Cloud Domains roles and permissions

This page lists the IAM roles and permissions for Cloud Domains. To search through all roles and permissions, see the role and permission index.

Cloud Domains roles

Role	Permissions
Cloud Domains Admin (roles/domains.admin) Full access to Cloud Domains Registrations and related resources.	domains.* domains.locations.get domains.locations.list domains.operations.cancel domains.operations.get domains.operations.list domains.registrations.configureContact domains.registrations.configureDns domains.registrations.configureManagement domains.registrations.create domains.registrations.createTagBinding domains.registrations.delete domains.registrations.deleteTagBinding domains.registrations.get domains.registrations.getIamPolicy domains.registrations.list domains.registrations.listEffectiveTags domains.registrations.listTagBindings domains.registrations.setIamPolicy domains.registrations.update resourcemanager.projects.get resourcemanager.projects.list
Domains Editor (roles/domains.editor) Editor role for domains	domains.locations.* domains.locations.get domains.locations.list domains.operations.* domains.operations.cancel domains.operations.get domains.operations.list domains.registrations.configureContact domains.registrations.configureDns domains.registrations.configureManagement domains.registrations.create domains.registrations.delete domains.registrations.get domains.registrations.getIamPolicy domains.registrations.list domains.registrations.listEffectiveTags domains.registrations.listTagBindings domains.registrations.update resourcemanager.projects.get resourcemanager.projects.list
Cloud Domains Viewer (roles/domains.viewer) Read-only access to Cloud Domains Registrations and related resources.	domains.locations.* domains.locations.get domains.locations.list domains.operations.get domains.operations.list domains.registrations.get domains.registrations.getIamPolicy domains.registrations.list domains.registrations.listEffectiveTags domains.registrations.listTagBindings resourcemanager.projects.get resourcemanager.projects.list

Cloud Domains permissions

Permission	Included in roles
domains.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud Domains Admin (roles/domains.admin) Domains Editor (roles/domains.editor) Cloud Domains Viewer (roles/domains.viewer) Support User (roles/iam.supportUser)
domains.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud Domains Admin (roles/domains.admin) Domains Editor (roles/domains.editor) Cloud Domains Viewer (roles/domains.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
domains.operations.cancel	Owner (roles/owner) Editor (roles/editor) Cloud Domains Admin (roles/domains.admin) Domains Editor (roles/domains.editor)
domains.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud Domains Admin (roles/domains.admin) Domains Editor (roles/domains.editor) Cloud Domains Viewer (roles/domains.viewer) Support User (roles/iam.supportUser)
domains.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud Domains Admin (roles/domains.admin) Domains Editor (roles/domains.editor) Cloud Domains Viewer (roles/domains.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
domains.registrations.configureContact	Owner (roles/owner) Editor (roles/editor) Cloud Domains Admin (roles/domains.admin) Domains Editor (roles/domains.editor)
domains.registrations.configureDns	Owner (roles/owner) Editor (roles/editor) Cloud Domains Admin (roles/domains.admin) Domains Editor (roles/domains.editor)
domains.registrations.configureManagement	Owner (roles/owner) Editor (roles/editor) Cloud Domains Admin (roles/domains.admin) Domains Editor (roles/domains.editor)
domains.registrations.create	Owner (roles/owner) Editor (roles/editor) Cloud Domains Admin (roles/domains.admin) Domains Editor (roles/domains.editor)
domains.registrations.createTagBinding	Owner (roles/owner) Cloud Domains Admin (roles/domains.admin) Tag User (roles/resourcemanager.tagUser) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver)
domains.registrations.delete	Owner (roles/owner) Editor (roles/editor) Cloud Domains Admin (roles/domains.admin) Domains Editor (roles/domains.editor)
domains.registrations.deleteTagBinding	Owner (roles/owner) Cloud Domains Admin (roles/domains.admin) Tag User (roles/resourcemanager.tagUser) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver)
domains.registrations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud Domains Admin (roles/domains.admin) Domains Editor (roles/domains.editor) Cloud Domains Viewer (roles/domains.viewer) Support User (roles/iam.supportUser)
domains.registrations.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud Domains Admin (roles/domains.admin) Domains Editor (roles/domains.editor) Cloud Domains Viewer (roles/domains.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
domains.registrations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud Domains Admin (roles/domains.admin) Domains Editor (roles/domains.editor) Cloud Domains Viewer (roles/domains.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
domains.registrations.listEffectiveTags	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud Domains Admin (roles/domains.admin) Domains Editor (roles/domains.editor) Cloud Domains Viewer (roles/domains.viewer) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
domains.registrations.listTagBindings	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud Domains Admin (roles/domains.admin) Domains Editor (roles/domains.editor) Cloud Domains Viewer (roles/domains.viewer) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
domains.registrations.setIamPolicy	Owner (roles/owner) Cloud Domains Admin (roles/domains.admin) Security Admin (roles/iam.securityAdmin)
domains.registrations.update	Owner (roles/owner) Editor (roles/editor) Cloud Domains Admin (roles/domains.admin) Domains Editor (roles/domains.editor)