This page lists the IAM roles and permissions for Network Security. To
search through all roles and permissions, see the [role and
permission index](https://docs.cloud.google.com/iam/docs/roles-permissions).

## Network Security roles

| Role | Permissions |
|---|---|
| #### Network Security Admin (`roles/networksecurity.admin`) Admin role for Network Security | `networksecurity.*` - `networksecurity.addressGroups.create` - `networksecurity.addressGroups.delete` - `networksecurity.addressGroups.get` - `networksecurity.addressGroups.getIamPolicy` - `networksecurity.addressGroups.list` - `networksecurity.addressGroups.setIamPolicy` - `networksecurity.addressGroups.update` - `networksecurity.addressGroups.use` - `networksecurity.authorizationPolicies.create` - `networksecurity.authorizationPolicies.createTagBinding` - `networksecurity.authorizationPolicies.delete` - `networksecurity.authorizationPolicies.deleteTagBinding` - `networksecurity.authorizationPolicies.get` - `networksecurity.authorizationPolicies.getIamPolicy` - `networksecurity.authorizationPolicies.list` - `networksecurity.authorizationPolicies.listEffectiveTags` - `networksecurity.authorizationPolicies.listTagBindings` - `networksecurity.authorizationPolicies.setIamPolicy` - `networksecurity.authorizationPolicies.update` - `networksecurity.authorizationPolicies.use` - `networksecurity.authzPolicies.create` - `networksecurity.authzPolicies.delete` - `networksecurity.authzPolicies.get` - `networksecurity.authzPolicies.getIamPolicy` - `networksecurity.authzPolicies.list` - `networksecurity.authzPolicies.setIamPolicy` - `networksecurity.authzPolicies.update` - `networksecurity.backendAuthenticationConfigs.create` - `networksecurity.backendAuthenticationConfigs.delete` - `networksecurity.backendAuthenticationConfigs.get` - `networksecurity.backendAuthenticationConfigs.list` - `networksecurity.backendAuthenticationConfigs.update` - `networksecurity.backendAuthenticationConfigs.use` - `networksecurity.clientTlsPolicies.create` - `networksecurity.clientTlsPolicies.createTagBinding` - `networksecurity.clientTlsPolicies.delete` - `networksecurity.clientTlsPolicies.deleteTagBinding` - `networksecurity.clientTlsPolicies.get` - `networksecurity.clientTlsPolicies.getIamPolicy` - `networksecurity.clientTlsPolicies.list` - `networksecurity.clientTlsPolicies.listEffectiveTags` - `networksecurity.clientTlsPolicies.listTagBindings` - `networksecurity.clientTlsPolicies.setIamPolicy` - `networksecurity.clientTlsPolicies.update` - `networksecurity.clientTlsPolicies.use` - `networksecurity.dnsThreatDetectors.create` - `networksecurity.dnsThreatDetectors.delete` - `networksecurity.dnsThreatDetectors.get` - `networksecurity.dnsThreatDetectors.list` - `networksecurity.dnsThreatDetectors.update` - `networksecurity.firewallEndpointAssociations.create` - `networksecurity.firewallEndpointAssociations.delete` - `networksecurity.firewallEndpointAssociations.get` - `networksecurity.firewallEndpointAssociations.list` - `networksecurity.firewallEndpointAssociations.update` - `networksecurity.firewallEndpoints.create` - `networksecurity.firewallEndpoints.createVerdictChangeRequest` - `networksecurity.firewallEndpoints.delete` - `networksecurity.firewallEndpoints.get` - `networksecurity.firewallEndpoints.getVerdictChangeRequest` - `networksecurity.firewallEndpoints.getWildfireReport` - `networksecurity.firewallEndpoints.getWildfireSample` - `networksecurity.firewallEndpoints.list` - `networksecurity.firewallEndpoints.listVerdictChangeRequests` - `networksecurity.firewallEndpoints.submitVerdictChangeRequest` - `networksecurity.firewallEndpoints.update` - `networksecurity.firewallEndpoints.use` - `networksecurity.firewallEndpoints.useWildfire` - `networksecurity.gatewaySecurityPolicies.create` - `networksecurity.gatewaySecurityPolicies.delete` - `networksecurity.gatewaySecurityPolicies.get` - `networksecurity.gatewaySecurityPolicies.list` - `networksecurity.gatewaySecurityPolicies.update` - `networksecurity.gatewaySecurityPolicies.use` - `networksecurity.gatewaySecurityPolicyRules.create` - `networksecurity.gatewaySecurityPolicyRules.delete` - `networksecurity.gatewaySecurityPolicyRules.get` - `networksecurity.gatewaySecurityPolicyRules.list` - `networksecurity.gatewaySecurityPolicyRules.update` - `networksecurity.gatewaySecurityPolicyRules.use` - `networksecurity.interceptDeploymentGroups.create` - `networksecurity.interceptDeploymentGroups.delete` - `networksecurity.interceptDeploymentGroups.get` - `networksecurity.interceptDeploymentGroups.list` - `networksecurity.interceptDeploymentGroups.update` - `networksecurity.interceptDeploymentGroups.use` - `networksecurity.interceptDeployments.create` - `networksecurity.interceptDeployments.delete` - `networksecurity.interceptDeployments.get` - `networksecurity.interceptDeployments.list` - `networksecurity.interceptDeployments.update` - `networksecurity.interceptEndpointGroupAssociations.create` - `networksecurity.interceptEndpointGroupAssociations.delete` - `networksecurity.interceptEndpointGroupAssociations.get` - `networksecurity.interceptEndpointGroupAssociations.list` - `networksecurity.interceptEndpointGroupAssociations.update` - `networksecurity.interceptEndpointGroups.create` - `networksecurity.interceptEndpointGroups.delete` - `networksecurity.interceptEndpointGroups.get` - `networksecurity.interceptEndpointGroups.list` - `networksecurity.interceptEndpointGroups.update` - `networksecurity.interceptEndpointGroups.use` - `networksecurity.locations.get` - `networksecurity.locations.list` - `networksecurity.mirroringDeploymentGroups.create` - `networksecurity.mirroringDeploymentGroups.delete` - `networksecurity.mirroringDeploymentGroups.get` - `networksecurity.mirroringDeploymentGroups.list` - `networksecurity.mirroringDeploymentGroups.update` - `networksecurity.mirroringDeploymentGroups.use` - `networksecurity.mirroringDeployments.create` - `networksecurity.mirroringDeployments.delete` - `networksecurity.mirroringDeployments.get` - `networksecurity.mirroringDeployments.list` - `networksecurity.mirroringDeployments.update` - `networksecurity.mirroringEndpointGroupAssociations.create` - `networksecurity.mirroringEndpointGroupAssociations.delete` - `networksecurity.mirroringEndpointGroupAssociations.get` - `networksecurity.mirroringEndpointGroupAssociations.list` - `networksecurity.mirroringEndpointGroupAssociations.update` - `networksecurity.mirroringEndpointGroups.create` - `networksecurity.mirroringEndpointGroups.delete` - `networksecurity.mirroringEndpointGroups.get` - `networksecurity.mirroringEndpointGroups.list` - `networksecurity.mirroringEndpointGroups.update` - `networksecurity.mirroringEndpointGroups.use` - `networksecurity.operations.cancel` - `networksecurity.operations.delete` - `networksecurity.operations.get` - `networksecurity.operations.list` - `networksecurity.sacAttachments.create` - `networksecurity.sacAttachments.delete` - `networksecurity.sacAttachments.get` - `networksecurity.sacAttachments.list` - `networksecurity.sacRealms.create` - `networksecurity.sacRealms.delete` - `networksecurity.sacRealms.get` - `networksecurity.sacRealms.list` - `networksecurity.securityProfileGroups.create` - `networksecurity.securityProfileGroups.delete` - `networksecurity.securityProfileGroups.get` - `networksecurity.securityProfileGroups.list` - `networksecurity.securityProfileGroups.update` - `networksecurity.securityProfileGroups.use` - `networksecurity.securityProfiles.create` - `networksecurity.securityProfiles.delete` - `networksecurity.securityProfiles.get` - `networksecurity.securityProfiles.list` - `networksecurity.securityProfiles.update` - `networksecurity.securityProfiles.use` - `networksecurity.serverTlsPolicies.create` - `networksecurity.serverTlsPolicies.createTagBinding` - `networksecurity.serverTlsPolicies.delete` - `networksecurity.serverTlsPolicies.deleteTagBinding` - `networksecurity.serverTlsPolicies.get` - `networksecurity.serverTlsPolicies.getIamPolicy` - `networksecurity.serverTlsPolicies.list` - `networksecurity.serverTlsPolicies.listEffectiveTags` - `networksecurity.serverTlsPolicies.listTagBindings` - `networksecurity.serverTlsPolicies.setIamPolicy` - `networksecurity.serverTlsPolicies.update` - `networksecurity.serverTlsPolicies.use` - `networksecurity.tlsInspectionPolicies.create` - `networksecurity.tlsInspectionPolicies.delete` - `networksecurity.tlsInspectionPolicies.get` - `networksecurity.tlsInspectionPolicies.list` - `networksecurity.tlsInspectionPolicies.update` - `networksecurity.tlsInspectionPolicies.use` - `networksecurity.urlLists.create` - `networksecurity.urlLists.delete` - `networksecurity.urlLists.get` - `networksecurity.urlLists.list` - `networksecurity.urlLists.update` - `networksecurity.urlLists.use` `resourcemanager.projects.get` `resourcemanager.projects.list` |
| #### Network Security Editor (`roles/networksecurity.editor`) Editor role for Network Security | `networksecurity.addressGroups.create` `networksecurity.addressGroups.delete` `networksecurity.addressGroups.get` `networksecurity.addressGroups.getIamPolicy` `networksecurity.addressGroups.list` `networksecurity.addressGroups.update` `networksecurity.addressGroups.use` `networksecurity.authorizationPolicies.create` `networksecurity.authorizationPolicies.delete` `networksecurity.authorizationPolicies.get` `networksecurity.authorizationPolicies.getIamPolicy` `networksecurity.authorizationPolicies.list` `networksecurity.authorizationPolicies.listEffectiveTags` `networksecurity.authorizationPolicies.listTagBindings` `networksecurity.authorizationPolicies.update` `networksecurity.authorizationPolicies.use` `networksecurity.authzPolicies.create` `networksecurity.authzPolicies.delete` `networksecurity.authzPolicies.get` `networksecurity.authzPolicies.getIamPolicy` `networksecurity.authzPolicies.list` `networksecurity.authzPolicies.update` `networksecurity.backendAuthenticationConfigs.*` - `networksecurity.backendAuthenticationConfigs.create` - `networksecurity.backendAuthenticationConfigs.delete` - `networksecurity.backendAuthenticationConfigs.get` - `networksecurity.backendAuthenticationConfigs.list` - `networksecurity.backendAuthenticationConfigs.update` - `networksecurity.backendAuthenticationConfigs.use` `networksecurity.clientTlsPolicies.create` `networksecurity.clientTlsPolicies.delete` `networksecurity.clientTlsPolicies.get` `networksecurity.clientTlsPolicies.getIamPolicy` `networksecurity.clientTlsPolicies.list` `networksecurity.clientTlsPolicies.listEffectiveTags` `networksecurity.clientTlsPolicies.listTagBindings` `networksecurity.clientTlsPolicies.update` `networksecurity.clientTlsPolicies.use` `networksecurity.dnsThreatDetectors.*` - `networksecurity.dnsThreatDetectors.create` - `networksecurity.dnsThreatDetectors.delete` - `networksecurity.dnsThreatDetectors.get` - `networksecurity.dnsThreatDetectors.list` - `networksecurity.dnsThreatDetectors.update` `networksecurity.firewallEndpointAssociations.*` - `networksecurity.firewallEndpointAssociations.create` - `networksecurity.firewallEndpointAssociations.delete` - `networksecurity.firewallEndpointAssociations.get` - `networksecurity.firewallEndpointAssociations.list` - `networksecurity.firewallEndpointAssociations.update` `networksecurity.firewallEndpoints.*` - `networksecurity.firewallEndpoints.create` - `networksecurity.firewallEndpoints.createVerdictChangeRequest` - `networksecurity.firewallEndpoints.delete` - `networksecurity.firewallEndpoints.get` - `networksecurity.firewallEndpoints.getVerdictChangeRequest` - `networksecurity.firewallEndpoints.getWildfireReport` - `networksecurity.firewallEndpoints.getWildfireSample` - `networksecurity.firewallEndpoints.list` - `networksecurity.firewallEndpoints.listVerdictChangeRequests` - `networksecurity.firewallEndpoints.submitVerdictChangeRequest` - `networksecurity.firewallEndpoints.update` - `networksecurity.firewallEndpoints.use` - `networksecurity.firewallEndpoints.useWildfire` `networksecurity.gatewaySecurityPolicies.*` - `networksecurity.gatewaySecurityPolicies.create` - `networksecurity.gatewaySecurityPolicies.delete` - `networksecurity.gatewaySecurityPolicies.get` - `networksecurity.gatewaySecurityPolicies.list` - `networksecurity.gatewaySecurityPolicies.update` - `networksecurity.gatewaySecurityPolicies.use` `networksecurity.gatewaySecurityPolicyRules.*` - `networksecurity.gatewaySecurityPolicyRules.create` - `networksecurity.gatewaySecurityPolicyRules.delete` - `networksecurity.gatewaySecurityPolicyRules.get` - `networksecurity.gatewaySecurityPolicyRules.list` - `networksecurity.gatewaySecurityPolicyRules.update` - `networksecurity.gatewaySecurityPolicyRules.use` `networksecurity.interceptDeploymentGroups.*` - `networksecurity.interceptDeploymentGroups.create` - `networksecurity.interceptDeploymentGroups.delete` - `networksecurity.interceptDeploymentGroups.get` - `networksecurity.interceptDeploymentGroups.list` - `networksecurity.interceptDeploymentGroups.update` - `networksecurity.interceptDeploymentGroups.use` `networksecurity.interceptDeployments.*` - `networksecurity.interceptDeployments.create` - `networksecurity.interceptDeployments.delete` - `networksecurity.interceptDeployments.get` - `networksecurity.interceptDeployments.list` - `networksecurity.interceptDeployments.update` `networksecurity.interceptEndpointGroupAssociations.*` - `networksecurity.interceptEndpointGroupAssociations.create` - `networksecurity.interceptEndpointGroupAssociations.delete` - `networksecurity.interceptEndpointGroupAssociations.get` - `networksecurity.interceptEndpointGroupAssociations.list` - `networksecurity.interceptEndpointGroupAssociations.update` `networksecurity.interceptEndpointGroups.*` - `networksecurity.interceptEndpointGroups.create` - `networksecurity.interceptEndpointGroups.delete` - `networksecurity.interceptEndpointGroups.get` - `networksecurity.interceptEndpointGroups.list` - `networksecurity.interceptEndpointGroups.update` - `networksecurity.interceptEndpointGroups.use` `networksecurity.locations.*` - `networksecurity.locations.get` - `networksecurity.locations.list` `networksecurity.mirroringDeploymentGroups.*` - `networksecurity.mirroringDeploymentGroups.create` - `networksecurity.mirroringDeploymentGroups.delete` - `networksecurity.mirroringDeploymentGroups.get` - `networksecurity.mirroringDeploymentGroups.list` - `networksecurity.mirroringDeploymentGroups.update` - `networksecurity.mirroringDeploymentGroups.use` `networksecurity.mirroringDeployments.*` - `networksecurity.mirroringDeployments.create` - `networksecurity.mirroringDeployments.delete` - `networksecurity.mirroringDeployments.get` - `networksecurity.mirroringDeployments.list` - `networksecurity.mirroringDeployments.update` `networksecurity.mirroringEndpointGroupAssociations.*` - `networksecurity.mirroringEndpointGroupAssociations.create` - `networksecurity.mirroringEndpointGroupAssociations.delete` - `networksecurity.mirroringEndpointGroupAssociations.get` - `networksecurity.mirroringEndpointGroupAssociations.list` - `networksecurity.mirroringEndpointGroupAssociations.update` `networksecurity.mirroringEndpointGroups.*` - `networksecurity.mirroringEndpointGroups.create` - `networksecurity.mirroringEndpointGroups.delete` - `networksecurity.mirroringEndpointGroups.get` - `networksecurity.mirroringEndpointGroups.list` - `networksecurity.mirroringEndpointGroups.update` - `networksecurity.mirroringEndpointGroups.use` `networksecurity.operations.*` - `networksecurity.operations.cancel` - `networksecurity.operations.delete` - `networksecurity.operations.get` - `networksecurity.operations.list` `networksecurity.sacAttachments.*` - `networksecurity.sacAttachments.create` - `networksecurity.sacAttachments.delete` - `networksecurity.sacAttachments.get` - `networksecurity.sacAttachments.list` `networksecurity.sacRealms.*` - `networksecurity.sacRealms.create` - `networksecurity.sacRealms.delete` - `networksecurity.sacRealms.get` - `networksecurity.sacRealms.list` `networksecurity.securityProfileGroups.*` - `networksecurity.securityProfileGroups.create` - `networksecurity.securityProfileGroups.delete` - `networksecurity.securityProfileGroups.get` - `networksecurity.securityProfileGroups.list` - `networksecurity.securityProfileGroups.update` - `networksecurity.securityProfileGroups.use` `networksecurity.securityProfiles.*` - `networksecurity.securityProfiles.create` - `networksecurity.securityProfiles.delete` - `networksecurity.securityProfiles.get` - `networksecurity.securityProfiles.list` - `networksecurity.securityProfiles.update` - `networksecurity.securityProfiles.use` `networksecurity.serverTlsPolicies.create` `networksecurity.serverTlsPolicies.delete` `networksecurity.serverTlsPolicies.get` `networksecurity.serverTlsPolicies.getIamPolicy` `networksecurity.serverTlsPolicies.list` `networksecurity.serverTlsPolicies.listEffectiveTags` `networksecurity.serverTlsPolicies.listTagBindings` `networksecurity.serverTlsPolicies.update` `networksecurity.serverTlsPolicies.use` `networksecurity.tlsInspectionPolicies.*` - `networksecurity.tlsInspectionPolicies.create` - `networksecurity.tlsInspectionPolicies.delete` - `networksecurity.tlsInspectionPolicies.get` - `networksecurity.tlsInspectionPolicies.list` - `networksecurity.tlsInspectionPolicies.update` - `networksecurity.tlsInspectionPolicies.use` `networksecurity.urlLists.*` - `networksecurity.urlLists.create` - `networksecurity.urlLists.delete` - `networksecurity.urlLists.get` - `networksecurity.urlLists.list` - `networksecurity.urlLists.update` - `networksecurity.urlLists.use` `resourcemanager.projects.get` `resourcemanager.projects.list` |
| #### Network Security Viewer (`roles/networksecurity.viewer`) Viewer role for Network Security | `networksecurity.addressGroups.get` `networksecurity.addressGroups.getIamPolicy` `networksecurity.addressGroups.list` `networksecurity.authorizationPolicies.get` `networksecurity.authorizationPolicies.getIamPolicy` `networksecurity.authorizationPolicies.list` `networksecurity.authorizationPolicies.listEffectiveTags` `networksecurity.authorizationPolicies.listTagBindings` `networksecurity.authzPolicies.get` `networksecurity.authzPolicies.getIamPolicy` `networksecurity.authzPolicies.list` `networksecurity.backendAuthenticationConfigs.get` `networksecurity.backendAuthenticationConfigs.list` `networksecurity.clientTlsPolicies.get` `networksecurity.clientTlsPolicies.getIamPolicy` `networksecurity.clientTlsPolicies.list` `networksecurity.clientTlsPolicies.listEffectiveTags` `networksecurity.clientTlsPolicies.listTagBindings` `networksecurity.dnsThreatDetectors.get` `networksecurity.dnsThreatDetectors.list` `networksecurity.firewallEndpointAssociations.get` `networksecurity.firewallEndpointAssociations.list` `networksecurity.firewallEndpoints.get` `networksecurity.firewallEndpoints.getVerdictChangeRequest` `networksecurity.firewallEndpoints.getWildfireReport` `networksecurity.firewallEndpoints.getWildfireSample` `networksecurity.firewallEndpoints.list` `networksecurity.firewallEndpoints.listVerdictChangeRequests` `networksecurity.firewallEndpoints.useWildfire` `networksecurity.gatewaySecurityPolicies.get` `networksecurity.gatewaySecurityPolicies.list` `networksecurity.gatewaySecurityPolicyRules.get` `networksecurity.gatewaySecurityPolicyRules.list` `networksecurity.interceptDeploymentGroups.get` `networksecurity.interceptDeploymentGroups.list` `networksecurity.interceptDeployments.get` `networksecurity.interceptDeployments.list` `networksecurity.interceptEndpointGroupAssociations.get` `networksecurity.interceptEndpointGroupAssociations.list` `networksecurity.interceptEndpointGroups.get` `networksecurity.interceptEndpointGroups.list` `networksecurity.locations.*` - `networksecurity.locations.get` - `networksecurity.locations.list` `networksecurity.mirroringDeploymentGroups.get` `networksecurity.mirroringDeploymentGroups.list` `networksecurity.mirroringDeployments.get` `networksecurity.mirroringDeployments.list` `networksecurity.mirroringEndpointGroupAssociations.get` `networksecurity.mirroringEndpointGroupAssociations.list` `networksecurity.mirroringEndpointGroups.get` `networksecurity.mirroringEndpointGroups.list` `networksecurity.operations.get` `networksecurity.operations.list` `networksecurity.sacAttachments.get` `networksecurity.sacAttachments.list` `networksecurity.sacRealms.get` `networksecurity.sacRealms.list` `networksecurity.securityProfileGroups.get` `networksecurity.securityProfileGroups.list` `networksecurity.securityProfiles.get` `networksecurity.securityProfiles.list` `networksecurity.serverTlsPolicies.get` `networksecurity.serverTlsPolicies.getIamPolicy` `networksecurity.serverTlsPolicies.list` `networksecurity.serverTlsPolicies.listEffectiveTags` `networksecurity.serverTlsPolicies.listTagBindings` `networksecurity.tlsInspectionPolicies.get` `networksecurity.tlsInspectionPolicies.list` `networksecurity.urlLists.get` `networksecurity.urlLists.list` `resourcemanager.projects.get` `resourcemanager.projects.list` |
| #### DNS Threat Detector Admin (`roles/networksecurity.dnsThreatDetectorAdmin`) Enables full access to DNS Threat Detector resources. | `networksecurity.dnsThreatDetectors.*` - `networksecurity.dnsThreatDetectors.create` - `networksecurity.dnsThreatDetectors.delete` - `networksecurity.dnsThreatDetectors.get` - `networksecurity.dnsThreatDetectors.list` - `networksecurity.dnsThreatDetectors.update` `resourcemanager.projects.get` `resourcemanager.projects.list` |
| #### DNS Threat Detector Viewer (`roles/networksecurity.dnsThreatDetectorViewer`) Enables view access to DNS Threat Detector resources. | `networksecurity.dnsThreatDetectors.get` `networksecurity.dnsThreatDetectors.list` `resourcemanager.projects.get` `resourcemanager.projects.list` |
| #### Firewall Endpoint Admin ^Beta^ (`roles/networksecurity.firewallEndpointAdmin`) Enables full access to firewall endpoint and firewall endpoint association resources. | `networksecurity.firewallEndpointAssociations.*` - `networksecurity.firewallEndpointAssociations.create` - `networksecurity.firewallEndpointAssociations.delete` - `networksecurity.firewallEndpointAssociations.get` - `networksecurity.firewallEndpointAssociations.list` - `networksecurity.firewallEndpointAssociations.update` `networksecurity.firewallEndpoints.*` - `networksecurity.firewallEndpoints.create` - `networksecurity.firewallEndpoints.createVerdictChangeRequest` - `networksecurity.firewallEndpoints.delete` - `networksecurity.firewallEndpoints.get` - `networksecurity.firewallEndpoints.getVerdictChangeRequest` - `networksecurity.firewallEndpoints.getWildfireReport` - `networksecurity.firewallEndpoints.getWildfireSample` - `networksecurity.firewallEndpoints.list` - `networksecurity.firewallEndpoints.listVerdictChangeRequests` - `networksecurity.firewallEndpoints.submitVerdictChangeRequest` - `networksecurity.firewallEndpoints.update` - `networksecurity.firewallEndpoints.use` - `networksecurity.firewallEndpoints.useWildfire` `networksecurity.operations.get` `networksecurity.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list` |
| #### Intercept Deployment Admin ^Beta^ (`roles/networksecurity.interceptDeploymentAdmin`) Enables full access to intercept resources on the Producer's side. | `networksecurity.interceptDeploymentGroups.*` - `networksecurity.interceptDeploymentGroups.create` - `networksecurity.interceptDeploymentGroups.delete` - `networksecurity.interceptDeploymentGroups.get` - `networksecurity.interceptDeploymentGroups.list` - `networksecurity.interceptDeploymentGroups.update` - `networksecurity.interceptDeploymentGroups.use` `networksecurity.interceptDeployments.*` - `networksecurity.interceptDeployments.create` - `networksecurity.interceptDeployments.delete` - `networksecurity.interceptDeployments.get` - `networksecurity.interceptDeployments.list` - `networksecurity.interceptDeployments.update` `resourcemanager.projects.get` `resourcemanager.projects.list` |
| #### Intercept Deployment External User ^Beta^ (`roles/networksecurity.interceptDeploymentExternalUser`) Allows an external consumer to connect to a producer's interceptDeploymentGroup. | `networksecurity.interceptDeploymentGroups.use` |
| #### Intercept Deployment User ^Beta^ (`roles/networksecurity.interceptDeploymentUser`) Allows a consumer to view and connect to a producer's interceptDeploymentGroup. | `networksecurity.interceptDeploymentGroups.get` `networksecurity.interceptDeploymentGroups.list` `networksecurity.interceptDeploymentGroups.use` |
| #### Intercept Deployment Viewer ^Beta^ (`roles/networksecurity.interceptDeploymentViewer`) Enables read-only access to intercept resources on the Producer's side. | `networksecurity.interceptDeploymentGroups.get` `networksecurity.interceptDeploymentGroups.list` `networksecurity.interceptDeployments.get` `networksecurity.interceptDeployments.list` `resourcemanager.projects.get` `resourcemanager.projects.list` |
| #### Intercept Endpoint Admin ^Beta^ (`roles/networksecurity.interceptEndpointAdmin`) Enables full access to intercept resources on the consumer's side. | `networksecurity.interceptEndpointGroupAssociations.*` - `networksecurity.interceptEndpointGroupAssociations.create` - `networksecurity.interceptEndpointGroupAssociations.delete` - `networksecurity.interceptEndpointGroupAssociations.get` - `networksecurity.interceptEndpointGroupAssociations.list` - `networksecurity.interceptEndpointGroupAssociations.update` `networksecurity.interceptEndpointGroups.*` - `networksecurity.interceptEndpointGroups.create` - `networksecurity.interceptEndpointGroups.delete` - `networksecurity.interceptEndpointGroups.get` - `networksecurity.interceptEndpointGroups.list` - `networksecurity.interceptEndpointGroups.update` - `networksecurity.interceptEndpointGroups.use` `resourcemanager.projects.get` `resourcemanager.projects.list` |
| #### Intercept Endpoint User ^Beta^ (`roles/networksecurity.interceptEndpointUser`) Allows a consumer to connect their networks to a interceptEndpointGroup. | `networksecurity.interceptEndpointGroups.get` `networksecurity.interceptEndpointGroups.list` `networksecurity.interceptEndpointGroups.use` |
| #### Intercept Endpoint Viewer ^Beta^ (`roles/networksecurity.interceptEndpointViewer`) Enables read-only access to intercept resources on the Consumer's side. | `networksecurity.interceptEndpointGroupAssociations.get` `networksecurity.interceptEndpointGroupAssociations.list` `networksecurity.interceptEndpointGroups.get` `networksecurity.interceptEndpointGroups.list` `resourcemanager.projects.get` `resourcemanager.projects.list` |
| #### Mirroring Deployment Admin ^Beta^ (`roles/networksecurity.mirroringDeploymentAdmin`) Enables full access to mirroring resources on the Producer's side. | `networksecurity.mirroringDeploymentGroups.*` - `networksecurity.mirroringDeploymentGroups.create` - `networksecurity.mirroringDeploymentGroups.delete` - `networksecurity.mirroringDeploymentGroups.get` - `networksecurity.mirroringDeploymentGroups.list` - `networksecurity.mirroringDeploymentGroups.update` - `networksecurity.mirroringDeploymentGroups.use` `networksecurity.mirroringDeployments.*` - `networksecurity.mirroringDeployments.create` - `networksecurity.mirroringDeployments.delete` - `networksecurity.mirroringDeployments.get` - `networksecurity.mirroringDeployments.list` - `networksecurity.mirroringDeployments.update` `resourcemanager.projects.get` `resourcemanager.projects.list` |
| #### Mirroring Deployment External User ^Beta^ (`roles/networksecurity.mirroringDeploymentExternalUser`) Allows an external consumer to a producer's mirroringDeploymentGroup. | `networksecurity.mirroringDeploymentGroups.use` |
| #### Mirroring Deployment User ^Beta^ (`roles/networksecurity.mirroringDeploymentUser`) Allows a consumer to view and connect to a Producer's mirroringDeploymentGroup. | `networksecurity.mirroringDeploymentGroups.get` `networksecurity.mirroringDeploymentGroups.list` `networksecurity.mirroringDeploymentGroups.use` |
| #### Mirroring Deployment Viewer ^Beta^ (`roles/networksecurity.mirroringDeploymentViewer`) Enables read-only access to mirroring resources on the Producer's side. | `networksecurity.mirroringDeploymentGroups.get` `networksecurity.mirroringDeploymentGroups.list` `networksecurity.mirroringDeployments.get` `networksecurity.mirroringDeployments.list` `resourcemanager.projects.get` `resourcemanager.projects.list` |
| #### Mirroring Endpoint Admin ^Beta^ (`roles/networksecurity.mirroringEndpointAdmin`) Enables full access to mirroring resources on the consumer's side. | `networksecurity.mirroringEndpointGroupAssociations.*` - `networksecurity.mirroringEndpointGroupAssociations.create` - `networksecurity.mirroringEndpointGroupAssociations.delete` - `networksecurity.mirroringEndpointGroupAssociations.get` - `networksecurity.mirroringEndpointGroupAssociations.list` - `networksecurity.mirroringEndpointGroupAssociations.update` `networksecurity.mirroringEndpointGroups.*` - `networksecurity.mirroringEndpointGroups.create` - `networksecurity.mirroringEndpointGroups.delete` - `networksecurity.mirroringEndpointGroups.get` - `networksecurity.mirroringEndpointGroups.list` - `networksecurity.mirroringEndpointGroups.update` - `networksecurity.mirroringEndpointGroups.use` `resourcemanager.projects.get` `resourcemanager.projects.list` |
| #### Mirroring Endpoint User ^Beta^ (`roles/networksecurity.mirroringEndpointUser`) Allows a consumer to connect their networks to a mirroringEndpointGroup. | `networksecurity.mirroringEndpointGroups.get` `networksecurity.mirroringEndpointGroups.list` `networksecurity.mirroringEndpointGroups.use` |
| #### Mirroring Endpoint Viewer ^Beta^ (`roles/networksecurity.mirroringEndpointViewer`) Enables read-only access to mirroring resources on the Consumer's side. | `networksecurity.mirroringEndpointGroupAssociations.get` `networksecurity.mirroringEndpointGroupAssociations.list` `networksecurity.mirroringEndpointGroups.get` `networksecurity.mirroringEndpointGroups.list` `resourcemanager.projects.get` `resourcemanager.projects.list` |
| #### Security Profile Admin ^Beta^ (`roles/networksecurity.securityProfileAdmin`) Enables full access to security profile and security profile group resources. | `networksecurity.operations.get` `networksecurity.operations.list` `networksecurity.securityProfileGroups.*` - `networksecurity.securityProfileGroups.create` - `networksecurity.securityProfileGroups.delete` - `networksecurity.securityProfileGroups.get` - `networksecurity.securityProfileGroups.list` - `networksecurity.securityProfileGroups.update` - `networksecurity.securityProfileGroups.use` `networksecurity.securityProfiles.*` - `networksecurity.securityProfiles.create` - `networksecurity.securityProfiles.delete` - `networksecurity.securityProfiles.get` - `networksecurity.securityProfiles.list` - `networksecurity.securityProfiles.update` - `networksecurity.securityProfiles.use` `resourcemanager.projects.get` `resourcemanager.projects.list` |

### Service agent roles


Service agent roles should only be granted to [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt).

| Role | Permissions |
|---|---|
| #### Network Security Authz Service Agent (`roles/networksecurity.authzServiceAgent`) Allows the Network Security service to access dependent resources > [!WARNING] > **Warning:** Do not grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). | `compute.forwardingRules.list` `compute.forwardingRules.update` `compute.globalForwardingRules.list` `compute.globalForwardingRules.update` `networkservices.authzExtensions.list` `networkservices.authzExtensions.use` |

## Network Security permissions

| Permission | Included in roles |
|---|---|
| #### `networksecurity.addressGroups.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.addressGroups.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.addressGroups.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.addressGroups.getIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.addressGroups.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.addressGroups.setIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.addressGroups.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.addressGroups.use` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.authorizationPolicies.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Anthos Service Mesh Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#anthosservicemesh.serviceAgent) (`roles/anthosservicemesh.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.authorizationPolicies.createTagBinding` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.authorizationPolicies.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Anthos Service Mesh Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#anthosservicemesh.serviceAgent) (`roles/anthosservicemesh.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.authorizationPolicies.deleteTagBinding` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.authorizationPolicies.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Anthos Service Mesh Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#anthosservicemesh.serviceAgent) (`roles/anthosservicemesh.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.authorizationPolicies.getIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.authorizationPolicies.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Anthos Service Mesh Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#anthosservicemesh.serviceAgent) (`roles/anthosservicemesh.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.authorizationPolicies.listEffectiveTags` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [Tag Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagViewer) (`roles/resourcemanager.tagViewer`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.authorizationPolicies.listTagBindings` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [Tag Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagViewer) (`roles/resourcemanager.tagViewer`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.authorizationPolicies.setIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.authorizationPolicies.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Anthos Service Mesh Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#anthosservicemesh.serviceAgent) (`roles/anthosservicemesh.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.authorizationPolicies.use` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Anthos Service Mesh Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#anthosservicemesh.serviceAgent) (`roles/anthosservicemesh.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.authzPolicies.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.authzPolicies.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.authzPolicies.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.authzPolicies.getIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.authzPolicies.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.authzPolicies.setIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.authzPolicies.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.backendAuthenticationConfigs.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Multi Cluster Ingress Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/multiclusteringress.md.txt#multiclusteringress.serviceAgent) (`roles/multiclusteringress.serviceAgent`) |
| #### `networksecurity.backendAuthenticationConfigs.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Multi Cluster Ingress Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/multiclusteringress.md.txt#multiclusteringress.serviceAgent) (`roles/multiclusteringress.serviceAgent`) |
| #### `networksecurity.backendAuthenticationConfigs.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Multi Cluster Ingress Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/multiclusteringress.md.txt#multiclusteringress.serviceAgent) (`roles/multiclusteringress.serviceAgent`) |
| #### `networksecurity.backendAuthenticationConfigs.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Multi Cluster Ingress Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/multiclusteringress.md.txt#multiclusteringress.serviceAgent) (`roles/multiclusteringress.serviceAgent`) |
| #### `networksecurity.backendAuthenticationConfigs.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Multi Cluster Ingress Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/multiclusteringress.md.txt#multiclusteringress.serviceAgent) (`roles/multiclusteringress.serviceAgent`) |
| #### `networksecurity.backendAuthenticationConfigs.use` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Multi Cluster Ingress Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/multiclusteringress.md.txt#multiclusteringress.serviceAgent) (`roles/multiclusteringress.serviceAgent`) |
| #### `networksecurity.clientTlsPolicies.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Anthos Service Mesh Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#anthosservicemesh.serviceAgent) (`roles/anthosservicemesh.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Mesh Config Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#meshconfig.serviceAgent) (`roles/meshconfig.serviceAgent`) |
| #### `networksecurity.clientTlsPolicies.createTagBinding` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.clientTlsPolicies.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Anthos Service Mesh Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#anthosservicemesh.serviceAgent) (`roles/anthosservicemesh.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Mesh Config Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#meshconfig.serviceAgent) (`roles/meshconfig.serviceAgent`) |
| #### `networksecurity.clientTlsPolicies.deleteTagBinding` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.clientTlsPolicies.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Load Balancer Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.loadBalancerAdmin) (`roles/compute.loadBalancerAdmin`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Anthos Service Mesh Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#anthosservicemesh.serviceAgent) (`roles/anthosservicemesh.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) - [Mesh Config Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#meshconfig.serviceAgent) (`roles/meshconfig.serviceAgent`) |
| #### `networksecurity.clientTlsPolicies.getIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.clientTlsPolicies.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Load Balancer Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.loadBalancerAdmin) (`roles/compute.loadBalancerAdmin`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Anthos Service Mesh Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#anthosservicemesh.serviceAgent) (`roles/anthosservicemesh.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) - [Mesh Config Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#meshconfig.serviceAgent) (`roles/meshconfig.serviceAgent`) |
| #### `networksecurity.clientTlsPolicies.listEffectiveTags` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [Tag Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagViewer) (`roles/resourcemanager.tagViewer`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.clientTlsPolicies.listTagBindings` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [Tag Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagViewer) (`roles/resourcemanager.tagViewer`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.clientTlsPolicies.setIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.clientTlsPolicies.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Anthos Service Mesh Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#anthosservicemesh.serviceAgent) (`roles/anthosservicemesh.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Mesh Config Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#meshconfig.serviceAgent) (`roles/meshconfig.serviceAgent`) |
| #### `networksecurity.clientTlsPolicies.use` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Load Balancer Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.loadBalancerAdmin) (`roles/compute.loadBalancerAdmin`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Anthos Service Mesh Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#anthosservicemesh.serviceAgent) (`roles/anthosservicemesh.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.dnsThreatDetectors.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [DNS Threat Detector Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.dnsThreatDetectorAdmin) (`roles/networksecurity.dnsThreatDetectorAdmin`) |
| #### `networksecurity.dnsThreatDetectors.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [DNS Threat Detector Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.dnsThreatDetectorAdmin) (`roles/networksecurity.dnsThreatDetectorAdmin`) |
| #### `networksecurity.dnsThreatDetectors.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [DNS Threat Detector Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.dnsThreatDetectorAdmin) (`roles/networksecurity.dnsThreatDetectorAdmin`) [DNS Threat Detector Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.dnsThreatDetectorViewer) (`roles/networksecurity.dnsThreatDetectorViewer`) |
| #### `networksecurity.dnsThreatDetectors.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [DNS Threat Detector Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.dnsThreatDetectorAdmin) (`roles/networksecurity.dnsThreatDetectorAdmin`) [DNS Threat Detector Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.dnsThreatDetectorViewer) (`roles/networksecurity.dnsThreatDetectorViewer`) |
| #### `networksecurity.dnsThreatDetectors.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [DNS Threat Detector Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.dnsThreatDetectorAdmin) (`roles/networksecurity.dnsThreatDetectorAdmin`) |
| #### `networksecurity.firewallEndpointAssociations.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Firewall Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.firewallEndpointAdmin) (`roles/networksecurity.firewallEndpointAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.firewallEndpointAssociations.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Firewall Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.firewallEndpointAdmin) (`roles/networksecurity.firewallEndpointAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.firewallEndpointAssociations.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Firewall Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.firewallEndpointAdmin) (`roles/networksecurity.firewallEndpointAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.firewallEndpointAssociations.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Firewall Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.firewallEndpointAdmin) (`roles/networksecurity.firewallEndpointAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.firewallEndpointAssociations.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Firewall Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.firewallEndpointAdmin) (`roles/networksecurity.firewallEndpointAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.firewallEndpoints.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Firewall Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.firewallEndpointAdmin) (`roles/networksecurity.firewallEndpointAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.firewallEndpoints.createVerdictChangeRequest` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Firewall Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.firewallEndpointAdmin) (`roles/networksecurity.firewallEndpointAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.firewallEndpoints.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Firewall Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.firewallEndpointAdmin) (`roles/networksecurity.firewallEndpointAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.firewallEndpoints.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Firewall Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.firewallEndpointAdmin) (`roles/networksecurity.firewallEndpointAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.firewallEndpoints.getVerdictChangeRequest` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Firewall Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.firewallEndpointAdmin) (`roles/networksecurity.firewallEndpointAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.firewallEndpoints.getWildfireReport` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Firewall Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.firewallEndpointAdmin) (`roles/networksecurity.firewallEndpointAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.firewallEndpoints.getWildfireSample` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Firewall Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.firewallEndpointAdmin) (`roles/networksecurity.firewallEndpointAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.firewallEndpoints.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Firewall Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.firewallEndpointAdmin) (`roles/networksecurity.firewallEndpointAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.firewallEndpoints.listVerdictChangeRequests` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Firewall Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.firewallEndpointAdmin) (`roles/networksecurity.firewallEndpointAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.firewallEndpoints.submitVerdictChangeRequest` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Firewall Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.firewallEndpointAdmin) (`roles/networksecurity.firewallEndpointAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.firewallEndpoints.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Firewall Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.firewallEndpointAdmin) (`roles/networksecurity.firewallEndpointAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.firewallEndpoints.use` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Firewall Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.firewallEndpointAdmin) (`roles/networksecurity.firewallEndpointAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.firewallEndpoints.useWildfire` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Firewall Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.firewallEndpointAdmin) (`roles/networksecurity.firewallEndpointAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.gatewaySecurityPolicies.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.gatewaySecurityPolicies.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.gatewaySecurityPolicies.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.gatewaySecurityPolicies.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.gatewaySecurityPolicies.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.gatewaySecurityPolicies.use` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.gatewaySecurityPolicyRules.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.gatewaySecurityPolicyRules.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.gatewaySecurityPolicyRules.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.gatewaySecurityPolicyRules.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.gatewaySecurityPolicyRules.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.gatewaySecurityPolicyRules.use` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.interceptDeploymentGroups.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Intercept Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptDeploymentAdmin) (`roles/networksecurity.interceptDeploymentAdmin`) |
| #### `networksecurity.interceptDeploymentGroups.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Intercept Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptDeploymentAdmin) (`roles/networksecurity.interceptDeploymentAdmin`) |
| #### `networksecurity.interceptDeploymentGroups.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Intercept Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptDeploymentAdmin) (`roles/networksecurity.interceptDeploymentAdmin`) [Intercept Deployment User](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptDeploymentUser) (`roles/networksecurity.interceptDeploymentUser`) [Intercept Deployment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptDeploymentViewer) (`roles/networksecurity.interceptDeploymentViewer`) |
| #### `networksecurity.interceptDeploymentGroups.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Intercept Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptDeploymentAdmin) (`roles/networksecurity.interceptDeploymentAdmin`) [Intercept Deployment User](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptDeploymentUser) (`roles/networksecurity.interceptDeploymentUser`) [Intercept Deployment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptDeploymentViewer) (`roles/networksecurity.interceptDeploymentViewer`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) |
| #### `networksecurity.interceptDeploymentGroups.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Intercept Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptDeploymentAdmin) (`roles/networksecurity.interceptDeploymentAdmin`) |
| #### `networksecurity.interceptDeploymentGroups.use` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Intercept Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptDeploymentAdmin) (`roles/networksecurity.interceptDeploymentAdmin`) [Intercept Deployment External User](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptDeploymentExternalUser) (`roles/networksecurity.interceptDeploymentExternalUser`) [Intercept Deployment User](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptDeploymentUser) (`roles/networksecurity.interceptDeploymentUser`) |
| #### `networksecurity.interceptDeployments.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Intercept Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptDeploymentAdmin) (`roles/networksecurity.interceptDeploymentAdmin`) |
| #### `networksecurity.interceptDeployments.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Intercept Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptDeploymentAdmin) (`roles/networksecurity.interceptDeploymentAdmin`) |
| #### `networksecurity.interceptDeployments.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Intercept Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptDeploymentAdmin) (`roles/networksecurity.interceptDeploymentAdmin`) [Intercept Deployment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptDeploymentViewer) (`roles/networksecurity.interceptDeploymentViewer`) |
| #### `networksecurity.interceptDeployments.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Intercept Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptDeploymentAdmin) (`roles/networksecurity.interceptDeploymentAdmin`) [Intercept Deployment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptDeploymentViewer) (`roles/networksecurity.interceptDeploymentViewer`) |
| #### `networksecurity.interceptDeployments.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Intercept Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptDeploymentAdmin) (`roles/networksecurity.interceptDeploymentAdmin`) |
| #### `networksecurity.interceptEndpointGroupAssociations.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Intercept Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptEndpointAdmin) (`roles/networksecurity.interceptEndpointAdmin`) |
| #### `networksecurity.interceptEndpointGroupAssociations.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Intercept Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptEndpointAdmin) (`roles/networksecurity.interceptEndpointAdmin`) |
| #### `networksecurity.interceptEndpointGroupAssociations.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Intercept Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptEndpointAdmin) (`roles/networksecurity.interceptEndpointAdmin`) [Intercept Endpoint Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptEndpointViewer) (`roles/networksecurity.interceptEndpointViewer`) |
| #### `networksecurity.interceptEndpointGroupAssociations.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Intercept Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptEndpointAdmin) (`roles/networksecurity.interceptEndpointAdmin`) [Intercept Endpoint Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptEndpointViewer) (`roles/networksecurity.interceptEndpointViewer`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) |
| #### `networksecurity.interceptEndpointGroupAssociations.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Intercept Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptEndpointAdmin) (`roles/networksecurity.interceptEndpointAdmin`) |
| #### `networksecurity.interceptEndpointGroups.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Intercept Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptEndpointAdmin) (`roles/networksecurity.interceptEndpointAdmin`) |
| #### `networksecurity.interceptEndpointGroups.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Intercept Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptEndpointAdmin) (`roles/networksecurity.interceptEndpointAdmin`) |
| #### `networksecurity.interceptEndpointGroups.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Intercept Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptEndpointAdmin) (`roles/networksecurity.interceptEndpointAdmin`) [Intercept Endpoint User](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptEndpointUser) (`roles/networksecurity.interceptEndpointUser`) [Intercept Endpoint Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptEndpointViewer) (`roles/networksecurity.interceptEndpointViewer`) |
| #### `networksecurity.interceptEndpointGroups.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Intercept Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptEndpointAdmin) (`roles/networksecurity.interceptEndpointAdmin`) [Intercept Endpoint User](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptEndpointUser) (`roles/networksecurity.interceptEndpointUser`) [Intercept Endpoint Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptEndpointViewer) (`roles/networksecurity.interceptEndpointViewer`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) |
| #### `networksecurity.interceptEndpointGroups.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Intercept Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptEndpointAdmin) (`roles/networksecurity.interceptEndpointAdmin`) |
| #### `networksecurity.interceptEndpointGroups.use` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Intercept Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptEndpointAdmin) (`roles/networksecurity.interceptEndpointAdmin`) [Intercept Endpoint User](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptEndpointUser) (`roles/networksecurity.interceptEndpointUser`) |
| #### `networksecurity.locations.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.locations.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.mirroringDeploymentGroups.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Mirroring Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringDeploymentAdmin) (`roles/networksecurity.mirroringDeploymentAdmin`) |
| #### `networksecurity.mirroringDeploymentGroups.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Mirroring Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringDeploymentAdmin) (`roles/networksecurity.mirroringDeploymentAdmin`) |
| #### `networksecurity.mirroringDeploymentGroups.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Mirroring Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringDeploymentAdmin) (`roles/networksecurity.mirroringDeploymentAdmin`) [Mirroring Deployment User](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringDeploymentUser) (`roles/networksecurity.mirroringDeploymentUser`) [Mirroring Deployment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringDeploymentViewer) (`roles/networksecurity.mirroringDeploymentViewer`) |
| #### `networksecurity.mirroringDeploymentGroups.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Mirroring Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringDeploymentAdmin) (`roles/networksecurity.mirroringDeploymentAdmin`) [Mirroring Deployment User](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringDeploymentUser) (`roles/networksecurity.mirroringDeploymentUser`) [Mirroring Deployment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringDeploymentViewer) (`roles/networksecurity.mirroringDeploymentViewer`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) |
| #### `networksecurity.mirroringDeploymentGroups.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Mirroring Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringDeploymentAdmin) (`roles/networksecurity.mirroringDeploymentAdmin`) |
| #### `networksecurity.mirroringDeploymentGroups.use` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Mirroring Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringDeploymentAdmin) (`roles/networksecurity.mirroringDeploymentAdmin`) [Mirroring Deployment External User](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringDeploymentExternalUser) (`roles/networksecurity.mirroringDeploymentExternalUser`) [Mirroring Deployment User](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringDeploymentUser) (`roles/networksecurity.mirroringDeploymentUser`) |
| #### `networksecurity.mirroringDeployments.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Mirroring Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringDeploymentAdmin) (`roles/networksecurity.mirroringDeploymentAdmin`) |
| #### `networksecurity.mirroringDeployments.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Mirroring Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringDeploymentAdmin) (`roles/networksecurity.mirroringDeploymentAdmin`) |
| #### `networksecurity.mirroringDeployments.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Mirroring Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringDeploymentAdmin) (`roles/networksecurity.mirroringDeploymentAdmin`) [Mirroring Deployment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringDeploymentViewer) (`roles/networksecurity.mirroringDeploymentViewer`) |
| #### `networksecurity.mirroringDeployments.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Mirroring Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringDeploymentAdmin) (`roles/networksecurity.mirroringDeploymentAdmin`) [Mirroring Deployment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringDeploymentViewer) (`roles/networksecurity.mirroringDeploymentViewer`) |
| #### `networksecurity.mirroringDeployments.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Mirroring Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringDeploymentAdmin) (`roles/networksecurity.mirroringDeploymentAdmin`) |
| #### `networksecurity.mirroringEndpointGroupAssociations.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Mirroring Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringEndpointAdmin) (`roles/networksecurity.mirroringEndpointAdmin`) |
| #### `networksecurity.mirroringEndpointGroupAssociations.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Mirroring Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringEndpointAdmin) (`roles/networksecurity.mirroringEndpointAdmin`) |
| #### `networksecurity.mirroringEndpointGroupAssociations.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Mirroring Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringEndpointAdmin) (`roles/networksecurity.mirroringEndpointAdmin`) [Mirroring Endpoint Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringEndpointViewer) (`roles/networksecurity.mirroringEndpointViewer`) |
| #### `networksecurity.mirroringEndpointGroupAssociations.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Mirroring Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringEndpointAdmin) (`roles/networksecurity.mirroringEndpointAdmin`) [Mirroring Endpoint Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringEndpointViewer) (`roles/networksecurity.mirroringEndpointViewer`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) |
| #### `networksecurity.mirroringEndpointGroupAssociations.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Mirroring Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringEndpointAdmin) (`roles/networksecurity.mirroringEndpointAdmin`) |
| #### `networksecurity.mirroringEndpointGroups.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Mirroring Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringEndpointAdmin) (`roles/networksecurity.mirroringEndpointAdmin`) |
| #### `networksecurity.mirroringEndpointGroups.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Mirroring Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringEndpointAdmin) (`roles/networksecurity.mirroringEndpointAdmin`) |
| #### `networksecurity.mirroringEndpointGroups.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Mirroring Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringEndpointAdmin) (`roles/networksecurity.mirroringEndpointAdmin`) [Mirroring Endpoint User](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringEndpointUser) (`roles/networksecurity.mirroringEndpointUser`) [Mirroring Endpoint Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringEndpointViewer) (`roles/networksecurity.mirroringEndpointViewer`) |
| #### `networksecurity.mirroringEndpointGroups.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Mirroring Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringEndpointAdmin) (`roles/networksecurity.mirroringEndpointAdmin`) [Mirroring Endpoint User](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringEndpointUser) (`roles/networksecurity.mirroringEndpointUser`) [Mirroring Endpoint Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringEndpointViewer) (`roles/networksecurity.mirroringEndpointViewer`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) |
| #### `networksecurity.mirroringEndpointGroups.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Mirroring Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringEndpointAdmin) (`roles/networksecurity.mirroringEndpointAdmin`) |
| #### `networksecurity.mirroringEndpointGroups.use` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Mirroring Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringEndpointAdmin) (`roles/networksecurity.mirroringEndpointAdmin`) [Mirroring Endpoint User](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringEndpointUser) (`roles/networksecurity.mirroringEndpointUser`) |
| #### `networksecurity.operations.cancel` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Anthos Service Mesh Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#anthosservicemesh.serviceAgent) (`roles/anthosservicemesh.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.operations.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Anthos Service Mesh Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#anthosservicemesh.serviceAgent) (`roles/anthosservicemesh.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.operations.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Firewall Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.firewallEndpointAdmin) (`roles/networksecurity.firewallEndpointAdmin`) [Security Profile Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.securityProfileAdmin) (`roles/networksecurity.securityProfileAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Anthos Service Mesh Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#anthosservicemesh.serviceAgent) (`roles/anthosservicemesh.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) - [Multi Cluster Ingress Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/multiclusteringress.md.txt#multiclusteringress.serviceAgent) (`roles/multiclusteringress.serviceAgent`) |
| #### `networksecurity.operations.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Firewall Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.firewallEndpointAdmin) (`roles/networksecurity.firewallEndpointAdmin`) [Security Profile Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.securityProfileAdmin) (`roles/networksecurity.securityProfileAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Anthos Service Mesh Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#anthosservicemesh.serviceAgent) (`roles/anthosservicemesh.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.sacAttachments.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.sacAttachments.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.sacAttachments.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.sacAttachments.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.sacRealms.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.sacRealms.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.sacRealms.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.sacRealms.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.securityProfileGroups.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Profile Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.securityProfileAdmin) (`roles/networksecurity.securityProfileAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.securityProfileGroups.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Profile Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.securityProfileAdmin) (`roles/networksecurity.securityProfileAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.securityProfileGroups.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Security Profile Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.securityProfileAdmin) (`roles/networksecurity.securityProfileAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.securityProfileGroups.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Security Profile Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.securityProfileAdmin) (`roles/networksecurity.securityProfileAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.securityProfileGroups.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Profile Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.securityProfileAdmin) (`roles/networksecurity.securityProfileAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.securityProfileGroups.use` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Profile Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.securityProfileAdmin) (`roles/networksecurity.securityProfileAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.securityProfiles.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Profile Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.securityProfileAdmin) (`roles/networksecurity.securityProfileAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.securityProfiles.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Profile Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.securityProfileAdmin) (`roles/networksecurity.securityProfileAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.securityProfiles.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Security Profile Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.securityProfileAdmin) (`roles/networksecurity.securityProfileAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.securityProfiles.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Security Profile Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.securityProfileAdmin) (`roles/networksecurity.securityProfileAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.securityProfiles.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Profile Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.securityProfileAdmin) (`roles/networksecurity.securityProfileAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.securityProfiles.use` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Profile Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.securityProfileAdmin) (`roles/networksecurity.securityProfileAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.serverTlsPolicies.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Anthos Service Mesh Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#anthosservicemesh.serviceAgent) (`roles/anthosservicemesh.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Mesh Config Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#meshconfig.serviceAgent) (`roles/meshconfig.serviceAgent`) - [Multi Cluster Ingress Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/multiclusteringress.md.txt#multiclusteringress.serviceAgent) (`roles/multiclusteringress.serviceAgent`) |
| #### `networksecurity.serverTlsPolicies.createTagBinding` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.serverTlsPolicies.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Anthos Service Mesh Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#anthosservicemesh.serviceAgent) (`roles/anthosservicemesh.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Mesh Config Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#meshconfig.serviceAgent) (`roles/meshconfig.serviceAgent`) - [Multi Cluster Ingress Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/multiclusteringress.md.txt#multiclusteringress.serviceAgent) (`roles/multiclusteringress.serviceAgent`) |
| #### `networksecurity.serverTlsPolicies.deleteTagBinding` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.serverTlsPolicies.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Load Balancer Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.loadBalancerAdmin) (`roles/compute.loadBalancerAdmin`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Anthos Service Mesh Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#anthosservicemesh.serviceAgent) (`roles/anthosservicemesh.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) - [Mesh Config Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#meshconfig.serviceAgent) (`roles/meshconfig.serviceAgent`) - [Multi Cluster Ingress Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/multiclusteringress.md.txt#multiclusteringress.serviceAgent) (`roles/multiclusteringress.serviceAgent`) |
| #### `networksecurity.serverTlsPolicies.getIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.serverTlsPolicies.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Load Balancer Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.loadBalancerAdmin) (`roles/compute.loadBalancerAdmin`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Anthos Service Mesh Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#anthosservicemesh.serviceAgent) (`roles/anthosservicemesh.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) - [Mesh Config Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#meshconfig.serviceAgent) (`roles/meshconfig.serviceAgent`) - [Multi Cluster Ingress Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/multiclusteringress.md.txt#multiclusteringress.serviceAgent) (`roles/multiclusteringress.serviceAgent`) |
| #### `networksecurity.serverTlsPolicies.listEffectiveTags` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [Tag Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagViewer) (`roles/resourcemanager.tagViewer`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.serverTlsPolicies.listTagBindings` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [Tag Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagViewer) (`roles/resourcemanager.tagViewer`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.serverTlsPolicies.setIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.serverTlsPolicies.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Anthos Service Mesh Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#anthosservicemesh.serviceAgent) (`roles/anthosservicemesh.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Mesh Config Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#meshconfig.serviceAgent) (`roles/meshconfig.serviceAgent`) - [Multi Cluster Ingress Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/multiclusteringress.md.txt#multiclusteringress.serviceAgent) (`roles/multiclusteringress.serviceAgent`) |
| #### `networksecurity.serverTlsPolicies.use` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Load Balancer Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.loadBalancerAdmin) (`roles/compute.loadBalancerAdmin`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Anthos Service Mesh Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#anthosservicemesh.serviceAgent) (`roles/anthosservicemesh.serviceAgent`) - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) - [Multi Cluster Ingress Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/multiclusteringress.md.txt#multiclusteringress.serviceAgent) (`roles/multiclusteringress.serviceAgent`) |
| #### `networksecurity.tlsInspectionPolicies.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.tlsInspectionPolicies.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.tlsInspectionPolicies.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.tlsInspectionPolicies.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.tlsInspectionPolicies.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.tlsInspectionPolicies.use` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.urlLists.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.urlLists.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.urlLists.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.urlLists.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [External Exposure Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.serviceAgent) (`roles/externalexposure.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |
| #### `networksecurity.urlLists.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) |
| #### `networksecurity.urlLists.use` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) |