The GCPRole entity represents a Google Cloud IAM role, a collection of permissions that can be assigned to principals to control access to GCP resources.
| Field | Type | Possible Operators | Description |
|---|---|---|---|
| Guid | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Unique identifier for the entity in Forestall |
| FSName | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Display name used in Forestall |
| GCPTier | NUMBER | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL | GCP tier classification assigned by Forestall |
| Name | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Full resource name of the role |
| Title | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Human-readable title of the role |
| Description | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Description of the role and its purpose |
| Stage | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Launch stage of the role (e.g. GA, BETA, ALPHA) |
| IsCustom | BOOLEAN | N/A (toggle) | Whether the role is a custom (user-defined) role |
| IsDeleted | BOOLEAN | N/A (toggle) | Whether the role has been deleted |
| IncludedPermissions | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | List of permissions included in the role |
| SourceType | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Source type of the role (e.g. built-in, custom) |
| risk | NUMBER | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL | Risk score assigned to the entity |
| ExposurePoint | NUMBER | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL | Exposure point score assigned to the entity |
| IsShadow | BOOLEAN | N/A (toggle) | Whether the entity is marked as a Shadow Admin |