Permissões necessárias para tarefas comuns no Google Cloud console
Para ver uma lista de papéis e as permissões associadas, consulte Papéis do Cloud SQL.
| Tarefa | Permissões adicionais necessárias |
|---|---|
| Exibir a página de listagem de instâncias | cloudsql.instances.listresourcemanager.projects.get |
| Criar uma instância | cloudsql.instances.createcloudsql.instances.getcloudsql.instances.listresourcemanager.projects.getcompute.machineTypes.listcompute.machineTypes.getcompute.projects.get roles/compute.viewer |
| Conectar-se a uma instância do Cloud Shell | cloudsql.instances.getcloudsql.instances.listcloudsql.instances.updateresourcemanager.projects.get |
| Criar um usuário | cloudsql.instances.getcloudsql.instances.listcloudsql.users.createcloudsql.users.listresourcemanager.projects.get |
| Ver informações da instância | cloudsql.databases.listcloudsql.instances.getcloudsql.instances.listcloudsql.users.listmonitoring.timeSeries.listresourcemanager.projects.get |
| Listar as operações de uma instância | cloudsql.instances.list |
| Acessar as operações de uma instância | cloudsql.instances.get |
| Receber as operações de um projeto | cloudsql.instances.get |
| Visualizar metadados de instância no Dataplex Universal Catalog | cloudsql.schemas.view |
| Listar backups finais | cloudsql.backupRuns.list |
| Descrever um backup final | cloudsql.backupRuns.get |
| Atualizar um backup final | cloudsql.backupRuns.update |
| Restaurar um backup final para uma nova instância | cloudsql.backupRuns.getcloudsql.instances.restoreBackupcloudsql.instances.create |
| Restaurar um backup final para uma instância atual | cloudsql.backupRuns.getcloudsql.instances.restoreBackup |
| Excluir um backup final | cloudsql.backupRuns.delete |
Permissões necessárias para comandos do gcloud sql
| Comando | Permissões necessárias |
|---|---|
gcloud sql backups create | cloudsql.backupRuns.create |
gcloud sql backups delete | cloudsql.backupRuns.delete |
gcloud sql backups describe | cloudsql.backupRuns.get |
gcloud sql backups list | cloudsql.backupRuns.list |
gcloud sql backups restore | cloudsql.backupRuns.getcloudsql.instances.restoreBackup |
gcloud sql connect | cloudsql.instances.getcloudsql.instances.update |
gcloud sql databases create | cloudsql.databases.create |
gcloud sql databases delete | cloudsql.databases.delete |
gcloud sql databases describe | cloudsql.databases.get |
gcloud sql databases list | cloudsql.databases.list |
gcloud sql databases patch | cloudsql.databases.getcloudsql.databases.update |
gcloud sql export | cloudsql.instances.exportcloudsql.instances.get |
gcloud sql flags list | Nenhum |
gcloud sql import | cloudsql.instances.import |
gcloud sql instances clone | cloudsql.instances.clone |
gcloud sql instances create | cloudsql.instances.create |
gcloud sql instances delete | cloudsql.instances.delete |
gcloud sql instances describe | cloudsql.instances.get |
gcloud sql instances failover | cloudsql.instances.failover |
gcloud sql instances import | cloudsql.instances.import |
gcloud sql instances list | cloudsql.instances.list |
gcloud sql instances patch | cloudsql.instances.getcloudsql.instances.update |
gcloud sql instances promote-replica | cloudsql.instances.promoteReplica |
gcloud sql instances reset-ssl-config | cloudsql.instances.resetSslConfig |
gcloud sql instances restart | cloudsql.instances.restart |
gcloud sql instances restore-backup | cloudsql.backupRuns.getcloudsql.instances.restoreBackup |
gcloud sql operations describe | cloudsql.instances.get |
gcloud sql operations list | cloudsql.instances.get |
gcloud sql operations wait | cloudsql.instances.get |
gcloud sql ssl client-certs create | cloudsql.sslCerts.create |
gcloud sql ssl client-certs delete | cloudsql.sslCerts.delete |
gcloud sql ssl client-certs describe | cloudsql.sslCerts.list |
gcloud sql ssl client-certs list | cloudsql.sslCerts.list |
gcloud sql tiers list | Nenhum |
gcloud sql users create | cloudsql.users.create |
gcloud sql users delete | cloudsql.users.delete |
gcloud sql users list | cloudsql.users.list |
gcloud sql users set-password | cloudsql.users.update |
gcloud sql operations list | cloudsql.instances.list |
gcloud sql operations get | cloudsql.instances.get |
Permissões necessárias para métodos da API Cloud SQL Admin
Na tabela a seguir, estão listadas as permissões que o autor da chamada precisa ter para chamar cada método na API Cloud SQL Admin ou para executar tarefas usando ferramentas do Google Cloud que utilizam a API (como o console doGoogle Cloud ou a ferramenta de linha de comando gcloud).
Para mais informações, consulte Como autorizar solicitações com o OAuth 2.0. Todas as permissões são aplicadas ao projeto. Não é possível aplicar permissões diferentes com base na instância ou em outro objeto de nível inferior.
| Método | Permissões necessárias |
|---|---|
backups.deleteBackup | cloudsql.backupRuns.delete |
backups.getBackup | cloudsql.backupRuns.get |
backups.updateBackup | cloudsql.backupRuns.update |
backups.listBackups | cloudsql.backupRuns.list |
backups.createBackup | cloudsql.backupRuns.create |
databases.delete | cloudsql.databases.delete |
databases.get | cloudsql.databases.get |
databases.insert | cloudsql.databases.create |
databases.list | cloudsql.databases.list |
databases.patch | cloudsql.databases.update, cloudsql.databases.get |
databases.update | cloudsql.databases.update |
flags.list | Nenhum |
instances.clone | cloudsql.instances.clone |
instances.delete | cloudsql.instances.delete |
instances.export | cloudsql.instances.export |
instances.failover | cloudsql.instances.failover |
instances.get | cloudsql.instances.get |
instances.import | cloudsql.instances.import |
instances.insert | cloudsql.instances.create |
instances.list | cloudsql.instances.list |
instances.patch | cloudsql.instances.get, cloudsql.instances.update |
instances.promoteReplica | cloudsql.instances.promoteReplica |
instances.resetSslConfig | cloudsql.instances.resetSslConfig |
instances.restart | cloudsql.instances.restart |
instances.restoreBackup | cloudsql.instances.restoreBackup, cloudsql.backupRuns.get |
instances.startReplica | cloudsql.instances.startReplica |
instances.stopReplica | cloudsql.instances.stopReplica |
instances.truncateLog | cloudsql.instances.truncateLog |
instances.update | cloudsql.instances.update |
operations.get | cloudsql.instances.get |
operations.get | cloudsql.instances.get |
operations.list | cloudsql.instances.get |
operations.list | cloudsql.instances.list |
sslCerts.delete | cloudsql.sslCerts.delete |
sslCerts.get | cloudsql.sslCerts.get |
sslCerts.insert | cloudsql.sslCerts.create |
sslCerts.list | cloudsql.sslCerts.list |
users.delete | cloudsql.users.delete |
users.insert | cloudsql.users.create |
users.list | cloudsql.users.list |
users.update | cloudsql.users.update |