iam.roles.create – 1 risks

The IAM Privilege Catalog

services / Google Cloud / IAM Roles

IAM custom roles created for use in IAM policies.

This is a sensitive service since it exposes information about organizational IAM policies and allows for potential manipulation of access.

iam.roles.create

Risks

Account persistence (BOOST)

Scope: LOW

This privilege allows access to data that are not meant to be public, but are otherwise not sensitive.

Links

https://cloud.google.com/iam/docs/creating-custom-roles

https://cloud.google.com/iam/docs/reference/rest/v1/projects.roles/delete

Contributed by P0 Security

© 2023–present P0 Security and contributors to the IAM Privilege Catalog