Remote Build Execution roles and permissions

This page lists the IAM roles and permissions for Remote Build Execution. To search through all roles and permissions, see the role and permission index.

Remote Build Execution roles

Role	Permissions
Remote Build Execution Action Cache Writer ^Beta (roles/remotebuildexecution.actionCacheWriter) Remote Build Execution Action Cache Writer	remotebuildexecution.actions.set remotebuildexecution.blobs.create
Remotebuildexecution Admin ^Beta (roles/remotebuildexecution.admin) Admin role for remotebuildexecution	remotebuildexecution.actions.create remotebuildexecution.actions.delete remotebuildexecution.actions.get remotebuildexecution.actions.update remotebuildexecution.blobs.* remotebuildexecution.blobs.create remotebuildexecution.blobs.get remotebuildexecution.botsessions.* remotebuildexecution.botsessions.create remotebuildexecution.botsessions.update remotebuildexecution.instances.* remotebuildexecution.instances.create remotebuildexecution.instances.delete remotebuildexecution.instances.get remotebuildexecution.instances.list remotebuildexecution.instances.update remotebuildexecution.logstreams.* remotebuildexecution.logstreams.create remotebuildexecution.logstreams.get remotebuildexecution.logstreams.update remotebuildexecution.workerpools.* remotebuildexecution.workerpools.create remotebuildexecution.workerpools.delete remotebuildexecution.workerpools.get remotebuildexecution.workerpools.list remotebuildexecution.workerpools.update resourcemanager.projects.get resourcemanager.projects.list
Remote Build Execution Artifact Admin ^Beta (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Artifact Admin	remotebuildexecution.actions.create remotebuildexecution.actions.delete remotebuildexecution.actions.get remotebuildexecution.blobs.* remotebuildexecution.blobs.create remotebuildexecution.blobs.get remotebuildexecution.logstreams.* remotebuildexecution.logstreams.create remotebuildexecution.logstreams.get remotebuildexecution.logstreams.update
Remote Build Execution Artifact Creator ^Beta (roles/remotebuildexecution.artifactCreator) Remote Build Execution Artifact Creator	remotebuildexecution.actions.create remotebuildexecution.actions.get remotebuildexecution.blobs.* remotebuildexecution.blobs.create remotebuildexecution.blobs.get remotebuildexecution.logstreams.* remotebuildexecution.logstreams.create remotebuildexecution.logstreams.get remotebuildexecution.logstreams.update
Remote Build Execution Artifact Viewer ^Beta (roles/remotebuildexecution.artifactViewer) Remote Build Execution Artifact Viewer	remotebuildexecution.actions.get remotebuildexecution.blobs.get remotebuildexecution.logstreams.get
Remote Build Execution Configuration Admin ^Beta (roles/remotebuildexecution.configurationAdmin) Remote Build Execution Configuration Admin	remotebuildexecution.instances.* remotebuildexecution.instances.create remotebuildexecution.instances.delete remotebuildexecution.instances.get remotebuildexecution.instances.list remotebuildexecution.instances.update remotebuildexecution.workerpools.* remotebuildexecution.workerpools.create remotebuildexecution.workerpools.delete remotebuildexecution.workerpools.get remotebuildexecution.workerpools.list remotebuildexecution.workerpools.update
Remote Build Execution Configuration Viewer ^Beta (roles/remotebuildexecution.configurationViewer) Remote Build Execution Configuration Viewer	remotebuildexecution.instances.get remotebuildexecution.instances.list remotebuildexecution.workerpools.get remotebuildexecution.workerpools.list
Remotebuildexecution Editor ^Beta (roles/remotebuildexecution.editor) Editor role for remotebuildexecution	remotebuildexecution.actions.create remotebuildexecution.actions.delete remotebuildexecution.actions.get remotebuildexecution.actions.update remotebuildexecution.blobs.* remotebuildexecution.blobs.create remotebuildexecution.blobs.get remotebuildexecution.botsessions.* remotebuildexecution.botsessions.create remotebuildexecution.botsessions.update remotebuildexecution.instances.create remotebuildexecution.instances.get remotebuildexecution.instances.list remotebuildexecution.instances.update remotebuildexecution.logstreams.* remotebuildexecution.logstreams.create remotebuildexecution.logstreams.get remotebuildexecution.logstreams.update remotebuildexecution.workerpools.create remotebuildexecution.workerpools.get remotebuildexecution.workerpools.list remotebuildexecution.workerpools.update resourcemanager.projects.get resourcemanager.projects.list
Remote Build Execution Logstream Writer ^Beta (roles/remotebuildexecution.logstreamWriter) Remote Build Execution Logstream Writer	remotebuildexecution.logstreams.create remotebuildexecution.logstreams.update
Remote Build Execution Reservation Admin ^Beta (roles/remotebuildexecution.reservationAdmin) Remote Build Execution Reservation Admin	remotebuildexecution.actions.create remotebuildexecution.actions.delete remotebuildexecution.actions.get
Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent) Gives Remote Build Execution service account access to managed resources. Warning: Do not grant service agent roles to any principals except service agents.	remotebuildexecution.actions.update remotebuildexecution.blobs.* remotebuildexecution.blobs.create remotebuildexecution.blobs.get remotebuildexecution.botsessions.* remotebuildexecution.botsessions.create remotebuildexecution.botsessions.update remotebuildexecution.logstreams.create remotebuildexecution.logstreams.update
Remotebuildexecution Viewer ^Beta (roles/remotebuildexecution.viewer) Viewer role for remotebuildexecution	remotebuildexecution.actions.get remotebuildexecution.blobs.get remotebuildexecution.instances.get remotebuildexecution.instances.list remotebuildexecution.logstreams.get remotebuildexecution.workerpools.get remotebuildexecution.workerpools.list resourcemanager.projects.get resourcemanager.projects.list
Remote Build Execution Worker ^Beta (roles/remotebuildexecution.worker) Remote Build Execution Worker	remotebuildexecution.actions.update remotebuildexecution.blobs.* remotebuildexecution.blobs.create remotebuildexecution.blobs.get remotebuildexecution.botsessions.* remotebuildexecution.botsessions.create remotebuildexecution.botsessions.update remotebuildexecution.logstreams.create remotebuildexecution.logstreams.update

Remote Build Execution permissions

Permission	Included in roles
remotebuildexecution.actions.create	Owner (roles/owner) Editor (roles/editor) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remote Build Execution Artifact Admin (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Artifact Creator (roles/remotebuildexecution.artifactCreator) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remote Build Execution Reservation Admin (roles/remotebuildexecution.reservationAdmin)
remotebuildexecution.actions.delete	Owner (roles/owner) Editor (roles/editor) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remote Build Execution Artifact Admin (roles/remotebuildexecution.artifactAdmin) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remote Build Execution Reservation Admin (roles/remotebuildexecution.reservationAdmin)
remotebuildexecution.actions.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Support User (roles/iam.supportUser) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remote Build Execution Artifact Admin (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Artifact Creator (roles/remotebuildexecution.artifactCreator) Remote Build Execution Artifact Viewer (roles/remotebuildexecution.artifactViewer) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remote Build Execution Reservation Admin (roles/remotebuildexecution.reservationAdmin) Remotebuildexecution Viewer (roles/remotebuildexecution.viewer)
remotebuildexecution.actions.set	Remote Build Execution Action Cache Writer (roles/remotebuildexecution.actionCacheWriter)
remotebuildexecution.actions.update	Owner (roles/owner) Editor (roles/editor) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remote Build Execution Worker (roles/remotebuildexecution.worker) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent)
remotebuildexecution.blobs.create	Owner (roles/owner) Editor (roles/editor) Remote Build Execution Action Cache Writer (roles/remotebuildexecution.actionCacheWriter) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remote Build Execution Artifact Admin (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Artifact Creator (roles/remotebuildexecution.artifactCreator) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remote Build Execution Worker (roles/remotebuildexecution.worker) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent)
remotebuildexecution.blobs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud Build Approver (roles/cloudbuild.builds.approver) Cloud Build Service Account (roles/cloudbuild.builds.builder) Cloud Build Editor (roles/cloudbuild.builds.editor) Cloud Build Viewer (roles/cloudbuild.builds.viewer) Cloud Functions Admin (roles/cloudfunctions.admin) Cloud Functions Developer (roles/cloudfunctions.developer) Cloudfunctions Editor (roles/cloudfunctions.editor) Cloud Functions Viewer (roles/cloudfunctions.viewer) Composer Worker (roles/composer.worker) Dataflow Admin (roles/dataflow.admin) Dataflow Developer (roles/dataflow.developer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Data Scientist (roles/iam.dataScientist) Dev Ops (roles/iam.devOps) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remote Build Execution Artifact Admin (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Artifact Creator (roles/remotebuildexecution.artifactCreator) Remote Build Execution Artifact Viewer (roles/remotebuildexecution.artifactViewer) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remotebuildexecution Viewer (roles/remotebuildexecution.viewer) Remote Build Execution Worker (roles/remotebuildexecution.worker) Cloud Run Source Developer (roles/run.sourceDeveloper) Cloud Run Source Viewer (roles/run.sourceViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent) Datapipelines Service Agent (roles/datapipelines.serviceAgent) Dataprep Service Agent (roles/dataprep.serviceAgent) DesignCenter Service Agent (roles/designcenter.serviceAgent) Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent) Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
remotebuildexecution.botsessions.create	Owner (roles/owner) Editor (roles/editor) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remote Build Execution Worker (roles/remotebuildexecution.worker) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent)
remotebuildexecution.botsessions.update	Owner (roles/owner) Editor (roles/editor) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remote Build Execution Worker (roles/remotebuildexecution.worker) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent)
remotebuildexecution.instances.create	Owner (roles/owner) Editor (roles/editor) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin) Remotebuildexecution Editor (roles/remotebuildexecution.editor)
remotebuildexecution.instances.delete	Owner (roles/owner) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin)
remotebuildexecution.instances.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Support User (roles/iam.supportUser) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin) Remote Build Execution Configuration Viewer (roles/remotebuildexecution.configurationViewer) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remotebuildexecution Viewer (roles/remotebuildexecution.viewer)
remotebuildexecution.instances.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin) Remote Build Execution Configuration Viewer (roles/remotebuildexecution.configurationViewer) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remotebuildexecution Viewer (roles/remotebuildexecution.viewer)
remotebuildexecution.instances.update	Owner (roles/owner) Editor (roles/editor) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin) Remotebuildexecution Editor (roles/remotebuildexecution.editor)
remotebuildexecution.logstreams.create	Owner (roles/owner) Editor (roles/editor) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remote Build Execution Artifact Admin (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Artifact Creator (roles/remotebuildexecution.artifactCreator) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remote Build Execution Logstream Writer (roles/remotebuildexecution.logstreamWriter) Remote Build Execution Worker (roles/remotebuildexecution.worker) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent)
remotebuildexecution.logstreams.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Support User (roles/iam.supportUser) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remote Build Execution Artifact Admin (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Artifact Creator (roles/remotebuildexecution.artifactCreator) Remote Build Execution Artifact Viewer (roles/remotebuildexecution.artifactViewer) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remotebuildexecution Viewer (roles/remotebuildexecution.viewer)
remotebuildexecution.logstreams.update	Owner (roles/owner) Editor (roles/editor) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remote Build Execution Artifact Admin (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Artifact Creator (roles/remotebuildexecution.artifactCreator) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remote Build Execution Logstream Writer (roles/remotebuildexecution.logstreamWriter) Remote Build Execution Worker (roles/remotebuildexecution.worker) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent)
remotebuildexecution.workerpools.create	Owner (roles/owner) Editor (roles/editor) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin) Remotebuildexecution Editor (roles/remotebuildexecution.editor)
remotebuildexecution.workerpools.delete	Owner (roles/owner) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin)
remotebuildexecution.workerpools.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Support User (roles/iam.supportUser) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin) Remote Build Execution Configuration Viewer (roles/remotebuildexecution.configurationViewer) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remotebuildexecution Viewer (roles/remotebuildexecution.viewer)
remotebuildexecution.workerpools.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin) Remote Build Execution Configuration Viewer (roles/remotebuildexecution.configurationViewer) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remotebuildexecution Viewer (roles/remotebuildexecution.viewer)
remotebuildexecution.workerpools.update	Owner (roles/owner) Editor (roles/editor) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin) Remotebuildexecution Editor (roles/remotebuildexecution.editor)