Network Security roles and permissions

This page lists the IAM roles and permissions for Network Security. To search through all roles and permissions, see the role and permission index.

Network Security roles

Role	Permissions
Networksecurity Admin (roles/networksecurity.admin) Admin role for networksecurity	networksecurity.* networksecurity.addressGroups.create networksecurity.addressGroups.delete networksecurity.addressGroups.get networksecurity.addressGroups.getIamPolicy networksecurity.addressGroups.list networksecurity.addressGroups.setIamPolicy networksecurity.addressGroups.update networksecurity.addressGroups.use networksecurity.authorizationPolicies.create networksecurity.authorizationPolicies.delete networksecurity.authorizationPolicies.get networksecurity.authorizationPolicies.getIamPolicy networksecurity.authorizationPolicies.list networksecurity.authorizationPolicies.setIamPolicy networksecurity.authorizationPolicies.update networksecurity.authorizationPolicies.use networksecurity.authzPolicies.create networksecurity.authzPolicies.delete networksecurity.authzPolicies.get networksecurity.authzPolicies.getIamPolicy networksecurity.authzPolicies.list networksecurity.authzPolicies.setIamPolicy networksecurity.authzPolicies.update networksecurity.backendAuthenticationConfigs.create networksecurity.backendAuthenticationConfigs.delete networksecurity.backendAuthenticationConfigs.get networksecurity.backendAuthenticationConfigs.list networksecurity.backendAuthenticationConfigs.update networksecurity.backendAuthenticationConfigs.use networksecurity.clientTlsPolicies.create networksecurity.clientTlsPolicies.delete networksecurity.clientTlsPolicies.get networksecurity.clientTlsPolicies.getIamPolicy networksecurity.clientTlsPolicies.list networksecurity.clientTlsPolicies.setIamPolicy networksecurity.clientTlsPolicies.update networksecurity.clientTlsPolicies.use networksecurity.dnsThreatDetectors.create networksecurity.dnsThreatDetectors.delete networksecurity.dnsThreatDetectors.get networksecurity.dnsThreatDetectors.list networksecurity.dnsThreatDetectors.update networksecurity.firewallEndpointAssociations.create networksecurity.firewallEndpointAssociations.delete networksecurity.firewallEndpointAssociations.get networksecurity.firewallEndpointAssociations.list networksecurity.firewallEndpointAssociations.update networksecurity.firewallEndpoints.create networksecurity.firewallEndpoints.delete networksecurity.firewallEndpoints.get networksecurity.firewallEndpoints.list networksecurity.firewallEndpoints.update networksecurity.firewallEndpoints.use networksecurity.gatewaySecurityPolicies.create networksecurity.gatewaySecurityPolicies.delete networksecurity.gatewaySecurityPolicies.get networksecurity.gatewaySecurityPolicies.list networksecurity.gatewaySecurityPolicies.update networksecurity.gatewaySecurityPolicies.use networksecurity.gatewaySecurityPolicyRules.create networksecurity.gatewaySecurityPolicyRules.delete networksecurity.gatewaySecurityPolicyRules.get networksecurity.gatewaySecurityPolicyRules.list networksecurity.gatewaySecurityPolicyRules.update networksecurity.gatewaySecurityPolicyRules.use networksecurity.interceptDeploymentGroups.create networksecurity.interceptDeploymentGroups.delete networksecurity.interceptDeploymentGroups.get networksecurity.interceptDeploymentGroups.list networksecurity.interceptDeploymentGroups.update networksecurity.interceptDeploymentGroups.use networksecurity.interceptDeployments.create networksecurity.interceptDeployments.delete networksecurity.interceptDeployments.get networksecurity.interceptDeployments.list networksecurity.interceptDeployments.update networksecurity.interceptEndpointGroupAssociations.create networksecurity.interceptEndpointGroupAssociations.delete networksecurity.interceptEndpointGroupAssociations.get networksecurity.interceptEndpointGroupAssociations.list networksecurity.interceptEndpointGroupAssociations.update networksecurity.interceptEndpointGroups.create networksecurity.interceptEndpointGroups.delete networksecurity.interceptEndpointGroups.get networksecurity.interceptEndpointGroups.list networksecurity.interceptEndpointGroups.update networksecurity.interceptEndpointGroups.use networksecurity.locations.get networksecurity.locations.list networksecurity.mirroringDeploymentGroups.create networksecurity.mirroringDeploymentGroups.delete networksecurity.mirroringDeploymentGroups.get networksecurity.mirroringDeploymentGroups.list networksecurity.mirroringDeploymentGroups.update networksecurity.mirroringDeploymentGroups.use networksecurity.mirroringDeployments.create networksecurity.mirroringDeployments.delete networksecurity.mirroringDeployments.get networksecurity.mirroringDeployments.list networksecurity.mirroringDeployments.update networksecurity.mirroringEndpointGroupAssociations.create networksecurity.mirroringEndpointGroupAssociations.delete networksecurity.mirroringEndpointGroupAssociations.get networksecurity.mirroringEndpointGroupAssociations.list networksecurity.mirroringEndpointGroupAssociations.update networksecurity.mirroringEndpointGroups.create networksecurity.mirroringEndpointGroups.delete networksecurity.mirroringEndpointGroups.get networksecurity.mirroringEndpointGroups.list networksecurity.mirroringEndpointGroups.update networksecurity.mirroringEndpointGroups.use networksecurity.operations.cancel networksecurity.operations.delete networksecurity.operations.get networksecurity.operations.list networksecurity.sacAttachments.create networksecurity.sacAttachments.delete networksecurity.sacAttachments.get networksecurity.sacAttachments.list networksecurity.sacRealms.create networksecurity.sacRealms.delete networksecurity.sacRealms.get networksecurity.sacRealms.list networksecurity.securityProfileGroups.create networksecurity.securityProfileGroups.delete networksecurity.securityProfileGroups.get networksecurity.securityProfileGroups.list networksecurity.securityProfileGroups.update networksecurity.securityProfileGroups.use networksecurity.securityProfiles.create networksecurity.securityProfiles.delete networksecurity.securityProfiles.get networksecurity.securityProfiles.list networksecurity.securityProfiles.update networksecurity.securityProfiles.use networksecurity.serverTlsPolicies.create networksecurity.serverTlsPolicies.delete networksecurity.serverTlsPolicies.get networksecurity.serverTlsPolicies.getIamPolicy networksecurity.serverTlsPolicies.list networksecurity.serverTlsPolicies.setIamPolicy networksecurity.serverTlsPolicies.update networksecurity.serverTlsPolicies.use networksecurity.tlsInspectionPolicies.create networksecurity.tlsInspectionPolicies.delete networksecurity.tlsInspectionPolicies.get networksecurity.tlsInspectionPolicies.list networksecurity.tlsInspectionPolicies.update networksecurity.tlsInspectionPolicies.use networksecurity.urlLists.create networksecurity.urlLists.delete networksecurity.urlLists.get networksecurity.urlLists.list networksecurity.urlLists.update networksecurity.urlLists.use resourcemanager.projects.get resourcemanager.projects.list
Networksecurity Editor (roles/networksecurity.editor) Editor role for networksecurity	networksecurity.addressGroups.create networksecurity.addressGroups.delete networksecurity.addressGroups.get networksecurity.addressGroups.getIamPolicy networksecurity.addressGroups.list networksecurity.addressGroups.update networksecurity.addressGroups.use networksecurity.authorizationPolicies.create networksecurity.authorizationPolicies.delete networksecurity.authorizationPolicies.get networksecurity.authorizationPolicies.getIamPolicy networksecurity.authorizationPolicies.list networksecurity.authorizationPolicies.update networksecurity.authorizationPolicies.use networksecurity.authzPolicies.create networksecurity.authzPolicies.delete networksecurity.authzPolicies.get networksecurity.authzPolicies.getIamPolicy networksecurity.authzPolicies.list networksecurity.authzPolicies.update networksecurity.backendAuthenticationConfigs.* networksecurity.backendAuthenticationConfigs.create networksecurity.backendAuthenticationConfigs.delete networksecurity.backendAuthenticationConfigs.get networksecurity.backendAuthenticationConfigs.list networksecurity.backendAuthenticationConfigs.update networksecurity.backendAuthenticationConfigs.use networksecurity.clientTlsPolicies.create networksecurity.clientTlsPolicies.delete networksecurity.clientTlsPolicies.get networksecurity.clientTlsPolicies.getIamPolicy networksecurity.clientTlsPolicies.list networksecurity.clientTlsPolicies.update networksecurity.clientTlsPolicies.use networksecurity.dnsThreatDetectors.* networksecurity.dnsThreatDetectors.create networksecurity.dnsThreatDetectors.delete networksecurity.dnsThreatDetectors.get networksecurity.dnsThreatDetectors.list networksecurity.dnsThreatDetectors.update networksecurity.firewallEndpointAssociations.* networksecurity.firewallEndpointAssociations.create networksecurity.firewallEndpointAssociations.delete networksecurity.firewallEndpointAssociations.get networksecurity.firewallEndpointAssociations.list networksecurity.firewallEndpointAssociations.update networksecurity.firewallEndpoints.* networksecurity.firewallEndpoints.create networksecurity.firewallEndpoints.delete networksecurity.firewallEndpoints.get networksecurity.firewallEndpoints.list networksecurity.firewallEndpoints.update networksecurity.firewallEndpoints.use networksecurity.gatewaySecurityPolicies.* networksecurity.gatewaySecurityPolicies.create networksecurity.gatewaySecurityPolicies.delete networksecurity.gatewaySecurityPolicies.get networksecurity.gatewaySecurityPolicies.list networksecurity.gatewaySecurityPolicies.update networksecurity.gatewaySecurityPolicies.use networksecurity.gatewaySecurityPolicyRules.* networksecurity.gatewaySecurityPolicyRules.create networksecurity.gatewaySecurityPolicyRules.delete networksecurity.gatewaySecurityPolicyRules.get networksecurity.gatewaySecurityPolicyRules.list networksecurity.gatewaySecurityPolicyRules.update networksecurity.gatewaySecurityPolicyRules.use networksecurity.interceptDeploymentGroups.* networksecurity.interceptDeploymentGroups.create networksecurity.interceptDeploymentGroups.delete networksecurity.interceptDeploymentGroups.get networksecurity.interceptDeploymentGroups.list networksecurity.interceptDeploymentGroups.update networksecurity.interceptDeploymentGroups.use networksecurity.interceptDeployments.* networksecurity.interceptDeployments.create networksecurity.interceptDeployments.delete networksecurity.interceptDeployments.get networksecurity.interceptDeployments.list networksecurity.interceptDeployments.update networksecurity.interceptEndpointGroupAssociations.* networksecurity.interceptEndpointGroupAssociations.create networksecurity.interceptEndpointGroupAssociations.delete networksecurity.interceptEndpointGroupAssociations.get networksecurity.interceptEndpointGroupAssociations.list networksecurity.interceptEndpointGroupAssociations.update networksecurity.interceptEndpointGroups.* networksecurity.interceptEndpointGroups.create networksecurity.interceptEndpointGroups.delete networksecurity.interceptEndpointGroups.get networksecurity.interceptEndpointGroups.list networksecurity.interceptEndpointGroups.update networksecurity.interceptEndpointGroups.use networksecurity.locations.* networksecurity.locations.get networksecurity.locations.list networksecurity.mirroringDeploymentGroups.* networksecurity.mirroringDeploymentGroups.create networksecurity.mirroringDeploymentGroups.delete networksecurity.mirroringDeploymentGroups.get networksecurity.mirroringDeploymentGroups.list networksecurity.mirroringDeploymentGroups.update networksecurity.mirroringDeploymentGroups.use networksecurity.mirroringDeployments.* networksecurity.mirroringDeployments.create networksecurity.mirroringDeployments.delete networksecurity.mirroringDeployments.get networksecurity.mirroringDeployments.list networksecurity.mirroringDeployments.update networksecurity.mirroringEndpointGroupAssociations.* networksecurity.mirroringEndpointGroupAssociations.create networksecurity.mirroringEndpointGroupAssociations.delete networksecurity.mirroringEndpointGroupAssociations.get networksecurity.mirroringEndpointGroupAssociations.list networksecurity.mirroringEndpointGroupAssociations.update networksecurity.mirroringEndpointGroups.* networksecurity.mirroringEndpointGroups.create networksecurity.mirroringEndpointGroups.delete networksecurity.mirroringEndpointGroups.get networksecurity.mirroringEndpointGroups.list networksecurity.mirroringEndpointGroups.update networksecurity.mirroringEndpointGroups.use networksecurity.operations.* networksecurity.operations.cancel networksecurity.operations.delete networksecurity.operations.get networksecurity.operations.list networksecurity.sacAttachments.* networksecurity.sacAttachments.create networksecurity.sacAttachments.delete networksecurity.sacAttachments.get networksecurity.sacAttachments.list networksecurity.sacRealms.* networksecurity.sacRealms.create networksecurity.sacRealms.delete networksecurity.sacRealms.get networksecurity.sacRealms.list networksecurity.securityProfileGroups.* networksecurity.securityProfileGroups.create networksecurity.securityProfileGroups.delete networksecurity.securityProfileGroups.get networksecurity.securityProfileGroups.list networksecurity.securityProfileGroups.update networksecurity.securityProfileGroups.use networksecurity.securityProfiles.* networksecurity.securityProfiles.create networksecurity.securityProfiles.delete networksecurity.securityProfiles.get networksecurity.securityProfiles.list networksecurity.securityProfiles.update networksecurity.securityProfiles.use networksecurity.serverTlsPolicies.create networksecurity.serverTlsPolicies.delete networksecurity.serverTlsPolicies.get networksecurity.serverTlsPolicies.getIamPolicy networksecurity.serverTlsPolicies.list networksecurity.serverTlsPolicies.update networksecurity.serverTlsPolicies.use networksecurity.tlsInspectionPolicies.* networksecurity.tlsInspectionPolicies.create networksecurity.tlsInspectionPolicies.delete networksecurity.tlsInspectionPolicies.get networksecurity.tlsInspectionPolicies.list networksecurity.tlsInspectionPolicies.update networksecurity.tlsInspectionPolicies.use networksecurity.urlLists.* networksecurity.urlLists.create networksecurity.urlLists.delete networksecurity.urlLists.get networksecurity.urlLists.list networksecurity.urlLists.update networksecurity.urlLists.use resourcemanager.projects.get resourcemanager.projects.list
Networksecurity Viewer (roles/networksecurity.viewer) Viewer role for networksecurity	networksecurity.addressGroups.get networksecurity.addressGroups.getIamPolicy networksecurity.addressGroups.list networksecurity.authorizationPolicies.get networksecurity.authorizationPolicies.getIamPolicy networksecurity.authorizationPolicies.list networksecurity.authzPolicies.get networksecurity.authzPolicies.getIamPolicy networksecurity.authzPolicies.list networksecurity.backendAuthenticationConfigs.get networksecurity.backendAuthenticationConfigs.list networksecurity.clientTlsPolicies.get networksecurity.clientTlsPolicies.getIamPolicy networksecurity.clientTlsPolicies.list networksecurity.dnsThreatDetectors.get networksecurity.dnsThreatDetectors.list networksecurity.firewallEndpointAssociations.get networksecurity.firewallEndpointAssociations.list networksecurity.firewallEndpoints.get networksecurity.firewallEndpoints.list networksecurity.gatewaySecurityPolicies.get networksecurity.gatewaySecurityPolicies.list networksecurity.gatewaySecurityPolicyRules.get networksecurity.gatewaySecurityPolicyRules.list networksecurity.interceptDeploymentGroups.get networksecurity.interceptDeploymentGroups.list networksecurity.interceptDeployments.get networksecurity.interceptDeployments.list networksecurity.interceptEndpointGroupAssociations.get networksecurity.interceptEndpointGroupAssociations.list networksecurity.interceptEndpointGroups.get networksecurity.interceptEndpointGroups.list networksecurity.locations.* networksecurity.locations.get networksecurity.locations.list networksecurity.mirroringDeploymentGroups.get networksecurity.mirroringDeploymentGroups.list networksecurity.mirroringDeployments.get networksecurity.mirroringDeployments.list networksecurity.mirroringEndpointGroupAssociations.get networksecurity.mirroringEndpointGroupAssociations.list networksecurity.mirroringEndpointGroups.get networksecurity.mirroringEndpointGroups.list networksecurity.operations.get networksecurity.operations.list networksecurity.sacAttachments.get networksecurity.sacAttachments.list networksecurity.sacRealms.get networksecurity.sacRealms.list networksecurity.securityProfileGroups.get networksecurity.securityProfileGroups.list networksecurity.securityProfiles.get networksecurity.securityProfiles.list networksecurity.serverTlsPolicies.get networksecurity.serverTlsPolicies.getIamPolicy networksecurity.serverTlsPolicies.list networksecurity.tlsInspectionPolicies.get networksecurity.tlsInspectionPolicies.list networksecurity.urlLists.get networksecurity.urlLists.list resourcemanager.projects.get resourcemanager.projects.list
DNS Threat Detector Admin (roles/networksecurity.dnsThreatDetectorAdmin) Enables full access to DNS Threat Detector resources.	networksecurity.dnsThreatDetectors.* networksecurity.dnsThreatDetectors.create networksecurity.dnsThreatDetectors.delete networksecurity.dnsThreatDetectors.get networksecurity.dnsThreatDetectors.list networksecurity.dnsThreatDetectors.update resourcemanager.projects.get resourcemanager.projects.list
DNS Threat Detector Viewer (roles/networksecurity.dnsThreatDetectorViewer) Enables view access to DNS Threat Detector resources.	networksecurity.dnsThreatDetectors.get networksecurity.dnsThreatDetectors.list resourcemanager.projects.get resourcemanager.projects.list
Firewall Endpoint Admin ^Beta (roles/networksecurity.firewallEndpointAdmin) Enables full access to firewall endpoint and firewall endpoint association resources.	networksecurity.firewallEndpointAssociations.* networksecurity.firewallEndpointAssociations.create networksecurity.firewallEndpointAssociations.delete networksecurity.firewallEndpointAssociations.get networksecurity.firewallEndpointAssociations.list networksecurity.firewallEndpointAssociations.update networksecurity.firewallEndpoints.* networksecurity.firewallEndpoints.create networksecurity.firewallEndpoints.delete networksecurity.firewallEndpoints.get networksecurity.firewallEndpoints.list networksecurity.firewallEndpoints.update networksecurity.firewallEndpoints.use networksecurity.operations.get networksecurity.operations.list resourcemanager.projects.get resourcemanager.projects.list
Intercept Deployment Admin ^Beta (roles/networksecurity.interceptDeploymentAdmin) Enables full access to intercept resources on the Producer's side.	networksecurity.interceptDeploymentGroups.* networksecurity.interceptDeploymentGroups.create networksecurity.interceptDeploymentGroups.delete networksecurity.interceptDeploymentGroups.get networksecurity.interceptDeploymentGroups.list networksecurity.interceptDeploymentGroups.update networksecurity.interceptDeploymentGroups.use networksecurity.interceptDeployments.* networksecurity.interceptDeployments.create networksecurity.interceptDeployments.delete networksecurity.interceptDeployments.get networksecurity.interceptDeployments.list networksecurity.interceptDeployments.update resourcemanager.projects.get resourcemanager.projects.list
Intercept Deployment External User ^Beta (roles/networksecurity.interceptDeploymentExternalUser) Allows an external consumer to connect to a producer's interceptDeploymentGroup.	networksecurity.interceptDeploymentGroups.use
Intercept Deployment User ^Beta (roles/networksecurity.interceptDeploymentUser) Allows a consumer to view and connect to a producer's interceptDeploymentGroup.	networksecurity.interceptDeploymentGroups.get networksecurity.interceptDeploymentGroups.list networksecurity.interceptDeploymentGroups.use
Intercept Deployment Viewer ^Beta (roles/networksecurity.interceptDeploymentViewer) Enables read-only access to intercept resources on the Producer's side.	networksecurity.interceptDeploymentGroups.get networksecurity.interceptDeploymentGroups.list networksecurity.interceptDeployments.get networksecurity.interceptDeployments.list resourcemanager.projects.get resourcemanager.projects.list
Intercept Endpoint Admin ^Beta (roles/networksecurity.interceptEndpointAdmin) Enables full access to intercept resources on the consumer's side.	networksecurity.interceptEndpointGroupAssociations.* networksecurity.interceptEndpointGroupAssociations.create networksecurity.interceptEndpointGroupAssociations.delete networksecurity.interceptEndpointGroupAssociations.get networksecurity.interceptEndpointGroupAssociations.list networksecurity.interceptEndpointGroupAssociations.update networksecurity.interceptEndpointGroups.* networksecurity.interceptEndpointGroups.create networksecurity.interceptEndpointGroups.delete networksecurity.interceptEndpointGroups.get networksecurity.interceptEndpointGroups.list networksecurity.interceptEndpointGroups.update networksecurity.interceptEndpointGroups.use resourcemanager.projects.get resourcemanager.projects.list
Intercept Endpoint User ^Beta (roles/networksecurity.interceptEndpointUser) Allows a consumer to connect their networks to a interceptEndpointGroup.	networksecurity.interceptEndpointGroups.get networksecurity.interceptEndpointGroups.list networksecurity.interceptEndpointGroups.use
Intercept Endpoint Viewer ^Beta (roles/networksecurity.interceptEndpointViewer) Enables read-only access to intercept resources on the Consumer's side.	networksecurity.interceptEndpointGroupAssociations.get networksecurity.interceptEndpointGroupAssociations.list networksecurity.interceptEndpointGroups.get networksecurity.interceptEndpointGroups.list resourcemanager.projects.get resourcemanager.projects.list
Mirroring Deployment Admin ^Beta (roles/networksecurity.mirroringDeploymentAdmin) Enables full access to mirroring resources on the Producer's side.	networksecurity.mirroringDeploymentGroups.* networksecurity.mirroringDeploymentGroups.create networksecurity.mirroringDeploymentGroups.delete networksecurity.mirroringDeploymentGroups.get networksecurity.mirroringDeploymentGroups.list networksecurity.mirroringDeploymentGroups.update networksecurity.mirroringDeploymentGroups.use networksecurity.mirroringDeployments.* networksecurity.mirroringDeployments.create networksecurity.mirroringDeployments.delete networksecurity.mirroringDeployments.get networksecurity.mirroringDeployments.list networksecurity.mirroringDeployments.update resourcemanager.projects.get resourcemanager.projects.list
Mirroring Deployment External User ^Beta (roles/networksecurity.mirroringDeploymentExternalUser) Allows an external consumer to a producer's mirroringDeploymentGroup.	networksecurity.mirroringDeploymentGroups.use
Mirroring Deployment User ^Beta (roles/networksecurity.mirroringDeploymentUser) Allows a consumer to view and connect to a Producer's mirroringDeploymentGroup.	networksecurity.mirroringDeploymentGroups.get networksecurity.mirroringDeploymentGroups.list networksecurity.mirroringDeploymentGroups.use
Mirroring Deployment Viewer ^Beta (roles/networksecurity.mirroringDeploymentViewer) Enables read-only access to mirroring resources on the Producer's side.	networksecurity.mirroringDeploymentGroups.get networksecurity.mirroringDeploymentGroups.list networksecurity.mirroringDeployments.get networksecurity.mirroringDeployments.list resourcemanager.projects.get resourcemanager.projects.list
Mirroring Endpoint Admin ^Beta (roles/networksecurity.mirroringEndpointAdmin) Enables full access to mirroring resources on the consumer's side.	networksecurity.mirroringEndpointGroupAssociations.* networksecurity.mirroringEndpointGroupAssociations.create networksecurity.mirroringEndpointGroupAssociations.delete networksecurity.mirroringEndpointGroupAssociations.get networksecurity.mirroringEndpointGroupAssociations.list networksecurity.mirroringEndpointGroupAssociations.update networksecurity.mirroringEndpointGroups.* networksecurity.mirroringEndpointGroups.create networksecurity.mirroringEndpointGroups.delete networksecurity.mirroringEndpointGroups.get networksecurity.mirroringEndpointGroups.list networksecurity.mirroringEndpointGroups.update networksecurity.mirroringEndpointGroups.use resourcemanager.projects.get resourcemanager.projects.list
Mirroring Endpoint User ^Beta (roles/networksecurity.mirroringEndpointUser) Allows a consumer to connect their networks to a mirroringEndpointGroup.	networksecurity.mirroringEndpointGroups.get networksecurity.mirroringEndpointGroups.list networksecurity.mirroringEndpointGroups.use
Mirroring Endpoint Viewer ^Beta (roles/networksecurity.mirroringEndpointViewer) Enables read-only access to mirroring resources on the Consumer's side.	networksecurity.mirroringEndpointGroupAssociations.get networksecurity.mirroringEndpointGroupAssociations.list networksecurity.mirroringEndpointGroups.get networksecurity.mirroringEndpointGroups.list resourcemanager.projects.get resourcemanager.projects.list
Security Profile Admin ^Beta (roles/networksecurity.securityProfileAdmin) Enables full access to security profile and security profile group resources.	networksecurity.operations.get networksecurity.operations.list networksecurity.securityProfileGroups.* networksecurity.securityProfileGroups.create networksecurity.securityProfileGroups.delete networksecurity.securityProfileGroups.get networksecurity.securityProfileGroups.list networksecurity.securityProfileGroups.update networksecurity.securityProfileGroups.use networksecurity.securityProfiles.* networksecurity.securityProfiles.create networksecurity.securityProfiles.delete networksecurity.securityProfiles.get networksecurity.securityProfiles.list networksecurity.securityProfiles.update networksecurity.securityProfiles.use resourcemanager.projects.get resourcemanager.projects.list

Service agent roles

Service agent roles should only be granted to service agents.

Role	Permissions
Network Security Authz Service Agent (roles/networksecurity.authzServiceAgent) Allows the Network Security service to access dependent resources Warning: Do not grant service agent roles to any principals except service agents.	compute.forwardingRules.list compute.forwardingRules.update compute.globalForwardingRules.list compute.globalForwardingRules.update networkservices.authzExtensions.list networkservices.authzExtensions.use

Network Security permissions

Permission	Included in roles
networksecurity.addressGroups.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.addressGroups.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.addressGroups.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.addressGroups.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.addressGroups.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.addressGroups.setIamPolicy	Owner (roles/owner) Compute Network Admin (roles/compute.networkAdmin) Security Admin (roles/iam.securityAdmin) Networksecurity Admin (roles/networksecurity.admin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.addressGroups.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.addressGroups.use	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.authorizationPolicies.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.authorizationPolicies.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.authorizationPolicies.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.authorizationPolicies.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.authorizationPolicies.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.authorizationPolicies.setIamPolicy	Owner (roles/owner) Compute Network Admin (roles/compute.networkAdmin) Security Admin (roles/iam.securityAdmin) Networksecurity Admin (roles/networksecurity.admin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.authorizationPolicies.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.authorizationPolicies.use	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.authzPolicies.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.authzPolicies.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.authzPolicies.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.authzPolicies.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.authzPolicies.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.authzPolicies.setIamPolicy	Owner (roles/owner) Compute Network Admin (roles/compute.networkAdmin) Security Admin (roles/iam.securityAdmin) Networksecurity Admin (roles/networksecurity.admin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.authzPolicies.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.backendAuthenticationConfigs.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Multi Cluster Ingress Service Agent (roles/multiclusteringress.serviceAgent)
networksecurity.backendAuthenticationConfigs.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Multi Cluster Ingress Service Agent (roles/multiclusteringress.serviceAgent)
networksecurity.backendAuthenticationConfigs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Multi Cluster Ingress Service Agent (roles/multiclusteringress.serviceAgent)
networksecurity.backendAuthenticationConfigs.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Multi Cluster Ingress Service Agent (roles/multiclusteringress.serviceAgent)
networksecurity.backendAuthenticationConfigs.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Multi Cluster Ingress Service Agent (roles/multiclusteringress.serviceAgent)
networksecurity.backendAuthenticationConfigs.use	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Multi Cluster Ingress Service Agent (roles/multiclusteringress.serviceAgent)
networksecurity.clientTlsPolicies.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Mesh Config Service Agent (roles/meshconfig.serviceAgent)
networksecurity.clientTlsPolicies.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Mesh Config Service Agent (roles/meshconfig.serviceAgent)
networksecurity.clientTlsPolicies.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Load Balancer Admin (roles/compute.loadBalancerAdmin) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent) Mesh Config Service Agent (roles/meshconfig.serviceAgent)
networksecurity.clientTlsPolicies.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.clientTlsPolicies.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Load Balancer Admin (roles/compute.loadBalancerAdmin) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent) Mesh Config Service Agent (roles/meshconfig.serviceAgent)
networksecurity.clientTlsPolicies.setIamPolicy	Owner (roles/owner) Compute Network Admin (roles/compute.networkAdmin) Security Admin (roles/iam.securityAdmin) Networksecurity Admin (roles/networksecurity.admin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.clientTlsPolicies.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Mesh Config Service Agent (roles/meshconfig.serviceAgent)
networksecurity.clientTlsPolicies.use	Owner (roles/owner) Editor (roles/editor) Compute Load Balancer Admin (roles/compute.loadBalancerAdmin) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.dnsThreatDetectors.create	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) DNS Threat Detector Admin (roles/networksecurity.dnsThreatDetectorAdmin)
networksecurity.dnsThreatDetectors.delete	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) DNS Threat Detector Admin (roles/networksecurity.dnsThreatDetectorAdmin)
networksecurity.dnsThreatDetectors.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Support User (roles/iam.supportUser) DNS Threat Detector Admin (roles/networksecurity.dnsThreatDetectorAdmin) DNS Threat Detector Viewer (roles/networksecurity.dnsThreatDetectorViewer)
networksecurity.dnsThreatDetectors.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) DNS Threat Detector Admin (roles/networksecurity.dnsThreatDetectorAdmin) DNS Threat Detector Viewer (roles/networksecurity.dnsThreatDetectorViewer)
networksecurity.dnsThreatDetectors.update	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) DNS Threat Detector Admin (roles/networksecurity.dnsThreatDetectorAdmin)
networksecurity.firewallEndpointAssociations.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.firewallEndpointAssociations.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.firewallEndpointAssociations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.firewallEndpointAssociations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.firewallEndpointAssociations.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.firewallEndpoints.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.firewallEndpoints.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.firewallEndpoints.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.firewallEndpoints.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.firewallEndpoints.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.firewallEndpoints.use	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.gatewaySecurityPolicies.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.gatewaySecurityPolicies.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.gatewaySecurityPolicies.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.gatewaySecurityPolicies.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.gatewaySecurityPolicies.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.gatewaySecurityPolicies.use	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.gatewaySecurityPolicyRules.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.gatewaySecurityPolicyRules.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.gatewaySecurityPolicyRules.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.gatewaySecurityPolicyRules.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.gatewaySecurityPolicyRules.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.gatewaySecurityPolicyRules.use	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.interceptDeploymentGroups.create	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin)
networksecurity.interceptDeploymentGroups.delete	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin)
networksecurity.interceptDeploymentGroups.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Support User (roles/iam.supportUser) Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin) Intercept Deployment User (roles/networksecurity.interceptDeploymentUser) Intercept Deployment Viewer (roles/networksecurity.interceptDeploymentViewer)
networksecurity.interceptDeploymentGroups.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin) Intercept Deployment User (roles/networksecurity.interceptDeploymentUser) Intercept Deployment Viewer (roles/networksecurity.interceptDeploymentViewer)
networksecurity.interceptDeploymentGroups.update	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin)
networksecurity.interceptDeploymentGroups.use	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin) Intercept Deployment External User (roles/networksecurity.interceptDeploymentExternalUser) Intercept Deployment User (roles/networksecurity.interceptDeploymentUser)
networksecurity.interceptDeployments.create	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin)
networksecurity.interceptDeployments.delete	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin)
networksecurity.interceptDeployments.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Support User (roles/iam.supportUser) Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin) Intercept Deployment Viewer (roles/networksecurity.interceptDeploymentViewer)
networksecurity.interceptDeployments.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin) Intercept Deployment Viewer (roles/networksecurity.interceptDeploymentViewer)
networksecurity.interceptDeployments.update	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin)
networksecurity.interceptEndpointGroupAssociations.create	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin)
networksecurity.interceptEndpointGroupAssociations.delete	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin)
networksecurity.interceptEndpointGroupAssociations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Support User (roles/iam.supportUser) Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin) Intercept Endpoint Viewer (roles/networksecurity.interceptEndpointViewer)
networksecurity.interceptEndpointGroupAssociations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin) Intercept Endpoint Viewer (roles/networksecurity.interceptEndpointViewer)
networksecurity.interceptEndpointGroupAssociations.update	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin)
networksecurity.interceptEndpointGroups.create	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin)
networksecurity.interceptEndpointGroups.delete	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin)
networksecurity.interceptEndpointGroups.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Support User (roles/iam.supportUser) Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin) Intercept Endpoint User (roles/networksecurity.interceptEndpointUser) Intercept Endpoint Viewer (roles/networksecurity.interceptEndpointViewer)
networksecurity.interceptEndpointGroups.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin) Intercept Endpoint User (roles/networksecurity.interceptEndpointUser) Intercept Endpoint Viewer (roles/networksecurity.interceptEndpointViewer)
networksecurity.interceptEndpointGroups.update	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin)
networksecurity.interceptEndpointGroups.use	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin) Intercept Endpoint User (roles/networksecurity.interceptEndpointUser)
networksecurity.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.mirroringDeploymentGroups.create	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin)
networksecurity.mirroringDeploymentGroups.delete	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin)
networksecurity.mirroringDeploymentGroups.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Support User (roles/iam.supportUser) Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin) Mirroring Deployment User (roles/networksecurity.mirroringDeploymentUser) Mirroring Deployment Viewer (roles/networksecurity.mirroringDeploymentViewer)
networksecurity.mirroringDeploymentGroups.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin) Mirroring Deployment User (roles/networksecurity.mirroringDeploymentUser) Mirroring Deployment Viewer (roles/networksecurity.mirroringDeploymentViewer)
networksecurity.mirroringDeploymentGroups.update	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin)
networksecurity.mirroringDeploymentGroups.use	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin) Mirroring Deployment External User (roles/networksecurity.mirroringDeploymentExternalUser) Mirroring Deployment User (roles/networksecurity.mirroringDeploymentUser)
networksecurity.mirroringDeployments.create	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin)
networksecurity.mirroringDeployments.delete	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin)
networksecurity.mirroringDeployments.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Support User (roles/iam.supportUser) Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin) Mirroring Deployment Viewer (roles/networksecurity.mirroringDeploymentViewer)
networksecurity.mirroringDeployments.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin) Mirroring Deployment Viewer (roles/networksecurity.mirroringDeploymentViewer)
networksecurity.mirroringDeployments.update	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin)
networksecurity.mirroringEndpointGroupAssociations.create	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin)
networksecurity.mirroringEndpointGroupAssociations.delete	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin)
networksecurity.mirroringEndpointGroupAssociations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Support User (roles/iam.supportUser) Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin) Mirroring Endpoint Viewer (roles/networksecurity.mirroringEndpointViewer)
networksecurity.mirroringEndpointGroupAssociations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin) Mirroring Endpoint Viewer (roles/networksecurity.mirroringEndpointViewer)
networksecurity.mirroringEndpointGroupAssociations.update	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin)
networksecurity.mirroringEndpointGroups.create	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin)
networksecurity.mirroringEndpointGroups.delete	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin)
networksecurity.mirroringEndpointGroups.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Support User (roles/iam.supportUser) Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin) Mirroring Endpoint User (roles/networksecurity.mirroringEndpointUser) Mirroring Endpoint Viewer (roles/networksecurity.mirroringEndpointViewer)
networksecurity.mirroringEndpointGroups.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin) Mirroring Endpoint User (roles/networksecurity.mirroringEndpointUser) Mirroring Endpoint Viewer (roles/networksecurity.mirroringEndpointViewer)
networksecurity.mirroringEndpointGroups.update	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin)
networksecurity.mirroringEndpointGroups.use	Owner (roles/owner) Editor (roles/editor) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin) Mirroring Endpoint User (roles/networksecurity.mirroringEndpointUser)
networksecurity.operations.cancel	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.operations.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent) Multi Cluster Ingress Service Agent (roles/multiclusteringress.serviceAgent)
networksecurity.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.sacAttachments.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.sacAttachments.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.sacAttachments.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.sacAttachments.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.sacRealms.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.sacRealms.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.sacRealms.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.sacRealms.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.securityProfileGroups.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.securityProfileGroups.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.securityProfileGroups.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.securityProfileGroups.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.securityProfileGroups.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.securityProfileGroups.use	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.securityProfiles.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.securityProfiles.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.securityProfiles.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.securityProfiles.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.securityProfiles.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.securityProfiles.use	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.serverTlsPolicies.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Mesh Config Service Agent (roles/meshconfig.serviceAgent) Multi Cluster Ingress Service Agent (roles/multiclusteringress.serviceAgent)
networksecurity.serverTlsPolicies.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Mesh Config Service Agent (roles/meshconfig.serviceAgent) Multi Cluster Ingress Service Agent (roles/multiclusteringress.serviceAgent)
networksecurity.serverTlsPolicies.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Load Balancer Admin (roles/compute.loadBalancerAdmin) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent) Mesh Config Service Agent (roles/meshconfig.serviceAgent) Multi Cluster Ingress Service Agent (roles/multiclusteringress.serviceAgent)
networksecurity.serverTlsPolicies.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.serverTlsPolicies.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Load Balancer Admin (roles/compute.loadBalancerAdmin) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent) Mesh Config Service Agent (roles/meshconfig.serviceAgent) Multi Cluster Ingress Service Agent (roles/multiclusteringress.serviceAgent)
networksecurity.serverTlsPolicies.setIamPolicy	Owner (roles/owner) Compute Network Admin (roles/compute.networkAdmin) Security Admin (roles/iam.securityAdmin) Networksecurity Admin (roles/networksecurity.admin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.serverTlsPolicies.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Mesh Config Service Agent (roles/meshconfig.serviceAgent) Multi Cluster Ingress Service Agent (roles/multiclusteringress.serviceAgent)
networksecurity.serverTlsPolicies.use	Owner (roles/owner) Editor (roles/editor) Compute Load Balancer Admin (roles/compute.loadBalancerAdmin) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent) Multi Cluster Ingress Service Agent (roles/multiclusteringress.serviceAgent)
networksecurity.tlsInspectionPolicies.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.tlsInspectionPolicies.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.tlsInspectionPolicies.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.tlsInspectionPolicies.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.tlsInspectionPolicies.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.tlsInspectionPolicies.use	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.urlLists.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.urlLists.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.urlLists.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.urlLists.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Networksecurity Viewer (roles/networksecurity.viewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)
networksecurity.urlLists.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
networksecurity.urlLists.use	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Networksecurity Admin (roles/networksecurity.admin) Networksecurity Editor (roles/networksecurity.editor) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent)