Role

The GCPRole entity represents a Google Cloud IAM role, a collection of permissions that can be assigned to principals to control access to GCP resources.

Field	Type	Possible Operators	Description
Guid	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Unique identifier for the entity in Forestall
FSName	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Display name used in Forestall
GCPTier	NUMBER	EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL	GCP tier classification assigned by Forestall
Name	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Full resource name of the role
Title	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Human-readable title of the role
Description	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Description of the role and its purpose
Stage	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Launch stage of the role (e.g. GA, BETA, ALPHA)
IsCustom	BOOLEAN	N/A (toggle)	Whether the role is a custom (user-defined) role
IsDeleted	BOOLEAN	N/A (toggle)	Whether the role has been deleted
IncludedPermissions	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	List of permissions included in the role
SourceType	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Source type of the role (e.g. built-in, custom)
risk	NUMBER	EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL	Risk score assigned to the entity
ExposurePoint	NUMBER	EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL	Exposure point score assigned to the entity
IsShadow	BOOLEAN	N/A (toggle)	Whether the entity is marked as a Shadow Admin