services / Google Cloud / Compute Engine disks

Read and edit Compute Engine disks and disk assignments.

Multiple organizational functions may often reside within Compute Engine.


When combined with the ability to read disk images, can allow access to disk data.


Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.


  • https:​/​/​cloud.​google.​com/​compute/​docs/​disks/​persistent-​disks
  • Contributed by P0 Security

    © 2023–present P0 Security and contributors to the IAM Privilege Catalog