Agent Registry roles and permissions

This page lists the IAM roles and permissions for Agent Registry. To search through all roles and permissions, see the role and permission index.

Agent Registry roles

Role Permissions

Role	Permissions
Agent Registry API Admin ^Beta (`roles/agentregistry.admin`) Full access to Agent Registry API resources.	`agentregistry.*` `agentregistry.agents.get` `agentregistry.agents.list` `agentregistry.endpoints.get` `agentregistry.endpoints.list` `agentregistry.locations.get` `agentregistry.locations.list` `agentregistry.mcpServers.get` `agentregistry.mcpServers.list` `agentregistry.operations.cancel` `agentregistry.operations.delete` `agentregistry.operations.get` `agentregistry.operations.list` `agentregistry.services.create` `agentregistry.services.delete` `agentregistry.services.get` `agentregistry.services.list` `agentregistry.services.update`
Agent Registry API Editor ^Beta (`roles/agentregistry.editor`) Edit access to Agent Registry API resources.	`agentregistry.*` `agentregistry.agents.get` `agentregistry.agents.list` `agentregistry.endpoints.get` `agentregistry.endpoints.list` `agentregistry.locations.get` `agentregistry.locations.list` `agentregistry.mcpServers.get` `agentregistry.mcpServers.list` `agentregistry.operations.cancel` `agentregistry.operations.delete` `agentregistry.operations.get` `agentregistry.operations.list` `agentregistry.services.create` `agentregistry.services.delete` `agentregistry.services.get` `agentregistry.services.list` `agentregistry.services.update`
Agent Registry API Viewer ^Beta (`roles/agentregistry.viewer`) Readonly access to Agent Registry API resources.	`agentregistry.agents.` `agentregistry.agents.get` `agentregistry.agents.list` `agentregistry.endpoints.` `agentregistry.endpoints.get` `agentregistry.endpoints.list` `agentregistry.locations.` `agentregistry.locations.get` `agentregistry.locations.list` `agentregistry.mcpServers.` `agentregistry.mcpServers.get` `agentregistry.mcpServers.list` `agentregistry.operations.get` `agentregistry.operations.list` `agentregistry.services.get` `agentregistry.services.list`

Agent Registry API Admin ^Beta

(roles/agentregistry.admin)

Full access to Agent Registry API resources.

agentregistry.*

agentregistry.agents.get
agentregistry.agents.list
agentregistry.endpoints.get
agentregistry.endpoints.list
agentregistry.locations.get
agentregistry.locations.list
agentregistry.mcpServers.get
agentregistry.mcpServers.list
agentregistry.operations.cancel
agentregistry.operations.delete
agentregistry.operations.get
agentregistry.operations.list
agentregistry.services.create
agentregistry.services.delete
agentregistry.services.get
agentregistry.services.list
agentregistry.services.update

Agent Registry API Editor ^Beta

(roles/agentregistry.editor)

Edit access to Agent Registry API resources.

agentregistry.*

agentregistry.agents.get
agentregistry.agents.list
agentregistry.endpoints.get
agentregistry.endpoints.list
agentregistry.locations.get
agentregistry.locations.list
agentregistry.mcpServers.get
agentregistry.mcpServers.list
agentregistry.operations.cancel
agentregistry.operations.delete
agentregistry.operations.get
agentregistry.operations.list
agentregistry.services.create
agentregistry.services.delete
agentregistry.services.get
agentregistry.services.list
agentregistry.services.update

Agent Registry API Viewer ^Beta

(roles/agentregistry.viewer)

Readonly access to Agent Registry API resources.

agentregistry.agents.*

agentregistry.agents.get
agentregistry.agents.list

agentregistry.endpoints.*

agentregistry.endpoints.get
agentregistry.endpoints.list

agentregistry.locations.*

agentregistry.locations.get
agentregistry.locations.list

agentregistry.mcpServers.*

agentregistry.mcpServers.get
agentregistry.mcpServers.list

agentregistry.operations.get

agentregistry.operations.list

agentregistry.services.get

agentregistry.services.list

Agent Registry permissions

Permission	Included in roles
`agentregistry.agents.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Agent Registry API Admin (`roles/agentregistry.admin`) Agent Registry API Editor (`roles/agentregistry.editor`) Agent Registry API Viewer (`roles/agentregistry.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`agentregistry.agents.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Agent Registry API Admin (`roles/agentregistry.admin`) Agent Registry API Editor (`roles/agentregistry.editor`) Agent Registry API Viewer (`roles/agentregistry.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`agentregistry.endpoints.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Agent Registry API Admin (`roles/agentregistry.admin`) Agent Registry API Editor (`roles/agentregistry.editor`) Agent Registry API Viewer (`roles/agentregistry.viewer`) Support User (`roles/iam.supportUser`)
`agentregistry.endpoints.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Agent Registry API Admin (`roles/agentregistry.admin`) Agent Registry API Editor (`roles/agentregistry.editor`) Agent Registry API Viewer (`roles/agentregistry.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`agentregistry.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Agent Registry API Admin (`roles/agentregistry.admin`) Agent Registry API Editor (`roles/agentregistry.editor`) Agent Registry API Viewer (`roles/agentregistry.viewer`) Support User (`roles/iam.supportUser`)
`agentregistry.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Agent Registry API Admin (`roles/agentregistry.admin`) Agent Registry API Editor (`roles/agentregistry.editor`) Agent Registry API Viewer (`roles/agentregistry.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`agentregistry.mcpServers.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Agent Registry API Admin (`roles/agentregistry.admin`) Agent Registry API Editor (`roles/agentregistry.editor`) Agent Registry API Viewer (`roles/agentregistry.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`agentregistry.mcpServers.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Agent Registry API Admin (`roles/agentregistry.admin`) Agent Registry API Editor (`roles/agentregistry.editor`) Agent Registry API Viewer (`roles/agentregistry.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`agentregistry.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Agent Registry API Admin (`roles/agentregistry.admin`) Agent Registry API Editor (`roles/agentregistry.editor`)
`agentregistry.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Agent Registry API Admin (`roles/agentregistry.admin`) Agent Registry API Editor (`roles/agentregistry.editor`)
`agentregistry.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Agent Registry API Admin (`roles/agentregistry.admin`) Agent Registry API Editor (`roles/agentregistry.editor`) Agent Registry API Viewer (`roles/agentregistry.viewer`) Support User (`roles/iam.supportUser`)
`agentregistry.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Agent Registry API Admin (`roles/agentregistry.admin`) Agent Registry API Editor (`roles/agentregistry.editor`) Agent Registry API Viewer (`roles/agentregistry.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`agentregistry.services.create`	Owner (`roles/owner`) Editor (`roles/editor`) Agent Registry API Admin (`roles/agentregistry.admin`) Agent Registry API Editor (`roles/agentregistry.editor`)
`agentregistry.services.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Agent Registry API Admin (`roles/agentregistry.admin`) Agent Registry API Editor (`roles/agentregistry.editor`)
`agentregistry.services.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Agent Registry API Admin (`roles/agentregistry.admin`) Agent Registry API Editor (`roles/agentregistry.editor`) Agent Registry API Viewer (`roles/agentregistry.viewer`) Support User (`roles/iam.supportUser`)
`agentregistry.services.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Agent Registry API Admin (`roles/agentregistry.admin`) Agent Registry API Editor (`roles/agentregistry.editor`) Agent Registry API Viewer (`roles/agentregistry.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`agentregistry.services.update`	Owner (`roles/owner`) Editor (`roles/editor`) Agent Registry API Admin (`roles/agentregistry.admin`) Agent Registry API Editor (`roles/agentregistry.editor`)

Agent Registry roles and permissions