloudsql.backupRuns.delete |
gcloud sql backups describe | cloudsql.backupRuns.get |
gcloud sql backups list | cloudsql.backupRuns.list |
gcloud sql backups restore | cloudsql.backupRuns.getcloudsql.instances.restoreBackup |
gcloud sql connect | cloudsql.instances.getcloudsql.instances.update |
gcloud sql databases create | cloudsql.databases.create |
gcloud sql databases delete | cloudsql.databases.delete |
gcloud sql databases describe | cloudsql.databases.get |
gcloud sql databases list | cloudsql.databases.list |
gcloud sql databases patch | cloudsql.databases.getcloudsql.databases.update |
gcloud sql export | cloudsql.instances.exportcloudsql.instances.get |
gcloud sql flags list | 없음 |
gcloud sql import | cloudsql.instances.import |
gcloud sql instances clone | cloudsql.instances.clone |
gcloud sql instances create | cloudsql.instances.create |
gcloud sql instances delete | cloudsql.instances.delete |
gcloud sql instances describe | cloudsql.instances.get |
gcloud sql instances failover | cloudsql.instances.failover |
gcloud sql instances import | cloudsql.instances.import |
gcloud sql instances list | cloudsql.instances.list |
gcloud sql instances patch | cloudsql.instances.getcloudsql.instances.update |
gcloud sql instances promote-replica | cloudsql.instances.promoteReplica |
gcloud sql instances reset-ssl-config | cloudsql.instances.resetSslConfig |
gcloud sql instances restart | cloudsql.instances.restart |
gcloud sql instances restore-backup | cloudsql.backupRuns.getcloudsql.instances.restoreBackup |
gcloud sql operations describe | cloudsql.instances.get |
gcloud sql operations list | cloudsql.instances.get |
gcloud sql operations wait | cloudsql.instances.get |
gcloud sql ssl client-certs create | cloudsql.sslCerts.create |
gcloud sql ssl client-certs delete | cloudsql.sslCerts.delete |
gcloud sql ssl client-certs describe | cloudsql.sslCerts.list |
gcloud sql ssl client-certs list | cloudsql.sslCerts.list |
gcloud sql tiers list | 없음 |
gcloud sql users create | cloudsql.users.create |
gcloud sql users delete | cloudsql.users.delete |
gcloud sql users list | cloudsql.users.list |
gcloud sql users set-password | cloudsql.users.update |
gcloud sql operations list | cloudsql.instances.list |
gcloud sql operations get | cloudsql.instances.get |
Cloud SQL Admin API 메서드에 필요한 권한
다음 표에는 호출자가 Cloud SQL Admin API의 각 메서드를 호출하거나 API를 사용하는 Google Cloud 도구(예:Google Cloud 콘솔 또는 gcloud 명령줄 도구)를 사용하여 태스크를 수행하는 데 필요한 권한이 나와 있습니다.
자세한 내용은 OAuth 2.0으로 요청 승인을 참조하세요. 모든 권한은 프로젝트에 적용됩니다. 인스턴스나 기타 하위 수준의 객체에 기초하여 다른 권한을 적용할 수 없습니다.
| 메서드 | 필수 권한 |
|---|---|
backups.deleteBackup | cloudsql.backupRuns.delete |
backups.getBackup | cloudsql.backupRuns.get |
backups.updateBackup | cloudsql.backupRuns.update |
backups.listBackups | cloudsql.backupRuns.list |
backups.createBackup | cloudsql.backupRuns.create |
databases.delete | cloudsql.databases.delete |
databases.get | cloudsql.databases.get |
databases.insert | cloudsql.databases.create |
databases.list | cloudsql.databases.list |
databases.patch | cloudsql.databases.update, cloudsql.databases.get |
databases.update | cloudsql.databases.update |
flags.list | 없음 |
instances.clone | cloudsql.instances.clone |
instances.delete | cloudsql.instances.delete |
instances.export | cloudsql.instances.export |
instances.failover | cloudsql.instances.failover |
instances.get | cloudsql.instances.get |
instances.import | cloudsql.instances.import |
instances.insert | cloudsql.instances.create |
instances.list | cloudsql.instances.list |
instances.patch | cloudsql.instances.get, cloudsql.instances.update |
instances.promoteReplica | cloudsql.instances.promoteReplica |
instances.resetSslConfig | cloudsql.instances.resetSslConfig |
instances.restart | cloudsql.instances.restart |
instances.restoreBackup | cloudsql.instances.restoreBackup, cloudsql.backupRuns.get |
instances.startReplica | cloudsql.instances.startReplica |
instances.stopReplica | cloudsql.instances.stopReplica |
instances.truncateLog | cloudsql.instances.truncateLog |
instances.update | cloudsql.instances.update |
operations.get | cloudsql.instances.get |
operations.get | cloudsql.instances.get |
operations.list | cloudsql.instances.get |
operations.list | cloudsql.instances.list |
sslCerts.delete | cloudsql.sslCerts.delete |
sslCerts.get | cloudsql.sslCerts.get |
sslCerts.insert | cloudsql.sslCerts.create |
sslCerts.list | cloudsql.sslCerts.list |
users.delete | cloudsql.users.delete |
users.insert | cloudsql.users.create |
users.list | cloudsql.users.list |
users.update | cloudsql.users.update |