Cloud Autoscaling roles and permissions

This page lists the IAM roles and permissions for Cloud Autoscaling. To search through all roles and permissions, see the role and permission index.

Cloud Autoscaling roles

Role	Permissions
Autoscaling Admin ^Beta (roles/autoscaling.admin) Admin role for autoscaling	autoscaling.* autoscaling.sites.getIamPolicy autoscaling.sites.readRecommendations autoscaling.sites.setIamPolicy autoscaling.sites.writeMetrics autoscaling.sites.writeState resourcemanager.projects.get resourcemanager.projects.list
Autoscaling Editor ^Beta (roles/autoscaling.editor) Editor role for autoscaling	autoscaling.sites.getIamPolicy autoscaling.sites.readRecommendations autoscaling.sites.writeMetrics autoscaling.sites.writeState resourcemanager.projects.get resourcemanager.projects.list
Autoscaling Viewer ^Beta (roles/autoscaling.viewer) Viewer role for autoscaling	autoscaling.sites.getIamPolicy autoscaling.sites.readRecommendations resourcemanager.projects.get resourcemanager.projects.list
Autoscaling Metrics Writer ^Beta (roles/autoscaling.metricsWriter) Access to write metrics for autoscaling site	autoscaling.sites.writeMetrics
Autoscaling Recommendations Reader ^Beta (roles/autoscaling.recommendationsReader) Access to read recommendations from autoscaling site	autoscaling.sites.readRecommendations
Autoscaling Site Admin ^Beta (roles/autoscaling.sitesAdmin) Full access to all autoscaling site features	autoscaling.* autoscaling.sites.getIamPolicy autoscaling.sites.readRecommendations autoscaling.sites.setIamPolicy autoscaling.sites.writeMetrics autoscaling.sites.writeState resourcemanager.projects.get resourcemanager.projects.list
Autoscaling State Writer ^Beta (roles/autoscaling.stateWriter) Access to write state for autoscaling site	autoscaling.sites.writeState

Cloud Autoscaling permissions

Permission	Included in roles
autoscaling.sites.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Autoscaling Admin (roles/autoscaling.admin) Autoscaling Editor (roles/autoscaling.editor) Autoscaling Viewer (roles/autoscaling.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Autoscaling Site Admin (roles/autoscaling.sitesAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
autoscaling.sites.readRecommendations	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Autoscaling Admin (roles/autoscaling.admin) Autoscaling Editor (roles/autoscaling.editor) Autoscaling Viewer (roles/autoscaling.viewer) Autoscaling Recommendations Reader (roles/autoscaling.recommendationsReader) Autoscaling Site Admin (roles/autoscaling.sitesAdmin) Dataflow Worker (roles/dataflow.worker) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Kubernetes Engine Service Agent (roles/container.serviceAgent)
autoscaling.sites.setIamPolicy	Owner (roles/owner) Autoscaling Admin (roles/autoscaling.admin) Security Admin (roles/iam.securityAdmin) Autoscaling Site Admin (roles/autoscaling.sitesAdmin)
autoscaling.sites.writeMetrics	Owner (roles/owner) Editor (roles/editor) Autoscaling Admin (roles/autoscaling.admin) Autoscaling Editor (roles/autoscaling.editor) Autoscaling Metrics Writer (roles/autoscaling.metricsWriter) Autoscaling Site Admin (roles/autoscaling.sitesAdmin) Kubernetes Engine Default Node Service Account (roles/container.defaultNodeServiceAccount) Dataflow Worker (roles/dataflow.worker) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Kubernetes Engine Default Node Service Agent (roles/container.defaultNodeServiceAgent) [Deprecated] Kubernetes Engine Node Service Agent (roles/container.nodeServiceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) RMA Service Agent (roles/rapidmigrationassessment.serviceAgent)
autoscaling.sites.writeState	Owner (roles/owner) Editor (roles/editor) Autoscaling Admin (roles/autoscaling.admin) Autoscaling Editor (roles/autoscaling.editor) Autoscaling Site Admin (roles/autoscaling.sitesAdmin) Autoscaling State Writer (roles/autoscaling.stateWriter) Dataflow Worker (roles/dataflow.worker) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Kubernetes Engine Service Agent (roles/container.serviceAgent)