Assured Open Source Software roles and permissions

This page lists the IAM roles and permissions for Assured Open Source Software. To search through all roles and permissions, see the role and permission index.

Assured Open Source Software roles

Role	Permissions
Assured OSS Admin (roles/assuredoss.admin) Access to use Assured OSS and manage configuration.	artifactregistry.attachments.get artifactregistry.attachments.list artifactregistry.dockerimages.* artifactregistry.dockerimages.get artifactregistry.dockerimages.list artifactregistry.files.download artifactregistry.files.get artifactregistry.files.list artifactregistry.locations.* artifactregistry.locations.get artifactregistry.locations.list artifactregistry.mavenartifacts.* artifactregistry.mavenartifacts.get artifactregistry.mavenartifacts.list artifactregistry.npmpackages.* artifactregistry.npmpackages.get artifactregistry.npmpackages.list artifactregistry.packages.get artifactregistry.packages.list artifactregistry.projectsettings.get artifactregistry.pythonpackages.* artifactregistry.pythonpackages.get artifactregistry.pythonpackages.list artifactregistry.repositories.create artifactregistry.repositories.downloadArtifacts artifactregistry.repositories.exportArtifacts artifactregistry.repositories.get artifactregistry.repositories.list artifactregistry.repositories.listEffectiveTags artifactregistry.repositories.listTagBindings artifactregistry.repositories.readViaVirtualRepository artifactregistry.rules.get artifactregistry.rules.list artifactregistry.tags.get artifactregistry.tags.list artifactregistry.versions.get artifactregistry.versions.list assuredoss.* assuredoss.config.get assuredoss.customers.create assuredoss.locations.get assuredoss.locations.list assuredoss.metadata.get assuredoss.metadata.list assuredoss.operations.cancel assuredoss.operations.delete assuredoss.operations.get assuredoss.operations.list iam.serviceAccountKeys.create iam.serviceAccounts.create iam.serviceAccounts.get pubsub.messageTransforms.validate pubsub.schemas.get pubsub.schemas.list pubsub.schemas.listRevisions pubsub.schemas.validate pubsub.snapshots.get pubsub.snapshots.list pubsub.snapshots.listEffectiveTags pubsub.snapshots.listTagBindings pubsub.subscriptions.create pubsub.subscriptions.get pubsub.subscriptions.list pubsub.subscriptions.listEffectiveTags pubsub.subscriptions.listTagBindings pubsub.subscriptions.update pubsub.topics.get pubsub.topics.list pubsub.topics.listEffectiveTags pubsub.topics.listTagBindings resourcemanager.organizations.get resourcemanager.projects.get resourcemanager.projects.list serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.quotas.get serviceusage.services.enable serviceusage.services.get serviceusage.services.list serviceusage.values.test
Assuredoss Editor (roles/assuredoss.editor) Editor role for assuredoss	assuredoss.config.get assuredoss.locations.* assuredoss.locations.get assuredoss.locations.list assuredoss.metadata.* assuredoss.metadata.get assuredoss.metadata.list assuredoss.operations.get assuredoss.operations.list resourcemanager.projects.get resourcemanager.projects.list
Assuredoss Viewer (roles/assuredoss.viewer) Viewer role for assuredoss	assuredoss.config.get assuredoss.locations.* assuredoss.locations.get assuredoss.locations.list assuredoss.metadata.* assuredoss.metadata.get assuredoss.metadata.list assuredoss.operations.get assuredoss.operations.list resourcemanager.projects.get resourcemanager.projects.list
Assured OSS Project Admin ^Beta (roles/assuredoss.projectAdmin) Access to use Assured OSS and manage configuration.	artifactregistry.attachments.get artifactregistry.attachments.list artifactregistry.dockerimages.* artifactregistry.dockerimages.get artifactregistry.dockerimages.list artifactregistry.files.download artifactregistry.files.get artifactregistry.files.list artifactregistry.locations.* artifactregistry.locations.get artifactregistry.locations.list artifactregistry.mavenartifacts.* artifactregistry.mavenartifacts.get artifactregistry.mavenartifacts.list artifactregistry.npmpackages.* artifactregistry.npmpackages.get artifactregistry.npmpackages.list artifactregistry.packages.get artifactregistry.packages.list artifactregistry.projectsettings.get artifactregistry.pythonpackages.* artifactregistry.pythonpackages.get artifactregistry.pythonpackages.list artifactregistry.repositories.create artifactregistry.repositories.downloadArtifacts artifactregistry.repositories.exportArtifacts artifactregistry.repositories.get artifactregistry.repositories.list artifactregistry.repositories.listEffectiveTags artifactregistry.repositories.listTagBindings artifactregistry.repositories.readViaVirtualRepository artifactregistry.rules.get artifactregistry.rules.list artifactregistry.tags.get artifactregistry.tags.list artifactregistry.versions.get artifactregistry.versions.list assuredoss.* assuredoss.config.get assuredoss.customers.create assuredoss.locations.get assuredoss.locations.list assuredoss.metadata.get assuredoss.metadata.list assuredoss.operations.cancel assuredoss.operations.delete assuredoss.operations.get assuredoss.operations.list iam.serviceAccounts.create iam.serviceAccounts.get pubsub.messageTransforms.validate pubsub.schemas.get pubsub.schemas.list pubsub.schemas.listRevisions pubsub.schemas.validate pubsub.snapshots.get pubsub.snapshots.list pubsub.snapshots.listEffectiveTags pubsub.snapshots.listTagBindings pubsub.subscriptions.get pubsub.subscriptions.list pubsub.subscriptions.listEffectiveTags pubsub.subscriptions.listTagBindings pubsub.topics.get pubsub.topics.list pubsub.topics.listEffectiveTags pubsub.topics.listTagBindings resourcemanager.organizations.get resourcemanager.projects.get resourcemanager.projects.list serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.quotas.get serviceusage.services.enable serviceusage.services.get serviceusage.services.list serviceusage.values.test
Assured OSS Reader (roles/assuredoss.reader) Access to use Assured OSS and view Assured OSS configuration.	artifactregistry.attachments.get artifactregistry.attachments.list artifactregistry.dockerimages.* artifactregistry.dockerimages.get artifactregistry.dockerimages.list artifactregistry.files.download artifactregistry.files.get artifactregistry.files.list artifactregistry.locations.* artifactregistry.locations.get artifactregistry.locations.list artifactregistry.mavenartifacts.* artifactregistry.mavenartifacts.get artifactregistry.mavenartifacts.list artifactregistry.npmpackages.* artifactregistry.npmpackages.get artifactregistry.npmpackages.list artifactregistry.packages.get artifactregistry.packages.list artifactregistry.projectsettings.get artifactregistry.pythonpackages.* artifactregistry.pythonpackages.get artifactregistry.pythonpackages.list artifactregistry.repositories.downloadArtifacts artifactregistry.repositories.exportArtifacts artifactregistry.repositories.get artifactregistry.repositories.list artifactregistry.repositories.listEffectiveTags artifactregistry.repositories.listTagBindings artifactregistry.repositories.readViaVirtualRepository artifactregistry.rules.get artifactregistry.rules.list artifactregistry.tags.get artifactregistry.tags.list artifactregistry.versions.get artifactregistry.versions.list assuredoss.config.get assuredoss.locations.* assuredoss.locations.get assuredoss.locations.list assuredoss.metadata.* assuredoss.metadata.get assuredoss.metadata.list assuredoss.operations.get assuredoss.operations.list pubsub.messageTransforms.validate pubsub.schemas.get pubsub.schemas.list pubsub.schemas.listRevisions pubsub.schemas.validate pubsub.snapshots.get pubsub.snapshots.list pubsub.snapshots.listEffectiveTags pubsub.snapshots.listTagBindings pubsub.subscriptions.get pubsub.subscriptions.list pubsub.subscriptions.listEffectiveTags pubsub.subscriptions.listTagBindings pubsub.topics.get pubsub.topics.list pubsub.topics.listEffectiveTags pubsub.topics.listTagBindings resourcemanager.organizations.get resourcemanager.projects.get resourcemanager.projects.list serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.quotas.get serviceusage.services.get serviceusage.services.list serviceusage.values.test
Assured OSS User (roles/assuredoss.user) Access to use Assured OSS.	artifactregistry.attachments.get artifactregistry.attachments.list artifactregistry.dockerimages.* artifactregistry.dockerimages.get artifactregistry.dockerimages.list artifactregistry.files.download artifactregistry.files.get artifactregistry.files.list artifactregistry.locations.* artifactregistry.locations.get artifactregistry.locations.list artifactregistry.mavenartifacts.* artifactregistry.mavenartifacts.get artifactregistry.mavenartifacts.list artifactregistry.npmpackages.* artifactregistry.npmpackages.get artifactregistry.npmpackages.list artifactregistry.packages.get artifactregistry.packages.list artifactregistry.projectsettings.get artifactregistry.pythonpackages.* artifactregistry.pythonpackages.get artifactregistry.pythonpackages.list artifactregistry.repositories.downloadArtifacts artifactregistry.repositories.exportArtifacts artifactregistry.repositories.get artifactregistry.repositories.list artifactregistry.repositories.listEffectiveTags artifactregistry.repositories.listTagBindings artifactregistry.repositories.readViaVirtualRepository artifactregistry.rules.get artifactregistry.rules.list artifactregistry.tags.get artifactregistry.tags.list artifactregistry.versions.get artifactregistry.versions.list assuredoss.locations.* assuredoss.locations.get assuredoss.locations.list assuredoss.metadata.* assuredoss.metadata.get assuredoss.metadata.list assuredoss.operations.get assuredoss.operations.list resourcemanager.organizations.get resourcemanager.projects.get resourcemanager.projects.list

Assured Open Source Software permissions

Permission	Included in roles
assuredoss.config.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Assured OSS Admin (roles/assuredoss.admin) Assuredoss Editor (roles/assuredoss.editor) Assuredoss Viewer (roles/assuredoss.viewer) Security Center Admin (roles/securitycenter.admin) Assured OSS Project Admin (roles/assuredoss.projectAdmin) Assured OSS Reader (roles/assuredoss.reader) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer)
assuredoss.customers.create	Owner (roles/owner) Assured OSS Admin (roles/assuredoss.admin) Security Center Admin (roles/securitycenter.admin) Assured OSS Project Admin (roles/assuredoss.projectAdmin)
assuredoss.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Assured OSS Admin (roles/assuredoss.admin) Assuredoss Editor (roles/assuredoss.editor) Assuredoss Viewer (roles/assuredoss.viewer) Security Center Admin (roles/securitycenter.admin) Assured OSS Project Admin (roles/assuredoss.projectAdmin) Assured OSS Reader (roles/assuredoss.reader) Assured OSS User (roles/assuredoss.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer)
assuredoss.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Assured OSS Admin (roles/assuredoss.admin) Assuredoss Editor (roles/assuredoss.editor) Assuredoss Viewer (roles/assuredoss.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Security Center Admin (roles/securitycenter.admin) Assured OSS Project Admin (roles/assuredoss.projectAdmin) Assured OSS Reader (roles/assuredoss.reader) Assured OSS User (roles/assuredoss.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer)
assuredoss.metadata.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Assured OSS Admin (roles/assuredoss.admin) Assuredoss Editor (roles/assuredoss.editor) Assuredoss Viewer (roles/assuredoss.viewer) Security Center Admin (roles/securitycenter.admin) Assured OSS Project Admin (roles/assuredoss.projectAdmin) Assured OSS Reader (roles/assuredoss.reader) Assured OSS User (roles/assuredoss.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer)
assuredoss.metadata.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Assured OSS Admin (roles/assuredoss.admin) Assuredoss Editor (roles/assuredoss.editor) Assuredoss Viewer (roles/assuredoss.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Security Center Admin (roles/securitycenter.admin) Assured OSS Project Admin (roles/assuredoss.projectAdmin) Assured OSS Reader (roles/assuredoss.reader) Assured OSS User (roles/assuredoss.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer)
assuredoss.operations.cancel	Owner (roles/owner) Assured OSS Admin (roles/assuredoss.admin) Security Center Admin (roles/securitycenter.admin) Assured OSS Project Admin (roles/assuredoss.projectAdmin)
assuredoss.operations.delete	Owner (roles/owner) Assured OSS Admin (roles/assuredoss.admin) Security Center Admin (roles/securitycenter.admin) Assured OSS Project Admin (roles/assuredoss.projectAdmin)
assuredoss.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Assured OSS Admin (roles/assuredoss.admin) Assuredoss Editor (roles/assuredoss.editor) Assuredoss Viewer (roles/assuredoss.viewer) Security Center Admin (roles/securitycenter.admin) Assured OSS Project Admin (roles/assuredoss.projectAdmin) Assured OSS Reader (roles/assuredoss.reader) Assured OSS User (roles/assuredoss.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer)
assuredoss.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Assured OSS Admin (roles/assuredoss.admin) Assuredoss Editor (roles/assuredoss.editor) Assuredoss Viewer (roles/assuredoss.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Security Center Admin (roles/securitycenter.admin) Assured OSS Project Admin (roles/assuredoss.projectAdmin) Assured OSS Reader (roles/assuredoss.reader) Assured OSS User (roles/assuredoss.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer)