This page lists the IAM roles and permissions for Cloud Logging. To
search through all roles and permissions, see the [role and
permission index](https://docs.cloud.google.com/iam/docs/roles-permissions).

## Cloud Logging roles

| Role | Permissions |
|---|---|
| #### Logging Admin (`roles/logging.admin`) Provides all permissions necessary to use all features of Cloud Logging. Lowest-level resources where you can grant this role: - View | `logging.buckets.copyLogEntries` `logging.buckets.create` `logging.buckets.createTagBinding` `logging.buckets.delete` `logging.buckets.deleteTagBinding` `logging.buckets.get` `logging.buckets.list` `logging.buckets.listEffectiveTags` `logging.buckets.listTagBindings` `logging.buckets.undelete` `logging.buckets.update` `logging.exclusions.*` - `logging.exclusions.create` - `logging.exclusions.delete` - `logging.exclusions.get` - `logging.exclusions.list` - `logging.exclusions.update` `logging.fields.access` `logging.links.*` - `logging.links.create` - `logging.links.delete` - `logging.links.get` - `logging.links.list` `logging.locations.*` - `logging.locations.get` - `logging.locations.list` `logging.logEntries.*` - `logging.logEntries.create` - `logging.logEntries.download` - `logging.logEntries.list` - `logging.logEntries.route` `logging.logMetrics.*` - `logging.logMetrics.create` - `logging.logMetrics.delete` - `logging.logMetrics.get` - `logging.logMetrics.list` - `logging.logMetrics.update` `logging.logScopes.*` - `logging.logScopes.create` - `logging.logScopes.delete` - `logging.logScopes.get` - `logging.logScopes.list` - `logging.logScopes.update` `logging.logServiceIndexes.list` `logging.logServices.list` `logging.logs.*` - `logging.logs.delete` - `logging.logs.list` `logging.notificationRules.*` - `logging.notificationRules.create` - `logging.notificationRules.delete` - `logging.notificationRules.get` - `logging.notificationRules.list` - `logging.notificationRules.update` `logging.operations.*` - `logging.operations.cancel` - `logging.operations.get` - `logging.operations.list` `logging.privateLogEntries.list` `logging.queries.*` - `logging.queries.deleteShared` - `logging.queries.getShared` - `logging.queries.listShared` - `logging.queries.share` - `logging.queries.updateShared` - `logging.queries.usePrivate` `logging.settings.*` - `logging.settings.get` - `logging.settings.update` `logging.sinks.*` - `logging.sinks.create` - `logging.sinks.delete` - `logging.sinks.get` - `logging.sinks.list` - `logging.sinks.update` `logging.sqlAlerts.*` - `logging.sqlAlerts.create` - `logging.sqlAlerts.update` `logging.usage.get` `logging.views.*` - `logging.views.access` - `logging.views.create` - `logging.views.delete` - `logging.views.get` - `logging.views.getIamPolicy` - `logging.views.list` - `logging.views.listLogs` - `logging.views.listResourceKeys` - `logging.views.listResourceValues` - `logging.views.setIamPolicy` - `logging.views.update` `observability.scopes.get` `resourcemanager.projects.get` `resourcemanager.projects.list` |
| #### Logs Bucket Writer (`roles/logging.bucketWriter`) Ability to write logs to a log bucket. Lowest-level resources where you can grant this role: - Project | `logging.buckets.write` |
| #### Logs Writer (`roles/logging.logWriter`) Provides the permissions to write log entries. Lowest-level resources where you can grant this role: - Project | `logging.logEntries.create` `logging.logEntries.route` |
| #### Private Logs Viewer (`roles/logging.privateLogViewer`) Provides permissions of the Logs Viewer role and in addition, provides read-only access to log entries in private logs. Lowest-level resources where you can grant this role: - View | `logging.buckets.get` `logging.buckets.list` `logging.buckets.listEffectiveTags` `logging.buckets.listTagBindings` `logging.exclusions.get` `logging.exclusions.list` `logging.links.get` `logging.links.list` `logging.locations.*` - `logging.locations.get` - `logging.locations.list` `logging.logEntries.list` `logging.logMetrics.get` `logging.logMetrics.list` `logging.logServiceIndexes.list` `logging.logServices.list` `logging.logs.list` `logging.notificationRules.get` `logging.notificationRules.list` `logging.operations.get` `logging.operations.list` `logging.privateLogEntries.list` `logging.queries.getShared` `logging.queries.listShared` `logging.queries.usePrivate` `logging.settings.get` `logging.sinks.get` `logging.sinks.list` `logging.usage.get` `logging.views.access` `logging.views.get` `logging.views.getIamPolicy` `logging.views.list` `observability.scopes.get` `resourcemanager.projects.get` |
| #### Logs Viewer (`roles/logging.viewer`) Provides access to view logs. Lowest-level resources where you can grant this role: - View | `logging.buckets.get` `logging.buckets.list` `logging.buckets.listEffectiveTags` `logging.buckets.listTagBindings` `logging.exclusions.get` `logging.exclusions.list` `logging.links.get` `logging.links.list` `logging.locations.*` - `logging.locations.get` - `logging.locations.list` `logging.logEntries.list` `logging.logMetrics.get` `logging.logMetrics.list` `logging.logScopes.get` `logging.logScopes.list` `logging.logServiceIndexes.list` `logging.logServices.list` `logging.logs.list` `logging.notificationRules.get` `logging.notificationRules.list` `logging.operations.get` `logging.operations.list` `logging.queries.getShared` `logging.queries.listShared` `logging.queries.usePrivate` `logging.settings.get` `logging.sinks.get` `logging.sinks.list` `logging.usage.get` `logging.views.get` `logging.views.getIamPolicy` `logging.views.list` `observability.scopes.get` `resourcemanager.projects.get` |
| #### Logs Configuration Writer (`roles/logging.configWriter`) Provides permissions to read and write the configurations of logs-based metrics and sinks for exporting logs. Lowest-level resources where you can grant this role: - View | `logging.buckets.create` `logging.buckets.createTagBinding` `logging.buckets.delete` `logging.buckets.deleteTagBinding` `logging.buckets.get` `logging.buckets.list` `logging.buckets.listEffectiveTags` `logging.buckets.listTagBindings` `logging.buckets.undelete` `logging.buckets.update` `logging.exclusions.*` - `logging.exclusions.create` - `logging.exclusions.delete` - `logging.exclusions.get` - `logging.exclusions.list` - `logging.exclusions.update` `logging.links.*` - `logging.links.create` - `logging.links.delete` - `logging.links.get` - `logging.links.list` `logging.locations.*` - `logging.locations.get` - `logging.locations.list` `logging.logMetrics.*` - `logging.logMetrics.create` - `logging.logMetrics.delete` - `logging.logMetrics.get` - `logging.logMetrics.list` - `logging.logMetrics.update` `logging.logScopes.*` - `logging.logScopes.create` - `logging.logScopes.delete` - `logging.logScopes.get` - `logging.logScopes.list` - `logging.logScopes.update` `logging.logServiceIndexes.list` `logging.logServices.list` `logging.logs.list` `logging.notificationRules.*` - `logging.notificationRules.create` - `logging.notificationRules.delete` - `logging.notificationRules.get` - `logging.notificationRules.list` - `logging.notificationRules.update` `logging.operations.*` - `logging.operations.cancel` - `logging.operations.get` - `logging.operations.list` `logging.settings.*` - `logging.settings.get` - `logging.settings.update` `logging.sinks.*` - `logging.sinks.create` - `logging.sinks.delete` - `logging.sinks.get` - `logging.sinks.list` - `logging.sinks.update` `logging.sqlAlerts.*` - `logging.sqlAlerts.create` - `logging.sqlAlerts.update` `logging.views.create` `logging.views.delete` `logging.views.get` `logging.views.getIamPolicy` `logging.views.list` `logging.views.update` `observability.scopes.get` `resourcemanager.projects.get` `resourcemanager.projects.list` |
| #### Log Field Accessor (`roles/logging.fieldAccessor`) Ability to read restricted fields in a log bucket. Lowest-level resources where you can grant this role: - Project | `logging.fields.access` |
| #### Log Link Accessor (`roles/logging.linkViewer`) Ability to see links for a bucket. | `logging.links.get` `logging.links.list` |
| #### SQL Alert Writer ^Beta^ (`roles/logging.sqlAlertWriter`) Ability to write SQL Alerts. | `logging.sqlAlerts.*` - `logging.sqlAlerts.create` - `logging.sqlAlerts.update` |
| #### Logs View Accessor (`roles/logging.viewAccessor`) Ability to read logs in a view. Lowest-level resources where you can grant this role: - View | `logging.logEntries.download` `logging.views.access` `logging.views.listLogs` `logging.views.listResourceKeys` `logging.views.listResourceValues` |

### Service agent roles


Service agent roles should only be granted to [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt).

| Role | Permissions |
|---|---|
| #### Cloud Logging Service Agent (`roles/logging.serviceAgent`) Grants a Cloud Logging Service Account the ability to create and link datasets. > [!WARNING] > **Warning:** Do not grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). | `bigquery.datasets.create` `bigquery.datasets.get` `bigquery.datasets.link` |

## Cloud Logging permissions

| Permission | Included in roles |
|---|---|
| #### `logging.buckets.copyLogEntries` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) |
| #### `logging.buckets.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Apigee Core Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.coreServiceAgent) (`roles/apigee.coreServiceAgent`) - [Apigee Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.serviceAgent) (`roles/apigee.serviceAgent`) - [Cloud Build Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.serviceAgent) (`roles/cloudbuild.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Firebase Telemetry Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasetelemetry.md.txt#firebasetelemetry.serviceAgent) (`roles/firebasetelemetry.serviceAgent`) - [GKE Hub Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.serviceAgent) (`roles/gkehub.serviceAgent`) |
| #### `logging.buckets.createTagBinding` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.buckets.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.buckets.deleteTagBinding` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.buckets.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Apigee Core Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.coreServiceAgent) (`roles/apigee.coreServiceAgent`) - [Apigee Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.serviceAgent) (`roles/apigee.serviceAgent`) - [Cloud Build Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.serviceAgent) (`roles/cloudbuild.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Firebase Telemetry Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasetelemetry.md.txt#firebasetelemetry.serviceAgent) (`roles/firebasetelemetry.serviceAgent`) - [GKE Hub Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.serviceAgent) (`roles/gkehub.serviceAgent`) |
| #### `logging.buckets.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Apigee Core Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.coreServiceAgent) (`roles/apigee.coreServiceAgent`) - [Apigee Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.serviceAgent) (`roles/apigee.serviceAgent`) - [Audit Manager Auditing Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.serviceAgent) (`roles/auditmanager.serviceAgent`) - [Cloud Build Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.serviceAgent) (`roles/cloudbuild.serviceAgent`) - [Cloud Security Compliance Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.serviceAgent) (`roles/cloudsecuritycompliance.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Firebase Telemetry Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasetelemetry.md.txt#firebasetelemetry.serviceAgent) (`roles/firebasetelemetry.serviceAgent`) - [GKE Hub Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.serviceAgent) (`roles/gkehub.serviceAgent`) |
| #### `logging.buckets.listEffectiveTags` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [Tag Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagViewer) (`roles/resourcemanager.tagViewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.buckets.listTagBindings` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [Tag Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagViewer) (`roles/resourcemanager.tagViewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.buckets.undelete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.buckets.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Firebase Telemetry Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasetelemetry.md.txt#firebasetelemetry.serviceAgent) (`roles/firebasetelemetry.serviceAgent`) - [GKE Hub Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.serviceAgent) (`roles/gkehub.serviceAgent`) |
| #### `logging.buckets.write` | [Logs Bucket Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.bucketWriter) (`roles/logging.bucketWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Build Logging Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.loggingServiceAgent) (`roles/cloudbuild.loggingServiceAgent`) |
| #### `logging.exclusions.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [GKE Hub Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.serviceAgent) (`roles/gkehub.serviceAgent`) |
| #### `logging.exclusions.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [GKE Hub Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.serviceAgent) (`roles/gkehub.serviceAgent`) |
| #### `logging.exclusions.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [VPC Service Controls Troubleshooter Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.vpcScTroubleshooterViewer) (`roles/accesscontextmanager.vpcScTroubleshooterViewer`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [GKE Hub Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.serviceAgent) (`roles/gkehub.serviceAgent`) |
| #### `logging.exclusions.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [VPC Service Controls Troubleshooter Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.vpcScTroubleshooterViewer) (`roles/accesscontextmanager.vpcScTroubleshooterViewer`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [GKE Hub Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.serviceAgent) (`roles/gkehub.serviceAgent`) |
| #### `logging.exclusions.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [GKE Hub Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.serviceAgent) (`roles/gkehub.serviceAgent`) |
| #### `logging.fields.access` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Log Field Accessor](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.fieldAccessor) (`roles/logging.fieldAccessor`) |
| #### `logging.links.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Vertex AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.serviceAgent) (`roles/aiplatform.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.links.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Vertex AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.serviceAgent) (`roles/aiplatform.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.links.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Log Link Accessor](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.linkViewer) (`roles/logging.linkViewer`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Vertex AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.serviceAgent) (`roles/aiplatform.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.links.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Log Link Accessor](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.linkViewer) (`roles/logging.linkViewer`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Vertex AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.serviceAgent) (`roles/aiplatform.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Monitoring Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/monitoring.md.txt#monitoring.notificationServiceAgent) (`roles/monitoring.notificationServiceAgent`) |
| #### `logging.locations.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.locations.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.logEntries.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Cloud Build Service Account](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.builds.builder) (`roles/cloudbuild.builds.builder`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Logs Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.logWriter) (`roles/logging.logWriter`) [Cloud Run Builder](https://docs.cloud.google.com/iam/docs/roles-permissions/run.md.txt#run.builder) (`roles/run.builder`) [Cloud Deploy Runner](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddeploy.md.txt#clouddeploy.jobRunner) (`roles/clouddeploy.jobRunner`) [Composer Worker](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.worker) (`roles/composer.worker`) [Confidential GKE Workload User](https://docs.cloud.google.com/iam/docs/roles-permissions/confidentialcomputing.md.txt#confidentialcomputing.gkeWorkloadUser) (`roles/confidentialcomputing.gkeWorkloadUser`) [Confidential Space Workload User](https://docs.cloud.google.com/iam/docs/roles-permissions/confidentialcomputing.md.txt#confidentialcomputing.workloadUser) (`roles/confidentialcomputing.workloadUser`) [Cloud Infrastructure Manager Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/config.md.txt#config.agent) (`roles/config.agent`) [Kubernetes Engine Default Node Service Account](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.defaultNodeServiceAccount) (`roles/container.defaultNodeServiceAccount`) [Dataflow Worker](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.worker) (`roles/dataflow.worker`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Dataproc Worker](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.worker) (`roles/dataproc.worker`) [Developer Connect Insights Config Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/developerconnect.md.txt#developerconnect.insightsAgent) (`roles/developerconnect.insightsAgent`) [Firebase App Hosting Compute Runner](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseapphosting.md.txt#firebaseapphosting.computeRunner) (`roles/firebaseapphosting.computeRunner`) [Anthos Multi-cloud Telemetry Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/gkemulticloud.md.txt#gkemulticloud.telemetryWriter) (`roles/gkemulticloud.telemetryWriter`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Storage Transfer Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/storagetransfer.md.txt#storagetransfer.transferAgent) (`roles/storagetransfer.transferAgent`) [Cloud Telemetry Logs Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/telemetry.md.txt#telemetry.logsWriter) (`roles/telemetry.logsWriter`) [Cloud Telemetry Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/telemetry.md.txt#telemetry.writer) (`roles/telemetry.writer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Vertex AI Agent Sandbox Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.agentSandboxServiceAgent) (`roles/aiplatform.agentSandboxServiceAgent`) - [Vertex AI Custom Code Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.customCodeServiceAgent) (`roles/aiplatform.customCodeServiceAgent`) - [Vertex AI Extension Custom Code Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.extensionCustomCodeServiceAgent) (`roles/aiplatform.extensionCustomCodeServiceAgent`) - [Vertex AI Extension Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.extensionServiceAgent) (`roles/aiplatform.extensionServiceAgent`) - [Vertex AI Notebook Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.notebookServiceAgent) (`roles/aiplatform.notebookServiceAgent`) - [Vertex AI RAG Data Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.ragServiceAgent) (`roles/aiplatform.ragServiceAgent`) - [Vertex AI Reasoning Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.reasoningEngineServiceAgent) (`roles/aiplatform.reasoningEngineServiceAgent`) - [Vertex AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.serviceAgent) (`roles/aiplatform.serviceAgent`) - [Vertex AI Telemetry Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.telemetryServiceAgent) (`roles/aiplatform.telemetryServiceAgent`) - [FlowService Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/flow.md.txt#aisandbox.serviceAgent) (`roles/aisandbox.serviceAgent`) - [Anthos Service Mesh Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#anthosservicemesh.serviceAgent) (`roles/anthosservicemesh.serviceAgent`) - [Apigee Core Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.coreServiceAgent) (`roles/apigee.coreServiceAgent`) - [Apigee Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.serviceAgent) (`roles/apigee.serviceAgent`) - [App Engine flexible environment Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/appengineflex.md.txt#appengineflex.serviceAgent) (`roles/appengineflex.serviceAgent`) - [Recommendations AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/automlrecommendations.md.txt#automlrecommendations.serviceAgent) (`roles/automlrecommendations.serviceAgent`) - [BigQuery Connection Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/bigqueryconnection.md.txt#bigqueryconnection.serviceAgent) (`roles/bigqueryconnection.serviceAgent`) - [BigQuery Data Transfer Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquerydatatransfer.md.txt#bigquerydatatransfer.serviceAgent) (`roles/bigquerydatatransfer.serviceAgent`) - [Customer Engagement Suite Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.serviceAgent) (`roles/ces.serviceAgent`) - [Chronicle Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.serviceAgent) (`roles/chronicle.serviceAgent`) - [Gemini for Google Cloud Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudaicompanion.md.txt#cloudaicompanion.serviceAgent) (`roles/cloudaicompanion.serviceAgent`) - [Cloud Build Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.serviceAgent) (`roles/cloudbuild.serviceAgent`) - [Infrastructure Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudconfig.md.txt#cloudconfig.serviceAgent) (`roles/cloudconfig.serviceAgent`) - [Cloud Deploy Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddeploy.md.txt#clouddeploy.serviceAgent) (`roles/clouddeploy.serviceAgent`) - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud IoT Core Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudiot.md.txt#cloudiot.serviceAgent) (`roles/cloudiot.serviceAgent`) - [Cloud Scheduler Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudscheduler.md.txt#cloudscheduler.serviceAgent) (`roles/cloudscheduler.serviceAgent`) - [Cloud Tasks Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtasks.md.txt#cloudtasks.serviceAgent) (`roles/cloudtasks.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Compute Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.serviceAgent) (`roles/compute.serviceAgent`) - [Kubernetes Engine Default Node Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.defaultNodeServiceAgent) (`roles/container.defaultNodeServiceAgent`) - [\[Deprecated\] Kubernetes Engine Node Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.nodeServiceAgent) (`roles/container.nodeServiceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Database Insights Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/databaseinsights.md.txt#databaseinsights.serviceAgent) (`roles/databaseinsights.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [Cloud Dataplex Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.serviceAgent) (`roles/dataplex.serviceAgent`) - [Dataproc Resource Manager Node Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataprocrm.md.txt#dataprocrm.nodeServiceAgent) (`roles/dataprocrm.nodeServiceAgent`) - [Dialogflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.serviceAgent) (`roles/dialogflow.serviceAgent`) - [Discovery Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.serviceAgent) (`roles/discoveryengine.serviceAgent`) - [Edge Container Cluster Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/edgecontainer.md.txt#edgecontainer.clusterServiceAgent) (`roles/edgecontainer.clusterServiceAgent`) - [Firebase AI Logic Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseml.md.txt#firebaseml.serviceAgent) (`roles/firebaseml.serviceAgent`) - [Firebase Telemetry Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasetelemetry.md.txt#firebasetelemetry.serviceAgent) (`roles/firebasetelemetry.serviceAgent`) - [Flow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/flow.md.txt#flow.serviceAgent) (`roles/flow.serviceAgent`) - [Anthos Multi-Cloud Container Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkemulticloud.md.txt#gkemulticloud.containerServiceAgent) (`roles/gkemulticloud.containerServiceAgent`) - [Cluster Director Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.serviceAgent) (`roles/hypercomputecluster.serviceAgent`) - [Mesh Managed Control Plane Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/meshcontrolplane.md.txt#meshcontrolplane.serviceAgent) (`roles/meshcontrolplane.serviceAgent`) - [Mesh Data Plane Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#meshdataplane.serviceAgent) (`roles/meshdataplane.serviceAgent`) - [AI Platform Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/ml.md.txt#ml.serviceAgent) (`roles/ml.serviceAgent`) - [RMA Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/rapidmigrationassessment.md.txt#rapidmigrationassessment.serviceAgent) (`roles/rapidmigrationassessment.serviceAgent`) - [Retail Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/retail.md.txt#retail.serviceAgent) (`roles/retail.serviceAgent`) - [Cloud Spanner API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/spanner.md.txt#spanner.serviceAgent) (`roles/spanner.serviceAgent`) - [Cloud Vision AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/visionai.md.txt#visionai.serviceAgent) (`roles/visionai.serviceAgent`) - [Serverless VPC Access Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/vpcaccess.md.txt#vpcaccess.serviceAgent) (`roles/vpcaccess.serviceAgent`) |
| #### `logging.logEntries.download` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Firebase Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.admin) (`roles/firebase.admin`) [Firebase Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.editor) (`roles/firebase.editor`) [Firebase Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.viewer) (`roles/firebase.viewer`) [Firebase Crashlytics Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasecrash.md.txt#firebasecrashlytics.admin) (`roles/firebasecrashlytics.admin`) [Firebase Crashlytics Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasecrash.md.txt#firebasecrashlytics.viewer) (`roles/firebasecrashlytics.viewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Firebase Quality Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.qualityAdmin) (`roles/firebase.qualityAdmin`) [Firebase Quality Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.qualityViewer) (`roles/firebase.qualityViewer`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs View Accessor](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewAccessor) (`roles/logging.viewAccessor`) |
| #### `logging.logEntries.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Billing Account Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/billing.md.txt#billing.admin) (`roles/billing.admin`) [Cloud Build Service Account](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.builds.builder) (`roles/cloudbuild.builds.builder`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Firebase Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.admin) (`roles/firebase.admin`) [Firebase Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.editor) (`roles/firebase.editor`) [Firebase Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.viewer) (`roles/firebase.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [VPC Service Controls Troubleshooter Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.vpcScTroubleshooterViewer) (`roles/accesscontextmanager.vpcScTroubleshooterViewer`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Composer Worker](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.worker) (`roles/composer.worker`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Firebase Develop Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.developAdmin) (`roles/firebase.developAdmin`) [Firebase Develop Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.developViewer) (`roles/firebase.developViewer`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Vertex AI Telemetry Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.telemetryServiceAgent) (`roles/aiplatform.telemetryServiceAgent`) - [Cloud Build Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.serviceAgent) (`roles/cloudbuild.serviceAgent`) - [Database Insights Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/databaseinsights.md.txt#databaseinsights.serviceAgent) (`roles/databaseinsights.serviceAgent`) - [Database Migration Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datamigration.md.txt#datamigration.serviceAgent) (`roles/datamigration.serviceAgent`) - [Cluster Director Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.serviceAgent) (`roles/hypercomputecluster.serviceAgent`) - [Secured Landing Zone Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securedlandingzone.md.txt#securedlandingzone.serviceAgent) (`roles/securedlandingzone.serviceAgent`) - [Security Center Control Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.controlServiceAgent) (`roles/securitycenter.controlServiceAgent`) - [Security Center Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.serviceAgent) (`roles/securitycenter.serviceAgent`) |
| #### `logging.logEntries.route` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Logs Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.logWriter) (`roles/logging.logWriter`) [Composer Worker](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.worker) (`roles/composer.worker`) [Dataflow Worker](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.worker) (`roles/dataflow.worker`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Dataproc Worker](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.worker) (`roles/dataproc.worker`) [Firebase App Hosting Compute Runner](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseapphosting.md.txt#firebaseapphosting.computeRunner) (`roles/firebaseapphosting.computeRunner`) [Anthos Multi-cloud Telemetry Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/gkemulticloud.md.txt#gkemulticloud.telemetryWriter) (`roles/gkemulticloud.telemetryWriter`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Vertex AI Agent Sandbox Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.agentSandboxServiceAgent) (`roles/aiplatform.agentSandboxServiceAgent`) - [Vertex AI Custom Code Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.customCodeServiceAgent) (`roles/aiplatform.customCodeServiceAgent`) - [Vertex AI Extension Custom Code Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.extensionCustomCodeServiceAgent) (`roles/aiplatform.extensionCustomCodeServiceAgent`) - [Vertex AI Extension Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.extensionServiceAgent) (`roles/aiplatform.extensionServiceAgent`) - [Vertex AI Notebook Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.notebookServiceAgent) (`roles/aiplatform.notebookServiceAgent`) - [Vertex AI RAG Data Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.ragServiceAgent) (`roles/aiplatform.ragServiceAgent`) - [Vertex AI Reasoning Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.reasoningEngineServiceAgent) (`roles/aiplatform.reasoningEngineServiceAgent`) - [Vertex AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.serviceAgent) (`roles/aiplatform.serviceAgent`) - [Vertex AI Telemetry Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.telemetryServiceAgent) (`roles/aiplatform.telemetryServiceAgent`) - [FlowService Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/flow.md.txt#aisandbox.serviceAgent) (`roles/aisandbox.serviceAgent`) - [Recommendations AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/automlrecommendations.md.txt#automlrecommendations.serviceAgent) (`roles/automlrecommendations.serviceAgent`) - [BigQuery Connection Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/bigqueryconnection.md.txt#bigqueryconnection.serviceAgent) (`roles/bigqueryconnection.serviceAgent`) - [BigQuery Data Transfer Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquerydatatransfer.md.txt#bigquerydatatransfer.serviceAgent) (`roles/bigquerydatatransfer.serviceAgent`) - [Customer Engagement Suite Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.serviceAgent) (`roles/ces.serviceAgent`) - [Chronicle Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.serviceAgent) (`roles/chronicle.serviceAgent`) - [Gemini for Google Cloud Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudaicompanion.md.txt#cloudaicompanion.serviceAgent) (`roles/cloudaicompanion.serviceAgent`) - [Infrastructure Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudconfig.md.txt#cloudconfig.serviceAgent) (`roles/cloudconfig.serviceAgent`) - [Cloud IoT Core Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudiot.md.txt#cloudiot.serviceAgent) (`roles/cloudiot.serviceAgent`) - [Cloud Scheduler Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudscheduler.md.txt#cloudscheduler.serviceAgent) (`roles/cloudscheduler.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Database Insights Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/databaseinsights.md.txt#databaseinsights.serviceAgent) (`roles/databaseinsights.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Dataplex Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.serviceAgent) (`roles/dataplex.serviceAgent`) - [Dataproc Resource Manager Node Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataprocrm.md.txt#dataprocrm.nodeServiceAgent) (`roles/dataprocrm.nodeServiceAgent`) - [Dialogflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.serviceAgent) (`roles/dialogflow.serviceAgent`) - [Firebase AI Logic Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseml.md.txt#firebaseml.serviceAgent) (`roles/firebaseml.serviceAgent`) - [Firebase Telemetry Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasetelemetry.md.txt#firebasetelemetry.serviceAgent) (`roles/firebasetelemetry.serviceAgent`) - [Flow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/flow.md.txt#flow.serviceAgent) (`roles/flow.serviceAgent`) - [Anthos Multi-Cloud Container Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkemulticloud.md.txt#gkemulticloud.containerServiceAgent) (`roles/gkemulticloud.containerServiceAgent`) - [Cluster Director Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.serviceAgent) (`roles/hypercomputecluster.serviceAgent`) - [Mesh Managed Control Plane Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/meshcontrolplane.md.txt#meshcontrolplane.serviceAgent) (`roles/meshcontrolplane.serviceAgent`) - [Mesh Data Plane Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#meshdataplane.serviceAgent) (`roles/meshdataplane.serviceAgent`) - [AI Platform Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/ml.md.txt#ml.serviceAgent) (`roles/ml.serviceAgent`) - [Retail Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/retail.md.txt#retail.serviceAgent) (`roles/retail.serviceAgent`) |
| #### `logging.logMetrics.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [App Engine flexible environment Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/appengineflex.md.txt#appengineflex.serviceAgent) (`roles/appengineflex.serviceAgent`) - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Serverless VPC Access Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/vpcaccess.md.txt#vpcaccess.serviceAgent) (`roles/vpcaccess.serviceAgent`) |
| #### `logging.logMetrics.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [App Engine flexible environment Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/appengineflex.md.txt#appengineflex.serviceAgent) (`roles/appengineflex.serviceAgent`) - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Serverless VPC Access Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/vpcaccess.md.txt#vpcaccess.serviceAgent) (`roles/vpcaccess.serviceAgent`) |
| #### `logging.logMetrics.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [VPC Service Controls Troubleshooter Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.vpcScTroubleshooterViewer) (`roles/accesscontextmanager.vpcScTroubleshooterViewer`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [App Engine flexible environment Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/appengineflex.md.txt#appengineflex.serviceAgent) (`roles/appengineflex.serviceAgent`) - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Serverless VPC Access Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/vpcaccess.md.txt#vpcaccess.serviceAgent) (`roles/vpcaccess.serviceAgent`) |
| #### `logging.logMetrics.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [VPC Service Controls Troubleshooter Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.vpcScTroubleshooterViewer) (`roles/accesscontextmanager.vpcScTroubleshooterViewer`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.logMetrics.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [App Engine flexible environment Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/appengineflex.md.txt#appengineflex.serviceAgent) (`roles/appengineflex.serviceAgent`) - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Serverless VPC Access Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/vpcaccess.md.txt#vpcaccess.serviceAgent) (`roles/vpcaccess.serviceAgent`) |
| #### `logging.logScopes.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Observability Scopes Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/observability.md.txt#observability.scopesEditor) (`roles/observability.scopesEditor`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.logScopes.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Observability Scopes Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/observability.md.txt#observability.scopesEditor) (`roles/observability.scopesEditor`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.logScopes.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Observability Scopes Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/observability.md.txt#observability.scopesEditor) (`roles/observability.scopesEditor`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.logScopes.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Observability Scopes Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/observability.md.txt#observability.scopesEditor) (`roles/observability.scopesEditor`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.logScopes.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Observability Scopes Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/observability.md.txt#observability.scopesEditor) (`roles/observability.scopesEditor`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.logServiceIndexes.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Billing Account Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/billing.md.txt#billing.admin) (`roles/billing.admin`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [VPC Service Controls Troubleshooter Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.vpcScTroubleshooterViewer) (`roles/accesscontextmanager.vpcScTroubleshooterViewer`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Database Migration Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datamigration.md.txt#datamigration.serviceAgent) (`roles/datamigration.serviceAgent`) |
| #### `logging.logServices.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Billing Account Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/billing.md.txt#billing.admin) (`roles/billing.admin`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [VPC Service Controls Troubleshooter Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.vpcScTroubleshooterViewer) (`roles/accesscontextmanager.vpcScTroubleshooterViewer`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Database Migration Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datamigration.md.txt#datamigration.serviceAgent) (`roles/datamigration.serviceAgent`) |
| #### `logging.logs.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) |
| #### `logging.logs.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Billing Account Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/billing.md.txt#billing.admin) (`roles/billing.admin`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [VPC Service Controls Troubleshooter Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.vpcScTroubleshooterViewer) (`roles/accesscontextmanager.vpcScTroubleshooterViewer`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Database Migration Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datamigration.md.txt#datamigration.serviceAgent) (`roles/datamigration.serviceAgent`) |
| #### `logging.notificationRules.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Error Reporting Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/errorreporting.md.txt#errorreporting.admin) (`roles/errorreporting.admin`) [Error Reporting User](https://docs.cloud.google.com/iam/docs/roles-permissions/errorreporting.md.txt#errorreporting.user) (`roles/errorreporting.user`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.notificationRules.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Error Reporting Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/errorreporting.md.txt#errorreporting.admin) (`roles/errorreporting.admin`) [Error Reporting User](https://docs.cloud.google.com/iam/docs/roles-permissions/errorreporting.md.txt#errorreporting.user) (`roles/errorreporting.user`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.notificationRules.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Error Reporting Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/errorreporting.md.txt#errorreporting.admin) (`roles/errorreporting.admin`) [Error Reporting User](https://docs.cloud.google.com/iam/docs/roles-permissions/errorreporting.md.txt#errorreporting.user) (`roles/errorreporting.user`) [Error Reporting Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/errorreporting.md.txt#errorreporting.viewer) (`roles/errorreporting.viewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.notificationRules.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Error Reporting Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/errorreporting.md.txt#errorreporting.admin) (`roles/errorreporting.admin`) [Error Reporting User](https://docs.cloud.google.com/iam/docs/roles-permissions/errorreporting.md.txt#errorreporting.user) (`roles/errorreporting.user`) [Error Reporting Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/errorreporting.md.txt#errorreporting.viewer) (`roles/errorreporting.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.notificationRules.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Error Reporting Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/errorreporting.md.txt#errorreporting.admin) (`roles/errorreporting.admin`) [Error Reporting User](https://docs.cloud.google.com/iam/docs/roles-permissions/errorreporting.md.txt#errorreporting.user) (`roles/errorreporting.user`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.operations.cancel` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.operations.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Vertex AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.serviceAgent) (`roles/aiplatform.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.operations.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Vertex AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.serviceAgent) (`roles/aiplatform.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.privateLogEntries.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Billing Account Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/billing.md.txt#billing.admin) (`roles/billing.admin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) |
| #### `logging.queries.deleteShared` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) |
| #### `logging.queries.getShared` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Observability Analytics User](https://docs.cloud.google.com/iam/docs/roles-permissions/observability.md.txt#observability.analyticsUser) (`roles/observability.analyticsUser`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) |
| #### `logging.queries.listShared` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Observability Analytics User](https://docs.cloud.google.com/iam/docs/roles-permissions/observability.md.txt#observability.analyticsUser) (`roles/observability.analyticsUser`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) |
| #### `logging.queries.share` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) |
| #### `logging.queries.updateShared` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) |
| #### `logging.queries.usePrivate` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Observability Analytics User](https://docs.cloud.google.com/iam/docs/roles-permissions/observability.md.txt#observability.analyticsUser) (`roles/observability.analyticsUser`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) |
| #### `logging.settings.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.settings.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Assured Workloads Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.admin) (`roles/assuredworkloads.admin`) [Assured Workloads Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.editor) (`roles/assuredworkloads.editor`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Security Compliance Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.serviceAgent) (`roles/cloudsecuritycompliance.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.sinks.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Firebase Telemetry Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasetelemetry.md.txt#firebasetelemetry.serviceAgent) (`roles/firebasetelemetry.serviceAgent`) - [GKE Hub Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.serviceAgent) (`roles/gkehub.serviceAgent`) - [Cluster Director Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.serviceAgent) (`roles/hypercomputecluster.serviceAgent`) - [KubeRun Events Control Plane Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/kuberun.md.txt#kuberun.eventsControlPlaneServiceAgent) (`roles/kuberun.eventsControlPlaneServiceAgent`) |
| #### `logging.sinks.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Firebase Telemetry Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasetelemetry.md.txt#firebasetelemetry.serviceAgent) (`roles/firebasetelemetry.serviceAgent`) - [GKE Hub Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.serviceAgent) (`roles/gkehub.serviceAgent`) - [Cluster Director Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.serviceAgent) (`roles/hypercomputecluster.serviceAgent`) - [KubeRun Events Control Plane Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/kuberun.md.txt#kuberun.eventsControlPlaneServiceAgent) (`roles/kuberun.eventsControlPlaneServiceAgent`) |
| #### `logging.sinks.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [VPC Service Controls Troubleshooter Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.vpcScTroubleshooterViewer) (`roles/accesscontextmanager.vpcScTroubleshooterViewer`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Firebase Telemetry Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasetelemetry.md.txt#firebasetelemetry.serviceAgent) (`roles/firebasetelemetry.serviceAgent`) - [GKE Hub Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.serviceAgent) (`roles/gkehub.serviceAgent`) - [Cluster Director Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.serviceAgent) (`roles/hypercomputecluster.serviceAgent`) - [KubeRun Events Control Plane Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/kuberun.md.txt#kuberun.eventsControlPlaneServiceAgent) (`roles/kuberun.eventsControlPlaneServiceAgent`) |
| #### `logging.sinks.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [VPC Service Controls Troubleshooter Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.vpcScTroubleshooterViewer) (`roles/accesscontextmanager.vpcScTroubleshooterViewer`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Firebase Telemetry Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasetelemetry.md.txt#firebasetelemetry.serviceAgent) (`roles/firebasetelemetry.serviceAgent`) - [GKE Hub Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.serviceAgent) (`roles/gkehub.serviceAgent`) - [Cluster Director Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.serviceAgent) (`roles/hypercomputecluster.serviceAgent`) |
| #### `logging.sinks.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Firebase Telemetry Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasetelemetry.md.txt#firebasetelemetry.serviceAgent) (`roles/firebasetelemetry.serviceAgent`) - [GKE Hub Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.serviceAgent) (`roles/gkehub.serviceAgent`) |
| #### `logging.sqlAlerts.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [SQL Alert Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.sqlAlertWriter) (`roles/logging.sqlAlertWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.sqlAlerts.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [SQL Alert Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.sqlAlertWriter) (`roles/logging.sqlAlertWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.usage.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [VPC Service Controls Troubleshooter Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.vpcScTroubleshooterViewer) (`roles/accesscontextmanager.vpcScTroubleshooterViewer`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) |
| #### `logging.views.access` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Cloud Build Service Account](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.builds.builder) (`roles/cloudbuild.builds.builder`) [Firebase Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.admin) (`roles/firebase.admin`) [Firebase Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.editor) (`roles/firebase.editor`) [Firebase Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.viewer) (`roles/firebase.viewer`) [Firebase Crashlytics Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasecrash.md.txt#firebasecrashlytics.admin) (`roles/firebasecrashlytics.admin`) [Firebase Crashlytics Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasecrash.md.txt#firebasecrashlytics.viewer) (`roles/firebasecrashlytics.viewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Composer Worker](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.worker) (`roles/composer.worker`) [Firebase Quality Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.qualityAdmin) (`roles/firebase.qualityAdmin`) [Firebase Quality Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.qualityViewer) (`roles/firebase.qualityViewer`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs View Accessor](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewAccessor) (`roles/logging.viewAccessor`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Vertex AI Custom Code Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.customCodeServiceAgent) (`roles/aiplatform.customCodeServiceAgent`) - [Vertex AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.serviceAgent) (`roles/aiplatform.serviceAgent`) - [Cloud Build Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.serviceAgent) (`roles/cloudbuild.serviceAgent`) |
| #### `logging.views.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Apigee Core Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.coreServiceAgent) (`roles/apigee.coreServiceAgent`) - [Apigee Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.serviceAgent) (`roles/apigee.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [GKE Hub Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.serviceAgent) (`roles/gkehub.serviceAgent`) |
| #### `logging.views.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.views.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Vertex AI Custom Code Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.customCodeServiceAgent) (`roles/aiplatform.customCodeServiceAgent`) - [Vertex AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.serviceAgent) (`roles/aiplatform.serviceAgent`) - [Apigee Core Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.coreServiceAgent) (`roles/apigee.coreServiceAgent`) - [Apigee Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.serviceAgent) (`roles/apigee.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [GKE Hub Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.serviceAgent) (`roles/gkehub.serviceAgent`) |
| #### `logging.views.getIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `logging.views.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Apigee Core Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.coreServiceAgent) (`roles/apigee.coreServiceAgent`) - [Apigee Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.serviceAgent) (`roles/apigee.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [GKE Hub Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.serviceAgent) (`roles/gkehub.serviceAgent`) |
| #### `logging.views.listLogs` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Firebase Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.admin) (`roles/firebase.admin`) [Firebase Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.editor) (`roles/firebase.editor`) [Firebase Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.viewer) (`roles/firebase.viewer`) [Firebase Crashlytics Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasecrash.md.txt#firebasecrashlytics.admin) (`roles/firebasecrashlytics.admin`) [Firebase Crashlytics Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasecrash.md.txt#firebasecrashlytics.viewer) (`roles/firebasecrashlytics.viewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Firebase Quality Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.qualityAdmin) (`roles/firebase.qualityAdmin`) [Firebase Quality Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.qualityViewer) (`roles/firebase.qualityViewer`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs View Accessor](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewAccessor) (`roles/logging.viewAccessor`) |
| #### `logging.views.listResourceKeys` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Firebase Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.admin) (`roles/firebase.admin`) [Firebase Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.editor) (`roles/firebase.editor`) [Firebase Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.viewer) (`roles/firebase.viewer`) [Firebase Crashlytics Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasecrash.md.txt#firebasecrashlytics.admin) (`roles/firebasecrashlytics.admin`) [Firebase Crashlytics Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasecrash.md.txt#firebasecrashlytics.viewer) (`roles/firebasecrashlytics.viewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Firebase Quality Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.qualityAdmin) (`roles/firebase.qualityAdmin`) [Firebase Quality Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.qualityViewer) (`roles/firebase.qualityViewer`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs View Accessor](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewAccessor) (`roles/logging.viewAccessor`) |
| #### `logging.views.listResourceValues` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Firebase Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.admin) (`roles/firebase.admin`) [Firebase Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.editor) (`roles/firebase.editor`) [Firebase Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.viewer) (`roles/firebase.viewer`) [Firebase Crashlytics Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasecrash.md.txt#firebasecrashlytics.admin) (`roles/firebasecrashlytics.admin`) [Firebase Crashlytics Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasecrash.md.txt#firebasecrashlytics.viewer) (`roles/firebasecrashlytics.viewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Firebase Quality Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.qualityAdmin) (`roles/firebase.qualityAdmin`) [Firebase Quality Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.qualityViewer) (`roles/firebase.qualityViewer`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Logs View Accessor](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewAccessor) (`roles/logging.viewAccessor`) |
| #### `logging.views.setIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) |
| #### `logging.views.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [GKE Hub Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.serviceAgent) (`roles/gkehub.serviceAgent`) |