{"id":210116,"date":"2023-11-09T06:30:00","date_gmt":"2023-11-09T06:30:00","guid":{"rendered":"https:\/\/datascientest.com\/?p=210116"},"modified":"2023-11-09T14:21:25","modified_gmt":"2023-11-09T14:21:25","slug":"gcp-custom-role-tout-savoir","status":"publish","type":"post","link":"https:\/\/datascientest.com\/gcp-custom-role-tout-savoir","title":{"rendered":"GCP custom r\u00f4le : Comment personnaliser ses acc\u00e8s ?"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"210116\" class=\"elementor elementor-210116\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-b7f51ed e-flex e-con-boxed e-con\" data-id=\"b7f51ed\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-81bb0df elementor-widget elementor-widget-heading\" data-id=\"81bb0df\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h2 class=\"elementor-heading-title elementor-size-default\">Lors du d\u00e9veloppement d\u2019un logiciel ou d\u2019une application, des dizaines, voire des centaines d\u2019utilisateurs interviennent. Mais tous n\u2019ont pas les m\u00eames droits d\u2019acc\u00e8s. Alors pour personnaliser l\u2019accessibilit\u00e9 aux diff\u00e9rentes ressources de Google Cloud Platform, il existe les GCP Custom. <\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2e9ac45 e-flex e-con-boxed e-con\" data-id=\"2e9ac45\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ff096ad elementor-widget elementor-widget-heading\" data-id=\"ff096ad\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Qu'est-ce-que GCP custom role ?<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cf023f7 elementor-widget elementor-widget-text-editor\" data-id=\"cf023f7\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p><span style=\"font-weight: 400;\">Les GCP custom roles correspondent aux r\u00f4les personnalis\u00e9s sur IAM (Identity and Access Management).<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c739e00 elementor-widget elementor-widget-heading\" data-id=\"c739e00\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">GCP custom role sur IAM<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d60041f elementor-widget elementor-widget-text-editor\" data-id=\"d60041f\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Pour rappel, IAM est la plateforme de gestion des authentifications et des acc\u00e8s sur <a href=\"https:\/\/datascientest.com\/formation-google-cloud-platform#\">Google Cloud Platform<\/a>. Plus pr\u00e9cis\u00e9ment, elle <\/span><b>d\u00e9finit qui (utilisateur) a acc\u00e8s \u00e0 quoi (ressources) et comment (r\u00f4le).\u00a0<\/b><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><b>L\u2019utilisateur<\/b><span style=\"font-weight: 400;\"> : on parle \u00e9galement de compte principal. <\/span><span style=\"font-weight: 400;\">Il peut s\u2019agir d\u2019un compte Google, d\u2019un compte de service, d\u2019un groupe Google, d\u2019un compte Google Workspace ou d\u2019un domaine Cloud Identity. Chaque compte principal poss\u00e8de son propre identifiant (souvent une adresse e-mail).\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Les ressources cloud :<\/b><span style=\"font-weight: 400;\"> ce sont les <\/span><span style=\"font-weight: 400;\">instances de machine virtuelle Compute Engine, les clusters Google Kubernetes Engine, les <a href=\"https:\/\/datascientest.com\/bucket-gcp-tout-savoir\">buckets Cloud Storage<\/a>, les dossiers complets, les projets, etc. <\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Le r\u00f4le <\/b>: l\u2019autorisation d\u2019acc\u00e8s n\u2019est pas accord\u00e9e directement \u00e0 l\u2019utilisateur, mais passe par l\u2019interm\u00e9diaire des r\u00f4les. Ces derniers sont alors attribu\u00e9s aux comptes principaux et regroupent un ensemble d&rsquo;autorisations sur une ressource. Mais attention, il existe diff\u00e9rents types de r\u00f4les.<\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-eb72825 elementor-widget elementor-widget-heading\" data-id=\"eb72825\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Les diff\u00e9rents types de r\u00f4les<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2be3c92 elementor-widget elementor-widget-text-editor\" data-id=\"2be3c92\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">L\u2019outil Cloud IAM compte 3 types de r\u00f4les :\u00a0<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Les r\u00f4les de base<\/b><span style=\"font-weight: 400;\"> : ces derniers sont pr\u00e9sents par d\u00e9faut sur IAM. Il s\u2019agit des r\u00f4les \u201cPropri\u00e9taire\u201d, \u201c\u00c9diteur\u201d et \u201cLecteur\u201d. D\u00e8s lors qu\u2019ils sont attribu\u00e9s, ces derniers incluent des milliers d\u2019autorisations sur les ressources GCP. Il est donc pr\u00e9f\u00e9rable de ne pas attribuer ce type de r\u00f4le.\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Les r\u00f4les pr\u00e9d\u00e9finis <\/b><span style=\"font-weight: 400;\">: enti\u00e8rement g\u00e9r\u00e9s par Google, ils permettent d\u2019autoriser ou de refuser les acc\u00e8s aux ressources. Ainsi, lorsque de nouvelles fonctionnalit\u00e9s ou services sont ajout\u00e9s, les r\u00f4les pr\u00e9d\u00e9finis se mettent automatiquement \u00e0 jour.\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Les r\u00f4les personnalis\u00e9s <\/b><span style=\"font-weight: 400;\">: ils sont d\u00e9finis par l\u2019utilisateur lui-m\u00eame. Cela permet d\u2019adapter les conditions d\u2019accessibilit\u00e9 en fonction des besoins sp\u00e9cifiques de l\u2019organisation. Mais avec ces r\u00f4les personnalis\u00e9s, il n\u2019y a pas de mise \u00e0 jour automatique apr\u00e8s l\u2019ajout d\u2019une nouvelle fonctionnalit\u00e9 ou service. <\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\">Les GCP custom roles de reposent sur le <b>principe du moindre privil\u00e8ge. <\/b><span>C\u2019est-\u00e0-dire que les utilisateurs ne devraient pas avoir plus d\u2019autorisations que n\u00e9cessaire. Ainsi, lorsqu\u2019un r\u00f4le pr\u00e9d\u00e9fini inclut une autorisation pour un ensemble de ressources, la cr\u00e9ation de GCP custom role permet de donner des droits d\u2019acc\u00e8s pour une ressource bien sp\u00e9cifique et non pour l\u2019ensemble.<\/span><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d334bab elementor-widget elementor-widget-text-editor\" data-id=\"d334bab\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\"><span style=\"text-decoration: underline;\"><strong>Bon \u00e0 savoir<\/strong><\/span> : bien souvent, ce sont les administrateurs syst\u00e8me qui d\u00e9finissent eux-m\u00eames les r\u00f4les personnalis\u00e9s en fonction des besoins des utilisateurs. Mais dans certains cas, ils peuvent aussi utiliser les recommandations de r\u00f4les (notamment si les attributions sont trop permissives). Dans un tel cas, ils recevront une recommandation de cr\u00e9er un r\u00f4le personnalis\u00e9. <\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-f85ff30 e-flex e-con-boxed e-con\" data-id=\"f85ff30\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c79992e elementor-widget elementor-widget-heading\" data-id=\"c79992e\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Comment personnaliser les r\u00f4les sur GCP ? <\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fdc923d elementor-widget elementor-widget-text-editor\" data-id=\"fdc923d\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">D\u00e9couvrez les diff\u00e9rentes \u00e9tapes pour cr\u00e9er un GCP custom role.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cfd713c elementor-widget elementor-widget-image\" data-id=\"cfd713c\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-widget-image{text-align:center}.elementor-widget-image a{display:inline-block}.elementor-widget-image a img[src$=\".svg\"]{width:48px}.elementor-widget-image img{vertical-align:middle;display:inline-block}<\/style>\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"900\" height=\"500\" src=\"https:\/\/datascientest.com\/wp-content\/uploads\/2023\/08\/gcp-roles1.png\" class=\"attachment-full size-full wp-image-210143\" alt=\"\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c8dac70 elementor-align-center button-principale elementor-widget elementor-widget-button\" data-id=\"c8dac70\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm elementor-animation-grow\" href=\"\/formation-cloud-computing\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-text\">Tout apprendre sur GCP custom roles<\/span>\n\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6e31a75 elementor-widget elementor-widget-heading\" data-id=\"6e31a75\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Obtenir les autorisations <\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6009f59 elementor-widget elementor-widget-text-editor\" data-id=\"6009f59\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Avant toute chose, il convient d\u2019obtenir les autorisations pour g\u00e9rer les r\u00f4les. <\/span><span style=\"font-weight: 400;\">\u00c0 savoir modifier, lister, supprimer ou cr\u00e9er des r\u00f4les. Pour cela, vous devez obtenir le r\u00f4le d\u2019<em>\u00ab\u00a0<\/em><\/span><i><span style=\"font-weight: 400;\">administrateur des r\u00f4les\u00a0\u00bb<\/span><\/i><span style=\"font-weight: 400;\"> (pour un projet) ou \u00ab\u00a0<\/span><i><span style=\"font-weight: 400;\">administrateur des r\u00f4les de l\u2019organisation<\/span><\/i><span style=\"font-weight: 400;\">\u00a0\u00bb (\u00e0 l\u2019\u00e9chelle de toute l\u2019entreprise). <\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-753f9c3 elementor-widget elementor-widget-heading\" data-id=\"753f9c3\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Afficher les autorisations disponibles<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7166458 elementor-widget elementor-widget-text-editor\" data-id=\"7166458\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">La <\/span><b>gestion des GCP custom roles d\u00e9pend de leur emplacement.<\/b><span style=\"font-weight: 400;\"> Ainsi, si le r\u00f4le est situ\u00e9 au niveau de l\u2019organisation, il ne sera pas possible d\u2019inclure une autorisation dans un r\u00f4le personnalis\u00e9 au niveau du projet.<\/span><\/p><p><span style=\"font-weight: 400;\">C\u2019est pourquoi, il est primordial de v\u00e9rifier la liste des permissions disponibles avant toute cr\u00e9ation de r\u00f4les personnalis\u00e9s. Pour les r\u00e9pertorier, vous pouvez utiliser la <a href=\"https:\/\/datascientest.com\/gcp-console-tout-savoir\">console de Google Cloud<\/a> ou l&rsquo;API Identity and Access Management.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0c7ff80 elementor-widget elementor-widget-heading\" data-id=\"0c7ff80\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Obtenir les m\u00e9tadonn\u00e9es <\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9638679 elementor-widget elementor-widget-text-editor\" data-id=\"9638679\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Avant de cr\u00e9er un GCP custom role, vous aurez besoin de ses m\u00e9tadonn\u00e9es. \u00c0 savoir<\/span><b>, le role ID et toutes les autorisations qu\u2019il contient. <\/b><span style=\"font-weight: 400;\">L\u00e0 encore, la console Google Cloud et l&rsquo;API d\u2019IAM vous permettent d\u2019afficher ces m\u00e9tadonn\u00e9es.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8a874bf elementor-widget elementor-widget-heading\" data-id=\"8a874bf\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Cr\u00e9er un GCP custom role<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fed451b elementor-widget elementor-widget-text-editor\" data-id=\"fed451b\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">La cr\u00e9ation de r\u00f4les se fait<\/span><b> soit au niveau de l\u2019organisation, soit au niveau du projet <\/b><span style=\"font-weight: 400;\">(jamais au niveau d\u2019un dossier). Pour ces derniers, il est pr\u00e9f\u00e9rable de d\u00e9finir un r\u00f4le au niveau de l\u2019organisation, puisqu\u2019ils peuvent inclure toutes les autorisations compatibles avec les GCP custom role. Mais certains ne peuvent \u00eatre utilis\u00e9s qu\u2019\u00e0 l\u2019\u00e9chelle de l&rsquo;organisation et non du projet. C\u2019est par exemple le cas resourcemanager.organizations.get.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">Ensuite, pour cr\u00e9er un r\u00f4le personnalis\u00e9, vous devez respecter les r\u00e8gles suivantes :\u00a0<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">3 000 autorisations maximum ;\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">64 ko maximum pour la taille du titre, la description et les noms d&rsquo;autorisations.\u00a0<\/span><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cc46942 elementor-widget elementor-widget-text-editor\" data-id=\"cc46942\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Si vous avez besoin d\u2019attribuer plus d\u2019autorisations, vous pouvez les r\u00e9partir entre plusieurs custom roles sur GCP.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">Pour cr\u00e9er un r\u00f4le personnalis\u00e9 sur Identity and Access Management, vous pouvez utiliser la console de Google Cloud Platform, l\u2019API d\u2019IAM ou les diff\u00e9rents langages de programmation (C++, C, Go, Java, Python). <\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2833e7f elementor-widget elementor-widget-heading\" data-id=\"2833e7f\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Inclure une \u00e9tape de lancement <\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1972af6 elementor-widget elementor-widget-text-editor\" data-id=\"1972af6\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Cette phase de lancement est <\/span><b>optionnelle. <\/b><span style=\"font-weight: 400;\">L\u2019id\u00e9e est surtout de tester le r\u00f4le personnalis\u00e9 avant de le d\u00e9ployer \u00e0 grande \u00e9chelle. C\u2019est particuli\u00e8rement important pour la fonction DISABLED qui implique une d\u00e9sactivation du GCP custom role.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-90e95b5 elementor-widget elementor-widget-heading\" data-id=\"90e95b5\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Modifier un r\u00f4le personnalis\u00e9<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-53e670f elementor-widget elementor-widget-text-editor\" data-id=\"53e670f\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Apr\u00e8s cr\u00e9ation d\u2019un GCP custom role, le plus simple est d&rsquo;<\/span><b>utiliser le mod\u00e8le lecture-modification-\u00e9criture. <\/b><span style=\"font-weight: 400;\">Cela permet de mettre \u00e0 jour les m\u00e9tadonn\u00e9es d&rsquo;une ressource (notamment les r\u00f4les). Mais attention, lorsque vous proc\u00e9dez \u00e0 des modifications, veillez \u00e0 ce que vous soyez le seul \u00e0 le faire. En effet, si deux propri\u00e9taires utilisent le mod\u00e8le lecture-modification-\u00e9criture simultan\u00e9ment, il peut y avoir des erreurs (\u00e9checs de modification).\u00a0\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">Pour \u00e9viter ces conflits, n\u2019h\u00e9sitez pas \u00e0 utiliser la propri\u00e9t\u00e9 etag qui compare les valeurs de la requ\u00eate avec la valeur etag existante. <\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-482ed94 elementor-widget elementor-widget-text-editor\" data-id=\"482ed94\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\"><span style=\"text-decoration: underline;\"><strong>Bon \u00e0 savoir<\/strong><\/span> : certaines mises \u00e0 jour n\u2019apparaissent pas automatiquement, mais apr\u00e8s un certain d\u00e9lai pouvant aller jusqu\u2019\u00e0 24 heures. C\u2019est par exemple le cas de l\u2019ajout ou de la suppression des autorisations suivantes : <strong>resourcemanager.organizations.get<\/strong>, <strong>resourcemanager.folders.get<\/strong> ou <strong>resourcemanager.projects.get<\/strong>. <\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-b2f5c11 e-flex e-con-boxed e-con\" data-id=\"b2f5c11\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-678b0d2 elementor-widget elementor-widget-heading\" data-id=\"678b0d2\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Ma\u00eetrisez les GCP custom role avec DataScientest<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-285af9f elementor-widget elementor-widget-text-editor\" data-id=\"285af9f\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<span style=\"font-weight: 400;\">Tr\u00e8s souvent, l\u2019utilisation des GCP custom role est l\u2019apanage de l\u2019administrateur. Pour ma\u00eetriser cette fonctionnalit\u00e9 sur Google Cloud platform, vous pouvez passer les <a href=\"https:\/\/datascientest.com\/certifications-google-cloud-platform\">certifications GCP<\/a>. Mais pour d\u00e9velopper l\u2019ensemble de vos connaissances sur ce service cloud, mieux vaut suivre une formation compl\u00e8te. C\u2019est justement possible chez DataScient. <a href=\"https:\/\/datascientest.com\/formations-data\">Rejoignez-nous !<\/a> <\/span>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f00716d elementor-widget elementor-widget-image\" data-id=\"f00716d\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"900\" height=\"500\" src=\"https:\/\/datascientest.com\/wp-content\/uploads\/2023\/08\/gcp-roles2.png\" class=\"attachment-full size-full wp-image-210150\" alt=\"\" srcset=\"https:\/\/datascientest.com\/wp-content\/uploads\/2023\/08\/gcp-roles2.png 900w, https:\/\/datascientest.com\/wp-content\/uploads\/2023\/08\/gcp-roles2-300x167.png 300w, https:\/\/datascientest.com\/wp-content\/uploads\/2023\/08\/gcp-roles2-768x427.png 768w\" sizes=\"(max-width: 900px) 100vw, 900px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fe8254d elementor-align-center button-principale elementor-widget elementor-widget-button\" data-id=\"fe8254d\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm elementor-animation-grow\" href=\"https:\/\/datascientest.com\/formation-cloud-computing\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-text\">D\u00e9couvrez nos formations en cloud computing<\/span>\n\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-081da62 e-flex e-con-boxed e-con\" data-id=\"081da62\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e70e835 elementor-widget elementor-widget-html\" data-id=\"e70e835\" data-element_type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<script type=\"application\/ld+json\">\r\n{\r\n  \"@context\": \"https:\/\/schema.org\",\r\n  \"@type\": \"FAQPage\",\r\n  \"mainEntity\": [{\r\n    \"@type\": \"Question\",\r\n    \"name\": \"Qu'est-ce-que GCP custom role ?\",\r\n    \"acceptedAnswer\": {\r\n      \"@type\": \"Answer\",\r\n      \"text\": \"Le data catalog de GCP est un service de gestion des m\u00e9tadonn\u00e9es appartenant \u00e0 Dataplex. Pour rappel, les m\u00e9tadonn\u00e9es sont les donn\u00e9es des donn\u00e9es. L\u2019id\u00e9e est de donner du contexte aux diff\u00e9rentes datas disponibles en r\u00e9pondant aux questions : Qui ? Quoi ? O\u00f9 ? Comment ? Pourquoi ?\"\r\n    }\r\n  },{\r\n    \"@type\": \"Question\",\r\n    \"name\": \"Qu'est-ce-que GCP custom role ?\",\r\n    \"acceptedAnswer\": {\r\n      \"@type\": \"Answer\",\r\n      \"text\": \"L\u2019utilisateur : on parle \u00e9galement de compte principal. Il peut s\u2019agir d\u2019un compte Google, d\u2019un compte de service, d\u2019un groupe Google, d\u2019un compte Google Workspace ou d\u2019un domaine Cloud Identity. Chaque compte principal poss\u00e8de son propre identifiant (souvent une adresse e-mail).  Les ressources cloud : ce sont les instances de machine virtuelle Compute Engine, les clusters Google Kubernetes Engine, les buckets Cloud Storage, les dossiers complets, les projets, etc. Le r\u00f4le : l\u2019autorisation d\u2019acc\u00e8s n\u2019est pas accord\u00e9e directement \u00e0 l\u2019utilisateur, mais passe par l\u2019interm\u00e9diaire des r\u00f4les. Ces derniers sont alors attribu\u00e9s aux comptes principaux et regroupent un ensemble d'autorisations sur une ressource. Mais attention, il existe diff\u00e9rents types de r\u00f4les.\"\r\n    }\r\n  }]\r\n}\r\n<\/script>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Lors du d\u00e9veloppement d\u2019un logiciel ou d\u2019une application, des dizaines, voire des centaines d\u2019utilisateurs interviennent. Mais tous n\u2019ont pas les m\u00eames droits d\u2019acc\u00e8s. Alors pour personnaliser l\u2019accessibilit\u00e9 aux diff\u00e9rentes ressources de Google Cloud Platform, il existe les GCP Custom. Qu&rsquo;est-ce-que GCP custom role ? Les GCP custom roles correspondent aux r\u00f4les personnalis\u00e9s sur IAM (Identity [&hellip;]<\/p>\n","protected":false},"author":79,"featured_media":210118,"comment_status":"open","ping_status":"open","sticky":false,"template":"elementor_theme","format":"standard","meta":{"content-type":"","inline_featured_image":false},"categories":[2411],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.7 (Yoast SEO v21.7) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>GCP custom r\u00f4le : Comment personnaliser ses acc\u00e8s ?<\/title>\n<meta name=\"description\" content=\"Gr\u00e2ce au GCP custom role, vous pouvez personnaliser les droits d\u2019acc\u00e8s aux diff\u00e9rentes ressources disponibles sur Google Cloud Platform.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/datascientest.com\/gcp-custom-role-tout-savoir\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"GCP custom r\u00f4le : Comment personnaliser ses acc\u00e8s ?\" \/>\n<meta property=\"og:url\" content=\"https:\/\/datascientest.com\/gcp-custom-role-tout-savoir\" \/>\n<meta property=\"og:site_name\" content=\"Formation Data Science | DataScientest.com\" \/>\n<meta property=\"article:published_time\" content=\"2023-11-09T06:30:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-11-09T14:21:25+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/datascientest.com\/wp-content\/uploads\/2023\/08\/gcp-roles.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Dan Cohen\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"Dan Cohen\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/datascientest.com\/gcp-custom-role-tout-savoir\",\"url\":\"https:\/\/datascientest.com\/gcp-custom-role-tout-savoir\",\"name\":\"GCP custom r\u00f4le : Comment personnaliser ses acc\u00e8s ?\",\"isPartOf\":{\"@id\":\"https:\/\/datascientest.com\/#website\"},\"datePublished\":\"2023-11-09T06:30:00+00:00\",\"dateModified\":\"2023-11-09T14:21:25+00:00\",\"author\":{\"@id\":\"https:\/\/datascientest.com\/#\/schema\/person\/61997d589648bc1d367f632ba686e354\"},\"description\":\"Gr\u00e2ce au GCP custom role, vous pouvez personnaliser les droits d\u2019acc\u00e8s aux diff\u00e9rentes ressources disponibles sur Google Cloud Platform.\",\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/datascientest.com\/gcp-custom-role-tout-savoir\"]}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/datascientest.com\/#website\",\"url\":\"https:\/\/datascientest.com\/\",\"name\":\"Formation Data Science | DataScientest.com\",\"description\":\"Leader de la formation en Data Science\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/datascientest.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/datascientest.com\/#\/schema\/person\/61997d589648bc1d367f632ba686e354\",\"name\":\"Dan Cohen\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\/\/datascientest.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/datascientest.com\/wp-content\/uploads\/2023\/11\/dancohen.jpeg\",\"contentUrl\":\"https:\/\/datascientest.com\/wp-content\/uploads\/2023\/11\/dancohen.jpeg\",\"caption\":\"Dan Cohen\"},\"description\":\"Dan Cohen est actuellement Data Engineer chez DataScientest. Il poss\u00e8de une solide exp\u00e9rience dans le domaine de la data, ayant pr\u00e9c\u00e9demment occup\u00e9 des postes de Consultant en Data Science chez Meotec, Data Engineer chez Cetim, et Ing\u00e9nieur commercial chez Global D\u00e9co &amp; Food.\",\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/dancohen1307\/\",\"Cloud & Data Engineering\"],\"url\":\"https:\/\/datascientest.com\/author\/dancohen\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"GCP custom r\u00f4le : Comment personnaliser ses acc\u00e8s ?","description":"Gr\u00e2ce au GCP custom role, vous pouvez personnaliser les droits d\u2019acc\u00e8s aux diff\u00e9rentes ressources disponibles sur Google Cloud Platform.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/datascientest.com\/gcp-custom-role-tout-savoir","og_locale":"fr_FR","og_type":"article","og_title":"GCP custom r\u00f4le : Comment personnaliser ses acc\u00e8s ?","og_url":"https:\/\/datascientest.com\/gcp-custom-role-tout-savoir","og_site_name":"Formation Data Science | DataScientest.com","article_published_time":"2023-11-09T06:30:00+00:00","article_modified_time":"2023-11-09T14:21:25+00:00","og_image":[{"width":1200,"height":600,"url":"https:\/\/datascientest.com\/wp-content\/uploads\/2023\/08\/gcp-roles.png","type":"image\/png"}],"author":"Dan Cohen","twitter_card":"summary_large_image","twitter_misc":{"\u00c9crit par":"Dan Cohen","Dur\u00e9e de lecture estim\u00e9e":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/datascientest.com\/gcp-custom-role-tout-savoir","url":"https:\/\/datascientest.com\/gcp-custom-role-tout-savoir","name":"GCP custom r\u00f4le : Comment personnaliser ses acc\u00e8s ?","isPartOf":{"@id":"https:\/\/datascientest.com\/#website"},"datePublished":"2023-11-09T06:30:00+00:00","dateModified":"2023-11-09T14:21:25+00:00","author":{"@id":"https:\/\/datascientest.com\/#\/schema\/person\/61997d589648bc1d367f632ba686e354"},"description":"Gr\u00e2ce au GCP custom role, vous pouvez personnaliser les droits d\u2019acc\u00e8s aux diff\u00e9rentes ressources disponibles sur Google Cloud Platform.","inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/datascientest.com\/gcp-custom-role-tout-savoir"]}]},{"@type":"WebSite","@id":"https:\/\/datascientest.com\/#website","url":"https:\/\/datascientest.com\/","name":"Formation Data Science | DataScientest.com","description":"Leader de la formation en Data Science","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/datascientest.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"fr-FR"},{"@type":"Person","@id":"https:\/\/datascientest.com\/#\/schema\/person\/61997d589648bc1d367f632ba686e354","name":"Dan Cohen","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/datascientest.com\/#\/schema\/person\/image\/","url":"https:\/\/datascientest.com\/wp-content\/uploads\/2023\/11\/dancohen.jpeg","contentUrl":"https:\/\/datascientest.com\/wp-content\/uploads\/2023\/11\/dancohen.jpeg","caption":"Dan Cohen"},"description":"Dan Cohen est actuellement Data Engineer chez DataScientest. Il poss\u00e8de une solide exp\u00e9rience dans le domaine de la data, ayant pr\u00e9c\u00e9demment occup\u00e9 des postes de Consultant en Data Science chez Meotec, Data Engineer chez Cetim, et Ing\u00e9nieur commercial chez Global D\u00e9co &amp; Food.","sameAs":["https:\/\/www.linkedin.com\/in\/dancohen1307\/","Cloud & Data Engineering"],"url":"https:\/\/datascientest.com\/author\/dancohen"}]}},"_links":{"self":[{"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/posts\/210116"}],"collection":[{"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/users\/79"}],"replies":[{"embeddable":true,"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/comments?post=210116"}],"version-history":[{"count":0,"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/posts\/210116\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/media\/210118"}],"wp:attachment":[{"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/media?parent=210116"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/categories?post=210116"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/tags?post=210116"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}