Cloud Tasks roles and permissions

This page lists the IAM roles and permissions for Cloud Tasks. To search through all roles and permissions, see the role and permission index.

Cloud Tasks roles

Role	Permissions
Cloud Tasks Admin ^Beta (roles/cloudtasks.admin) Full access to queues and tasks.	cloudtasks.* cloudtasks.cmekConfig.get cloudtasks.cmekConfig.update cloudtasks.locations.get cloudtasks.locations.list cloudtasks.queues.create cloudtasks.queues.delete cloudtasks.queues.get cloudtasks.queues.getIamPolicy cloudtasks.queues.list cloudtasks.queues.pause cloudtasks.queues.purge cloudtasks.queues.resume cloudtasks.queues.setIamPolicy cloudtasks.queues.update cloudtasks.tasks.create cloudtasks.tasks.delete cloudtasks.tasks.fullView cloudtasks.tasks.get cloudtasks.tasks.list cloudtasks.tasks.run monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.list
Cloud Tasks Enqueuer ^Beta (roles/cloudtasks.enqueuer) Access to create tasks.	cloudtasks.tasks.create cloudtasks.tasks.fullView resourcemanager.projects.get resourcemanager.projects.list
Cloud Tasks Queue Admin ^Beta (roles/cloudtasks.queueAdmin) Admin access to queues.	cloudtasks.locations.* cloudtasks.locations.get cloudtasks.locations.list cloudtasks.queues.* cloudtasks.queues.create cloudtasks.queues.delete cloudtasks.queues.get cloudtasks.queues.getIamPolicy cloudtasks.queues.list cloudtasks.queues.pause cloudtasks.queues.purge cloudtasks.queues.resume cloudtasks.queues.setIamPolicy cloudtasks.queues.update resourcemanager.projects.get resourcemanager.projects.list
Cloud Tasks Service Agent (roles/cloudtasks.serviceAgent) Grants Cloud Tasks Service Account access to manage resources. Warning: Do not grant service agent roles to any principals except service agents.	iam.serviceAccounts.getAccessToken iam.serviceAccounts.getOpenIdToken logging.logEntries.create
Cloud Tasks Task Deleter ^Beta (roles/cloudtasks.taskDeleter) Access to delete tasks.	cloudtasks.tasks.delete resourcemanager.projects.get resourcemanager.projects.list
Cloud Tasks Task Runner ^Beta (roles/cloudtasks.taskRunner) Access to run tasks.	cloudtasks.tasks.fullView cloudtasks.tasks.run resourcemanager.projects.get resourcemanager.projects.list
Cloud Tasks Viewer ^Beta (roles/cloudtasks.viewer) Get and list access to tasks, queues, and locations.	cloudtasks.cmekConfig.get cloudtasks.locations.* cloudtasks.locations.get cloudtasks.locations.list cloudtasks.queues.get cloudtasks.queues.list cloudtasks.tasks.fullView cloudtasks.tasks.get cloudtasks.tasks.list monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.list

Cloud Tasks permissions

Permission	Included in roles
cloudtasks.cmekConfig.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud Tasks Admin (roles/cloudtasks.admin) Cloud Tasks Viewer (roles/cloudtasks.viewer) Support User (roles/iam.supportUser)
cloudtasks.cmekConfig.update	Owner (roles/owner) Cloud Tasks Admin (roles/cloudtasks.admin)
cloudtasks.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud Tasks Admin (roles/cloudtasks.admin) Cloud Tasks Queue Admin (roles/cloudtasks.queueAdmin) Cloud Tasks Viewer (roles/cloudtasks.viewer) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) Support User (roles/iam.supportUser)
cloudtasks.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud Tasks Admin (roles/cloudtasks.admin) Cloud Tasks Queue Admin (roles/cloudtasks.queueAdmin) Cloud Tasks Viewer (roles/cloudtasks.viewer) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
cloudtasks.queues.create	Owner (roles/owner) Editor (roles/editor) Cloud Tasks Admin (roles/cloudtasks.admin) Cloud Tasks Queue Admin (roles/cloudtasks.queueAdmin) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
cloudtasks.queues.delete	Owner (roles/owner) Editor (roles/editor) Cloud Tasks Admin (roles/cloudtasks.admin) Cloud Tasks Queue Admin (roles/cloudtasks.queueAdmin) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
cloudtasks.queues.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud Tasks Admin (roles/cloudtasks.admin) Cloud Tasks Queue Admin (roles/cloudtasks.queueAdmin) Cloud Tasks Viewer (roles/cloudtasks.viewer) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
cloudtasks.queues.getIamPolicy	Owner (roles/owner) Cloud Tasks Admin (roles/cloudtasks.admin) Cloud Tasks Queue Admin (roles/cloudtasks.queueAdmin) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer)
cloudtasks.queues.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud Tasks Admin (roles/cloudtasks.admin) Cloud Tasks Queue Admin (roles/cloudtasks.queueAdmin) Cloud Tasks Viewer (roles/cloudtasks.viewer) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
cloudtasks.queues.pause	Owner (roles/owner) Editor (roles/editor) Cloud Tasks Admin (roles/cloudtasks.admin) Cloud Tasks Queue Admin (roles/cloudtasks.queueAdmin) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent)
cloudtasks.queues.purge	Owner (roles/owner) Editor (roles/editor) Cloud Tasks Admin (roles/cloudtasks.admin) Cloud Tasks Queue Admin (roles/cloudtasks.queueAdmin) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent)
cloudtasks.queues.resume	Owner (roles/owner) Editor (roles/editor) Cloud Tasks Admin (roles/cloudtasks.admin) Cloud Tasks Queue Admin (roles/cloudtasks.queueAdmin) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent)
cloudtasks.queues.setIamPolicy	Owner (roles/owner) Cloud Tasks Admin (roles/cloudtasks.admin) Cloud Tasks Queue Admin (roles/cloudtasks.queueAdmin) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) Security Admin (roles/iam.securityAdmin)
cloudtasks.queues.update	Owner (roles/owner) Editor (roles/editor) Cloud Tasks Admin (roles/cloudtasks.admin) Cloud Tasks Queue Admin (roles/cloudtasks.queueAdmin) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent)
cloudtasks.tasks.create	Owner (roles/owner) Editor (roles/editor) Cloud Tasks Admin (roles/cloudtasks.admin) Cloud Tasks Enqueuer (roles/cloudtasks.enqueuer) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent)
cloudtasks.tasks.delete	Owner (roles/owner) Editor (roles/editor) Cloud Tasks Admin (roles/cloudtasks.admin) Cloud Tasks Task Deleter (roles/cloudtasks.taskDeleter)
cloudtasks.tasks.fullView	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud Tasks Admin (roles/cloudtasks.admin) Cloud Tasks Enqueuer (roles/cloudtasks.enqueuer) Cloud Tasks Task Runner (roles/cloudtasks.taskRunner) Cloud Tasks Viewer (roles/cloudtasks.viewer) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) Support User (roles/iam.supportUser)
cloudtasks.tasks.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud Tasks Admin (roles/cloudtasks.admin) Cloud Tasks Viewer (roles/cloudtasks.viewer) Support User (roles/iam.supportUser)
cloudtasks.tasks.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud Tasks Admin (roles/cloudtasks.admin) Cloud Tasks Viewer (roles/cloudtasks.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
cloudtasks.tasks.run	Owner (roles/owner) Editor (roles/editor) Cloud Tasks Admin (roles/cloudtasks.admin) Cloud Tasks Task Runner (roles/cloudtasks.taskRunner)