gcp-vertexai-explicit-schedule-create
Principal holds aiplatform.schedules.create to create recurring schedule triggers (explicit permission normalization).
match (effective permission)
{
"action": "aiplatform.schedules.create",
"resource_type": "google.aiplatform.ScheduleService"
}
emit
| source type | Identity |
|---|---|
| target type | AnalyticsService |
| source | <principal> |
| target | <schedule trigger> |
| permissions | aiplatform.schedules.create |
| state logic | ACTIVE when aiplatform.schedules.create is confirmed. |
Raw rule rules/explicit/gcp-vertexai.yaml
id: gcp-vertexai-explicit-schedule-create
emits: CanSchedule
description: Principal holds aiplatform.schedules.create to create recurring schedule triggers (explicit
permission normalization).
match_effective_permission:
action: aiplatform.schedules.create
resource_type: google.aiplatform.ScheduleService
emit:
source_type: Identity
target_type: AnalyticsService
source: <principal>
target: <schedule trigger>
permissions:
- aiplatform.schedules.create
state_logic: ACTIVE when aiplatform.schedules.create is confirmed.
note: The base capability to create schedules. Downstream derived rules combine this with CanPassIdentity
to produce the full schedule-submit-job capability.