Chrome Enterprise Premium roles and permissions

This page lists the IAM roles and permissions for Chrome Enterprise Premium. To search through all roles and permissions, see the role and permission index.

Chrome Enterprise Premium roles

Role	Permissions
Cloud BeyondCorp Admin ^Beta (roles/beyondcorp.admin) Full access to all Cloud BeyondCorp resources.	beyondcorp.* beyondcorp.appConnections.create beyondcorp.appConnections.createTagBinding beyondcorp.appConnections.delete beyondcorp.appConnections.deleteTagBinding beyondcorp.appConnections.get beyondcorp.appConnections.getIamPolicy beyondcorp.appConnections.list beyondcorp.appConnections.listEffectiveTags beyondcorp.appConnections.listTagBindings beyondcorp.appConnections.setIamPolicy beyondcorp.appConnections.update beyondcorp.appConnectors.create beyondcorp.appConnectors.createTagBinding beyondcorp.appConnectors.delete beyondcorp.appConnectors.deleteTagBinding beyondcorp.appConnectors.get beyondcorp.appConnectors.getIamPolicy beyondcorp.appConnectors.list beyondcorp.appConnectors.listEffectiveTags beyondcorp.appConnectors.listTagBindings beyondcorp.appConnectors.reportStatus beyondcorp.appConnectors.setIamPolicy beyondcorp.appConnectors.update beyondcorp.appGateways.create beyondcorp.appGateways.createTagBinding beyondcorp.appGateways.delete beyondcorp.appGateways.deleteTagBinding beyondcorp.appGateways.get beyondcorp.appGateways.getIamPolicy beyondcorp.appGateways.list beyondcorp.appGateways.listEffectiveTags beyondcorp.appGateways.listTagBindings beyondcorp.appGateways.setIamPolicy beyondcorp.appGateways.update beyondcorp.locations.get beyondcorp.locations.list beyondcorp.operations.cancel beyondcorp.operations.delete beyondcorp.operations.get beyondcorp.operations.list beyondcorp.securityGateways.create beyondcorp.securityGateways.delete beyondcorp.securityGateways.get beyondcorp.securityGateways.getIamPolicy beyondcorp.securityGateways.list beyondcorp.securityGateways.setIamPolicy beyondcorp.securityGateways.update beyondcorp.sgApplications.create beyondcorp.sgApplications.delete beyondcorp.sgApplications.get beyondcorp.sgApplications.getIamPolicy beyondcorp.sgApplications.list beyondcorp.sgApplications.setIamPolicy beyondcorp.sgApplications.update beyondcorp.subscriptions.create beyondcorp.subscriptions.get beyondcorp.subscriptions.list beyondcorp.subscriptions.terminate beyondcorp.subscriptions.update resourcemanager.projects.get resourcemanager.projects.list
Beyondcorp Editor ^Beta (roles/beyondcorp.editor) Editor role for beyondcorp	beyondcorp.appConnections.create beyondcorp.appConnections.delete beyondcorp.appConnections.get beyondcorp.appConnections.getIamPolicy beyondcorp.appConnections.list beyondcorp.appConnections.listEffectiveTags beyondcorp.appConnections.listTagBindings beyondcorp.appConnections.update beyondcorp.appConnectors.create beyondcorp.appConnectors.delete beyondcorp.appConnectors.get beyondcorp.appConnectors.getIamPolicy beyondcorp.appConnectors.list beyondcorp.appConnectors.listEffectiveTags beyondcorp.appConnectors.listTagBindings beyondcorp.appConnectors.reportStatus beyondcorp.appConnectors.update beyondcorp.appGateways.create beyondcorp.appGateways.delete beyondcorp.appGateways.get beyondcorp.appGateways.getIamPolicy beyondcorp.appGateways.list beyondcorp.appGateways.listEffectiveTags beyondcorp.appGateways.listTagBindings beyondcorp.appGateways.update beyondcorp.locations.* beyondcorp.locations.get beyondcorp.locations.list beyondcorp.operations.* beyondcorp.operations.cancel beyondcorp.operations.delete beyondcorp.operations.get beyondcorp.operations.list beyondcorp.securityGateways.create beyondcorp.securityGateways.delete beyondcorp.securityGateways.get beyondcorp.securityGateways.getIamPolicy beyondcorp.securityGateways.list beyondcorp.securityGateways.update beyondcorp.sgApplications.create beyondcorp.sgApplications.delete beyondcorp.sgApplications.get beyondcorp.sgApplications.getIamPolicy beyondcorp.sgApplications.list beyondcorp.sgApplications.update beyondcorp.subscriptions.* beyondcorp.subscriptions.create beyondcorp.subscriptions.get beyondcorp.subscriptions.list beyondcorp.subscriptions.terminate beyondcorp.subscriptions.update resourcemanager.organizations.get resourcemanager.projects.get resourcemanager.projects.list
Cloud BeyondCorp Subscription Admin ^Beta (roles/beyondcorp.subscriptionAdmin) Full access to all BeyondCorp Subscription resources.	beyondcorp.subscriptions.* beyondcorp.subscriptions.create beyondcorp.subscriptions.get beyondcorp.subscriptions.list beyondcorp.subscriptions.terminate beyondcorp.subscriptions.update resourcemanager.organizations.get
Cloud BeyondCorp Subscription Viewer ^Beta (roles/beyondcorp.subscriptionViewer) Read-only access to all BeyondCorp Subscription resources.	beyondcorp.subscriptions.get beyondcorp.subscriptions.list resourcemanager.organizations.get
Cloud BeyondCorp Viewer ^Beta (roles/beyondcorp.viewer) Read-only access to all Cloud BeyondCorp resources.	beyondcorp.appConnections.get beyondcorp.appConnections.getIamPolicy beyondcorp.appConnections.list beyondcorp.appConnections.listEffectiveTags beyondcorp.appConnections.listTagBindings beyondcorp.appConnectors.get beyondcorp.appConnectors.getIamPolicy beyondcorp.appConnectors.list beyondcorp.appConnectors.listEffectiveTags beyondcorp.appConnectors.listTagBindings beyondcorp.appGateways.get beyondcorp.appGateways.getIamPolicy beyondcorp.appGateways.list beyondcorp.appGateways.listEffectiveTags beyondcorp.appGateways.listTagBindings beyondcorp.locations.* beyondcorp.locations.get beyondcorp.locations.list beyondcorp.operations.get beyondcorp.operations.list beyondcorp.securityGateways.get beyondcorp.securityGateways.getIamPolicy beyondcorp.securityGateways.list beyondcorp.sgApplications.get beyondcorp.sgApplications.getIamPolicy beyondcorp.sgApplications.list beyondcorp.subscriptions.get beyondcorp.subscriptions.list resourcemanager.organizations.get resourcemanager.projects.get resourcemanager.projects.list

Chrome Enterprise Premium permissions

Permission	Included in roles
beyondcorp.appConnections.create	Owner (roles/owner) Editor (roles/editor) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor)
beyondcorp.appConnections.createTagBinding	Owner (roles/owner) Cloud BeyondCorp Admin (roles/beyondcorp.admin) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Tag User (roles/resourcemanager.tagUser)
beyondcorp.appConnections.delete	Owner (roles/owner) Editor (roles/editor) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor)
beyondcorp.appConnections.deleteTagBinding	Owner (roles/owner) Cloud BeyondCorp Admin (roles/beyondcorp.admin) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Tag User (roles/resourcemanager.tagUser)
beyondcorp.appConnections.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) Support User (roles/iam.supportUser)
beyondcorp.appConnections.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
beyondcorp.appConnections.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
beyondcorp.appConnections.listEffectiveTags	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer)
beyondcorp.appConnections.listTagBindings	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer)
beyondcorp.appConnections.setIamPolicy	Owner (roles/owner) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Security Admin (roles/iam.securityAdmin)
beyondcorp.appConnections.update	Owner (roles/owner) Editor (roles/editor) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor)
beyondcorp.appConnectors.create	Owner (roles/owner) Editor (roles/editor) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor)
beyondcorp.appConnectors.createTagBinding	Owner (roles/owner) Cloud BeyondCorp Admin (roles/beyondcorp.admin) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Tag User (roles/resourcemanager.tagUser)
beyondcorp.appConnectors.delete	Owner (roles/owner) Editor (roles/editor) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor)
beyondcorp.appConnectors.deleteTagBinding	Owner (roles/owner) Cloud BeyondCorp Admin (roles/beyondcorp.admin) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Tag User (roles/resourcemanager.tagUser)
beyondcorp.appConnectors.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) Support User (roles/iam.supportUser)
beyondcorp.appConnectors.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
beyondcorp.appConnectors.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
beyondcorp.appConnectors.listEffectiveTags	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer)
beyondcorp.appConnectors.listTagBindings	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer)
beyondcorp.appConnectors.reportStatus	Owner (roles/owner) Editor (roles/editor) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor)
beyondcorp.appConnectors.setIamPolicy	Owner (roles/owner) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Security Admin (roles/iam.securityAdmin)
beyondcorp.appConnectors.update	Owner (roles/owner) Editor (roles/editor) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor)
beyondcorp.appGateways.create	Owner (roles/owner) Editor (roles/editor) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor)
beyondcorp.appGateways.createTagBinding	Owner (roles/owner) Cloud BeyondCorp Admin (roles/beyondcorp.admin) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Tag User (roles/resourcemanager.tagUser)
beyondcorp.appGateways.delete	Owner (roles/owner) Editor (roles/editor) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor)
beyondcorp.appGateways.deleteTagBinding	Owner (roles/owner) Cloud BeyondCorp Admin (roles/beyondcorp.admin) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Tag User (roles/resourcemanager.tagUser)
beyondcorp.appGateways.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) Support User (roles/iam.supportUser)
beyondcorp.appGateways.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
beyondcorp.appGateways.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
beyondcorp.appGateways.listEffectiveTags	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer)
beyondcorp.appGateways.listTagBindings	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer)
beyondcorp.appGateways.setIamPolicy	Owner (roles/owner) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Security Admin (roles/iam.securityAdmin)
beyondcorp.appGateways.update	Owner (roles/owner) Editor (roles/editor) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor)
beyondcorp.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) Support User (roles/iam.supportUser)
beyondcorp.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
beyondcorp.operations.cancel	Owner (roles/owner) Editor (roles/editor) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor)
beyondcorp.operations.delete	Owner (roles/owner) Editor (roles/editor) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor)
beyondcorp.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) Support User (roles/iam.supportUser)
beyondcorp.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
beyondcorp.securityGateways.create	Owner (roles/owner) Editor (roles/editor) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor)
beyondcorp.securityGateways.delete	Owner (roles/owner) Editor (roles/editor) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor)
beyondcorp.securityGateways.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) Support User (roles/iam.supportUser)
beyondcorp.securityGateways.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
beyondcorp.securityGateways.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
beyondcorp.securityGateways.setIamPolicy	Owner (roles/owner) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Security Admin (roles/iam.securityAdmin)
beyondcorp.securityGateways.update	Owner (roles/owner) Editor (roles/editor) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor)
beyondcorp.sgApplications.create	Owner (roles/owner) Editor (roles/editor) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor)
beyondcorp.sgApplications.delete	Owner (roles/owner) Editor (roles/editor) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor)
beyondcorp.sgApplications.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) Support User (roles/iam.supportUser)
beyondcorp.sgApplications.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
beyondcorp.sgApplications.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
beyondcorp.sgApplications.setIamPolicy	Owner (roles/owner) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Security Admin (roles/iam.securityAdmin)
beyondcorp.sgApplications.update	Owner (roles/owner) Editor (roles/editor) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor)
beyondcorp.subscriptions.create	Owner (roles/owner) Editor (roles/editor) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Subscription Admin (roles/beyondcorp.subscriptionAdmin)
beyondcorp.subscriptions.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Subscription Admin (roles/beyondcorp.subscriptionAdmin) Cloud BeyondCorp Subscription Viewer (roles/beyondcorp.subscriptionViewer) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) Support User (roles/iam.supportUser)
beyondcorp.subscriptions.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Subscription Admin (roles/beyondcorp.subscriptionAdmin) Cloud BeyondCorp Subscription Viewer (roles/beyondcorp.subscriptionViewer) Cloud BeyondCorp Viewer (roles/beyondcorp.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
beyondcorp.subscriptions.terminate	Owner (roles/owner) Editor (roles/editor) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Subscription Admin (roles/beyondcorp.subscriptionAdmin)
beyondcorp.subscriptions.update	Owner (roles/owner) Editor (roles/editor) Cloud BeyondCorp Admin (roles/beyondcorp.admin) Beyondcorp Editor (roles/beyondcorp.editor) Cloud BeyondCorp Subscription Admin (roles/beyondcorp.subscriptionAdmin)