Remote Build Execution roles and permissions

This page lists the IAM roles and permissions for Remote Build Execution. To search through all roles and permissions, see the role and permission index.

Remote Build Execution roles

Role	Permissions
Remotebuildexecution Admin ^Beta (roles/remotebuildexecution.admin) Admin role for remotebuildexecution	remotebuildexecution.actions.create remotebuildexecution.actions.delete remotebuildexecution.actions.get remotebuildexecution.actions.update remotebuildexecution.blobs.* remotebuildexecution.blobs.create remotebuildexecution.blobs.get remotebuildexecution.botsessions.* remotebuildexecution.botsessions.create remotebuildexecution.botsessions.update remotebuildexecution.instances.* remotebuildexecution.instances.create remotebuildexecution.instances.delete remotebuildexecution.instances.get remotebuildexecution.instances.list remotebuildexecution.instances.update remotebuildexecution.logstreams.* remotebuildexecution.logstreams.create remotebuildexecution.logstreams.get remotebuildexecution.logstreams.update remotebuildexecution.workerpools.* remotebuildexecution.workerpools.create remotebuildexecution.workerpools.delete remotebuildexecution.workerpools.get remotebuildexecution.workerpools.list remotebuildexecution.workerpools.update resourcemanager.projects.get resourcemanager.projects.list
Remotebuildexecution Editor ^Beta (roles/remotebuildexecution.editor) Editor role for remotebuildexecution	remotebuildexecution.actions.create remotebuildexecution.actions.delete remotebuildexecution.actions.get remotebuildexecution.actions.update remotebuildexecution.blobs.* remotebuildexecution.blobs.create remotebuildexecution.blobs.get remotebuildexecution.botsessions.* remotebuildexecution.botsessions.create remotebuildexecution.botsessions.update remotebuildexecution.instances.create remotebuildexecution.instances.get remotebuildexecution.instances.list remotebuildexecution.instances.update remotebuildexecution.logstreams.* remotebuildexecution.logstreams.create remotebuildexecution.logstreams.get remotebuildexecution.logstreams.update remotebuildexecution.workerpools.create remotebuildexecution.workerpools.get remotebuildexecution.workerpools.list remotebuildexecution.workerpools.update resourcemanager.projects.get resourcemanager.projects.list
Remotebuildexecution Viewer ^Beta (roles/remotebuildexecution.viewer) Viewer role for remotebuildexecution	remotebuildexecution.actions.get remotebuildexecution.blobs.get remotebuildexecution.instances.get remotebuildexecution.instances.list remotebuildexecution.logstreams.get remotebuildexecution.workerpools.get remotebuildexecution.workerpools.list resourcemanager.projects.get resourcemanager.projects.list
Remote Build Execution Action Cache Writer ^Beta (roles/remotebuildexecution.actionCacheWriter) Remote Build Execution Action Cache Writer	remotebuildexecution.actions.set remotebuildexecution.blobs.create
Remote Build Execution Artifact Admin ^Beta (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Artifact Admin	remotebuildexecution.actions.create remotebuildexecution.actions.delete remotebuildexecution.actions.get remotebuildexecution.blobs.* remotebuildexecution.blobs.create remotebuildexecution.blobs.get remotebuildexecution.logstreams.* remotebuildexecution.logstreams.create remotebuildexecution.logstreams.get remotebuildexecution.logstreams.update
Remote Build Execution Artifact Creator ^Beta (roles/remotebuildexecution.artifactCreator) Remote Build Execution Artifact Creator	remotebuildexecution.actions.create remotebuildexecution.actions.get remotebuildexecution.blobs.* remotebuildexecution.blobs.create remotebuildexecution.blobs.get remotebuildexecution.logstreams.* remotebuildexecution.logstreams.create remotebuildexecution.logstreams.get remotebuildexecution.logstreams.update
Remote Build Execution Artifact Viewer ^Beta (roles/remotebuildexecution.artifactViewer) Remote Build Execution Artifact Viewer	remotebuildexecution.actions.get remotebuildexecution.blobs.get remotebuildexecution.logstreams.get
Remote Build Execution Configuration Admin ^Beta (roles/remotebuildexecution.configurationAdmin) Remote Build Execution Configuration Admin	remotebuildexecution.instances.* remotebuildexecution.instances.create remotebuildexecution.instances.delete remotebuildexecution.instances.get remotebuildexecution.instances.list remotebuildexecution.instances.update remotebuildexecution.workerpools.* remotebuildexecution.workerpools.create remotebuildexecution.workerpools.delete remotebuildexecution.workerpools.get remotebuildexecution.workerpools.list remotebuildexecution.workerpools.update
Remote Build Execution Configuration Viewer ^Beta (roles/remotebuildexecution.configurationViewer) Remote Build Execution Configuration Viewer	remotebuildexecution.instances.get remotebuildexecution.instances.list remotebuildexecution.workerpools.get remotebuildexecution.workerpools.list
Remote Build Execution Logstream Writer ^Beta (roles/remotebuildexecution.logstreamWriter) Remote Build Execution Logstream Writer	remotebuildexecution.logstreams.create remotebuildexecution.logstreams.update
Remote Build Execution Reservation Admin ^Beta (roles/remotebuildexecution.reservationAdmin) Remote Build Execution Reservation Admin	remotebuildexecution.actions.create remotebuildexecution.actions.delete remotebuildexecution.actions.get
Remote Build Execution Worker ^Beta (roles/remotebuildexecution.worker) Remote Build Execution Worker	remotebuildexecution.actions.update remotebuildexecution.blobs.* remotebuildexecution.blobs.create remotebuildexecution.blobs.get remotebuildexecution.botsessions.* remotebuildexecution.botsessions.create remotebuildexecution.botsessions.update remotebuildexecution.logstreams.create remotebuildexecution.logstreams.update

Service agent roles

Service agent roles should only be granted to service agents.

Role	Permissions
Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent) Gives Remote Build Execution service account access to managed resources. Warning: Do not grant service agent roles to any principals except service agents.	remotebuildexecution.actions.update remotebuildexecution.blobs.* remotebuildexecution.blobs.create remotebuildexecution.blobs.get remotebuildexecution.botsessions.* remotebuildexecution.botsessions.create remotebuildexecution.botsessions.update remotebuildexecution.logstreams.create remotebuildexecution.logstreams.update

Remote Build Execution permissions

Permission	Included in roles
remotebuildexecution.actions.create	Owner (roles/owner) Editor (roles/editor) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remote Build Execution Artifact Admin (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Artifact Creator (roles/remotebuildexecution.artifactCreator) Remote Build Execution Reservation Admin (roles/remotebuildexecution.reservationAdmin)
remotebuildexecution.actions.delete	Owner (roles/owner) Editor (roles/editor) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remote Build Execution Artifact Admin (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Reservation Admin (roles/remotebuildexecution.reservationAdmin)
remotebuildexecution.actions.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remotebuildexecution Viewer (roles/remotebuildexecution.viewer) Support User (roles/iam.supportUser) Remote Build Execution Artifact Admin (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Artifact Creator (roles/remotebuildexecution.artifactCreator) Remote Build Execution Artifact Viewer (roles/remotebuildexecution.artifactViewer) Remote Build Execution Reservation Admin (roles/remotebuildexecution.reservationAdmin)
remotebuildexecution.actions.set	Remote Build Execution Action Cache Writer (roles/remotebuildexecution.actionCacheWriter)
remotebuildexecution.actions.update	Owner (roles/owner) Editor (roles/editor) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remote Build Execution Worker (roles/remotebuildexecution.worker) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent)
remotebuildexecution.blobs.create	Owner (roles/owner) Editor (roles/editor) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remote Build Execution Action Cache Writer (roles/remotebuildexecution.actionCacheWriter) Remote Build Execution Artifact Admin (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Artifact Creator (roles/remotebuildexecution.artifactCreator) Remote Build Execution Worker (roles/remotebuildexecution.worker) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent)
remotebuildexecution.blobs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud Build Service Account (roles/cloudbuild.builds.builder) Cloud Functions Admin (roles/cloudfunctions.admin) Cloudfunctions Editor (roles/cloudfunctions.editor) Cloud Functions Viewer (roles/cloudfunctions.viewer) Dataflow Admin (roles/dataflow.admin) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remotebuildexecution Viewer (roles/remotebuildexecution.viewer) Cloud Build Approver (roles/cloudbuild.builds.approver) Cloud Build Editor (roles/cloudbuild.builds.editor) Cloud Build Viewer (roles/cloudbuild.builds.viewer) Cloud Functions Developer (roles/cloudfunctions.developer) Composer Worker (roles/composer.worker) Dataflow Developer (roles/dataflow.developer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Data Scientist (roles/iam.dataScientist) Dev Ops (roles/iam.devOps) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Remote Build Execution Artifact Admin (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Artifact Creator (roles/remotebuildexecution.artifactCreator) Remote Build Execution Artifact Viewer (roles/remotebuildexecution.artifactViewer) Remote Build Execution Worker (roles/remotebuildexecution.worker) Cloud Run Source Developer (roles/run.sourceDeveloper) Cloud Run Source Viewer (roles/run.sourceViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Build Service Agent (roles/cloudbuild.serviceAgent) Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent) Datapipelines Service Agent (roles/datapipelines.serviceAgent) Dataprep Service Agent (roles/dataprep.serviceAgent) DesignCenter Service Agent (roles/designcenter.serviceAgent) Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent)
remotebuildexecution.botsessions.create	Owner (roles/owner) Editor (roles/editor) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remote Build Execution Worker (roles/remotebuildexecution.worker) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent)
remotebuildexecution.botsessions.update	Owner (roles/owner) Editor (roles/editor) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remote Build Execution Worker (roles/remotebuildexecution.worker) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent)
remotebuildexecution.instances.create	Owner (roles/owner) Editor (roles/editor) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin)
remotebuildexecution.instances.delete	Owner (roles/owner) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin)
remotebuildexecution.instances.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remotebuildexecution Viewer (roles/remotebuildexecution.viewer) Support User (roles/iam.supportUser) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin) Remote Build Execution Configuration Viewer (roles/remotebuildexecution.configurationViewer)
remotebuildexecution.instances.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remotebuildexecution Viewer (roles/remotebuildexecution.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin) Remote Build Execution Configuration Viewer (roles/remotebuildexecution.configurationViewer)
remotebuildexecution.instances.update	Owner (roles/owner) Editor (roles/editor) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin)
remotebuildexecution.logstreams.create	Owner (roles/owner) Editor (roles/editor) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remote Build Execution Artifact Admin (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Artifact Creator (roles/remotebuildexecution.artifactCreator) Remote Build Execution Logstream Writer (roles/remotebuildexecution.logstreamWriter) Remote Build Execution Worker (roles/remotebuildexecution.worker) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent)
remotebuildexecution.logstreams.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remotebuildexecution Viewer (roles/remotebuildexecution.viewer) Support User (roles/iam.supportUser) Remote Build Execution Artifact Admin (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Artifact Creator (roles/remotebuildexecution.artifactCreator) Remote Build Execution Artifact Viewer (roles/remotebuildexecution.artifactViewer)
remotebuildexecution.logstreams.update	Owner (roles/owner) Editor (roles/editor) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remote Build Execution Artifact Admin (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Artifact Creator (roles/remotebuildexecution.artifactCreator) Remote Build Execution Logstream Writer (roles/remotebuildexecution.logstreamWriter) Remote Build Execution Worker (roles/remotebuildexecution.worker) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent)
remotebuildexecution.workerpools.create	Owner (roles/owner) Editor (roles/editor) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin)
remotebuildexecution.workerpools.delete	Owner (roles/owner) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin)
remotebuildexecution.workerpools.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remotebuildexecution Viewer (roles/remotebuildexecution.viewer) Support User (roles/iam.supportUser) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin) Remote Build Execution Configuration Viewer (roles/remotebuildexecution.configurationViewer)
remotebuildexecution.workerpools.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remotebuildexecution Viewer (roles/remotebuildexecution.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin) Remote Build Execution Configuration Viewer (roles/remotebuildexecution.configurationViewer)
remotebuildexecution.workerpools.update	Owner (roles/owner) Editor (roles/editor) Remotebuildexecution Admin (roles/remotebuildexecution.admin) Remotebuildexecution Editor (roles/remotebuildexecution.editor) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin)