Cloud API Registry roles and permissions

This page lists the IAM roles and permissions for Cloud API Registry. To search through all roles and permissions, see the role and permission index.

Cloud API Registry roles

Role	Permissions
Cloud API Registry for Consumers Admin ^Beta (roles/cloudapiregistry.admin) Read/write access to Cloud API Registry for Consumers resources.	cloudapiregistry.* cloudapiregistry.locations.get cloudapiregistry.locations.list cloudapiregistry.mcpServers.get cloudapiregistry.mcpServers.list cloudapiregistry.mcpTools.get cloudapiregistry.mcpTools.list serviceusage.effectivemcppolicy.get
Cloud API Registry for Consumers Viewer ^Beta (roles/cloudapiregistry.viewer) Readonly access to Cloud API Registry for Consumers resources.	cloudapiregistry.* cloudapiregistry.locations.get cloudapiregistry.locations.list cloudapiregistry.mcpServers.get cloudapiregistry.mcpServers.list cloudapiregistry.mcpTools.get cloudapiregistry.mcpTools.list serviceusage.effectivemcppolicy.get

Cloud API Registry permissions

Permission	Included in roles
cloudapiregistry.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud API Registry for Consumers Admin (roles/cloudapiregistry.admin) Cloud API Registry for Consumers Viewer (roles/cloudapiregistry.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent)
cloudapiregistry.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud API Registry for Consumers Admin (roles/cloudapiregistry.admin) Cloud API Registry for Consumers Viewer (roles/cloudapiregistry.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent)
cloudapiregistry.mcpServers.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud API Registry for Consumers Admin (roles/cloudapiregistry.admin) Cloud API Registry for Consumers Viewer (roles/cloudapiregistry.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent)
cloudapiregistry.mcpServers.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud API Registry for Consumers Admin (roles/cloudapiregistry.admin) Cloud API Registry for Consumers Viewer (roles/cloudapiregistry.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent)
cloudapiregistry.mcpTools.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud API Registry for Consumers Admin (roles/cloudapiregistry.admin) Cloud API Registry for Consumers Viewer (roles/cloudapiregistry.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent)
cloudapiregistry.mcpTools.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud API Registry for Consumers Admin (roles/cloudapiregistry.admin) Cloud API Registry for Consumers Viewer (roles/cloudapiregistry.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent)