Developer Connect roles and permissions

This page lists the IAM roles and permissions for Developer Connect. To search through all roles and permissions, see the role and permission index.

Developer Connect roles

Role	Permissions
Developer Connect Admin ^Beta (roles/developerconnect.admin) Full access to Developer Connect resources.	developerconnect.connections.constructGitHubAppManifest developerconnect.connections.create developerconnect.connections.delete developerconnect.connections.fetchGitHubInstallations developerconnect.connections.fetchLinkableGitRepositories developerconnect.connections.generateGitHubStateToken developerconnect.connections.get developerconnect.connections.list developerconnect.connections.processGitHubAppCreationCallback developerconnect.connections.processGitHubOAuthCallback developerconnect.connections.update developerconnect.gitRepositoryLinks.create developerconnect.gitRepositoryLinks.delete developerconnect.gitRepositoryLinks.fetchGitRefs developerconnect.gitRepositoryLinks.get developerconnect.gitRepositoryLinks.gitProxyRead developerconnect.gitRepositoryLinks.gitProxyWrite developerconnect.gitRepositoryLinks.list developerconnect.locations.* developerconnect.locations.get developerconnect.locations.list developerconnect.operations.* developerconnect.operations.cancel developerconnect.operations.delete developerconnect.operations.get developerconnect.operations.list resourcemanager.projects.get resourcemanager.projects.list
Developerconnect Editor ^Beta (roles/developerconnect.editor) Editor role for developerconnect	developerconnect.accountConnectors.* developerconnect.accountConnectors.create developerconnect.accountConnectors.delete developerconnect.accountConnectors.get developerconnect.accountConnectors.list developerconnect.accountConnectors.update developerconnect.connections.constructGitHubAppManifest developerconnect.connections.create developerconnect.connections.delete developerconnect.connections.fetchGitHubInstallations developerconnect.connections.fetchLinkableGitRepositories developerconnect.connections.generateGitHubStateToken developerconnect.connections.get developerconnect.connections.list developerconnect.connections.processGitHubAppCreationCallback developerconnect.connections.processGitHubOAuthCallback developerconnect.connections.update developerconnect.deploymentEvents.* developerconnect.deploymentEvents.get developerconnect.deploymentEvents.list developerconnect.gitRepositoryLinks.create developerconnect.gitRepositoryLinks.delete developerconnect.gitRepositoryLinks.fetchGitRefs developerconnect.gitRepositoryLinks.get developerconnect.gitRepositoryLinks.list developerconnect.insightsConfigs.* developerconnect.insightsConfigs.create developerconnect.insightsConfigs.delete developerconnect.insightsConfigs.get developerconnect.insightsConfigs.list developerconnect.insightsConfigs.update developerconnect.locations.* developerconnect.locations.get developerconnect.locations.list developerconnect.operations.* developerconnect.operations.cancel developerconnect.operations.delete developerconnect.operations.get developerconnect.operations.list developerconnect.providers.list developerconnect.users.* developerconnect.users.delete developerconnect.users.deleteSelf developerconnect.users.fetchAccessToken developerconnect.users.finishOAuth developerconnect.users.getSelf developerconnect.users.list developerconnect.users.startOAuth resourcemanager.projects.get resourcemanager.projects.list
Developer Connect Viewer ^Beta (roles/developerconnect.viewer) Read-only access to Developer Connect resources.	developerconnect.connections.get developerconnect.connections.list developerconnect.gitRepositoryLinks.get developerconnect.gitRepositoryLinks.list developerconnect.locations.* developerconnect.locations.get developerconnect.locations.list developerconnect.operations.get developerconnect.operations.list resourcemanager.projects.get resourcemanager.projects.list
Developer Connect HTTP Proxy Writer ^Beta (roles/developerconnect.connectionHttpProxyWriter) Grants read and write access to connections through the HTTP Proxy.	developerconnect.connections.httpProxyRead developerconnect.connections.httpProxyWrite
Developer Connect Git Proxy Reader ^Beta (roles/developerconnect.gitProxyReader) Grants read-only access to repositories through the Git Proxy.	developerconnect.gitRepositoryLinks.gitProxyRead
Developer Connect Git Proxy User ^Beta (roles/developerconnect.gitProxyUser) Grants read and write access to repositories through the Git Proxy.	developerconnect.gitRepositoryLinks.gitProxyRead developerconnect.gitRepositoryLinks.gitProxyWrite
Developer Connect Insights Admin ^Beta (roles/developerconnect.insightsAdmin) Admin access to Developer Connect Insights resources.	developerconnect.deploymentEvents.* developerconnect.deploymentEvents.get developerconnect.deploymentEvents.list developerconnect.insightsConfigs.* developerconnect.insightsConfigs.create developerconnect.insightsConfigs.delete developerconnect.insightsConfigs.get developerconnect.insightsConfigs.list developerconnect.insightsConfigs.update developerconnect.locations.* developerconnect.locations.get developerconnect.locations.list developerconnect.operations.get developerconnect.operations.list resourcemanager.projects.get resourcemanager.projects.list
Developer Connect Insights Config Agent ^Beta (roles/developerconnect.insightsAgent) Allow Developer Connect to access SDLC information.	cloudasset.assets.exportResource cloudasset.assets.listResource cloudasset.assets.searchAllResources cloudasset.feeds.create cloudasset.feeds.get cloudasset.feeds.update containeranalysis.occurrences.get containeranalysis.occurrences.list logging.logEntries.create
Developer Connect Insights Viewer ^Beta (roles/developerconnect.insightsViewer) Read-only access to Developer Connect Insights resources.	developerconnect.deploymentEvents.* developerconnect.deploymentEvents.get developerconnect.deploymentEvents.list developerconnect.insightsConfigs.get developerconnect.insightsConfigs.list developerconnect.locations.* developerconnect.locations.get developerconnect.locations.list developerconnect.operations.get developerconnect.operations.list resourcemanager.projects.get resourcemanager.projects.list
Developer Connect OAuth Admin ^Beta (roles/developerconnect.oauthAdmin) Grants read and write access to AccountConnector resources.	developerconnect.accountConnectors.* developerconnect.accountConnectors.create developerconnect.accountConnectors.delete developerconnect.accountConnectors.get developerconnect.accountConnectors.list developerconnect.accountConnectors.update developerconnect.locations.* developerconnect.locations.get developerconnect.locations.list developerconnect.operations.get developerconnect.operations.list developerconnect.providers.list developerconnect.users.* developerconnect.users.delete developerconnect.users.deleteSelf developerconnect.users.fetchAccessToken developerconnect.users.finishOAuth developerconnect.users.getSelf developerconnect.users.list developerconnect.users.startOAuth resourcemanager.projects.get resourcemanager.projects.list
Developer Connect OAuth User ^Beta (roles/developerconnect.oauthUser) Grants read and write access to User resources, and read access to AccountConnectors.	developerconnect.accountConnectors.get developerconnect.accountConnectors.list developerconnect.locations.* developerconnect.locations.get developerconnect.locations.list developerconnect.operations.get developerconnect.operations.list developerconnect.users.deleteSelf developerconnect.users.fetchAccessToken developerconnect.users.finishOAuth developerconnect.users.getSelf developerconnect.users.startOAuth resourcemanager.projects.get resourcemanager.projects.list
Developer Connect Read Token Accessor ^Beta (roles/developerconnect.readTokenAccessor) Grants access to Read-Only tokens (both PAT and short-lived). Also grants access to view the git repository link.	developerconnect.connections.get developerconnect.gitRepositoryLinks.fetchReadToken developerconnect.gitRepositoryLinks.get
Developer Connect Token Accessor ^Beta (roles/developerconnect.tokenAccessor) Grants access to Read/Write and Read-Only tokens (both PAT and short-lived). Also grants access to view the git repository link.	developerconnect.connections.get developerconnect.gitRepositoryLinks.fetchReadToken developerconnect.gitRepositoryLinks.fetchReadWriteToken developerconnect.gitRepositoryLinks.get
Developer Connect User ^Beta (roles/developerconnect.user) Grants access to view the connection and to the features that interact with the actual repository such as reading content from the repository	developerconnect.connections.fetchGitHubInstallations developerconnect.connections.fetchLinkableGitRepositories developerconnect.connections.get developerconnect.connections.list developerconnect.gitRepositoryLinks.fetchGitRefs developerconnect.gitRepositoryLinks.get developerconnect.gitRepositoryLinks.list developerconnect.locations.* developerconnect.locations.get developerconnect.locations.list developerconnect.operations.get developerconnect.operations.list resourcemanager.projects.get resourcemanager.projects.list

Service agent roles

Service agent roles should only be granted to service agents.

Role	Permissions
Developer Connect Service Agent (roles/developerconnect.serviceAgent) Gives the Developer Connect API Service Account access to necessary GCP resources. Warning: Do not grant service agent roles to any principals except service agents.	apphub.applications.get apphub.services.get apphub.services.list apphub.workloads.get apphub.workloads.list developerconnect.operations.get

Developer Connect permissions

Permission	Included in roles
developerconnect.accountConnectors.create	Owner (roles/owner) Editor (roles/editor) Developerconnect Editor (roles/developerconnect.editor) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Developer Connect OAuth Admin (roles/developerconnect.oauthAdmin)
developerconnect.accountConnectors.delete	Owner (roles/owner) Editor (roles/editor) Developerconnect Editor (roles/developerconnect.editor) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Developer Connect OAuth Admin (roles/developerconnect.oauthAdmin)
developerconnect.accountConnectors.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Developerconnect Editor (roles/developerconnect.editor) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Developer Connect OAuth Admin (roles/developerconnect.oauthAdmin) Developer Connect OAuth User (roles/developerconnect.oauthUser) Support User (roles/iam.supportUser)
developerconnect.accountConnectors.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Developerconnect Editor (roles/developerconnect.editor) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Developer Connect OAuth Admin (roles/developerconnect.oauthAdmin) Developer Connect OAuth User (roles/developerconnect.oauthUser) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
developerconnect.accountConnectors.update	Owner (roles/owner) Editor (roles/editor) Developerconnect Editor (roles/developerconnect.editor) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Developer Connect OAuth Admin (roles/developerconnect.oauthAdmin)
developerconnect.connections.constructGitHubAppManifest	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Developer Connect Admin (roles/developerconnect.admin) Developerconnect Editor (roles/developerconnect.editor) Application Admin (roles/designcenter.applicationAdmin) Dev Ops (roles/iam.devOps)
developerconnect.connections.create	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Developer Connect Admin (roles/developerconnect.admin) Developerconnect Editor (roles/developerconnect.editor) Application Admin (roles/designcenter.applicationAdmin) Dev Ops (roles/iam.devOps)
developerconnect.connections.delete	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Developer Connect Admin (roles/developerconnect.admin) Developerconnect Editor (roles/developerconnect.editor) Application Admin (roles/designcenter.applicationAdmin) Dev Ops (roles/iam.devOps)
developerconnect.connections.fetchGitHubInstallations	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Developer Connect Admin (roles/developerconnect.admin) Developerconnect Editor (roles/developerconnect.editor) Application Admin (roles/designcenter.applicationAdmin) Developer Connect User (roles/developerconnect.user) Dev Ops (roles/iam.devOps) Support User (roles/iam.supportUser)
developerconnect.connections.fetchLinkableGitRepositories	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Developer Connect Admin (roles/developerconnect.admin) Developerconnect Editor (roles/developerconnect.editor) Application Admin (roles/designcenter.applicationAdmin) Developer Connect User (roles/developerconnect.user) Dev Ops (roles/iam.devOps) Support User (roles/iam.supportUser)
developerconnect.connections.generateGitHubStateToken	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Developer Connect Admin (roles/developerconnect.admin) Developerconnect Editor (roles/developerconnect.editor) Application Admin (roles/designcenter.applicationAdmin) Dev Ops (roles/iam.devOps)
developerconnect.connections.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Developer Connect Admin (roles/developerconnect.admin) Developerconnect Editor (roles/developerconnect.editor) Developer Connect Viewer (roles/developerconnect.viewer) Application Admin (roles/designcenter.applicationAdmin) Developer Connect Read Token Accessor (roles/developerconnect.readTokenAccessor) Developer Connect Token Accessor (roles/developerconnect.tokenAccessor) Developer Connect User (roles/developerconnect.user) Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner) Dev Ops (roles/iam.devOps) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent) Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent) Cloud Build Service Agent (roles/cloudbuild.serviceAgent) Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent) Gemini Code Assist Management Service Agent (roles/geminicodeassistmanagement.serviceAgent)
developerconnect.connections.httpProxyRead	Owner (roles/owner) Developer Connect HTTP Proxy Writer (roles/developerconnect.connectionHttpProxyWriter) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Gemini Code Assist Management Service Agent (roles/geminicodeassistmanagement.serviceAgent)
developerconnect.connections.httpProxyWrite	Owner (roles/owner) Developer Connect HTTP Proxy Writer (roles/developerconnect.connectionHttpProxyWriter) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Gemini Code Assist Management Service Agent (roles/geminicodeassistmanagement.serviceAgent)
developerconnect.connections.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Developer Connect Admin (roles/developerconnect.admin) Developerconnect Editor (roles/developerconnect.editor) Developer Connect Viewer (roles/developerconnect.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Application Admin (roles/designcenter.applicationAdmin) Developer Connect User (roles/developerconnect.user) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
developerconnect.connections.processGitHubAppCreationCallback	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Developer Connect Admin (roles/developerconnect.admin) Developerconnect Editor (roles/developerconnect.editor) Application Admin (roles/designcenter.applicationAdmin) Dev Ops (roles/iam.devOps)
developerconnect.connections.processGitHubOAuthCallback	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Developer Connect Admin (roles/developerconnect.admin) Developerconnect Editor (roles/developerconnect.editor) Application Admin (roles/designcenter.applicationAdmin) Dev Ops (roles/iam.devOps)
developerconnect.connections.update	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Developer Connect Admin (roles/developerconnect.admin) Developerconnect Editor (roles/developerconnect.editor) Application Admin (roles/designcenter.applicationAdmin) Dev Ops (roles/iam.devOps)
developerconnect.deploymentEvents.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Developerconnect Editor (roles/developerconnect.editor) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Developer Connect Insights Admin (roles/developerconnect.insightsAdmin) Developer Connect Insights Viewer (roles/developerconnect.insightsViewer) Support User (roles/iam.supportUser)
developerconnect.deploymentEvents.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Developerconnect Editor (roles/developerconnect.editor) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Developer Connect Insights Admin (roles/developerconnect.insightsAdmin) Developer Connect Insights Viewer (roles/developerconnect.insightsViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
developerconnect.gitRepositoryLinks.create	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Developer Connect Admin (roles/developerconnect.admin) Developerconnect Editor (roles/developerconnect.editor) Application Admin (roles/designcenter.applicationAdmin) Dev Ops (roles/iam.devOps)
developerconnect.gitRepositoryLinks.delete	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Developer Connect Admin (roles/developerconnect.admin) Developerconnect Editor (roles/developerconnect.editor) Application Admin (roles/designcenter.applicationAdmin) Dev Ops (roles/iam.devOps)
developerconnect.gitRepositoryLinks.fetchGitRefs	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Developer Connect Admin (roles/developerconnect.admin) Developerconnect Editor (roles/developerconnect.editor) Application Admin (roles/designcenter.applicationAdmin) Developer Connect User (roles/developerconnect.user) Dev Ops (roles/iam.devOps) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent)
developerconnect.gitRepositoryLinks.fetchReadToken	Owner (roles/owner) Developer Connect Read Token Accessor (roles/developerconnect.readTokenAccessor) Developer Connect Token Accessor (roles/developerconnect.tokenAccessor) Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent) Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent) Cloud Build Service Agent (roles/cloudbuild.serviceAgent) Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)
developerconnect.gitRepositoryLinks.fetchReadWriteToken	Owner (roles/owner) Developer Connect Token Accessor (roles/developerconnect.tokenAccessor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Build Service Agent (roles/cloudbuild.serviceAgent) Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)
developerconnect.gitRepositoryLinks.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Developer Connect Admin (roles/developerconnect.admin) Developerconnect Editor (roles/developerconnect.editor) Developer Connect Viewer (roles/developerconnect.viewer) Application Admin (roles/designcenter.applicationAdmin) Developer Connect Read Token Accessor (roles/developerconnect.readTokenAccessor) Developer Connect Token Accessor (roles/developerconnect.tokenAccessor) Developer Connect User (roles/developerconnect.user) Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner) Dev Ops (roles/iam.devOps) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent) Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent) Cloud Build Service Agent (roles/cloudbuild.serviceAgent) DesignCenter Service Agent (roles/designcenter.serviceAgent) Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent) Gemini Code Assist Management Service Agent (roles/geminicodeassistmanagement.serviceAgent)
developerconnect.gitRepositoryLinks.gitProxyRead	Owner (roles/owner) Application Design Center Admin (roles/designcenter.admin) Developer Connect Admin (roles/developerconnect.admin) Application Admin (roles/designcenter.applicationAdmin) Developer Connect Git Proxy Reader (roles/developerconnect.gitProxyReader) Developer Connect Git Proxy User (roles/developerconnect.gitProxyUser) Dev Ops (roles/iam.devOps) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent) DesignCenter Service Agent (roles/designcenter.serviceAgent)
developerconnect.gitRepositoryLinks.gitProxyWrite	Owner (roles/owner) Application Design Center Admin (roles/designcenter.admin) Developer Connect Admin (roles/developerconnect.admin) Application Admin (roles/designcenter.applicationAdmin) Developer Connect Git Proxy User (roles/developerconnect.gitProxyUser) Dev Ops (roles/iam.devOps) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. DesignCenter Service Agent (roles/designcenter.serviceAgent)
developerconnect.gitRepositoryLinks.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Developer Connect Admin (roles/developerconnect.admin) Developerconnect Editor (roles/developerconnect.editor) Developer Connect Viewer (roles/developerconnect.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Application Admin (roles/designcenter.applicationAdmin) Developer Connect User (roles/developerconnect.user) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent)
developerconnect.insightsConfigs.create	Owner (roles/owner) Editor (roles/editor) Developerconnect Editor (roles/developerconnect.editor) Developer Connect Insights Admin (roles/developerconnect.insightsAdmin)
developerconnect.insightsConfigs.delete	Owner (roles/owner) Editor (roles/editor) Developerconnect Editor (roles/developerconnect.editor) Developer Connect Insights Admin (roles/developerconnect.insightsAdmin)
developerconnect.insightsConfigs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Developerconnect Editor (roles/developerconnect.editor) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Developer Connect Insights Admin (roles/developerconnect.insightsAdmin) Developer Connect Insights Viewer (roles/developerconnect.insightsViewer) Support User (roles/iam.supportUser)
developerconnect.insightsConfigs.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Developerconnect Editor (roles/developerconnect.editor) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Developer Connect Insights Admin (roles/developerconnect.insightsAdmin) Developer Connect Insights Viewer (roles/developerconnect.insightsViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
developerconnect.insightsConfigs.update	Owner (roles/owner) Editor (roles/editor) Developerconnect Editor (roles/developerconnect.editor) Developer Connect Insights Admin (roles/developerconnect.insightsAdmin)
developerconnect.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Developer Connect Admin (roles/developerconnect.admin) Developerconnect Editor (roles/developerconnect.editor) Developer Connect Viewer (roles/developerconnect.viewer) App Management Viewer (roles/apphub.appManagementViewer) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Cloud Hub Operator (roles/cloudhub.operator) Application Admin (roles/designcenter.applicationAdmin) Developer Connect Insights Admin (roles/developerconnect.insightsAdmin) Developer Connect Insights Viewer (roles/developerconnect.insightsViewer) Developer Connect OAuth Admin (roles/developerconnect.oauthAdmin) Developer Connect OAuth User (roles/developerconnect.oauthUser) Developer Connect User (roles/developerconnect.user) Dev Ops (roles/iam.devOps) Support User (roles/iam.supportUser)
developerconnect.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Developer Connect Admin (roles/developerconnect.admin) Developerconnect Editor (roles/developerconnect.editor) Developer Connect Viewer (roles/developerconnect.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) App Management Viewer (roles/apphub.appManagementViewer) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Cloud Hub Operator (roles/cloudhub.operator) Application Admin (roles/designcenter.applicationAdmin) Developer Connect Insights Admin (roles/developerconnect.insightsAdmin) Developer Connect Insights Viewer (roles/developerconnect.insightsViewer) Developer Connect OAuth Admin (roles/developerconnect.oauthAdmin) Developer Connect OAuth User (roles/developerconnect.oauthUser) Developer Connect User (roles/developerconnect.user) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
developerconnect.operations.cancel	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Developer Connect Admin (roles/developerconnect.admin) Developerconnect Editor (roles/developerconnect.editor) Application Admin (roles/designcenter.applicationAdmin) Dev Ops (roles/iam.devOps)
developerconnect.operations.delete	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Developer Connect Admin (roles/developerconnect.admin) Developerconnect Editor (roles/developerconnect.editor) Application Admin (roles/designcenter.applicationAdmin) Dev Ops (roles/iam.devOps)
developerconnect.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Developer Connect Admin (roles/developerconnect.admin) Developerconnect Editor (roles/developerconnect.editor) Developer Connect Viewer (roles/developerconnect.viewer) App Management Viewer (roles/apphub.appManagementViewer) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Cloud Hub Operator (roles/cloudhub.operator) Application Admin (roles/designcenter.applicationAdmin) Developer Connect Insights Admin (roles/developerconnect.insightsAdmin) Developer Connect Insights Viewer (roles/developerconnect.insightsViewer) Developer Connect OAuth Admin (roles/developerconnect.oauthAdmin) Developer Connect OAuth User (roles/developerconnect.oauthUser) Developer Connect User (roles/developerconnect.user) Dev Ops (roles/iam.devOps) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Developer Connect Service Agent (roles/developerconnect.serviceAgent) Gemini Code Assist Management Service Agent (roles/geminicodeassistmanagement.serviceAgent)
developerconnect.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Developer Connect Admin (roles/developerconnect.admin) Developerconnect Editor (roles/developerconnect.editor) Developer Connect Viewer (roles/developerconnect.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) App Management Viewer (roles/apphub.appManagementViewer) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Cloud Hub Operator (roles/cloudhub.operator) Application Admin (roles/designcenter.applicationAdmin) Developer Connect Insights Admin (roles/developerconnect.insightsAdmin) Developer Connect Insights Viewer (roles/developerconnect.insightsViewer) Developer Connect OAuth Admin (roles/developerconnect.oauthAdmin) Developer Connect OAuth User (roles/developerconnect.oauthUser) Developer Connect User (roles/developerconnect.user) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
developerconnect.providers.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Developerconnect Editor (roles/developerconnect.editor) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Developer Connect OAuth Admin (roles/developerconnect.oauthAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
developerconnect.users.delete	Owner (roles/owner) Editor (roles/editor) Developerconnect Editor (roles/developerconnect.editor) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Developer Connect OAuth Admin (roles/developerconnect.oauthAdmin)
developerconnect.users.deleteSelf	Owner (roles/owner) Editor (roles/editor) Developerconnect Editor (roles/developerconnect.editor) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Developer Connect OAuth Admin (roles/developerconnect.oauthAdmin) Developer Connect OAuth User (roles/developerconnect.oauthUser)
developerconnect.users.fetchAccessToken	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Developerconnect Editor (roles/developerconnect.editor) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Developer Connect OAuth Admin (roles/developerconnect.oauthAdmin) Developer Connect OAuth User (roles/developerconnect.oauthUser) Support User (roles/iam.supportUser)
developerconnect.users.finishOAuth	Owner (roles/owner) Editor (roles/editor) Developerconnect Editor (roles/developerconnect.editor) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Developer Connect OAuth Admin (roles/developerconnect.oauthAdmin) Developer Connect OAuth User (roles/developerconnect.oauthUser)
developerconnect.users.getSelf	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Developerconnect Editor (roles/developerconnect.editor) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Developer Connect OAuth Admin (roles/developerconnect.oauthAdmin) Developer Connect OAuth User (roles/developerconnect.oauthUser) Support User (roles/iam.supportUser)
developerconnect.users.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Developerconnect Editor (roles/developerconnect.editor) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Developer Connect OAuth Admin (roles/developerconnect.oauthAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
developerconnect.users.startOAuth	Owner (roles/owner) Editor (roles/editor) Developerconnect Editor (roles/developerconnect.editor) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Developer Connect OAuth Admin (roles/developerconnect.oauthAdmin) Developer Connect OAuth User (roles/developerconnect.oauthUser)