API Hub roles and permissions

This page lists the IAM roles and permissions for API Hub. To search through all roles and permissions, see the role and permission index.

API Hub roles

Role	Permissions
Cloud API Hub Admin (roles/apihub.admin) Full access to all API hub resources.	apigee.projectorganizations.get apihub.* apihub.addons.get apihub.addons.list apihub.addons.manage apihub.apiHubInstances.create apihub.apiHubInstances.delete apihub.apiHubInstances.get apihub.apiHubInstances.list apihub.apiHubInstances.update apihub.apiOperations.create apihub.apiOperations.delete apihub.apiOperations.get apihub.apiOperations.list apihub.apiOperations.listAll apihub.apiOperations.update apihub.apis.create apihub.apis.createTagBinding apihub.apis.delete apihub.apis.deleteTagBinding apihub.apis.get apihub.apis.list apihub.apis.listEffectiveTags apihub.apis.listTagBindings apihub.apis.update apihub.attributes.create apihub.attributes.delete apihub.attributes.get apihub.attributes.list apihub.attributes.update apihub.curations.create apihub.curations.delete apihub.curations.get apihub.curations.list apihub.curations.update apihub.definitions.get apihub.definitions.list apihub.definitions.update apihub.dependencies.create apihub.dependencies.delete apihub.dependencies.get apihub.dependencies.list apihub.dependencies.update apihub.deployments.create apihub.deployments.createTagBinding apihub.deployments.delete apihub.deployments.deleteTagBinding apihub.deployments.get apihub.deployments.list apihub.deployments.listEffectiveTags apihub.deployments.listTagBindings apihub.deployments.update apihub.discoveredApiObservations.get apihub.discoveredApiObservations.list apihub.discoveredApiOperations.get apihub.discoveredApiOperations.list apihub.externalApis.create apihub.externalApis.delete apihub.externalApis.get apihub.externalApis.list apihub.externalApis.update apihub.hostProjectRegistrations.create apihub.hostProjectRegistrations.delete apihub.hostProjectRegistrations.get apihub.hostProjectRegistrations.list apihub.hostProjectRegistrations.register apihub.llmEnablements.deregister apihub.llmEnablements.get apihub.llmEnablements.list apihub.llmEnablements.register apihub.locations.collectApiData apihub.locations.getApiInsights apihub.locations.searchResources apihub.locations2.searchResources apihub.operations.cancel apihub.operations.delete apihub.operations.get apihub.operations.list apihub.plugininstances.applyConfig apihub.plugininstances.create apihub.plugininstances.delete apihub.plugininstances.disable apihub.plugininstances.enable apihub.plugininstances.execute apihub.plugininstances.get apihub.plugininstances.list apihub.plugininstances.managePluginInstanceSourceData apihub.plugininstances.update apihub.plugins.create apihub.plugins.delete apihub.plugins.disable apihub.plugins.enable apihub.plugins.get apihub.plugins.list apihub.runTimeProjectAttachments.attach apihub.runTimeProjectAttachments.create apihub.runTimeProjectAttachments.delete apihub.runTimeProjectAttachments.get apihub.runTimeProjectAttachments.list apihub.runTimeProjectAttachments.lookup apihub.specs.create apihub.specs.delete apihub.specs.get apihub.specs.lint apihub.specs.list apihub.specs.listAll apihub.specs.update apihub.styleGuides.get apihub.styleGuides.update apihub.versions.create apihub.versions.delete apihub.versions.get apihub.versions.list apihub.versions.listAll apihub.versions.update monitoring.dashboards.get monitoring.dashboards.list monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list resourcemanager.projects.get resourcemanager.projects.list
Cloud API Hub Editor (roles/apihub.editor) Edit access to most of Cloud API Hub resources.	apihub.addons.get apihub.addons.list apihub.apiHubInstances.get apihub.apiHubInstances.list apihub.apiOperations.* apihub.apiOperations.create apihub.apiOperations.delete apihub.apiOperations.get apihub.apiOperations.list apihub.apiOperations.listAll apihub.apiOperations.update apihub.apis.* apihub.apis.create apihub.apis.createTagBinding apihub.apis.delete apihub.apis.deleteTagBinding apihub.apis.get apihub.apis.list apihub.apis.listEffectiveTags apihub.apis.listTagBindings apihub.apis.update apihub.attributes.get apihub.attributes.list apihub.curations.get apihub.curations.list apihub.definitions.* apihub.definitions.get apihub.definitions.list apihub.definitions.update apihub.dependencies.* apihub.dependencies.create apihub.dependencies.delete apihub.dependencies.get apihub.dependencies.list apihub.dependencies.update apihub.deployments.* apihub.deployments.create apihub.deployments.createTagBinding apihub.deployments.delete apihub.deployments.deleteTagBinding apihub.deployments.get apihub.deployments.list apihub.deployments.listEffectiveTags apihub.deployments.listTagBindings apihub.deployments.update apihub.discoveredApiObservations.* apihub.discoveredApiObservations.get apihub.discoveredApiObservations.list apihub.discoveredApiOperations.* apihub.discoveredApiOperations.get apihub.discoveredApiOperations.list apihub.externalApis.* apihub.externalApis.create apihub.externalApis.delete apihub.externalApis.get apihub.externalApis.list apihub.externalApis.update apihub.hostProjectRegistrations.get apihub.hostProjectRegistrations.list apihub.llmEnablements.* apihub.llmEnablements.deregister apihub.llmEnablements.get apihub.llmEnablements.list apihub.llmEnablements.register apihub.locations.collectApiData apihub.locations.searchResources apihub.operations.get apihub.operations.list apihub.plugininstances.get apihub.plugininstances.list apihub.plugins.get apihub.plugins.list apihub.runTimeProjectAttachments.get apihub.runTimeProjectAttachments.list apihub.specs.* apihub.specs.create apihub.specs.delete apihub.specs.get apihub.specs.lint apihub.specs.list apihub.specs.listAll apihub.specs.update apihub.styleGuides.get apihub.versions.* apihub.versions.create apihub.versions.delete apihub.versions.get apihub.versions.list apihub.versions.listAll apihub.versions.update resourcemanager.projects.get resourcemanager.projects.list
Cloud API hub Viewer (roles/apihub.viewer) View access to all Cloud API hub resources.	apihub.addons.get apihub.addons.list apihub.apiHubInstances.get apihub.apiHubInstances.list apihub.apiOperations.get apihub.apiOperations.list apihub.apiOperations.listAll apihub.apis.get apihub.apis.list apihub.apis.listEffectiveTags apihub.apis.listTagBindings apihub.attributes.get apihub.attributes.list apihub.curations.get apihub.curations.list apihub.definitions.get apihub.definitions.list apihub.dependencies.get apihub.dependencies.list apihub.deployments.get apihub.deployments.list apihub.deployments.listEffectiveTags apihub.deployments.listTagBindings apihub.discoveredApiObservations.* apihub.discoveredApiObservations.get apihub.discoveredApiObservations.list apihub.discoveredApiOperations.* apihub.discoveredApiOperations.get apihub.discoveredApiOperations.list apihub.externalApis.get apihub.externalApis.list apihub.hostProjectRegistrations.get apihub.hostProjectRegistrations.list apihub.llmEnablements.get apihub.llmEnablements.list apihub.locations.searchResources apihub.operations.get apihub.operations.list apihub.plugininstances.get apihub.plugininstances.list apihub.plugins.get apihub.plugins.list apihub.runTimeProjectAttachments.get apihub.runTimeProjectAttachments.list apihub.specs.get apihub.specs.list apihub.specs.listAll apihub.styleGuides.get apihub.versions.get apihub.versions.list apihub.versions.listAll resourcemanager.projects.get resourcemanager.projects.list
Cloud API hub Addons Admin (roles/apihub.addonsAdmin) Full access to all Cloud API hub addon resources.	apihub.addons.* apihub.addons.get apihub.addons.list apihub.addons.manage resourcemanager.projects.get resourcemanager.projects.list
Cloud API hub Insights Viewer (roles/apihub.apiInsightsViewer) View API hub insights dashboards.	apigee.projectorganizations.get apihub.apiHubInstances.get apihub.apiHubInstances.list apihub.apis.get apihub.apis.list apihub.deployments.get apihub.deployments.list apihub.locations.getApiInsights apihub.plugininstances.get apihub.plugininstances.list monitoring.dashboards.get monitoring.dashboards.list monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list
Cloud API hub Attributes Admin (roles/apihub.attributeAdmin) Full access to all Cloud API hub attribute's resources.	apihub.attributes.* apihub.attributes.create apihub.attributes.delete apihub.attributes.get apihub.attributes.list apihub.attributes.update resourcemanager.projects.get resourcemanager.projects.list
Cloud API hub Plugins Admin (roles/apihub.pluginAdmin) Full access to all Cloud API hub plugin's resources.	apihub.curations.* apihub.curations.create apihub.curations.delete apihub.curations.get apihub.curations.list apihub.curations.update apihub.locations.collectApiData apihub.operations.* apihub.operations.cancel apihub.operations.delete apihub.operations.get apihub.operations.list apihub.plugininstances.* apihub.plugininstances.applyConfig apihub.plugininstances.create apihub.plugininstances.delete apihub.plugininstances.disable apihub.plugininstances.enable apihub.plugininstances.execute apihub.plugininstances.get apihub.plugininstances.list apihub.plugininstances.managePluginInstanceSourceData apihub.plugininstances.update apihub.plugins.* apihub.plugins.create apihub.plugins.delete apihub.plugins.disable apihub.plugins.enable apihub.plugins.get apihub.plugins.list apihub.specs.lint apihub.styleGuides.* apihub.styleGuides.get apihub.styleGuides.update resourcemanager.projects.get resourcemanager.projects.list
Cloud API hub Provisioning Admin (roles/apihub.provisioningAdmin) Full access to Cloud API hub provisioning related resources.	apihub.apiHubInstances.* apihub.apiHubInstances.create apihub.apiHubInstances.delete apihub.apiHubInstances.get apihub.apiHubInstances.list apihub.apiHubInstances.update apihub.hostProjectRegistrations.* apihub.hostProjectRegistrations.create apihub.hostProjectRegistrations.delete apihub.hostProjectRegistrations.get apihub.hostProjectRegistrations.list apihub.hostProjectRegistrations.register apihub.operations.* apihub.operations.cancel apihub.operations.delete apihub.operations.get apihub.operations.list apihub.runTimeProjectAttachments.* apihub.runTimeProjectAttachments.attach apihub.runTimeProjectAttachments.create apihub.runTimeProjectAttachments.delete apihub.runTimeProjectAttachments.get apihub.runTimeProjectAttachments.list apihub.runTimeProjectAttachments.lookup resourcemanager.projects.get resourcemanager.projects.list
Cloud API hub Runtime Project Attachment Editor (roles/apihub.runTimeProjectAttachmentsEditor) Access to add/delete project as a runtime project attachment to API hub host project.	apihub.runTimeProjectAttachments.attach

Service agent roles

Service agent roles should only be granted to service agents.

Role

Permissions

API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent) Gives API-Hub Service Account access to runtime project resources. Warning: Do not grant service agent roles to any principals except service agents.

apigee.deployments.list apigee.envgroupattachments.list apigee.envgroups.list apigee.environments.get apigee.organizations.create apigee.organizations.delete apigee.organizations.get apigee.organizations.update apigee.proxies.get apigee.proxyrevisions.get apihub.addons.get apihub.addons.list apihub.apiOperations.delete apihub.apiOperations.list apihub.apis.create apihub.apis.delete apihub.apis.list apihub.apis.update apihub.attributes.create apihub.attributes.list apihub.attributes.update apihub.curations.list apihub.definitions.list apihub.dependencies.delete apihub.dependencies.list apihub.deployments.create apihub.deployments.delete apihub.deployments.list apihub.deployments.update apihub.externalApis.list apihub.hostProjectRegistrations.list apihub.operations.get apihub.operations.list apihub.plugininstances.create apihub.plugininstances.delete apihub.plugininstances.list apihub.plugininstances.update apihub.plugins.create apihub.plugins.delete apihub.plugins.list apihub.runTimeProjectAttachments.list apihub.specs.create apihub.specs.delete apihub.specs.list apihub.specs.update apihub.versions.create apihub.versions.delete apihub.versions.list apihub.versions.update

API Hub permissions

Permission	Included in roles
apihub.addons.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Apigee API Reader (roles/apigee.apiReaderV2) Cloud API hub Addons Admin (roles/apihub.addonsAdmin) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent) API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.addons.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Apigee API Reader (roles/apigee.apiReaderV2) Cloud API hub Addons Admin (roles/apihub.addonsAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent) API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.addons.manage	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Addons Admin (roles/apihub.addonsAdmin)
apihub.apiHubInstances.create	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Provisioning Admin (roles/apihub.provisioningAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.apiHubInstances.delete	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Provisioning Admin (roles/apihub.provisioningAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.apiHubInstances.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Apigee API Reader (roles/apigee.apiReaderV2) Cloud API hub Insights Viewer (roles/apihub.apiInsightsViewer) Cloud API hub Provisioning Admin (roles/apihub.provisioningAdmin) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.apiHubInstances.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Apigee API Reader (roles/apigee.apiReaderV2) Cloud API hub Insights Viewer (roles/apihub.apiInsightsViewer) Cloud API hub Provisioning Admin (roles/apihub.provisioningAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.apiHubInstances.update	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Provisioning Admin (roles/apihub.provisioningAdmin)
apihub.apiOperations.create	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor)
apihub.apiOperations.delete	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.apiOperations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Apigee API Reader (roles/apigee.apiReaderV2) Support User (roles/iam.supportUser)
apihub.apiOperations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Apigee API Reader (roles/apigee.apiReaderV2) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.apiOperations.listAll	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Apigee API Reader (roles/apigee.apiReaderV2) Support User (roles/iam.supportUser)
apihub.apiOperations.update	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor)
apihub.apis.create	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.apis.createTagBinding	Owner (roles/owner) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Tag User (roles/resourcemanager.tagUser) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver)
apihub.apis.delete	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.apis.deleteTagBinding	Owner (roles/owner) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Tag User (roles/resourcemanager.tagUser) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver)
apihub.apis.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Apigee API Reader (roles/apigee.apiReaderV2) Apigee Security Admin (roles/apigee.securityAdmin) Apigee Security Viewer (roles/apigee.securityViewer) Cloud API hub Insights Viewer (roles/apihub.apiInsightsViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.apis.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Apigee API Reader (roles/apigee.apiReaderV2) Cloud API hub Insights Viewer (roles/apihub.apiInsightsViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent) API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.apis.listEffectiveTags	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer) Apigee API Reader (roles/apigee.apiReaderV2) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
apihub.apis.listTagBindings	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer) Apigee API Reader (roles/apigee.apiReaderV2) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
apihub.apis.update	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.attributes.create	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Attributes Admin (roles/apihub.attributeAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.attributes.delete	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Attributes Admin (roles/apihub.attributeAdmin)
apihub.attributes.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Apigee API Reader (roles/apigee.apiReaderV2) Cloud API hub Attributes Admin (roles/apihub.attributeAdmin) Support User (roles/iam.supportUser)
apihub.attributes.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Apigee API Reader (roles/apigee.apiReaderV2) Cloud API hub Attributes Admin (roles/apihub.attributeAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.attributes.update	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Attributes Admin (roles/apihub.attributeAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.curations.create	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin)
apihub.curations.delete	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin)
apihub.curations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Apigee API Reader (roles/apigee.apiReaderV2) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin) Support User (roles/iam.supportUser)
apihub.curations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Apigee API Reader (roles/apigee.apiReaderV2) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.curations.update	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin)
apihub.definitions.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Apigee API Reader (roles/apigee.apiReaderV2) Support User (roles/iam.supportUser)
apihub.definitions.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Apigee API Reader (roles/apigee.apiReaderV2) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.definitions.update	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor)
apihub.dependencies.create	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor)
apihub.dependencies.delete	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.dependencies.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Apigee API Reader (roles/apigee.apiReaderV2) Support User (roles/iam.supportUser)
apihub.dependencies.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Apigee API Reader (roles/apigee.apiReaderV2) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.dependencies.update	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor)
apihub.deployments.create	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.deployments.createTagBinding	Owner (roles/owner) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Tag User (roles/resourcemanager.tagUser) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver)
apihub.deployments.delete	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.deployments.deleteTagBinding	Owner (roles/owner) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Tag User (roles/resourcemanager.tagUser) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver)
apihub.deployments.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Apigee API Reader (roles/apigee.apiReaderV2) Cloud API hub Insights Viewer (roles/apihub.apiInsightsViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.deployments.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Apigee API Reader (roles/apigee.apiReaderV2) Apigee Security Admin (roles/apigee.securityAdmin) Apigee Security Viewer (roles/apigee.securityViewer) Cloud API hub Insights Viewer (roles/apihub.apiInsightsViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent) API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.deployments.listEffectiveTags	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer) Apigee API Reader (roles/apigee.apiReaderV2) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
apihub.deployments.listTagBindings	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer) Apigee API Reader (roles/apigee.apiReaderV2) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
apihub.deployments.update	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.discoveredApiObservations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Apigee API Reader (roles/apigee.apiReaderV2) Support User (roles/iam.supportUser)
apihub.discoveredApiObservations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Apigee API Reader (roles/apigee.apiReaderV2) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
apihub.discoveredApiOperations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Apigee API Reader (roles/apigee.apiReaderV2) Support User (roles/iam.supportUser)
apihub.discoveredApiOperations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Apigee API Reader (roles/apigee.apiReaderV2) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
apihub.externalApis.create	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor)
apihub.externalApis.delete	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor)
apihub.externalApis.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Apigee API Reader (roles/apigee.apiReaderV2) Support User (roles/iam.supportUser)
apihub.externalApis.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Apigee API Reader (roles/apigee.apiReaderV2) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.externalApis.update	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor)
apihub.hostProjectRegistrations.create	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Provisioning Admin (roles/apihub.provisioningAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.hostProjectRegistrations.delete	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Provisioning Admin (roles/apihub.provisioningAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.hostProjectRegistrations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Apigee API Reader (roles/apigee.apiReaderV2) Cloud API hub Provisioning Admin (roles/apihub.provisioningAdmin) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.hostProjectRegistrations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Apigee API Reader (roles/apigee.apiReaderV2) Cloud API hub Provisioning Admin (roles/apihub.provisioningAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent) API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.hostProjectRegistrations.register	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Provisioning Admin (roles/apihub.provisioningAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.llmEnablements.deregister	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor)
apihub.llmEnablements.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Apigee API Reader (roles/apigee.apiReaderV2) Support User (roles/iam.supportUser)
apihub.llmEnablements.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Apigee API Reader (roles/apigee.apiReaderV2) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
apihub.llmEnablements.register	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor)
apihub.locations.collectApiData	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin)
apihub.locations.getApiInsights	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Insights Viewer (roles/apihub.apiInsightsViewer) Support User (roles/iam.supportUser)
apihub.locations.searchResources	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Apigee API Reader (roles/apigee.apiReaderV2) Support User (roles/iam.supportUser)
apihub.locations2.searchResources	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Support User (roles/iam.supportUser)
apihub.operations.cancel	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin) Cloud API hub Provisioning Admin (roles/apihub.provisioningAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.operations.delete	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin) Cloud API hub Provisioning Admin (roles/apihub.provisioningAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Apigee API Reader (roles/apigee.apiReaderV2) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin) Cloud API hub Provisioning Admin (roles/apihub.provisioningAdmin) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent) API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Apigee API Reader (roles/apigee.apiReaderV2) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin) Cloud API hub Provisioning Admin (roles/apihub.provisioningAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent) API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.plugininstances.applyConfig	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.plugininstances.create	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent) API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.plugininstances.delete	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent) API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.plugininstances.disable	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.plugininstances.enable	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.plugininstances.execute	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.plugininstances.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Apigee API Reader (roles/apigee.apiReaderV2) Cloud API hub Insights Viewer (roles/apihub.apiInsightsViewer) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.plugininstances.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Apigee API Reader (roles/apigee.apiReaderV2) Cloud API hub Insights Viewer (roles/apihub.apiInsightsViewer) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent) API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.plugininstances.managePluginInstanceSourceData	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin)
apihub.plugininstances.update	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent) API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.plugins.create	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent) API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.plugins.delete	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent) API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.plugins.disable	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.plugins.enable	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.plugins.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Apigee API Reader (roles/apigee.apiReaderV2) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.plugins.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Apigee API Reader (roles/apigee.apiReaderV2) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent) API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.runTimeProjectAttachments.attach	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Provisioning Admin (roles/apihub.provisioningAdmin) Cloud API hub Runtime Project Attachment Editor (roles/apihub.runTimeProjectAttachmentsEditor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.runTimeProjectAttachments.create	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Provisioning Admin (roles/apihub.provisioningAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.runTimeProjectAttachments.delete	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Provisioning Admin (roles/apihub.provisioningAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.runTimeProjectAttachments.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Apigee API Reader (roles/apigee.apiReaderV2) Cloud API hub Provisioning Admin (roles/apihub.provisioningAdmin) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.runTimeProjectAttachments.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) ApiGateway Admin (roles/apigateway.admin) Apigateway Editor (roles/apigateway.editor) ApiGateway Viewer (roles/apigateway.viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Apigee API Reader (roles/apigee.apiReaderV2) Cloud API hub Provisioning Admin (roles/apihub.provisioningAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent) API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.runTimeProjectAttachments.lookup	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Provisioning Admin (roles/apihub.provisioningAdmin) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.specs.create	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.specs.delete	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.specs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Apigee API Reader (roles/apigee.apiReaderV2) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.specs.lint	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin)
apihub.specs.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Apigee API Reader (roles/apigee.apiReaderV2) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent) API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.specs.listAll	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Apigee API Reader (roles/apigee.apiReaderV2) Support User (roles/iam.supportUser)
apihub.specs.update	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.styleGuides.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Apigee API Reader (roles/apigee.apiReaderV2) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin) Support User (roles/iam.supportUser)
apihub.styleGuides.update	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API hub Plugins Admin (roles/apihub.pluginAdmin)
apihub.versions.create	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.versions.delete	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.versions.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Apigee API Reader (roles/apigee.apiReaderV2) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent)
apihub.versions.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Apigee API Reader (roles/apigee.apiReaderV2) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)
apihub.versions.listAll	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Apigee API Admin (roles/apigee.apiAdminV2) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Cloud API hub Viewer (roles/apihub.viewer) Apigee API Reader (roles/apigee.apiReaderV2) Support User (roles/iam.supportUser)
apihub.versions.update	Owner (roles/owner) Editor (roles/editor) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Cloud API Hub Editor (roles/apihub.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (roles/apihub.runtimeProjectServiceAgent)