Cloud Optimization roles and permissions

This page lists the IAM roles and permissions for Cloud Optimization. To search through all roles and permissions, see the role and permission index.

Cloud Optimization roles

Role	Permissions
Cloud Optimization AI Admin (roles/cloudoptimization.admin) Administrator of Cloud Optimization AI resources	cloudoptimization.* cloudoptimization.operations.create cloudoptimization.operations.get
Cloud Optimization AI Editor (roles/cloudoptimization.editor) Editor of Cloud Optimization AI resources	cloudoptimization.* cloudoptimization.operations.create cloudoptimization.operations.get
Cloud Optimization AI Viewer (roles/cloudoptimization.viewer) Viewer of Cloud Optimization AI resources	cloudoptimization.operations.get

Service agent roles

Service agent roles should only be granted to service agents.

Role	Permissions
Cloud Optimization Service Agent (roles/cloudoptimization.serviceAgent) Grants Cloud Optimization Service Account access to read and write data in the user project. Warning: Do not grant service agent roles to any principals except service agents.	storage.buckets.get storage.objects.create storage.objects.delete storage.objects.get storage.objects.list storage.objects.update

Cloud Optimization permissions

Permission	Included in roles
cloudoptimization.operations.create	Owner (roles/owner) Editor (roles/editor) Cloud Optimization AI Admin (roles/cloudoptimization.admin) Cloud Optimization AI Editor (roles/cloudoptimization.editor)
cloudoptimization.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud Optimization AI Admin (roles/cloudoptimization.admin) Cloud Optimization AI Editor (roles/cloudoptimization.editor) Cloud Optimization AI Viewer (roles/cloudoptimization.viewer) Support User (roles/iam.supportUser)