Cloud Monitoring roles and permissions

This page lists the IAM roles and permissions for Cloud Monitoring. To search through all roles and permissions, see the role and permission index.

Cloud Monitoring roles

Role	Permissions
Monitoring Admin (roles/monitoring.admin) Provides full access to Cloud Monitoring. Lowest-level resources where you can grant this role: Project	cloudnotifications.activities.list monitoring.* monitoring.alertPolicies.create monitoring.alertPolicies.createTagBinding monitoring.alertPolicies.delete monitoring.alertPolicies.deleteTagBinding monitoring.alertPolicies.get monitoring.alertPolicies.list monitoring.alertPolicies.listEffectiveTags monitoring.alertPolicies.listTagBindings monitoring.alertPolicies.update monitoring.alerts.get monitoring.alerts.list monitoring.dashboards.create monitoring.dashboards.createTagBinding monitoring.dashboards.delete monitoring.dashboards.deleteTagBinding monitoring.dashboards.get monitoring.dashboards.list monitoring.dashboards.listEffectiveTags monitoring.dashboards.listTagBindings monitoring.dashboards.update monitoring.groups.create monitoring.groups.delete monitoring.groups.get monitoring.groups.list monitoring.groups.update monitoring.metricDescriptors.create monitoring.metricDescriptors.delete monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.metricsScopes.link monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list monitoring.notificationChannelDescriptors.get monitoring.notificationChannelDescriptors.list monitoring.notificationChannels.create monitoring.notificationChannels.delete monitoring.notificationChannels.get monitoring.notificationChannels.getVerificationCode monitoring.notificationChannels.list monitoring.notificationChannels.sendVerificationCode monitoring.notificationChannels.update monitoring.notificationChannels.verify monitoring.services.create monitoring.services.delete monitoring.services.get monitoring.services.list monitoring.services.update monitoring.slos.create monitoring.slos.delete monitoring.slos.get monitoring.slos.list monitoring.slos.update monitoring.snoozes.create monitoring.snoozes.get monitoring.snoozes.list monitoring.snoozes.update monitoring.timeSeries.create monitoring.timeSeries.list monitoring.uptimeCheckConfigs.create monitoring.uptimeCheckConfigs.delete monitoring.uptimeCheckConfigs.get monitoring.uptimeCheckConfigs.list monitoring.uptimeCheckConfigs.update opsconfigmonitoring.* opsconfigmonitoring.resourceMetadata.list opsconfigmonitoring.resourceMetadata.write resourcemanager.projects.get resourcemanager.projects.list serviceusage.consumerpolicy.* serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.consumerpolicy.update serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.services.enable serviceusage.services.get serviceusage.values.test stackdriver.* stackdriver.projects.edit stackdriver.projects.get stackdriver.resourceMetadata.list stackdriver.resourceMetadata.write telemetry.metrics.write
Monitoring Editor (roles/monitoring.editor) Provides full access to information about all monitoring data and configurations. Lowest-level resources where you can grant this role: Project	cloudnotifications.activities.list monitoring.alertPolicies.* monitoring.alertPolicies.create monitoring.alertPolicies.createTagBinding monitoring.alertPolicies.delete monitoring.alertPolicies.deleteTagBinding monitoring.alertPolicies.get monitoring.alertPolicies.list monitoring.alertPolicies.listEffectiveTags monitoring.alertPolicies.listTagBindings monitoring.alertPolicies.update monitoring.alerts.* monitoring.alerts.get monitoring.alerts.list monitoring.dashboards.* monitoring.dashboards.create monitoring.dashboards.createTagBinding monitoring.dashboards.delete monitoring.dashboards.deleteTagBinding monitoring.dashboards.get monitoring.dashboards.list monitoring.dashboards.listEffectiveTags monitoring.dashboards.listTagBindings monitoring.dashboards.update monitoring.groups.* monitoring.groups.create monitoring.groups.delete monitoring.groups.get monitoring.groups.list monitoring.groups.update monitoring.metricDescriptors.* monitoring.metricDescriptors.create monitoring.metricDescriptors.delete monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list monitoring.notificationChannelDescriptors.* monitoring.notificationChannelDescriptors.get monitoring.notificationChannelDescriptors.list monitoring.notificationChannels.create monitoring.notificationChannels.delete monitoring.notificationChannels.get monitoring.notificationChannels.list monitoring.notificationChannels.sendVerificationCode monitoring.notificationChannels.update monitoring.notificationChannels.verify monitoring.services.* monitoring.services.create monitoring.services.delete monitoring.services.get monitoring.services.list monitoring.services.update monitoring.slos.* monitoring.slos.create monitoring.slos.delete monitoring.slos.get monitoring.slos.list monitoring.slos.update monitoring.snoozes.* monitoring.snoozes.create monitoring.snoozes.get monitoring.snoozes.list monitoring.snoozes.update monitoring.timeSeries.* monitoring.timeSeries.create monitoring.timeSeries.list monitoring.uptimeCheckConfigs.* monitoring.uptimeCheckConfigs.create monitoring.uptimeCheckConfigs.delete monitoring.uptimeCheckConfigs.get monitoring.uptimeCheckConfigs.list monitoring.uptimeCheckConfigs.update opsconfigmonitoring.* opsconfigmonitoring.resourceMetadata.list opsconfigmonitoring.resourceMetadata.write resourcemanager.projects.get resourcemanager.projects.list serviceusage.consumerpolicy.* serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.consumerpolicy.update serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.services.enable serviceusage.services.get serviceusage.values.test stackdriver.* stackdriver.projects.edit stackdriver.projects.get stackdriver.resourceMetadata.list stackdriver.resourceMetadata.write telemetry.metrics.write
Monitoring Metric Writer (roles/monitoring.metricWriter) Provides write-only access to metrics. This provides exactly the permissions needed by the Cloud Monitoring agent and other systems that send metrics. Lowest-level resources where you can grant this role: Project	monitoring.metricDescriptors.create monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list monitoring.timeSeries.create telemetry.metrics.write
Monitoring Viewer (roles/monitoring.viewer) Provides read-only access to get and list information about all monitoring data and configurations. Lowest-level resources where you can grant this role: Project	cloudnotifications.activities.list monitoring.alertPolicies.get monitoring.alertPolicies.list monitoring.alertPolicies.listEffectiveTags monitoring.alertPolicies.listTagBindings monitoring.alerts.* monitoring.alerts.get monitoring.alerts.list monitoring.dashboards.get monitoring.dashboards.list monitoring.dashboards.listEffectiveTags monitoring.dashboards.listTagBindings monitoring.groups.get monitoring.groups.list monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list monitoring.notificationChannelDescriptors.* monitoring.notificationChannelDescriptors.get monitoring.notificationChannelDescriptors.list monitoring.notificationChannels.get monitoring.notificationChannels.list monitoring.services.get monitoring.services.list monitoring.slos.get monitoring.slos.list monitoring.snoozes.get monitoring.snoozes.list monitoring.timeSeries.list monitoring.uptimeCheckConfigs.get monitoring.uptimeCheckConfigs.list opsconfigmonitoring.resourceMetadata.list resourcemanager.projects.get resourcemanager.projects.list stackdriver.projects.get stackdriver.resourceMetadata.list
Stackdriver Admin (roles/stackdriver.admin) Admin role for stackdriver	resourcemanager.projects.get resourcemanager.projects.list stackdriver.* stackdriver.projects.edit stackdriver.projects.get stackdriver.resourceMetadata.list stackdriver.resourceMetadata.write
Stackdriver Viewer (roles/stackdriver.viewer) Viewer role for stackdriver	resourcemanager.projects.get resourcemanager.projects.list stackdriver.projects.get stackdriver.resourceMetadata.list
Monitoring AlertPolicy Editor (roles/monitoring.alertPolicyEditor) Read/write access to alerting policies.	monitoring.alertPolicies.* monitoring.alertPolicies.create monitoring.alertPolicies.createTagBinding monitoring.alertPolicies.delete monitoring.alertPolicies.deleteTagBinding monitoring.alertPolicies.get monitoring.alertPolicies.list monitoring.alertPolicies.listEffectiveTags monitoring.alertPolicies.listTagBindings monitoring.alertPolicies.update
Monitoring AlertPolicy Viewer (roles/monitoring.alertPolicyViewer) Read-only access to alerting policies.	monitoring.alertPolicies.get monitoring.alertPolicies.list monitoring.alertPolicies.listEffectiveTags monitoring.alertPolicies.listTagBindings
Monitoring Alert Viewer ^Beta (roles/monitoring.alertViewer) Read access to alerts.	monitoring.alerts.* monitoring.alerts.get monitoring.alerts.list
Monitoring Cloud Console Incident Editor ^Beta (roles/monitoring.cloudConsoleIncidentEditor) Read/write access to incidents from Cloud Console.	monitoring.alerts.* monitoring.alerts.get monitoring.alerts.list
Monitoring Cloud Console Incident Viewer ^Beta (roles/monitoring.cloudConsoleIncidentViewer) Read access to incidents from Cloud Console.	monitoring.alerts.* monitoring.alerts.get monitoring.alerts.list
Monitoring Dashboard Configuration Editor (roles/monitoring.dashboardEditor) Read/write access to dashboard configurations.	monitoring.dashboards.* monitoring.dashboards.create monitoring.dashboards.createTagBinding monitoring.dashboards.delete monitoring.dashboards.deleteTagBinding monitoring.dashboards.get monitoring.dashboards.list monitoring.dashboards.listEffectiveTags monitoring.dashboards.listTagBindings monitoring.dashboards.update
Monitoring Dashboard Configuration Viewer (roles/monitoring.dashboardViewer) Read-only access to dashboard configurations.	monitoring.dashboards.get monitoring.dashboards.list monitoring.dashboards.listEffectiveTags monitoring.dashboards.listTagBindings
Monitoring Metrics Scopes Admin ^Beta (roles/monitoring.metricsScopesAdmin) Access to add and remove monitored projects from metrics scopes.	monitoring.metricsScopes.link resourcemanager.projects.get resourcemanager.projects.list
Monitoring Metrics Scopes Viewer ^Beta (roles/monitoring.metricsScopesViewer) Read-only access to metrics scopes and their monitored projects.	resourcemanager.projects.get resourcemanager.projects.list
Monitoring NotificationChannel Editor ^Beta (roles/monitoring.notificationChannelEditor) Read/write access to notification channels.	monitoring.notificationChannelDescriptors.* monitoring.notificationChannelDescriptors.get monitoring.notificationChannelDescriptors.list monitoring.notificationChannels.create monitoring.notificationChannels.delete monitoring.notificationChannels.get monitoring.notificationChannels.list monitoring.notificationChannels.sendVerificationCode monitoring.notificationChannels.update monitoring.notificationChannels.verify
Monitoring NotificationChannel Viewer ^Beta (roles/monitoring.notificationChannelViewer) Read-only access to notification channels.	monitoring.notificationChannelDescriptors.* monitoring.notificationChannelDescriptors.get monitoring.notificationChannelDescriptors.list monitoring.notificationChannels.get monitoring.notificationChannels.list
Monitoring Services Editor (roles/monitoring.servicesEditor) Read/write access to services.	monitoring.services.* monitoring.services.create monitoring.services.delete monitoring.services.get monitoring.services.list monitoring.services.update monitoring.slos.* monitoring.slos.create monitoring.slos.delete monitoring.slos.get monitoring.slos.list monitoring.slos.update
Monitoring Services Viewer (roles/monitoring.servicesViewer) Read-only access to services.	monitoring.services.get monitoring.services.list monitoring.slos.get monitoring.slos.list
Monitoring Snooze Editor (roles/monitoring.snoozeEditor)	monitoring.snoozes.* monitoring.snoozes.create monitoring.snoozes.get monitoring.snoozes.list monitoring.snoozes.update
Monitoring Snooze Viewer (roles/monitoring.snoozeViewer)	monitoring.snoozes.get monitoring.snoozes.list
Monitoring Uptime Check Configuration Editor ^Beta (roles/monitoring.uptimeCheckConfigEditor) Read/write access to uptime check configurations.	monitoring.uptimeCheckConfigs.* monitoring.uptimeCheckConfigs.create monitoring.uptimeCheckConfigs.delete monitoring.uptimeCheckConfigs.get monitoring.uptimeCheckConfigs.list monitoring.uptimeCheckConfigs.update
Monitoring Uptime Check Configuration Viewer ^Beta (roles/monitoring.uptimeCheckConfigViewer) Read-only access to uptime check configurations.	monitoring.uptimeCheckConfigs.get monitoring.uptimeCheckConfigs.list
Ops Config Monitoring Resource Metadata Viewer ^Beta (roles/opsconfigmonitoring.resourceMetadata.viewer) Read-only access to resource metadata.	opsconfigmonitoring.resourceMetadata.list
Ops Config Monitoring Resource Metadata Writer ^Beta (roles/opsconfigmonitoring.resourceMetadata.writer) Write-only access to resource metadata. This provides exactly the permissions needed by the Ops Config Monitoring metadata agent and other systems that send metadata.	opsconfigmonitoring.resourceMetadata.write
Stackdriver Accounts Editor (roles/stackdriver.accounts.editor) Read/write access to manage Stackdriver account structure.	resourcemanager.projects.get resourcemanager.projects.list serviceusage.consumerpolicy.* serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.consumerpolicy.update serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.services.enable serviceusage.services.get serviceusage.values.test stackdriver.projects.* stackdriver.projects.edit stackdriver.projects.get
Stackdriver Accounts Viewer (roles/stackdriver.accounts.viewer) Read-only access to get and list information about Stackdriver account structure.	resourcemanager.projects.get resourcemanager.projects.list stackdriver.projects.get
Stackdriver Resource Metadata Writer ^Beta (roles/stackdriver.resourceMetadata.writer) Write-only access to resource metadata. This provides exactly the permissions needed by the Stackdriver metadata agent and other systems that send metadata.	stackdriver.resourceMetadata.write

Service agent roles

Service agent roles should only be granted to service agents.

Role

Permissions

Monitoring Service Agent (roles/monitoring.notificationServiceAgent) Grants permissions to deliver notifications directly to resources within the target project, such as delivering to Pub/Sub topics within the project. Warning: Do not grant service agent roles to any principals except service agents.

bigquery.jobs.create cloudfunctions.functions.get cloudtrace.traces.patch logging.links.list monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list monitoring.notificationChannels.get monitoring.notificationChannels.list monitoring.notificationChannels.update monitoring.timeSeries.list observability.links.list run.routes.invoke servicedirectory.networks.access servicedirectory.services.resolve serviceusage.services.use

Cloud Monitoring permissions

Permission	Included in roles
monitoring.alertPolicies.create	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring AlertPolicy Editor (roles/monitoring.alertPolicyEditor) Quota Administrator (roles/servicemanagement.quotaAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Chronicle Service Agent (roles/chronicle.serviceAgent) Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
monitoring.alertPolicies.createTagBinding	Owner (roles/owner) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Tag User (roles/resourcemanager.tagUser) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring AlertPolicy Editor (roles/monitoring.alertPolicyEditor) Quota Administrator (roles/servicemanagement.quotaAdmin)
monitoring.alertPolicies.delete	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring AlertPolicy Editor (roles/monitoring.alertPolicyEditor) Quota Administrator (roles/servicemanagement.quotaAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Chronicle Service Agent (roles/chronicle.serviceAgent) Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
monitoring.alertPolicies.deleteTagBinding	Owner (roles/owner) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Tag User (roles/resourcemanager.tagUser) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring AlertPolicy Editor (roles/monitoring.alertPolicyEditor) Quota Administrator (roles/servicemanagement.quotaAdmin)
monitoring.alertPolicies.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Monitoring AlertPolicy Editor (roles/monitoring.alertPolicyEditor) Monitoring AlertPolicy Viewer (roles/monitoring.alertPolicyViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Quota Administrator (roles/servicemanagement.quotaAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Chronicle Service Agent (roles/chronicle.serviceAgent) Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Retail Service Agent (roles/retail.serviceAgent)
monitoring.alertPolicies.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Monitoring AlertPolicy Editor (roles/monitoring.alertPolicyEditor) Monitoring AlertPolicy Viewer (roles/monitoring.alertPolicyViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Quota Administrator (roles/servicemanagement.quotaAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent) Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Chronicle Service Agent (roles/chronicle.serviceAgent) Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent) Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Retail Service Agent (roles/retail.serviceAgent) Security Center Control Service Agent (roles/securitycenter.controlServiceAgent) Security Health Analytics Service Agent (roles/securitycenter.securityHealthAnalyticsServiceAgent) Security Center Service Agent (roles/securitycenter.serviceAgent)
monitoring.alertPolicies.listEffectiveTags	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer) Security Center Admin (roles/securitycenter.admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Monitoring AlertPolicy Editor (roles/monitoring.alertPolicyEditor) Monitoring AlertPolicy Viewer (roles/monitoring.alertPolicyViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Quota Administrator (roles/servicemanagement.quotaAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Retail Service Agent (roles/retail.serviceAgent)
monitoring.alertPolicies.listTagBindings	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer) Security Center Admin (roles/securitycenter.admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Monitoring AlertPolicy Editor (roles/monitoring.alertPolicyEditor) Monitoring AlertPolicy Viewer (roles/monitoring.alertPolicyViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Quota Administrator (roles/servicemanagement.quotaAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Retail Service Agent (roles/retail.serviceAgent)
monitoring.alertPolicies.update	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring AlertPolicy Editor (roles/monitoring.alertPolicyEditor) Quota Administrator (roles/servicemanagement.quotaAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Chronicle Service Agent (roles/chronicle.serviceAgent) Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
monitoring.alerts.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Monitoring Alert Viewer (roles/monitoring.alertViewer) Monitoring Cloud Console Incident Editor (roles/monitoring.cloudConsoleIncidentEditor) Monitoring Cloud Console Incident Viewer (roles/monitoring.cloudConsoleIncidentViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Retail Service Agent (roles/retail.serviceAgent)
monitoring.alerts.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Monitoring Alert Viewer (roles/monitoring.alertViewer) Monitoring Cloud Console Incident Editor (roles/monitoring.cloudConsoleIncidentEditor) Monitoring Cloud Console Incident Viewer (roles/monitoring.cloudConsoleIncidentViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Retail Service Agent (roles/retail.serviceAgent)
monitoring.dashboards.create	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring Dashboard Configuration Editor (roles/monitoring.dashboardEditor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
monitoring.dashboards.createTagBinding	Owner (roles/owner) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Tag User (roles/resourcemanager.tagUser) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring Dashboard Configuration Editor (roles/monitoring.dashboardEditor)
monitoring.dashboards.delete	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring Dashboard Configuration Editor (roles/monitoring.dashboardEditor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
monitoring.dashboards.deleteTagBinding	Owner (roles/owner) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Tag User (roles/resourcemanager.tagUser) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring Dashboard Configuration Editor (roles/monitoring.dashboardEditor)
monitoring.dashboards.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Discovery Engine Admin (roles/discoveryengine.admin) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) Cloud API hub Insights Viewer (roles/apihub.apiInsightsViewer) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Monitoring Dashboard Configuration Editor (roles/monitoring.dashboardEditor) Monitoring Dashboard Configuration Viewer (roles/monitoring.dashboardViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Retail Service Agent (roles/retail.serviceAgent)
monitoring.dashboards.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) Cloud API hub Insights Viewer (roles/apihub.apiInsightsViewer) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Monitoring Dashboard Configuration Editor (roles/monitoring.dashboardEditor) Monitoring Dashboard Configuration Viewer (roles/monitoring.dashboardViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Retail Service Agent (roles/retail.serviceAgent)
monitoring.dashboards.listEffectiveTags	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer) Security Center Admin (roles/securitycenter.admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Monitoring Dashboard Configuration Editor (roles/monitoring.dashboardEditor) Monitoring Dashboard Configuration Viewer (roles/monitoring.dashboardViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Retail Service Agent (roles/retail.serviceAgent)
monitoring.dashboards.listTagBindings	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer) Security Center Admin (roles/securitycenter.admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Monitoring Dashboard Configuration Editor (roles/monitoring.dashboardEditor) Monitoring Dashboard Configuration Viewer (roles/monitoring.dashboardViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Retail Service Agent (roles/retail.serviceAgent)
monitoring.dashboards.update	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring Dashboard Configuration Editor (roles/monitoring.dashboardEditor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
monitoring.groups.create	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
monitoring.groups.delete	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
monitoring.groups.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Retail Service Agent (roles/retail.serviceAgent)
monitoring.groups.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Retail Service Agent (roles/retail.serviceAgent)
monitoring.groups.update	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
monitoring.metricDescriptors.create	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Metric Writer (roles/monitoring.metricWriter) Composer Worker (roles/composer.worker) Kubernetes Engine Default Node Service Account (roles/container.defaultNodeServiceAccount) Dataproc Worker (roles/dataproc.worker) Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner) Anthos Multi-cloud Telemetry Writer (roles/gkemulticloud.telemetryWriter) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent) Vertex AI Notebook Service Agent (roles/aiplatform.notebookServiceAgent) Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent) Vertex AI Service Agent (roles/aiplatform.serviceAgent) Vertex AI Telemetry Service Agent (roles/aiplatform.telemetryServiceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent) Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) BigQuery Connection Service Agent (roles/bigqueryconnection.serviceAgent) Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent) Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Connectors Platform Service Agent (roles/connectors.serviceAgent) Kubernetes Engine Default Node Service Agent (roles/container.defaultNodeServiceAgent) [Deprecated] Kubernetes Engine Node Service Agent (roles/container.nodeServiceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud Dataplex Service Agent (roles/dataplex.serviceAgent) Dataproc Resource Manager Node Service Agent (roles/dataprocrm.nodeServiceAgent) Discovery Engine Service Agent (roles/discoveryengine.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Cloud Filestore Service Agent (roles/file.serviceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Cluster Director Service Agent (roles/hypercomputecluster.serviceAgent) Managed Flink Service Agent (roles/managedflink.serviceAgent) Cloud Managed Identities Service Agent (roles/managedidentities.serviceAgent) Cloud Memorystore Memcached Service Agent (roles/memcache.serviceAgent) Cloud Memorystore Service Agent (roles/memorystore.serviceAgent) Mesh Managed Control Plane Service Agent (roles/meshcontrolplane.serviceAgent) Mesh Data Plane Service Agent (roles/meshdataplane.serviceAgent) RMA Service Agent (roles/rapidmigrationassessment.serviceAgent) Cloud Memorystore Redis Service Agent (roles/redis.serviceAgent) Retail Service Agent (roles/retail.serviceAgent) SaaS Service Management Service Agent (roles/saasservicemgmt.serviceAgent) Cloud TPU API Service Agent (roles/tpu.serviceAgent) Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
monitoring.metricDescriptors.delete	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
monitoring.metricDescriptors.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Bigtable Administrator (roles/bigtable.admin) Bigtable Editor (roles/bigtable.editor) Bigtable User (roles/bigtable.user) Bigtable Viewer (roles/bigtable.viewer) Discovery Engine Admin (roles/discoveryengine.admin) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Metric Writer (roles/monitoring.metricWriter) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) Cloud API hub Insights Viewer (roles/apihub.apiInsightsViewer) App Management Viewer (roles/apphub.appManagementViewer) Bigtable Reader (roles/bigtable.reader) Cloud Hub Operator (roles/cloudhub.operator) Composer Worker (roles/composer.worker) Dataproc Worker (roles/dataproc.worker) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner) Anthos Multi-cloud Telemetry Writer (roles/gkemulticloud.telemetryWriter) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent) Vertex AI Notebook Service Agent (roles/aiplatform.notebookServiceAgent) Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent) Vertex AI Service Agent (roles/aiplatform.serviceAgent) Vertex AI Telemetry Service Agent (roles/aiplatform.telemetryServiceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent) Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) BigQuery Connection Service Agent (roles/bigqueryconnection.serviceAgent) Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent) Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Connectors Platform Service Agent (roles/connectors.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud Dataplex Service Agent (roles/dataplex.serviceAgent) Dataproc Resource Manager Node Service Agent (roles/dataprocrm.nodeServiceAgent) Discovery Engine Service Agent (roles/discoveryengine.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Cloud Filestore Service Agent (roles/file.serviceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Cluster Director Service Agent (roles/hypercomputecluster.serviceAgent) Managed Flink Service Agent (roles/managedflink.serviceAgent) Cloud Managed Identities Service Agent (roles/managedidentities.serviceAgent) Cloud Memorystore Memcached Service Agent (roles/memcache.serviceAgent) Cloud Memorystore Service Agent (roles/memorystore.serviceAgent) Mesh Managed Control Plane Service Agent (roles/meshcontrolplane.serviceAgent) Mesh Data Plane Service Agent (roles/meshdataplane.serviceAgent) Monitoring Service Agent (roles/monitoring.notificationServiceAgent) Cloud Memorystore Redis Service Agent (roles/redis.serviceAgent) Retail Service Agent (roles/retail.serviceAgent) Cloud TPU API Service Agent (roles/tpu.serviceAgent) Cloud Vision AI Service Agent (roles/visionai.serviceAgent) Workload Manager Service Agent (roles/workloadmanager.serviceAgent)
monitoring.metricDescriptors.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) ApiGateway Admin (roles/apigateway.admin) Apigateway Editor (roles/apigateway.editor) ApiGateway Viewer (roles/apigateway.viewer) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Bigtable Administrator (roles/bigtable.admin) Bigtable Editor (roles/bigtable.editor) Bigtable User (roles/bigtable.user) Bigtable Viewer (roles/bigtable.viewer) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Metric Writer (roles/monitoring.metricWriter) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) Cloud API hub Insights Viewer (roles/apihub.apiInsightsViewer) App Management Viewer (roles/apphub.appManagementViewer) Bigtable Reader (roles/bigtable.reader) Cloud Hub Operator (roles/cloudhub.operator) Composer Worker (roles/composer.worker) Kubernetes Engine Default Node Service Account (roles/container.defaultNodeServiceAccount) Dataproc Worker (roles/dataproc.worker) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner) Anthos Multi-cloud Telemetry Writer (roles/gkemulticloud.telemetryWriter) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent) Vertex AI Notebook Service Agent (roles/aiplatform.notebookServiceAgent) Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent) Vertex AI Service Agent (roles/aiplatform.serviceAgent) Vertex AI Telemetry Service Agent (roles/aiplatform.telemetryServiceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent) Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) BigQuery Connection Service Agent (roles/bigqueryconnection.serviceAgent) Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Connectors Platform Service Agent (roles/connectors.serviceAgent) Kubernetes Engine Default Node Service Agent (roles/container.defaultNodeServiceAgent) [Deprecated] Kubernetes Engine Node Service Agent (roles/container.nodeServiceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud Dataplex Service Agent (roles/dataplex.serviceAgent) Dataproc Resource Manager Node Service Agent (roles/dataprocrm.nodeServiceAgent) Discovery Engine Service Agent (roles/discoveryengine.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Cloud Filestore Service Agent (roles/file.serviceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Cluster Director Service Agent (roles/hypercomputecluster.serviceAgent) Managed Flink Service Agent (roles/managedflink.serviceAgent) Cloud Managed Identities Service Agent (roles/managedidentities.serviceAgent) Cloud Memorystore Memcached Service Agent (roles/memcache.serviceAgent) Cloud Memorystore Service Agent (roles/memorystore.serviceAgent) Mesh Managed Control Plane Service Agent (roles/meshcontrolplane.serviceAgent) Mesh Data Plane Service Agent (roles/meshdataplane.serviceAgent) Monitoring Service Agent (roles/monitoring.notificationServiceAgent) RMA Service Agent (roles/rapidmigrationassessment.serviceAgent) Cloud Memorystore Redis Service Agent (roles/redis.serviceAgent) Retail Service Agent (roles/retail.serviceAgent) Cloud TPU API Service Agent (roles/tpu.serviceAgent) Cloud Vision AI Service Agent (roles/visionai.serviceAgent) Workload Manager Service Agent (roles/workloadmanager.serviceAgent)
monitoring.metricsScopes.link	Owner (roles/owner) Monitoring Admin (roles/monitoring.admin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring Metrics Scopes Admin (roles/monitoring.metricsScopesAdmin) Observability Scopes Editor (roles/observability.scopesEditor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. GKE Hub Service Agent (roles/gkehub.serviceAgent)
monitoring.monitoredResourceDescriptors.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) ApiGateway Admin (roles/apigateway.admin) Apigateway Editor (roles/apigateway.editor) ApiGateway Viewer (roles/apigateway.viewer) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Discovery Engine Admin (roles/discoveryengine.admin) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Metric Writer (roles/monitoring.metricWriter) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) Cloud API hub Insights Viewer (roles/apihub.apiInsightsViewer) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Composer Worker (roles/composer.worker) Dataproc Worker (roles/dataproc.worker) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner) Anthos Multi-cloud Telemetry Writer (roles/gkemulticloud.telemetryWriter) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent) Vertex AI Notebook Service Agent (roles/aiplatform.notebookServiceAgent) Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent) Vertex AI Service Agent (roles/aiplatform.serviceAgent) Vertex AI Telemetry Service Agent (roles/aiplatform.telemetryServiceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent) Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) BigQuery Connection Service Agent (roles/bigqueryconnection.serviceAgent) Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Connectors Platform Service Agent (roles/connectors.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud Dataplex Service Agent (roles/dataplex.serviceAgent) Dataproc Resource Manager Node Service Agent (roles/dataprocrm.nodeServiceAgent) Discovery Engine Service Agent (roles/discoveryengine.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Cloud Filestore Service Agent (roles/file.serviceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Cluster Director Service Agent (roles/hypercomputecluster.serviceAgent) Managed Flink Service Agent (roles/managedflink.serviceAgent) Cloud Managed Identities Service Agent (roles/managedidentities.serviceAgent) Cloud Memorystore Memcached Service Agent (roles/memcache.serviceAgent) Cloud Memorystore Service Agent (roles/memorystore.serviceAgent) Mesh Managed Control Plane Service Agent (roles/meshcontrolplane.serviceAgent) Mesh Data Plane Service Agent (roles/meshdataplane.serviceAgent) Monitoring Service Agent (roles/monitoring.notificationServiceAgent) Cloud Memorystore Redis Service Agent (roles/redis.serviceAgent) Retail Service Agent (roles/retail.serviceAgent) Cloud TPU API Service Agent (roles/tpu.serviceAgent) Cloud Vision AI Service Agent (roles/visionai.serviceAgent) Workload Manager Service Agent (roles/workloadmanager.serviceAgent)
monitoring.monitoredResourceDescriptors.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Apigee Organization Admin (roles/apigee.admin) Cloud API Hub Admin (roles/apihub.admin) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Metric Writer (roles/monitoring.metricWriter) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) Cloud API hub Insights Viewer (roles/apihub.apiInsightsViewer) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Composer Worker (roles/composer.worker) Dataproc Worker (roles/dataproc.worker) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner) Anthos Multi-cloud Telemetry Writer (roles/gkemulticloud.telemetryWriter) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent) Vertex AI Notebook Service Agent (roles/aiplatform.notebookServiceAgent) Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent) Vertex AI Service Agent (roles/aiplatform.serviceAgent) Vertex AI Telemetry Service Agent (roles/aiplatform.telemetryServiceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent) Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) BigQuery Connection Service Agent (roles/bigqueryconnection.serviceAgent) Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Connectors Platform Service Agent (roles/connectors.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud Dataplex Service Agent (roles/dataplex.serviceAgent) Dataproc Resource Manager Node Service Agent (roles/dataprocrm.nodeServiceAgent) Discovery Engine Service Agent (roles/discoveryengine.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Cloud Filestore Service Agent (roles/file.serviceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Cluster Director Service Agent (roles/hypercomputecluster.serviceAgent) Managed Flink Service Agent (roles/managedflink.serviceAgent) Cloud Managed Identities Service Agent (roles/managedidentities.serviceAgent) Cloud Memorystore Memcached Service Agent (roles/memcache.serviceAgent) Cloud Memorystore Service Agent (roles/memorystore.serviceAgent) Mesh Managed Control Plane Service Agent (roles/meshcontrolplane.serviceAgent) Mesh Data Plane Service Agent (roles/meshdataplane.serviceAgent) Monitoring Service Agent (roles/monitoring.notificationServiceAgent) Cloud Memorystore Redis Service Agent (roles/redis.serviceAgent) Retail Service Agent (roles/retail.serviceAgent) Cloud TPU API Service Agent (roles/tpu.serviceAgent) Cloud Vision AI Service Agent (roles/visionai.serviceAgent) Workload Manager Service Agent (roles/workloadmanager.serviceAgent)
monitoring.notificationChannelDescriptors.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Monitoring NotificationChannel Editor (roles/monitoring.notificationChannelEditor) Monitoring NotificationChannel Viewer (roles/monitoring.notificationChannelViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Retail Service Agent (roles/retail.serviceAgent)
monitoring.notificationChannelDescriptors.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Monitoring NotificationChannel Editor (roles/monitoring.notificationChannelEditor) Monitoring NotificationChannel Viewer (roles/monitoring.notificationChannelViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Retail Service Agent (roles/retail.serviceAgent)
monitoring.notificationChannels.create	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring NotificationChannel Editor (roles/monitoring.notificationChannelEditor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
monitoring.notificationChannels.delete	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring NotificationChannel Editor (roles/monitoring.notificationChannelEditor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
monitoring.notificationChannels.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Monitoring NotificationChannel Editor (roles/monitoring.notificationChannelEditor) Monitoring NotificationChannel Viewer (roles/monitoring.notificationChannelViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Model Monitoring Service Agent (roles/aiplatform.modelMonitoringServiceAgent) Vertex AI Service Agent (roles/aiplatform.serviceAgent) Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Monitoring Service Agent (roles/monitoring.notificationServiceAgent) Retail Service Agent (roles/retail.serviceAgent)
monitoring.notificationChannels.getVerificationCode	Owner (roles/owner) Monitoring Admin (roles/monitoring.admin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer)
monitoring.notificationChannels.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Monitoring NotificationChannel Editor (roles/monitoring.notificationChannelEditor) Monitoring NotificationChannel Viewer (roles/monitoring.notificationChannelViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Monitoring Service Agent (roles/monitoring.notificationServiceAgent) Retail Service Agent (roles/retail.serviceAgent)
monitoring.notificationChannels.sendVerificationCode	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring NotificationChannel Editor (roles/monitoring.notificationChannelEditor)
monitoring.notificationChannels.update	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring NotificationChannel Editor (roles/monitoring.notificationChannelEditor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent) Monitoring Service Agent (roles/monitoring.notificationServiceAgent)
monitoring.notificationChannels.verify	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring NotificationChannel Editor (roles/monitoring.notificationChannelEditor)
monitoring.services.create	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring Services Editor (roles/monitoring.servicesEditor)
monitoring.services.delete	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring Services Editor (roles/monitoring.servicesEditor)
monitoring.services.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Monitoring Services Editor (roles/monitoring.servicesEditor) Monitoring Services Viewer (roles/monitoring.servicesViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Retail Service Agent (roles/retail.serviceAgent)
monitoring.services.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Monitoring Services Editor (roles/monitoring.servicesEditor) Monitoring Services Viewer (roles/monitoring.servicesViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Retail Service Agent (roles/retail.serviceAgent)
monitoring.services.update	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring Services Editor (roles/monitoring.servicesEditor)
monitoring.slos.create	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring Services Editor (roles/monitoring.servicesEditor)
monitoring.slos.delete	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring Services Editor (roles/monitoring.servicesEditor)
monitoring.slos.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Monitoring Services Editor (roles/monitoring.servicesEditor) Monitoring Services Viewer (roles/monitoring.servicesViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Retail Service Agent (roles/retail.serviceAgent)
monitoring.slos.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Monitoring Services Editor (roles/monitoring.servicesEditor) Monitoring Services Viewer (roles/monitoring.servicesViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Retail Service Agent (roles/retail.serviceAgent)
monitoring.slos.update	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring Services Editor (roles/monitoring.servicesEditor)
monitoring.snoozes.create	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring Snooze Editor (roles/monitoring.snoozeEditor)
monitoring.snoozes.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Monitoring Snooze Editor (roles/monitoring.snoozeEditor) Monitoring Snooze Viewer (roles/monitoring.snoozeViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Retail Service Agent (roles/retail.serviceAgent)
monitoring.snoozes.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Monitoring Snooze Editor (roles/monitoring.snoozeEditor) Monitoring Snooze Viewer (roles/monitoring.snoozeViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Retail Service Agent (roles/retail.serviceAgent)
monitoring.snoozes.update	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring Snooze Editor (roles/monitoring.snoozeEditor)
monitoring.timeSeries.create	Owner (roles/owner) Editor (roles/editor) Bigtable Administrator (roles/bigtable.admin) Bigtable User (roles/bigtable.user) Application Design Center Admin (roles/designcenter.admin) Firebase Admin (roles/firebase.admin) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Metric Writer (roles/monitoring.metricWriter) Cloud Spanner Admin (roles/spanner.admin) Storage Admin (roles/storage.admin) Storage Object Admin (roles/storage.objectAdmin) Storage Object User (roles/storage.objectUser) AlloyDB Client (roles/alloydb.client) Bigtable Reader (roles/bigtable.reader) Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin) Composer Worker (roles/composer.worker) Kubernetes Engine Default Node Service Account (roles/container.defaultNodeServiceAccount) Dataflow Worker (roles/dataflow.worker) Dataproc Worker (roles/dataproc.worker) Application Design Center User (roles/designcenter.user) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Firebase Develop Admin (roles/firebase.developAdmin) Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner) Anthos Multi-cloud Telemetry Writer (roles/gkemulticloud.telemetryWriter) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Cloud Spanner Database Admin (roles/spanner.databaseAdmin) Cloud Spanner Database Reader (roles/spanner.databaseReader) Cloud Spanner Database Reader with DataBoost (roles/spanner.databaseReaderWithDataBoost) Cloud Spanner Database User (roles/spanner.databaseUser) Cloud Spanner Database Graph Intelligence features user (roles/spanner.graphIntelligenceUser) Storage Transfer Agent (roles/storagetransfer.transferAgent) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent) Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent) Vertex AI Notebook Service Agent (roles/aiplatform.notebookServiceAgent) Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent) Vertex AI Service Agent (roles/aiplatform.serviceAgent) Vertex AI Telemetry Service Agent (roles/aiplatform.telemetryServiceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent) Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) BigQuery Connection Service Agent (roles/bigqueryconnection.serviceAgent) Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Connectors Platform Service Agent (roles/connectors.serviceAgent) Kubernetes Engine Default Node Service Agent (roles/container.defaultNodeServiceAgent) [Deprecated] Kubernetes Engine Node Service Agent (roles/container.nodeServiceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Datapipelines Service Agent (roles/datapipelines.serviceAgent) Cloud Dataplex Service Agent (roles/dataplex.serviceAgent) Dataprep Service Agent (roles/dataprep.serviceAgent) Dataproc Service Agent (roles/dataproc.serviceAgent) Dataproc Resource Manager Node Service Agent (roles/dataprocrm.nodeServiceAgent) Discovery Engine Service Agent (roles/discoveryengine.serviceAgent) DLP API Service Agent (roles/dlp.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Eventarc Service Agent (roles/eventarc.serviceAgent) Cloud Filestore Service Agent (roles/file.serviceAgent) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Cluster Director Service Agent (roles/hypercomputecluster.serviceAgent) KubeRun Events Data Plane Service Agent (roles/kuberun.eventsDataPlaneServiceAgent) Managed Flink Service Agent (roles/managedflink.serviceAgent) Cloud Managed Identities Service Agent (roles/managedidentities.serviceAgent) Cloud Memorystore Memcached Service Agent (roles/memcache.serviceAgent) Cloud Memorystore Service Agent (roles/memorystore.serviceAgent) Mesh Managed Control Plane Service Agent (roles/meshcontrolplane.serviceAgent) Mesh Data Plane Service Agent (roles/meshdataplane.serviceAgent) AI Platform Service Agent (roles/ml.serviceAgent) RMA Service Agent (roles/rapidmigrationassessment.serviceAgent) Cloud Memorystore Redis Service Agent (roles/redis.serviceAgent) Retail Service Agent (roles/retail.serviceAgent) SaaS Service Management Service Agent (roles/saasservicemgmt.serviceAgent) Cloud TPU API Service Agent (roles/tpu.serviceAgent) Cloud Vision AI Service Agent (roles/visionai.serviceAgent) Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
monitoring.timeSeries.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) ApiGateway Admin (roles/apigateway.admin) Apigateway Editor (roles/apigateway.editor) ApiGateway Viewer (roles/apigateway.viewer) Apigee Organization Admin (roles/apigee.admin) Bigtable Administrator (roles/bigtable.admin) Bigtable Editor (roles/bigtable.editor) Bigtable User (roles/bigtable.user) Bigtable Viewer (roles/bigtable.viewer) Capacity Planner Viewer (roles/capacityplanner.viewer) Cloud Quotas Admin (roles/cloudquotas.admin) Cloud SQL Admin (roles/cloudsql.admin) Cloud SQL Editor (roles/cloudsql.editor) Cloud SQL Viewer (roles/cloudsql.viewer) Cloud Tasks Admin (roles/cloudtasks.admin) Cloudtasks Editor (roles/cloudtasks.editor) Cloud Tasks Viewer (roles/cloudtasks.viewer) Discovery Engine Admin (roles/discoveryengine.admin) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Looker Admin (roles/looker.admin) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) reCAPTCHA Enterprise Admin (roles/recaptchaenterprise.admin) reCAPTCHA Enterprise Viewer (roles/recaptchaenterprise.viewer) Security Center Admin (roles/securitycenter.admin) Service Management Administrator (roles/servicemanagement.admin) Service Usage Admin (roles/serviceusage.serviceUsageAdmin) Service Usage Consumer (roles/serviceusage.serviceUsageConsumer) Service Usage Viewer (roles/serviceusage.serviceUsageViewer) Cloud Spanner Admin (roles/spanner.admin) Spanner Editor (roles/spanner.editor) Cloud Spanner Viewer (roles/spanner.viewer) Telco Automation Admin (roles/telcoautomation.admin) Workload Manager Admin (roles/workloadmanager.admin) Apigee Read-only Admin (roles/apigee.readOnlyAdmin) App Management Viewer (roles/apphub.appManagementViewer) Bigtable Reader (roles/bigtable.reader) Capacity Planner (roles/capacityplanner.planner) Cloud Hub Operator (roles/cloudhub.operator) Composer Worker (roles/composer.worker) Cloud Infrastructure Manager Agent (roles/config.agent) Kubernetes Engine Default Node Service Account (roles/container.defaultNodeServiceAccount) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Grow Admin (roles/firebase.growthAdmin) Firebase Grow Viewer (roles/firebase.growthViewer) Firebase Quality Admin (roles/firebase.qualityAdmin) Firebase Quality Viewer (roles/firebase.qualityViewer) Fleet Project-level Scope Editor (roles/gkehub.scopeEditorProjectLevel) Fleet Project-level Scope Viewer (roles/gkehub.scopeViewerProjectLevel) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Service Extensions Admin (roles/networkservices.serviceExtensionsAdmin) Service Extensions Viewer (roles/networkservices.serviceExtensionsViewer) Firewall Recommender Admin (roles/recommender.firewallAdmin) Firewall Recommender Viewer (roles/recommender.firewallViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Quota Administrator (roles/servicemanagement.quotaAdmin) Quota Viewer (roles/servicemanagement.quotaViewer) Cloud Spanner Backup Admin (roles/spanner.backupAdmin) Cloud Spanner Database Admin (roles/spanner.databaseAdmin) Cloud Spanner Restore Admin (roles/spanner.restoreAdmin) Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Telemetry Service Agent (roles/aiplatform.telemetryServiceAgent) Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent) Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Blockchain Node Engine Service Agent (roles/blockchainnodeengine.serviceAgent) Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Kubernetes Engine Default Node Service Agent (roles/container.defaultNodeServiceAgent) [Deprecated] Kubernetes Engine Node Service Agent (roles/container.nodeServiceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Datastream Service Agent (roles/datastream.serviceAgent) Discovery Engine Service Agent (roles/discoveryengine.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Cluster Director Service Agent (roles/hypercomputecluster.serviceAgent) Monitoring Service Agent (roles/monitoring.notificationServiceAgent) Retail Service Agent (roles/retail.serviceAgent) Security Center Control Service Agent (roles/securitycenter.controlServiceAgent) Security Center Service Agent (roles/securitycenter.serviceAgent) Workload Manager Service Agent (roles/workloadmanager.serviceAgent)
monitoring.uptimeCheckConfigs.create	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring Uptime Check Configuration Editor (roles/monitoring.uptimeCheckConfigEditor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
monitoring.uptimeCheckConfigs.delete	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring Uptime Check Configuration Editor (roles/monitoring.uptimeCheckConfigEditor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
monitoring.uptimeCheckConfigs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Monitoring Uptime Check Configuration Editor (roles/monitoring.uptimeCheckConfigEditor) Monitoring Uptime Check Configuration Viewer (roles/monitoring.uptimeCheckConfigViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Retail Service Agent (roles/retail.serviceAgent)
monitoring.uptimeCheckConfigs.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Monitoring Uptime Check Configuration Editor (roles/monitoring.uptimeCheckConfigEditor) Monitoring Uptime Check Configuration Viewer (roles/monitoring.uptimeCheckConfigViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Retail Service Agent (roles/retail.serviceAgent)
monitoring.uptimeCheckConfigs.update	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Monitoring Uptime Check Configuration Editor (roles/monitoring.uptimeCheckConfigEditor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
opsconfigmonitoring.resourceMetadata.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Ops Config Monitoring Resource Metadata Viewer (roles/opsconfigmonitoring.resourceMetadata.viewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Retail Service Agent (roles/retail.serviceAgent)
opsconfigmonitoring.resourceMetadata.write	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Anthos Multi-cloud Telemetry Writer (roles/gkemulticloud.telemetryWriter) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Ops Config Monitoring Resource Metadata Writer (roles/opsconfigmonitoring.resourceMetadata.writer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
stackdriver.projects.edit	Owner (roles/owner) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Stackdriver Admin (roles/stackdriver.admin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Stackdriver Accounts Editor (roles/stackdriver.accounts.editor)
stackdriver.projects.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Error Reporting Admin (roles/errorreporting.admin) Error Reporting User (roles/errorreporting.user) Error Reporting Viewer (roles/errorreporting.viewer) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) Stackdriver Admin (roles/stackdriver.admin) Stackdriver Viewer (roles/stackdriver.viewer) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Stackdriver Accounts Editor (roles/stackdriver.accounts.editor) Stackdriver Accounts Viewer (roles/stackdriver.accounts.viewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Retail Service Agent (roles/retail.serviceAgent) Security Center Control Service Agent (roles/securitycenter.controlServiceAgent) Security Health Analytics Service Agent (roles/securitycenter.securityHealthAnalyticsServiceAgent) Security Center Service Agent (roles/securitycenter.serviceAgent)
stackdriver.resourceMetadata.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Monitoring Viewer (roles/monitoring.viewer) Security Center Admin (roles/securitycenter.admin) Stackdriver Admin (roles/stackdriver.admin) Stackdriver Viewer (roles/stackdriver.viewer) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) ML Engineer (roles/iam.mlEngineer) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Healthcare Service Agent (roles/healthcare.serviceAgent) Retail Service Agent (roles/retail.serviceAgent)
stackdriver.resourceMetadata.write	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Stackdriver Admin (roles/stackdriver.admin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Stackdriver Resource Metadata Writer (roles/stackdriver.resourceMetadata.writer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)