> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/search-and-reports/gcp-entities/role.md).

# Role

The **GCPRole** entity represents a Google Cloud IAM role, a collection of permissions that can be assigned to principals to control access to GCP resources.

| Field               | Type    | Possible Operators                                             | Description                                      |
| ------------------- | ------- | -------------------------------------------------------------- | ------------------------------------------------ |
| Guid                | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Unique identifier for the entity in Forestall    |
| FSName              | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Display name used in Forestall                   |
| GCPTier             | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | GCP tier classification assigned by Forestall    |
| Name                | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Full resource name of the role                   |
| Title               | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Human-readable title of the role                 |
| Description         | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Description of the role and its purpose          |
| Stage               | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Launch stage of the role (e.g. GA, BETA, ALPHA)  |
| IsCustom            | BOOLEAN | N/A (toggle)                                                   | Whether the role is a custom (user-defined) role |
| IsDeleted           | BOOLEAN | N/A (toggle)                                                   | Whether the role has been deleted                |
| IncludedPermissions | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | List of permissions included in the role         |
| SourceType          | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Source type of the role (e.g. built-in, custom)  |
| risk                | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Risk score assigned to the entity                |
| ExposurePoint       | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Exposure point score assigned to the entity      |
| IsShadow            | BOOLEAN | N/A (toggle)                                                   | Whether the entity is marked as a Shadow Admin   |