Cloud API Registry roles and permissions

This page lists the IAM roles and permissions for Cloud API Registry. To search through all roles and permissions, see the role and permission index.

Cloud API Registry roles

Role	Permissions
Cloud API Registry Admin ^Beta (roles/cloudapiregistry.admin) Read/write access to Cloud API Registry resources.	cloudapiregistry.* cloudapiregistry.locations.get cloudapiregistry.locations.list cloudapiregistry.mcpServers.get cloudapiregistry.mcpServers.list cloudapiregistry.mcpTools.get cloudapiregistry.mcpTools.list serviceusage.effectivemcppolicy.get
Cloud API Registry Viewer ^Beta (roles/cloudapiregistry.viewer) Read-only access to Cloud API Registry resources.	cloudapiregistry.* cloudapiregistry.locations.get cloudapiregistry.locations.list cloudapiregistry.mcpServers.get cloudapiregistry.mcpServers.list cloudapiregistry.mcpTools.get cloudapiregistry.mcpTools.list serviceusage.effectivemcppolicy.get

Cloud API Registry permissions

Permission	Included in roles
cloudapiregistry.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud API Registry Admin (roles/cloudapiregistry.admin) Cloud API Registry Viewer (roles/cloudapiregistry.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent)
cloudapiregistry.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud API Registry Admin (roles/cloudapiregistry.admin) Cloud API Registry Viewer (roles/cloudapiregistry.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent)
cloudapiregistry.mcpServers.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud API Registry Admin (roles/cloudapiregistry.admin) Cloud API Registry Viewer (roles/cloudapiregistry.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent)
cloudapiregistry.mcpServers.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud API Registry Admin (roles/cloudapiregistry.admin) Cloud API Registry Viewer (roles/cloudapiregistry.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent)
cloudapiregistry.mcpTools.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud API Registry Admin (roles/cloudapiregistry.admin) Cloud API Registry Viewer (roles/cloudapiregistry.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent)
cloudapiregistry.mcpTools.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud API Registry Admin (roles/cloudapiregistry.admin) Cloud API Registry Viewer (roles/cloudapiregistry.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent)