Google Cloud Fraud Defense roles and permissions

This page lists the IAM roles and permissions for Google Cloud Fraud Defense. To search through all roles and permissions, see the role and permission index.

Google Cloud Fraud Defense roles

Role	Permissions
reCAPTCHA Enterprise Admin (roles/recaptchaenterprise.admin) Access to view and modify reCAPTCHA Enterprise keys	monitoring.timeSeries.list recaptchaenterprise.firewallpolicies.* recaptchaenterprise.firewallpolicies.create recaptchaenterprise.firewallpolicies.delete recaptchaenterprise.firewallpolicies.get recaptchaenterprise.firewallpolicies.list recaptchaenterprise.firewallpolicies.update recaptchaenterprise.keys.* recaptchaenterprise.keys.create recaptchaenterprise.keys.createTagBinding recaptchaenterprise.keys.delete recaptchaenterprise.keys.deleteTagBinding recaptchaenterprise.keys.get recaptchaenterprise.keys.list recaptchaenterprise.keys.listEffectiveTags recaptchaenterprise.keys.listTagBindings recaptchaenterprise.keys.retrievelegacysecretkey recaptchaenterprise.keys.update recaptchaenterprise.metrics.get recaptchaenterprise.projectmetadata.* recaptchaenterprise.projectmetadata.get recaptchaenterprise.projectmetadata.update resourcemanager.projects.get resourcemanager.projects.list
Recaptchaenterprise Editor (roles/recaptchaenterprise.editor) Editor role for recaptchaenterprise	monitoring.timeSeries.list recaptchaenterprise.assessments.* recaptchaenterprise.assessments.annotate recaptchaenterprise.assessments.create recaptchaenterprise.firewallpolicies.* recaptchaenterprise.firewallpolicies.create recaptchaenterprise.firewallpolicies.delete recaptchaenterprise.firewallpolicies.get recaptchaenterprise.firewallpolicies.list recaptchaenterprise.firewallpolicies.update recaptchaenterprise.keys.create recaptchaenterprise.keys.delete recaptchaenterprise.keys.get recaptchaenterprise.keys.list recaptchaenterprise.keys.listEffectiveTags recaptchaenterprise.keys.listTagBindings recaptchaenterprise.keys.retrievelegacysecretkey recaptchaenterprise.keys.update recaptchaenterprise.metrics.get recaptchaenterprise.projectmetadata.* recaptchaenterprise.projectmetadata.get recaptchaenterprise.projectmetadata.update recaptchaenterprise.relatedaccountgroupmemberships.list recaptchaenterprise.relatedaccountgroups.list resourcemanager.projects.get resourcemanager.projects.list
reCAPTCHA Enterprise Viewer (roles/recaptchaenterprise.viewer) Access to view reCAPTCHA Enterprise keys and metrics	monitoring.timeSeries.list recaptchaenterprise.firewallpolicies.get recaptchaenterprise.firewallpolicies.list recaptchaenterprise.keys.get recaptchaenterprise.keys.list recaptchaenterprise.keys.listEffectiveTags recaptchaenterprise.keys.listTagBindings recaptchaenterprise.metrics.get recaptchaenterprise.projectmetadata.get resourcemanager.projects.get resourcemanager.projects.list
reCAPTCHA Enterprise Agent (roles/recaptchaenterprise.agent) Access to create and annotate reCAPTCHA Enterprise assessments	recaptchaenterprise.assessments.* recaptchaenterprise.assessments.annotate recaptchaenterprise.assessments.create recaptchaenterprise.firewallpolicies.list recaptchaenterprise.relatedaccountgroupmemberships.list recaptchaenterprise.relatedaccountgroups.list resourcemanager.projects.get resourcemanager.projects.list

Google Cloud Fraud Defense permissions

Permission	Included in roles
recaptchaenterprise.assessments.annotate	Owner (roles/owner) Editor (roles/editor) Recaptchaenterprise Editor (roles/recaptchaenterprise.editor) reCAPTCHA Enterprise Agent (roles/recaptchaenterprise.agent) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Check Service Agent (roles/firebaseappcheck.serviceAgent)
recaptchaenterprise.assessments.create	Owner (roles/owner) Editor (roles/editor) Recaptchaenterprise Editor (roles/recaptchaenterprise.editor) reCAPTCHA Enterprise Agent (roles/recaptchaenterprise.agent) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Check Service Agent (roles/firebaseappcheck.serviceAgent) Identity Platform Service Agent (roles/identitytoolkit.serviceAgent)
recaptchaenterprise.firewallpolicies.create	Owner (roles/owner) Editor (roles/editor) reCAPTCHA Enterprise Admin (roles/recaptchaenterprise.admin) Recaptchaenterprise Editor (roles/recaptchaenterprise.editor)
recaptchaenterprise.firewallpolicies.delete	Owner (roles/owner) Editor (roles/editor) reCAPTCHA Enterprise Admin (roles/recaptchaenterprise.admin) Recaptchaenterprise Editor (roles/recaptchaenterprise.editor)
recaptchaenterprise.firewallpolicies.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) reCAPTCHA Enterprise Admin (roles/recaptchaenterprise.admin) Recaptchaenterprise Editor (roles/recaptchaenterprise.editor) reCAPTCHA Enterprise Viewer (roles/recaptchaenterprise.viewer) Support User (roles/iam.supportUser)
recaptchaenterprise.firewallpolicies.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) reCAPTCHA Enterprise Admin (roles/recaptchaenterprise.admin) Recaptchaenterprise Editor (roles/recaptchaenterprise.editor) reCAPTCHA Enterprise Viewer (roles/recaptchaenterprise.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) reCAPTCHA Enterprise Agent (roles/recaptchaenterprise.agent)
recaptchaenterprise.firewallpolicies.update	Owner (roles/owner) Editor (roles/editor) reCAPTCHA Enterprise Admin (roles/recaptchaenterprise.admin) Recaptchaenterprise Editor (roles/recaptchaenterprise.editor)
recaptchaenterprise.keys.create	Owner (roles/owner) Editor (roles/editor) reCAPTCHA Enterprise Admin (roles/recaptchaenterprise.admin) Recaptchaenterprise Editor (roles/recaptchaenterprise.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Identity Platform Service Agent (roles/identitytoolkit.serviceAgent)
recaptchaenterprise.keys.createTagBinding	Owner (roles/owner) reCAPTCHA Enterprise Admin (roles/recaptchaenterprise.admin) Tag User (roles/resourcemanager.tagUser) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver)
recaptchaenterprise.keys.delete	Owner (roles/owner) Editor (roles/editor) reCAPTCHA Enterprise Admin (roles/recaptchaenterprise.admin) Recaptchaenterprise Editor (roles/recaptchaenterprise.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Identity Platform Service Agent (roles/identitytoolkit.serviceAgent)
recaptchaenterprise.keys.deleteTagBinding	Owner (roles/owner) reCAPTCHA Enterprise Admin (roles/recaptchaenterprise.admin) Tag User (roles/resourcemanager.tagUser) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver)
recaptchaenterprise.keys.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) reCAPTCHA Enterprise Admin (roles/recaptchaenterprise.admin) Recaptchaenterprise Editor (roles/recaptchaenterprise.editor) reCAPTCHA Enterprise Viewer (roles/recaptchaenterprise.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Identity Platform Service Agent (roles/identitytoolkit.serviceAgent)
recaptchaenterprise.keys.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) reCAPTCHA Enterprise Admin (roles/recaptchaenterprise.admin) Recaptchaenterprise Editor (roles/recaptchaenterprise.editor) reCAPTCHA Enterprise Viewer (roles/recaptchaenterprise.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
recaptchaenterprise.keys.listEffectiveTags	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) reCAPTCHA Enterprise Admin (roles/recaptchaenterprise.admin) Recaptchaenterprise Editor (roles/recaptchaenterprise.editor) reCAPTCHA Enterprise Viewer (roles/recaptchaenterprise.viewer) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
recaptchaenterprise.keys.listTagBindings	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) reCAPTCHA Enterprise Admin (roles/recaptchaenterprise.admin) Recaptchaenterprise Editor (roles/recaptchaenterprise.editor) reCAPTCHA Enterprise Viewer (roles/recaptchaenterprise.viewer) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
recaptchaenterprise.keys.retrievelegacysecretkey	Owner (roles/owner) Editor (roles/editor) reCAPTCHA Enterprise Admin (roles/recaptchaenterprise.admin) Recaptchaenterprise Editor (roles/recaptchaenterprise.editor)
recaptchaenterprise.keys.update	Owner (roles/owner) Editor (roles/editor) reCAPTCHA Enterprise Admin (roles/recaptchaenterprise.admin) Recaptchaenterprise Editor (roles/recaptchaenterprise.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
recaptchaenterprise.metrics.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) reCAPTCHA Enterprise Admin (roles/recaptchaenterprise.admin) Recaptchaenterprise Editor (roles/recaptchaenterprise.editor) reCAPTCHA Enterprise Viewer (roles/recaptchaenterprise.viewer) Support User (roles/iam.supportUser)
recaptchaenterprise.projectmetadata.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) reCAPTCHA Enterprise Admin (roles/recaptchaenterprise.admin) Recaptchaenterprise Editor (roles/recaptchaenterprise.editor) reCAPTCHA Enterprise Viewer (roles/recaptchaenterprise.viewer) Support User (roles/iam.supportUser)
recaptchaenterprise.projectmetadata.update	Owner (roles/owner) Editor (roles/editor) reCAPTCHA Enterprise Admin (roles/recaptchaenterprise.admin) Recaptchaenterprise Editor (roles/recaptchaenterprise.editor)
recaptchaenterprise.relatedaccountgroupmemberships.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Recaptchaenterprise Editor (roles/recaptchaenterprise.editor) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) reCAPTCHA Enterprise Agent (roles/recaptchaenterprise.agent)
recaptchaenterprise.relatedaccountgroups.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Recaptchaenterprise Editor (roles/recaptchaenterprise.editor) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) reCAPTCHA Enterprise Agent (roles/recaptchaenterprise.agent)