This page lists the IAM roles and permissions for Resource Manager. To
search through all roles and permissions, see the [role and
permission index](https://docs.cloud.google.com/iam/docs/roles-permissions).

## Resource Manager roles

| Role | Permissions |
|---|---|
| #### Resource Manager Editor (`roles/resourcemanager.editor`) Access to manage Resource Manager resources | `resourcemanager.boundaries.*` - `resourcemanager.boundaries.associateToCapabilityConfig` - `resourcemanager.boundaries.create` - `resourcemanager.boundaries.delete` - `resourcemanager.boundaries.get` - `resourcemanager.boundaries.list` - `resourcemanager.boundaries.update` `resourcemanager.boundaryConfigs.*` - `resourcemanager.boundaryConfigs.get` - `resourcemanager.boundaryConfigs.update` `resourcemanager.capabilities.*` - `resourcemanager.capabilities.get` - `resourcemanager.capabilities.update` `resourcemanager.capabilityConfigs.*` - `resourcemanager.capabilityConfigs.create` - `resourcemanager.capabilityConfigs.delete` - `resourcemanager.capabilityConfigs.get` - `resourcemanager.capabilityConfigs.list` - `resourcemanager.capabilityConfigs.update` `resourcemanager.folders.create` `resourcemanager.folders.delete` `resourcemanager.folders.get` `resourcemanager.folders.list` `resourcemanager.folders.undelete` `resourcemanager.folders.update` `resourcemanager.organizations.get` `resourcemanager.projects.associateToCapabilityConfig` `resourcemanager.projects.create` `resourcemanager.projects.get` `resourcemanager.projects.list` `resourcemanager.projects.move` `resourcemanager.projects.update` `resourcemanager.tagHolds.*` - `resourcemanager.tagHolds.create` - `resourcemanager.tagHolds.delete` - `resourcemanager.tagHolds.list` `resourcemanager.tagKeys.create` `resourcemanager.tagKeys.delete` `resourcemanager.tagKeys.get` `resourcemanager.tagKeys.list` `resourcemanager.tagKeys.update` `resourcemanager.tagValues.create` `resourcemanager.tagValues.delete` `resourcemanager.tagValues.get` `resourcemanager.tagValues.list` `resourcemanager.tagValues.update` |
| #### Folder Admin (`roles/resourcemanager.folderAdmin`) Provides all available permissions for working with folders. Lowest-level resources where you can grant this role: - Folder | `essentialcontacts.*` - `essentialcontacts.contacts.create` - `essentialcontacts.contacts.delete` - `essentialcontacts.contacts.get` - `essentialcontacts.contacts.list` - `essentialcontacts.contacts.send` - `essentialcontacts.contacts.update` `iam.policybindings.*` - `iam.policybindings.get` - `iam.policybindings.list` `orgpolicy.constraints.list` `orgpolicy.policies.list` `orgpolicy.policy.get` `resourcemanager.capabilities.*` - `resourcemanager.capabilities.get` - `resourcemanager.capabilities.update` `resourcemanager.folders.*` - `resourcemanager.folders.create` - `resourcemanager.folders.createPolicyBinding` - `resourcemanager.folders.delete` - `resourcemanager.folders.deletePolicyBinding` - `resourcemanager.folders.get` - `resourcemanager.folders.getIamPolicy` - `resourcemanager.folders.list` - `resourcemanager.folders.move` - `resourcemanager.folders.searchPolicyBindings` - `resourcemanager.folders.setIamPolicy` - `resourcemanager.folders.undelete` - `resourcemanager.folders.update` - `resourcemanager.folders.updatePolicyBinding` `resourcemanager.hierarchyNodes.*` - `resourcemanager.hierarchyNodes.createTagBinding` - `resourcemanager.hierarchyNodes.deleteTagBinding` - `resourcemanager.hierarchyNodes.listEffectiveTags` - `resourcemanager.hierarchyNodes.listTagBindings` `resourcemanager.projects.createPolicyBinding` `resourcemanager.projects.deletePolicyBinding` `resourcemanager.projects.get` `resourcemanager.projects.getIamPolicy` `resourcemanager.projects.list` `resourcemanager.projects.move` `resourcemanager.projects.searchPolicyBindings` `resourcemanager.projects.setIamPolicy` `resourcemanager.projects.updatePolicyBinding` |
| #### Organization Administrator (`roles/resourcemanager.organizationAdmin`) Access to manage IAM policies and view organization policies for organizations, folders, and projects. Lowest-level resources where you can grant this role: - Project | `essentialcontacts.*` - `essentialcontacts.contacts.create` - `essentialcontacts.contacts.delete` - `essentialcontacts.contacts.get` - `essentialcontacts.contacts.list` - `essentialcontacts.contacts.send` - `essentialcontacts.contacts.update` `iam.policybindings.*` - `iam.policybindings.get` - `iam.policybindings.list` `orgpolicy.constraints.list` `orgpolicy.policies.list` `orgpolicy.policy.get` `resourcemanager.capabilities.*` - `resourcemanager.capabilities.get` - `resourcemanager.capabilities.update` `resourcemanager.folders.createPolicyBinding` `resourcemanager.folders.deletePolicyBinding` `resourcemanager.folders.get` `resourcemanager.folders.getIamPolicy` `resourcemanager.folders.list` `resourcemanager.folders.searchPolicyBindings` `resourcemanager.folders.setIamPolicy` `resourcemanager.folders.updatePolicyBinding` `resourcemanager.organizations.*` - `resourcemanager.organizations.createPolicyBinding` - `resourcemanager.organizations.deletePolicyBinding` - `resourcemanager.organizations.get` - `resourcemanager.organizations.getIamPolicy` - `resourcemanager.organizations.searchPolicyBindings` - `resourcemanager.organizations.setIamPolicy` - `resourcemanager.organizations.updatePolicyBinding` `resourcemanager.projects.createPolicyBinding` `resourcemanager.projects.deletePolicyBinding` `resourcemanager.projects.get` `resourcemanager.projects.getIamPolicy` `resourcemanager.projects.list` `resourcemanager.projects.searchPolicyBindings` `resourcemanager.projects.setIamPolicy` `resourcemanager.projects.updatePolicyBinding` |
| #### Project IAM Admin (`roles/resourcemanager.projectIamAdmin`) Provides permissions to administer allow policies on projects. Lowest-level resources where you can grant this role: - Project | `iam.policybindings.*` - `iam.policybindings.get` - `iam.policybindings.list` `resourcemanager.projects.createPolicyBinding` `resourcemanager.projects.deletePolicyBinding` `resourcemanager.projects.get` `resourcemanager.projects.getIamPolicy` `resourcemanager.projects.searchPolicyBindings` `resourcemanager.projects.setIamPolicy` `resourcemanager.projects.updatePolicyBinding` |
| #### Project Mover (`roles/resourcemanager.projectMover`) Provides access to update and move projects. Lowest-level resources where you can grant this role: - Project | `resourcemanager.projects.get` `resourcemanager.projects.move` `resourcemanager.projects.update` |
| #### Tag Administrator (`roles/resourcemanager.tagAdmin`) Access to create, delete, update, and manage access to Tags | `resourcemanager.tagHolds.*` - `resourcemanager.tagHolds.create` - `resourcemanager.tagHolds.delete` - `resourcemanager.tagHolds.list` `resourcemanager.tagKeys.*` - `resourcemanager.tagKeys.create` - `resourcemanager.tagKeys.delete` - `resourcemanager.tagKeys.get` - `resourcemanager.tagKeys.getIamPolicy` - `resourcemanager.tagKeys.list` - `resourcemanager.tagKeys.setIamPolicy` - `resourcemanager.tagKeys.update` `resourcemanager.tagValues.*` - `resourcemanager.tagValues.create` - `resourcemanager.tagValues.delete` - `resourcemanager.tagValues.get` - `resourcemanager.tagValues.getIamPolicy` - `resourcemanager.tagValues.list` - `resourcemanager.tagValues.setIamPolicy` - `resourcemanager.tagValues.update` |
| #### Tag User (`roles/resourcemanager.tagUser`) Access to list Tags and manage their associations with resources | `alloydb.backups.createTagBinding` `alloydb.backups.deleteTagBinding` `alloydb.backups.listEffectiveTags` `alloydb.backups.listTagBindings` `alloydb.clusters.createTagBinding` `alloydb.clusters.deleteTagBinding` `alloydb.clusters.listEffectiveTags` `alloydb.clusters.listTagBindings` `apigateway.apis.createTagBinding` `apigateway.apis.deleteTagBinding` `apigateway.apis.listEffectiveTags` `apigateway.apis.listTagBindings` `apigateway.gateways.createTagBinding` `apigateway.gateways.deleteTagBinding` `apigateway.gateways.listEffectiveTags` `apigateway.gateways.listTagBindings` `apihub.apis.createTagBinding` `apihub.apis.deleteTagBinding` `apihub.apis.listEffectiveTags` `apihub.apis.listTagBindings` `apihub.deployments.createTagBinding` `apihub.deployments.deleteTagBinding` `apihub.deployments.listEffectiveTags` `apihub.deployments.listTagBindings` `artifactregistry.repositories.createTagBinding` `artifactregistry.repositories.deleteTagBinding` `artifactregistry.repositories.listEffectiveTags` `artifactregistry.repositories.listTagBindings` `backupdr.backupVaults.createTagBinding` `backupdr.backupVaults.deleteTagBinding` `backupdr.backupVaults.listEffectiveTags` `backupdr.backupVaults.listTagBindings` `backupdr.managementServers.createTagBinding` `backupdr.managementServers.deleteTagBinding` `backupdr.managementServers.listEffectiveTags` `backupdr.managementServers.listTagBindings` `beyondcorp.appConnections.createTagBinding` `beyondcorp.appConnections.deleteTagBinding` `beyondcorp.appConnections.listEffectiveTags` `beyondcorp.appConnections.listTagBindings` `beyondcorp.appConnectors.createTagBinding` `beyondcorp.appConnectors.deleteTagBinding` `beyondcorp.appConnectors.listEffectiveTags` `beyondcorp.appConnectors.listTagBindings` `beyondcorp.appGateways.createTagBinding` `beyondcorp.appGateways.deleteTagBinding` `beyondcorp.appGateways.listEffectiveTags` `beyondcorp.appGateways.listTagBindings` `bigquery.datasets.createTagBinding` `bigquery.datasets.deleteTagBinding` `bigquery.datasets.listEffectiveTags` `bigquery.datasets.listTagBindings` `bigquery.tables.createTagBinding` `bigquery.tables.deleteTagBinding` `bigquery.tables.listEffectiveTags` `bigquery.tables.listTagBindings` `bigtable.authorizedViews.createTagBinding` `bigtable.authorizedViews.deleteTagBinding` `bigtable.authorizedViews.listEffectiveTags` `bigtable.authorizedViews.listTagBindings` `bigtable.instances.createTagBinding` `bigtable.instances.deleteTagBinding` `bigtable.instances.listEffectiveTags` `bigtable.instances.listTagBindings` `certificatemanager.certissuanceconfigs.createTagBinding` `certificatemanager.certissuanceconfigs.deleteTagBinding` `certificatemanager.certissuanceconfigs.listEffectiveTags` `certificatemanager.certissuanceconfigs.listTagBindings` `certificatemanager.certmapentries.createTagBinding` `certificatemanager.certmapentries.deleteTagBinding` `certificatemanager.certmapentries.listEffectiveTags` `certificatemanager.certmapentries.listTagBindings` `certificatemanager.certmaps.createTagBinding` `certificatemanager.certmaps.deleteTagBinding` `certificatemanager.certmaps.listEffectiveTags` `certificatemanager.certmaps.listTagBindings` `certificatemanager.certs.createTagBinding` `certificatemanager.certs.deleteTagBinding` `certificatemanager.certs.listEffectiveTags` `certificatemanager.certs.listTagBindings` `certificatemanager.dnsauthorizations.createTagBinding` `certificatemanager.dnsauthorizations.deleteTagBinding` `certificatemanager.dnsauthorizations.listEffectiveTags` `certificatemanager.dnsauthorizations.listTagBindings` `certificatemanager.trustconfigs.createTagBinding` `certificatemanager.trustconfigs.deleteTagBinding` `certificatemanager.trustconfigs.listEffectiveTags` `certificatemanager.trustconfigs.listTagBindings` `clouddeploy.deliveryPipelines.createTagBinding` `clouddeploy.deliveryPipelines.deleteTagBinding` `clouddeploy.deliveryPipelines.listEffectiveTags` `clouddeploy.deliveryPipelines.listTagBindings` `clouddeploy.targets.createTagBinding` `clouddeploy.targets.deleteTagBinding` `clouddeploy.targets.listEffectiveTags` `clouddeploy.targets.listTagBindings` `cloudkms.keyRings.createTagBinding` `cloudkms.keyRings.deleteTagBinding` `cloudkms.keyRings.listEffectiveTags` `cloudkms.keyRings.listTagBindings` `cloudsql.instances.createTagBinding` `cloudsql.instances.deleteTagBinding` `cloudsql.instances.listEffectiveTags` `cloudsql.instances.listTagBindings` `composer.environments.createTagBinding` `composer.environments.deleteTagBinding` `composer.environments.listEffectiveTags` `composer.environments.listTagBindings` `compute.addresses.createTagBinding` `compute.addresses.deleteTagBinding` `compute.addresses.listEffectiveTags` `compute.addresses.listTagBindings` `compute.backendBuckets.createTagBinding` `compute.backendBuckets.deleteTagBinding` `compute.backendBuckets.listEffectiveTags` `compute.backendBuckets.listTagBindings` `compute.backendServices.createTagBinding` `compute.backendServices.deleteTagBinding` `compute.backendServices.listEffectiveTags` `compute.backendServices.listTagBindings` `compute.commitments.createTagBinding` `compute.commitments.deleteTagBinding` `compute.commitments.listEffectiveTags` `compute.commitments.listTagBindings` `compute.disks.createTagBinding` `compute.disks.deleteTagBinding` `compute.disks.listEffectiveTags` `compute.disks.listTagBindings` `compute.externalVpnGateways.createTagBinding` `compute.externalVpnGateways.deleteTagBinding` `compute.externalVpnGateways.listEffectiveTags` `compute.externalVpnGateways.listTagBindings` `compute.firewallPolicies.createTagBinding` `compute.firewallPolicies.deleteTagBinding` `compute.firewallPolicies.listEffectiveTags` `compute.firewallPolicies.listTagBindings` `compute.firewalls.createTagBinding` `compute.firewalls.deleteTagBinding` `compute.firewalls.listEffectiveTags` `compute.firewalls.listTagBindings` `compute.forwardingRules.createTagBinding` `compute.forwardingRules.deleteTagBinding` `compute.forwardingRules.listEffectiveTags` `compute.forwardingRules.listTagBindings` `compute.futureReservations.createTagBinding` `compute.futureReservations.deleteTagBinding` `compute.futureReservations.listEffectiveTags` `compute.futureReservations.listTagBindings` `compute.globalAddresses.createTagBinding` `compute.globalAddresses.deleteTagBinding` `compute.globalAddresses.listEffectiveTags` `compute.globalAddresses.listTagBindings` `compute.globalForwardingRules.createTagBinding` `compute.globalForwardingRules.deleteTagBinding` `compute.globalForwardingRules.listEffectiveTags` `compute.globalForwardingRules.listTagBindings` `compute.globalNetworkEndpointGroups.createTagBinding` `compute.globalNetworkEndpointGroups.deleteTagBinding` `compute.globalNetworkEndpointGroups.listEffectiveTags` `compute.globalNetworkEndpointGroups.listTagBindings` `compute.healthChecks.createTagBinding` `compute.healthChecks.deleteTagBinding` `compute.healthChecks.listEffectiveTags` `compute.healthChecks.listTagBindings` `compute.httpHealthChecks.createTagBinding` `compute.httpHealthChecks.deleteTagBinding` `compute.httpHealthChecks.listEffectiveTags` `compute.httpHealthChecks.listTagBindings` `compute.httpsHealthChecks.createTagBinding` `compute.httpsHealthChecks.deleteTagBinding` `compute.httpsHealthChecks.listEffectiveTags` `compute.httpsHealthChecks.listTagBindings` `compute.images.createTagBinding` `compute.images.deleteTagBinding` `compute.images.listEffectiveTags` `compute.images.listTagBindings` `compute.instanceGroupManagers.createTagBinding` `compute.instanceGroupManagers.deleteTagBinding` `compute.instanceGroupManagers.listEffectiveTags` `compute.instanceGroupManagers.listTagBindings` `compute.instanceGroups.createTagBinding` `compute.instanceGroups.deleteTagBinding` `compute.instanceGroups.listEffectiveTags` `compute.instanceGroups.listTagBindings` `compute.instances.createTagBinding` `compute.instances.deleteTagBinding` `compute.instances.listEffectiveTags` `compute.instances.listTagBindings` `compute.instantSnapshots.createTagBinding` `compute.instantSnapshots.deleteTagBinding` `compute.instantSnapshots.listEffectiveTags` `compute.instantSnapshots.listTagBindings` `compute.interconnectAttachments.createTagBinding` `compute.interconnectAttachments.deleteTagBinding` `compute.interconnectAttachments.listEffectiveTags` `compute.interconnectAttachments.listTagBindings` `compute.interconnects.createTagBinding` `compute.interconnects.deleteTagBinding` `compute.interconnects.listEffectiveTags` `compute.interconnects.listTagBindings` `compute.licenses.createTagBinding` `compute.licenses.deleteTagBinding` `compute.licenses.listEffectiveTags` `compute.licenses.listTagBindings` `compute.machineImages.createTagBinding` `compute.machineImages.deleteTagBinding` `compute.machineImages.listEffectiveTags` `compute.machineImages.listTagBindings` `compute.networkAttachments.createTagBinding` `compute.networkAttachments.deleteTagBinding` `compute.networkAttachments.listEffectiveTags` `compute.networkAttachments.listTagBindings` `compute.networkEdgeSecurityServices.createTagBinding` `compute.networkEdgeSecurityServices.deleteTagBinding` `compute.networkEdgeSecurityServices.listEffectiveTags` `compute.networkEdgeSecurityServices.listTagBindings` `compute.networkEndpointGroups.createTagBinding` `compute.networkEndpointGroups.deleteTagBinding` `compute.networkEndpointGroups.listEffectiveTags` `compute.networkEndpointGroups.listTagBindings` `compute.networks.createTagBinding` `compute.networks.deleteTagBinding` `compute.networks.listEffectiveTags` `compute.networks.listTagBindings` `compute.packetMirrorings.createTagBinding` `compute.packetMirrorings.deleteTagBinding` `compute.packetMirrorings.listEffectiveTags` `compute.packetMirrorings.listTagBindings` `compute.publicDelegatedPrefixes.createTagBinding` `compute.publicDelegatedPrefixes.deleteTagBinding` `compute.publicDelegatedPrefixes.listEffectiveTags` `compute.publicDelegatedPrefixes.listTagBindings` `compute.regionBackendBuckets.createTagBinding` `compute.regionBackendBuckets.deleteTagBinding` `compute.regionBackendBuckets.listEffectiveTags` `compute.regionBackendBuckets.listTagBindings` `compute.regionBackendServices.createTagBinding` `compute.regionBackendServices.deleteTagBinding` `compute.regionBackendServices.listEffectiveTags` `compute.regionBackendServices.listTagBindings` `compute.regionFirewallPolicies.createTagBinding` `compute.regionFirewallPolicies.deleteTagBinding` `compute.regionFirewallPolicies.listEffectiveTags` `compute.regionFirewallPolicies.listTagBindings` `compute.regionHealthChecks.createTagBinding` `compute.regionHealthChecks.deleteTagBinding` `compute.regionHealthChecks.listEffectiveTags` `compute.regionHealthChecks.listTagBindings` `compute.regionNetworkEndpointGroups.createTagBinding` `compute.regionNetworkEndpointGroups.deleteTagBinding` `compute.regionNetworkEndpointGroups.listEffectiveTags` `compute.regionNetworkEndpointGroups.listTagBindings` `compute.regionSecurityPolicies.createTagBinding` `compute.regionSecurityPolicies.deleteTagBinding` `compute.regionSecurityPolicies.listEffectiveTags` `compute.regionSecurityPolicies.listTagBindings` `compute.regionSslCertificates.createTagBinding` `compute.regionSslCertificates.deleteTagBinding` `compute.regionSslCertificates.listEffectiveTags` `compute.regionSslCertificates.listTagBindings` `compute.regionSslPolicies.createTagBinding` `compute.regionSslPolicies.deleteTagBinding` `compute.regionSslPolicies.listEffectiveTags` `compute.regionSslPolicies.listTagBindings` `compute.regionTargetHttpProxies.createTagBinding` `compute.regionTargetHttpProxies.deleteTagBinding` `compute.regionTargetHttpProxies.listEffectiveTags` `compute.regionTargetHttpProxies.listTagBindings` `compute.regionTargetHttpsProxies.createTagBinding` `compute.regionTargetHttpsProxies.deleteTagBinding` `compute.regionTargetHttpsProxies.listEffectiveTags` `compute.regionTargetHttpsProxies.listTagBindings` `compute.regionTargetTcpProxies.createTagBinding` `compute.regionTargetTcpProxies.deleteTagBinding` `compute.regionTargetTcpProxies.listEffectiveTags` `compute.regionTargetTcpProxies.listTagBindings` `compute.regionUrlMaps.createTagBinding` `compute.regionUrlMaps.deleteTagBinding` `compute.regionUrlMaps.listEffectiveTags` `compute.regionUrlMaps.listTagBindings` `compute.reservations.createTagBinding` `compute.reservations.deleteTagBinding` `compute.reservations.listEffectiveTags` `compute.reservations.listTagBindings` `compute.routers.createTagBinding` `compute.routers.deleteTagBinding` `compute.routers.listEffectiveTags` `compute.routers.listTagBindings` `compute.routes.createTagBinding` `compute.routes.deleteTagBinding` `compute.routes.listEffectiveTags` `compute.routes.listTagBindings` `compute.securityPolicies.createTagBinding` `compute.securityPolicies.deleteTagBinding` `compute.securityPolicies.listEffectiveTags` `compute.securityPolicies.listTagBindings` `compute.serviceAttachments.createTagBinding` `compute.serviceAttachments.deleteTagBinding` `compute.serviceAttachments.listEffectiveTags` `compute.serviceAttachments.listTagBindings` `compute.snapshots.createTagBinding` `compute.snapshots.deleteTagBinding` `compute.snapshots.listEffectiveTags` `compute.snapshots.listTagBindings` `compute.sslCertificates.createTagBinding` `compute.sslCertificates.deleteTagBinding` `compute.sslCertificates.listEffectiveTags` `compute.sslCertificates.listTagBindings` `compute.sslPolicies.createTagBinding` `compute.sslPolicies.deleteTagBinding` `compute.sslPolicies.listEffectiveTags` `compute.sslPolicies.listTagBindings` `compute.storagePools.createTagBinding` `compute.storagePools.deleteTagBinding` `compute.storagePools.listEffectiveTags` `compute.storagePools.listTagBindings` `compute.subnetworks.createTagBinding` `compute.subnetworks.deleteTagBinding` `compute.subnetworks.listEffectiveTags` `compute.subnetworks.listTagBindings` `compute.targetGrpcProxies.createTagBinding` `compute.targetGrpcProxies.deleteTagBinding` `compute.targetGrpcProxies.listEffectiveTags` `compute.targetGrpcProxies.listTagBindings` `compute.targetHttpProxies.createTagBinding` `compute.targetHttpProxies.deleteTagBinding` `compute.targetHttpProxies.listEffectiveTags` `compute.targetHttpProxies.listTagBindings` `compute.targetHttpsProxies.createTagBinding` `compute.targetHttpsProxies.deleteTagBinding` `compute.targetHttpsProxies.listEffectiveTags` `compute.targetHttpsProxies.listTagBindings` `compute.targetInstances.createTagBinding` `compute.targetInstances.deleteTagBinding` `compute.targetInstances.listEffectiveTags` `compute.targetInstances.listTagBindings` `compute.targetPools.createTagBinding` `compute.targetPools.deleteTagBinding` `compute.targetPools.listEffectiveTags` `compute.targetPools.listTagBindings` `compute.targetSslProxies.createTagBinding` `compute.targetSslProxies.deleteTagBinding` `compute.targetSslProxies.listEffectiveTags` `compute.targetSslProxies.listTagBindings` `compute.targetTcpProxies.createTagBinding` `compute.targetTcpProxies.deleteTagBinding` `compute.targetTcpProxies.listEffectiveTags` `compute.targetTcpProxies.listTagBindings` `compute.targetVpnGateways.createTagBinding` `compute.targetVpnGateways.deleteTagBinding` `compute.targetVpnGateways.listEffectiveTags` `compute.targetVpnGateways.listTagBindings` `compute.urlMaps.createTagBinding` `compute.urlMaps.deleteTagBinding` `compute.urlMaps.listEffectiveTags` `compute.urlMaps.listTagBindings` `compute.vpnGateways.createTagBinding` `compute.vpnGateways.deleteTagBinding` `compute.vpnGateways.listEffectiveTags` `compute.vpnGateways.listTagBindings` `compute.vpnTunnels.createTagBinding` `compute.vpnTunnels.deleteTagBinding` `compute.vpnTunnels.listEffectiveTags` `compute.vpnTunnels.listTagBindings` `config.deploymentgroups.createTagBinding` `config.deploymentgroups.deleteTagBinding` `config.deploymentgroups.listEffectiveTags` `config.deploymentgroups.listTagBindings` `config.deployments.createTagBinding` `config.deployments.deleteTagBinding` `config.deployments.listEffectiveTags` `config.deployments.listTagBindings` `config.previews.createTagBinding` `config.previews.deleteTagBinding` `config.previews.listEffectiveTags` `config.previews.listTagBindings` `container.clusters.createTagBinding` `container.clusters.deleteTagBinding` `container.clusters.listEffectiveTags` `container.clusters.listTagBindings` `dataflow.jobs.createTagBinding` `dataflow.jobs.deleteTagBinding` `dataflow.jobs.listEffectiveTags` `dataflow.jobs.listTagBindings` `dataflow.snapshots.createTagBinding` `dataflow.snapshots.deleteTagBinding` `dataflow.snapshots.listEffectiveTags` `dataflow.snapshots.listTagBindings` `dataform.repositories.createTagBinding` `dataform.repositories.deleteTagBinding` `dataform.repositories.listEffectiveTags` `dataform.repositories.listTagBindings` `datafusion.instances.createTagBinding` `datafusion.instances.deleteTagBinding` `datafusion.instances.listEffectiveTags` `datafusion.instances.listTagBindings` `datamigration.connectionprofiles.createTagBinding` `datamigration.connectionprofiles.deleteTagBinding` `datamigration.connectionprofiles.listEffectiveTags` `datamigration.connectionprofiles.listTagBindings` `datamigration.migrationjobs.createTagBinding` `datamigration.migrationjobs.deleteTagBinding` `datamigration.migrationjobs.listEffectiveTags` `datamigration.migrationjobs.listTagBindings` `datamigration.privateconnections.createTagBinding` `datamigration.privateconnections.deleteTagBinding` `datamigration.privateconnections.listEffectiveTags` `datamigration.privateconnections.listTagBindings` `dataplex.entryGroups.createTagBinding` `dataplex.entryGroups.deleteTagBinding` `dataplex.entryGroups.listEffectiveTags` `dataplex.entryGroups.listTagBindings` `dataplex.entryTypes.createTagBinding` `dataplex.entryTypes.deleteTagBinding` `dataplex.entryTypes.listEffectiveTags` `dataplex.entryTypes.listTagBindings` `dataplex.governanceRules.*` - `dataplex.governanceRules.createTagBinding` - `dataplex.governanceRules.deleteTagBinding` - `dataplex.governanceRules.listEffectiveTags` - `dataplex.governanceRules.listTagBindings` `datastore.databases.createTagBinding` `datastore.databases.deleteTagBinding` `datastore.databases.listEffectiveTags` `datastore.databases.listTagBindings` `datastream.connectionProfiles.createTagBinding` `datastream.connectionProfiles.deleteTagBinding` `datastream.connectionProfiles.listEffectiveTags` `datastream.connectionProfiles.listTagBindings` `datastream.privateConnections.createTagBinding` `datastream.privateConnections.deleteTagBinding` `datastream.privateConnections.listEffectiveTags` `datastream.privateConnections.listTagBindings` `datastream.streams.createTagBinding` `datastream.streams.deleteTagBinding` `datastream.streams.listEffectiveTags` `datastream.streams.listTagBindings` `developerconnect.connections.createTagBinding` `developerconnect.connections.deleteTagBinding` `developerconnect.connections.listEffectiveTags` `developerconnect.connections.listTagBindings` `dns.policies.createTagBinding` `dns.policies.deleteTagBinding` `dns.policies.listEffectiveTags` `dns.policies.listTagBindings` `domains.registrations.createTagBinding` `domains.registrations.deleteTagBinding` `domains.registrations.listEffectiveTags` `domains.registrations.listTagBindings` `eventarc.channelConnections.createTagBinding` `eventarc.channelConnections.deleteTagBinding` `eventarc.channelConnections.listEffectiveTags` `eventarc.channelConnections.listTagBindings` `eventarc.channels.createTagBinding` `eventarc.channels.deleteTagBinding` `eventarc.channels.listEffectiveTags` `eventarc.channels.listTagBindings` `eventarc.triggers.createTagBinding` `eventarc.triggers.deleteTagBinding` `eventarc.triggers.listEffectiveTags` `eventarc.triggers.listTagBindings` `file.backups.createTagBinding` `file.backups.deleteTagBinding` `file.backups.listEffectiveTags` `file.backups.listTagBindings` `file.instances.createTagBinding` `file.instances.deleteTagBinding` `file.instances.listEffectiveTags` `file.instances.listTagBindings` `file.snapshots.*` - `file.snapshots.createTagBinding` - `file.snapshots.deleteTagBinding` - `file.snapshots.listEffectiveTags` - `file.snapshots.listTagBindings` `financialservices.v1instances.createTagBinding` `financialservices.v1instances.deleteTagBinding` `financialservices.v1instances.listEffectiveTags` `financialservices.v1instances.listTagBindings` `firebaseapphosting.backends.createTagBinding` `firebaseapphosting.backends.deleteTagBinding` `firebaseapphosting.backends.listEffectiveTags` `firebaseapphosting.backends.listTagBindings` `firebasedataconnect.services.createTagBinding` `firebasedataconnect.services.deleteTagBinding` `firebasedataconnect.services.listEffectiveTags` `firebasedataconnect.services.listTagBindings` `gdchardwaremanagement.hardware.createTagBinding` `gdchardwaremanagement.hardware.deleteTagBinding` `gdchardwaremanagement.hardware.listEffectiveTags` `gdchardwaremanagement.hardware.listTagBindings` `gdchardwaremanagement.orders.createTagBinding` `gdchardwaremanagement.orders.deleteTagBinding` `gdchardwaremanagement.orders.listEffectiveTags` `gdchardwaremanagement.orders.listTagBindings` `gdchardwaremanagement.sites.createTagBinding` `gdchardwaremanagement.sites.deleteTagBinding` `gdchardwaremanagement.sites.listEffectiveTags` `gdchardwaremanagement.sites.listTagBindings` `gdchardwaremanagement.zoneOperations.*` - `gdchardwaremanagement.zoneOperations.createTagBinding` - `gdchardwaremanagement.zoneOperations.deleteTagBinding` - `gdchardwaremanagement.zoneOperations.listEffectiveTags` - `gdchardwaremanagement.zoneOperations.listTagBindings` `gdchardwaremanagement.zones.createTagBinding` `gdchardwaremanagement.zones.deleteTagBinding` `gdchardwaremanagement.zones.listEffectiveTags` `gdchardwaremanagement.zones.listTagBindings` `gkemulticloud.attachedClusters.createTagBinding` `gkemulticloud.attachedClusters.deleteTagBinding` `gkemulticloud.attachedClusters.listEffectiveTags` `gkemulticloud.attachedClusters.listTagBindings` `gkeonprem.bareMetalAdminClusters.createTagBinding` `gkeonprem.bareMetalAdminClusters.deleteTagBinding` `gkeonprem.bareMetalAdminClusters.listEffectiveTags` `gkeonprem.bareMetalAdminClusters.listTagBindings` `gkeonprem.bareMetalClusters.createTagBinding` `gkeonprem.bareMetalClusters.deleteTagBinding` `gkeonprem.bareMetalClusters.listEffectiveTags` `gkeonprem.bareMetalClusters.listTagBindings` `gkeonprem.vmwareAdminClusters.createTagBinding` `gkeonprem.vmwareAdminClusters.deleteTagBinding` `gkeonprem.vmwareAdminClusters.listEffectiveTags` `gkeonprem.vmwareAdminClusters.listTagBindings` `gkeonprem.vmwareClusters.createTagBinding` `gkeonprem.vmwareClusters.deleteTagBinding` `gkeonprem.vmwareClusters.listEffectiveTags` `gkeonprem.vmwareClusters.listTagBindings` `iam.roles.createTagBinding` `iam.roles.deleteTagBinding` `iam.roles.listEffectiveTags` `iam.roles.listTagBindings` `iam.serviceAccounts.createTagBinding` `iam.serviceAccounts.deleteTagBinding` `iam.serviceAccounts.listEffectiveTags` `iam.serviceAccounts.listTagBindings` `krmapihosting.krmApiHosts.createTagBinding` `krmapihosting.krmApiHosts.deleteTagBinding` `krmapihosting.krmApiHosts.listEffectiveTags` `krmapihosting.krmApiHosts.listTagBindings` `livestream.channels.createTagBinding` `livestream.channels.deleteTagBinding` `livestream.channels.listEffectiveTags` `livestream.channels.listTagBindings` `livestream.inputs.createTagBinding` `livestream.inputs.deleteTagBinding` `livestream.inputs.listEffectiveTags` `livestream.inputs.listTagBindings` `livestream.pools.createTagBinding` `livestream.pools.deleteTagBinding` `livestream.pools.listEffectiveTags` `livestream.pools.listTagBindings` `logging.buckets.createTagBinding` `logging.buckets.deleteTagBinding` `logging.buckets.listEffectiveTags` `logging.buckets.listTagBindings` `looker.instances.createTagBinding` `looker.instances.deleteTagBinding` `looker.instances.listEffectiveTags` `looker.instances.listTagBindings` `managedidentities.domains.createTagBinding` `managedidentities.domains.deleteTagBinding` `managedidentities.domains.listEffectiveTags` `managedidentities.domains.listTagBindings` `memcache.instances.createTagBinding` `memcache.instances.deleteTagBinding` `memcache.instances.listEffectiveTags` `memcache.instances.listTagBindings` `memorystore.backupCollections.createTagBinding` `memorystore.backupCollections.deleteTagBinding` `memorystore.backupCollections.listEffectiveTags` `memorystore.backupCollections.listTagBindings` `memorystore.instances.createTagBinding` `memorystore.instances.deleteTagBinding` `memorystore.instances.listEffectiveTags` `memorystore.instances.listTagBindings` `metastore.federations.createTagBinding` `metastore.federations.deleteTagBinding` `metastore.federations.listEffectiveTags` `metastore.federations.listTagBindings` `metastore.services.createTagBinding` `metastore.services.deleteTagBinding` `metastore.services.listEffectiveTags` `metastore.services.listTagBindings` `monitoring.alertPolicies.createTagBinding` `monitoring.alertPolicies.deleteTagBinding` `monitoring.alertPolicies.listEffectiveTags` `monitoring.alertPolicies.listTagBindings` `monitoring.dashboards.createTagBinding` `monitoring.dashboards.deleteTagBinding` `monitoring.dashboards.listEffectiveTags` `monitoring.dashboards.listTagBindings` `networkconnectivity.hubs.createTagBinding` `networkconnectivity.hubs.deleteTagBinding` `networkconnectivity.hubs.listEffectiveTags` `networkconnectivity.hubs.listTagBindings` `networkconnectivity.spokes.createTagBinding` `networkconnectivity.spokes.deleteTagBinding` `networkconnectivity.spokes.listEffectiveTags` `networkconnectivity.spokes.listTagBindings` `networkmanagement.connectivitytests.createTagBinding` `networkmanagement.connectivitytests.deleteTagBinding` `networkmanagement.connectivitytests.listEffectiveTags` `networkmanagement.connectivitytests.listTagBindings` `networksecurity.authorizationPolicies.createTagBinding` `networksecurity.authorizationPolicies.deleteTagBinding` `networksecurity.authorizationPolicies.listEffectiveTags` `networksecurity.authorizationPolicies.listTagBindings` `networksecurity.clientTlsPolicies.createTagBinding` `networksecurity.clientTlsPolicies.deleteTagBinding` `networksecurity.clientTlsPolicies.listEffectiveTags` `networksecurity.clientTlsPolicies.listTagBindings` `networksecurity.serverTlsPolicies.createTagBinding` `networksecurity.serverTlsPolicies.deleteTagBinding` `networksecurity.serverTlsPolicies.listEffectiveTags` `networksecurity.serverTlsPolicies.listTagBindings` `networkservices.endpointConfigSelectors.*` - `networkservices.endpointConfigSelectors.createTagBinding` - `networkservices.endpointConfigSelectors.deleteTagBinding` - `networkservices.endpointConfigSelectors.listEffectiveTags` - `networkservices.endpointConfigSelectors.listTagBindings` `networkservices.gateways.createTagBinding` `networkservices.gateways.deleteTagBinding` `networkservices.gateways.listEffectiveTags` `networkservices.gateways.listTagBindings` `networkservices.httpFilters.createTagBinding` `networkservices.httpFilters.deleteTagBinding` `networkservices.httpFilters.listEffectiveTags` `networkservices.httpFilters.listTagBindings` `networkservices.meshes.createTagBinding` `networkservices.meshes.deleteTagBinding` `networkservices.meshes.listEffectiveTags` `networkservices.meshes.listTagBindings` `notebooks.instances.createTagBinding` `notebooks.instances.deleteTagBinding` `notebooks.instances.listEffectiveTags` `notebooks.instances.listTagBindings` `oracledatabase.autonomousDatabases.createTagBinding` `oracledatabase.autonomousDatabases.deleteTagBinding` `oracledatabase.autonomousDatabases.listEffectiveTags` `oracledatabase.autonomousDatabases.listTagBindings` `oracledatabase.cloudExadataInfrastructures.createTagBinding` `oracledatabase.cloudExadataInfrastructures.deleteTagBinding` `oracledatabase.cloudExadataInfrastructures.listEffectiveTags` `oracledatabase.cloudExadataInfrastructures.listTagBindings` `oracledatabase.cloudVmClusters.createTagBinding` `oracledatabase.cloudVmClusters.deleteTagBinding` `oracledatabase.cloudVmClusters.listEffectiveTags` `oracledatabase.cloudVmClusters.listTagBindings` `oracledatabase.dbSystems.createTagBinding` `oracledatabase.dbSystems.deleteTagBinding` `oracledatabase.dbSystems.listEffectiveTags` `oracledatabase.dbSystems.listTagBindings` `oracledatabase.entitlements.createTagBinding` `oracledatabase.entitlements.deleteTagBinding` `oracledatabase.entitlements.listEffectiveTags` `oracledatabase.entitlements.listTagBindings` `parametermanager.parameters.createTagBinding` `parametermanager.parameters.deleteTagBinding` `parametermanager.parameters.listEffectiveTags` `parametermanager.parameters.listTagBindings` `privateca.caPools.createTagBinding` `privateca.caPools.deleteTagBinding` `privateca.caPools.listEffectiveTags` `privateca.caPools.listTagBindings` `privateca.certificateTemplates.createTagBinding` `privateca.certificateTemplates.deleteTagBinding` `privateca.certificateTemplates.listEffectiveTags` `privateca.certificateTemplates.listTagBindings` `pubsub.snapshots.createTagBinding` `pubsub.snapshots.deleteTagBinding` `pubsub.snapshots.listEffectiveTags` `pubsub.snapshots.listTagBindings` `pubsub.subscriptions.createTagBinding` `pubsub.subscriptions.deleteTagBinding` `pubsub.subscriptions.listEffectiveTags` `pubsub.subscriptions.listTagBindings` `pubsub.topics.createTagBinding` `pubsub.topics.deleteTagBinding` `pubsub.topics.listEffectiveTags` `pubsub.topics.listTagBindings` `recaptchaenterprise.keys.createTagBinding` `recaptchaenterprise.keys.deleteTagBinding` `recaptchaenterprise.keys.listEffectiveTags` `recaptchaenterprise.keys.listTagBindings` `redis.clusters.createTagBinding` `redis.clusters.deleteTagBinding` `redis.clusters.listEffectiveTags` `redis.clusters.listTagBindings` `redis.instances.createTagBinding` `redis.instances.deleteTagBinding` `redis.instances.listEffectiveTags` `redis.instances.listTagBindings` `resourcemanager.hierarchyNodes.*` - `resourcemanager.hierarchyNodes.createTagBinding` - `resourcemanager.hierarchyNodes.deleteTagBinding` - `resourcemanager.hierarchyNodes.listEffectiveTags` - `resourcemanager.hierarchyNodes.listTagBindings` `resourcemanager.projects.get` `resourcemanager.tagKeys.get` `resourcemanager.tagKeys.list` `resourcemanager.tagValueBindings.*` - `resourcemanager.tagValueBindings.create` - `resourcemanager.tagValueBindings.delete` `resourcemanager.tagValues.get` `resourcemanager.tagValues.list` `run.jobs.createTagBinding` `run.jobs.deleteTagBinding` `run.jobs.listEffectiveTags` `run.jobs.listTagBindings` `run.services.createTagBinding` `run.services.deleteTagBinding` `run.services.listEffectiveTags` `run.services.listTagBindings` `secretmanager.secrets.createTagBinding` `secretmanager.secrets.deleteTagBinding` `secretmanager.secrets.listEffectiveTags` `secretmanager.secrets.listTagBindings` `spanner.instances.createTagBinding` `spanner.instances.deleteTagBinding` `spanner.instances.listEffectiveTags` `spanner.instances.listTagBindings` `storage.buckets.createTagBinding` `storage.buckets.deleteTagBinding` `storage.buckets.listEffectiveTags` `storage.buckets.listTagBindings` `tpu.nodes.createTagBinding` `tpu.nodes.deleteTagBinding` `tpu.nodes.listEffectiveTags` `tpu.nodes.listTagBindings` `transcoder.jobTemplates.createTagBinding` `transcoder.jobTemplates.deleteTagBinding` `transcoder.jobTemplates.listEffectiveTags` `transcoder.jobTemplates.listTagBindings` `transcoder.jobs.createTagBinding` `transcoder.jobs.deleteTagBinding` `transcoder.jobs.listEffectiveTags` `transcoder.jobs.listTagBindings` `videostitcher.cdnKeys.createTagBinding` `videostitcher.cdnKeys.deleteTagBinding` `videostitcher.cdnKeys.listEffectiveTags` `videostitcher.cdnKeys.listTagBindings` `videostitcher.liveConfigs.createTagBinding` `videostitcher.liveConfigs.deleteTagBinding` `videostitcher.liveConfigs.listEffectiveTags` `videostitcher.liveConfigs.listTagBindings` `videostitcher.slates.createTagBinding` `videostitcher.slates.deleteTagBinding` `videostitcher.slates.listEffectiveTags` `videostitcher.slates.listTagBindings` `videostitcher.vodConfigs.createTagBinding` `videostitcher.vodConfigs.deleteTagBinding` `videostitcher.vodConfigs.listEffectiveTags` `videostitcher.vodConfigs.listTagBindings` `vmmigration.groups.createTagBinding` `vmmigration.groups.deleteTagBinding` `vmmigration.groups.listEffectiveTags` `vmmigration.groups.listTagBindings` `vmmigration.sources.createTagBinding` `vmmigration.sources.deleteTagBinding` `vmmigration.sources.listEffectiveTags` `vmmigration.sources.listTagBindings` `vmwareengine.networkPeerings.createTagBinding` `vmwareengine.networkPeerings.deleteTagBinding` `vmwareengine.networkPeerings.listEffectiveTags` `vmwareengine.networkPeerings.listTagBindings` `vmwareengine.networkPolicies.createTagBinding` `vmwareengine.networkPolicies.deleteTagBinding` `vmwareengine.networkPolicies.listEffectiveTags` `vmwareengine.networkPolicies.listTagBindings` `vmwareengine.privateClouds.createTagBinding` `vmwareengine.privateClouds.deleteTagBinding` `vmwareengine.privateClouds.listEffectiveTags` `vmwareengine.privateClouds.listTagBindings` `vmwareengine.privateConnections.createTagBinding` `vmwareengine.privateConnections.deleteTagBinding` `vmwareengine.privateConnections.listEffectiveTags` `vmwareengine.privateConnections.listTagBindings` `vmwareengine.vmwareEngineNetworks.createTagBinding` `vmwareengine.vmwareEngineNetworks.deleteTagBinding` `vmwareengine.vmwareEngineNetworks.listEffectiveTags` `vmwareengine.vmwareEngineNetworks.listTagBindings` `workflows.workflows.createTagBinding` `workflows.workflows.deleteTagBinding` `workflows.workflows.listEffectiveTags` `workflows.workflows.listTagBindings` `workstations.workstationClusters.createTagBinding` `workstations.workstationClusters.deleteTagBinding` `workstations.workstationClusters.listEffectiveTags` `workstations.workstationClusters.listTagBindings` |
| #### Tag Viewer (`roles/resourcemanager.tagViewer`) Access to list Tags and their associations with resources | `alloydb.backups.listEffectiveTags` `alloydb.backups.listTagBindings` `alloydb.clusters.listEffectiveTags` `alloydb.clusters.listTagBindings` `apigateway.apis.listEffectiveTags` `apigateway.apis.listTagBindings` `apigateway.gateways.listEffectiveTags` `apigateway.gateways.listTagBindings` `apihub.apis.listEffectiveTags` `apihub.apis.listTagBindings` `apihub.deployments.listEffectiveTags` `apihub.deployments.listTagBindings` `artifactregistry.repositories.listEffectiveTags` `artifactregistry.repositories.listTagBindings` `backupdr.backupVaults.listEffectiveTags` `backupdr.backupVaults.listTagBindings` `backupdr.managementServers.listEffectiveTags` `backupdr.managementServers.listTagBindings` `beyondcorp.appConnections.listEffectiveTags` `beyondcorp.appConnections.listTagBindings` `beyondcorp.appConnectors.listEffectiveTags` `beyondcorp.appConnectors.listTagBindings` `beyondcorp.appGateways.listEffectiveTags` `beyondcorp.appGateways.listTagBindings` `bigquery.datasets.listEffectiveTags` `bigquery.datasets.listTagBindings` `bigquery.tables.listEffectiveTags` `bigquery.tables.listTagBindings` `bigtable.authorizedViews.listEffectiveTags` `bigtable.authorizedViews.listTagBindings` `bigtable.instances.listEffectiveTags` `bigtable.instances.listTagBindings` `certificatemanager.certissuanceconfigs.listEffectiveTags` `certificatemanager.certissuanceconfigs.listTagBindings` `certificatemanager.certmapentries.listEffectiveTags` `certificatemanager.certmapentries.listTagBindings` `certificatemanager.certmaps.listEffectiveTags` `certificatemanager.certmaps.listTagBindings` `certificatemanager.certs.listEffectiveTags` `certificatemanager.certs.listTagBindings` `certificatemanager.dnsauthorizations.listEffectiveTags` `certificatemanager.dnsauthorizations.listTagBindings` `certificatemanager.trustconfigs.listEffectiveTags` `certificatemanager.trustconfigs.listTagBindings` `clouddeploy.deliveryPipelines.listEffectiveTags` `clouddeploy.deliveryPipelines.listTagBindings` `clouddeploy.targets.listEffectiveTags` `clouddeploy.targets.listTagBindings` `cloudkms.keyRings.listEffectiveTags` `cloudkms.keyRings.listTagBindings` `cloudsql.instances.listEffectiveTags` `cloudsql.instances.listTagBindings` `composer.environments.listEffectiveTags` `composer.environments.listTagBindings` `compute.addresses.listEffectiveTags` `compute.addresses.listTagBindings` `compute.backendBuckets.listEffectiveTags` `compute.backendBuckets.listTagBindings` `compute.backendServices.listEffectiveTags` `compute.backendServices.listTagBindings` `compute.commitments.listEffectiveTags` `compute.commitments.listTagBindings` `compute.disks.listEffectiveTags` `compute.disks.listTagBindings` `compute.externalVpnGateways.listEffectiveTags` `compute.externalVpnGateways.listTagBindings` `compute.firewallPolicies.listEffectiveTags` `compute.firewallPolicies.listTagBindings` `compute.firewalls.listEffectiveTags` `compute.firewalls.listTagBindings` `compute.forwardingRules.listEffectiveTags` `compute.forwardingRules.listTagBindings` `compute.futureReservations.listEffectiveTags` `compute.futureReservations.listTagBindings` `compute.globalAddresses.listEffectiveTags` `compute.globalAddresses.listTagBindings` `compute.globalForwardingRules.listEffectiveTags` `compute.globalForwardingRules.listTagBindings` `compute.globalNetworkEndpointGroups.listEffectiveTags` `compute.globalNetworkEndpointGroups.listTagBindings` `compute.healthChecks.listEffectiveTags` `compute.healthChecks.listTagBindings` `compute.httpHealthChecks.listEffectiveTags` `compute.httpHealthChecks.listTagBindings` `compute.httpsHealthChecks.listEffectiveTags` `compute.httpsHealthChecks.listTagBindings` `compute.images.listEffectiveTags` `compute.images.listTagBindings` `compute.instanceGroupManagers.listEffectiveTags` `compute.instanceGroupManagers.listTagBindings` `compute.instanceGroups.listEffectiveTags` `compute.instanceGroups.listTagBindings` `compute.instances.listEffectiveTags` `compute.instances.listTagBindings` `compute.instantSnapshots.listEffectiveTags` `compute.instantSnapshots.listTagBindings` `compute.interconnectAttachments.listEffectiveTags` `compute.interconnectAttachments.listTagBindings` `compute.interconnects.listEffectiveTags` `compute.interconnects.listTagBindings` `compute.licenses.listEffectiveTags` `compute.licenses.listTagBindings` `compute.machineImages.listEffectiveTags` `compute.machineImages.listTagBindings` `compute.networkAttachments.listEffectiveTags` `compute.networkAttachments.listTagBindings` `compute.networkEdgeSecurityServices.listEffectiveTags` `compute.networkEdgeSecurityServices.listTagBindings` `compute.networkEndpointGroups.listEffectiveTags` `compute.networkEndpointGroups.listTagBindings` `compute.networks.listEffectiveTags` `compute.networks.listTagBindings` `compute.packetMirrorings.listEffectiveTags` `compute.packetMirrorings.listTagBindings` `compute.publicDelegatedPrefixes.listEffectiveTags` `compute.publicDelegatedPrefixes.listTagBindings` `compute.regionBackendBuckets.listEffectiveTags` `compute.regionBackendBuckets.listTagBindings` `compute.regionBackendServices.listEffectiveTags` `compute.regionBackendServices.listTagBindings` `compute.regionFirewallPolicies.listEffectiveTags` `compute.regionFirewallPolicies.listTagBindings` `compute.regionHealthChecks.listEffectiveTags` `compute.regionHealthChecks.listTagBindings` `compute.regionNetworkEndpointGroups.listEffectiveTags` `compute.regionNetworkEndpointGroups.listTagBindings` `compute.regionSecurityPolicies.listEffectiveTags` `compute.regionSecurityPolicies.listTagBindings` `compute.regionSslCertificates.listEffectiveTags` `compute.regionSslCertificates.listTagBindings` `compute.regionSslPolicies.listEffectiveTags` `compute.regionSslPolicies.listTagBindings` `compute.regionTargetHttpProxies.listEffectiveTags` `compute.regionTargetHttpProxies.listTagBindings` `compute.regionTargetHttpsProxies.listEffectiveTags` `compute.regionTargetHttpsProxies.listTagBindings` `compute.regionTargetTcpProxies.listEffectiveTags` `compute.regionTargetTcpProxies.listTagBindings` `compute.regionUrlMaps.listEffectiveTags` `compute.regionUrlMaps.listTagBindings` `compute.reservations.listEffectiveTags` `compute.reservations.listTagBindings` `compute.routers.listEffectiveTags` `compute.routers.listTagBindings` `compute.routes.listEffectiveTags` `compute.routes.listTagBindings` `compute.securityPolicies.listEffectiveTags` `compute.securityPolicies.listTagBindings` `compute.serviceAttachments.listEffectiveTags` `compute.serviceAttachments.listTagBindings` `compute.snapshots.listEffectiveTags` `compute.snapshots.listTagBindings` `compute.sslCertificates.listEffectiveTags` `compute.sslCertificates.listTagBindings` `compute.sslPolicies.listEffectiveTags` `compute.sslPolicies.listTagBindings` `compute.storagePools.listEffectiveTags` `compute.storagePools.listTagBindings` `compute.subnetworks.listEffectiveTags` `compute.subnetworks.listTagBindings` `compute.targetGrpcProxies.listEffectiveTags` `compute.targetGrpcProxies.listTagBindings` `compute.targetHttpProxies.listEffectiveTags` `compute.targetHttpProxies.listTagBindings` `compute.targetHttpsProxies.listEffectiveTags` `compute.targetHttpsProxies.listTagBindings` `compute.targetInstances.listEffectiveTags` `compute.targetInstances.listTagBindings` `compute.targetPools.listEffectiveTags` `compute.targetPools.listTagBindings` `compute.targetSslProxies.listEffectiveTags` `compute.targetSslProxies.listTagBindings` `compute.targetTcpProxies.listEffectiveTags` `compute.targetTcpProxies.listTagBindings` `compute.targetVpnGateways.listEffectiveTags` `compute.targetVpnGateways.listTagBindings` `compute.urlMaps.listEffectiveTags` `compute.urlMaps.listTagBindings` `compute.vpnGateways.listEffectiveTags` `compute.vpnGateways.listTagBindings` `compute.vpnTunnels.listEffectiveTags` `compute.vpnTunnels.listTagBindings` `config.deploymentgroups.listEffectiveTags` `config.deploymentgroups.listTagBindings` `config.deployments.listEffectiveTags` `config.deployments.listTagBindings` `config.previews.listEffectiveTags` `config.previews.listTagBindings` `container.clusters.listEffectiveTags` `container.clusters.listTagBindings` `dataflow.jobs.listEffectiveTags` `dataflow.jobs.listTagBindings` `dataflow.snapshots.listEffectiveTags` `dataflow.snapshots.listTagBindings` `dataform.repositories.listEffectiveTags` `dataform.repositories.listTagBindings` `datafusion.instances.listEffectiveTags` `datafusion.instances.listTagBindings` `datamigration.connectionprofiles.listEffectiveTags` `datamigration.connectionprofiles.listTagBindings` `datamigration.migrationjobs.listEffectiveTags` `datamigration.migrationjobs.listTagBindings` `datamigration.privateconnections.listEffectiveTags` `datamigration.privateconnections.listTagBindings` `dataplex.entryGroups.listEffectiveTags` `dataplex.entryGroups.listTagBindings` `dataplex.entryTypes.listEffectiveTags` `dataplex.entryTypes.listTagBindings` `dataplex.governanceRules.listEffectiveTags` `dataplex.governanceRules.listTagBindings` `datastore.databases.listEffectiveTags` `datastore.databases.listTagBindings` `datastream.connectionProfiles.listEffectiveTags` `datastream.connectionProfiles.listTagBindings` `datastream.privateConnections.listEffectiveTags` `datastream.privateConnections.listTagBindings` `datastream.streams.listEffectiveTags` `datastream.streams.listTagBindings` `developerconnect.connections.listEffectiveTags` `developerconnect.connections.listTagBindings` `dns.policies.listEffectiveTags` `dns.policies.listTagBindings` `domains.registrations.listEffectiveTags` `domains.registrations.listTagBindings` `eventarc.channelConnections.listEffectiveTags` `eventarc.channelConnections.listTagBindings` `eventarc.channels.listEffectiveTags` `eventarc.channels.listTagBindings` `eventarc.triggers.listEffectiveTags` `eventarc.triggers.listTagBindings` `file.backups.listEffectiveTags` `file.backups.listTagBindings` `file.instances.listEffectiveTags` `file.instances.listTagBindings` `file.snapshots.listEffectiveTags` `file.snapshots.listTagBindings` `financialservices.v1instances.listEffectiveTags` `financialservices.v1instances.listTagBindings` `firebaseapphosting.backends.listEffectiveTags` `firebaseapphosting.backends.listTagBindings` `firebasedataconnect.services.listEffectiveTags` `firebasedataconnect.services.listTagBindings` `gdchardwaremanagement.hardware.listEffectiveTags` `gdchardwaremanagement.hardware.listTagBindings` `gdchardwaremanagement.orders.listEffectiveTags` `gdchardwaremanagement.orders.listTagBindings` `gdchardwaremanagement.sites.listEffectiveTags` `gdchardwaremanagement.sites.listTagBindings` `gdchardwaremanagement.zoneOperations.listEffectiveTags` `gdchardwaremanagement.zoneOperations.listTagBindings` `gdchardwaremanagement.zones.listEffectiveTags` `gdchardwaremanagement.zones.listTagBindings` `gkemulticloud.attachedClusters.listEffectiveTags` `gkemulticloud.attachedClusters.listTagBindings` `gkeonprem.bareMetalAdminClusters.listEffectiveTags` `gkeonprem.bareMetalAdminClusters.listTagBindings` `gkeonprem.bareMetalClusters.listEffectiveTags` `gkeonprem.bareMetalClusters.listTagBindings` `gkeonprem.vmwareAdminClusters.listEffectiveTags` `gkeonprem.vmwareAdminClusters.listTagBindings` `gkeonprem.vmwareClusters.listEffectiveTags` `gkeonprem.vmwareClusters.listTagBindings` `iam.roles.listEffectiveTags` `iam.roles.listTagBindings` `iam.serviceAccounts.listEffectiveTags` `iam.serviceAccounts.listTagBindings` `krmapihosting.krmApiHosts.listEffectiveTags` `krmapihosting.krmApiHosts.listTagBindings` `livestream.channels.listEffectiveTags` `livestream.channels.listTagBindings` `livestream.inputs.listEffectiveTags` `livestream.inputs.listTagBindings` `livestream.pools.listEffectiveTags` `livestream.pools.listTagBindings` `logging.buckets.listEffectiveTags` `logging.buckets.listTagBindings` `looker.instances.listEffectiveTags` `looker.instances.listTagBindings` `managedidentities.domains.listEffectiveTags` `managedidentities.domains.listTagBindings` `memcache.instances.listEffectiveTags` `memcache.instances.listTagBindings` `memorystore.backupCollections.listEffectiveTags` `memorystore.backupCollections.listTagBindings` `memorystore.instances.listEffectiveTags` `memorystore.instances.listTagBindings` `metastore.federations.listEffectiveTags` `metastore.federations.listTagBindings` `metastore.services.listEffectiveTags` `metastore.services.listTagBindings` `monitoring.alertPolicies.listEffectiveTags` `monitoring.alertPolicies.listTagBindings` `monitoring.dashboards.listEffectiveTags` `monitoring.dashboards.listTagBindings` `networkconnectivity.hubs.listEffectiveTags` `networkconnectivity.hubs.listTagBindings` `networkconnectivity.spokes.listEffectiveTags` `networkconnectivity.spokes.listTagBindings` `networkmanagement.connectivitytests.listEffectiveTags` `networkmanagement.connectivitytests.listTagBindings` `networksecurity.authorizationPolicies.listEffectiveTags` `networksecurity.authorizationPolicies.listTagBindings` `networksecurity.clientTlsPolicies.listEffectiveTags` `networksecurity.clientTlsPolicies.listTagBindings` `networksecurity.serverTlsPolicies.listEffectiveTags` `networksecurity.serverTlsPolicies.listTagBindings` `networkservices.endpointConfigSelectors.listEffectiveTags` `networkservices.endpointConfigSelectors.listTagBindings` `networkservices.gateways.listEffectiveTags` `networkservices.gateways.listTagBindings` `networkservices.httpFilters.listEffectiveTags` `networkservices.httpFilters.listTagBindings` `networkservices.meshes.listEffectiveTags` `networkservices.meshes.listTagBindings` `notebooks.instances.listEffectiveTags` `notebooks.instances.listTagBindings` `oracledatabase.autonomousDatabases.listEffectiveTags` `oracledatabase.autonomousDatabases.listTagBindings` `oracledatabase.cloudExadataInfrastructures.listEffectiveTags` `oracledatabase.cloudExadataInfrastructures.listTagBindings` `oracledatabase.cloudVmClusters.listEffectiveTags` `oracledatabase.cloudVmClusters.listTagBindings` `oracledatabase.dbSystems.listEffectiveTags` `oracledatabase.dbSystems.listTagBindings` `oracledatabase.entitlements.listEffectiveTags` `oracledatabase.entitlements.listTagBindings` `parametermanager.parameters.listEffectiveTags` `parametermanager.parameters.listTagBindings` `privateca.caPools.listEffectiveTags` `privateca.caPools.listTagBindings` `privateca.certificateTemplates.listEffectiveTags` `privateca.certificateTemplates.listTagBindings` `pubsub.snapshots.listEffectiveTags` `pubsub.snapshots.listTagBindings` `pubsub.subscriptions.listEffectiveTags` `pubsub.subscriptions.listTagBindings` `pubsub.topics.listEffectiveTags` `pubsub.topics.listTagBindings` `recaptchaenterprise.keys.listEffectiveTags` `recaptchaenterprise.keys.listTagBindings` `redis.clusters.listEffectiveTags` `redis.clusters.listTagBindings` `redis.instances.listEffectiveTags` `redis.instances.listTagBindings` `resourcemanager.hierarchyNodes.listEffectiveTags` `resourcemanager.hierarchyNodes.listTagBindings` `resourcemanager.tagHolds.list` `resourcemanager.tagKeys.get` `resourcemanager.tagKeys.list` `resourcemanager.tagValues.get` `resourcemanager.tagValues.list` `run.jobs.listEffectiveTags` `run.jobs.listTagBindings` `run.services.listEffectiveTags` `run.services.listTagBindings` `secretmanager.secrets.listEffectiveTags` `secretmanager.secrets.listTagBindings` `spanner.instances.listEffectiveTags` `spanner.instances.listTagBindings` `storage.buckets.listEffectiveTags` `storage.buckets.listTagBindings` `tpu.nodes.listEffectiveTags` `tpu.nodes.listTagBindings` `transcoder.jobTemplates.listEffectiveTags` `transcoder.jobTemplates.listTagBindings` `transcoder.jobs.listEffectiveTags` `transcoder.jobs.listTagBindings` `videostitcher.cdnKeys.listEffectiveTags` `videostitcher.cdnKeys.listTagBindings` `videostitcher.liveConfigs.listEffectiveTags` `videostitcher.liveConfigs.listTagBindings` `videostitcher.slates.listEffectiveTags` `videostitcher.slates.listTagBindings` `videostitcher.vodConfigs.listEffectiveTags` `videostitcher.vodConfigs.listTagBindings` `vmmigration.groups.listEffectiveTags` `vmmigration.groups.listTagBindings` `vmmigration.sources.listEffectiveTags` `vmmigration.sources.listTagBindings` `vmwareengine.networkPeerings.listEffectiveTags` `vmwareengine.networkPeerings.listTagBindings` `vmwareengine.networkPolicies.listEffectiveTags` `vmwareengine.networkPolicies.listTagBindings` `vmwareengine.privateClouds.listEffectiveTags` `vmwareengine.privateClouds.listTagBindings` `vmwareengine.privateConnections.listEffectiveTags` `vmwareengine.privateConnections.listTagBindings` `vmwareengine.vmwareEngineNetworks.listEffectiveTags` `vmwareengine.vmwareEngineNetworks.listTagBindings` `workflows.workflows.listEffectiveTags` `workflows.workflows.listTagBindings` `workstations.workstationClusters.listEffectiveTags` `workstations.workstationClusters.listTagBindings` |
| #### Resource Manager Viewer (`roles/resourcemanager.viewer`) Access to view Resource Manager resources | `resourcemanager.boundaries.get` `resourcemanager.boundaries.list` `resourcemanager.boundaryConfigs.get` `resourcemanager.capabilities.get` `resourcemanager.capabilityConfigs.get` `resourcemanager.capabilityConfigs.list` `resourcemanager.folders.get` `resourcemanager.folders.list` `resourcemanager.organizations.get` `resourcemanager.projects.get` `resourcemanager.projects.list` `resourcemanager.tagHolds.list` `resourcemanager.tagKeys.get` `resourcemanager.tagKeys.list` `resourcemanager.tagValues.get` `resourcemanager.tagValues.list` |
| #### Folder Creator (`roles/resourcemanager.folderCreator`) Provides permissions needed to browse the hierarchy and create folders. Lowest-level resources where you can grant this role: - Folder | `essentialcontacts.contacts.get` `essentialcontacts.contacts.list` `orgpolicy.constraints.list` `orgpolicy.policies.list` `orgpolicy.policy.get` `resourcemanager.capabilities.get` `resourcemanager.folders.create` `resourcemanager.folders.get` `resourcemanager.folders.list` `resourcemanager.projects.get` `resourcemanager.projects.list` |
| #### Folder Editor (`roles/resourcemanager.folderEditor`) Provides permission to modify folders as well as to view a folder's allow policy. Lowest-level resources where you can grant this role: - Folder | `essentialcontacts.contacts.get` `essentialcontacts.contacts.list` `orgpolicy.constraints.list` `orgpolicy.policies.list` `orgpolicy.policy.get` `resourcemanager.capabilities.*` - `resourcemanager.capabilities.get` - `resourcemanager.capabilities.update` `resourcemanager.folders.delete` `resourcemanager.folders.get` `resourcemanager.folders.getIamPolicy` `resourcemanager.folders.list` `resourcemanager.folders.searchPolicyBindings` `resourcemanager.folders.undelete` `resourcemanager.folders.update` `resourcemanager.projects.get` `resourcemanager.projects.list` |
| #### Folder IAM Admin (`roles/resourcemanager.folderIamAdmin`) Provides permissions to administer allow policies on folders. Lowest-level resources where you can grant this role: - Folder | `iam.policybindings.*` - `iam.policybindings.get` - `iam.policybindings.list` `resourcemanager.folders.createPolicyBinding` `resourcemanager.folders.deletePolicyBinding` `resourcemanager.folders.get` `resourcemanager.folders.getIamPolicy` `resourcemanager.folders.searchPolicyBindings` `resourcemanager.folders.setIamPolicy` `resourcemanager.folders.updatePolicyBinding` |
| #### Folder Mover (`roles/resourcemanager.folderMover`) Provides permission to move projects and folders into and out of a parent organization or folder. Lowest-level resources where you can grant this role: - Folder | `resourcemanager.folders.move` `resourcemanager.projects.move` |
| #### Folder Viewer (`roles/resourcemanager.folderViewer`) Provides permission to get a folder and list the folders and projects below a resource. Lowest-level resources where you can grant this role: - Folder | `essentialcontacts.contacts.get` `essentialcontacts.contacts.list` `orgpolicy.constraints.list` `orgpolicy.policies.list` `orgpolicy.policy.get` `resourcemanager.capabilities.get` `resourcemanager.folders.get` `resourcemanager.folders.list` `resourcemanager.projects.get` `resourcemanager.projects.list` |
| #### Project Lien Modifier (`roles/resourcemanager.lienModifier`) Provides access to modify Liens on projects. Lowest-level resources where you can grant this role: - Project | `resourcemanager.projects.updateLiens` |
| #### Organization Viewer (`roles/resourcemanager.organizationViewer`) Provides access to view an organization. Lowest-level resources where you can grant this role: - Organization | `resourcemanager.organizations.get` |
| #### Project Creator (`roles/resourcemanager.projectCreator`) Provides access to create new projects. Once a user creates a project, they're automatically granted the owner role for that project. Lowest-level resources where you can grant this role: - Folder | `resourcemanager.organizations.get` `resourcemanager.projects.create` |
| #### Project Deleter (`roles/resourcemanager.projectDeleter`) Provides access to delete Google Cloud projects. Lowest-level resources where you can grant this role: - Project | `resourcemanager.projects.delete` |
| #### Tag Hold Administrator (`roles/resourcemanager.tagHoldAdmin`) Access to create, delete and list TagHolds under a TagValue | `resourcemanager.tagHolds.*` - `resourcemanager.tagHolds.create` - `resourcemanager.tagHolds.delete` - `resourcemanager.tagHolds.list` |

## Resource Manager permissions

| Permission | Included in roles |
|---|---|
| #### `resourcemanager.boundaries.associateToCapabilityConfig` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) |
| #### `resourcemanager.boundaries.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) |
| #### `resourcemanager.boundaries.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) |
| #### `resourcemanager.boundaries.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Resource Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.viewer) (`roles/resourcemanager.viewer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) |
| #### `resourcemanager.boundaries.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Resource Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.viewer) (`roles/resourcemanager.viewer`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) |
| #### `resourcemanager.boundaries.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) |
| #### `resourcemanager.boundaryConfigs.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Resource Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.viewer) (`roles/resourcemanager.viewer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) |
| #### `resourcemanager.boundaryConfigs.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) |
| #### `resourcemanager.capabilities.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Organization Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationAdmin) (`roles/resourcemanager.organizationAdmin`) [Resource Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.viewer) (`roles/resourcemanager.viewer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Folder Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderCreator) (`roles/resourcemanager.folderCreator`) [Folder Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderEditor) (`roles/resourcemanager.folderEditor`) [Folder Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderViewer) (`roles/resourcemanager.folderViewer`) |
| #### `resourcemanager.capabilities.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Organization Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationAdmin) (`roles/resourcemanager.organizationAdmin`) [Folder Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderEditor) (`roles/resourcemanager.folderEditor`) |
| #### `resourcemanager.capabilityConfigs.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) |
| #### `resourcemanager.capabilityConfigs.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) |
| #### `resourcemanager.capabilityConfigs.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Resource Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.viewer) (`roles/resourcemanager.viewer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) |
| #### `resourcemanager.capabilityConfigs.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Resource Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.viewer) (`roles/resourcemanager.viewer`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) |
| #### `resourcemanager.capabilityConfigs.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) |
| #### `resourcemanager.folders.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Assured Workloads Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.admin) (`roles/assuredworkloads.admin`) [Assured Workloads Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.editor) (`roles/assuredworkloads.editor`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Folder Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderCreator) (`roles/resourcemanager.folderCreator`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) |
| #### `resourcemanager.folders.createPolicyBinding` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Organization Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationAdmin) (`roles/resourcemanager.organizationAdmin`) [Folder IAM Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderIamAdmin) (`roles/resourcemanager.folderIamAdmin`) |
| #### `resourcemanager.folders.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Folder Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderEditor) (`roles/resourcemanager.folderEditor`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) |
| #### `resourcemanager.folders.deletePolicyBinding` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Organization Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationAdmin) (`roles/resourcemanager.organizationAdmin`) [Folder IAM Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderIamAdmin) (`roles/resourcemanager.folderIamAdmin`) |
| #### `resourcemanager.folders.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Assured Workloads Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.admin) (`roles/assuredworkloads.admin`) [Assured Workloads Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.editor) (`roles/assuredworkloads.editor`) [Assured Workloads Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.viewer) (`roles/assuredworkloads.viewer`) [Audit Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.admin) (`roles/auditmanager.admin`) [Capacityplanner Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/capacityplanner.md.txt#capacityplanner.admin) (`roles/capacityplanner.admin`) [Capacity Planner Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/capacityplanner.md.txt#capacityplanner.viewer) (`roles/capacityplanner.viewer`) [Catalog Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprivatecatalog.md.txt#cloudprivatecatalogproducer.admin) (`roles/cloudprivatecatalogproducer.admin`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Organization Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationAdmin) (`roles/resourcemanager.organizationAdmin`) [Resource Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.viewer) (`roles/resourcemanager.viewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [Service Management Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/servicemanagement.md.txt#servicemanagement.admin) (`roles/servicemanagement.admin`) [App Management Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/apphub.md.txt#apphub.appManagementViewer) (`roles/apphub.appManagementViewer`) [Assured Workloads Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.reader) (`roles/assuredworkloads.reader`) [Audit Manager Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.auditor) (`roles/auditmanager.auditor`) [Browser](https://docs.cloud.google.com/iam/docs/roles-permissions/browser.md.txt#browser) (`roles/browser`) [Capacity Planner](https://docs.cloud.google.com/iam/docs/roles-permissions/capacityplanner.md.txt#capacityplanner.planner) (`roles/capacityplanner.planner`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Catalog Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprivatecatalog.md.txt#cloudprivatecatalogproducer.manager) (`roles/cloudprivatecatalogproducer.manager`) [Catalog Org Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprivatecatalog.md.txt#cloudprivatecatalogproducer.orgAdmin) (`roles/cloudprivatecatalogproducer.orgAdmin`) [Folder level Compute VM extension policies admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.folderVmExtensionPolicyAdmin) (`roles/compute.folderVmExtensionPolicyAdmin`) [Folder level Compute VM extension policies viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.folderVmExtensionPolicyViewer) (`roles/compute.folderVmExtensionPolicyViewer`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Model Armor Floor Setting Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.floorSettingsAdmin) (`roles/modelarmor.floorSettingsAdmin`) [Model Armor Floor Setting Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.floorSettingsViewer) (`roles/modelarmor.floorSettingsViewer`) [Folder Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderCreator) (`roles/resourcemanager.folderCreator`) [Folder Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderEditor) (`roles/resourcemanager.folderEditor`) [Folder IAM Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderIamAdmin) (`roles/resourcemanager.folderIamAdmin`) [Folder Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderViewer) (`roles/resourcemanager.folderViewer`) [Security Center Admin Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminEditor) (`roles/securitycenter.adminEditor`) [Security Center Admin Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminViewer) (`roles/securitycenter.adminViewer`) [Security Center Assets Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.assetsViewer) (`roles/securitycenter.assetsViewer`) [Security Center BigQuery Exports Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.bigQueryExportsEditor) (`roles/securitycenter.bigQueryExportsEditor`) [Security Center BigQuery Exports Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.bigQueryExportsViewer) (`roles/securitycenter.bigQueryExportsViewer`) [Security Center Findings Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.findingsEditor) (`roles/securitycenter.findingsEditor`) [Security Center Findings Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.findingsViewer) (`roles/securitycenter.findingsViewer`) [Security Center Settings Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.settingsAdmin) (`roles/securitycenter.settingsAdmin`) [Security Center Settings Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.settingsEditor) (`roles/securitycenter.settingsEditor`) [Security Center Settings Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.settingsViewer) (`roles/securitycenter.settingsViewer`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Audit Manager Auditing Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.serviceAgent) (`roles/auditmanager.serviceAgent`) - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud Security Compliance Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.serviceAgent) (`roles/cloudsecuritycompliance.serviceAgent`) - [Privileged Access Manager Folder Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/privilegedaccessmanager.md.txt#privilegedaccessmanager.folderServiceAgent) (`roles/privilegedaccessmanager.folderServiceAgent`) - [Privileged Access Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/privilegedaccessmanager.md.txt#privilegedaccessmanager.serviceAgent) (`roles/privilegedaccessmanager.serviceAgent`) - [Risk Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/riskmanager.md.txt#riskmanager.serviceAgent) (`roles/riskmanager.serviceAgent`) - [Security Center Automation Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.automationServiceAgent) (`roles/securitycenter.automationServiceAgent`) - [Security Center Control Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.controlServiceAgent) (`roles/securitycenter.controlServiceAgent`) - [Security Center Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.serviceAgent) (`roles/securitycenter.serviceAgent`) |
| #### `resourcemanager.folders.getIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Organization Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationAdmin) (`roles/resourcemanager.organizationAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Folder Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderEditor) (`roles/resourcemanager.folderEditor`) [Folder IAM Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderIamAdmin) (`roles/resourcemanager.folderIamAdmin`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Audit Manager Auditing Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.serviceAgent) (`roles/auditmanager.serviceAgent`) - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud Security Compliance Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.serviceAgent) (`roles/cloudsecuritycompliance.serviceAgent`) - [DSPM Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dspm.md.txt#dspm.serviceAgent) (`roles/dspm.serviceAgent`) - [Privileged Access Manager Folder Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/privilegedaccessmanager.md.txt#privilegedaccessmanager.folderServiceAgent) (`roles/privilegedaccessmanager.folderServiceAgent`) - [Privileged Access Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/privilegedaccessmanager.md.txt#privilegedaccessmanager.serviceAgent) (`roles/privilegedaccessmanager.serviceAgent`) |
| #### `resourcemanager.folders.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Assured Workloads Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.admin) (`roles/assuredworkloads.admin`) [Assured Workloads Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.editor) (`roles/assuredworkloads.editor`) [Assured Workloads Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.viewer) (`roles/assuredworkloads.viewer`) [Audit Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.admin) (`roles/auditmanager.admin`) [Catalog Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprivatecatalog.md.txt#cloudprivatecatalogproducer.admin) (`roles/cloudprivatecatalogproducer.admin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Organization Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationAdmin) (`roles/resourcemanager.organizationAdmin`) [Resource Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.viewer) (`roles/resourcemanager.viewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [Service Management Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/servicemanagement.md.txt#servicemanagement.admin) (`roles/servicemanagement.admin`) [App Management Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/apphub.md.txt#apphub.appManagementViewer) (`roles/apphub.appManagementViewer`) [Assured Workloads Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.reader) (`roles/assuredworkloads.reader`) [Audit Manager Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.auditor) (`roles/auditmanager.auditor`) [Browser](https://docs.cloud.google.com/iam/docs/roles-permissions/browser.md.txt#browser) (`roles/browser`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Catalog Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprivatecatalog.md.txt#cloudprivatecatalogproducer.manager) (`roles/cloudprivatecatalogproducer.manager`) [Catalog Org Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprivatecatalog.md.txt#cloudprivatecatalogproducer.orgAdmin) (`roles/cloudprivatecatalogproducer.orgAdmin`) [Folder level Compute VM extension policies admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.folderVmExtensionPolicyAdmin) (`roles/compute.folderVmExtensionPolicyAdmin`) [Folder level Compute VM extension policies viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.folderVmExtensionPolicyViewer) (`roles/compute.folderVmExtensionPolicyViewer`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Model Armor Floor Setting Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.floorSettingsAdmin) (`roles/modelarmor.floorSettingsAdmin`) [Model Armor Floor Setting Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.floorSettingsViewer) (`roles/modelarmor.floorSettingsViewer`) [Folder Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderCreator) (`roles/resourcemanager.folderCreator`) [Folder Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderEditor) (`roles/resourcemanager.folderEditor`) [Folder Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderViewer) (`roles/resourcemanager.folderViewer`) [Security Center Admin Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminEditor) (`roles/securitycenter.adminEditor`) [Security Center Admin Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminViewer) (`roles/securitycenter.adminViewer`) [Security Center BigQuery Exports Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.bigQueryExportsEditor) (`roles/securitycenter.bigQueryExportsEditor`) [Security Center BigQuery Exports Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.bigQueryExportsViewer) (`roles/securitycenter.bigQueryExportsViewer`) [Security Center Settings Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.settingsAdmin) (`roles/securitycenter.settingsAdmin`) [Security Center Settings Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.settingsEditor) (`roles/securitycenter.settingsEditor`) [Security Center Settings Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.settingsViewer) (`roles/securitycenter.settingsViewer`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Audit Manager Auditing Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.serviceAgent) (`roles/auditmanager.serviceAgent`) - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud Security Compliance Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.serviceAgent) (`roles/cloudsecuritycompliance.serviceAgent`) - [Risk Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/riskmanager.md.txt#riskmanager.serviceAgent) (`roles/riskmanager.serviceAgent`) - [Security Center Automation Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.automationServiceAgent) (`roles/securitycenter.automationServiceAgent`) - [Security Center Control Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.controlServiceAgent) (`roles/securitycenter.controlServiceAgent`) - [Security Center Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.serviceAgent) (`roles/securitycenter.serviceAgent`) |
| #### `resourcemanager.folders.move` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Folder Mover](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderMover) (`roles/resourcemanager.folderMover`) |
| #### `resourcemanager.folders.searchPolicyBindings` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Organization Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationAdmin) (`roles/resourcemanager.organizationAdmin`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Folder Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderEditor) (`roles/resourcemanager.folderEditor`) [Folder IAM Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderIamAdmin) (`roles/resourcemanager.folderIamAdmin`) |
| #### `resourcemanager.folders.setIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Organization Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationAdmin) (`roles/resourcemanager.organizationAdmin`) [Folder IAM Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderIamAdmin) (`roles/resourcemanager.folderIamAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Privileged Access Manager Folder Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/privilegedaccessmanager.md.txt#privilegedaccessmanager.folderServiceAgent) (`roles/privilegedaccessmanager.folderServiceAgent`) - [Privileged Access Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/privilegedaccessmanager.md.txt#privilegedaccessmanager.serviceAgent) (`roles/privilegedaccessmanager.serviceAgent`) |
| #### `resourcemanager.folders.undelete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Folder Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderEditor) (`roles/resourcemanager.folderEditor`) |
| #### `resourcemanager.folders.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Folder Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderEditor) (`roles/resourcemanager.folderEditor`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) |
| #### `resourcemanager.folders.updatePolicyBinding` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Organization Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationAdmin) (`roles/resourcemanager.organizationAdmin`) [Folder IAM Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderIamAdmin) (`roles/resourcemanager.folderIamAdmin`) |
| #### `resourcemanager.hierarchyNodes.createTagBinding` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [DSPM Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dspm.md.txt#dspm.serviceAgent) (`roles/dspm.serviceAgent`) |
| #### `resourcemanager.hierarchyNodes.deleteTagBinding` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [DSPM Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dspm.md.txt#dspm.serviceAgent) (`roles/dspm.serviceAgent`) |
| #### `resourcemanager.hierarchyNodes.listEffectiveTags` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Firebase Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.admin) (`roles/firebase.admin`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [Tag Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagViewer) (`roles/resourcemanager.tagViewer`) [Storage Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/storage.md.txt#storage.admin) (`roles/storage.admin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Firebase Develop Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.developAdmin) (`roles/firebase.developAdmin`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Audit Manager Auditing Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.serviceAgent) (`roles/auditmanager.serviceAgent`) - [Cloud Security Compliance Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.serviceAgent) (`roles/cloudsecuritycompliance.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [Datapipelines Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datapipelines.md.txt#datapipelines.serviceAgent) (`roles/datapipelines.serviceAgent`) - [Cloud Dataplex Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.serviceAgent) (`roles/dataplex.serviceAgent`) - [Dataproc Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.serviceAgent) (`roles/dataproc.serviceAgent`) - [DLP API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.serviceAgent) (`roles/dlp.serviceAgent`) - [DSPM Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dspm.md.txt#dspm.serviceAgent) (`roles/dspm.serviceAgent`) - [AI Platform Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/ml.md.txt#ml.serviceAgent) (`roles/ml.serviceAgent`) - [Visual Inspection AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/visualinspection.md.txt#visualinspection.serviceAgent) (`roles/visualinspection.serviceAgent`) |
| #### `resourcemanager.hierarchyNodes.listTagBindings` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [Tag Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagViewer) (`roles/resourcemanager.tagViewer`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Audit Manager Auditing Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.serviceAgent) (`roles/auditmanager.serviceAgent`) - [Cloud Security Compliance Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.serviceAgent) (`roles/cloudsecuritycompliance.serviceAgent`) - [DSPM Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dspm.md.txt#dspm.serviceAgent) (`roles/dspm.serviceAgent`) |
| #### `resourcemanager.organizations.createPolicyBinding` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Organization Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationAdmin) (`roles/resourcemanager.organizationAdmin`) |
| #### `resourcemanager.organizations.deletePolicyBinding` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Organization Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationAdmin) (`roles/resourcemanager.organizationAdmin`) |
| #### `resourcemanager.organizations.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Access Context Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.admin) (`roles/accesscontextmanager.admin`) [Access Context Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.editor) (`roles/accesscontextmanager.editor`) [Access Context Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.policyAdmin) (`roles/accesscontextmanager.policyAdmin`) [Access Context Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.viewer) (`roles/accesscontextmanager.viewer`) [Advisory Notifications Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/advisorynotifications.md.txt#advisorynotifications.admin) (`roles/advisorynotifications.admin`) [Advisory Notifications Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/advisorynotifications.md.txt#advisorynotifications.viewer) (`roles/advisorynotifications.viewer`) [Assured OSS Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredoss.md.txt#assuredoss.admin) (`roles/assuredoss.admin`) [Assured Workloads Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.admin) (`roles/assuredworkloads.admin`) [Assured Workloads Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.editor) (`roles/assuredworkloads.editor`) [Assured Workloads Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.viewer) (`roles/assuredworkloads.viewer`) [Audit Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.admin) (`roles/auditmanager.admin`) [Access Transparency Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/axt.md.txt#axt.admin) (`roles/axt.admin`) [Cloud BeyondCorp Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/beyondcorp.md.txt#beyondcorp.editor) (`roles/beyondcorp.editor`) [Cloud BeyondCorp Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/beyondcorp.md.txt#beyondcorp.viewer) (`roles/beyondcorp.viewer`) [Capacityplanner Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/capacityplanner.md.txt#capacityplanner.admin) (`roles/capacityplanner.admin`) [Capacity Planner Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/capacityplanner.md.txt#capacityplanner.viewer) (`roles/capacityplanner.viewer`) [Chronicle API Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.admin) (`roles/chronicle.admin`) [Catalog Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprivatecatalog.md.txt#cloudprivatecatalogproducer.admin) (`roles/cloudprivatecatalogproducer.admin`) [Support Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsupport.md.txt#cloudsupport.admin) (`roles/cloudsupport.admin`) [Commerce Business Enablement Configuration Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/commercebusinessenablement.md.txt#commercebusinessenablement.admin) (`roles/commercebusinessenablement.admin`) [Commerce Business Enablement Configuration Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/commercebusinessenablement.md.txt#commercebusinessenablement.viewer) (`roles/commercebusinessenablement.viewer`) [Data Security Posture Management Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dspm.md.txt#dspm.admin) (`roles/dspm.admin`) [Data Security Posture Management Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dspm.md.txt#dspm.viewer) (`roles/dspm.viewer`) [Network Management Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkmanagement.md.txt#networkmanagement.admin) (`roles/networkmanagement.admin`) [Network Management Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networkmanagement.md.txt#networkmanagement.editor) (`roles/networkmanagement.editor`) [Network Management Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networkmanagement.md.txt#networkmanagement.viewer) (`roles/networkmanagement.viewer`) [OrgPolicy Simulator Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/policysimulator.md.txt#policysimulator.orgPolicyAdmin) (`roles/policysimulator.orgPolicyAdmin`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Organization Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationAdmin) (`roles/resourcemanager.organizationAdmin`) [Resource Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.viewer) (`roles/resourcemanager.viewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [Security Center Management Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.admin) (`roles/securitycentermanagement.admin`) [Security Center Management Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.editor) (`roles/securitycentermanagement.editor`) [Security Center Management Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.viewer) (`roles/securitycentermanagement.viewer`) [Security Posture Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securityposture.md.txt#securityposture.admin) (`roles/securityposture.admin`) [Security Posture Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securityposture.md.txt#securityposture.viewer) (`roles/securityposture.viewer`) [Service Management Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/servicemanagement.md.txt#servicemanagement.admin) (`roles/servicemanagement.admin`) [Access Context Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.policyEditor) (`roles/accesscontextmanager.policyEditor`) [Access Context Manager Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.policyReader) (`roles/accesscontextmanager.policyReader`) [VPC Service Controls Troubleshooter Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.vpcScTroubleshooterViewer) (`roles/accesscontextmanager.vpcScTroubleshooterViewer`) [Assured OSS Project Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredoss.md.txt#assuredoss.projectAdmin) (`roles/assuredoss.projectAdmin`) [Assured OSS Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredoss.md.txt#assuredoss.reader) (`roles/assuredoss.reader`) [Assured OSS User](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredoss.md.txt#assuredoss.user) (`roles/assuredoss.user`) [Assured Workloads Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.reader) (`roles/assuredworkloads.reader`) [Audit Manager Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.auditor) (`roles/auditmanager.auditor`) [Custom Compliance Framework Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.ccfAdmin) (`roles/auditmanager.ccfAdmin`) [Custom Compliance Framework Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.ccfViewer) (`roles/auditmanager.ccfViewer`) [Cloud BeyondCorp Subscription Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/beyondcorp.md.txt#beyondcorp.subscriptionAdmin) (`roles/beyondcorp.subscriptionAdmin`) [Cloud BeyondCorp Subscription Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/beyondcorp.md.txt#beyondcorp.subscriptionViewer) (`roles/beyondcorp.subscriptionViewer`) [Billing Account Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/billing.md.txt#billing.creator) (`roles/billing.creator`) [Browser](https://docs.cloud.google.com/iam/docs/roles-permissions/browser.md.txt#browser) (`roles/browser`) [Capacity Planner](https://docs.cloud.google.com/iam/docs/roles-permissions/capacityplanner.md.txt#capacityplanner.planner) (`roles/capacityplanner.planner`) [Chronicle SOAR Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.soarAdmin) (`roles/chronicle.soarAdmin`) [Chronicle SOAR Threat Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.soarThreatManager) (`roles/chronicle.soarThreatManager`) [Chronicle SOAR Vulnerability Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.soarVulnerabilityManager) (`roles/chronicle.soarVulnerabilityManager`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Catalog Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprivatecatalog.md.txt#cloudprivatecatalogproducer.manager) (`roles/cloudprivatecatalogproducer.manager`) [Catalog Org Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprivatecatalog.md.txt#cloudprivatecatalogproducer.orgAdmin) (`roles/cloudprivatecatalogproducer.orgAdmin`) [Support Subscription Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsupport.md.txt#cloudsupport.supportSubscriptionEditor) (`roles/cloudsupport.supportSubscriptionEditor`) [Support Subscription Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsupport.md.txt#cloudsupport.supportSubscriptionViewer) (`roles/cloudsupport.supportSubscriptionViewer`) [Commerce Business Enablement Reseller Discount Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/commercebusinessenablement.md.txt#commercebusinessenablement.resellerDiscountAdmin) (`roles/commercebusinessenablement.resellerDiscountAdmin`) [Commerce Business Enablement Reseller Discount Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/commercebusinessenablement.md.txt#commercebusinessenablement.resellerDiscountViewer) (`roles/commercebusinessenablement.resellerDiscountViewer`) [Organization level Compute VM extension policies admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.orgVmExtensionPolicyAdmin) (`roles/compute.orgVmExtensionPolicyAdmin`) [Organization level Compute VM extension policies viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.orgVmExtensionPolicyViewer) (`roles/compute.orgVmExtensionPolicyViewer`) [Compute Shared VPC Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.xpnAdmin) (`roles/compute.xpnAdmin`) [DataCatalog Migration Config Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.migrationConfigAdmin) (`roles/datacatalog.migrationConfigAdmin`) [DataCatalog Search Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.searchAdmin) (`roles/datacatalog.searchAdmin`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [Organization Role Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.organizationRoleAdmin) (`roles/iam.organizationRoleAdmin`) [Organization Role Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.organizationRoleViewer) (`roles/iam.organizationRoleViewer`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Model Armor Floor Setting Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.floorSettingsAdmin) (`roles/modelarmor.floorSettingsAdmin`) [Model Armor Floor Setting Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.floorSettingsViewer) (`roles/modelarmor.floorSettingsViewer`) [Cloud Network Insights Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkmanagement.md.txt#networkmanagement.CloudNetworkInsightsAdmin) (`roles/networkmanagement.CloudNetworkInsightsAdmin`) [Cloud Network Insights Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networkmanagement.md.txt#networkmanagement.CloudNetworkInsightsEditor) (`roles/networkmanagement.CloudNetworkInsightsEditor`) [Cloud Network Insights Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networkmanagement.md.txt#networkmanagement.CloudNetworkInsightsViewer) (`roles/networkmanagement.CloudNetworkInsightsViewer`) [Organization Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationViewer) (`roles/resourcemanager.organizationViewer`) [Project Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.projectCreator) (`roles/resourcemanager.projectCreator`) [Security Center Admin Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminEditor) (`roles/securitycenter.adminEditor`) [Security Center Admin Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminViewer) (`roles/securitycenter.adminViewer`) [Security Center Assets Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.assetsViewer) (`roles/securitycenter.assetsViewer`) [Security Center BigQuery Exports Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.bigQueryExportsEditor) (`roles/securitycenter.bigQueryExportsEditor`) [Security Center BigQuery Exports Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.bigQueryExportsViewer) (`roles/securitycenter.bigQueryExportsViewer`) [Security Center Findings Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.findingsEditor) (`roles/securitycenter.findingsEditor`) [Security Center Findings Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.findingsViewer) (`roles/securitycenter.findingsViewer`) [Security Center Settings Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.settingsAdmin) (`roles/securitycenter.settingsAdmin`) [Security Center Settings Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.settingsEditor) (`roles/securitycenter.settingsEditor`) [Security Center Settings Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.settingsViewer) (`roles/securitycenter.settingsViewer`) [Security Center Sources Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.sourcesAdmin) (`roles/securitycenter.sourcesAdmin`) [Security Center Sources Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.sourcesEditor) (`roles/securitycenter.sourcesEditor`) [Security Center Sources Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.sourcesViewer) (`roles/securitycenter.sourcesViewer`) [Security Center Management Custom Modules Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.customModulesEditor) (`roles/securitycentermanagement.customModulesEditor`) [Security Center Management Custom Modules Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.customModulesViewer) (`roles/securitycentermanagement.customModulesViewer`) [Security Center Management Custom ETD Modules Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.etdCustomModulesEditor) (`roles/securitycentermanagement.etdCustomModulesEditor`) [Security Center Management ETD Custom Modules Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.etdCustomModulesViewer) (`roles/securitycentermanagement.etdCustomModulesViewer`) [Security Center Management Settings Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.settingsEditor) (`roles/securitycentermanagement.settingsEditor`) [Security Center Management Settings Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.settingsViewer) (`roles/securitycentermanagement.settingsViewer`) [Security Center Management SHA Custom Modules Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.shaCustomModulesEditor) (`roles/securitycentermanagement.shaCustomModulesEditor`) [Security Center Management SHA Custom Modules Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.shaCustomModulesViewer) (`roles/securitycentermanagement.shaCustomModulesViewer`) [Security Posture Deployer](https://docs.cloud.google.com/iam/docs/roles-permissions/securityposture.md.txt#securityposture.postureDeployer) (`roles/securityposture.postureDeployer`) [Security Posture Deployments Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securityposture.md.txt#securityposture.postureDeploymentsViewer) (`roles/securityposture.postureDeploymentsViewer`) [Security Posture Resource Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securityposture.md.txt#securityposture.postureViewer) (`roles/securityposture.postureViewer`) [Quota Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/servicemanagement.md.txt#servicemanagement.quotaAdmin) (`roles/servicemanagement.quotaAdmin`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [App Engine flexible environment Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/appengineflex.md.txt#appengineflex.serviceAgent) (`roles/appengineflex.serviceAgent`) - [Audit Manager Auditing Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.serviceAgent) (`roles/auditmanager.serviceAgent`) - [CIEM Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/ciem.md.txt#ciem.serviceAgent) (`roles/ciem.serviceAgent`) - [Cloud Security Compliance Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.serviceAgent) (`roles/cloudsecuritycompliance.serviceAgent`) - [Firebase Service Management Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.managementServiceAgent) (`roles/firebase.managementServiceAgent`) - [Privileged Access Manager Organization Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/privilegedaccessmanager.md.txt#privilegedaccessmanager.organizationServiceAgent) (`roles/privilegedaccessmanager.organizationServiceAgent`) - [Privileged Access Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/privilegedaccessmanager.md.txt#privilegedaccessmanager.serviceAgent) (`roles/privilegedaccessmanager.serviceAgent`) - [Risk Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/riskmanager.md.txt#riskmanager.serviceAgent) (`roles/riskmanager.serviceAgent`) - [Security Center Automation Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.automationServiceAgent) (`roles/securitycenter.automationServiceAgent`) - [Security Center Control Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.controlServiceAgent) (`roles/securitycenter.controlServiceAgent`) - [Security Center Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.serviceAgent) (`roles/securitycenter.serviceAgent`) |
| #### `resourcemanager.organizations.getIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Organization Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationAdmin) (`roles/resourcemanager.organizationAdmin`) [Organization Role Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.organizationRoleAdmin) (`roles/iam.organizationRoleAdmin`) [Organization Role Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.organizationRoleViewer) (`roles/iam.organizationRoleViewer`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Audit Manager Auditing Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.serviceAgent) (`roles/auditmanager.serviceAgent`) - [Chronicle SOAR Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.soarServiceAgent) (`roles/chronicle.soarServiceAgent`) - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud Security Compliance Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.serviceAgent) (`roles/cloudsecuritycompliance.serviceAgent`) - [DSPM Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dspm.md.txt#dspm.serviceAgent) (`roles/dspm.serviceAgent`) - [Privileged Access Manager Organization Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/privilegedaccessmanager.md.txt#privilegedaccessmanager.organizationServiceAgent) (`roles/privilegedaccessmanager.organizationServiceAgent`) - [Privileged Access Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/privilegedaccessmanager.md.txt#privilegedaccessmanager.serviceAgent) (`roles/privilegedaccessmanager.serviceAgent`) |
| #### `resourcemanager.organizations.searchPolicyBindings` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Organization Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationAdmin) (`roles/resourcemanager.organizationAdmin`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) |
| #### `resourcemanager.organizations.setIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Organization Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationAdmin) (`roles/resourcemanager.organizationAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Privileged Access Manager Organization Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/privilegedaccessmanager.md.txt#privilegedaccessmanager.organizationServiceAgent) (`roles/privilegedaccessmanager.organizationServiceAgent`) - [Privileged Access Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/privilegedaccessmanager.md.txt#privilegedaccessmanager.serviceAgent) (`roles/privilegedaccessmanager.serviceAgent`) |
| #### `resourcemanager.organizations.updatePolicyBinding` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Organization Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationAdmin) (`roles/resourcemanager.organizationAdmin`) |
| #### `resourcemanager.projects.associateToCapabilityConfig` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) |
| #### `resourcemanager.projects.create` | [Assured Workloads Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.admin) (`roles/assuredworkloads.admin`) [Assured Workloads Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.editor) (`roles/assuredworkloads.editor`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Project Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.projectCreator) (`roles/resourcemanager.projectCreator`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) |
| #### `resourcemanager.projects.createBillingAssignment` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Billing Account Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/billing.md.txt#billing.admin) (`roles/billing.admin`) [Project Billing Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/billing.md.txt#billing.projectManager) (`roles/billing.projectManager`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) |
| #### `resourcemanager.projects.createPolicyBinding` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Organization Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationAdmin) (`roles/resourcemanager.organizationAdmin`) [Project IAM Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.projectIamAdmin) (`roles/resourcemanager.projectIamAdmin`) |
| #### `resourcemanager.projects.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Project Deleter](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.projectDeleter) (`roles/resourcemanager.projectDeleter`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) |
| #### `resourcemanager.projects.deleteBillingAssignment` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Billing Account Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/billing.md.txt#billing.admin) (`roles/billing.admin`) [Project Billing Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/billing.md.txt#billing.projectManager) (`roles/billing.projectManager`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) |
| #### `resourcemanager.projects.deletePolicyBinding` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Organization Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationAdmin) (`roles/resourcemanager.organizationAdmin`) [Project IAM Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.projectIamAdmin) (`roles/resourcemanager.projectIamAdmin`) |
| #### `resourcemanager.projects.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Access Approval Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/accessapproval.md.txt#accessapproval.admin) (`roles/accessapproval.admin`) [Access Approval Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/accessapproval.md.txt#accessapproval.editor) (`roles/accessapproval.editor`) [Access Approval Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/accessapproval.md.txt#accessapproval.viewer) (`roles/accessapproval.viewer`) [Access Context Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.admin) (`roles/accesscontextmanager.admin`) [Access Context Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.editor) (`roles/accesscontextmanager.editor`) [Access Context Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.policyAdmin) (`roles/accesscontextmanager.policyAdmin`) [Access Context Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.viewer) (`roles/accesscontextmanager.viewer`) [Actions Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/actions.md.txt#actions.Admin) (`roles/actions.Admin`) [Actions Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/actions.md.txt#actions.Viewer) (`roles/actions.Viewer`) [Advisory Notifications Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/advisorynotifications.md.txt#advisorynotifications.admin) (`roles/advisorynotifications.admin`) [Advisory Notifications Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/advisorynotifications.md.txt#advisorynotifications.viewer) (`roles/advisorynotifications.viewer`) [Agent Platform Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.admin) (`roles/aiplatform.admin`) [Aiplatform Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.editor) (`roles/aiplatform.editor`) [Agent Platform User](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.user) (`roles/aiplatform.user`) [Agent Platform Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.viewer) (`roles/aiplatform.viewer`) [AlloyDB Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/alloydb.md.txt#alloydb.admin) (`roles/alloydb.admin`) [AlloyDB Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/alloydb.md.txt#alloydb.editor) (`roles/alloydb.editor`) [AlloyDB Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/alloydb.md.txt#alloydb.viewer) (`roles/alloydb.viewer`) [Analytics Hub Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/analyticshub.md.txt#analyticshub.admin) (`roles/analyticshub.admin`) [Analytics Hub Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/analyticshub.md.txt#analyticshub.editor) (`roles/analyticshub.editor`) [Analytics Hub Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/analyticshub.md.txt#analyticshub.viewer) (`roles/analyticshub.viewer`) [Androidmanagement Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/androidmanagement.md.txt#androidmanagement.admin) (`roles/androidmanagement.admin`) [ApiGateway Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apigateway.md.txt#apigateway.admin) (`roles/apigateway.admin`) [ApiGateway Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/apigateway.md.txt#apigateway.editor) (`roles/apigateway.editor`) [ApiGateway Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/apigateway.md.txt#apigateway.viewer) (`roles/apigateway.viewer`) [Apigee Organization Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.admin) (`roles/apigee.admin`) [Apigee API Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.apiAdminV2) (`roles/apigee.apiAdminV2`) [Apigee Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.editor) (`roles/apigee.editor`) [Apigee Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.viewer) (`roles/apigee.viewer`) [Apigeeconnect Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/apigeeconnect.md.txt#apigeeconnect.viewer) (`roles/apigeeconnect.viewer`) [Cloud Apigee Registry Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apigeeregistry.md.txt#apigeeregistry.admin) (`roles/apigeeregistry.admin`) [Cloud Apigee Registry Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/apigeeregistry.md.txt#apigeeregistry.editor) (`roles/apigeeregistry.editor`) [Cloud Apigee Registry Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/apigeeregistry.md.txt#apigeeregistry.viewer) (`roles/apigeeregistry.viewer`) [Cloud API Hub Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apihub.md.txt#apihub.admin) (`roles/apihub.admin`) [Cloud API Hub Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/apihub.md.txt#apihub.editor) (`roles/apihub.editor`) [Cloud API Hub Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/apihub.md.txt#apihub.viewer) (`roles/apihub.viewer`) [API Management Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apim.md.txt#apim.admin) (`roles/apim.admin`) [API Management Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/apim.md.txt#apim.viewer) (`roles/apim.viewer`) [App Engine Service Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/appengine.md.txt#appengine.admin) (`roles/appengine.admin`) [App Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/appengine.md.txt#appengine.appAdmin) (`roles/appengine.appAdmin`) [App Engine Service Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/appengine.md.txt#appengine.editor) (`roles/appengine.editor`) [App Engine Service Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/appengine.md.txt#appengine.viewer) (`roles/appengine.viewer`) [App Hub Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apphub.md.txt#apphub.admin) (`roles/apphub.admin`) [App Hub Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/apphub.md.txt#apphub.editor) (`roles/apphub.editor`) [App Hub Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/apphub.md.txt#apphub.viewer) (`roles/apphub.viewer`) [Appliance Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/applianceactivation.md.txt#applianceactivation.admin) (`roles/applianceactivation.admin`) [Appliance Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/applianceactivation.md.txt#applianceactivation.viewer) (`roles/applianceactivation.viewer`) [App Topology Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apptopology.md.txt#apptopology.admin) (`roles/apptopology.admin`) [App Topology Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/apptopology.md.txt#apptopology.viewer) (`roles/apptopology.viewer`) [Artifact Registry Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/artifactregistry.md.txt#artifactregistry.admin) (`roles/artifactregistry.admin`) [Artifact Registry Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/artifactregistry.md.txt#artifactregistry.editor) (`roles/artifactregistry.editor`) [Artifact Registry Repository Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/artifactregistry.md.txt#artifactregistry.repoAdmin) (`roles/artifactregistry.repoAdmin`) [Artifact Registry Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/artifactregistry.md.txt#artifactregistry.viewer) (`roles/artifactregistry.viewer`) [Assured OSS Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredoss.md.txt#assuredoss.admin) (`roles/assuredoss.admin`) [Assured OSS Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredoss.md.txt#assuredoss.editor) (`roles/assuredoss.editor`) [Assured OSS Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredoss.md.txt#assuredoss.viewer) (`roles/assuredoss.viewer`) [Assured Workloads Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.admin) (`roles/assuredworkloads.admin`) [Assured Workloads Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.editor) (`roles/assuredworkloads.editor`) [Assured Workloads Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.viewer) (`roles/assuredworkloads.viewer`) [Audit Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.admin) (`roles/auditmanager.admin`) [Auditmanager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.viewer) (`roles/auditmanager.viewer`) [AutoML Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/automl.md.txt#automl.admin) (`roles/automl.admin`) [AutoML Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/automl.md.txt#automl.editor) (`roles/automl.editor`) [AutoML Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/automl.md.txt#automl.viewer) (`roles/automl.viewer`) [Recommendations AI Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/automlrecommendations.md.txt#automlrecommendations.admin) (`roles/automlrecommendations.admin`) [Recommendations AI Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/automlrecommendations.md.txt#automlrecommendations.editor) (`roles/automlrecommendations.editor`) [Recommendations AI Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/automlrecommendations.md.txt#automlrecommendations.viewer) (`roles/automlrecommendations.viewer`) [Autoscaling Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/autoscaling.md.txt#autoscaling.admin) (`roles/autoscaling.admin`) [Autoscaling Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/autoscaling.md.txt#autoscaling.editor) (`roles/autoscaling.editor`) [Autoscaling Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/autoscaling.md.txt#autoscaling.viewer) (`roles/autoscaling.viewer`) [Access Transparency Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/axt.md.txt#axt.admin) (`roles/axt.admin`) [Backup and DR Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/backupdr.md.txt#backupdr.admin) (`roles/backupdr.admin`) [Backupdr Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/backupdr.md.txt#backupdr.editor) (`roles/backupdr.editor`) [Backup and DR Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/backupdr.md.txt#backupdr.viewer) (`roles/backupdr.viewer`) [Bare Metal Solution Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/baremetalsolution.md.txt#baremetalsolution.admin) (`roles/baremetalsolution.admin`) [Bare Metal Solution Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/baremetalsolution.md.txt#baremetalsolution.editor) (`roles/baremetalsolution.editor`) [Bare Metal Solution Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/baremetalsolution.md.txt#baremetalsolution.viewer) (`roles/baremetalsolution.viewer`) [Batch Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/batch.md.txt#batch.admin) (`roles/batch.admin`) [Batch Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/batch.md.txt#batch.viewer) (`roles/batch.viewer`) [Cloud BeyondCorp Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/beyondcorp.md.txt#beyondcorp.admin) (`roles/beyondcorp.admin`) [Cloud BeyondCorp Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/beyondcorp.md.txt#beyondcorp.editor) (`roles/beyondcorp.editor`) [Cloud BeyondCorp Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/beyondcorp.md.txt#beyondcorp.viewer) (`roles/beyondcorp.viewer`) [BigLake Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/biglake.md.txt#biglake.admin) (`roles/biglake.admin`) [BigLake Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/biglake.md.txt#biglake.editor) (`roles/biglake.editor`) [BigLake Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/biglake.md.txt#biglake.viewer) (`roles/biglake.viewer`) [BigQuery Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.admin) (`roles/bigquery.admin`) [BigQuery Data Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.dataEditor) (`roles/bigquery.dataEditor`) [BigQuery Data Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.dataOwner) (`roles/bigquery.dataOwner`) [BigQuery Data Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.dataViewer) (`roles/bigquery.dataViewer`) [BigQuery Job User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.jobUser) (`roles/bigquery.jobUser`) [BigQuery Metadata Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.metadataViewer) (`roles/bigquery.metadataViewer`) [BigQuery Read Session User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.readSessionUser) (`roles/bigquery.readSessionUser`) [BigQuery Resource Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.resourceAdmin) (`roles/bigquery.resourceAdmin`) [BigQuery Resource Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.resourceEditor) (`roles/bigquery.resourceEditor`) [BigQuery Resource Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.resourceViewer) (`roles/bigquery.resourceViewer`) [BigQuery Studio Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.studioAdmin) (`roles/bigquery.studioAdmin`) [BigQuery Studio User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.studioUser) (`roles/bigquery.studioUser`) [BigQuery User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.user) (`roles/bigquery.user`) [BigQuery Data Policy Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquerydatapolicy.md.txt#bigquerydatapolicy.editor) (`roles/bigquerydatapolicy.editor`) [Bigquerymigration Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquerymigration.md.txt#bigquerymigration.admin) (`roles/bigquerymigration.admin`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Billing Account Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/billing.md.txt#billing.admin) (`roles/billing.admin`) [Binary Authorization Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/binaryauthorization.md.txt#binaryauthorization.admin) (`roles/binaryauthorization.admin`) [Binary Authorization Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/binaryauthorization.md.txt#binaryauthorization.editor) (`roles/binaryauthorization.editor`) [Binary Authorization Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/binaryauthorization.md.txt#binaryauthorization.viewer) (`roles/binaryauthorization.viewer`) [Blockchain Node Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/blockchainnodeengine.md.txt#blockchainnodeengine.admin) (`roles/blockchainnodeengine.admin`) [Blockchain Node Engine Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/blockchainnodeengine.md.txt#blockchainnodeengine.viewer) (`roles/blockchainnodeengine.viewer`) [Blockchain Validator Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/blockchainvalidatormanager.md.txt#blockchainvalidatormanager.admin) (`roles/blockchainvalidatormanager.admin`) [Blockchain Validator Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/blockchainvalidatormanager.md.txt#blockchainvalidatormanager.viewer) (`roles/blockchainvalidatormanager.viewer`) [Capacityplanner Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/capacityplanner.md.txt#capacityplanner.admin) (`roles/capacityplanner.admin`) [Capacity Planner Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/capacityplanner.md.txt#capacityplanner.viewer) (`roles/capacityplanner.viewer`) [Carestudio Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/carestudio.md.txt#carestudio.admin) (`roles/carestudio.admin`) [Care Studio Patients Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/carestudio.md.txt#carestudio.viewer) (`roles/carestudio.viewer`) [Certificate Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/certificatemanager.md.txt#certificatemanager.admin) (`roles/certificatemanager.admin`) [Certificate Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/certificatemanager.md.txt#certificatemanager.editor) (`roles/certificatemanager.editor`) [Certificate Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/certificatemanager.md.txt#certificatemanager.viewer) (`roles/certificatemanager.viewer`) [Gemini Enterprise for Customer Experience Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.admin) (`roles/ces.admin`) [Gemini Enterprise for Customer Experience Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.viewer) (`roles/ces.viewer`) [Chat Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/chat.md.txt#chat.admin) (`roles/chat.admin`) [Chat Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/chat.md.txt#chat.viewer) (`roles/chat.viewer`) [Chronicle API Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.admin) (`roles/chronicle.admin`) [Chronicle API Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.editor) (`roles/chronicle.editor`) [Chronicle API Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.viewer) (`roles/chronicle.viewer`) [Chroniclesm Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/chroniclesm.md.txt#chroniclesm.editor) (`roles/chroniclesm.editor`) [Cloud Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloud.md.txt#cloud.admin) (`roles/cloud.admin`) [Cloud Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloud.md.txt#cloud.viewer) (`roles/cloud.viewer`) [Gemini for Google Cloud Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudaicompanion.md.txt#cloudaicompanion.admin) (`roles/cloudaicompanion.admin`) [Gemini for Google Cloud Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudaicompanion.md.txt#cloudaicompanion.editor) (`roles/cloudaicompanion.editor`) [Gemini for Google Cloud User](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudaicompanion.md.txt#cloudaicompanion.user) (`roles/cloudaicompanion.user`) [Gemini for Google Cloud Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudaicompanion.md.txt#cloudaicompanion.viewer) (`roles/cloudaicompanion.viewer`) [Cloud Asset Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudasset.md.txt#cloudasset.admin) (`roles/cloudasset.admin`) [Cloud Asset Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudasset.md.txt#cloudasset.editor) (`roles/cloudasset.editor`) [Cloud Build Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.admin) (`roles/cloudbuild.admin`) [Cloud Build Service Account](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.builds.builder) (`roles/cloudbuild.builds.builder`) [Cloud Build Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.editor) (`roles/cloudbuild.editor`) [Cloud Build Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.viewer) (`roles/cloudbuild.viewer`) [Firebase Remote Config Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudconfig.md.txt#cloudconfig.admin) (`roles/cloudconfig.admin`) [Firebase Remote Config Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudconfig.md.txt#cloudconfig.viewer) (`roles/cloudconfig.viewer`) [Cloudcontrolspartner Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudcontrolspartner.md.txt#cloudcontrolspartner.viewer) (`roles/cloudcontrolspartner.viewer`) [Cloud Deploy Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddeploy.md.txt#clouddeploy.admin) (`roles/clouddeploy.admin`) [Cloud Deploy Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddeploy.md.txt#clouddeploy.editor) (`roles/clouddeploy.editor`) [Cloud Deploy Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddeploy.md.txt#clouddeploy.viewer) (`roles/clouddeploy.viewer`) [Cloud Functions Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudfunctions.md.txt#cloudfunctions.admin) (`roles/cloudfunctions.admin`) [Cloud Functions Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudfunctions.md.txt#cloudfunctions.editor) (`roles/cloudfunctions.editor`) [Cloud Functions Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudfunctions.md.txt#cloudfunctions.viewer) (`roles/cloudfunctions.viewer`) [Cloud Talent Solution Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudjobdiscovery.md.txt#cloudjobdiscovery.admin) (`roles/cloudjobdiscovery.admin`) [Cloud Talent Solution Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudjobdiscovery.md.txt#cloudjobdiscovery.viewer) (`roles/cloudjobdiscovery.viewer`) [Cloud KMS Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.admin) (`roles/cloudkms.admin`) [Cloud KMS CryptoKey Encrypter/Decrypter](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.cryptoKeyEncrypterDecrypter) (`roles/cloudkms.cryptoKeyEncrypterDecrypter`) [Cloud KMS Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.viewer) (`roles/cloudkms.viewer`) [Cloud Location Finder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudlocationfinder.md.txt#cloudlocationfinder.admin) (`roles/cloudlocationfinder.admin`) [Cloud Location Finder Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudlocationfinder.md.txt#cloudlocationfinder.viewer) (`roles/cloudlocationfinder.viewer`) [Firebase Cloud Messaging Service Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasecloudmessaging.md.txt#cloudmessaging.editor) (`roles/cloudmessaging.editor`) [Catalog Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprivatecatalog.md.txt#cloudprivatecatalog.admin) (`roles/cloudprivatecatalog.admin`) [Catalog Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprivatecatalog.md.txt#cloudprivatecatalog.viewer) (`roles/cloudprivatecatalog.viewer`) [Catalog Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprivatecatalog.md.txt#cloudprivatecatalogproducer.admin) (`roles/cloudprivatecatalogproducer.admin`) [Catalog Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprivatecatalog.md.txt#cloudprivatecatalogproducer.editor) (`roles/cloudprivatecatalogproducer.editor`) [Catalog Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprivatecatalog.md.txt#cloudprivatecatalogproducer.viewer) (`roles/cloudprivatecatalogproducer.viewer`) [Cloud Profiler Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprofiler.md.txt#cloudprofiler.admin) (`roles/cloudprofiler.admin`) [Cloud Profiler Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprofiler.md.txt#cloudprofiler.viewer) (`roles/cloudprofiler.viewer`) [Cloud Quotas Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudquotas.md.txt#cloudquotas.admin) (`roles/cloudquotas.admin`) [Cloud Quotas Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudquotas.md.txt#cloudquotas.viewer) (`roles/cloudquotas.viewer`) [Cloud Scheduler Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudscheduler.md.txt#cloudscheduler.admin) (`roles/cloudscheduler.admin`) [Cloud Scheduler Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudscheduler.md.txt#cloudscheduler.viewer) (`roles/cloudscheduler.viewer`) [Compliance Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.admin) (`roles/cloudsecuritycompliance.admin`) [Compliance Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.viewer) (`roles/cloudsecuritycompliance.viewer`) [Web Security Scanner Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecurityscanner.md.txt#cloudsecurityscanner.admin) (`roles/cloudsecurityscanner.admin`) [Web Security Scanner Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecurityscanner.md.txt#cloudsecurityscanner.editor) (`roles/cloudsecurityscanner.editor`) [Cloud SQL Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsql.md.txt#cloudsql.admin) (`roles/cloudsql.admin`) [Cloud SQL Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsql.md.txt#cloudsql.editor) (`roles/cloudsql.editor`) [Cloud SQL Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsql.md.txt#cloudsql.viewer) (`roles/cloudsql.viewer`) [Cloud Tasks Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtasks.md.txt#cloudtasks.admin) (`roles/cloudtasks.admin`) [Cloud Tasks Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtasks.md.txt#cloudtasks.editor) (`roles/cloudtasks.editor`) [Cloud Tasks Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtasks.md.txt#cloudtasks.viewer) (`roles/cloudtasks.viewer`) [Cloud Test Service Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtestservice.md.txt#cloudtestservice.admin) (`roles/cloudtestservice.admin`) [Cloud Test Service Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtestservice.md.txt#cloudtestservice.viewer) (`roles/cloudtestservice.viewer`) [Cloud Trace Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtrace.md.txt#cloudtrace.admin) (`roles/cloudtrace.admin`) [Cloud Trace User](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtrace.md.txt#cloudtrace.user) (`roles/cloudtrace.user`) [Cloud Translation API Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtranslate.md.txt#cloudtranslate.admin) (`roles/cloudtranslate.admin`) [Cloud Translation API Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtranslate.md.txt#cloudtranslate.editor) (`roles/cloudtranslate.editor`) [Cloud Translation API User](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtranslate.md.txt#cloudtranslate.user) (`roles/cloudtranslate.user`) [Cloud Translation API Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtranslate.md.txt#cloudtranslate.viewer) (`roles/cloudtranslate.viewer`) [Commerce Agreement Publishing Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/commerceagreementpublishing.md.txt#commerceagreementpublishing.admin) (`roles/commerceagreementpublishing.admin`) [Commerce Agreement Publishing Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/commerceagreementpublishing.md.txt#commerceagreementpublishing.viewer) (`roles/commerceagreementpublishing.viewer`) [Commerce Business Enablement Configuration Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/commercebusinessenablement.md.txt#commercebusinessenablement.admin) (`roles/commercebusinessenablement.admin`) [Commerce Business Enablement Configuration Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/commercebusinessenablement.md.txt#commercebusinessenablement.viewer) (`roles/commercebusinessenablement.viewer`) [Commerce Offer Catalog Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/commerceoffercatalog.md.txt#commerceoffercatalog.admin) (`roles/commerceoffercatalog.admin`) [Commerce Organization Governance Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/commerceorggovernance.md.txt#commerceorggovernance.admin) (`roles/commerceorggovernance.admin`) [Commerce Organization Governance Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/commerceorggovernance.md.txt#commerceorggovernance.viewer) (`roles/commerceorggovernance.viewer`) [Commercepricemanagement Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/commercepricemanagement.md.txt#commercepricemanagement.editor) (`roles/commercepricemanagement.editor`) [Commerce Price Management Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/commercepricemanagement.md.txt#commercepricemanagement.viewer) (`roles/commercepricemanagement.viewer`) [Commerce Producer Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/commerceproducer.md.txt#commerceproducer.admin) (`roles/commerceproducer.admin`) [Commerce Producer Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/commerceproducer.md.txt#commerceproducer.viewer) (`roles/commerceproducer.viewer`) [Composer Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.editor) (`roles/composer.editor`) [Composer Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.viewer) (`roles/composer.viewer`) [Compute Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.admin) (`roles/compute.admin`) [Compute Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.editor) (`roles/compute.editor`) [Compute Instance Admin (beta)](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.instanceAdmin) (`roles/compute.instanceAdmin`) [Compute Instance Admin (v1)](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.instanceAdmin.v1) (`roles/compute.instanceAdmin.v1`) [Compute Load Balancer Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.loadBalancerAdmin) (`roles/compute.loadBalancerAdmin`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Compute OS Admin Login](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.osAdminLogin) (`roles/compute.osAdminLogin`) [Compute OS Login](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.osLogin) (`roles/compute.osLogin`) [Compute Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.securityAdmin) (`roles/compute.securityAdmin`) [Compute Storage Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.storageAdmin) (`roles/compute.storageAdmin`) [Compute Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.viewer) (`roles/compute.viewer`) [Confidentialcomputing Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/confidentialcomputing.md.txt#confidentialcomputing.admin) (`roles/confidentialcomputing.admin`) [Confidentialcomputing Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/confidentialcomputing.md.txt#confidentialcomputing.viewer) (`roles/confidentialcomputing.viewer`) [Cloud Infrastructure Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/config.md.txt#config.admin) (`roles/config.admin`) [Cloud Infrastructure Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/config.md.txt#config.editor) (`roles/config.editor`) [Cloud Infrastructure Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/config.md.txt#config.viewer) (`roles/config.viewer`) [Configdelivery Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/configdelivery.md.txt#configdelivery.admin) (`roles/configdelivery.admin`) [Configdelivery Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/configdelivery.md.txt#configdelivery.viewer) (`roles/configdelivery.viewer`) [Connector Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/connectors.md.txt#connectors.admin) (`roles/connectors.admin`) [Connectors Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/connectors.md.txt#connectors.editor) (`roles/connectors.editor`) [Connectors Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/connectors.md.txt#connectors.viewer) (`roles/connectors.viewer`) [Contact Center AI Platform Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/contactcenteraiplatform.md.txt#contactcenteraiplatform.admin) (`roles/contactcenteraiplatform.admin`) [Contact Center AI Platform Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/contactcenteraiplatform.md.txt#contactcenteraiplatform.viewer) (`roles/contactcenteraiplatform.viewer`) [Kubernetes Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.admin) (`roles/container.admin`) [Kubernetes Engine Cluster Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.clusterAdmin) (`roles/container.clusterAdmin`) [Kubernetes Engine Cluster Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.clusterViewer) (`roles/container.clusterViewer`) [Kubernetes Engine Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.developer) (`roles/container.developer`) [Kubernetes Engine Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.editor) (`roles/container.editor`) [Kubernetes Engine Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.viewer) (`roles/container.viewer`) [Container Analysis Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/containeranalysis.md.txt#containeranalysis.admin) (`roles/containeranalysis.admin`) [Container Analysis Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/containeranalysis.md.txt#containeranalysis.editor) (`roles/containeranalysis.editor`) [Container Analysis Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/containeranalysis.md.txt#containeranalysis.viewer) (`roles/containeranalysis.viewer`) [Containersecurity Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/containersecurity.md.txt#containersecurity.admin) (`roles/containersecurity.admin`) [GKE Security Posture Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/containersecurity.md.txt#containersecurity.viewer) (`roles/containersecurity.viewer`) [Content Warehouse Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/contentwarehouse.md.txt#contentwarehouse.admin) (`roles/contentwarehouse.admin`) [Database Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/databasecenter.md.txt#databasecenter.admin) (`roles/databasecenter.admin`) [Database Center Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/databasecenter.md.txt#databasecenter.viewer) (`roles/databasecenter.viewer`) [Database Insights Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/databaseinsights.md.txt#databaseinsights.admin) (`roles/databaseinsights.admin`) [Database Insights Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/databaseinsights.md.txt#databaseinsights.editor) (`roles/databaseinsights.editor`) [Database Insights Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/databaseinsights.md.txt#databaseinsights.viewer) (`roles/databaseinsights.viewer`) [Databasesconsole Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/databasesconsole.md.txt#databasesconsole.editor) (`roles/databasesconsole.editor`) [Databasesconsole Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/databasesconsole.md.txt#databasesconsole.viewer) (`roles/databasesconsole.viewer`) [Data Catalog Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.admin) (`roles/datacatalog.admin`) [Data Catalog Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.editor) (`roles/datacatalog.editor`) [Data Catalog Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.viewer) (`roles/datacatalog.viewer`) [Data Connectors Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dataconnectors.md.txt#dataconnectors.admin) (`roles/dataconnectors.admin`) [Data Connectors Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dataconnectors.md.txt#dataconnectors.editor) (`roles/dataconnectors.editor`) [Data Connectors Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataconnectors.md.txt#dataconnectors.viewer) (`roles/dataconnectors.viewer`) [Dataflow Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.admin) (`roles/dataflow.admin`) [Dataflow Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.viewer) (`roles/dataflow.viewer`) [Dataform Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.admin) (`roles/dataform.admin`) [Dataform Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.editor) (`roles/dataform.editor`) [Dataform Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.viewer) (`roles/dataform.viewer`) [Cloud Data Fusion Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.admin) (`roles/datafusion.admin`) [Cloud Data Fusion Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.viewer) (`roles/datafusion.viewer`) [Data Labeling Service Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/datalabeling.md.txt#datalabeling.admin) (`roles/datalabeling.admin`) [Data Labeling Service Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/datalabeling.md.txt#datalabeling.editor) (`roles/datalabeling.editor`) [Data Labeling Service Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/datalabeling.md.txt#datalabeling.viewer) (`roles/datalabeling.viewer`) [Data Lineage Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/datalineage.md.txt#datalineage.admin) (`roles/datalineage.admin`) [Data Lineage Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/datalineage.md.txt#datalineage.editor) (`roles/datalineage.editor`) [Data Lineage Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/datalineage.md.txt#datalineage.viewer) (`roles/datalineage.viewer`) [Database Migration Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/datamigration.md.txt#datamigration.admin) (`roles/datamigration.admin`) [Database Migration Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/datamigration.md.txt#datamigration.editor) (`roles/datamigration.editor`) [Data pipelines Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/datapipelines.md.txt#datapipelines.admin) (`roles/datapipelines.admin`) [Data pipelines Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/datapipelines.md.txt#datapipelines.viewer) (`roles/datapipelines.viewer`) [Dataplex Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.admin) (`roles/dataplex.admin`) [Dataprep Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dataprep.md.txt#dataprep.admin) (`roles/dataprep.admin`) [Dataproc Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.admin) (`roles/dataproc.admin`) [Dataproc Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.editor) (`roles/dataproc.editor`) [Dataproc Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.viewer) (`roles/dataproc.viewer`) [Dataprocessing Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dataprocessing.md.txt#dataprocessing.editor) (`roles/dataprocessing.editor`) [Dataprocessing Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataprocessing.md.txt#dataprocessing.viewer) (`roles/dataprocessing.viewer`) [Dataproc Resource Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dataprocrm.md.txt#dataprocrm.admin) (`roles/dataprocrm.admin`) [Dataproc Resource Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataprocrm.md.txt#dataprocrm.viewer) (`roles/dataprocrm.viewer`) [Cloud Datastore Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firestore.md.txt#datastore.admin) (`roles/datastore.admin`) [Cloud Datastore Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/firestore.md.txt#datastore.editor) (`roles/datastore.editor`) [Cloud Datastore Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/firestore.md.txt#datastore.owner) (`roles/datastore.owner`) [Cloud Datastore User](https://docs.cloud.google.com/iam/docs/roles-permissions/firestore.md.txt#datastore.user) (`roles/datastore.user`) [Cloud Datastore Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firestore.md.txt#datastore.viewer) (`roles/datastore.viewer`) [Datastream Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/datastream.md.txt#datastream.admin) (`roles/datastream.admin`) [Datastream Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/datastream.md.txt#datastream.viewer) (`roles/datastream.viewer`) [Data Studio Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/datastudio.md.txt#datastudio.admin) (`roles/datastudio.admin`) [Data Studio Asset Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/datastudio.md.txt#datastudio.editor) (`roles/datastudio.editor`) [Data Studio Asset Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/datastudio.md.txt#datastudio.viewer) (`roles/datastudio.viewer`) [Dell EMC Cloud OneFS Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dellemccloudonefs.md.txt#dellemccloudonefs.admin) (`roles/dellemccloudonefs.admin`) [Dell EMC Cloud OneFS Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dellemccloudonefs.md.txt#dellemccloudonefs.viewer) (`roles/dellemccloudonefs.viewer`) [Deployment Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#deploymentmanager.admin) (`roles/deploymentmanager.admin`) [Deployment Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#deploymentmanager.editor) (`roles/deploymentmanager.editor`) [Deployment Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#deploymentmanager.viewer) (`roles/deploymentmanager.viewer`) [Application Design Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/designcenter.md.txt#designcenter.admin) (`roles/designcenter.admin`) [Designcenter Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/designcenter.md.txt#designcenter.editor) (`roles/designcenter.editor`) [Application Design Center Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/designcenter.md.txt#designcenter.viewer) (`roles/designcenter.viewer`) [Developer Connect Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/developerconnect.md.txt#developerconnect.admin) (`roles/developerconnect.admin`) [Developer Connect Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/developerconnect.md.txt#developerconnect.viewer) (`roles/developerconnect.viewer`) [Device Run Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/devicerun.md.txt#devicerun.admin) (`roles/devicerun.admin`) [Device Run Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/devicerun.md.txt#devicerun.viewer) (`roles/devicerun.viewer`) [Device Streaming Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/devicestreaming.md.txt#devicestreaming.admin) (`roles/devicestreaming.admin`) [Device Streaming Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/devicestreaming.md.txt#devicestreaming.viewer) (`roles/devicestreaming.viewer`) [Dialogflow API Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.admin) (`roles/dialogflow.admin`) [Dialogflow Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.viewer) (`roles/dialogflow.viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Discovery Engine Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.editor) (`roles/discoveryengine.editor`) [Discovery Engine User](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.user) (`roles/discoveryengine.user`) [Discovery Engine Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.viewer) (`roles/discoveryengine.viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [DNS Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dns.md.txt#dns.admin) (`roles/dns.admin`) [DNS Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dns.md.txt#dns.editor) (`roles/dns.editor`) [DNS Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dns.md.txt#dns.viewer) (`roles/dns.viewer`) [Document AI Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddocumentai.md.txt#documentai.admin) (`roles/documentai.admin`) [Document AI Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddocumentai.md.txt#documentai.editor) (`roles/documentai.editor`) [Document AI Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddocumentai.md.txt#documentai.viewer) (`roles/documentai.viewer`) [Cloud Domains Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/domains.md.txt#domains.admin) (`roles/domains.admin`) [Cloud Domains Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/domains.md.txt#domains.editor) (`roles/domains.editor`) [Cloud Domains Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/domains.md.txt#domains.viewer) (`roles/domains.viewer`) [Earth Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/earth.md.txt#earth.admin) (`roles/earth.admin`) [Earth Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/earth.md.txt#earth.viewer) (`roles/earth.viewer`) [Earth Engine Resource Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/earthengine.md.txt#earthengine.admin) (`roles/earthengine.admin`) [Earth Engine Resource Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/earthengine.md.txt#earthengine.editor) (`roles/earthengine.editor`) [Earth Engine Resource Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/earthengine.md.txt#earthengine.viewer) (`roles/earthengine.viewer`) [Edge Container Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/edgecontainer.md.txt#edgecontainer.admin) (`roles/edgecontainer.admin`) [Edge Container Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/edgecontainer.md.txt#edgecontainer.editor) (`roles/edgecontainer.editor`) [Edge Container Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/edgecontainer.md.txt#edgecontainer.viewer) (`roles/edgecontainer.viewer`) [Edge Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/edgenetwork.md.txt#edgenetwork.admin) (`roles/edgenetwork.admin`) [Edge Network Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/edgenetwork.md.txt#edgenetwork.editor) (`roles/edgenetwork.editor`) [Edge Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/edgenetwork.md.txt#edgenetwork.viewer) (`roles/edgenetwork.viewer`) [Enterprise Knowledge Graph Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/enterpriseknowledgegraph.md.txt#enterpriseknowledgegraph.admin) (`roles/enterpriseknowledgegraph.admin`) [Enterprise Knowledge Graph Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/enterpriseknowledgegraph.md.txt#enterpriseknowledgegraph.editor) (`roles/enterpriseknowledgegraph.editor`) [Enterprise Knowledge Graph Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/enterpriseknowledgegraph.md.txt#enterpriseknowledgegraph.viewer) (`roles/enterpriseknowledgegraph.viewer`) [Enterprise Purchasing Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/enterprisepurchasing.md.txt#enterprisepurchasing.admin) (`roles/enterprisepurchasing.admin`) [Enterprise Purchasing Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/enterprisepurchasing.md.txt#enterprisepurchasing.editor) (`roles/enterprisepurchasing.editor`) [Enterprise Purchasing Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/enterprisepurchasing.md.txt#enterprisepurchasing.viewer) (`roles/enterprisepurchasing.viewer`) [Error Reporting Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/errorreporting.md.txt#errorreporting.admin) (`roles/errorreporting.admin`) [Error Reporting User](https://docs.cloud.google.com/iam/docs/roles-permissions/errorreporting.md.txt#errorreporting.user) (`roles/errorreporting.user`) [Error Reporting Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/errorreporting.md.txt#errorreporting.viewer) (`roles/errorreporting.viewer`) [Eventarc Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/eventarc.md.txt#eventarc.admin) (`roles/eventarc.admin`) [Eventarc Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/eventarc.md.txt#eventarc.editor) (`roles/eventarc.editor`) [Eventarc Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/eventarc.md.txt#eventarc.viewer) (`roles/eventarc.viewer`) [External Exposure Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.admin) (`roles/externalexposure.admin`) [External Exposure Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.viewer) (`roles/externalexposure.viewer`) [Fault Testing Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/faulttesting.md.txt#faulttesting.viewer) (`roles/faulttesting.viewer`) [Cloud Filestore Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/file.md.txt#file.admin) (`roles/file.admin`) [Financial Services Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/financialservices.md.txt#financialservices.admin) (`roles/financialservices.admin`) [Financial Services Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/financialservices.md.txt#financialservices.viewer) (`roles/financialservices.viewer`) [Firebase Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.admin) (`roles/firebase.admin`) [Firebase Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.editor) (`roles/firebase.editor`) [Firebase Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.viewer) (`roles/firebase.viewer`) [Firebase A/B Testing Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseabt.md.txt#firebaseabt.admin) (`roles/firebaseabt.admin`) [Firebase A/B Testing Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseabt.md.txt#firebaseabt.viewer) (`roles/firebaseabt.viewer`) [Firebase App Distribution Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseappdistro.md.txt#firebaseappdistro.admin) (`roles/firebaseappdistro.admin`) [Firebase App Distribution Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseappdistro.md.txt#firebaseappdistro.viewer) (`roles/firebaseappdistro.viewer`) [Firebase App Hosting Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseapphosting.md.txt#firebaseapphosting.admin) (`roles/firebaseapphosting.admin`) [Firebase App Hosting Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseapphosting.md.txt#firebaseapphosting.viewer) (`roles/firebaseapphosting.viewer`) [Firebase Authentication Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseauth.md.txt#firebaseauth.admin) (`roles/firebaseauth.admin`) [Firebase Authentication editor](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseauth.md.txt#firebaseauth.editor) (`roles/firebaseauth.editor`) [Firebase Authentication Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseauth.md.txt#firebaseauth.viewer) (`roles/firebaseauth.viewer`) [Firebase Cloud Messaging API Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasecloudmessaging.md.txt#firebasecloudmessaging.admin) (`roles/firebasecloudmessaging.admin`) [Firebase Cloud Messaging API Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasecloudmessaging.md.txt#firebasecloudmessaging.viewer) (`roles/firebasecloudmessaging.viewer`) [Firebase Crashlytics Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasecrash.md.txt#firebasecrashlytics.admin) (`roles/firebasecrashlytics.admin`) [Firebase Crashlytics Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasecrash.md.txt#firebasecrashlytics.viewer) (`roles/firebasecrashlytics.viewer`) [Firebase Realtime Database Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasedatabase.md.txt#firebasedatabase.admin) (`roles/firebasedatabase.admin`) [Firebase Realtime Database Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasedatabase.md.txt#firebasedatabase.viewer) (`roles/firebasedatabase.viewer`) [Firebase SQL Connect API Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasedataconnect.md.txt#firebasedataconnect.admin) (`roles/firebasedataconnect.admin`) [Firebase SQL Connect API Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasedataconnect.md.txt#firebasedataconnect.viewer) (`roles/firebasedataconnect.viewer`) [Firebase Dynamic Links Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasedynamiclinks.md.txt#firebasedynamiclinks.admin) (`roles/firebasedynamiclinks.admin`) [Firebasedynamiclinks Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasedynamiclinks.md.txt#firebasedynamiclinks.editor) (`roles/firebasedynamiclinks.editor`) [Firebase Dynamic Links Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasedynamiclinks.md.txt#firebasedynamiclinks.viewer) (`roles/firebasedynamiclinks.viewer`) [Firebaseextensions Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseextensions.md.txt#firebaseextensions.editor) (`roles/firebaseextensions.editor`) [Firebase Extensions Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseextensions.md.txt#firebaseextensions.viewer) (`roles/firebaseextensions.viewer`) [Firebaseextensionspublisher Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseextensionspublisher.md.txt#firebaseextensionspublisher.admin) (`roles/firebaseextensionspublisher.admin`) [Firebaseextensionspublisher Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseextensionspublisher.md.txt#firebaseextensionspublisher.viewer) (`roles/firebaseextensionspublisher.viewer`) [Firebase Hosting Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasehosting.md.txt#firebasehosting.admin) (`roles/firebasehosting.admin`) [Firebase Hosting Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasehosting.md.txt#firebasehosting.viewer) (`roles/firebasehosting.viewer`) [Firebase In-App Messaging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseinappmessaging.md.txt#firebaseinappmessaging.admin) (`roles/firebaseinappmessaging.admin`) [Firebase In-App Messaging Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseinappmessaging.md.txt#firebaseinappmessaging.viewer) (`roles/firebaseinappmessaging.viewer`) [Firebase ML Kit Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseml.md.txt#firebaseml.admin) (`roles/firebaseml.admin`) [Firebase ML Kit Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseml.md.txt#firebaseml.viewer) (`roles/firebaseml.viewer`) [Firebase Cloud Messaging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasecloudmessaging.md.txt#firebasenotifications.admin) (`roles/firebasenotifications.admin`) [Firebase Cloud Messaging Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasecloudmessaging.md.txt#firebasenotifications.viewer) (`roles/firebasenotifications.viewer`) [Firebase Performance Reporting Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseperformance.md.txt#firebaseperformance.admin) (`roles/firebaseperformance.admin`) [Firebase Performance Reporting Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseperformance.md.txt#firebaseperformance.viewer) (`roles/firebaseperformance.viewer`) [Firebase Rules Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaserules.md.txt#firebaserules.admin) (`roles/firebaserules.admin`) [Firebase Rules System](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaserules.md.txt#firebaserules.system) (`roles/firebaserules.system`) [Firebase Rules Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaserules.md.txt#firebaserules.viewer) (`roles/firebaserules.viewer`) [Cloud Storage for Firebase Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasestorage.md.txt#firebasestorage.admin) (`roles/firebasestorage.admin`) [Cloud Storage for Firebase Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasestorage.md.txt#firebasestorage.viewer) (`roles/firebasestorage.viewer`) [Firebase AI Logic Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasevertexai.md.txt#firebasevertexai.admin) (`roles/firebasevertexai.admin`) [Firebase AI Logic Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasevertexai.md.txt#firebasevertexai.viewer) (`roles/firebasevertexai.viewer`) [Fleet Engine Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/fleetengine.md.txt#fleetengine.viewer) (`roles/fleetengine.viewer`) [Flow Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/flow.md.txt#flow.admin) (`roles/flow.admin`) [Flow Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/flow.md.txt#flow.editor) (`roles/flow.editor`) [Cloud FTP Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/ftp.md.txt#ftp.admin) (`roles/ftp.admin`) [Cloud FTP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/ftp.md.txt#ftp.viewer) (`roles/ftp.viewer`) [GDC Hardware Management Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/gdchardwaremanagement.md.txt#gdchardwaremanagement.admin) (`roles/gdchardwaremanagement.admin`) [Gdchardwaremanagement Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/gdchardwaremanagement.md.txt#gdchardwaremanagement.viewer) (`roles/gdchardwaremanagement.viewer`) [Gemini Cloud Assist Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/geminicloudassist.md.txt#geminicloudassist.admin) (`roles/geminicloudassist.admin`) [Gemini Cloud Assist Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/geminicloudassist.md.txt#geminicloudassist.editor) (`roles/geminicloudassist.editor`) [Gemini Cloud Assist Investigation Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/geminicloudassist.md.txt#geminicloudassist.investigationOwner) (`roles/geminicloudassist.investigationOwner`) [Gemini Cloud Assist User](https://docs.cloud.google.com/iam/docs/roles-permissions/geminicloudassist.md.txt#geminicloudassist.user) (`roles/geminicloudassist.user`) [Gemini Cloud Assist Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/geminicloudassist.md.txt#geminicloudassist.viewer) (`roles/geminicloudassist.viewer`) [Gemini Data Analytics Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/geminidataanalytics.md.txt#geminidataanalytics.admin) (`roles/geminidataanalytics.admin`) [Gemini Data Analytics Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/geminidataanalytics.md.txt#geminidataanalytics.viewer) (`roles/geminidataanalytics.viewer`) [Backup for GKE Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/gkebackup.md.txt#gkebackup.admin) (`roles/gkebackup.admin`) [Backup for GKE Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/gkebackup.md.txt#gkebackup.editor) (`roles/gkebackup.editor`) [Backup for GKE Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/gkebackup.md.txt#gkebackup.viewer) (`roles/gkebackup.viewer`) [Fleet Admin (formerly GKE Hub Admin)](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.admin) (`roles/gkehub.admin`) [Fleet Editor (formerly GKE Hub Editor)](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.editor) (`roles/gkehub.editor`) [Fleet Viewer (formerly GKE Hub Viewer)](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.viewer) (`roles/gkehub.viewer`) [Anthos Multi-cloud Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/gkemulticloud.md.txt#gkemulticloud.admin) (`roles/gkemulticloud.admin`) [Anthos Multi-cloud Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/gkemulticloud.md.txt#gkemulticloud.editor) (`roles/gkemulticloud.editor`) [Anthos Multi-cloud Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/gkemulticloud.md.txt#gkemulticloud.viewer) (`roles/gkemulticloud.viewer`) [GKE on-prem Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/gkeonprem.md.txt#gkeonprem.admin) (`roles/gkeonprem.admin`) [GKE on-prem Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/gkeonprem.md.txt#gkeonprem.editor) (`roles/gkeonprem.editor`) [GKE on-prem Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/gkeonprem.md.txt#gkeonprem.viewer) (`roles/gkeonprem.viewer`) [Google Workspace Add-ons Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/gsuiteaddons.md.txt#gsuiteaddons.admin) (`roles/gsuiteaddons.admin`) [Google Workspace Add-ons Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/gsuiteaddons.md.txt#gsuiteaddons.viewer) (`roles/gsuiteaddons.viewer`) [Cluster Director Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.editor) (`roles/hypercomputecluster.editor`) [IAM Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.admin) (`roles/iam.admin`) [IAM Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.editor) (`roles/iam.editor`) [Role Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.roleAdmin) (`roles/iam.roleAdmin`) [Role Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.roleViewer) (`roles/iam.roleViewer`) [Service Account Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.serviceAccountAdmin) (`roles/iam.serviceAccountAdmin`) [Create Service Accounts](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.serviceAccountCreator) (`roles/iam.serviceAccountCreator`) [Service Account Key Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.serviceAccountKeyAdmin) (`roles/iam.serviceAccountKeyAdmin`) [Service Account Token Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.serviceAccountTokenCreator) (`roles/iam.serviceAccountTokenCreator`) [Service Account User](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.serviceAccountUser) (`roles/iam.serviceAccountUser`) [View Service Accounts](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.serviceAccountViewer) (`roles/iam.serviceAccountViewer`) [IAM Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.viewer) (`roles/iam.viewer`) [IAP Policy Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/iap.md.txt#iap.editor) (`roles/iap.editor`) [IAP Policy Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iap.md.txt#iap.viewer) (`roles/iap.viewer`) [Identity Toolkit editor](https://docs.cloud.google.com/iam/docs/roles-permissions/identitytoolkit.md.txt#identitytoolkit.editor) (`roles/identitytoolkit.editor`) [Cloud IDS Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/ids.md.txt#ids.admin) (`roles/ids.admin`) [Cloud IDS Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/ids.md.txt#ids.editor) (`roles/ids.editor`) [Cloud IDS Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/ids.md.txt#ids.viewer) (`roles/ids.viewer`) [Integrations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.admin) (`roles/integrations.admin`) [Integrations Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.viewer) (`roles/integrations.viewer`) [Issuerswitch Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/issuerswitch.md.txt#issuerswitch.admin) (`roles/issuerswitch.admin`) [Issuerswitch Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/issuerswitch.md.txt#issuerswitch.viewer) (`roles/issuerswitch.viewer`) [Config Controller Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/krmapihosting.md.txt#krmapihosting.admin) (`roles/krmapihosting.admin`) [Config Controller Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/krmapihosting.md.txt#krmapihosting.editor) (`roles/krmapihosting.editor`) [Config Controller Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/krmapihosting.md.txt#krmapihosting.viewer) (`roles/krmapihosting.viewer`) [Kubernetesmetadata Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/kubernetesmetadata.md.txt#kubernetesmetadata.admin) (`roles/kubernetesmetadata.admin`) [Kubernetesmetadata Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/kubernetesmetadata.md.txt#kubernetesmetadata.viewer) (`roles/kubernetesmetadata.viewer`) [Cloud License Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/licensemanager.md.txt#licensemanager.admin) (`roles/licensemanager.admin`) [Cloud License Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/licensemanager.md.txt#licensemanager.viewer) (`roles/licensemanager.viewer`) [Cloud Life Sciences Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/lifesciences.md.txt#lifesciences.viewer) (`roles/lifesciences.viewer`) [Live Stream Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/livestream.md.txt#livestream.admin) (`roles/livestream.admin`) [Live Stream Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/livestream.md.txt#livestream.editor) (`roles/livestream.editor`) [Live Stream Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/livestream.md.txt#livestream.viewer) (`roles/livestream.viewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Private Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.privateLogViewer) (`roles/logging.privateLogViewer`) [Logs Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.viewer) (`roles/logging.viewer`) [Looker Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/looker.md.txt#looker.admin) (`roles/looker.admin`) [Looker Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/looker.md.txt#looker.viewer) (`roles/looker.viewer`) [Google Cloud Managed Lustre Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/lustre.md.txt#lustre.admin) (`roles/lustre.admin`) [Google Cloud Managed Lustre Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/lustre.md.txt#lustre.viewer) (`roles/lustre.viewer`) [Maintenance Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/maintenance.md.txt#maintenance.admin) (`roles/maintenance.admin`) [Maintenance API Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/maintenance.md.txt#maintenance.viewer) (`roles/maintenance.viewer`) [Managed Flink Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/managedflink.md.txt#managedflink.admin) (`roles/managedflink.admin`) [Managed Flink Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/managedflink.md.txt#managedflink.viewer) (`roles/managedflink.viewer`) [Google Cloud Managed Identities Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/managedidentities.md.txt#managedidentities.admin) (`roles/managedidentities.admin`) [Google Cloud Managed Identities Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/managedidentities.md.txt#managedidentities.editor) (`roles/managedidentities.editor`) [Google Cloud Managed Identities Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/managedidentities.md.txt#managedidentities.viewer) (`roles/managedidentities.viewer`) [Managed Kafka Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/managedkafka.md.txt#managedkafka.admin) (`roles/managedkafka.admin`) [Managed Kafka Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/managedkafka.md.txt#managedkafka.viewer) (`roles/managedkafka.viewer`) [Mandiant Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/mandiant.md.txt#mandiant.admin) (`roles/mandiant.admin`) [Mandiant Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/mandiant.md.txt#mandiant.viewer) (`roles/mandiant.viewer`) [Maps API Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/mapsadmin.md.txt#mapsadmin.admin) (`roles/mapsadmin.admin`) [Maps API Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/mapsadmin.md.txt#mapsadmin.viewer) (`roles/mapsadmin.viewer`) [Mapsanalytics Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/mapsanalytics.md.txt#mapsanalytics.admin) (`roles/mapsanalytics.admin`) [Maps Analytics Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/mapsanalytics.md.txt#mapsanalytics.viewer) (`roles/mapsanalytics.viewer`) [Maps Platform Datasets Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/mapsplatformdatasets.md.txt#mapsplatformdatasets.admin) (`roles/mapsplatformdatasets.admin`) [Maps Platform Datasets Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/mapsplatformdatasets.md.txt#mapsplatformdatasets.viewer) (`roles/mapsplatformdatasets.viewer`) [Marketplace Solutions Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/marketplacesolutions.md.txt#marketplacesolutions.admin) (`roles/marketplacesolutions.admin`) [Marketplace Solutions Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/marketplacesolutions.md.txt#marketplacesolutions.editor) (`roles/marketplacesolutions.editor`) [Marketplace Solutions Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/marketplacesolutions.md.txt#marketplacesolutions.viewer) (`roles/marketplacesolutions.viewer`) [MCP Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/mcp.md.txt#mcp.admin) (`roles/mcp.admin`) [MCP Tool User](https://docs.cloud.google.com/iam/docs/roles-permissions/mcp.md.txt#mcp.toolUser) (`roles/mcp.toolUser`) [Cloud Memorystore Memcached Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/memcache.md.txt#memcache.admin) (`roles/memcache.admin`) [Cloud Memorystore Memcached Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/memcache.md.txt#memcache.editor) (`roles/memcache.editor`) [Cloud Memorystore Memcached Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/memcache.md.txt#memcache.viewer) (`roles/memcache.viewer`) [Memorystore Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/memorystore.md.txt#memorystore.admin) (`roles/memorystore.admin`) [Memorystore Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/memorystore.md.txt#memorystore.viewer) (`roles/memorystore.viewer`) [Dataproc Metastore Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/metastore.md.txt#metastore.admin) (`roles/metastore.admin`) [Dataproc Metastore Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/metastore.md.txt#metastore.editor) (`roles/metastore.editor`) [Dataproc Metastore Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/metastore.md.txt#metastore.viewer) (`roles/metastore.viewer`) [Migration Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/migrationcenter.md.txt#migrationcenter.admin) (`roles/migrationcenter.admin`) [Migration Center Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/migrationcenter.md.txt#migrationcenter.viewer) (`roles/migrationcenter.viewer`) [AI Platform Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/ml.md.txt#ml.admin) (`roles/ml.admin`) [AI Platform Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/ml.md.txt#ml.editor) (`roles/ml.editor`) [AI Platform Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/ml.md.txt#ml.viewer) (`roles/ml.viewer`) [Model Armor Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.admin) (`roles/modelarmor.admin`) [Model Armor Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.editor) (`roles/modelarmor.editor`) [Model Armor Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.viewer) (`roles/modelarmor.viewer`) [Monitoring Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/monitoring.md.txt#monitoring.admin) (`roles/monitoring.admin`) [Monitoring Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/monitoring.md.txt#monitoring.editor) (`roles/monitoring.editor`) [Monitoring Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/monitoring.md.txt#monitoring.viewer) (`roles/monitoring.viewer`) [Navigation Connect Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/navigationconnect.md.txt#navigationconnect.admin) (`roles/navigationconnect.admin`) [Navigation Connect Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/navigationconnect.md.txt#navigationconnect.viewer) (`roles/navigationconnect.viewer`) [Nestconsole Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/nestconsole.md.txt#nestconsole.admin) (`roles/nestconsole.admin`) [Nestconsole Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/nestconsole.md.txt#nestconsole.editor) (`roles/nestconsole.editor`) [Nestconsole Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/nestconsole.md.txt#nestconsole.viewer) (`roles/nestconsole.viewer`) [Google Cloud NetApp Volumes Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/netapp.md.txt#netapp.admin) (`roles/netapp.admin`) [Google Cloud NetApp Volumes Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/netapp.md.txt#netapp.viewer) (`roles/netapp.viewer`) [NetApp Cloud Volumes Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/netappcloudvolumes.md.txt#netappcloudvolumes.admin) (`roles/netappcloudvolumes.admin`) [NetApp Cloud Volumes Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/netappcloudvolumes.md.txt#netappcloudvolumes.viewer) (`roles/netappcloudvolumes.viewer`) [Network Connectivity Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.editor) (`roles/networkconnectivity.editor`) [Network Management Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkmanagement.md.txt#networkmanagement.admin) (`roles/networkmanagement.admin`) [Network Management Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networkmanagement.md.txt#networkmanagement.editor) (`roles/networkmanagement.editor`) [Network Management Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networkmanagement.md.txt#networkmanagement.viewer) (`roles/networkmanagement.viewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Network Services Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkservices.md.txt#networkservices.admin) (`roles/networkservices.admin`) [Network Services Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networkservices.md.txt#networkservices.editor) (`roles/networkservices.editor`) [Network Services Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networkservices.md.txt#networkservices.viewer) (`roles/networkservices.viewer`) [Notebooks Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/notebooks.md.txt#notebooks.admin) (`roles/notebooks.admin`) [Notebooks Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/notebooks.md.txt#notebooks.editor) (`roles/notebooks.editor`) [Notebooks Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/notebooks.md.txt#notebooks.viewer) (`roles/notebooks.viewer`) [OAuth Config Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/oauthconfig.md.txt#oauthconfig.editor) (`roles/oauthconfig.editor`) [OAuth Config Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oauthconfig.md.txt#oauthconfig.viewer) (`roles/oauthconfig.viewer`) [On-Demand Scanning Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/ondemandscanning.md.txt#ondemandscanning.viewer) (`roles/ondemandscanning.viewer`) [Ops Config Monitoring Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/monitoring.md.txt#opsconfigmonitoring.admin) (`roles/opsconfigmonitoring.admin`) [Ops Config Monitoring Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/monitoring.md.txt#opsconfigmonitoring.viewer) (`roles/opsconfigmonitoring.viewer`) [Oracle Database@Google Cloud admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.admin) (`roles/oracledatabase.admin`) [Oracle Database@Google Cloud viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.viewer) (`roles/oracledatabase.viewer`) [Parallelstore Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/parallelstore.md.txt#parallelstore.admin) (`roles/parallelstore.admin`) [Parallelstore Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/parallelstore.md.txt#parallelstore.viewer) (`roles/parallelstore.viewer`) [Parameter Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/parametermanager.md.txt#parametermanager.admin) (`roles/parametermanager.admin`) [Parameter Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/parametermanager.md.txt#parametermanager.editor) (`roles/parametermanager.editor`) [Parameter Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/parametermanager.md.txt#parametermanager.viewer) (`roles/parametermanager.viewer`) [Paymentsresellersubscription Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/paymentsresellersubscription.md.txt#paymentsresellersubscription.admin) (`roles/paymentsresellersubscription.admin`) [Paymentsresellersubscription Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/paymentsresellersubscription.md.txt#paymentsresellersubscription.viewer) (`roles/paymentsresellersubscription.viewer`) [Policyanalyzer Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/policyanalyzer.md.txt#policyanalyzer.admin) (`roles/policyanalyzer.admin`) [Policyanalyzer Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/policyanalyzer.md.txt#policyanalyzer.viewer) (`roles/policyanalyzer.viewer`) [Policyremediatormanager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/policyremediatormanager.md.txt#policyremediatormanager.admin) (`roles/policyremediatormanager.admin`) [Policyremediatormanager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/policyremediatormanager.md.txt#policyremediatormanager.viewer) (`roles/policyremediatormanager.viewer`) [Policysimulator Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/policysimulator.md.txt#policysimulator.viewer) (`roles/policysimulator.viewer`) [CA Service Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/privateca.md.txt#privateca.admin) (`roles/privateca.admin`) [CA Service Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/privateca.md.txt#privateca.editor) (`roles/privateca.editor`) [CA Service Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/privateca.md.txt#privateca.viewer) (`roles/privateca.viewer`) [Privileged Access Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/privilegedaccessmanager.md.txt#privilegedaccessmanager.admin) (`roles/privilegedaccessmanager.admin`) [Privileged Access Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/privilegedaccessmanager.md.txt#privilegedaccessmanager.editor) (`roles/privilegedaccessmanager.editor`) [Privileged Access Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/privilegedaccessmanager.md.txt#privilegedaccessmanager.viewer) (`roles/privilegedaccessmanager.viewer`) [Beacon Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/proximitybeacon.md.txt#proximitybeacon.admin) (`roles/proximitybeacon.admin`) [Beacon Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/proximitybeacon.md.txt#proximitybeacon.editor) (`roles/proximitybeacon.editor`) [Beacon Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/proximitybeacon.md.txt#proximitybeacon.viewer) (`roles/proximitybeacon.viewer`) [Publicca Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/publicca.md.txt#publicca.admin) (`roles/publicca.admin`) [Pub/Sub Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/pubsub.md.txt#pubsub.admin) (`roles/pubsub.admin`) [Pub/Sub Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/pubsub.md.txt#pubsub.editor) (`roles/pubsub.editor`) [Pub/Sub Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/pubsub.md.txt#pubsub.viewer) (`roles/pubsub.viewer`) [Subscription Linking Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/readerrevenuesubscriptionlinking.md.txt#readerrevenuesubscriptionlinking.admin) (`roles/readerrevenuesubscriptionlinking.admin`) [Subscription Linking Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/readerrevenuesubscriptionlinking.md.txt#readerrevenuesubscriptionlinking.viewer) (`roles/readerrevenuesubscriptionlinking.viewer`) [reCAPTCHA Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recaptchaenterprise.md.txt#recaptchaenterprise.admin) (`roles/recaptchaenterprise.admin`) [reCAPTCHA Enterprise Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/recaptchaenterprise.md.txt#recaptchaenterprise.editor) (`roles/recaptchaenterprise.editor`) [reCAPTCHA Enterprise Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recaptchaenterprise.md.txt#recaptchaenterprise.viewer) (`roles/recaptchaenterprise.viewer`) [Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.admin) (`roles/recommender.admin`) [Recommender Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.editor) (`roles/recommender.editor`) [Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.viewer) (`roles/recommender.viewer`) [Cloud Memorystore Redis Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/redis.md.txt#redis.admin) (`roles/redis.admin`) [Cloud Memorystore Redis Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/redis.md.txt#redis.editor) (`roles/redis.editor`) [Cloud Memorystore Redis Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/redis.md.txt#redis.viewer) (`roles/redis.viewer`) [Redis Enterprise Cloud Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/redisenterprisecloud.md.txt#redisenterprisecloud.admin) (`roles/redisenterprisecloud.admin`) [Redis Enterprise Cloud Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/redisenterprisecloud.md.txt#redisenterprisecloud.viewer) (`roles/redisenterprisecloud.viewer`) [Remotebuildexecution Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/remotebuildexecution.md.txt#remotebuildexecution.admin) (`roles/remotebuildexecution.admin`) [Remotebuildexecution Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/remotebuildexecution.md.txt#remotebuildexecution.editor) (`roles/remotebuildexecution.editor`) [Remotebuildexecution Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/remotebuildexecution.md.txt#remotebuildexecution.viewer) (`roles/remotebuildexecution.viewer`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Organization Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationAdmin) (`roles/resourcemanager.organizationAdmin`) [Project IAM Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.projectIamAdmin) (`roles/resourcemanager.projectIamAdmin`) [Project Mover](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.projectMover) (`roles/resourcemanager.projectMover`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [Resource Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.viewer) (`roles/resourcemanager.viewer`) [Retail Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/retail.md.txt#retail.admin) (`roles/retail.admin`) [Retail Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/retail.md.txt#retail.editor) (`roles/retail.editor`) [Retail Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/retail.md.txt#retail.viewer) (`roles/retail.viewer`) [Risk Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/riskmanager.md.txt#riskmanager.admin) (`roles/riskmanager.admin`) [Risk Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/riskmanager.md.txt#riskmanager.editor) (`roles/riskmanager.editor`) [Risk Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/riskmanager.md.txt#riskmanager.viewer) (`roles/riskmanager.viewer`) [Rapid Migration Assessment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/rapidmigrationassessment.md.txt#rma.admin) (`roles/rma.admin`) [Rapid Migration Assessment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/rapidmigrationassessment.md.txt#rma.viewer) (`roles/rma.viewer`) [Routeoptimization Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/routeoptimization.md.txt#routeoptimization.admin) (`roles/routeoptimization.admin`) [Route Optimization Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/routeoptimization.md.txt#routeoptimization.editor) (`roles/routeoptimization.editor`) [Route Optimization Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/routeoptimization.md.txt#routeoptimization.viewer) (`roles/routeoptimization.viewer`) [Cloud Run Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/run.md.txt#run.admin) (`roles/run.admin`) [Cloud Run Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/run.md.txt#run.developer) (`roles/run.developer`) [Cloud Run Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/run.md.txt#run.editor) (`roles/run.editor`) [Cloud Run Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/run.md.txt#run.viewer) (`roles/run.viewer`) [Runapps Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/runapps.md.txt#runapps.admin) (`roles/runapps.admin`) [Serverless Integrations Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/runapps.md.txt#runapps.viewer) (`roles/runapps.viewer`) [Runtimeconfig Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/runtimeconfig.md.txt#runtimeconfig.editor) (`roles/runtimeconfig.editor`) [Runtimeconfig Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/runtimeconfig.md.txt#runtimeconfig.viewer) (`roles/runtimeconfig.viewer`) [SaaS Config Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/saasconfig.md.txt#saasconfig.viewer) (`roles/saasconfig.viewer`) [SaaS Service Management Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/saasservicemgmt.md.txt#saasservicemgmt.admin) (`roles/saasservicemgmt.admin`) [SaaS Service Management Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/saasservicemgmt.md.txt#saasservicemgmt.viewer) (`roles/saasservicemgmt.viewer`) [Secret Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/secretmanager.md.txt#secretmanager.admin) (`roles/secretmanager.admin`) [Secret Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/secretmanager.md.txt#secretmanager.editor) (`roles/secretmanager.editor`) [Secret Manager Secret Accessor](https://docs.cloud.google.com/iam/docs/roles-permissions/secretmanager.md.txt#secretmanager.secretAccessor) (`roles/secretmanager.secretAccessor`) [Secret Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/secretmanager.md.txt#secretmanager.viewer) (`roles/secretmanager.viewer`) [Secured Landing Zone Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securedlandingzone.md.txt#securedlandingzone.admin) (`roles/securedlandingzone.admin`) [Secured Landing Zone Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securedlandingzone.md.txt#securedlandingzone.viewer) (`roles/securedlandingzone.viewer`) [Secure Source Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.admin) (`roles/securesourcemanager.admin`) [Secure Source Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.editor) (`roles/securesourcemanager.editor`) [Secure Source Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.viewer) (`roles/securesourcemanager.viewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [Security Center Management Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.admin) (`roles/securitycentermanagement.admin`) [Security Center Management Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.editor) (`roles/securitycentermanagement.editor`) [Security Center Management Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.viewer) (`roles/securitycentermanagement.viewer`) [Service Consumer Management Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/serviceconsumermanagement.md.txt#serviceconsumermanagement.admin) (`roles/serviceconsumermanagement.admin`) [Service Consumer Management Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/serviceconsumermanagement.md.txt#serviceconsumermanagement.viewer) (`roles/serviceconsumermanagement.viewer`) [Service Directory Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/servicedirectory.md.txt#servicedirectory.admin) (`roles/servicedirectory.admin`) [Service Directory Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/servicedirectory.md.txt#servicedirectory.editor) (`roles/servicedirectory.editor`) [Service Directory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/servicedirectory.md.txt#servicedirectory.viewer) (`roles/servicedirectory.viewer`) [Service Extensions Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/serviceextensions.md.txt#serviceextensions.admin) (`roles/serviceextensions.admin`) [Service Extensions Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/serviceextensions.md.txt#serviceextensions.editor) (`roles/serviceextensions.editor`) [Service Extensions Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/serviceextensions.md.txt#serviceextensions.viewer) (`roles/serviceextensions.viewer`) [Servicehealth Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/servicehealth.md.txt#servicehealth.admin) (`roles/servicehealth.admin`) [Personalized Service Health Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/servicehealth.md.txt#servicehealth.viewer) (`roles/servicehealth.viewer`) [Service Management Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/servicemanagement.md.txt#servicemanagement.admin) (`roles/servicemanagement.admin`) [Service Management Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/servicemanagement.md.txt#servicemanagement.editor) (`roles/servicemanagement.editor`) [Service Management Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/servicemanagement.md.txt#servicemanagement.viewer) (`roles/servicemanagement.viewer`) [Service Networking Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/servicenetworking.md.txt#servicenetworking.admin) (`roles/servicenetworking.admin`) [Service Networking Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/servicenetworking.md.txt#servicenetworking.editor) (`roles/servicenetworking.editor`) [Service Networking Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/servicenetworking.md.txt#servicenetworking.viewer) (`roles/servicenetworking.viewer`) [Source Repository Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/source.md.txt#source.editor) (`roles/source.editor`) [Source Repository Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/source.md.txt#source.viewer) (`roles/source.viewer`) [Cloud Spanner Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/spanner.md.txt#spanner.admin) (`roles/spanner.admin`) [Cloud Spanner Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/spanner.md.txt#spanner.editor) (`roles/spanner.editor`) [Cloud Spanner Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/spanner.md.txt#spanner.viewer) (`roles/spanner.viewer`) [Stackdriver Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/monitoring.md.txt#stackdriver.admin) (`roles/stackdriver.admin`) [Stackdriver Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/monitoring.md.txt#stackdriver.viewer) (`roles/stackdriver.viewer`) [Storage Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/storage.md.txt#storage.admin) (`roles/storage.admin`) [Storage Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/storage.md.txt#storage.editor) (`roles/storage.editor`) [Storage Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/storage.md.txt#storage.folderAdmin) (`roles/storage.folderAdmin`) [Storage Object Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/storage.md.txt#storage.objectAdmin) (`roles/storage.objectAdmin`) [Storage Object Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/storage.md.txt#storage.objectCreator) (`roles/storage.objectCreator`) [Storage Object User](https://docs.cloud.google.com/iam/docs/roles-permissions/storage.md.txt#storage.objectUser) (`roles/storage.objectUser`) [Storage Object Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/storage.md.txt#storage.objectViewer) (`roles/storage.objectViewer`) [Storage Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/storage.md.txt#storage.viewer) (`roles/storage.viewer`) [Storage Batch Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/storagebatchoperations.md.txt#storagebatchoperations.admin) (`roles/storagebatchoperations.admin`) [Storage Batch Operations Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/storagebatchoperations.md.txt#storagebatchoperations.viewer) (`roles/storagebatchoperations.viewer`) [Storage Insights Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/storageinsights.md.txt#storageinsights.admin) (`roles/storageinsights.admin`) [Storage Insights Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/storageinsights.md.txt#storageinsights.viewer) (`roles/storageinsights.viewer`) [Storage Transfer Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/storagetransfer.md.txt#storagetransfer.admin) (`roles/storagetransfer.admin`) [Storage Transfer Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/storagetransfer.md.txt#storagetransfer.viewer) (`roles/storagetransfer.viewer`) [Stream Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/stream.md.txt#stream.admin) (`roles/stream.admin`) [Stream Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/stream.md.txt#stream.viewer) (`roles/stream.viewer`) [Subscribewithgoogledeveloper Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/subscribewithgoogledeveloper.md.txt#subscribewithgoogledeveloper.admin) (`roles/subscribewithgoogledeveloper.admin`) [Subscribewithgoogledeveloper Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/subscribewithgoogledeveloper.md.txt#subscribewithgoogledeveloper.viewer) (`roles/subscribewithgoogledeveloper.viewer`) [Telco Automation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.admin) (`roles/telcoautomation.admin`) [Telcoautomation Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.editor) (`roles/telcoautomation.editor`) [Telcoautomation Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.viewer) (`roles/telcoautomation.viewer`) [Telemetry Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telemetry.md.txt#telemetry.admin) (`roles/telemetry.admin`) [Telemetry Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/telemetry.md.txt#telemetry.editor) (`roles/telemetry.editor`) [TPU Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#tpu.admin) (`roles/tpu.admin`) [TPU Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#tpu.editor) (`roles/tpu.editor`) [TPU Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#tpu.viewer) (`roles/tpu.viewer`) [Trafficdirector Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#trafficdirector.admin) (`roles/trafficdirector.admin`) [Trafficdirector Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#trafficdirector.viewer) (`roles/trafficdirector.viewer`) [Transcoder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/transcoder.md.txt#transcoder.admin) (`roles/transcoder.admin`) [Transcoder Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/transcoder.md.txt#transcoder.editor) (`roles/transcoder.editor`) [Transcoder Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/transcoder.md.txt#transcoder.viewer) (`roles/transcoder.viewer`) [Transfer Appliance Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/transferappliance.md.txt#transferappliance.admin) (`roles/transferappliance.admin`) [Transfer Appliance Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/transferappliance.md.txt#transferappliance.viewer) (`roles/transferappliance.viewer`) [Translation Hub Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/translationhub.md.txt#translationhub.admin) (`roles/translationhub.admin`) [Translation Hub Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/translationhub.md.txt#translationhub.viewer) (`roles/translationhub.viewer`) [Vector Search Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/vectorsearch.md.txt#vectorsearch.admin) (`roles/vectorsearch.admin`) [Vector Search Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/vectorsearch.md.txt#vectorsearch.viewer) (`roles/vectorsearch.viewer`) [Video Stitcher Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/videostitcher.md.txt#videostitcher.admin) (`roles/videostitcher.admin`) [Video Stitcher Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/videostitcher.md.txt#videostitcher.viewer) (`roles/videostitcher.viewer`) [VisionAI Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/visionai.md.txt#visionai.admin) (`roles/visionai.admin`) [VisionAI Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/visionai.md.txt#visionai.editor) (`roles/visionai.editor`) [VisionAI Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/visionai.md.txt#visionai.viewer) (`roles/visionai.viewer`) [Visual Inspection AI Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/visualinspection.md.txt#visualinspection.admin) (`roles/visualinspection.admin`) [VM Migration Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/vmmigration.md.txt#vmmigration.admin) (`roles/vmmigration.admin`) [VM Migration Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/vmmigration.md.txt#vmmigration.viewer) (`roles/vmmigration.viewer`) [Vmwareengine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/vmwareengine.md.txt#vmwareengine.admin) (`roles/vmwareengine.admin`) [Vmwareengine Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/vmwareengine.md.txt#vmwareengine.editor) (`roles/vmwareengine.editor`) [Vmwareengine Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/vmwareengine.md.txt#vmwareengine.viewer) (`roles/vmwareengine.viewer`) [Serverless VPC Access Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/vpcaccess.md.txt#vpcaccess.admin) (`roles/vpcaccess.admin`) [Serverless VPC Access User](https://docs.cloud.google.com/iam/docs/roles-permissions/vpcaccess.md.txt#vpcaccess.user) (`roles/vpcaccess.user`) [Serverless VPC Access Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/vpcaccess.md.txt#vpcaccess.viewer) (`roles/vpcaccess.viewer`) [Workflows Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/workflows.md.txt#workflows.admin) (`roles/workflows.admin`) [Workflows Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/workflows.md.txt#workflows.editor) (`roles/workflows.editor`) [Workflows Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/workflows.md.txt#workflows.viewer) (`roles/workflows.viewer`) [Workload Certificate Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadcertificate.md.txt#workloadcertificate.admin) (`roles/workloadcertificate.admin`) [Workload Certificate Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadcertificate.md.txt#workloadcertificate.viewer) (`roles/workloadcertificate.viewer`) [Workload Identity API Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadidentity.md.txt#workloadidentity.admin) (`roles/workloadidentity.admin`) [Workload Identity API Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadidentity.md.txt#workloadidentity.viewer) (`roles/workloadidentity.viewer`) [Workload Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadmanager.md.txt#workloadmanager.admin) (`roles/workloadmanager.admin`) [Workload Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadmanager.md.txt#workloadmanager.viewer) (`roles/workloadmanager.viewer`) [Cloud Workstations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/workstations.md.txt#workstations.admin) (`roles/workstations.admin`) [Cloud Workstations Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/workstations.md.txt#workstations.editor) (`roles/workstations.editor`) [Access Approval Approver](https://docs.cloud.google.com/iam/docs/roles-permissions/accessapproval.md.txt#accessapproval.approver) (`roles/accessapproval.approver`) [Access Approval Config Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/accessapproval.md.txt#accessapproval.configEditor) (`roles/accessapproval.configEditor`) [Access Approval Invalidator](https://docs.cloud.google.com/iam/docs/roles-permissions/accessapproval.md.txt#accessapproval.invalidator) (`roles/accessapproval.invalidator`) [Access Context Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.policyEditor) (`roles/accesscontextmanager.policyEditor`) [Access Context Manager Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.policyReader) (`roles/accesscontextmanager.policyReader`) [VPC Service Controls Troubleshooter Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.vpcScTroubleshooterViewer) (`roles/accesscontextmanager.vpcScTroubleshooterViewer`) [Colab Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.colabEnterpriseAdmin) (`roles/aiplatform.colabEnterpriseAdmin`) [Colab Enterprise User](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.colabEnterpriseUser) (`roles/aiplatform.colabEnterpriseUser`) [Agent Platform Feature Store EntityType owner](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.entityTypeOwner) (`roles/aiplatform.entityTypeOwner`) [Agent Platform Feature Store Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.featurestoreAdmin) (`roles/aiplatform.featurestoreAdmin`) [Agent Platform Feature Store Data Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.featurestoreDataViewer) (`roles/aiplatform.featurestoreDataViewer`) [Agent Platform Feature Store Data Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.featurestoreDataWriter) (`roles/aiplatform.featurestoreDataWriter`) [Agent Platform Feature Store Resource Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.featurestoreResourceViewer) (`roles/aiplatform.featurestoreResourceViewer`) [Agent Platform Feature Store User](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.featurestoreUser) (`roles/aiplatform.featurestoreUser`) [AlloyDB Client](https://docs.cloud.google.com/iam/docs/roles-permissions/alloydb.md.txt#alloydb.client) (`roles/alloydb.client`) [AlloyDB Database User](https://docs.cloud.google.com/iam/docs/roles-permissions/alloydb.md.txt#alloydb.databaseUser) (`roles/alloydb.databaseUser`) [Analytics Hub Listing Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/analyticshub.md.txt#analyticshub.listingAdmin) (`roles/analyticshub.listingAdmin`) [Analytics Hub Publisher](https://docs.cloud.google.com/iam/docs/roles-permissions/analyticshub.md.txt#analyticshub.publisher) (`roles/analyticshub.publisher`) [Analytics Hub Subscriber](https://docs.cloud.google.com/iam/docs/roles-permissions/analyticshub.md.txt#analyticshub.subscriber) (`roles/analyticshub.subscriber`) [Analytics Hub Subscription Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/analyticshub.md.txt#analyticshub.subscriptionOwner) (`roles/analyticshub.subscriptionOwner`) [Apigee Analytics Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.analyticsEditor) (`roles/apigee.analyticsEditor`) [Apigee Analytics Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.analyticsViewer) (`roles/apigee.analyticsViewer`) [Apigee API Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.apiReaderV2) (`roles/apigee.apiReaderV2`) [Apigee Developer Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.developerAdmin) (`roles/apigee.developerAdmin`) [Apigee Environment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.environmentAdmin) (`roles/apigee.environmentAdmin`) [Apigee Monetization Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.monetizationAdmin) (`roles/apigee.monetizationAdmin`) [Apigee Portal Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.portalAdmin) (`roles/apigee.portalAdmin`) [Apigee Read-only Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.readOnlyAdmin) (`roles/apigee.readOnlyAdmin`) [Apigee Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.securityAdmin) (`roles/apigee.securityAdmin`) [Apigee Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.securityViewer) (`roles/apigee.securityViewer`) [Apigee Space Console User](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.spaceConsoleUser) (`roles/apigee.spaceConsoleUser`) [Cloud Apigee Registry Worker](https://docs.cloud.google.com/iam/docs/roles-permissions/apigeeregistry.md.txt#apigeeregistry.worker) (`roles/apigeeregistry.worker`) [Cloud API hub Addons Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apihub.md.txt#apihub.addonsAdmin) (`roles/apihub.addonsAdmin`) [Cloud API hub Attributes Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apihub.md.txt#apihub.attributeAdmin) (`roles/apihub.attributeAdmin`) [Cloud API hub Plugins Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apihub.md.txt#apihub.pluginAdmin) (`roles/apihub.pluginAdmin`) [Cloud API hub Provisioning Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apihub.md.txt#apihub.provisioningAdmin) (`roles/apihub.provisioningAdmin`) [App Engine Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/appengine.md.txt#appengine.appCreator) (`roles/appengine.appCreator`) [App Engine Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/appengine.md.txt#appengine.appViewer) (`roles/appengine.appViewer`) [App Engine Code Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/appengine.md.txt#appengine.codeViewer) (`roles/appengine.codeViewer`) [App Engine Managed VM Debug Access](https://docs.cloud.google.com/iam/docs/roles-permissions/appengine.md.txt#appengine.debugger) (`roles/appengine.debugger`) [App Engine Deployer](https://docs.cloud.google.com/iam/docs/roles-permissions/appengine.md.txt#appengine.deployer) (`roles/appengine.deployer`) [App Engine Memcache Data Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/appengine.md.txt#appengine.memcacheDataAdmin) (`roles/appengine.memcacheDataAdmin`) [App Engine Service Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/appengine.md.txt#appengine.serviceAdmin) (`roles/appengine.serviceAdmin`) [App Management Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/apphub.md.txt#apphub.appManagementViewer) (`roles/apphub.appManagementViewer`) [Appliance troubleshooting commands approver](https://docs.cloud.google.com/iam/docs/roles-permissions/applianceactivation.md.txt#applianceactivation.approver) (`roles/applianceactivation.approver`) [Appliance troubleshooter](https://docs.cloud.google.com/iam/docs/roles-permissions/applianceactivation.md.txt#applianceactivation.troubleshooter) (`roles/applianceactivation.troubleshooter`) [Workspace Marketplace App Configuration Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/workspacemarketplace.md.txt#appmetadata.workspaceMarketplaceAppConfigurationAdmin) (`roles/appmetadata.workspaceMarketplaceAppConfigurationAdmin`) [Container Registry -\> Artifact Registry Migration Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/artifactregistry.md.txt#artifactregistry.containerRegistryMigrationAdmin) (`roles/artifactregistry.containerRegistryMigrationAdmin`) [Artifact Registry Create-on-Push Repository Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/artifactregistry.md.txt#artifactregistry.createOnPushRepoAdmin) (`roles/artifactregistry.createOnPushRepoAdmin`) [Artifact Registry Create-on-Push Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/artifactregistry.md.txt#artifactregistry.createOnPushWriter) (`roles/artifactregistry.createOnPushWriter`) [Artifact Registry Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/artifactregistry.md.txt#artifactregistry.reader) (`roles/artifactregistry.reader`) [Artifact Registry Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/artifactregistry.md.txt#artifactregistry.writer) (`roles/artifactregistry.writer`) [Assured OSS Project Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredoss.md.txt#assuredoss.projectAdmin) (`roles/assuredoss.projectAdmin`) [Assured OSS Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredoss.md.txt#assuredoss.reader) (`roles/assuredoss.reader`) [Assured OSS User](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredoss.md.txt#assuredoss.user) (`roles/assuredoss.user`) [Assured Workloads Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.reader) (`roles/assuredworkloads.reader`) [Audit Manager Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.auditor) (`roles/auditmanager.auditor`) [AutoML Predictor](https://docs.cloud.google.com/iam/docs/roles-permissions/automl.md.txt#automl.predictor) (`roles/automl.predictor`) [Recommendations AI Admin Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/automlrecommendations.md.txt#automlrecommendations.adminViewer) (`roles/automlrecommendations.adminViewer`) [Autoscaling Site Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/autoscaling.md.txt#autoscaling.sitesAdmin) (`roles/autoscaling.sitesAdmin`) [Backup and DR Backup User](https://docs.cloud.google.com/iam/docs/roles-permissions/backupdr.md.txt#backupdr.backupUser) (`roles/backupdr.backupUser`) [Backup and DR Compute Engine Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/backupdr.md.txt#backupdr.computeEngineOperator) (`roles/backupdr.computeEngineOperator`) [Backup and DR Mount User](https://docs.cloud.google.com/iam/docs/roles-permissions/backupdr.md.txt#backupdr.mountUser) (`roles/backupdr.mountUser`) [Backup and DR Restore User](https://docs.cloud.google.com/iam/docs/roles-permissions/backupdr.md.txt#backupdr.restoreUser) (`roles/backupdr.restoreUser`) [Backup and DR User](https://docs.cloud.google.com/iam/docs/roles-permissions/backupdr.md.txt#backupdr.user) (`roles/backupdr.user`) [Backup and DR User V2](https://docs.cloud.google.com/iam/docs/roles-permissions/backupdr.md.txt#backupdr.userv2) (`roles/backupdr.userv2`) [Bare Metal Solution Instances Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/baremetalsolution.md.txt#baremetalsolution.instancesadmin) (`roles/baremetalsolution.instancesadmin`) [Bare Metal Solution Instances Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/baremetalsolution.md.txt#baremetalsolution.instancesviewer) (`roles/baremetalsolution.instancesviewer`) [Bare Metal Solution Storage Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/baremetalsolution.md.txt#baremetalsolution.storageadmin) (`roles/baremetalsolution.storageadmin`) [Batch Job Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/batch.md.txt#batch.jobsEditor) (`roles/batch.jobsEditor`) [Batch Job Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/batch.md.txt#batch.jobsViewer) (`roles/batch.jobsViewer`) [Batch ResourceAllowance Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/batch.md.txt#batch.resourceAllowancesEditor) (`roles/batch.resourceAllowancesEditor`) [Batch ResourceAllowance Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/batch.md.txt#batch.resourceAllowancesViewer) (`roles/batch.resourceAllowancesViewer`) [BigLake Metadata Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/biglake.md.txt#biglake.metadataViewer) (`roles/biglake.metadataViewer`) [BigQuery Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.securityAdmin) (`roles/bigquery.securityAdmin`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Binary Authorization Attestor Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/binaryauthorization.md.txt#binaryauthorization.attestorsAdmin) (`roles/binaryauthorization.attestorsAdmin`) [Binary Authorization Attestor Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/binaryauthorization.md.txt#binaryauthorization.attestorsEditor) (`roles/binaryauthorization.attestorsEditor`) [Binary Authorization Attestor Image Verifier](https://docs.cloud.google.com/iam/docs/roles-permissions/binaryauthorization.md.txt#binaryauthorization.attestorsVerifier) (`roles/binaryauthorization.attestorsVerifier`) [Binary Authorization Attestor Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/binaryauthorization.md.txt#binaryauthorization.attestorsViewer) (`roles/binaryauthorization.attestorsViewer`) [Binary Authorization Policy Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/binaryauthorization.md.txt#binaryauthorization.policyAdmin) (`roles/binaryauthorization.policyAdmin`) [Binary Authorization Policy Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/binaryauthorization.md.txt#binaryauthorization.policyEditor) (`roles/binaryauthorization.policyEditor`) [Binary Authorization Policy Evaluator](https://docs.cloud.google.com/iam/docs/roles-permissions/binaryauthorization.md.txt#binaryauthorization.policyEvaluator) (`roles/binaryauthorization.policyEvaluator`) [Binary Authorization Policy Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/binaryauthorization.md.txt#binaryauthorization.policyViewer) (`roles/binaryauthorization.policyViewer`) [Browser](https://docs.cloud.google.com/iam/docs/roles-permissions/browser.md.txt#browser) (`roles/browser`) [Capacity Planner](https://docs.cloud.google.com/iam/docs/roles-permissions/capacityplanner.md.txt#capacityplanner.planner) (`roles/capacityplanner.planner`) [Certificate Manager Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/certificatemanager.md.txt#certificatemanager.owner) (`roles/certificatemanager.owner`) [Gemini Enterprise for Customer Experience Agent Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.agentEditor) (`roles/ces.agentEditor`) [Gemini Enterprise for Customer Experience App Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.appEditor) (`roles/ces.appEditor`) [Gemini Enterprise for Customer Experience Deployment Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.deploymentEditor) (`roles/ces.deploymentEditor`) [Gemini Enterprise for Customer Experience Evals Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.evalsEditor) (`roles/ces.evalsEditor`) [Gemini Enterprise for Customer Experience Guardrails Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.guardrailsEditor) (`roles/ces.guardrailsEditor`) [Gemini Enterprise for Customer Experience Security Settings Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.securitySettingsEditor) (`roles/ces.securitySettingsEditor`) [Gemini Enterprise for Customer Experience Tools Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.toolsEditor) (`roles/ces.toolsEditor`) [Chronicle API Data Governor](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.dataGovernor) (`roles/chronicle.dataGovernor`) [Chronicle API Federation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.federationAdmin) (`roles/chronicle.federationAdmin`) [Chronicle API Federation Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.federationViewer) (`roles/chronicle.federationViewer`) [Chronicle API Limited Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.limitedViewer) (`roles/chronicle.limitedViewer`) [Chronicle API Restricted Data Access Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.restrictedDataAccessViewer) (`roles/chronicle.restrictedDataAccessViewer`) [Chronicle SOAR Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.soarAdmin) (`roles/chronicle.soarAdmin`) [Chronicle SOAR Remote Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.soarRemoteAgent) (`roles/chronicle.soarRemoteAgent`) [Chronicle SOAR Threat Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.soarThreatManager) (`roles/chronicle.soarThreatManager`) [Chronicle SOAR Vulnerability Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.soarVulnerabilityManager) (`roles/chronicle.soarVulnerabilityManager`) [Code Repository Indexes Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudaicompanion.md.txt#cloudaicompanion.codeRepositoryIndexesAdmin) (`roles/cloudaicompanion.codeRepositoryIndexesAdmin`) [Code Repository Indexes Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudaicompanion.md.txt#cloudaicompanion.codeRepositoryIndexesViewer) (`roles/cloudaicompanion.codeRepositoryIndexesViewer`) [Gemini Code Assist Tools Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudaicompanion.md.txt#cloudaicompanion.codeToolsAdmin) (`roles/cloudaicompanion.codeToolsAdmin`) [Gemini Code Assist Tools User](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudaicompanion.md.txt#cloudaicompanion.codeToolsUser) (`roles/cloudaicompanion.codeToolsUser`) [Cloud Build Approver](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.builds.approver) (`roles/cloudbuild.builds.approver`) [Cloud Build Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.builds.editor) (`roles/cloudbuild.builds.editor`) [Cloud Build Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.builds.viewer) (`roles/cloudbuild.builds.viewer`) [Cloud Build Connection Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.connectionAdmin) (`roles/cloudbuild.connectionAdmin`) [Cloud Build Connection Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.connectionViewer) (`roles/cloudbuild.connectionViewer`) [Cloud Build Integrations Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.integrationsEditor) (`roles/cloudbuild.integrationsEditor`) [Cloud Build Integrations Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.integrationsOwner) (`roles/cloudbuild.integrationsOwner`) [Cloud Build Integrations Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.integrationsViewer) (`roles/cloudbuild.integrationsViewer`) [Cloud Build WorkerPool Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.workerPoolEditor) (`roles/cloudbuild.workerPoolEditor`) [Cloud Build WorkerPool Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.workerPoolOwner) (`roles/cloudbuild.workerPoolOwner`) [Cloud Build WorkerPool Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.workerPoolViewer) (`roles/cloudbuild.workerPoolViewer`) [Cloud Deploy Approver](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddeploy.md.txt#clouddeploy.approver) (`roles/clouddeploy.approver`) [Cloud Deploy Custom Target Type Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddeploy.md.txt#clouddeploy.customTargetTypeAdmin) (`roles/clouddeploy.customTargetTypeAdmin`) [Cloud Deploy Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddeploy.md.txt#clouddeploy.developer) (`roles/clouddeploy.developer`) [Cloud Deploy Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddeploy.md.txt#clouddeploy.operator) (`roles/clouddeploy.operator`) [Cloud Deploy Policy Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddeploy.md.txt#clouddeploy.policyAdmin) (`roles/clouddeploy.policyAdmin`) [Cloud Deploy Policy Overrider](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddeploy.md.txt#clouddeploy.policyOverrider) (`roles/clouddeploy.policyOverrider`) [Cloud Deploy Releaser](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddeploy.md.txt#clouddeploy.releaser) (`roles/clouddeploy.releaser`) [Cloud Functions Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudfunctions.md.txt#cloudfunctions.developer) (`roles/cloudfunctions.developer`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Cloud Talent Solution Job Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudjobdiscovery.md.txt#cloudjobdiscovery.jobsEditor) (`roles/cloudjobdiscovery.jobsEditor`) [Cloud Talent Solution Job Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudjobdiscovery.md.txt#cloudjobdiscovery.jobsViewer) (`roles/cloudjobdiscovery.jobsViewer`) [Cloud Talent Solution Profile Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudjobdiscovery.md.txt#cloudjobdiscovery.profilesEditor) (`roles/cloudjobdiscovery.profilesEditor`) [Cloud Talent Solution Profile Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudjobdiscovery.md.txt#cloudjobdiscovery.profilesViewer) (`roles/cloudjobdiscovery.profilesViewer`) [Cloud KMS CryptoKey Decrypter](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.cryptoKeyDecrypter) (`roles/cloudkms.cryptoKeyDecrypter`) [Cloud KMS CryptoKey Decrypter Via Delegation](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.cryptoKeyDecrypterViaDelegation) (`roles/cloudkms.cryptoKeyDecrypterViaDelegation`) [Cloud KMS CryptoKey Encrypter](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.cryptoKeyEncrypter) (`roles/cloudkms.cryptoKeyEncrypter`) [Cloud KMS CryptoKey Encrypter/Decrypter Via Delegation](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.cryptoKeyEncrypterDecrypterViaDelegation) (`roles/cloudkms.cryptoKeyEncrypterDecrypterViaDelegation`) [Cloud KMS CryptoKey Encrypter Via Delegation](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.cryptoKeyEncrypterViaDelegation) (`roles/cloudkms.cryptoKeyEncrypterViaDelegation`) [Cloud KMS Crypto Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.cryptoOperator) (`roles/cloudkms.cryptoOperator`) [Cloud KMS CryptoKey Decapsulator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.decapsulator) (`roles/cloudkms.decapsulator`) [Cloud KMS EkmConnections Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.ekmConnectionsAdmin) (`roles/cloudkms.ekmConnectionsAdmin`) [Cloud KMS Expert PQ Asymmetric Signing Key Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.expertPqcSigner) (`roles/cloudkms.expertPqcSigner`) [Cloud KMS Expert Raw AES-CBC Key Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.expertRawAesCbc) (`roles/cloudkms.expertRawAesCbc`) [Cloud KMS Expert Raw AES-CTR Key Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.expertRawAesCtr) (`roles/cloudkms.expertRawAesCtr`) [Cloud KMS Expert Raw PKCS#1 Key Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.expertRawPKCS1) (`roles/cloudkms.expertRawPKCS1`) [Cloud KMS Importer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.importer) (`roles/cloudkms.importer`) [Cloud KMS CryptoKey Public Key Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.publicKeyViewer) (`roles/cloudkms.publicKeyViewer`) [Cloud KMS CryptoKey Signer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.signer) (`roles/cloudkms.signer`) [Cloud KMS CryptoKey Signer/Verifier](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.signerVerifier) (`roles/cloudkms.signerVerifier`) [Cloud KMS CryptoKey Verifier](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.verifier) (`roles/cloudkms.verifier`) [Velostrata Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudmigration.md.txt#cloudmigration.inframanager) (`roles/cloudmigration.inframanager`) [Cloud Number Registry IPAM Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudnumberregistry.md.txt#cloudnumberregistry.ipamAdmin) (`roles/cloudnumberregistry.ipamAdmin`) [Cloud Number Registry IPAM Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudnumberregistry.md.txt#cloudnumberregistry.ipamViewer) (`roles/cloudnumberregistry.ipamViewer`) [Catalog Consumer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprivatecatalog.md.txt#cloudprivatecatalog.consumer) (`roles/cloudprivatecatalog.consumer`) [Catalog Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprivatecatalog.md.txt#cloudprivatecatalogproducer.manager) (`roles/cloudprivatecatalogproducer.manager`) [Catalog Org Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprivatecatalog.md.txt#cloudprivatecatalogproducer.orgAdmin) (`roles/cloudprivatecatalogproducer.orgAdmin`) [Cloud Profiler User](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprofiler.md.txt#cloudprofiler.user) (`roles/cloudprofiler.user`) [Cloud Scheduler Job Runner](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudscheduler.md.txt#cloudscheduler.jobRunner) (`roles/cloudscheduler.jobRunner`) [Advisory Support Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsupport.md.txt#cloudsupport.advisorySupportEditor) (`roles/cloudsupport.advisorySupportEditor`) [Advisory Support Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsupport.md.txt#cloudsupport.advisorySupportViewer) (`roles/cloudsupport.advisorySupportViewer`) [Tech Support Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsupport.md.txt#cloudsupport.techSupportEditor) (`roles/cloudsupport.techSupportEditor`) [Tech Support Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsupport.md.txt#cloudsupport.techSupportViewer) (`roles/cloudsupport.techSupportViewer`) [Cloud Tasks Enqueuer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtasks.md.txt#cloudtasks.enqueuer) (`roles/cloudtasks.enqueuer`) [Cloud Tasks Queue Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtasks.md.txt#cloudtasks.queueAdmin) (`roles/cloudtasks.queueAdmin`) [Cloud Tasks Task Deleter](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtasks.md.txt#cloudtasks.taskDeleter) (`roles/cloudtasks.taskDeleter`) [Cloud Tasks Task Runner](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtasks.md.txt#cloudtasks.taskRunner) (`roles/cloudtasks.taskRunner`) [Firebase Test Lab Direct Access Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtestservice.md.txt#cloudtestservice.directAccessAdmin) (`roles/cloudtestservice.directAccessAdmin`) [Firebase Test Lab Direct Access Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtestservice.md.txt#cloudtestservice.directAccessViewer) (`roles/cloudtestservice.directAccessViewer`) [Firebase Test Lab Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtestservice.md.txt#cloudtestservice.testAdmin) (`roles/cloudtestservice.testAdmin`) [Firebase Test Lab Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtestservice.md.txt#cloudtestservice.testViewer) (`roles/cloudtestservice.testViewer`) [Commerce Business Enablement PaymentConfig Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/commercebusinessenablement.md.txt#commercebusinessenablement.paymentConfigAdmin) (`roles/commercebusinessenablement.paymentConfigAdmin`) [Commerce Business Enablement PaymentConfig Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/commercebusinessenablement.md.txt#commercebusinessenablement.paymentConfigViewer) (`roles/commercebusinessenablement.paymentConfigViewer`) [Commerce Business Enablement Reseller Discount Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/commercebusinessenablement.md.txt#commercebusinessenablement.resellerDiscountAdmin) (`roles/commercebusinessenablement.resellerDiscountAdmin`) [Commerce Business Enablement Reseller Discount Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/commercebusinessenablement.md.txt#commercebusinessenablement.resellerDiscountViewer) (`roles/commercebusinessenablement.resellerDiscountViewer`) [Governed Marketplace User](https://docs.cloud.google.com/iam/docs/roles-permissions/commerceorggovernance.md.txt#commerceorggovernance.user) (`roles/commerceorggovernance.user`) [Commerce Price Management Events Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/commercepricemanagement.md.txt#commercepricemanagement.eventsViewer) (`roles/commercepricemanagement.eventsViewer`) [Commerce Price Management Private Offers Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/commercepricemanagement.md.txt#commercepricemanagement.privateOffersAdmin) (`roles/commercepricemanagement.privateOffersAdmin`) [Environment and Storage Object Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.environmentAndStorageObjectAdmin) (`roles/composer.environmentAndStorageObjectAdmin`) [Environment and Storage Object User](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.environmentAndStorageObjectUser) (`roles/composer.environmentAndStorageObjectUser`) [Environment and Storage Object Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.environmentAndStorageObjectViewer) (`roles/composer.environmentAndStorageObjectViewer`) [Composer Worker](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.worker) (`roles/composer.worker`) [Compute Image User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.imageUser) (`roles/compute.imageUser`) [Compute Load Balancer Services User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.loadBalancerServiceUser) (`roles/compute.loadBalancerServiceUser`) [Compute Organization Firewall Policy Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.orgFirewallPolicyAdmin) (`roles/compute.orgFirewallPolicyAdmin`) [Compute Organization Firewall Policy User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.orgFirewallPolicyUser) (`roles/compute.orgFirewallPolicyUser`) [Compute Organization Security Policy Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.orgSecurityPolicyAdmin) (`roles/compute.orgSecurityPolicyAdmin`) [Compute Organization Security Policy User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.orgSecurityPolicyUser) (`roles/compute.orgSecurityPolicyUser`) [Compute Organization Resource Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.orgSecurityResourceAdmin) (`roles/compute.orgSecurityResourceAdmin`) [Compute packet mirroring admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.packetMirroringAdmin) (`roles/compute.packetMirroringAdmin`) [Compute packet mirroring user](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.packetMirroringUser) (`roles/compute.packetMirroringUser`) [Compute Public IP Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.publicIpAdmin) (`roles/compute.publicIpAdmin`) [Compute VM extension policy admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.vmExtensionPolicyAdmin) (`roles/compute.vmExtensionPolicyAdmin`) [Compute VM extension policy viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.vmExtensionPolicyViewer) (`roles/compute.vmExtensionPolicyViewer`) [Compute Shared VPC Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.xpnAdmin) (`roles/compute.xpnAdmin`) [ConfigDelivery Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/configdelivery.md.txt#configdelivery.configDeliveryAdmin) (`roles/configdelivery.configDeliveryAdmin`) [ConfigDelivery Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/configdelivery.md.txt#configdelivery.configDeliveryViewer) (`roles/configdelivery.configDeliveryViewer`) [Config Delivery Resource Bundle Publisher](https://docs.cloud.google.com/iam/docs/roles-permissions/configdelivery.md.txt#configdelivery.resourceBundlePublisher) (`roles/configdelivery.resourceBundlePublisher`) [Consumer Procurement Entitlement Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/consumerprocurement.md.txt#consumerprocurement.entitlementManager) (`roles/consumerprocurement.entitlementManager`) [Consumer Procurement Entitlement Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/consumerprocurement.md.txt#consumerprocurement.entitlementViewer) (`roles/consumerprocurement.entitlementViewer`) [Consumer Procurement Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/consumerprocurement.md.txt#consumerprocurement.procurementAdmin) (`roles/consumerprocurement.procurementAdmin`) [Consumer Procurement Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/consumerprocurement.md.txt#consumerprocurement.procurementViewer) (`roles/consumerprocurement.procurementViewer`) [Kubernetes Engine KMS Crypto Key User](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.cloudKmsKeyUser) (`roles/container.cloudKmsKeyUser`) [Container Analysis Notes Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/containeranalysis.md.txt#containeranalysis.notes.editor) (`roles/containeranalysis.notes.editor`) [Container Analysis Notes Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/containeranalysis.md.txt#containeranalysis.notes.viewer) (`roles/containeranalysis.notes.viewer`) [Container Analysis Occurrences Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/containeranalysis.md.txt#containeranalysis.occurrences.editor) (`roles/containeranalysis.occurrences.editor`) [Container Analysis Occurrences Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/containeranalysis.md.txt#containeranalysis.occurrences.viewer) (`roles/containeranalysis.occurrences.viewer`) [Content Warehouse Document Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/contentwarehouse.md.txt#contentwarehouse.documentAdmin) (`roles/contentwarehouse.documentAdmin`) [Content Warehouse document creator](https://docs.cloud.google.com/iam/docs/roles-permissions/contentwarehouse.md.txt#contentwarehouse.documentCreator) (`roles/contentwarehouse.documentCreator`) [Content Warehouse Document Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/contentwarehouse.md.txt#contentwarehouse.documentEditor) (`roles/contentwarehouse.documentEditor`) [Content Warehouse document schema viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/contentwarehouse.md.txt#contentwarehouse.documentSchemaViewer) (`roles/contentwarehouse.documentSchemaViewer`) [Content Warehouse Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/contentwarehouse.md.txt#contentwarehouse.documentViewer) (`roles/contentwarehouse.documentViewer`) [Database Insights monitoring viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/databaseinsights.md.txt#databaseinsights.monitoringViewer) (`roles/databaseinsights.monitoringViewer`) [Database Insights recommendation viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/databaseinsights.md.txt#databaseinsights.recommendationViewer) (`roles/databaseinsights.recommendationViewer`) [Studio Query Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/databasesconsole.md.txt#databasesconsole.studioQueryAdmin) (`roles/databasesconsole.studioQueryAdmin`) [Studio Query User](https://docs.cloud.google.com/iam/docs/roles-permissions/databasesconsole.md.txt#databasesconsole.studioQueryUser) (`roles/databasesconsole.studioQueryUser`) [Policy Tag Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.categoryAdmin) (`roles/datacatalog.categoryAdmin`) [DataCatalog Data Steward](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.dataSteward) (`roles/datacatalog.dataSteward`) [DataCatalog EntryGroup Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.entryGroupCreator) (`roles/datacatalog.entryGroupCreator`) [DataCatalog EntryGroup Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.entryGroupOwner) (`roles/datacatalog.entryGroupOwner`) [DataCatalog Entry Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.entryOwner) (`roles/datacatalog.entryOwner`) [DataCatalog Entry Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.entryViewer) (`roles/datacatalog.entryViewer`) [DataCatalog Migration Config Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.migrationConfigAdmin) (`roles/datacatalog.migrationConfigAdmin`) [DataCatalog Search Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.searchAdmin) (`roles/datacatalog.searchAdmin`) [Data Catalog TagTemplate Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.tagTemplateOwner) (`roles/datacatalog.tagTemplateOwner`) [Data Catalog TagTemplate User](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.tagTemplateUser) (`roles/datacatalog.tagTemplateUser`) [Data Catalog TagTemplate Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.tagTemplateViewer) (`roles/datacatalog.tagTemplateViewer`) [Connector Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dataconnectors.md.txt#dataconnectors.connectorAdmin) (`roles/dataconnectors.connectorAdmin`) [Dataflow Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.developer) (`roles/dataflow.developer`) [Code Commenter](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.codeCommenter) (`roles/dataform.codeCommenter`) [Code Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.codeCreator) (`roles/dataform.codeCreator`) [Code Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.codeEditor) (`roles/dataform.codeEditor`) [Code Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.codeOwner) (`roles/dataform.codeOwner`) [Code Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.codeViewer) (`roles/dataform.codeViewer`) [Team Folder Commenter](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.teamFolderCommenter) (`roles/dataform.teamFolderCommenter`) [Team Folder Contributor](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.teamFolderContributor) (`roles/dataform.teamFolderContributor`) [Team Folder Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.teamFolderOwner) (`roles/dataform.teamFolderOwner`) [Team Folder Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.teamFolderViewer) (`roles/dataform.teamFolderViewer`) [Cloud Data Fusion Accessor](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.accessor) (`roles/datafusion.accessor`) [Cloud Data Fusion Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.developer) (`roles/datafusion.developer`) [Cloud Data Fusion Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.operator) (`roles/datafusion.operator`) [Data Lineage Events Producer](https://docs.cloud.google.com/iam/docs/roles-permissions/datalineage.md.txt#datalineage.producer) (`roles/datalineage.producer`) [Data pipelines Invoker](https://docs.cloud.google.com/iam/docs/roles-permissions/datapipelines.md.txt#datapipelines.invoker) (`roles/datapipelines.invoker`) [Dataplex Aspect Type Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.aspectTypeOwner) (`roles/dataplex.aspectTypeOwner`) [Dataplex Aspect Type User](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.aspectTypeUser) (`roles/dataplex.aspectTypeUser`) [Dataplex Catalog Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.catalogAdmin) (`roles/dataplex.catalogAdmin`) [Dataplex Catalog Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.catalogEditor) (`roles/dataplex.catalogEditor`) [Dataplex Catalog Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.catalogViewer) (`roles/dataplex.catalogViewer`) [Dataplex Content Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.contentAdmin) (`roles/dataplex.contentAdmin`) [Dataplex Content Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.contentCreator) (`roles/dataplex.contentCreator`) [Dataplex Content Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.contentEditor) (`roles/dataplex.contentEditor`) [Dataplex Content User](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.contentUser) (`roles/dataplex.contentUser`) [Dataplex Content Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.contentViewer) (`roles/dataplex.contentViewer`) [Dataplex Data Domain Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.dataDomainAdmin) (`roles/dataplex.dataDomainAdmin`) [Dataplex Data Domain Configuration Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.dataDomainEditor) (`roles/dataplex.dataDomainEditor`) [Dataplex Data Domain Configuration Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.dataDomainViewer) (`roles/dataplex.dataDomainViewer`) [Dataplex Data Products Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.dataProductsAdmin) (`roles/dataplex.dataProductsAdmin`) [Dataplex Data Products Consumer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.dataProductsConsumer) (`roles/dataplex.dataProductsConsumer`) [Dataplex Data Products Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.dataProductsEditor) (`roles/dataplex.dataProductsEditor`) [Dataplex Data Products Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.dataProductsViewer) (`roles/dataplex.dataProductsViewer`) [Dataplex Entry Group Exporter](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.entryGroupExporter) (`roles/dataplex.entryGroupExporter`) [Dataplex Entry Group Importer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.entryGroupImporter) (`roles/dataplex.entryGroupImporter`) [Dataplex Entry Group Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.entryGroupOwner) (`roles/dataplex.entryGroupOwner`) [Dataplex Entry Link Type Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.entryLinkTypeOwner) (`roles/dataplex.entryLinkTypeOwner`) [Dataplex Entry Link Type User](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.entryLinkTypeUser) (`roles/dataplex.entryLinkTypeUser`) [Dataplex Entry and EntryLink Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.entryOwner) (`roles/dataplex.entryOwner`) [Dataplex Entry Type Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.entryTypeOwner) (`roles/dataplex.entryTypeOwner`) [Dataplex Entry Type User](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.entryTypeUser) (`roles/dataplex.entryTypeUser`) [Dataplex Metadata Feed Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.metadataFeedOwner) (`roles/dataplex.metadataFeedOwner`) [Dataplex Metadata Feed Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.metadataFeedViewer) (`roles/dataplex.metadataFeedViewer`) [Dataplex Metadata Job Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.metadataJobOwner) (`roles/dataplex.metadataJobOwner`) [Dataplex Metadata Job Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.metadataJobViewer) (`roles/dataplex.metadataJobViewer`) [Dataplex Metadata Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.metadataReader) (`roles/dataplex.metadataReader`) [Dataplex Metadata Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.metadataWriter) (`roles/dataplex.metadataWriter`) [Dataprep User](https://docs.cloud.google.com/iam/docs/roles-permissions/dataprep.md.txt#dataprep.projects.user) (`roles/dataprep.projects.user`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Dataproc Serverless Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.serverlessEditor) (`roles/dataproc.serverlessEditor`) [Dataproc Serverless Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.serverlessViewer) (`roles/dataproc.serverlessViewer`) [Cloud Datastore Bulk Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firestore.md.txt#datastore.bulkAdmin) (`roles/datastore.bulkAdmin`) [Cloud Datastore Import Export Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firestore.md.txt#datastore.importExportAdmin) (`roles/datastore.importExportAdmin`) [Cloud Datastore Index Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firestore.md.txt#datastore.indexAdmin) (`roles/datastore.indexAdmin`) [Cloud Datastore Key Visualizer Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firestore.md.txt#datastore.keyVisualizerViewer) (`roles/datastore.keyVisualizerViewer`) [Data Studio Workspace Content Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/datastudio.md.txt#datastudio.contentManager) (`roles/datastudio.contentManager`) [Data Studio Workspace Contributor](https://docs.cloud.google.com/iam/docs/roles-permissions/datastudio.md.txt#datastudio.contributor) (`roles/datastudio.contributor`) [Data Studio Workspace Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/datastudio.md.txt#datastudio.manager) (`roles/datastudio.manager`) [Data Studio Workspace Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/datastudio.md.txt#datastudio.workspaceViewer) (`roles/datastudio.workspaceViewer`) [Dell EMC Cloud OneFS User](https://docs.cloud.google.com/iam/docs/roles-permissions/dellemccloudonefs.md.txt#dellemccloudonefs.user) (`roles/dellemccloudonefs.user`) [Deployment Manager Type Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#deploymentmanager.typeEditor) (`roles/deploymentmanager.typeEditor`) [Deployment Manager Type Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#deploymentmanager.typeViewer) (`roles/deploymentmanager.typeViewer`) [Application Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/designcenter.md.txt#designcenter.applicationAdmin) (`roles/designcenter.applicationAdmin`) [Application Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/designcenter.md.txt#designcenter.applicationEditor) (`roles/designcenter.applicationEditor`) [Application Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/designcenter.md.txt#designcenter.applicationViewer) (`roles/designcenter.applicationViewer`) [Application Design Center User](https://docs.cloud.google.com/iam/docs/roles-permissions/designcenter.md.txt#designcenter.user) (`roles/designcenter.user`) [Developer Connect Insights Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/developerconnect.md.txt#developerconnect.insightsAdmin) (`roles/developerconnect.insightsAdmin`) [Developer Connect Insights Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/developerconnect.md.txt#developerconnect.insightsViewer) (`roles/developerconnect.insightsViewer`) [Developer Connect OAuth Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/developerconnect.md.txt#developerconnect.oauthAdmin) (`roles/developerconnect.oauthAdmin`) [Developer Connect OAuth User](https://docs.cloud.google.com/iam/docs/roles-permissions/developerconnect.md.txt#developerconnect.oauthUser) (`roles/developerconnect.oauthUser`) [Developer Connect User](https://docs.cloud.google.com/iam/docs/roles-permissions/developerconnect.md.txt#developerconnect.user) (`roles/developerconnect.user`) [CX Premium Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.aamAdmin) (`roles/dialogflow.aamAdmin`) [CX Premium Conversational Architect](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.aamConversationalArchitect) (`roles/dialogflow.aamConversationalArchitect`) [CX Premium Dialog Designer](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.aamDialogDesigner) (`roles/dialogflow.aamDialogDesigner`) [CX Premium Lead Dialog Designer](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.aamLeadDialogDesigner) (`roles/dialogflow.aamLeadDialogDesigner`) [CX Premium Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.aamViewer) (`roles/dialogflow.aamViewer`) [Dialogflow Console Agent Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.consoleAgentEditor) (`roles/dialogflow.consoleAgentEditor`) [Dialogflow Console Simulator User](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.consoleSimulatorUser) (`roles/dialogflow.consoleSimulatorUser`) [Dialogflow Console Smart Messaging Allowlist Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.consoleSmartMessagingAllowlistEditor) (`roles/dialogflow.consoleSmartMessagingAllowlistEditor`) [Dialogflow API Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.reader) (`roles/dialogflow.reader`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Gemini Enterprise Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceEditor) (`roles/discoveryengine.agentspaceEditor`) [Gemini Enterprise Restricted User](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceRestrictedUser) (`roles/discoveryengine.agentspaceRestrictedUser`) [Gemini Enterprise User](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceUser) (`roles/discoveryengine.agentspaceUser`) [Gemini Enterprise Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceViewer) (`roles/discoveryengine.agentspaceViewer`) [Cloud NotebookLM Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.notebookLmOwner) (`roles/discoveryengine.notebookLmOwner`) [Cloud NotebookLM User](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.notebookLmUser) (`roles/discoveryengine.notebookLmUser`) [Podcast API User](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.podcastApiUser) (`roles/discoveryengine.podcastApiUser`) [DLP Connections Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.connectionsAdmin) (`roles/dlp.connectionsAdmin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Subscription Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.subscriptionsAdmin) (`roles/dlp.subscriptionsAdmin`) [DNS Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dns.md.txt#dns.reader) (`roles/dns.reader`) [Earth Subscriptions Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/earth.md.txt#earth.subscriptionsAdmin) (`roles/earth.subscriptionsAdmin`) [Earth Subscriptions Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/earth.md.txt#earth.subscriptionsViewer) (`roles/earth.subscriptionsViewer`) [Earth Engine Apps Publisher](https://docs.cloud.google.com/iam/docs/roles-permissions/earthengine.md.txt#earthengine.appsPublisher) (`roles/earthengine.appsPublisher`) [Earth Engine Resource Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/earthengine.md.txt#earthengine.writer) (`roles/earthengine.writer`) [Edge Container Machine User](https://docs.cloud.google.com/iam/docs/roles-permissions/edgecontainer.md.txt#edgecontainer.machineUser) (`roles/edgecontainer.machineUser`) [Edge Container Cluster offline Credential User](https://docs.cloud.google.com/iam/docs/roles-permissions/edgecontainer.md.txt#edgecontainer.offlineCredentialUser) (`roles/edgecontainer.offlineCredentialUser`) [Eventarc Connection Publisher](https://docs.cloud.google.com/iam/docs/roles-permissions/eventarc.md.txt#eventarc.connectionPublisher) (`roles/eventarc.connectionPublisher`) [Eventarc Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/eventarc.md.txt#eventarc.developer) (`roles/eventarc.developer`) [Eventarc Publisher](https://docs.cloud.google.com/iam/docs/roles-permissions/eventarc.md.txt#eventarc.publisher) (`roles/eventarc.publisher`) [Fault Testing Admin/Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/faulttesting.md.txt#faulttesting.operator) (`roles/faulttesting.operator`) [Firebase Analytics Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.analyticsAdmin) (`roles/firebase.analyticsAdmin`) [Firebase Analytics Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.analyticsViewer) (`roles/firebase.analyticsViewer`) [Firebase Develop Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.developAdmin) (`roles/firebase.developAdmin`) [Firebase Develop Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.developViewer) (`roles/firebase.developViewer`) [Firebase Grow Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.growthAdmin) (`roles/firebase.growthAdmin`) [Firebase Grow Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.growthViewer) (`roles/firebase.growthViewer`) [Firebase Quality Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.qualityAdmin) (`roles/firebase.qualityAdmin`) [Firebase Quality Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.qualityViewer) (`roles/firebase.qualityViewer`) [Firebase App Hosting Compute Runner](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseapphosting.md.txt#firebaseapphosting.computeRunner) (`roles/firebaseapphosting.computeRunner`) [Firebase App Hosting Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseapphosting.md.txt#firebaseapphosting.developer) (`roles/firebaseapphosting.developer`) [Firebase Crash Symbol Uploader](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasecrash.md.txt#firebasecrash.symbolMappingsAdmin) (`roles/firebasecrash.symbolMappingsAdmin`) [Firebase Extensions Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseextensions.md.txt#firebaseextensions.developer) (`roles/firebaseextensions.developer`) [Firebase Extensions Publisher - Extensions Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseextensionspublisher.md.txt#firebaseextensionspublisher.extensionsAdmin) (`roles/firebaseextensionspublisher.extensionsAdmin`) [Firebase Extensions Publisher - Extensions Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseextensionspublisher.md.txt#firebaseextensionspublisher.extensionsViewer) (`roles/firebaseextensionspublisher.extensionsViewer`) [Fleet Engine Delivery Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/fleetengine.md.txt#fleetengine.deliveryAdmin) (`roles/fleetengine.deliveryAdmin`) [Fleet Engine Delivery Super User](https://docs.cloud.google.com/iam/docs/roles-permissions/fleetengine.md.txt#fleetengine.deliverySuperUser) (`roles/fleetengine.deliverySuperUser`) [Fleet Engine On-Demand Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/fleetengine.md.txt#fleetengine.ondemandAdmin) (`roles/fleetengine.ondemandAdmin`) [Fleet Engine Service Super User](https://docs.cloud.google.com/iam/docs/roles-permissions/fleetengine.md.txt#fleetengine.serviceSuperUser) (`roles/fleetengine.serviceSuperUser`) [GDC Hardware Management Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/gdchardwaremanagement.md.txt#gdchardwaremanagement.operator) (`roles/gdchardwaremanagement.operator`) [GDC Hardware Management Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/gdchardwaremanagement.md.txt#gdchardwaremanagement.reader) (`roles/gdchardwaremanagement.reader`) [Gemini Cloud Assist Investigation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/geminicloudassist.md.txt#geminicloudassist.investigationAdmin) (`roles/geminicloudassist.investigationAdmin`) [Gemini Cloud Assist Investigation Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/geminicloudassist.md.txt#geminicloudassist.investigationCreator) (`roles/geminicloudassist.investigationCreator`) [Gemini Cloud Assist Investigation Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/geminicloudassist.md.txt#geminicloudassist.investigationEditor) (`roles/geminicloudassist.investigationEditor`) [Gemini Cloud Assist Investigation User](https://docs.cloud.google.com/iam/docs/roles-permissions/geminicloudassist.md.txt#geminicloudassist.investigationUser) (`roles/geminicloudassist.investigationUser`) [Gemini Cloud Assist Investigation Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/geminicloudassist.md.txt#geminicloudassist.investigationViewer) (`roles/geminicloudassist.investigationViewer`) [Backup for GKE Backup Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/gkebackup.md.txt#gkebackup.backupAdmin) (`roles/gkebackup.backupAdmin`) [Backup for GKE Restore Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/gkebackup.md.txt#gkebackup.restoreAdmin) (`roles/gkebackup.restoreAdmin`) [Fleet Project-level Scope Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.scopeEditorProjectLevel) (`roles/gkehub.scopeEditorProjectLevel`) [Fleet Project-level Scope Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.scopeViewerProjectLevel) (`roles/gkehub.scopeViewerProjectLevel`) [Google Workspace Add-ons Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/gsuiteaddons.md.txt#gsuiteaddons.developer) (`roles/gsuiteaddons.developer`) [Google Workspace Add-ons Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/gsuiteaddons.md.txt#gsuiteaddons.reader) (`roles/gsuiteaddons.reader`) [Google Workspace Add-ons Tester](https://docs.cloud.google.com/iam/docs/roles-permissions/gsuiteaddons.md.txt#gsuiteaddons.tester) (`roles/gsuiteaddons.tester`) [Healthcare Annotation Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.annotationEditor) (`roles/healthcare.annotationEditor`) [Healthcare Annotation Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.annotationReader) (`roles/healthcare.annotationReader`) [Healthcare Annotation Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.annotationStoreAdmin) (`roles/healthcare.annotationStoreAdmin`) [Healthcare Annotation Store Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.annotationStoreViewer) (`roles/healthcare.annotationStoreViewer`) [Healthcare Attribute Definition Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.attributeDefinitionEditor) (`roles/healthcare.attributeDefinitionEditor`) [Healthcare Attribute Definition Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.attributeDefinitionReader) (`roles/healthcare.attributeDefinitionReader`) [Healthcare Consent Artifact Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.consentArtifactAdmin) (`roles/healthcare.consentArtifactAdmin`) [Healthcare Consent Artifact Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.consentArtifactEditor) (`roles/healthcare.consentArtifactEditor`) [Healthcare Consent Artifact Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.consentArtifactReader) (`roles/healthcare.consentArtifactReader`) [Healthcare Consent Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.consentEditor) (`roles/healthcare.consentEditor`) [Healthcare Consent Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.consentReader) (`roles/healthcare.consentReader`) [Healthcare Consent Store Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.consentStoreAdmin) (`roles/healthcare.consentStoreAdmin`) [Healthcare Consent Store Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.consentStoreViewer) (`roles/healthcare.consentStoreViewer`) [Healthcare Dataset Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.datasetAdmin) (`roles/healthcare.datasetAdmin`) [Healthcare Dataset Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.datasetViewer) (`roles/healthcare.datasetViewer`) [Healthcare DICOM Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.dicomEditor) (`roles/healthcare.dicomEditor`) [Healthcare DICOM Store Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.dicomStoreAdmin) (`roles/healthcare.dicomStoreAdmin`) [Healthcare DICOM Store Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.dicomStoreViewer) (`roles/healthcare.dicomStoreViewer`) [Healthcare DICOM Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.dicomViewer) (`roles/healthcare.dicomViewer`) [Healthcare FHIR Resource Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.fhirResourceEditor) (`roles/healthcare.fhirResourceEditor`) [Healthcare FHIR Resource Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.fhirResourceReader) (`roles/healthcare.fhirResourceReader`) [Healthcare FHIR Store Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.fhirStoreAdmin) (`roles/healthcare.fhirStoreAdmin`) [Healthcare FHIR Store Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.fhirStoreViewer) (`roles/healthcare.fhirStoreViewer`) [Healthcare HL7v2 Message Consumer](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.hl7V2Consumer) (`roles/healthcare.hl7V2Consumer`) [Healthcare HL7v2 Message Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.hl7V2Editor) (`roles/healthcare.hl7V2Editor`) [Healthcare HL7v2 Message Ingest](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.hl7V2Ingest) (`roles/healthcare.hl7V2Ingest`) [Healthcare HL7v2 Store Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.hl7V2StoreAdmin) (`roles/healthcare.hl7V2StoreAdmin`) [Healthcare HL7v2 Store Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.hl7V2StoreViewer) (`roles/healthcare.hl7V2StoreViewer`) [Healthcare NLP Service Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.nlpServiceViewer) (`roles/healthcare.nlpServiceViewer`) [Healthcare User Data Mapping Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.userDataMappingEditor) (`roles/healthcare.userDataMappingEditor`) [Healthcare User Data Mapping Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.userDataMappingReader) (`roles/healthcare.userDataMappingReader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [IAM OAuth Client Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.oauthClientAdmin) (`roles/iam.oauthClientAdmin`) [IAM OAuth Client Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.oauthClientViewer) (`roles/iam.oauthClientViewer`) [Organization Role Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.organizationRoleAdmin) (`roles/iam.organizationRoleAdmin`) [Organization Role Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.organizationRoleViewer) (`roles/iam.organizationRoleViewer`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Delete Service Accounts](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.serviceAccountDeleter) (`roles/iam.serviceAccountDeleter`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [IAM Workload Identity Pool Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.workloadIdentityPoolAdmin) (`roles/iam.workloadIdentityPoolAdmin`) [IAM Workload Identity Pool Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.workloadIdentityPoolViewer) (`roles/iam.workloadIdentityPoolViewer`) [Apigee Integration Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.apigeeIntegrationAdminRole) (`roles/integrations.apigeeIntegrationAdminRole`) [Apigee Integration Deployer](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.apigeeIntegrationDeployerRole) (`roles/integrations.apigeeIntegrationDeployerRole`) [Apigee Integration Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.apigeeIntegrationEditorRole) (`roles/integrations.apigeeIntegrationEditorRole`) [Apigee Integration Invoker](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.apigeeIntegrationInvokerRole) (`roles/integrations.apigeeIntegrationInvokerRole`) [Apigee Integration Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.apigeeIntegrationsViewer) (`roles/integrations.apigeeIntegrationsViewer`) [Apigee Integration Approver](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.apigeeSuspensionResolver) (`roles/integrations.apigeeSuspensionResolver`) [Certificate Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.certificateViewer) (`roles/integrations.certificateViewer`) [Application Integration Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.integrationAdmin) (`roles/integrations.integrationAdmin`) [Application Integration Deployer](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.integrationDeployer) (`roles/integrations.integrationDeployer`) [Application Integration Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.integrationEditor) (`roles/integrations.integrationEditor`) [Application Integration Invoker](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.integrationInvoker) (`roles/integrations.integrationInvoker`) [Application Integration Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.integrationViewer) (`roles/integrations.integrationViewer`) [Application Integration SFDC Instance Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.sfdcInstanceAdmin) (`roles/integrations.sfdcInstanceAdmin`) [Application Integration SFDC Instance Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.sfdcInstanceEditor) (`roles/integrations.sfdcInstanceEditor`) [Application Integration SFDC Instance Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.sfdcInstanceViewer) (`roles/integrations.sfdcInstanceViewer`) [Application Integration Approver](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.suspensionResolver) (`roles/integrations.suspensionResolver`) [Issuerswitch Account Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/issuerswitch.md.txt#issuerswitch.accountManagerAdmin) (`roles/issuerswitch.accountManagerAdmin`) [Issuerswitch Account Manager Transactions Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/issuerswitch.md.txt#issuerswitch.accountManagerTransactionsAdmin) (`roles/issuerswitch.accountManagerTransactionsAdmin`) [Issuerswitch Account Manager Transactions Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/issuerswitch.md.txt#issuerswitch.accountManagerTransactionsViewer) (`roles/issuerswitch.accountManagerTransactionsViewer`) [Issuerswitch Participants Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/issuerswitch.md.txt#issuerswitch.issuerParticipantsAdmin) (`roles/issuerswitch.issuerParticipantsAdmin`) [Issuerswitch Resolutions Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/issuerswitch.md.txt#issuerswitch.resolutionsAdmin) (`roles/issuerswitch.resolutionsAdmin`) [Issuerswitch Rules Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/issuerswitch.md.txt#issuerswitch.rulesAdmin) (`roles/issuerswitch.rulesAdmin`) [Issuerswitch Rules Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/issuerswitch.md.txt#issuerswitch.rulesViewer) (`roles/issuerswitch.rulesViewer`) [Issuerswitch Transactions Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/issuerswitch.md.txt#issuerswitch.transactionsViewer) (`roles/issuerswitch.transactionsViewer`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Looker Instance User](https://docs.cloud.google.com/iam/docs/roles-permissions/looker.md.txt#looker.instanceUser) (`roles/looker.instanceUser`) [Looker Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/datastudio.md.txt#lookerstudio.lookerAdmin) (`roles/lookerstudio.lookerAdmin`) [Looker Studio Pro Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/datastudio.md.txt#lookerstudio.proManager) (`roles/lookerstudio.proManager`) [Managed Flink Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/managedflink.md.txt#managedflink.developer) (`roles/managedflink.developer`) [Google Cloud Managed Identities Backup Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/managedidentities.md.txt#managedidentities.backupAdmin) (`roles/managedidentities.backupAdmin`) [Google Cloud Managed Identities Backup Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/managedidentities.md.txt#managedidentities.backupViewer) (`roles/managedidentities.backupViewer`) [Google Cloud Managed Identities Domain Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/managedidentities.md.txt#managedidentities.domainAdmin) (`roles/managedidentities.domainAdmin`) [Google Cloud Managed Identities Peering Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/managedidentities.md.txt#managedidentities.peeringAdmin) (`roles/managedidentities.peeringAdmin`) [Google Cloud Managed Identities Peering Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/managedidentities.md.txt#managedidentities.peeringViewer) (`roles/managedidentities.peeringViewer`) [Managed Kafka Client](https://docs.cloud.google.com/iam/docs/roles-permissions/managedkafka.md.txt#managedkafka.client) (`roles/managedkafka.client`) [Managed Kafka Cluster Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/managedkafka.md.txt#managedkafka.clusterEditor) (`roles/managedkafka.clusterEditor`) [Managed Kafka Connector Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/managedkafka.md.txt#managedkafka.connectorEditor) (`roles/managedkafka.connectorEditor`) [Managed Kafka Consumer Group Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/managedkafka.md.txt#managedkafka.consumerGroupEditor) (`roles/managedkafka.consumerGroupEditor`) [Managed Kafka Topic Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/managedkafka.md.txt#managedkafka.topicEditor) (`roles/managedkafka.topicEditor`) [Mandiant Attack Surface Management Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/mandiant.md.txt#mandiant.attackSurfaceManagementEditor) (`roles/mandiant.attackSurfaceManagementEditor`) [Mandiant Attack Surface Management Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/mandiant.md.txt#mandiant.attackSurfaceManagementViewer) (`roles/mandiant.attackSurfaceManagementViewer`) [Mandiant Digital Threat Monitoring Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/mandiant.md.txt#mandiant.digitalThreatMonitoringEditor) (`roles/mandiant.digitalThreatMonitoringEditor`) [Mandiant Digital Threat Monitoring Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/mandiant.md.txt#mandiant.digitalThreatMonitoringViewer) (`roles/mandiant.digitalThreatMonitoringViewer`) [Mandiant Expertise On Demand Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/mandiant.md.txt#mandiant.expertiseOnDemandEditor) (`roles/mandiant.expertiseOnDemandEditor`) [Mandiant Expertise On Demand Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/mandiant.md.txt#mandiant.expertiseOnDemandViewer) (`roles/mandiant.expertiseOnDemandViewer`) [Mandiant Threat Intel Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/mandiant.md.txt#mandiant.threatIntelEditor) (`roles/mandiant.threatIntelEditor`) [Mandiant Threat Intel Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/mandiant.md.txt#mandiant.threatIntelViewer) (`roles/mandiant.threatIntelViewer`) [Mandiant Validation Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/mandiant.md.txt#mandiant.validationEditor) (`roles/mandiant.validationEditor`) [Mandiant Validation Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/mandiant.md.txt#mandiant.validationViewer) (`roles/mandiant.validationViewer`) [Mobility Solutions Overages Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/mapsanalytics.md.txt#mapsanalytics.mobilitySolutionsOverageViewer) (`roles/mapsanalytics.mobilitySolutionsOverageViewer`) [Dataproc Metastore Metadata Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/metastore.md.txt#metastore.metadataOperator) (`roles/metastore.metadataOperator`) [Dataproc Metastore Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/metastore.md.txt#metastore.user) (`roles/metastore.user`) [Migration Center Discovery Client Registrator](https://docs.cloud.google.com/iam/docs/roles-permissions/migrationcenter.md.txt#migrationcenter.discoveryClientRegistrator) (`roles/migrationcenter.discoveryClientRegistrator`) [AI Platform Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/ml.md.txt#ml.developer) (`roles/ml.developer`) [Model Armor Callout User](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.calloutUser) (`roles/modelarmor.calloutUser`) [Model Armor Floor Setting Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.floorSettingsAdmin) (`roles/modelarmor.floorSettingsAdmin`) [Model Armor Floor Setting Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.floorSettingsViewer) (`roles/modelarmor.floorSettingsViewer`) [Model Armor User](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.user) (`roles/modelarmor.user`) [Monitoring Metrics Scopes Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/monitoring.md.txt#monitoring.metricsScopesAdmin) (`roles/monitoring.metricsScopesAdmin`) [Monitoring Metrics Scopes Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/monitoring.md.txt#monitoring.metricsScopesViewer) (`roles/monitoring.metricsScopesViewer`) [Google Home Developer Console Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/nestconsole.md.txt#nestconsole.homeDeveloperAdmin) (`roles/nestconsole.homeDeveloperAdmin`) [Google Home Developer Console Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/nestconsole.md.txt#nestconsole.homeDeveloperEditor) (`roles/nestconsole.homeDeveloperEditor`) [Google Home Developer Console Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/nestconsole.md.txt#nestconsole.homeDeveloperViewer) (`roles/nestconsole.homeDeveloperViewer`) [Service Automation Consumer Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.consumerNetworkAdmin) (`roles/networkconnectivity.consumerNetworkAdmin`) [Group Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.groupAdmin) (`roles/networkconnectivity.groupAdmin`) [Hub \& Spoke Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.hubAdmin) (`roles/networkconnectivity.hubAdmin`) [Hub \& Spoke Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.hubViewer) (`roles/networkconnectivity.hubViewer`) [Multicloud Data Transfer Config Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.multicloudDataTransferConfigAdmin) (`roles/networkconnectivity.multicloudDataTransferConfigAdmin`) [Multicloud Data Transfer Config Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.multicloudDataTransferConfigViewer) (`roles/networkconnectivity.multicloudDataTransferConfigViewer`) [Destination Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.multicloudDataTransferDestinationAdmin) (`roles/networkconnectivity.multicloudDataTransferDestinationAdmin`) [Destination Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.multicloudDataTransferDestinationViewer) (`roles/networkconnectivity.multicloudDataTransferDestinationViewer`) [Regional Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.regionalEndpointAdmin) (`roles/networkconnectivity.regionalEndpointAdmin`) [Regional Endpoint Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.regionalEndpointViewer) (`roles/networkconnectivity.regionalEndpointViewer`) [Service Class User](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.serviceClassUser) (`roles/networkconnectivity.serviceClassUser`) [Service Automation Service Producer Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.serviceProducerAdmin) (`roles/networkconnectivity.serviceProducerAdmin`) [Spoke Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.spokeAdmin) (`roles/networkconnectivity.spokeAdmin`) [Transport Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.transportAdmin) (`roles/networkconnectivity.transportAdmin`) [Transport Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.transportViewer) (`roles/networkconnectivity.transportViewer`) [Cloud Network Insights Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkmanagement.md.txt#networkmanagement.CloudNetworkInsightsAdmin) (`roles/networkmanagement.CloudNetworkInsightsAdmin`) [Cloud Network Insights Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networkmanagement.md.txt#networkmanagement.CloudNetworkInsightsEditor) (`roles/networkmanagement.CloudNetworkInsightsEditor`) [Cloud Network Insights Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networkmanagement.md.txt#networkmanagement.CloudNetworkInsightsViewer) (`roles/networkmanagement.CloudNetworkInsightsViewer`) [DNS Threat Detector Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.dnsThreatDetectorAdmin) (`roles/networksecurity.dnsThreatDetectorAdmin`) [DNS Threat Detector Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.dnsThreatDetectorViewer) (`roles/networksecurity.dnsThreatDetectorViewer`) [Firewall Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.firewallEndpointAdmin) (`roles/networksecurity.firewallEndpointAdmin`) [Intercept Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptDeploymentAdmin) (`roles/networksecurity.interceptDeploymentAdmin`) [Intercept Deployment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptDeploymentViewer) (`roles/networksecurity.interceptDeploymentViewer`) [Intercept Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptEndpointAdmin) (`roles/networksecurity.interceptEndpointAdmin`) [Intercept Endpoint Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptEndpointViewer) (`roles/networksecurity.interceptEndpointViewer`) [Mirroring Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringDeploymentAdmin) (`roles/networksecurity.mirroringDeploymentAdmin`) [Mirroring Deployment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringDeploymentViewer) (`roles/networksecurity.mirroringDeploymentViewer`) [Mirroring Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringEndpointAdmin) (`roles/networksecurity.mirroringEndpointAdmin`) [Mirroring Endpoint Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringEndpointViewer) (`roles/networksecurity.mirroringEndpointViewer`) [Security Profile Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.securityProfileAdmin) (`roles/networksecurity.securityProfileAdmin`) [Google Tag Gateway Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkservices.md.txt#networkservices.GoogleTagGatewayPolicyAdmin) (`roles/networkservices.GoogleTagGatewayPolicyAdmin`) [Service Extensions Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkservices.md.txt#networkservices.serviceExtensionsAdmin) (`roles/networkservices.serviceExtensionsAdmin`) [Service Extensions Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networkservices.md.txt#networkservices.serviceExtensionsViewer) (`roles/networkservices.serviceExtensionsViewer`) [Notebooks Legacy Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/notebooks.md.txt#notebooks.legacyAdmin) (`roles/notebooks.legacyAdmin`) [Notebooks Legacy Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/notebooks.md.txt#notebooks.legacyViewer) (`roles/notebooks.legacyViewer`) [Notebooks Runner](https://docs.cloud.google.com/iam/docs/roles-permissions/notebooks.md.txt#notebooks.runner) (`roles/notebooks.runner`) [Oracle Database@Google Cloud Autonomous Database Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.autonomousDatabaseAdmin) (`roles/oracledatabase.autonomousDatabaseAdmin`) [Oracle Database@Google Cloud Autonomous Database Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.autonomousDatabaseViewer) (`roles/oracledatabase.autonomousDatabaseViewer`) [Oracle Database@Google Cloud Exadata Infrastructure Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.cloudExadataInfrastructureAdmin) (`roles/oracledatabase.cloudExadataInfrastructureAdmin`) [Oracle Database@Google Cloud Exadata Infrastructure User](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.cloudExadataInfrastructureUser) (`roles/oracledatabase.cloudExadataInfrastructureUser`) [Oracle Database@Google Cloud Exadata Infrastructure Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.cloudExadataInfrastructureViewer) (`roles/oracledatabase.cloudExadataInfrastructureViewer`) [Oracle Database@Google Cloud VM Cluster Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.cloudVmClusterAdmin) (`roles/oracledatabase.cloudVmClusterAdmin`) [Oracle Database@Google Cloud VM Cluster Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.cloudVmClusterViewer) (`roles/oracledatabase.cloudVmClusterViewer`) [Oracle Database@Google Cloud Container Database Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.databaseViewer) (`roles/oracledatabase.databaseViewer`) [Oracle Database@Google Cloud DB System Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.dbSystemAdmin) (`roles/oracledatabase.dbSystemAdmin`) [Oracle Database@Google Cloud DB System Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.dbSystemViewer) (`roles/oracledatabase.dbSystemViewer`) [Oracle Database@Google Cloud Exadata Database Service on Exascale Infrastructure VM Cluster Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.exadbVmClusterAdmin) (`roles/oracledatabase.exadbVmClusterAdmin`) [Oracle Database@Google Cloud Exadata Database Service on Exascale Infrastructure VM Cluster Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.exadbVmClusterViewer) (`roles/oracledatabase.exadbVmClusterViewer`) [Oracle Database@Google Cloud Exadata Database Service on Exascale Infrastructure Storage Vault Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.exascaleDbStorageVaultAdmin) (`roles/oracledatabase.exascaleDbStorageVaultAdmin`) [Oracle Database@Google Cloud Exadata Database Service on Exascale Infrastructure Storage Vault User](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.exascaleDbStorageVaultUser) (`roles/oracledatabase.exascaleDbStorageVaultUser`) [Oracle Database@Google Cloud Exadata Database Service on Exascale Infrastructure Storage Vault Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.exascaleDbStorageVaultViewer) (`roles/oracledatabase.exascaleDbStorageVaultViewer`) [Oracle Database@Google Cloud GoldenGate Connection Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.goldenGateConnectionAdmin) (`roles/oracledatabase.goldenGateConnectionAdmin`) [Oracle Database@Google Cloud GoldenGate Connection Assignment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.goldenGateConnectionAssignmentAdmin) (`roles/oracledatabase.goldenGateConnectionAssignmentAdmin`) [Oracle Database@Google Cloud GoldenGate Connection Assignment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.goldenGateConnectionAssignmentViewer) (`roles/oracledatabase.goldenGateConnectionAssignmentViewer`) [Oracle Database@Google Cloud GoldenGate Connection Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.goldenGateConnectionViewer) (`roles/oracledatabase.goldenGateConnectionViewer`) [Oracle Database@Google GoldenGate Connections User](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.goldenGateConnectionsUser) (`roles/oracledatabase.goldenGateConnectionsUser`) [Oracle Database@Google Cloud GoldenGate Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.goldenGateDeploymentAdmin) (`roles/oracledatabase.goldenGateDeploymentAdmin`) [Oracle Database@Google Cloud GoldenGate Deployment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.goldenGateDeploymentViewer) (`roles/oracledatabase.goldenGateDeploymentViewer`) [Oracle Database@Google GoldenGate Deployments User](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.goldenGateDeploymentsUser) (`roles/oracledatabase.goldenGateDeploymentsUser`) [Oracle Database@Google Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.networkAdmin) (`roles/oracledatabase.networkAdmin`) [Oracle Database@Google ODB Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.odbNetworkAdmin) (`roles/oracledatabase.odbNetworkAdmin`) [Oracle Database@Google ODB Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.odbNetworkViewer) (`roles/oracledatabase.odbNetworkViewer`) [Oracle Database@Google ODB Subnet Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.odbSubnetAdmin) (`roles/oracledatabase.odbSubnetAdmin`) [Oracle Database@Google ODB Subnet User](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.odbSubnetUser) (`roles/oracledatabase.odbSubnetUser`) [Oracle Database@Google ODB Subnet Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.odbSubnetViewer) (`roles/oracledatabase.odbSubnetViewer`) [Oracle Database@Google Cloud Pluggable Database Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.pluggableDatabaseViewer) (`roles/oracledatabase.pluggableDatabaseViewer`) [GuestPolicy Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.guestPolicyAdmin) (`roles/osconfig.guestPolicyAdmin`) [GuestPolicy Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.guestPolicyEditor) (`roles/osconfig.guestPolicyEditor`) [GuestPolicy Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.guestPolicyViewer) (`roles/osconfig.guestPolicyViewer`) [InstanceOSPoliciesCompliance Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.instanceOSPoliciesComplianceViewer) (`roles/osconfig.instanceOSPoliciesComplianceViewer`) [OS Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.inventoryViewer) (`roles/osconfig.inventoryViewer`) [OSPolicyAssignment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.osPolicyAssignmentAdmin) (`roles/osconfig.osPolicyAssignmentAdmin`) [OSPolicyAssignment Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.osPolicyAssignmentEditor) (`roles/osconfig.osPolicyAssignmentEditor`) [OSPolicyAssignmentReport Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.osPolicyAssignmentReportViewer) (`roles/osconfig.osPolicyAssignmentReportViewer`) [OSPolicyAssignment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.osPolicyAssignmentViewer) (`roles/osconfig.osPolicyAssignmentViewer`) [PatchDeployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.patchDeploymentAdmin) (`roles/osconfig.patchDeploymentAdmin`) [PatchDeployment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.patchDeploymentViewer) (`roles/osconfig.patchDeploymentViewer`) [Patch Job Executor](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.patchJobExecutor) (`roles/osconfig.patchJobExecutor`) [Patch Job Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.patchJobViewer) (`roles/osconfig.patchJobViewer`) [Project Feature Settings Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.projectFeatureSettingsEditor) (`roles/osconfig.projectFeatureSettingsEditor`) [Project Feature Settings Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.projectFeatureSettingsViewer) (`roles/osconfig.projectFeatureSettingsViewer`) [Upgrade Report Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.upgradeReportViewer) (`roles/osconfig.upgradeReportViewer`) [OS VulnerabilityReport Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.vulnerabilityReportViewer) (`roles/osconfig.vulnerabilityReportViewer`) [Parameter Manager Parameter Accessor](https://docs.cloud.google.com/iam/docs/roles-permissions/parametermanager.md.txt#parametermanager.parameterAccessor) (`roles/parametermanager.parameterAccessor`) [Parameter Manager Parameter Version Adder](https://docs.cloud.google.com/iam/docs/roles-permissions/parametermanager.md.txt#parametermanager.parameterVersionAdder) (`roles/parametermanager.parameterVersionAdder`) [Parameter Manager Parameter Version Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/parametermanager.md.txt#parametermanager.parameterVersionManager) (`roles/parametermanager.parameterVersionManager`) [Parameter Manager Parameter Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/parametermanager.md.txt#parametermanager.parameterViewer) (`roles/parametermanager.parameterViewer`) [Parameter Manager Template Version Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/parametermanager.md.txt#parametermanager.templateVersionManager) (`roles/parametermanager.templateVersionManager`) [Parameter Manager Template Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/parametermanager.md.txt#parametermanager.templateViewer) (`roles/parametermanager.templateViewer`) [Payments Reseller Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/paymentsresellersubscription.md.txt#paymentsresellersubscription.partnerAdmin) (`roles/paymentsresellersubscription.partnerAdmin`) [Payments Reseller Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/paymentsresellersubscription.md.txt#paymentsresellersubscription.partnerViewer) (`roles/paymentsresellersubscription.partnerViewer`) [Payments Reseller Products Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/paymentsresellersubscription.md.txt#paymentsresellersubscription.productViewer) (`roles/paymentsresellersubscription.productViewer`) [Payments Reseller Promotions Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/paymentsresellersubscription.md.txt#paymentsresellersubscription.promotionViewer) (`roles/paymentsresellersubscription.promotionViewer`) [Payments Reseller Subscriptions Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/paymentsresellersubscription.md.txt#paymentsresellersubscription.subscriptionEditor) (`roles/paymentsresellersubscription.subscriptionEditor`) [Payments Reseller Subscriptions Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/paymentsresellersubscription.md.txt#paymentsresellersubscription.subscriptionViewer) (`roles/paymentsresellersubscription.subscriptionViewer`) [CA Service Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/privateca.md.txt#privateca.auditor) (`roles/privateca.auditor`) [CA Service Operation Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/privateca.md.txt#privateca.caManager) (`roles/privateca.caManager`) [CA Service Certificate Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/privateca.md.txt#privateca.certificateManager) (`roles/privateca.certificateManager`) [Beacon Attachment Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/proximitybeacon.md.txt#proximitybeacon.attachmentEditor) (`roles/proximitybeacon.attachmentEditor`) [Beacon Attachment Publisher](https://docs.cloud.google.com/iam/docs/roles-permissions/proximitybeacon.md.txt#proximitybeacon.attachmentPublisher) (`roles/proximitybeacon.attachmentPublisher`) [Beacon Attachment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/proximitybeacon.md.txt#proximitybeacon.attachmentViewer) (`roles/proximitybeacon.attachmentViewer`) [Beacon Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/proximitybeacon.md.txt#proximitybeacon.beaconEditor) (`roles/proximitybeacon.beaconEditor`) [External Account Key Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/publicca.md.txt#publicca.externalAccountKeyCreator) (`roles/publicca.externalAccountKeyCreator`) [reCAPTCHA Enterprise Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/recaptchaenterprise.md.txt#recaptchaenterprise.agent) (`roles/recaptchaenterprise.agent`) [AlloyDB Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.alloydbAdmin) (`roles/recommender.alloydbAdmin`) [AlloyDB Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.alloydbViewer) (`roles/recommender.alloydbViewer`) [App Engine Version Cost Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.appengineversioncostAdmin) (`roles/recommender.appengineversioncostAdmin`) [App Engine Version Cost Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.appengineversioncostViewer) (`roles/recommender.appengineversioncostViewer`) [BigQuery Slot Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.bigQueryCapacityCommitmentsAdmin) (`roles/recommender.bigQueryCapacityCommitmentsAdmin`) [BigQuery Recommender Project Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.bigQueryCapacityCommitmentsProjectAdmin) (`roles/recommender.bigQueryCapacityCommitmentsProjectAdmin`) [BigQuery Recommender Project Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.bigQueryCapacityCommitmentsProjectViewer) (`roles/recommender.bigQueryCapacityCommitmentsProjectViewer`) [BigQuery Slot Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.bigQueryCapacityCommitmentsViewer) (`roles/recommender.bigQueryCapacityCommitmentsViewer`) [BigQuery Materialized View Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.bigqueryMaterializedViewAdmin) (`roles/recommender.bigqueryMaterializedViewAdmin`) [BigQuery Materialized View Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.bigqueryMaterializedViewViewer) (`roles/recommender.bigqueryMaterializedViewViewer`) [BigQuery Partitioning Clustering Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.bigqueryPartitionClusterAdmin) (`roles/recommender.bigqueryPartitionClusterAdmin`) [BigQuery Partitioning Clustering Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.bigqueryPartitionClusterViewer) (`roles/recommender.bigqueryPartitionClusterViewer`) [Bigtable Cluster Performance Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.bigtableClusterPerformanceAdmin) (`roles/recommender.bigtableClusterPerformanceAdmin`) [Bigtable Cluster Performance Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.bigtableClusterPerformanceViewer) (`roles/recommender.bigtableClusterPerformanceViewer`) [Cloud Asset Insights Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudAssetInsightsAdmin) (`roles/recommender.cloudAssetInsightsAdmin`) [Cloud Asset Insights Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudAssetInsightsViewer) (`roles/recommender.cloudAssetInsightsViewer`) [Cloud Cost General Recommendations Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudCostRecommendationAdmin) (`roles/recommender.cloudCostRecommendationAdmin`) [Cloud Cost General Recommendations Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudCostRecommendationViewer) (`roles/recommender.cloudCostRecommendationViewer`) [Cloud Deprecation General Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudDeprecationRecommendationAdmin) (`roles/recommender.cloudDeprecationRecommendationAdmin`) [Cloud Deprecation General Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudDeprecationRecommendationViewer) (`roles/recommender.cloudDeprecationRecommendationViewer`) [Cloud Manageability General Recommendations Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudManageabilityRecommendationAdmin) (`roles/recommender.cloudManageabilityRecommendationAdmin`) [Cloud Manageability General Recommendations Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudManageabilityRecommendationViewer) (`roles/recommender.cloudManageabilityRecommendationViewer`) [Cloud Performance General Recommendations Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudPerformanceRecommendationAdmin) (`roles/recommender.cloudPerformanceRecommendationAdmin`) [Cloud Performance General Recommendations Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudPerformanceRecommendationViewer) (`roles/recommender.cloudPerformanceRecommendationViewer`) [Cloud Reliability General Recommendations Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudReliabilityRecommendationAdmin) (`roles/recommender.cloudReliabilityRecommendationAdmin`) [Cloud Reliability General Recommendations Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudReliabilityRecommendationViewer) (`roles/recommender.cloudReliabilityRecommendationViewer`) [Cloud Security General Recommendations Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudSecurityRecommendationAdmin) (`roles/recommender.cloudSecurityRecommendationAdmin`) [Cloud Security General Recommendations Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudSecurityRecommendationViewer) (`roles/recommender.cloudSecurityRecommendationViewer`) [Cloud SQL Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudsqlAdmin) (`roles/recommender.cloudsqlAdmin`) [Cloud SQL Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudsqlViewer) (`roles/recommender.cloudsqlViewer`) [Compute Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.computeAdmin) (`roles/recommender.computeAdmin`) [Compute Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.computeViewer) (`roles/recommender.computeViewer`) [GKE Diagnosis Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.containerDiagnosisAdmin) (`roles/recommender.containerDiagnosisAdmin`) [GKE Diagnosis Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.containerDiagnosisViewer) (`roles/recommender.containerDiagnosisViewer`) [Dataflow Diagnostics Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.dataflowDiagnosticsAdmin) (`roles/recommender.dataflowDiagnosticsAdmin`) [Dataflow Diagnostics Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.dataflowDiagnosticsViewer) (`roles/recommender.dataflowDiagnosticsViewer`) [Error Reporting Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.errorReportingAdmin) (`roles/recommender.errorReportingAdmin`) [Error Reporting Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.errorReportingViewer) (`roles/recommender.errorReportingViewer`) [Firestore Database Firebase rules Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.firestoredatabasefirebaserulesAdmin) (`roles/recommender.firestoredatabasefirebaserulesAdmin`) [Firestore Database Firebase rules Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.firestoredatabasefirebaserulesViewer) (`roles/recommender.firestoredatabasefirebaserulesViewer`) [Firestore Database Reliability Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.firestoredatabasereliabilityAdmin) (`roles/recommender.firestoredatabasereliabilityAdmin`) [Firestore Database Reliability Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.firestoredatabasereliabilityViewer) (`roles/recommender.firestoredatabasereliabilityViewer`) [Firewall Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.firewallAdmin) (`roles/recommender.firewallAdmin`) [Firewall Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.firewallViewer) (`roles/recommender.firewallViewer`) [Google Maps Platform Insights/Recommendations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.gmpAdmin) (`roles/recommender.gmpAdmin`) [Google Maps Platform Insights/Recommendations Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.gmpViewer) (`roles/recommender.gmpViewer`) [IAM Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.iamAdmin) (`roles/recommender.iamAdmin`) [IAM Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.iamViewer) (`roles/recommender.iamViewer`) [IAM Policy Change Risk Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.iampolicychangeriskAdmin) (`roles/recommender.iampolicychangeriskAdmin`) [IAM Policy Change Risk Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.iampolicychangeriskViewer) (`roles/recommender.iampolicychangeriskViewer`) [Memorystore Manageability Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.memorystoremanageabilityAdmin) (`roles/recommender.memorystoremanageabilityAdmin`) [Memorystore Manageability Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.memorystoremanageabilityViewer) (`roles/recommender.memorystoremanageabilityViewer`) [Memorystore Performance Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.memorystoreperformanceAdmin) (`roles/recommender.memorystoreperformanceAdmin`) [Memorystore Performance Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.memorystoreperformanceViewer) (`roles/recommender.memorystoreperformanceViewer`) [Memorystore Reliability Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.memorystorereliabilityAdmin) (`roles/recommender.memorystorereliabilityAdmin`) [Memorystore Reliability Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.memorystorereliabilityViewer) (`roles/recommender.memorystorereliabilityViewer`) [Network Analyzer Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerAdmin) (`roles/recommender.networkAnalyzerAdmin`) [Network Analyzer Cloud SQL Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerCloudSqlAdmin) (`roles/recommender.networkAnalyzerCloudSqlAdmin`) [Network Analyzer Cloud SQL Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerCloudSqlViewer) (`roles/recommender.networkAnalyzerCloudSqlViewer`) [Network Analyzer Dynamic Route Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerDynamicRouteAdmin) (`roles/recommender.networkAnalyzerDynamicRouteAdmin`) [Network Analyzer Dynamic Route Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerDynamicRouteViewer) (`roles/recommender.networkAnalyzerDynamicRouteViewer`) [Network Analyzer GKE Connectivity Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerGkeConnectivityAdmin) (`roles/recommender.networkAnalyzerGkeConnectivityAdmin`) [Network Analyzer GKE Connectivity Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerGkeConnectivityViewer) (`roles/recommender.networkAnalyzerGkeConnectivityViewer`) [Network Analyzer GKE IP Address Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerGkeIpAddressAdmin) (`roles/recommender.networkAnalyzerGkeIpAddressAdmin`) [Network Analyzer GKE IP Address Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerGkeIpAddressViewer) (`roles/recommender.networkAnalyzerGkeIpAddressViewer`) [Network Analyzer GKE Service Account Insights Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerGkeServiceAccountAdmin) (`roles/recommender.networkAnalyzerGkeServiceAccountAdmin`) [Network Analyzer GKE Service Account Insights Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerGkeServiceAccountViewer) (`roles/recommender.networkAnalyzerGkeServiceAccountViewer`) [Network Analyzer IP Address Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerIpAddressAdmin) (`roles/recommender.networkAnalyzerIpAddressAdmin`) [Network Analyzer IP Address Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerIpAddressViewer) (`roles/recommender.networkAnalyzerIpAddressViewer`) [Network Analyzer Load Balancer Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerLoadBalancerAdmin) (`roles/recommender.networkAnalyzerLoadBalancerAdmin`) [Network Analyzer Load Balancer Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerLoadBalancerViewer) (`roles/recommender.networkAnalyzerLoadBalancerViewer`) [Network Analyzer Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerViewer) (`roles/recommender.networkAnalyzerViewer`) [Network Analyzer VPC Connectivity Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerVpcConnectivityAdmin) (`roles/recommender.networkAnalyzerVpcConnectivityAdmin`) [Network Analyzer VPC Connectivity Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerVpcConnectivityViewer) (`roles/recommender.networkAnalyzerVpcConnectivityViewer`) [Org Policy Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.orgPolicyAdmin) (`roles/recommender.orgPolicyAdmin`) [Org Policy Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.orgPolicyViewer) (`roles/recommender.orgPolicyViewer`) [Product Suggestion Recommenders Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.productSuggestionAdmin) (`roles/recommender.productSuggestionAdmin`) [Product Suggestion Recommenders Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.productSuggestionViewer) (`roles/recommender.productSuggestionViewer`) [Project Usage Commitment Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.projectCudAdmin) (`roles/recommender.projectCudAdmin`) [Project Usage Commitment Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.projectCudViewer) (`roles/recommender.projectCudViewer`) [Project Utilization Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.projectUtilAdmin) (`roles/recommender.projectUtilAdmin`) [Project Utilization Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.projectUtilViewer) (`roles/recommender.projectUtilViewer`) [RecentChange RecommenderConfig Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.recentChangeConfigAdmin) (`roles/recommender.recentChangeConfigAdmin`) [Recent Change Risk Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.recentchangeriskAdmin) (`roles/recommender.recentchangeriskAdmin`) [Recent Change Risk Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.recentchangeriskViewer) (`roles/recommender.recentchangeriskViewer`) [Service Limit Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.serviceLimitAdmin) (`roles/recommender.serviceLimitAdmin`) [Service Limit Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.serviceLimitViewer) (`roles/recommender.serviceLimitViewer`) [Service Account Change Risk Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.serviceaccntchangeriskAdmin) (`roles/recommender.serviceaccntchangeriskAdmin`) [Service Account Change Risk Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.serviceaccntchangeriskViewer) (`roles/recommender.serviceaccntchangeriskViewer`) [Spanner Project Reliability Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.spannerAdmin) (`roles/recommender.spannerAdmin`) [Spanner Project Reliability Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.spannerViewer) (`roles/recommender.spannerViewer`) [Folder Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderCreator) (`roles/resourcemanager.folderCreator`) [Folder Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderEditor) (`roles/resourcemanager.folderEditor`) [Folder Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderViewer) (`roles/resourcemanager.folderViewer`) [Retail Merchant Approver](https://docs.cloud.google.com/iam/docs/roles-permissions/retail.md.txt#retail.merchantApprover) (`roles/retail.merchantApprover`) [Retail Merchant Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/retail.md.txt#retail.merchantCreator) (`roles/retail.merchantCreator`) [Risk Manager Report Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/riskmanager.md.txt#riskmanager.reviewer) (`roles/riskmanager.reviewer`) [Rapid Migration Assessment Runner](https://docs.cloud.google.com/iam/docs/roles-permissions/rapidmigrationassessment.md.txt#rma.runner) (`roles/rma.runner`) [Roads Selection Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/roads.md.txt#roads.roadsSelectionAdmin) (`roles/roads.roadsSelectionAdmin`) [Roads Selection Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/roads.md.txt#roads.roadsSelectionViewer) (`roles/roads.roadsSelectionViewer`) [Cloud Run Source Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/run.md.txt#run.sourceDeveloper) (`roles/run.sourceDeveloper`) [Cloud Run Source Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/run.md.txt#run.sourceViewer) (`roles/run.sourceViewer`) [Serverless Integrations Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/runapps.md.txt#runapps.developer) (`roles/runapps.developer`) [Serverless Integrations Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/runapps.md.txt#runapps.operator) (`roles/runapps.operator`) [Secret Manager Secret Version Adder](https://docs.cloud.google.com/iam/docs/roles-permissions/secretmanager.md.txt#secretmanager.secretVersionAdder) (`roles/secretmanager.secretVersionAdder`) [Secret Manager Secret Version Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/secretmanager.md.txt#secretmanager.secretVersionManager) (`roles/secretmanager.secretVersionManager`) [Overwatch Activator](https://docs.cloud.google.com/iam/docs/roles-permissions/securedlandingzone.md.txt#securedlandingzone.overwatchActivator) (`roles/securedlandingzone.overwatchActivator`) [Overwatch Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securedlandingzone.md.txt#securedlandingzone.overwatchAdmin) (`roles/securedlandingzone.overwatchAdmin`) [Overwatch Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securedlandingzone.md.txt#securedlandingzone.overwatchViewer) (`roles/securedlandingzone.overwatchViewer`) [Secure Source Manager Developer Connect Linker](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.developerConnectLinker) (`roles/securesourcemanager.developerConnectLinker`) [Secure Source Manager Instance Accessor](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.instanceAccessor) (`roles/securesourcemanager.instanceAccessor`) [Secure Source Manager Instance Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.instanceManager) (`roles/securesourcemanager.instanceManager`) [Secure Source Manager Instance Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.instanceOwner) (`roles/securesourcemanager.instanceOwner`) [Secure Source Manager Instance Repository Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.instanceRepositoryCreator) (`roles/securesourcemanager.instanceRepositoryCreator`) [Secure Source Manager Repository Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.repoAdmin) (`roles/securesourcemanager.repoAdmin`) [Secure Source Manager Repository Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.repoCreator) (`roles/securesourcemanager.repoCreator`) [Secure Source Manager Repository Pull Request Approver](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.repoPullRequestApprover) (`roles/securesourcemanager.repoPullRequestApprover`) [Secure Source Manager Repository Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.repoReader) (`roles/securesourcemanager.repoReader`) [Secure Source Manager Repository Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.repoWriter) (`roles/securesourcemanager.repoWriter`) [Secure Source Manager SSH Key User](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.sshKeyUser) (`roles/securesourcemanager.sshKeyUser`) [Security Center Admin Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminEditor) (`roles/securitycenter.adminEditor`) [Security Center Admin Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminViewer) (`roles/securitycenter.adminViewer`) [Security Center Assets Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.assetsViewer) (`roles/securitycenter.assetsViewer`) [Security Center BigQuery Exports Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.bigQueryExportsEditor) (`roles/securitycenter.bigQueryExportsEditor`) [Security Center BigQuery Exports Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.bigQueryExportsViewer) (`roles/securitycenter.bigQueryExportsViewer`) [Security Center Findings Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.findingsEditor) (`roles/securitycenter.findingsEditor`) [Security Center Findings Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.findingsViewer) (`roles/securitycenter.findingsViewer`) [Security Center Settings Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.settingsAdmin) (`roles/securitycenter.settingsAdmin`) [Security Center Settings Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.settingsEditor) (`roles/securitycenter.settingsEditor`) [Security Center Settings Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.settingsViewer) (`roles/securitycenter.settingsViewer`) [Security Center Management Custom Modules Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.customModulesEditor) (`roles/securitycentermanagement.customModulesEditor`) [Security Center Management Custom Modules Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.customModulesViewer) (`roles/securitycentermanagement.customModulesViewer`) [Security Center Management Custom ETD Modules Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.etdCustomModulesEditor) (`roles/securitycentermanagement.etdCustomModulesEditor`) [Security Center Management ETD Custom Modules Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.etdCustomModulesViewer) (`roles/securitycentermanagement.etdCustomModulesViewer`) [Security Center Management Settings Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.settingsEditor) (`roles/securitycentermanagement.settingsEditor`) [Security Center Management Settings Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.settingsViewer) (`roles/securitycentermanagement.settingsViewer`) [Security Center Management SHA Custom Modules Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.shaCustomModulesEditor) (`roles/securitycentermanagement.shaCustomModulesEditor`) [Security Center Management SHA Custom Modules Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.shaCustomModulesViewer) (`roles/securitycentermanagement.shaCustomModulesViewer`) [Service Directory Network Attacher](https://docs.cloud.google.com/iam/docs/roles-permissions/servicedirectory.md.txt#servicedirectory.networkAttacher) (`roles/servicedirectory.networkAttacher`) [Private Service Connect Authorized Service](https://docs.cloud.google.com/iam/docs/roles-permissions/servicedirectory.md.txt#servicedirectory.pscAuthorizedService) (`roles/servicedirectory.pscAuthorizedService`) [Quota Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/servicemanagement.md.txt#servicemanagement.quotaAdmin) (`roles/servicemanagement.quotaAdmin`) [Cloud Spanner Backup Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/spanner.md.txt#spanner.backupAdmin) (`roles/spanner.backupAdmin`) [Cloud Spanner Database Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/spanner.md.txt#spanner.databaseAdmin) (`roles/spanner.databaseAdmin`) [Cloud Spanner Restore Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/spanner.md.txt#spanner.restoreAdmin) (`roles/spanner.restoreAdmin`) [Stackdriver Accounts Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/monitoring.md.txt#stackdriver.accounts.editor) (`roles/stackdriver.accounts.editor`) [Stackdriver Accounts Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/monitoring.md.txt#stackdriver.accounts.viewer) (`roles/stackdriver.accounts.viewer`) [Storage HMAC Key Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/storage.md.txt#storage.hmacKeyAdmin) (`roles/storage.hmacKeyAdmin`) [Storage Insights Collector Service](https://docs.cloud.google.com/iam/docs/roles-permissions/storage.md.txt#storage.insightsCollectorService) (`roles/storage.insightsCollectorService`) [Storage Insights Analyst](https://docs.cloud.google.com/iam/docs/roles-permissions/storageinsights.md.txt#storageinsights.analyst) (`roles/storageinsights.analyst`) [Storage Transfer User](https://docs.cloud.google.com/iam/docs/roles-permissions/storagetransfer.md.txt#storagetransfer.user) (`roles/storagetransfer.user`) [Stream Content Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/stream.md.txt#stream.contentAdmin) (`roles/stream.contentAdmin`) [Stream Content Builder](https://docs.cloud.google.com/iam/docs/roles-permissions/stream.md.txt#stream.contentBuilder) (`roles/stream.contentBuilder`) [Stream Instance Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/stream.md.txt#stream.instanceAdmin) (`roles/stream.instanceAdmin`) [Subscribe with Google Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/subscribewithgoogledeveloper.md.txt#subscribewithgoogledeveloper.developer) (`roles/subscribewithgoogledeveloper.developer`) [Telco Automation Tier 1 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier1) (`roles/telcoautomation.opsAdminTier1`) [Telco Automation Tier 4 Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.opsAdminTier4) (`roles/telcoautomation.opsAdminTier4`) [GTI Alert Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/threatintelligence.md.txt#threatintelligence.alertAdmin) (`roles/threatintelligence.alertAdmin`) [GTI Alert User](https://docs.cloud.google.com/iam/docs/roles-permissions/threatintelligence.md.txt#threatintelligence.alertUser) (`roles/threatintelligence.alertUser`) [CTEM Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/threatintelligence.md.txt#threatintelligence.ctemAdmin) (`roles/threatintelligence.ctemAdmin`) [CTEM Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/threatintelligence.md.txt#threatintelligence.ctemEditor) (`roles/threatintelligence.ctemEditor`) [CTEM Project Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/threatintelligence.md.txt#threatintelligence.ctemProjectAdmin) (`roles/threatintelligence.ctemProjectAdmin`) [CTEM Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/threatintelligence.md.txt#threatintelligence.ctemViewer) (`roles/threatintelligence.ctemViewer`) [Translation Hub Portal User](https://docs.cloud.google.com/iam/docs/roles-permissions/translationhub.md.txt#translationhub.portalUser) (`roles/translationhub.portalUser`) [Vector Search Collection Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/vectorsearch.md.txt#vectorsearch.collectionWriter) (`roles/vectorsearch.collectionWriter`) [Vector Search DataObject Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/vectorsearch.md.txt#vectorsearch.dataObjectWriter) (`roles/vectorsearch.dataObjectWriter`) [Vector Search Index Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/vectorsearch.md.txt#vectorsearch.indexWriter) (`roles/vectorsearch.indexWriter`) [Video Stitcher User](https://docs.cloud.google.com/iam/docs/roles-permissions/videostitcher.md.txt#videostitcher.user) (`roles/videostitcher.user`) [VMware Engine Service Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/vmwareengine.md.txt#vmwareengine.vmwareengineAdmin) (`roles/vmwareengine.vmwareengineAdmin`) [VMware Engine Service Privileged User](https://docs.cloud.google.com/iam/docs/roles-permissions/vmwareengine.md.txt#vmwareengine.vmwareenginePrivilegedUser) (`roles/vmwareengine.vmwareenginePrivilegedUser`) [VMware Engine Service Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/vmwareengine.md.txt#vmwareengine.vmwareengineViewer) (`roles/vmwareengine.vmwareengineViewer`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) [Wiz Workload Scanner](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.workloadScanner) (`roles/wiz.workloadScanner`) [Workflows Invoker](https://docs.cloud.google.com/iam/docs/roles-permissions/workflows.md.txt#workflows.invoker) (`roles/workflows.invoker`) [Workload Certificate Registration Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadcertificate.md.txt#workloadcertificate.registrationAdmin) (`roles/workloadcertificate.registrationAdmin`) [Workload Certificate Registration Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadcertificate.md.txt#workloadcertificate.registrationViewer) (`roles/workloadcertificate.registrationViewer`) [Workload Manager Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadmanager.md.txt#workloadmanager.deploymentAdmin) (`roles/workloadmanager.deploymentAdmin`) [Workload Manager Deployment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadmanager.md.txt#workloadmanager.deploymentViewer) (`roles/workloadmanager.deploymentViewer`) [Workload Manager Evaluation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadmanager.md.txt#workloadmanager.evaluationAdmin) (`roles/workloadmanager.evaluationAdmin`) [Workload Manager Evaluation Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadmanager.md.txt#workloadmanager.evaluationViewer) (`roles/workloadmanager.evaluationViewer`) [Workload Manager Worker](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadmanager.md.txt#workloadmanager.worker) (`roles/workloadmanager.worker`) [Workload Manager Workload Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadmanager.md.txt#workloadmanager.workloadViewer) (`roles/workloadmanager.workloadViewer`) [Cloud Workstations Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/workstations.md.txt#workstations.workstationCreator) (`roles/workstations.workstationCreator`) [Cloud Workstations Limit Exempted Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/workstations.md.txt#workstations.workstationLimitExemptedCreator) (`roles/workstations.workstationLimitExemptedCreator`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Vertex AI Custom Code Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.customCodeServiceAgent) (`roles/aiplatform.customCodeServiceAgent`) - [Vertex AI Extension Custom Code Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.extensionCustomCodeServiceAgent) (`roles/aiplatform.extensionCustomCodeServiceAgent`) - [Vertex AI Reasoning Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.reasoningEngineServiceAgent) (`roles/aiplatform.reasoningEngineServiceAgent`) - [Vertex AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.serviceAgent) (`roles/aiplatform.serviceAgent`) - [Vertex AI Tuning Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.tuningServiceAgent) (`roles/aiplatform.tuningServiceAgent`) - [Analytics Hub Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/analyticshub.md.txt#analyticshub.serviceAgent) (`roles/analyticshub.serviceAgent`) - [Anthos Service Mesh Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#anthosservicemesh.serviceAgent) (`roles/anthosservicemesh.serviceAgent`) - [Anthos Support Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthossupport.md.txt#anthossupport.serviceAgent) (`roles/anthossupport.serviceAgent`) - [App Engine flexible environment Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/appengineflex.md.txt#appengineflex.serviceAgent) (`roles/appengineflex.serviceAgent`) - [Audit Manager Auditing Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.serviceAgent) (`roles/auditmanager.serviceAgent`) - [Recommendations AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/automlrecommendations.md.txt#automlrecommendations.serviceAgent) (`roles/automlrecommendations.serviceAgent`) - [Backup and DR Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/backupdr.md.txt#backupdr.serviceAgent) (`roles/backupdr.serviceAgent`) - [Bare Metal Solution Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/baremetalsolution.md.txt#baremetalsolution.serviceAgent) (`roles/baremetalsolution.serviceAgent`) - [Google Batch Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/batch.md.txt#batch.serviceAgent) (`roles/batch.serviceAgent`) - [BigQuery Data Transfer Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquerydatatransfer.md.txt#bigquerydatatransfer.serviceAgent) (`roles/bigquerydatatransfer.serviceAgent`) - [BigQuery Migration Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquerymigration.md.txt#bigquerymigration.serviceAgent) (`roles/bigquerymigration.serviceAgent`) - [Binary Authorization Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/binaryauthorization.md.txt#binaryauthorization.serviceAgent) (`roles/binaryauthorization.serviceAgent`) - [Chronicle Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.serviceAgent) (`roles/chronicle.serviceAgent`) - [Cloud Build Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.serviceAgent) (`roles/cloudbuild.serviceAgent`) - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [(Deprecated) Cloud Functions Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudfunctions.md.txt#cloudfunctions.serviceAgent) (`roles/cloudfunctions.serviceAgent`) - [Cloud Functions Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudfunctions.md.txt#cloudfunctions.standardServiceAgent) (`roles/cloudfunctions.standardServiceAgent`) - [Cloud Security Compliance Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.serviceAgent) (`roles/cloudsecuritycompliance.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Compliance Scanning Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/compliancescanning.md.txt#compliancescanning.serviceAgent) (`roles/compliancescanning.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Compute Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.serviceAgent) (`roles/compute.serviceAgent`) - [\[Deprecated\] Kubernetes Engine Node Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.nodeServiceAgent) (`roles/container.nodeServiceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Container Analysis Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/containeranalysis.md.txt#containeranalysis.ServiceAgent) (`roles/containeranalysis.ServiceAgent`) - [Container Scanner Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/containerscanning.md.txt#containerscanning.ServiceAgent) (`roles/containerscanning.ServiceAgent`) - [Container Threat Detection Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/containerthreatdetection.md.txt#containerthreatdetection.serviceAgent) (`roles/containerthreatdetection.serviceAgent`) - [Database Insights Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/databaseinsights.md.txt#databaseinsights.serviceAgent) (`roles/databaseinsights.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Dataform Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.serviceAgent) (`roles/dataform.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [Data Labeling Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datalabeling.md.txt#datalabeling.serviceAgent) (`roles/datalabeling.serviceAgent`) - [Datapipelines Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datapipelines.md.txt#datapipelines.serviceAgent) (`roles/datapipelines.serviceAgent`) - [Cloud Dataplex Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.serviceAgent) (`roles/dataplex.serviceAgent`) - [Dataprep Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataprep.md.txt#dataprep.serviceAgent) (`roles/dataprep.serviceAgent`) - [Dataproc Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.serviceAgent) (`roles/dataproc.serviceAgent`) - [DesignCenter Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/designcenter.md.txt#designcenter.serviceAgent) (`roles/designcenter.serviceAgent`) - [Dialogflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.serviceAgent) (`roles/dialogflow.serviceAgent`) - [Discovery Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.serviceAgent) (`roles/discoveryengine.serviceAgent`) - [DLP API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.serviceAgent) (`roles/dlp.serviceAgent`) - [Edge Container Cluster Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/edgecontainer.md.txt#edgecontainer.clusterServiceAgent) (`roles/edgecontainer.clusterServiceAgent`) - [Enterprise Knowledge Graph Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/enterpriseknowledgegraph.md.txt#enterpriseknowledgegraph.serviceAgent) (`roles/enterpriseknowledgegraph.serviceAgent`) - [Cloud Filestore Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/file.md.txt#file.serviceAgent) (`roles/file.serviceAgent`) - [Firebase Service Management Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.managementServiceAgent) (`roles/firebase.managementServiceAgent`) - [Firebase Admin SDK Administrator Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.sdkAdminServiceAgent) (`roles/firebase.sdkAdminServiceAgent`) - [Firebase Extensions API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasemods.md.txt#firebasemods.serviceAgent) (`roles/firebasemods.serviceAgent`) - [FleetEngine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/fleetengine.md.txt#fleetengine.serviceAgent) (`roles/fleetengine.serviceAgent`) - [Game Services Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gameservices.md.txt#gameservices.serviceAgent) (`roles/gameservices.serviceAgent`) - [Genomics Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/lifesciences.md.txt#genomics.serviceAgent) (`roles/genomics.serviceAgent`) - [Backup for GKE Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkebackup.md.txt#gkebackup.serviceAgent) (`roles/gkebackup.serviceAgent`) - [Warp Run Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkedataplanemanagement.md.txt#gkedataplanemanagement.warpRunServiceAgent) (`roles/gkedataplanemanagement.warpRunServiceAgent`) - [GKE Hub Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.serviceAgent) (`roles/gkehub.serviceAgent`) - [Anthos Multi-Cloud Container Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkemulticloud.md.txt#gkemulticloud.containerServiceAgent) (`roles/gkemulticloud.containerServiceAgent`) - [Anthos Multi-Cloud Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkemulticloud.md.txt#gkemulticloud.serviceAgent) (`roles/gkemulticloud.serviceAgent`) - [Healthcare Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.serviceAgent) (`roles/healthcare.serviceAgent`) - [Cluster Director Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.serviceAgent) (`roles/hypercomputecluster.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) - [Application Integration Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.serviceAgent) (`roles/integrations.serviceAgent`) - [KRM API Hosting AnthosApiEndpoint Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/krmapihosting.md.txt#krmapihosting.anthosApiEndpointServiceAgent) (`roles/krmapihosting.anthosApiEndpointServiceAgent`) - [KRM API Hosting Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/krmapihosting.md.txt#krmapihosting.serviceAgent) (`roles/krmapihosting.serviceAgent`) - [KubeRun Events Control Plane Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/kuberun.md.txt#kuberun.eventsControlPlaneServiceAgent) (`roles/kuberun.eventsControlPlaneServiceAgent`) - [KubeRun Events Data Plane Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/kuberun.md.txt#kuberun.eventsDataPlaneServiceAgent) (`roles/kuberun.eventsDataPlaneServiceAgent`) - [Cloud Life Sciences Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/lifesciences.md.txt#lifesciences.serviceAgent) (`roles/lifesciences.serviceAgent`) - [Looker Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/looker.md.txt#looker.restrictedServiceAgent) (`roles/looker.restrictedServiceAgent`) - [(Legacy) Looker Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/looker.md.txt#looker.serviceAgent) (`roles/looker.serviceAgent`) - [Cloud Managed Identities Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/managedidentities.md.txt#managedidentities.serviceAgent) (`roles/managedidentities.serviceAgent`) - [Cloud Memorystore Memcached Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/memcache.md.txt#memcache.serviceAgent) (`roles/memcache.serviceAgent`) - [Cloud Memorystore Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/memorystore.md.txt#memorystore.serviceAgent) (`roles/memorystore.serviceAgent`) - [Mesh Managed Control Plane Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/meshcontrolplane.md.txt#meshcontrolplane.serviceAgent) (`roles/meshcontrolplane.serviceAgent`) - [AI Platform Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/ml.md.txt#ml.serviceAgent) (`roles/ml.serviceAgent`) - [Multi-Cluster Service Discovery Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/multiclusterservicediscovery.md.txt#multiclusterservicediscovery.serviceAgent) (`roles/multiclusterservicediscovery.serviceAgent`) - [AI Platform Notebooks Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/notebooks.md.txt#notebooks.serviceAgent) (`roles/notebooks.serviceAgent`) - [Oracle Database@Google Cloud Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/oci.md.txt#oci.serviceAgent) (`roles/oci.serviceAgent`) - [Cloud OS Config Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.serviceAgent) (`roles/osconfig.serviceAgent`) - [Parallelstore Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/parallelstore.md.txt#parallelstore.serviceAgent) (`roles/parallelstore.serviceAgent`) - [Privileged Access Manager Project Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/privilegedaccessmanager.md.txt#privilegedaccessmanager.projectServiceAgent) (`roles/privilegedaccessmanager.projectServiceAgent`) - [Privileged Access Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/privilegedaccessmanager.md.txt#privilegedaccessmanager.serviceAgent) (`roles/privilegedaccessmanager.serviceAgent`) - [Cloud Pub/Sub Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/pubsub.md.txt#pubsub.serviceAgent) (`roles/pubsub.serviceAgent`) - [RMA Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/rapidmigrationassessment.md.txt#rapidmigrationassessment.serviceAgent) (`roles/rapidmigrationassessment.serviceAgent`) - [Cloud Memorystore Redis Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/redis.md.txt#redis.serviceAgent) (`roles/redis.serviceAgent`) - [Retail Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/retail.md.txt#retail.serviceAgent) (`roles/retail.serviceAgent`) - [Risk Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/riskmanager.md.txt#riskmanager.serviceAgent) (`roles/riskmanager.serviceAgent`) - [Cloud Run Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/run.md.txt#run.serviceAgent) (`roles/run.serviceAgent`) - [Secured Landing Zone Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securedlandingzone.md.txt#securedlandingzone.serviceAgent) (`roles/securedlandingzone.serviceAgent`) - [Attack Surface Management Scanner Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.attackSurfaceManagementScannerServiceAgent) (`roles/securitycenter.attackSurfaceManagementScannerServiceAgent`) - [Security Center Automation Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.automationServiceAgent) (`roles/securitycenter.automationServiceAgent`) - [Security Center Control Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.controlServiceAgent) (`roles/securitycenter.controlServiceAgent`) - [Security Health Analytics Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.securityHealthAnalyticsServiceAgent) (`roles/securitycenter.securityHealthAnalyticsServiceAgent`) - [Security Center Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.serviceAgent) (`roles/securitycenter.serviceAgent`) - [Service Directory Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/servicedirectory.md.txt#servicedirectory.serviceAgent) (`roles/servicedirectory.serviceAgent`) - [Service Networking Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/servicenetworking.md.txt#servicenetworking.serviceAgent) (`roles/servicenetworking.serviceAgent`) - [Spectrum SAS Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/spectrumsas.md.txt#spectrumsas.serviceAgent) (`roles/spectrumsas.serviceAgent`) - [Stream Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/stream.md.txt#stream.serviceAgent) (`roles/stream.serviceAgent`) - [Cloud TPU API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#tpu.serviceAgent) (`roles/tpu.serviceAgent`) - [Visual Inspection AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/visualinspection.md.txt#visualinspection.serviceAgent) (`roles/visualinspection.serviceAgent`) - [VMware Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/vmwareengine.md.txt#vmwareengine.serviceAgent) (`roles/vmwareengine.serviceAgent`) - [Serverless VPC Access Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/vpcaccess.md.txt#vpcaccess.serviceAgent) (`roles/vpcaccess.serviceAgent`) |
| #### `resourcemanager.projects.getIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Apigee Organization Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.admin) (`roles/apigee.admin`) [Cloud Functions Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudfunctions.md.txt#cloudfunctions.admin) (`roles/cloudfunctions.admin`) [Data Studio Asset Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/datastudio.md.txt#datastudio.editor) (`roles/datastudio.editor`) [Firebase Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.admin) (`roles/firebase.admin`) [Firebase Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.editor) (`roles/firebase.editor`) [Firebase Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.viewer) (`roles/firebase.viewer`) [Role Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.roleAdmin) (`roles/iam.roleAdmin`) [Role Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.roleViewer) (`roles/iam.roleViewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Organization Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationAdmin) (`roles/resourcemanager.organizationAdmin`) [Project IAM Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.projectIamAdmin) (`roles/resourcemanager.projectIamAdmin`) [Workload Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadmanager.md.txt#workloadmanager.admin) (`roles/workloadmanager.admin`) [Apigee Developer Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.developerAdmin) (`roles/apigee.developerAdmin`) [Apigee Environment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.environmentAdmin) (`roles/apigee.environmentAdmin`) [Apigee Read-only Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.readOnlyAdmin) (`roles/apigee.readOnlyAdmin`) [Container Registry -\> Artifact Registry Migration Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/artifactregistry.md.txt#artifactregistry.containerRegistryMigrationAdmin) (`roles/artifactregistry.containerRegistryMigrationAdmin`) [Browser](https://docs.cloud.google.com/iam/docs/roles-permissions/browser.md.txt#browser) (`roles/browser`) [Compute Shared VPC Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.xpnAdmin) (`roles/compute.xpnAdmin`) [Data Studio Workspace Content Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/datastudio.md.txt#datastudio.contentManager) (`roles/datastudio.contentManager`) [Data Studio Workspace Contributor](https://docs.cloud.google.com/iam/docs/roles-permissions/datastudio.md.txt#datastudio.contributor) (`roles/datastudio.contributor`) [Data Studio Workspace Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/datastudio.md.txt#datastudio.manager) (`roles/datastudio.manager`) [Firebase Analytics Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.analyticsAdmin) (`roles/firebase.analyticsAdmin`) [Firebase Analytics Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.analyticsViewer) (`roles/firebase.analyticsViewer`) [Firebase Develop Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.developAdmin) (`roles/firebase.developAdmin`) [Firebase Develop Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.developViewer) (`roles/firebase.developViewer`) [Firebase Grow Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.growthAdmin) (`roles/firebase.growthAdmin`) [Firebase Grow Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.growthViewer) (`roles/firebase.growthViewer`) [Firebase Quality Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.qualityAdmin) (`roles/firebase.qualityAdmin`) [Firebase Quality Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.qualityViewer) (`roles/firebase.qualityViewer`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Organization Role Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.organizationRoleAdmin) (`roles/iam.organizationRoleAdmin`) [Organization Role Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.organizationRoleViewer) (`roles/iam.organizationRoleViewer`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Looker Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/datastudio.md.txt#lookerstudio.lookerAdmin) (`roles/lookerstudio.lookerAdmin`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) [Workload Manager Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadmanager.md.txt#workloadmanager.deploymentAdmin) (`roles/workloadmanager.deploymentAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [App Engine flexible environment Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/appengineflex.md.txt#appengineflex.serviceAgent) (`roles/appengineflex.serviceAgent`) - [Audit Manager Auditing Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.serviceAgent) (`roles/auditmanager.serviceAgent`) - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [(Deprecated) Cloud Functions Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudfunctions.md.txt#cloudfunctions.serviceAgent) (`roles/cloudfunctions.serviceAgent`) - [Cloud Functions Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudfunctions.md.txt#cloudfunctions.standardServiceAgent) (`roles/cloudfunctions.standardServiceAgent`) - [Cloud Security Compliance Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.serviceAgent) (`roles/cloudsecuritycompliance.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Discovery Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.serviceAgent) (`roles/discoveryengine.serviceAgent`) - [DSPM Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dspm.md.txt#dspm.serviceAgent) (`roles/dspm.serviceAgent`) - [Firebase Service Management Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.managementServiceAgent) (`roles/firebase.managementServiceAgent`) - [GKE Hub Cross Project Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.crossProjectServiceAgent) (`roles/gkehub.crossProjectServiceAgent`) - [KRM API Hosting AnthosApiEndpoint Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/krmapihosting.md.txt#krmapihosting.anthosApiEndpointServiceAgent) (`roles/krmapihosting.anthosApiEndpointServiceAgent`) - [Privileged Access Manager Project Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/privilegedaccessmanager.md.txt#privilegedaccessmanager.projectServiceAgent) (`roles/privilegedaccessmanager.projectServiceAgent`) - [Privileged Access Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/privilegedaccessmanager.md.txt#privilegedaccessmanager.serviceAgent) (`roles/privilegedaccessmanager.serviceAgent`) - [Cloud Run Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/run.md.txt#run.serviceAgent) (`roles/run.serviceAgent`) - [Security Center Automation Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.automationServiceAgent) (`roles/securitycenter.automationServiceAgent`) - [Security Center Control Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.controlServiceAgent) (`roles/securitycenter.controlServiceAgent`) - [Security Center Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.serviceAgent) (`roles/securitycenter.serviceAgent`) |
| #### `resourcemanager.projects.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Access Approval Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/accessapproval.md.txt#accessapproval.admin) (`roles/accessapproval.admin`) [Access Approval Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/accessapproval.md.txt#accessapproval.editor) (`roles/accessapproval.editor`) [Access Approval Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/accessapproval.md.txt#accessapproval.viewer) (`roles/accessapproval.viewer`) [Access Context Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.admin) (`roles/accesscontextmanager.admin`) [Access Context Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.editor) (`roles/accesscontextmanager.editor`) [Access Context Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.policyAdmin) (`roles/accesscontextmanager.policyAdmin`) [Access Context Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.viewer) (`roles/accesscontextmanager.viewer`) [Actions Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/actions.md.txt#actions.Admin) (`roles/actions.Admin`) [Actions Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/actions.md.txt#actions.Viewer) (`roles/actions.Viewer`) [Agent Platform Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.admin) (`roles/aiplatform.admin`) [Aiplatform Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.editor) (`roles/aiplatform.editor`) [Agent Platform User](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.user) (`roles/aiplatform.user`) [Agent Platform Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.viewer) (`roles/aiplatform.viewer`) [AlloyDB Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/alloydb.md.txt#alloydb.admin) (`roles/alloydb.admin`) [AlloyDB Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/alloydb.md.txt#alloydb.editor) (`roles/alloydb.editor`) [AlloyDB Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/alloydb.md.txt#alloydb.viewer) (`roles/alloydb.viewer`) [Analytics Hub Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/analyticshub.md.txt#analyticshub.admin) (`roles/analyticshub.admin`) [Analytics Hub Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/analyticshub.md.txt#analyticshub.editor) (`roles/analyticshub.editor`) [Analytics Hub Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/analyticshub.md.txt#analyticshub.viewer) (`roles/analyticshub.viewer`) [Androidmanagement Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/androidmanagement.md.txt#androidmanagement.admin) (`roles/androidmanagement.admin`) [ApiGateway Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apigateway.md.txt#apigateway.admin) (`roles/apigateway.admin`) [ApiGateway Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/apigateway.md.txt#apigateway.editor) (`roles/apigateway.editor`) [ApiGateway Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/apigateway.md.txt#apigateway.viewer) (`roles/apigateway.viewer`) [Apigee Organization Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.admin) (`roles/apigee.admin`) [Apigee API Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.apiAdminV2) (`roles/apigee.apiAdminV2`) [Apigee Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.editor) (`roles/apigee.editor`) [Apigee Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.viewer) (`roles/apigee.viewer`) [Apigeeconnect Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/apigeeconnect.md.txt#apigeeconnect.viewer) (`roles/apigeeconnect.viewer`) [Cloud Apigee Registry Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apigeeregistry.md.txt#apigeeregistry.admin) (`roles/apigeeregistry.admin`) [Cloud Apigee Registry Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/apigeeregistry.md.txt#apigeeregistry.editor) (`roles/apigeeregistry.editor`) [Cloud Apigee Registry Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/apigeeregistry.md.txt#apigeeregistry.viewer) (`roles/apigeeregistry.viewer`) [Cloud API Hub Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apihub.md.txt#apihub.admin) (`roles/apihub.admin`) [Cloud API Hub Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/apihub.md.txt#apihub.editor) (`roles/apihub.editor`) [Cloud API Hub Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/apihub.md.txt#apihub.viewer) (`roles/apihub.viewer`) [API Management Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apim.md.txt#apim.admin) (`roles/apim.admin`) [API Management Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/apim.md.txt#apim.viewer) (`roles/apim.viewer`) [App Engine Service Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/appengine.md.txt#appengine.admin) (`roles/appengine.admin`) [App Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/appengine.md.txt#appengine.appAdmin) (`roles/appengine.appAdmin`) [App Engine Service Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/appengine.md.txt#appengine.editor) (`roles/appengine.editor`) [App Engine Service Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/appengine.md.txt#appengine.viewer) (`roles/appengine.viewer`) [App Hub Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apphub.md.txt#apphub.admin) (`roles/apphub.admin`) [App Hub Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/apphub.md.txt#apphub.editor) (`roles/apphub.editor`) [App Hub Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/apphub.md.txt#apphub.viewer) (`roles/apphub.viewer`) [Appliance Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/applianceactivation.md.txt#applianceactivation.admin) (`roles/applianceactivation.admin`) [Appliance Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/applianceactivation.md.txt#applianceactivation.viewer) (`roles/applianceactivation.viewer`) [App Topology Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apptopology.md.txt#apptopology.admin) (`roles/apptopology.admin`) [App Topology Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/apptopology.md.txt#apptopology.viewer) (`roles/apptopology.viewer`) [Artifact Registry Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/artifactregistry.md.txt#artifactregistry.admin) (`roles/artifactregistry.admin`) [Artifact Registry Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/artifactregistry.md.txt#artifactregistry.editor) (`roles/artifactregistry.editor`) [Artifact Registry Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/artifactregistry.md.txt#artifactregistry.viewer) (`roles/artifactregistry.viewer`) [Assured OSS Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredoss.md.txt#assuredoss.admin) (`roles/assuredoss.admin`) [Assured OSS Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredoss.md.txt#assuredoss.editor) (`roles/assuredoss.editor`) [Assured OSS Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredoss.md.txt#assuredoss.viewer) (`roles/assuredoss.viewer`) [Assured Workloads Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.admin) (`roles/assuredworkloads.admin`) [Assured Workloads Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.editor) (`roles/assuredworkloads.editor`) [Assured Workloads Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.viewer) (`roles/assuredworkloads.viewer`) [Audit Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.admin) (`roles/auditmanager.admin`) [Auditmanager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.viewer) (`roles/auditmanager.viewer`) [AutoML Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/automl.md.txt#automl.admin) (`roles/automl.admin`) [AutoML Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/automl.md.txt#automl.editor) (`roles/automl.editor`) [AutoML Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/automl.md.txt#automl.viewer) (`roles/automl.viewer`) [Recommendations AI Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/automlrecommendations.md.txt#automlrecommendations.admin) (`roles/automlrecommendations.admin`) [Recommendations AI Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/automlrecommendations.md.txt#automlrecommendations.editor) (`roles/automlrecommendations.editor`) [Recommendations AI Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/automlrecommendations.md.txt#automlrecommendations.viewer) (`roles/automlrecommendations.viewer`) [Autoscaling Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/autoscaling.md.txt#autoscaling.admin) (`roles/autoscaling.admin`) [Autoscaling Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/autoscaling.md.txt#autoscaling.editor) (`roles/autoscaling.editor`) [Autoscaling Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/autoscaling.md.txt#autoscaling.viewer) (`roles/autoscaling.viewer`) [Access Transparency Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/axt.md.txt#axt.admin) (`roles/axt.admin`) [Backup and DR Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/backupdr.md.txt#backupdr.admin) (`roles/backupdr.admin`) [Backupdr Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/backupdr.md.txt#backupdr.editor) (`roles/backupdr.editor`) [Backup and DR Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/backupdr.md.txt#backupdr.viewer) (`roles/backupdr.viewer`) [Bare Metal Solution Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/baremetalsolution.md.txt#baremetalsolution.admin) (`roles/baremetalsolution.admin`) [Bare Metal Solution Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/baremetalsolution.md.txt#baremetalsolution.editor) (`roles/baremetalsolution.editor`) [Bare Metal Solution Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/baremetalsolution.md.txt#baremetalsolution.viewer) (`roles/baremetalsolution.viewer`) [Batch Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/batch.md.txt#batch.admin) (`roles/batch.admin`) [Batch Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/batch.md.txt#batch.viewer) (`roles/batch.viewer`) [Cloud BeyondCorp Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/beyondcorp.md.txt#beyondcorp.admin) (`roles/beyondcorp.admin`) [Cloud BeyondCorp Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/beyondcorp.md.txt#beyondcorp.editor) (`roles/beyondcorp.editor`) [Cloud BeyondCorp Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/beyondcorp.md.txt#beyondcorp.viewer) (`roles/beyondcorp.viewer`) [BigLake Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/biglake.md.txt#biglake.admin) (`roles/biglake.admin`) [BigLake Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/biglake.md.txt#biglake.editor) (`roles/biglake.editor`) [BigLake Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/biglake.md.txt#biglake.viewer) (`roles/biglake.viewer`) [BigQuery Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.admin) (`roles/bigquery.admin`) [BigQuery Data Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.dataEditor) (`roles/bigquery.dataEditor`) [BigQuery Data Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.dataOwner) (`roles/bigquery.dataOwner`) [BigQuery Data Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.dataViewer) (`roles/bigquery.dataViewer`) [BigQuery Job User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.jobUser) (`roles/bigquery.jobUser`) [BigQuery Metadata Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.metadataViewer) (`roles/bigquery.metadataViewer`) [BigQuery Read Session User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.readSessionUser) (`roles/bigquery.readSessionUser`) [BigQuery Resource Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.resourceAdmin) (`roles/bigquery.resourceAdmin`) [BigQuery Resource Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.resourceEditor) (`roles/bigquery.resourceEditor`) [BigQuery Resource Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.resourceViewer) (`roles/bigquery.resourceViewer`) [BigQuery Studio Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.studioAdmin) (`roles/bigquery.studioAdmin`) [BigQuery Studio User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.studioUser) (`roles/bigquery.studioUser`) [BigQuery User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.user) (`roles/bigquery.user`) [BigQuery Data Policy Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquerydatapolicy.md.txt#bigquerydatapolicy.editor) (`roles/bigquerydatapolicy.editor`) [Bigquerymigration Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquerymigration.md.txt#bigquerymigration.admin) (`roles/bigquerymigration.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Billing Account Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/billing.md.txt#billing.admin) (`roles/billing.admin`) [Binary Authorization Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/binaryauthorization.md.txt#binaryauthorization.admin) (`roles/binaryauthorization.admin`) [Binary Authorization Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/binaryauthorization.md.txt#binaryauthorization.editor) (`roles/binaryauthorization.editor`) [Binary Authorization Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/binaryauthorization.md.txt#binaryauthorization.viewer) (`roles/binaryauthorization.viewer`) [Blockchain Node Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/blockchainnodeengine.md.txt#blockchainnodeengine.admin) (`roles/blockchainnodeengine.admin`) [Blockchain Node Engine Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/blockchainnodeengine.md.txt#blockchainnodeengine.viewer) (`roles/blockchainnodeengine.viewer`) [Blockchain Validator Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/blockchainvalidatormanager.md.txt#blockchainvalidatormanager.admin) (`roles/blockchainvalidatormanager.admin`) [Blockchain Validator Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/blockchainvalidatormanager.md.txt#blockchainvalidatormanager.viewer) (`roles/blockchainvalidatormanager.viewer`) [Capacityplanner Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/capacityplanner.md.txt#capacityplanner.admin) (`roles/capacityplanner.admin`) [Capacity Planner Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/capacityplanner.md.txt#capacityplanner.viewer) (`roles/capacityplanner.viewer`) [Carestudio Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/carestudio.md.txt#carestudio.admin) (`roles/carestudio.admin`) [Care Studio Patients Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/carestudio.md.txt#carestudio.viewer) (`roles/carestudio.viewer`) [Certificate Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/certificatemanager.md.txt#certificatemanager.admin) (`roles/certificatemanager.admin`) [Certificate Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/certificatemanager.md.txt#certificatemanager.editor) (`roles/certificatemanager.editor`) [Certificate Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/certificatemanager.md.txt#certificatemanager.viewer) (`roles/certificatemanager.viewer`) [Gemini Enterprise for Customer Experience Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.admin) (`roles/ces.admin`) [Gemini Enterprise for Customer Experience Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.viewer) (`roles/ces.viewer`) [Chat Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/chat.md.txt#chat.admin) (`roles/chat.admin`) [Chat Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/chat.md.txt#chat.viewer) (`roles/chat.viewer`) [Chronicle API Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.admin) (`roles/chronicle.admin`) [Chronicle API Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.editor) (`roles/chronicle.editor`) [Chronicle API Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.viewer) (`roles/chronicle.viewer`) [Chroniclesm Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/chroniclesm.md.txt#chroniclesm.editor) (`roles/chroniclesm.editor`) [Cloud Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloud.md.txt#cloud.admin) (`roles/cloud.admin`) [Cloud Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloud.md.txt#cloud.viewer) (`roles/cloud.viewer`) [Gemini for Google Cloud Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudaicompanion.md.txt#cloudaicompanion.admin) (`roles/cloudaicompanion.admin`) [Gemini for Google Cloud Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudaicompanion.md.txt#cloudaicompanion.editor) (`roles/cloudaicompanion.editor`) [Gemini for Google Cloud User](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudaicompanion.md.txt#cloudaicompanion.user) (`roles/cloudaicompanion.user`) [Gemini for Google Cloud Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudaicompanion.md.txt#cloudaicompanion.viewer) (`roles/cloudaicompanion.viewer`) [Cloud Asset Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudasset.md.txt#cloudasset.admin) (`roles/cloudasset.admin`) [Cloud Asset Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudasset.md.txt#cloudasset.editor) (`roles/cloudasset.editor`) [Cloud Build Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.admin) (`roles/cloudbuild.admin`) [Cloud Build Service Account](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.builds.builder) (`roles/cloudbuild.builds.builder`) [Cloud Build Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.editor) (`roles/cloudbuild.editor`) [Cloud Build Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.viewer) (`roles/cloudbuild.viewer`) [Firebase Remote Config Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudconfig.md.txt#cloudconfig.admin) (`roles/cloudconfig.admin`) [Firebase Remote Config Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudconfig.md.txt#cloudconfig.viewer) (`roles/cloudconfig.viewer`) [Cloudcontrolspartner Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudcontrolspartner.md.txt#cloudcontrolspartner.viewer) (`roles/cloudcontrolspartner.viewer`) [Cloud Deploy Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddeploy.md.txt#clouddeploy.admin) (`roles/clouddeploy.admin`) [Cloud Deploy Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddeploy.md.txt#clouddeploy.editor) (`roles/clouddeploy.editor`) [Cloud Deploy Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddeploy.md.txt#clouddeploy.viewer) (`roles/clouddeploy.viewer`) [Cloud Functions Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudfunctions.md.txt#cloudfunctions.admin) (`roles/cloudfunctions.admin`) [Cloud Functions Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudfunctions.md.txt#cloudfunctions.editor) (`roles/cloudfunctions.editor`) [Cloud Functions Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudfunctions.md.txt#cloudfunctions.viewer) (`roles/cloudfunctions.viewer`) [Cloud Talent Solution Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudjobdiscovery.md.txt#cloudjobdiscovery.admin) (`roles/cloudjobdiscovery.admin`) [Cloud Talent Solution Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudjobdiscovery.md.txt#cloudjobdiscovery.viewer) (`roles/cloudjobdiscovery.viewer`) [Cloud Location Finder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudlocationfinder.md.txt#cloudlocationfinder.admin) (`roles/cloudlocationfinder.admin`) [Cloud Location Finder Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudlocationfinder.md.txt#cloudlocationfinder.viewer) (`roles/cloudlocationfinder.viewer`) [Firebase Cloud Messaging Service Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasecloudmessaging.md.txt#cloudmessaging.editor) (`roles/cloudmessaging.editor`) [Catalog Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprivatecatalog.md.txt#cloudprivatecatalog.admin) (`roles/cloudprivatecatalog.admin`) [Catalog Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprivatecatalog.md.txt#cloudprivatecatalog.viewer) (`roles/cloudprivatecatalog.viewer`) [Catalog Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprivatecatalog.md.txt#cloudprivatecatalogproducer.admin) (`roles/cloudprivatecatalogproducer.admin`) [Catalog Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprivatecatalog.md.txt#cloudprivatecatalogproducer.editor) (`roles/cloudprivatecatalogproducer.editor`) [Catalog Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprivatecatalog.md.txt#cloudprivatecatalogproducer.viewer) (`roles/cloudprivatecatalogproducer.viewer`) [Cloud Profiler Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprofiler.md.txt#cloudprofiler.admin) (`roles/cloudprofiler.admin`) [Cloud Profiler Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprofiler.md.txt#cloudprofiler.viewer) (`roles/cloudprofiler.viewer`) [Cloud Quotas Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudquotas.md.txt#cloudquotas.admin) (`roles/cloudquotas.admin`) [Cloud Quotas Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudquotas.md.txt#cloudquotas.viewer) (`roles/cloudquotas.viewer`) [Cloud Scheduler Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudscheduler.md.txt#cloudscheduler.admin) (`roles/cloudscheduler.admin`) [Cloud Scheduler Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudscheduler.md.txt#cloudscheduler.viewer) (`roles/cloudscheduler.viewer`) [Compliance Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.admin) (`roles/cloudsecuritycompliance.admin`) [Compliance Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.viewer) (`roles/cloudsecuritycompliance.viewer`) [Web Security Scanner Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecurityscanner.md.txt#cloudsecurityscanner.admin) (`roles/cloudsecurityscanner.admin`) [Web Security Scanner Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecurityscanner.md.txt#cloudsecurityscanner.editor) (`roles/cloudsecurityscanner.editor`) [Cloud SQL Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsql.md.txt#cloudsql.admin) (`roles/cloudsql.admin`) [Cloud SQL Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsql.md.txt#cloudsql.editor) (`roles/cloudsql.editor`) [Cloud SQL Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsql.md.txt#cloudsql.viewer) (`roles/cloudsql.viewer`) [Cloud Tasks Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtasks.md.txt#cloudtasks.admin) (`roles/cloudtasks.admin`) [Cloud Tasks Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtasks.md.txt#cloudtasks.editor) (`roles/cloudtasks.editor`) [Cloud Tasks Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtasks.md.txt#cloudtasks.viewer) (`roles/cloudtasks.viewer`) [Cloud Test Service Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtestservice.md.txt#cloudtestservice.admin) (`roles/cloudtestservice.admin`) [Cloud Test Service Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtestservice.md.txt#cloudtestservice.viewer) (`roles/cloudtestservice.viewer`) [Cloud Trace Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtrace.md.txt#cloudtrace.admin) (`roles/cloudtrace.admin`) [Cloud Trace User](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtrace.md.txt#cloudtrace.user) (`roles/cloudtrace.user`) [Cloud Translation API Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtranslate.md.txt#cloudtranslate.admin) (`roles/cloudtranslate.admin`) [Cloud Translation API Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtranslate.md.txt#cloudtranslate.editor) (`roles/cloudtranslate.editor`) [Cloud Translation API User](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtranslate.md.txt#cloudtranslate.user) (`roles/cloudtranslate.user`) [Cloud Translation API Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtranslate.md.txt#cloudtranslate.viewer) (`roles/cloudtranslate.viewer`) [Commerce Agreement Publishing Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/commerceagreementpublishing.md.txt#commerceagreementpublishing.admin) (`roles/commerceagreementpublishing.admin`) [Commerce Agreement Publishing Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/commerceagreementpublishing.md.txt#commerceagreementpublishing.viewer) (`roles/commerceagreementpublishing.viewer`) [Commerce Business Enablement Configuration Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/commercebusinessenablement.md.txt#commercebusinessenablement.admin) (`roles/commercebusinessenablement.admin`) [Commerce Business Enablement Configuration Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/commercebusinessenablement.md.txt#commercebusinessenablement.viewer) (`roles/commercebusinessenablement.viewer`) [Commerce Offer Catalog Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/commerceoffercatalog.md.txt#commerceoffercatalog.admin) (`roles/commerceoffercatalog.admin`) [Commerce Organization Governance Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/commerceorggovernance.md.txt#commerceorggovernance.admin) (`roles/commerceorggovernance.admin`) [Commerce Organization Governance Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/commerceorggovernance.md.txt#commerceorggovernance.viewer) (`roles/commerceorggovernance.viewer`) [Commercepricemanagement Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/commercepricemanagement.md.txt#commercepricemanagement.editor) (`roles/commercepricemanagement.editor`) [Commerce Price Management Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/commercepricemanagement.md.txt#commercepricemanagement.viewer) (`roles/commercepricemanagement.viewer`) [Commerce Producer Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/commerceproducer.md.txt#commerceproducer.admin) (`roles/commerceproducer.admin`) [Commerce Producer Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/commerceproducer.md.txt#commerceproducer.viewer) (`roles/commerceproducer.viewer`) [Composer Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.editor) (`roles/composer.editor`) [Composer Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.viewer) (`roles/composer.viewer`) [Compute Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.admin) (`roles/compute.admin`) [Compute Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.editor) (`roles/compute.editor`) [Compute Instance Admin (beta)](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.instanceAdmin) (`roles/compute.instanceAdmin`) [Compute Instance Admin (v1)](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.instanceAdmin.v1) (`roles/compute.instanceAdmin.v1`) [Compute Load Balancer Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.loadBalancerAdmin) (`roles/compute.loadBalancerAdmin`) [Compute Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkAdmin) (`roles/compute.networkAdmin`) [Compute Network User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkUser) (`roles/compute.networkUser`) [Compute Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.networkViewer) (`roles/compute.networkViewer`) [Compute OS Admin Login](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.osAdminLogin) (`roles/compute.osAdminLogin`) [Compute OS Login](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.osLogin) (`roles/compute.osLogin`) [Compute Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.securityAdmin) (`roles/compute.securityAdmin`) [Compute Storage Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.storageAdmin) (`roles/compute.storageAdmin`) [Compute Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.viewer) (`roles/compute.viewer`) [Confidentialcomputing Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/confidentialcomputing.md.txt#confidentialcomputing.admin) (`roles/confidentialcomputing.admin`) [Confidentialcomputing Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/confidentialcomputing.md.txt#confidentialcomputing.viewer) (`roles/confidentialcomputing.viewer`) [Cloud Infrastructure Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/config.md.txt#config.admin) (`roles/config.admin`) [Cloud Infrastructure Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/config.md.txt#config.editor) (`roles/config.editor`) [Cloud Infrastructure Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/config.md.txt#config.viewer) (`roles/config.viewer`) [Configdelivery Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/configdelivery.md.txt#configdelivery.admin) (`roles/configdelivery.admin`) [Configdelivery Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/configdelivery.md.txt#configdelivery.viewer) (`roles/configdelivery.viewer`) [Connector Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/connectors.md.txt#connectors.admin) (`roles/connectors.admin`) [Connectors Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/connectors.md.txt#connectors.editor) (`roles/connectors.editor`) [Connectors Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/connectors.md.txt#connectors.viewer) (`roles/connectors.viewer`) [Contact Center AI Platform Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/contactcenteraiplatform.md.txt#contactcenteraiplatform.admin) (`roles/contactcenteraiplatform.admin`) [Contact Center AI Platform Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/contactcenteraiplatform.md.txt#contactcenteraiplatform.viewer) (`roles/contactcenteraiplatform.viewer`) [Kubernetes Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.admin) (`roles/container.admin`) [Kubernetes Engine Cluster Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.clusterAdmin) (`roles/container.clusterAdmin`) [Kubernetes Engine Cluster Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.clusterViewer) (`roles/container.clusterViewer`) [Kubernetes Engine Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.developer) (`roles/container.developer`) [Kubernetes Engine Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.editor) (`roles/container.editor`) [Kubernetes Engine Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.viewer) (`roles/container.viewer`) [Container Analysis Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/containeranalysis.md.txt#containeranalysis.admin) (`roles/containeranalysis.admin`) [Container Analysis Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/containeranalysis.md.txt#containeranalysis.editor) (`roles/containeranalysis.editor`) [Container Analysis Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/containeranalysis.md.txt#containeranalysis.viewer) (`roles/containeranalysis.viewer`) [Containersecurity Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/containersecurity.md.txt#containersecurity.admin) (`roles/containersecurity.admin`) [GKE Security Posture Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/containersecurity.md.txt#containersecurity.viewer) (`roles/containersecurity.viewer`) [Content Warehouse Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/contentwarehouse.md.txt#contentwarehouse.admin) (`roles/contentwarehouse.admin`) [Database Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/databasecenter.md.txt#databasecenter.admin) (`roles/databasecenter.admin`) [Database Center Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/databasecenter.md.txt#databasecenter.viewer) (`roles/databasecenter.viewer`) [Database Insights Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/databaseinsights.md.txt#databaseinsights.admin) (`roles/databaseinsights.admin`) [Database Insights Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/databaseinsights.md.txt#databaseinsights.editor) (`roles/databaseinsights.editor`) [Database Insights Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/databaseinsights.md.txt#databaseinsights.viewer) (`roles/databaseinsights.viewer`) [Databasesconsole Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/databasesconsole.md.txt#databasesconsole.editor) (`roles/databasesconsole.editor`) [Databasesconsole Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/databasesconsole.md.txt#databasesconsole.viewer) (`roles/databasesconsole.viewer`) [Data Catalog Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.admin) (`roles/datacatalog.admin`) [Data Catalog Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.editor) (`roles/datacatalog.editor`) [Data Catalog Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.viewer) (`roles/datacatalog.viewer`) [Data Connectors Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dataconnectors.md.txt#dataconnectors.admin) (`roles/dataconnectors.admin`) [Data Connectors Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dataconnectors.md.txt#dataconnectors.editor) (`roles/dataconnectors.editor`) [Data Connectors Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataconnectors.md.txt#dataconnectors.viewer) (`roles/dataconnectors.viewer`) [Dataflow Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.admin) (`roles/dataflow.admin`) [Dataflow Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.viewer) (`roles/dataflow.viewer`) [Dataform Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.admin) (`roles/dataform.admin`) [Dataform Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.editor) (`roles/dataform.editor`) [Dataform Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.viewer) (`roles/dataform.viewer`) [Cloud Data Fusion Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.admin) (`roles/datafusion.admin`) [Cloud Data Fusion Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.viewer) (`roles/datafusion.viewer`) [Data Labeling Service Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/datalabeling.md.txt#datalabeling.admin) (`roles/datalabeling.admin`) [Data Labeling Service Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/datalabeling.md.txt#datalabeling.editor) (`roles/datalabeling.editor`) [Data Labeling Service Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/datalabeling.md.txt#datalabeling.viewer) (`roles/datalabeling.viewer`) [Data Lineage Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/datalineage.md.txt#datalineage.admin) (`roles/datalineage.admin`) [Data Lineage Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/datalineage.md.txt#datalineage.editor) (`roles/datalineage.editor`) [Data Lineage Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/datalineage.md.txt#datalineage.viewer) (`roles/datalineage.viewer`) [Database Migration Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/datamigration.md.txt#datamigration.admin) (`roles/datamigration.admin`) [Database Migration Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/datamigration.md.txt#datamigration.editor) (`roles/datamigration.editor`) [Data pipelines Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/datapipelines.md.txt#datapipelines.admin) (`roles/datapipelines.admin`) [Data pipelines Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/datapipelines.md.txt#datapipelines.viewer) (`roles/datapipelines.viewer`) [Dataplex Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.admin) (`roles/dataplex.admin`) [Dataprep Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dataprep.md.txt#dataprep.admin) (`roles/dataprep.admin`) [Dataproc Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.admin) (`roles/dataproc.admin`) [Dataproc Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.editor) (`roles/dataproc.editor`) [Dataproc Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.viewer) (`roles/dataproc.viewer`) [Dataprocessing Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dataprocessing.md.txt#dataprocessing.editor) (`roles/dataprocessing.editor`) [Dataprocessing Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataprocessing.md.txt#dataprocessing.viewer) (`roles/dataprocessing.viewer`) [Dataproc Resource Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dataprocrm.md.txt#dataprocrm.admin) (`roles/dataprocrm.admin`) [Dataproc Resource Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataprocrm.md.txt#dataprocrm.viewer) (`roles/dataprocrm.viewer`) [Cloud Datastore Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firestore.md.txt#datastore.admin) (`roles/datastore.admin`) [Cloud Datastore Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/firestore.md.txt#datastore.editor) (`roles/datastore.editor`) [Cloud Datastore Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/firestore.md.txt#datastore.owner) (`roles/datastore.owner`) [Cloud Datastore User](https://docs.cloud.google.com/iam/docs/roles-permissions/firestore.md.txt#datastore.user) (`roles/datastore.user`) [Cloud Datastore Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firestore.md.txt#datastore.viewer) (`roles/datastore.viewer`) [Datastream Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/datastream.md.txt#datastream.admin) (`roles/datastream.admin`) [Datastream Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/datastream.md.txt#datastream.viewer) (`roles/datastream.viewer`) [Data Studio Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/datastudio.md.txt#datastudio.admin) (`roles/datastudio.admin`) [Dell EMC Cloud OneFS Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dellemccloudonefs.md.txt#dellemccloudonefs.admin) (`roles/dellemccloudonefs.admin`) [Dell EMC Cloud OneFS Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dellemccloudonefs.md.txt#dellemccloudonefs.viewer) (`roles/dellemccloudonefs.viewer`) [Deployment Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#deploymentmanager.admin) (`roles/deploymentmanager.admin`) [Deployment Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#deploymentmanager.editor) (`roles/deploymentmanager.editor`) [Deployment Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#deploymentmanager.viewer) (`roles/deploymentmanager.viewer`) [Application Design Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/designcenter.md.txt#designcenter.admin) (`roles/designcenter.admin`) [Designcenter Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/designcenter.md.txt#designcenter.editor) (`roles/designcenter.editor`) [Application Design Center Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/designcenter.md.txt#designcenter.viewer) (`roles/designcenter.viewer`) [Developer Connect Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/developerconnect.md.txt#developerconnect.admin) (`roles/developerconnect.admin`) [Developer Connect Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/developerconnect.md.txt#developerconnect.viewer) (`roles/developerconnect.viewer`) [Device Run Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/devicerun.md.txt#devicerun.admin) (`roles/devicerun.admin`) [Device Run Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/devicerun.md.txt#devicerun.viewer) (`roles/devicerun.viewer`) [Device Streaming Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/devicestreaming.md.txt#devicestreaming.admin) (`roles/devicestreaming.admin`) [Device Streaming Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/devicestreaming.md.txt#devicestreaming.viewer) (`roles/devicestreaming.viewer`) [Dialogflow Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.viewer) (`roles/dialogflow.viewer`) [Discovery Engine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.admin) (`roles/discoveryengine.admin`) [Discovery Engine Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.editor) (`roles/discoveryengine.editor`) [Discovery Engine User](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.user) (`roles/discoveryengine.user`) [Discovery Engine Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.viewer) (`roles/discoveryengine.viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [DNS Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dns.md.txt#dns.admin) (`roles/dns.admin`) [DNS Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dns.md.txt#dns.editor) (`roles/dns.editor`) [DNS Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dns.md.txt#dns.viewer) (`roles/dns.viewer`) [Document AI Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddocumentai.md.txt#documentai.admin) (`roles/documentai.admin`) [Document AI Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddocumentai.md.txt#documentai.editor) (`roles/documentai.editor`) [Document AI Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddocumentai.md.txt#documentai.viewer) (`roles/documentai.viewer`) [Cloud Domains Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/domains.md.txt#domains.admin) (`roles/domains.admin`) [Cloud Domains Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/domains.md.txt#domains.editor) (`roles/domains.editor`) [Cloud Domains Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/domains.md.txt#domains.viewer) (`roles/domains.viewer`) [Earth Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/earth.md.txt#earth.admin) (`roles/earth.admin`) [Earth Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/earth.md.txt#earth.viewer) (`roles/earth.viewer`) [Earth Engine Resource Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/earthengine.md.txt#earthengine.admin) (`roles/earthengine.admin`) [Earth Engine Resource Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/earthengine.md.txt#earthengine.editor) (`roles/earthengine.editor`) [Earth Engine Resource Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/earthengine.md.txt#earthengine.viewer) (`roles/earthengine.viewer`) [Edge Container Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/edgecontainer.md.txt#edgecontainer.admin) (`roles/edgecontainer.admin`) [Edge Container Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/edgecontainer.md.txt#edgecontainer.editor) (`roles/edgecontainer.editor`) [Edge Container Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/edgecontainer.md.txt#edgecontainer.viewer) (`roles/edgecontainer.viewer`) [Edge Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/edgenetwork.md.txt#edgenetwork.admin) (`roles/edgenetwork.admin`) [Edge Network Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/edgenetwork.md.txt#edgenetwork.editor) (`roles/edgenetwork.editor`) [Edge Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/edgenetwork.md.txt#edgenetwork.viewer) (`roles/edgenetwork.viewer`) [Enterprise Knowledge Graph Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/enterpriseknowledgegraph.md.txt#enterpriseknowledgegraph.admin) (`roles/enterpriseknowledgegraph.admin`) [Enterprise Knowledge Graph Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/enterpriseknowledgegraph.md.txt#enterpriseknowledgegraph.editor) (`roles/enterpriseknowledgegraph.editor`) [Enterprise Knowledge Graph Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/enterpriseknowledgegraph.md.txt#enterpriseknowledgegraph.viewer) (`roles/enterpriseknowledgegraph.viewer`) [Enterprise Purchasing Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/enterprisepurchasing.md.txt#enterprisepurchasing.admin) (`roles/enterprisepurchasing.admin`) [Enterprise Purchasing Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/enterprisepurchasing.md.txt#enterprisepurchasing.editor) (`roles/enterprisepurchasing.editor`) [Enterprise Purchasing Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/enterprisepurchasing.md.txt#enterprisepurchasing.viewer) (`roles/enterprisepurchasing.viewer`) [Error Reporting Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/errorreporting.md.txt#errorreporting.admin) (`roles/errorreporting.admin`) [Error Reporting User](https://docs.cloud.google.com/iam/docs/roles-permissions/errorreporting.md.txt#errorreporting.user) (`roles/errorreporting.user`) [Error Reporting Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/errorreporting.md.txt#errorreporting.viewer) (`roles/errorreporting.viewer`) [Eventarc Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/eventarc.md.txt#eventarc.admin) (`roles/eventarc.admin`) [Eventarc Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/eventarc.md.txt#eventarc.editor) (`roles/eventarc.editor`) [Eventarc Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/eventarc.md.txt#eventarc.viewer) (`roles/eventarc.viewer`) [External Exposure Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.admin) (`roles/externalexposure.admin`) [External Exposure Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/externalexposure.md.txt#externalexposure.viewer) (`roles/externalexposure.viewer`) [Fault Testing Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/faulttesting.md.txt#faulttesting.viewer) (`roles/faulttesting.viewer`) [Cloud Filestore Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/file.md.txt#file.admin) (`roles/file.admin`) [Financial Services Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/financialservices.md.txt#financialservices.admin) (`roles/financialservices.admin`) [Financial Services Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/financialservices.md.txt#financialservices.viewer) (`roles/financialservices.viewer`) [Firebase Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.admin) (`roles/firebase.admin`) [Firebase Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.editor) (`roles/firebase.editor`) [Firebase Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.viewer) (`roles/firebase.viewer`) [Firebase A/B Testing Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseabt.md.txt#firebaseabt.admin) (`roles/firebaseabt.admin`) [Firebase A/B Testing Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseabt.md.txt#firebaseabt.viewer) (`roles/firebaseabt.viewer`) [Firebase App Distribution Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseappdistro.md.txt#firebaseappdistro.admin) (`roles/firebaseappdistro.admin`) [Firebase App Distribution Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseappdistro.md.txt#firebaseappdistro.viewer) (`roles/firebaseappdistro.viewer`) [Firebase App Hosting Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseapphosting.md.txt#firebaseapphosting.admin) (`roles/firebaseapphosting.admin`) [Firebase App Hosting Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseapphosting.md.txt#firebaseapphosting.viewer) (`roles/firebaseapphosting.viewer`) [Firebase Authentication Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseauth.md.txt#firebaseauth.admin) (`roles/firebaseauth.admin`) [Firebase Authentication editor](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseauth.md.txt#firebaseauth.editor) (`roles/firebaseauth.editor`) [Firebase Authentication Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseauth.md.txt#firebaseauth.viewer) (`roles/firebaseauth.viewer`) [Firebase Cloud Messaging API Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasecloudmessaging.md.txt#firebasecloudmessaging.admin) (`roles/firebasecloudmessaging.admin`) [Firebase Cloud Messaging API Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasecloudmessaging.md.txt#firebasecloudmessaging.viewer) (`roles/firebasecloudmessaging.viewer`) [Firebase Crashlytics Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasecrash.md.txt#firebasecrashlytics.admin) (`roles/firebasecrashlytics.admin`) [Firebase Crashlytics Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasecrash.md.txt#firebasecrashlytics.viewer) (`roles/firebasecrashlytics.viewer`) [Firebase Realtime Database Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasedatabase.md.txt#firebasedatabase.admin) (`roles/firebasedatabase.admin`) [Firebase Realtime Database Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasedatabase.md.txt#firebasedatabase.viewer) (`roles/firebasedatabase.viewer`) [Firebase SQL Connect API Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasedataconnect.md.txt#firebasedataconnect.admin) (`roles/firebasedataconnect.admin`) [Firebase SQL Connect API Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasedataconnect.md.txt#firebasedataconnect.viewer) (`roles/firebasedataconnect.viewer`) [Firebase Dynamic Links Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasedynamiclinks.md.txt#firebasedynamiclinks.admin) (`roles/firebasedynamiclinks.admin`) [Firebasedynamiclinks Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasedynamiclinks.md.txt#firebasedynamiclinks.editor) (`roles/firebasedynamiclinks.editor`) [Firebase Dynamic Links Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasedynamiclinks.md.txt#firebasedynamiclinks.viewer) (`roles/firebasedynamiclinks.viewer`) [Firebaseextensions Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseextensions.md.txt#firebaseextensions.editor) (`roles/firebaseextensions.editor`) [Firebase Extensions Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseextensions.md.txt#firebaseextensions.viewer) (`roles/firebaseextensions.viewer`) [Firebaseextensionspublisher Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseextensionspublisher.md.txt#firebaseextensionspublisher.admin) (`roles/firebaseextensionspublisher.admin`) [Firebaseextensionspublisher Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseextensionspublisher.md.txt#firebaseextensionspublisher.viewer) (`roles/firebaseextensionspublisher.viewer`) [Firebase Hosting Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasehosting.md.txt#firebasehosting.admin) (`roles/firebasehosting.admin`) [Firebase Hosting Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasehosting.md.txt#firebasehosting.viewer) (`roles/firebasehosting.viewer`) [Firebase In-App Messaging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseinappmessaging.md.txt#firebaseinappmessaging.admin) (`roles/firebaseinappmessaging.admin`) [Firebase In-App Messaging Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseinappmessaging.md.txt#firebaseinappmessaging.viewer) (`roles/firebaseinappmessaging.viewer`) [Firebase ML Kit Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseml.md.txt#firebaseml.admin) (`roles/firebaseml.admin`) [Firebase ML Kit Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseml.md.txt#firebaseml.viewer) (`roles/firebaseml.viewer`) [Firebase Cloud Messaging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasecloudmessaging.md.txt#firebasenotifications.admin) (`roles/firebasenotifications.admin`) [Firebase Cloud Messaging Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasecloudmessaging.md.txt#firebasenotifications.viewer) (`roles/firebasenotifications.viewer`) [Firebase Performance Reporting Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseperformance.md.txt#firebaseperformance.admin) (`roles/firebaseperformance.admin`) [Firebase Performance Reporting Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseperformance.md.txt#firebaseperformance.viewer) (`roles/firebaseperformance.viewer`) [Firebase Rules Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaserules.md.txt#firebaserules.admin) (`roles/firebaserules.admin`) [Firebase Rules System](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaserules.md.txt#firebaserules.system) (`roles/firebaserules.system`) [Firebase Rules Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaserules.md.txt#firebaserules.viewer) (`roles/firebaserules.viewer`) [Cloud Storage for Firebase Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasestorage.md.txt#firebasestorage.admin) (`roles/firebasestorage.admin`) [Cloud Storage for Firebase Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasestorage.md.txt#firebasestorage.viewer) (`roles/firebasestorage.viewer`) [Firebase AI Logic Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasevertexai.md.txt#firebasevertexai.admin) (`roles/firebasevertexai.admin`) [Firebase AI Logic Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasevertexai.md.txt#firebasevertexai.viewer) (`roles/firebasevertexai.viewer`) [Fleet Engine Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/fleetengine.md.txt#fleetengine.viewer) (`roles/fleetengine.viewer`) [Flow Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/flow.md.txt#flow.admin) (`roles/flow.admin`) [Flow Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/flow.md.txt#flow.editor) (`roles/flow.editor`) [Cloud FTP Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/ftp.md.txt#ftp.admin) (`roles/ftp.admin`) [Cloud FTP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/ftp.md.txt#ftp.viewer) (`roles/ftp.viewer`) [GDC Hardware Management Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/gdchardwaremanagement.md.txt#gdchardwaremanagement.admin) (`roles/gdchardwaremanagement.admin`) [Gdchardwaremanagement Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/gdchardwaremanagement.md.txt#gdchardwaremanagement.viewer) (`roles/gdchardwaremanagement.viewer`) [Gemini Cloud Assist Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/geminicloudassist.md.txt#geminicloudassist.admin) (`roles/geminicloudassist.admin`) [Gemini Cloud Assist Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/geminicloudassist.md.txt#geminicloudassist.editor) (`roles/geminicloudassist.editor`) [Gemini Cloud Assist Investigation Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/geminicloudassist.md.txt#geminicloudassist.investigationOwner) (`roles/geminicloudassist.investigationOwner`) [Gemini Cloud Assist User](https://docs.cloud.google.com/iam/docs/roles-permissions/geminicloudassist.md.txt#geminicloudassist.user) (`roles/geminicloudassist.user`) [Gemini Cloud Assist Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/geminicloudassist.md.txt#geminicloudassist.viewer) (`roles/geminicloudassist.viewer`) [Gemini Data Analytics Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/geminidataanalytics.md.txt#geminidataanalytics.admin) (`roles/geminidataanalytics.admin`) [Gemini Data Analytics Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/geminidataanalytics.md.txt#geminidataanalytics.viewer) (`roles/geminidataanalytics.viewer`) [Backup for GKE Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/gkebackup.md.txt#gkebackup.admin) (`roles/gkebackup.admin`) [Backup for GKE Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/gkebackup.md.txt#gkebackup.editor) (`roles/gkebackup.editor`) [Backup for GKE Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/gkebackup.md.txt#gkebackup.viewer) (`roles/gkebackup.viewer`) [Fleet Admin (formerly GKE Hub Admin)](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.admin) (`roles/gkehub.admin`) [Fleet Editor (formerly GKE Hub Editor)](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.editor) (`roles/gkehub.editor`) [Fleet Viewer (formerly GKE Hub Viewer)](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.viewer) (`roles/gkehub.viewer`) [Anthos Multi-cloud Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/gkemulticloud.md.txt#gkemulticloud.admin) (`roles/gkemulticloud.admin`) [Anthos Multi-cloud Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/gkemulticloud.md.txt#gkemulticloud.editor) (`roles/gkemulticloud.editor`) [Anthos Multi-cloud Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/gkemulticloud.md.txt#gkemulticloud.viewer) (`roles/gkemulticloud.viewer`) [GKE on-prem Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/gkeonprem.md.txt#gkeonprem.admin) (`roles/gkeonprem.admin`) [GKE on-prem Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/gkeonprem.md.txt#gkeonprem.editor) (`roles/gkeonprem.editor`) [GKE on-prem Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/gkeonprem.md.txt#gkeonprem.viewer) (`roles/gkeonprem.viewer`) [Google Workspace Add-ons Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/gsuiteaddons.md.txt#gsuiteaddons.admin) (`roles/gsuiteaddons.admin`) [Google Workspace Add-ons Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/gsuiteaddons.md.txt#gsuiteaddons.viewer) (`roles/gsuiteaddons.viewer`) [Cluster Director Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.editor) (`roles/hypercomputecluster.editor`) [IAM Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.admin) (`roles/iam.admin`) [IAM Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.editor) (`roles/iam.editor`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Service Account Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.serviceAccountAdmin) (`roles/iam.serviceAccountAdmin`) [Create Service Accounts](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.serviceAccountCreator) (`roles/iam.serviceAccountCreator`) [Service Account Key Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.serviceAccountKeyAdmin) (`roles/iam.serviceAccountKeyAdmin`) [Service Account Token Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.serviceAccountTokenCreator) (`roles/iam.serviceAccountTokenCreator`) [Service Account User](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.serviceAccountUser) (`roles/iam.serviceAccountUser`) [View Service Accounts](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.serviceAccountViewer) (`roles/iam.serviceAccountViewer`) [IAM Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.viewer) (`roles/iam.viewer`) [IAP Policy Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/iap.md.txt#iap.editor) (`roles/iap.editor`) [IAP Policy Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iap.md.txt#iap.viewer) (`roles/iap.viewer`) [Identity Toolkit editor](https://docs.cloud.google.com/iam/docs/roles-permissions/identitytoolkit.md.txt#identitytoolkit.editor) (`roles/identitytoolkit.editor`) [Cloud IDS Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/ids.md.txt#ids.admin) (`roles/ids.admin`) [Cloud IDS Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/ids.md.txt#ids.editor) (`roles/ids.editor`) [Cloud IDS Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/ids.md.txt#ids.viewer) (`roles/ids.viewer`) [Integrations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.admin) (`roles/integrations.admin`) [Integrations Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.viewer) (`roles/integrations.viewer`) [Issuerswitch Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/issuerswitch.md.txt#issuerswitch.admin) (`roles/issuerswitch.admin`) [Issuerswitch Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/issuerswitch.md.txt#issuerswitch.viewer) (`roles/issuerswitch.viewer`) [Config Controller Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/krmapihosting.md.txt#krmapihosting.admin) (`roles/krmapihosting.admin`) [Config Controller Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/krmapihosting.md.txt#krmapihosting.editor) (`roles/krmapihosting.editor`) [Config Controller Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/krmapihosting.md.txt#krmapihosting.viewer) (`roles/krmapihosting.viewer`) [Kubernetesmetadata Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/kubernetesmetadata.md.txt#kubernetesmetadata.admin) (`roles/kubernetesmetadata.admin`) [Kubernetesmetadata Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/kubernetesmetadata.md.txt#kubernetesmetadata.viewer) (`roles/kubernetesmetadata.viewer`) [Cloud License Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/licensemanager.md.txt#licensemanager.admin) (`roles/licensemanager.admin`) [Cloud License Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/licensemanager.md.txt#licensemanager.viewer) (`roles/licensemanager.viewer`) [Cloud Life Sciences Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/lifesciences.md.txt#lifesciences.viewer) (`roles/lifesciences.viewer`) [Live Stream Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/livestream.md.txt#livestream.admin) (`roles/livestream.admin`) [Live Stream Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/livestream.md.txt#livestream.editor) (`roles/livestream.editor`) [Live Stream Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/livestream.md.txt#livestream.viewer) (`roles/livestream.viewer`) [Logging Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.admin) (`roles/logging.admin`) [Looker Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/looker.md.txt#looker.admin) (`roles/looker.admin`) [Looker Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/looker.md.txt#looker.viewer) (`roles/looker.viewer`) [Google Cloud Managed Lustre Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/lustre.md.txt#lustre.admin) (`roles/lustre.admin`) [Google Cloud Managed Lustre Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/lustre.md.txt#lustre.viewer) (`roles/lustre.viewer`) [Maintenance Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/maintenance.md.txt#maintenance.admin) (`roles/maintenance.admin`) [Maintenance API Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/maintenance.md.txt#maintenance.viewer) (`roles/maintenance.viewer`) [Managed Flink Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/managedflink.md.txt#managedflink.admin) (`roles/managedflink.admin`) [Managed Flink Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/managedflink.md.txt#managedflink.viewer) (`roles/managedflink.viewer`) [Google Cloud Managed Identities Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/managedidentities.md.txt#managedidentities.admin) (`roles/managedidentities.admin`) [Google Cloud Managed Identities Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/managedidentities.md.txt#managedidentities.editor) (`roles/managedidentities.editor`) [Google Cloud Managed Identities Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/managedidentities.md.txt#managedidentities.viewer) (`roles/managedidentities.viewer`) [Managed Kafka Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/managedkafka.md.txt#managedkafka.admin) (`roles/managedkafka.admin`) [Managed Kafka Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/managedkafka.md.txt#managedkafka.viewer) (`roles/managedkafka.viewer`) [Mandiant Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/mandiant.md.txt#mandiant.admin) (`roles/mandiant.admin`) [Mandiant Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/mandiant.md.txt#mandiant.viewer) (`roles/mandiant.viewer`) [Maps API Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/mapsadmin.md.txt#mapsadmin.admin) (`roles/mapsadmin.admin`) [Maps API Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/mapsadmin.md.txt#mapsadmin.viewer) (`roles/mapsadmin.viewer`) [Mapsanalytics Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/mapsanalytics.md.txt#mapsanalytics.admin) (`roles/mapsanalytics.admin`) [Maps Analytics Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/mapsanalytics.md.txt#mapsanalytics.viewer) (`roles/mapsanalytics.viewer`) [Maps Platform Datasets Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/mapsplatformdatasets.md.txt#mapsplatformdatasets.admin) (`roles/mapsplatformdatasets.admin`) [Maps Platform Datasets Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/mapsplatformdatasets.md.txt#mapsplatformdatasets.viewer) (`roles/mapsplatformdatasets.viewer`) [Marketplace Solutions Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/marketplacesolutions.md.txt#marketplacesolutions.admin) (`roles/marketplacesolutions.admin`) [Marketplace Solutions Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/marketplacesolutions.md.txt#marketplacesolutions.editor) (`roles/marketplacesolutions.editor`) [Marketplace Solutions Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/marketplacesolutions.md.txt#marketplacesolutions.viewer) (`roles/marketplacesolutions.viewer`) [MCP Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/mcp.md.txt#mcp.admin) (`roles/mcp.admin`) [MCP Tool User](https://docs.cloud.google.com/iam/docs/roles-permissions/mcp.md.txt#mcp.toolUser) (`roles/mcp.toolUser`) [Cloud Memorystore Memcached Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/memcache.md.txt#memcache.admin) (`roles/memcache.admin`) [Cloud Memorystore Memcached Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/memcache.md.txt#memcache.editor) (`roles/memcache.editor`) [Cloud Memorystore Memcached Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/memcache.md.txt#memcache.viewer) (`roles/memcache.viewer`) [Memorystore Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/memorystore.md.txt#memorystore.admin) (`roles/memorystore.admin`) [Memorystore Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/memorystore.md.txt#memorystore.viewer) (`roles/memorystore.viewer`) [Dataproc Metastore Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/metastore.md.txt#metastore.admin) (`roles/metastore.admin`) [Dataproc Metastore Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/metastore.md.txt#metastore.editor) (`roles/metastore.editor`) [Dataproc Metastore Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/metastore.md.txt#metastore.viewer) (`roles/metastore.viewer`) [Migration Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/migrationcenter.md.txt#migrationcenter.admin) (`roles/migrationcenter.admin`) [Migration Center Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/migrationcenter.md.txt#migrationcenter.viewer) (`roles/migrationcenter.viewer`) [AI Platform Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/ml.md.txt#ml.admin) (`roles/ml.admin`) [AI Platform Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/ml.md.txt#ml.editor) (`roles/ml.editor`) [Model Armor Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.admin) (`roles/modelarmor.admin`) [Model Armor Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.editor) (`roles/modelarmor.editor`) [Model Armor Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.viewer) (`roles/modelarmor.viewer`) [Monitoring Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/monitoring.md.txt#monitoring.admin) (`roles/monitoring.admin`) [Monitoring Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/monitoring.md.txt#monitoring.editor) (`roles/monitoring.editor`) [Monitoring Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/monitoring.md.txt#monitoring.viewer) (`roles/monitoring.viewer`) [Navigation Connect Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/navigationconnect.md.txt#navigationconnect.admin) (`roles/navigationconnect.admin`) [Navigation Connect Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/navigationconnect.md.txt#navigationconnect.viewer) (`roles/navigationconnect.viewer`) [Nestconsole Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/nestconsole.md.txt#nestconsole.admin) (`roles/nestconsole.admin`) [Nestconsole Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/nestconsole.md.txt#nestconsole.editor) (`roles/nestconsole.editor`) [Nestconsole Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/nestconsole.md.txt#nestconsole.viewer) (`roles/nestconsole.viewer`) [Google Cloud NetApp Volumes Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/netapp.md.txt#netapp.admin) (`roles/netapp.admin`) [Google Cloud NetApp Volumes Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/netapp.md.txt#netapp.viewer) (`roles/netapp.viewer`) [NetApp Cloud Volumes Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/netappcloudvolumes.md.txt#netappcloudvolumes.admin) (`roles/netappcloudvolumes.admin`) [NetApp Cloud Volumes Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/netappcloudvolumes.md.txt#netappcloudvolumes.viewer) (`roles/netappcloudvolumes.viewer`) [Network Connectivity Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.editor) (`roles/networkconnectivity.editor`) [Network Management Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkmanagement.md.txt#networkmanagement.admin) (`roles/networkmanagement.admin`) [Network Management Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networkmanagement.md.txt#networkmanagement.editor) (`roles/networkmanagement.editor`) [Network Management Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networkmanagement.md.txt#networkmanagement.viewer) (`roles/networkmanagement.viewer`) [Network Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.admin) (`roles/networksecurity.admin`) [Network Security Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.editor) (`roles/networksecurity.editor`) [Network Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.viewer) (`roles/networksecurity.viewer`) [Network Services Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkservices.md.txt#networkservices.admin) (`roles/networkservices.admin`) [Network Services Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networkservices.md.txt#networkservices.editor) (`roles/networkservices.editor`) [Network Services Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networkservices.md.txt#networkservices.viewer) (`roles/networkservices.viewer`) [Notebooks Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/notebooks.md.txt#notebooks.admin) (`roles/notebooks.admin`) [Notebooks Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/notebooks.md.txt#notebooks.editor) (`roles/notebooks.editor`) [Notebooks Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/notebooks.md.txt#notebooks.viewer) (`roles/notebooks.viewer`) [OAuth Config Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/oauthconfig.md.txt#oauthconfig.editor) (`roles/oauthconfig.editor`) [OAuth Config Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oauthconfig.md.txt#oauthconfig.viewer) (`roles/oauthconfig.viewer`) [On-Demand Scanning Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/ondemandscanning.md.txt#ondemandscanning.viewer) (`roles/ondemandscanning.viewer`) [Ops Config Monitoring Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/monitoring.md.txt#opsconfigmonitoring.admin) (`roles/opsconfigmonitoring.admin`) [Ops Config Monitoring Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/monitoring.md.txt#opsconfigmonitoring.viewer) (`roles/opsconfigmonitoring.viewer`) [Oracle Database@Google Cloud admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.admin) (`roles/oracledatabase.admin`) [Oracle Database@Google Cloud viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.viewer) (`roles/oracledatabase.viewer`) [Parallelstore Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/parallelstore.md.txt#parallelstore.admin) (`roles/parallelstore.admin`) [Parallelstore Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/parallelstore.md.txt#parallelstore.viewer) (`roles/parallelstore.viewer`) [Parameter Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/parametermanager.md.txt#parametermanager.admin) (`roles/parametermanager.admin`) [Parameter Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/parametermanager.md.txt#parametermanager.editor) (`roles/parametermanager.editor`) [Parameter Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/parametermanager.md.txt#parametermanager.viewer) (`roles/parametermanager.viewer`) [Paymentsresellersubscription Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/paymentsresellersubscription.md.txt#paymentsresellersubscription.admin) (`roles/paymentsresellersubscription.admin`) [Paymentsresellersubscription Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/paymentsresellersubscription.md.txt#paymentsresellersubscription.viewer) (`roles/paymentsresellersubscription.viewer`) [Policyanalyzer Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/policyanalyzer.md.txt#policyanalyzer.admin) (`roles/policyanalyzer.admin`) [Policyanalyzer Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/policyanalyzer.md.txt#policyanalyzer.viewer) (`roles/policyanalyzer.viewer`) [Policyremediatormanager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/policyremediatormanager.md.txt#policyremediatormanager.admin) (`roles/policyremediatormanager.admin`) [Policyremediatormanager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/policyremediatormanager.md.txt#policyremediatormanager.viewer) (`roles/policyremediatormanager.viewer`) [Policysimulator Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/policysimulator.md.txt#policysimulator.viewer) (`roles/policysimulator.viewer`) [CA Service Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/privateca.md.txt#privateca.admin) (`roles/privateca.admin`) [CA Service Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/privateca.md.txt#privateca.editor) (`roles/privateca.editor`) [CA Service Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/privateca.md.txt#privateca.viewer) (`roles/privateca.viewer`) [Privileged Access Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/privilegedaccessmanager.md.txt#privilegedaccessmanager.editor) (`roles/privilegedaccessmanager.editor`) [Beacon Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/proximitybeacon.md.txt#proximitybeacon.admin) (`roles/proximitybeacon.admin`) [Beacon Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/proximitybeacon.md.txt#proximitybeacon.editor) (`roles/proximitybeacon.editor`) [Beacon Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/proximitybeacon.md.txt#proximitybeacon.viewer) (`roles/proximitybeacon.viewer`) [Publicca Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/publicca.md.txt#publicca.admin) (`roles/publicca.admin`) [Subscription Linking Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/readerrevenuesubscriptionlinking.md.txt#readerrevenuesubscriptionlinking.admin) (`roles/readerrevenuesubscriptionlinking.admin`) [Subscription Linking Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/readerrevenuesubscriptionlinking.md.txt#readerrevenuesubscriptionlinking.viewer) (`roles/readerrevenuesubscriptionlinking.viewer`) [reCAPTCHA Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recaptchaenterprise.md.txt#recaptchaenterprise.admin) (`roles/recaptchaenterprise.admin`) [reCAPTCHA Enterprise Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/recaptchaenterprise.md.txt#recaptchaenterprise.editor) (`roles/recaptchaenterprise.editor`) [reCAPTCHA Enterprise Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recaptchaenterprise.md.txt#recaptchaenterprise.viewer) (`roles/recaptchaenterprise.viewer`) [Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.admin) (`roles/recommender.admin`) [Recommender Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.editor) (`roles/recommender.editor`) [Cloud Memorystore Redis Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/redis.md.txt#redis.admin) (`roles/redis.admin`) [Cloud Memorystore Redis Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/redis.md.txt#redis.editor) (`roles/redis.editor`) [Cloud Memorystore Redis Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/redis.md.txt#redis.viewer) (`roles/redis.viewer`) [Redis Enterprise Cloud Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/redisenterprisecloud.md.txt#redisenterprisecloud.admin) (`roles/redisenterprisecloud.admin`) [Redis Enterprise Cloud Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/redisenterprisecloud.md.txt#redisenterprisecloud.viewer) (`roles/redisenterprisecloud.viewer`) [Remotebuildexecution Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/remotebuildexecution.md.txt#remotebuildexecution.admin) (`roles/remotebuildexecution.admin`) [Remotebuildexecution Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/remotebuildexecution.md.txt#remotebuildexecution.editor) (`roles/remotebuildexecution.editor`) [Remotebuildexecution Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/remotebuildexecution.md.txt#remotebuildexecution.viewer) (`roles/remotebuildexecution.viewer`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Organization Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationAdmin) (`roles/resourcemanager.organizationAdmin`) [Resource Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.viewer) (`roles/resourcemanager.viewer`) [Retail Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/retail.md.txt#retail.admin) (`roles/retail.admin`) [Retail Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/retail.md.txt#retail.editor) (`roles/retail.editor`) [Risk Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/riskmanager.md.txt#riskmanager.admin) (`roles/riskmanager.admin`) [Risk Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/riskmanager.md.txt#riskmanager.editor) (`roles/riskmanager.editor`) [Risk Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/riskmanager.md.txt#riskmanager.viewer) (`roles/riskmanager.viewer`) [Rapid Migration Assessment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/rapidmigrationassessment.md.txt#rma.admin) (`roles/rma.admin`) [Rapid Migration Assessment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/rapidmigrationassessment.md.txt#rma.viewer) (`roles/rma.viewer`) [Routeoptimization Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/routeoptimization.md.txt#routeoptimization.admin) (`roles/routeoptimization.admin`) [Route Optimization Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/routeoptimization.md.txt#routeoptimization.editor) (`roles/routeoptimization.editor`) [Route Optimization Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/routeoptimization.md.txt#routeoptimization.viewer) (`roles/routeoptimization.viewer`) [Cloud Run Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/run.md.txt#run.admin) (`roles/run.admin`) [Cloud Run Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/run.md.txt#run.developer) (`roles/run.developer`) [Cloud Run Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/run.md.txt#run.editor) (`roles/run.editor`) [Cloud Run Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/run.md.txt#run.viewer) (`roles/run.viewer`) [Runapps Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/runapps.md.txt#runapps.admin) (`roles/runapps.admin`) [Serverless Integrations Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/runapps.md.txt#runapps.viewer) (`roles/runapps.viewer`) [Runtimeconfig Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/runtimeconfig.md.txt#runtimeconfig.editor) (`roles/runtimeconfig.editor`) [Runtimeconfig Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/runtimeconfig.md.txt#runtimeconfig.viewer) (`roles/runtimeconfig.viewer`) [SaaS Config Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/saasconfig.md.txt#saasconfig.viewer) (`roles/saasconfig.viewer`) [SaaS Service Management Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/saasservicemgmt.md.txt#saasservicemgmt.admin) (`roles/saasservicemgmt.admin`) [SaaS Service Management Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/saasservicemgmt.md.txt#saasservicemgmt.viewer) (`roles/saasservicemgmt.viewer`) [Secret Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/secretmanager.md.txt#secretmanager.admin) (`roles/secretmanager.admin`) [Secret Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/secretmanager.md.txt#secretmanager.editor) (`roles/secretmanager.editor`) [Secret Manager Secret Accessor](https://docs.cloud.google.com/iam/docs/roles-permissions/secretmanager.md.txt#secretmanager.secretAccessor) (`roles/secretmanager.secretAccessor`) [Secret Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/secretmanager.md.txt#secretmanager.viewer) (`roles/secretmanager.viewer`) [Secured Landing Zone Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securedlandingzone.md.txt#securedlandingzone.admin) (`roles/securedlandingzone.admin`) [Secured Landing Zone Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securedlandingzone.md.txt#securedlandingzone.viewer) (`roles/securedlandingzone.viewer`) [Secure Source Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.admin) (`roles/securesourcemanager.admin`) [Secure Source Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.editor) (`roles/securesourcemanager.editor`) [Secure Source Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.viewer) (`roles/securesourcemanager.viewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [Security Center Management Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.admin) (`roles/securitycentermanagement.admin`) [Security Center Management Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.editor) (`roles/securitycentermanagement.editor`) [Security Center Management Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.viewer) (`roles/securitycentermanagement.viewer`) [Service Consumer Management Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/serviceconsumermanagement.md.txt#serviceconsumermanagement.admin) (`roles/serviceconsumermanagement.admin`) [Service Consumer Management Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/serviceconsumermanagement.md.txt#serviceconsumermanagement.viewer) (`roles/serviceconsumermanagement.viewer`) [Service Directory Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/servicedirectory.md.txt#servicedirectory.admin) (`roles/servicedirectory.admin`) [Service Directory Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/servicedirectory.md.txt#servicedirectory.editor) (`roles/servicedirectory.editor`) [Service Directory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/servicedirectory.md.txt#servicedirectory.viewer) (`roles/servicedirectory.viewer`) [Service Extensions Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/serviceextensions.md.txt#serviceextensions.admin) (`roles/serviceextensions.admin`) [Service Extensions Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/serviceextensions.md.txt#serviceextensions.editor) (`roles/serviceextensions.editor`) [Service Extensions Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/serviceextensions.md.txt#serviceextensions.viewer) (`roles/serviceextensions.viewer`) [Servicehealth Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/servicehealth.md.txt#servicehealth.admin) (`roles/servicehealth.admin`) [Personalized Service Health Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/servicehealth.md.txt#servicehealth.viewer) (`roles/servicehealth.viewer`) [Service Management Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/servicemanagement.md.txt#servicemanagement.admin) (`roles/servicemanagement.admin`) [Service Management Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/servicemanagement.md.txt#servicemanagement.editor) (`roles/servicemanagement.editor`) [Service Management Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/servicemanagement.md.txt#servicemanagement.viewer) (`roles/servicemanagement.viewer`) [Service Networking Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/servicenetworking.md.txt#servicenetworking.admin) (`roles/servicenetworking.admin`) [Service Networking Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/servicenetworking.md.txt#servicenetworking.editor) (`roles/servicenetworking.editor`) [Service Networking Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/servicenetworking.md.txt#servicenetworking.viewer) (`roles/servicenetworking.viewer`) [Source Repository Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/source.md.txt#source.editor) (`roles/source.editor`) [Source Repository Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/source.md.txt#source.viewer) (`roles/source.viewer`) [Cloud Spanner Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/spanner.md.txt#spanner.admin) (`roles/spanner.admin`) [Cloud Spanner Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/spanner.md.txt#spanner.editor) (`roles/spanner.editor`) [Cloud Spanner Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/spanner.md.txt#spanner.viewer) (`roles/spanner.viewer`) [Stackdriver Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/monitoring.md.txt#stackdriver.admin) (`roles/stackdriver.admin`) [Stackdriver Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/monitoring.md.txt#stackdriver.viewer) (`roles/stackdriver.viewer`) [Storage Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/storage.md.txt#storage.admin) (`roles/storage.admin`) [Storage Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/storage.md.txt#storage.editor) (`roles/storage.editor`) [Storage Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/storage.md.txt#storage.folderAdmin) (`roles/storage.folderAdmin`) [Storage Object Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/storage.md.txt#storage.objectAdmin) (`roles/storage.objectAdmin`) [Storage Object Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/storage.md.txt#storage.objectCreator) (`roles/storage.objectCreator`) [Storage Object User](https://docs.cloud.google.com/iam/docs/roles-permissions/storage.md.txt#storage.objectUser) (`roles/storage.objectUser`) [Storage Object Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/storage.md.txt#storage.objectViewer) (`roles/storage.objectViewer`) [Storage Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/storage.md.txt#storage.viewer) (`roles/storage.viewer`) [Storage Batch Operations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/storagebatchoperations.md.txt#storagebatchoperations.admin) (`roles/storagebatchoperations.admin`) [Storage Batch Operations Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/storagebatchoperations.md.txt#storagebatchoperations.viewer) (`roles/storagebatchoperations.viewer`) [Storage Insights Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/storageinsights.md.txt#storageinsights.admin) (`roles/storageinsights.admin`) [Storage Insights Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/storageinsights.md.txt#storageinsights.viewer) (`roles/storageinsights.viewer`) [Storage Transfer Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/storagetransfer.md.txt#storagetransfer.admin) (`roles/storagetransfer.admin`) [Storage Transfer Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/storagetransfer.md.txt#storagetransfer.viewer) (`roles/storagetransfer.viewer`) [Stream Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/stream.md.txt#stream.admin) (`roles/stream.admin`) [Stream Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/stream.md.txt#stream.viewer) (`roles/stream.viewer`) [Subscribewithgoogledeveloper Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/subscribewithgoogledeveloper.md.txt#subscribewithgoogledeveloper.admin) (`roles/subscribewithgoogledeveloper.admin`) [Subscribewithgoogledeveloper Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/subscribewithgoogledeveloper.md.txt#subscribewithgoogledeveloper.viewer) (`roles/subscribewithgoogledeveloper.viewer`) [Telcoautomation Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.editor) (`roles/telcoautomation.editor`) [Telcoautomation Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/telcoautomation.md.txt#telcoautomation.viewer) (`roles/telcoautomation.viewer`) [Telemetry Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/telemetry.md.txt#telemetry.admin) (`roles/telemetry.admin`) [Telemetry Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/telemetry.md.txt#telemetry.editor) (`roles/telemetry.editor`) [TPU Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#tpu.admin) (`roles/tpu.admin`) [TPU Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#tpu.editor) (`roles/tpu.editor`) [TPU Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#tpu.viewer) (`roles/tpu.viewer`) [Trafficdirector Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#trafficdirector.admin) (`roles/trafficdirector.admin`) [Trafficdirector Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/anthosservicemesh.md.txt#trafficdirector.viewer) (`roles/trafficdirector.viewer`) [Transcoder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/transcoder.md.txt#transcoder.admin) (`roles/transcoder.admin`) [Transcoder Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/transcoder.md.txt#transcoder.editor) (`roles/transcoder.editor`) [Transcoder Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/transcoder.md.txt#transcoder.viewer) (`roles/transcoder.viewer`) [Transfer Appliance Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/transferappliance.md.txt#transferappliance.admin) (`roles/transferappliance.admin`) [Transfer Appliance Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/transferappliance.md.txt#transferappliance.viewer) (`roles/transferappliance.viewer`) [Translation Hub Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/translationhub.md.txt#translationhub.admin) (`roles/translationhub.admin`) [Translation Hub Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/translationhub.md.txt#translationhub.viewer) (`roles/translationhub.viewer`) [Vector Search Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/vectorsearch.md.txt#vectorsearch.admin) (`roles/vectorsearch.admin`) [Vector Search Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/vectorsearch.md.txt#vectorsearch.viewer) (`roles/vectorsearch.viewer`) [Video Stitcher Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/videostitcher.md.txt#videostitcher.admin) (`roles/videostitcher.admin`) [Video Stitcher Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/videostitcher.md.txt#videostitcher.viewer) (`roles/videostitcher.viewer`) [VisionAI Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/visionai.md.txt#visionai.admin) (`roles/visionai.admin`) [VisionAI Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/visionai.md.txt#visionai.editor) (`roles/visionai.editor`) [VisionAI Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/visionai.md.txt#visionai.viewer) (`roles/visionai.viewer`) [Visual Inspection AI Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/visualinspection.md.txt#visualinspection.admin) (`roles/visualinspection.admin`) [VM Migration Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/vmmigration.md.txt#vmmigration.admin) (`roles/vmmigration.admin`) [VM Migration Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/vmmigration.md.txt#vmmigration.viewer) (`roles/vmmigration.viewer`) [Vmwareengine Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/vmwareengine.md.txt#vmwareengine.admin) (`roles/vmwareengine.admin`) [Vmwareengine Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/vmwareengine.md.txt#vmwareengine.editor) (`roles/vmwareengine.editor`) [Vmwareengine Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/vmwareengine.md.txt#vmwareengine.viewer) (`roles/vmwareengine.viewer`) [Serverless VPC Access Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/vpcaccess.md.txt#vpcaccess.admin) (`roles/vpcaccess.admin`) [Serverless VPC Access User](https://docs.cloud.google.com/iam/docs/roles-permissions/vpcaccess.md.txt#vpcaccess.user) (`roles/vpcaccess.user`) [Serverless VPC Access Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/vpcaccess.md.txt#vpcaccess.viewer) (`roles/vpcaccess.viewer`) [Workflows Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/workflows.md.txt#workflows.admin) (`roles/workflows.admin`) [Workflows Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/workflows.md.txt#workflows.editor) (`roles/workflows.editor`) [Workflows Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/workflows.md.txt#workflows.viewer) (`roles/workflows.viewer`) [Workload Certificate Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadcertificate.md.txt#workloadcertificate.admin) (`roles/workloadcertificate.admin`) [Workload Certificate Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadcertificate.md.txt#workloadcertificate.viewer) (`roles/workloadcertificate.viewer`) [Workload Identity API Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadidentity.md.txt#workloadidentity.admin) (`roles/workloadidentity.admin`) [Workload Identity API Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadidentity.md.txt#workloadidentity.viewer) (`roles/workloadidentity.viewer`) [Workload Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadmanager.md.txt#workloadmanager.admin) (`roles/workloadmanager.admin`) [Workload Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadmanager.md.txt#workloadmanager.viewer) (`roles/workloadmanager.viewer`) [Cloud Workstations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/workstations.md.txt#workstations.admin) (`roles/workstations.admin`) [Cloud Workstations Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/workstations.md.txt#workstations.editor) (`roles/workstations.editor`) [Access Approval Approver](https://docs.cloud.google.com/iam/docs/roles-permissions/accessapproval.md.txt#accessapproval.approver) (`roles/accessapproval.approver`) [Access Approval Config Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/accessapproval.md.txt#accessapproval.configEditor) (`roles/accessapproval.configEditor`) [Access Approval Invalidator](https://docs.cloud.google.com/iam/docs/roles-permissions/accessapproval.md.txt#accessapproval.invalidator) (`roles/accessapproval.invalidator`) [Access Context Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.policyEditor) (`roles/accesscontextmanager.policyEditor`) [Access Context Manager Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.policyReader) (`roles/accesscontextmanager.policyReader`) [VPC Service Controls Troubleshooter Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/accesscontextmanager.md.txt#accesscontextmanager.vpcScTroubleshooterViewer) (`roles/accesscontextmanager.vpcScTroubleshooterViewer`) [Colab Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.colabEnterpriseAdmin) (`roles/aiplatform.colabEnterpriseAdmin`) [Colab Enterprise User](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.colabEnterpriseUser) (`roles/aiplatform.colabEnterpriseUser`) [Agent Platform Feature Store EntityType owner](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.entityTypeOwner) (`roles/aiplatform.entityTypeOwner`) [Agent Platform Feature Store Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.featurestoreAdmin) (`roles/aiplatform.featurestoreAdmin`) [Agent Platform Feature Store Data Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.featurestoreDataViewer) (`roles/aiplatform.featurestoreDataViewer`) [Agent Platform Feature Store Data Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.featurestoreDataWriter) (`roles/aiplatform.featurestoreDataWriter`) [Agent Platform Feature Store Resource Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.featurestoreResourceViewer) (`roles/aiplatform.featurestoreResourceViewer`) [Agent Platform Feature Store User](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.featurestoreUser) (`roles/aiplatform.featurestoreUser`) [AlloyDB Client](https://docs.cloud.google.com/iam/docs/roles-permissions/alloydb.md.txt#alloydb.client) (`roles/alloydb.client`) [AlloyDB Database User](https://docs.cloud.google.com/iam/docs/roles-permissions/alloydb.md.txt#alloydb.databaseUser) (`roles/alloydb.databaseUser`) [Analytics Hub Listing Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/analyticshub.md.txt#analyticshub.listingAdmin) (`roles/analyticshub.listingAdmin`) [Analytics Hub Publisher](https://docs.cloud.google.com/iam/docs/roles-permissions/analyticshub.md.txt#analyticshub.publisher) (`roles/analyticshub.publisher`) [Analytics Hub Subscriber](https://docs.cloud.google.com/iam/docs/roles-permissions/analyticshub.md.txt#analyticshub.subscriber) (`roles/analyticshub.subscriber`) [Analytics Hub Subscription Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/analyticshub.md.txt#analyticshub.subscriptionOwner) (`roles/analyticshub.subscriptionOwner`) [Apigee Analytics Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.analyticsEditor) (`roles/apigee.analyticsEditor`) [Apigee Analytics Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.analyticsViewer) (`roles/apigee.analyticsViewer`) [Apigee API Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.apiReaderV2) (`roles/apigee.apiReaderV2`) [Apigee Developer Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.developerAdmin) (`roles/apigee.developerAdmin`) [Apigee Environment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.environmentAdmin) (`roles/apigee.environmentAdmin`) [Apigee Monetization Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.monetizationAdmin) (`roles/apigee.monetizationAdmin`) [Apigee Portal Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.portalAdmin) (`roles/apigee.portalAdmin`) [Apigee Read-only Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.readOnlyAdmin) (`roles/apigee.readOnlyAdmin`) [Apigee Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.securityAdmin) (`roles/apigee.securityAdmin`) [Apigee Security Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.securityViewer) (`roles/apigee.securityViewer`) [Apigee Space Console User](https://docs.cloud.google.com/iam/docs/roles-permissions/apigee.md.txt#apigee.spaceConsoleUser) (`roles/apigee.spaceConsoleUser`) [Cloud Apigee Registry Worker](https://docs.cloud.google.com/iam/docs/roles-permissions/apigeeregistry.md.txt#apigeeregistry.worker) (`roles/apigeeregistry.worker`) [Cloud API hub Addons Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apihub.md.txt#apihub.addonsAdmin) (`roles/apihub.addonsAdmin`) [Cloud API hub Attributes Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apihub.md.txt#apihub.attributeAdmin) (`roles/apihub.attributeAdmin`) [Cloud API hub Plugins Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apihub.md.txt#apihub.pluginAdmin) (`roles/apihub.pluginAdmin`) [Cloud API hub Provisioning Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/apihub.md.txt#apihub.provisioningAdmin) (`roles/apihub.provisioningAdmin`) [App Engine Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/appengine.md.txt#appengine.appCreator) (`roles/appengine.appCreator`) [App Engine Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/appengine.md.txt#appengine.appViewer) (`roles/appengine.appViewer`) [App Engine Code Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/appengine.md.txt#appengine.codeViewer) (`roles/appengine.codeViewer`) [App Engine Managed VM Debug Access](https://docs.cloud.google.com/iam/docs/roles-permissions/appengine.md.txt#appengine.debugger) (`roles/appengine.debugger`) [App Engine Deployer](https://docs.cloud.google.com/iam/docs/roles-permissions/appengine.md.txt#appengine.deployer) (`roles/appengine.deployer`) [App Engine Memcache Data Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/appengine.md.txt#appengine.memcacheDataAdmin) (`roles/appengine.memcacheDataAdmin`) [App Engine Service Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/appengine.md.txt#appengine.serviceAdmin) (`roles/appengine.serviceAdmin`) [App Management Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/apphub.md.txt#apphub.appManagementViewer) (`roles/apphub.appManagementViewer`) [Appliance troubleshooting commands approver](https://docs.cloud.google.com/iam/docs/roles-permissions/applianceactivation.md.txt#applianceactivation.approver) (`roles/applianceactivation.approver`) [Appliance troubleshooter](https://docs.cloud.google.com/iam/docs/roles-permissions/applianceactivation.md.txt#applianceactivation.troubleshooter) (`roles/applianceactivation.troubleshooter`) [Assured OSS Project Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredoss.md.txt#assuredoss.projectAdmin) (`roles/assuredoss.projectAdmin`) [Assured OSS Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredoss.md.txt#assuredoss.reader) (`roles/assuredoss.reader`) [Assured OSS User](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredoss.md.txt#assuredoss.user) (`roles/assuredoss.user`) [Assured Workloads Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.reader) (`roles/assuredworkloads.reader`) [Audit Manager Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.auditor) (`roles/auditmanager.auditor`) [AutoML Predictor](https://docs.cloud.google.com/iam/docs/roles-permissions/automl.md.txt#automl.predictor) (`roles/automl.predictor`) [Recommendations AI Admin Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/automlrecommendations.md.txt#automlrecommendations.adminViewer) (`roles/automlrecommendations.adminViewer`) [Autoscaling Site Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/autoscaling.md.txt#autoscaling.sitesAdmin) (`roles/autoscaling.sitesAdmin`) [Backup and DR Backup User](https://docs.cloud.google.com/iam/docs/roles-permissions/backupdr.md.txt#backupdr.backupUser) (`roles/backupdr.backupUser`) [Backup and DR Compute Engine Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/backupdr.md.txt#backupdr.computeEngineOperator) (`roles/backupdr.computeEngineOperator`) [Backup and DR Mount User](https://docs.cloud.google.com/iam/docs/roles-permissions/backupdr.md.txt#backupdr.mountUser) (`roles/backupdr.mountUser`) [Backup and DR Restore User](https://docs.cloud.google.com/iam/docs/roles-permissions/backupdr.md.txt#backupdr.restoreUser) (`roles/backupdr.restoreUser`) [Backup and DR User](https://docs.cloud.google.com/iam/docs/roles-permissions/backupdr.md.txt#backupdr.user) (`roles/backupdr.user`) [Backup and DR User V2](https://docs.cloud.google.com/iam/docs/roles-permissions/backupdr.md.txt#backupdr.userv2) (`roles/backupdr.userv2`) [Bare Metal Solution Instances Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/baremetalsolution.md.txt#baremetalsolution.instancesadmin) (`roles/baremetalsolution.instancesadmin`) [Bare Metal Solution Instances Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/baremetalsolution.md.txt#baremetalsolution.instancesviewer) (`roles/baremetalsolution.instancesviewer`) [Bare Metal Solution Storage Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/baremetalsolution.md.txt#baremetalsolution.storageadmin) (`roles/baremetalsolution.storageadmin`) [Batch Job Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/batch.md.txt#batch.jobsEditor) (`roles/batch.jobsEditor`) [Batch Job Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/batch.md.txt#batch.jobsViewer) (`roles/batch.jobsViewer`) [Batch ResourceAllowance Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/batch.md.txt#batch.resourceAllowancesEditor) (`roles/batch.resourceAllowancesEditor`) [Batch ResourceAllowance Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/batch.md.txt#batch.resourceAllowancesViewer) (`roles/batch.resourceAllowancesViewer`) [BigLake Metadata Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/biglake.md.txt#biglake.metadataViewer) (`roles/biglake.metadataViewer`) [BigQuery Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquery.md.txt#bigquery.securityAdmin) (`roles/bigquery.securityAdmin`) [Binary Authorization Attestor Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/binaryauthorization.md.txt#binaryauthorization.attestorsAdmin) (`roles/binaryauthorization.attestorsAdmin`) [Binary Authorization Attestor Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/binaryauthorization.md.txt#binaryauthorization.attestorsEditor) (`roles/binaryauthorization.attestorsEditor`) [Binary Authorization Attestor Image Verifier](https://docs.cloud.google.com/iam/docs/roles-permissions/binaryauthorization.md.txt#binaryauthorization.attestorsVerifier) (`roles/binaryauthorization.attestorsVerifier`) [Binary Authorization Attestor Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/binaryauthorization.md.txt#binaryauthorization.attestorsViewer) (`roles/binaryauthorization.attestorsViewer`) [Binary Authorization Policy Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/binaryauthorization.md.txt#binaryauthorization.policyAdmin) (`roles/binaryauthorization.policyAdmin`) [Binary Authorization Policy Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/binaryauthorization.md.txt#binaryauthorization.policyEditor) (`roles/binaryauthorization.policyEditor`) [Binary Authorization Policy Evaluator](https://docs.cloud.google.com/iam/docs/roles-permissions/binaryauthorization.md.txt#binaryauthorization.policyEvaluator) (`roles/binaryauthorization.policyEvaluator`) [Binary Authorization Policy Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/binaryauthorization.md.txt#binaryauthorization.policyViewer) (`roles/binaryauthorization.policyViewer`) [Browser](https://docs.cloud.google.com/iam/docs/roles-permissions/browser.md.txt#browser) (`roles/browser`) [Capacity Planner](https://docs.cloud.google.com/iam/docs/roles-permissions/capacityplanner.md.txt#capacityplanner.planner) (`roles/capacityplanner.planner`) [Certificate Manager Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/certificatemanager.md.txt#certificatemanager.owner) (`roles/certificatemanager.owner`) [Gemini Enterprise for Customer Experience Agent Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.agentEditor) (`roles/ces.agentEditor`) [Gemini Enterprise for Customer Experience App Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.appEditor) (`roles/ces.appEditor`) [Gemini Enterprise for Customer Experience Deployment Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.deploymentEditor) (`roles/ces.deploymentEditor`) [Gemini Enterprise for Customer Experience Evals Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.evalsEditor) (`roles/ces.evalsEditor`) [Gemini Enterprise for Customer Experience Guardrails Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.guardrailsEditor) (`roles/ces.guardrailsEditor`) [Gemini Enterprise for Customer Experience Security Settings Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.securitySettingsEditor) (`roles/ces.securitySettingsEditor`) [Gemini Enterprise for Customer Experience Tools Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.toolsEditor) (`roles/ces.toolsEditor`) [Chronicle API Data Governor](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.dataGovernor) (`roles/chronicle.dataGovernor`) [Chronicle API Federation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.federationAdmin) (`roles/chronicle.federationAdmin`) [Chronicle API Federation Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.federationViewer) (`roles/chronicle.federationViewer`) [Chronicle API Limited Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.limitedViewer) (`roles/chronicle.limitedViewer`) [Chronicle API Restricted Data Access Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.restrictedDataAccessViewer) (`roles/chronicle.restrictedDataAccessViewer`) [Chronicle SOAR Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.soarAdmin) (`roles/chronicle.soarAdmin`) [Chronicle SOAR Remote Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.soarRemoteAgent) (`roles/chronicle.soarRemoteAgent`) [Chronicle SOAR Threat Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.soarThreatManager) (`roles/chronicle.soarThreatManager`) [Chronicle SOAR Vulnerability Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/chronicle.md.txt#chronicle.soarVulnerabilityManager) (`roles/chronicle.soarVulnerabilityManager`) [Code Repository Indexes Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudaicompanion.md.txt#cloudaicompanion.codeRepositoryIndexesAdmin) (`roles/cloudaicompanion.codeRepositoryIndexesAdmin`) [Code Repository Indexes Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudaicompanion.md.txt#cloudaicompanion.codeRepositoryIndexesViewer) (`roles/cloudaicompanion.codeRepositoryIndexesViewer`) [Gemini Code Assist Tools Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudaicompanion.md.txt#cloudaicompanion.codeToolsAdmin) (`roles/cloudaicompanion.codeToolsAdmin`) [Gemini Code Assist Tools User](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudaicompanion.md.txt#cloudaicompanion.codeToolsUser) (`roles/cloudaicompanion.codeToolsUser`) [Cloud Build Approver](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.builds.approver) (`roles/cloudbuild.builds.approver`) [Cloud Build Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.builds.editor) (`roles/cloudbuild.builds.editor`) [Cloud Build Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.builds.viewer) (`roles/cloudbuild.builds.viewer`) [Cloud Build Connection Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.connectionAdmin) (`roles/cloudbuild.connectionAdmin`) [Cloud Build Connection Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.connectionViewer) (`roles/cloudbuild.connectionViewer`) [Cloud Build Integrations Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.integrationsEditor) (`roles/cloudbuild.integrationsEditor`) [Cloud Build Integrations Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.integrationsOwner) (`roles/cloudbuild.integrationsOwner`) [Cloud Build Integrations Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.integrationsViewer) (`roles/cloudbuild.integrationsViewer`) [Cloud Build WorkerPool Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.workerPoolEditor) (`roles/cloudbuild.workerPoolEditor`) [Cloud Build WorkerPool Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.workerPoolOwner) (`roles/cloudbuild.workerPoolOwner`) [Cloud Build WorkerPool Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.workerPoolViewer) (`roles/cloudbuild.workerPoolViewer`) [Cloud Deploy Approver](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddeploy.md.txt#clouddeploy.approver) (`roles/clouddeploy.approver`) [Cloud Deploy Custom Target Type Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddeploy.md.txt#clouddeploy.customTargetTypeAdmin) (`roles/clouddeploy.customTargetTypeAdmin`) [Cloud Deploy Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddeploy.md.txt#clouddeploy.developer) (`roles/clouddeploy.developer`) [Cloud Deploy Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddeploy.md.txt#clouddeploy.operator) (`roles/clouddeploy.operator`) [Cloud Deploy Policy Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddeploy.md.txt#clouddeploy.policyAdmin) (`roles/clouddeploy.policyAdmin`) [Cloud Deploy Policy Overrider](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddeploy.md.txt#clouddeploy.policyOverrider) (`roles/clouddeploy.policyOverrider`) [Cloud Deploy Releaser](https://docs.cloud.google.com/iam/docs/roles-permissions/clouddeploy.md.txt#clouddeploy.releaser) (`roles/clouddeploy.releaser`) [Cloud Functions Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudfunctions.md.txt#cloudfunctions.developer) (`roles/cloudfunctions.developer`) [Cloud Hub Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudhub.md.txt#cloudhub.operator) (`roles/cloudhub.operator`) [Cloud Talent Solution Job Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudjobdiscovery.md.txt#cloudjobdiscovery.jobsEditor) (`roles/cloudjobdiscovery.jobsEditor`) [Cloud Talent Solution Job Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudjobdiscovery.md.txt#cloudjobdiscovery.jobsViewer) (`roles/cloudjobdiscovery.jobsViewer`) [Cloud Talent Solution Profile Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudjobdiscovery.md.txt#cloudjobdiscovery.profilesEditor) (`roles/cloudjobdiscovery.profilesEditor`) [Cloud Talent Solution Profile Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudjobdiscovery.md.txt#cloudjobdiscovery.profilesViewer) (`roles/cloudjobdiscovery.profilesViewer`) [Cloud KMS CryptoKey Decrypter Via Delegation](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.cryptoKeyDecrypterViaDelegation) (`roles/cloudkms.cryptoKeyDecrypterViaDelegation`) [Cloud KMS CryptoKey Encrypter/Decrypter Via Delegation](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.cryptoKeyEncrypterDecrypterViaDelegation) (`roles/cloudkms.cryptoKeyEncrypterDecrypterViaDelegation`) [Cloud KMS CryptoKey Encrypter Via Delegation](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.cryptoKeyEncrypterViaDelegation) (`roles/cloudkms.cryptoKeyEncrypterViaDelegation`) [Cloud KMS EkmConnections Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.ekmConnectionsAdmin) (`roles/cloudkms.ekmConnectionsAdmin`) [Cloud KMS Expert PQ Asymmetric Signing Key Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.expertPqcSigner) (`roles/cloudkms.expertPqcSigner`) [Cloud KMS Expert Raw AES-CBC Key Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.expertRawAesCbc) (`roles/cloudkms.expertRawAesCbc`) [Cloud KMS Expert Raw AES-CTR Key Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.expertRawAesCtr) (`roles/cloudkms.expertRawAesCtr`) [Cloud KMS Expert Raw PKCS#1 Key Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudkms.md.txt#cloudkms.expertRawPKCS1) (`roles/cloudkms.expertRawPKCS1`) [Cloud Number Registry IPAM Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudnumberregistry.md.txt#cloudnumberregistry.ipamAdmin) (`roles/cloudnumberregistry.ipamAdmin`) [Cloud Number Registry IPAM Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudnumberregistry.md.txt#cloudnumberregistry.ipamViewer) (`roles/cloudnumberregistry.ipamViewer`) [Catalog Consumer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprivatecatalog.md.txt#cloudprivatecatalog.consumer) (`roles/cloudprivatecatalog.consumer`) [Catalog Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprivatecatalog.md.txt#cloudprivatecatalogproducer.manager) (`roles/cloudprivatecatalogproducer.manager`) [Catalog Org Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprivatecatalog.md.txt#cloudprivatecatalogproducer.orgAdmin) (`roles/cloudprivatecatalogproducer.orgAdmin`) [Cloud Profiler User](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudprofiler.md.txt#cloudprofiler.user) (`roles/cloudprofiler.user`) [Cloud Scheduler Job Runner](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudscheduler.md.txt#cloudscheduler.jobRunner) (`roles/cloudscheduler.jobRunner`) [Advisory Support Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsupport.md.txt#cloudsupport.advisorySupportEditor) (`roles/cloudsupport.advisorySupportEditor`) [Advisory Support Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsupport.md.txt#cloudsupport.advisorySupportViewer) (`roles/cloudsupport.advisorySupportViewer`) [Tech Support Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsupport.md.txt#cloudsupport.techSupportEditor) (`roles/cloudsupport.techSupportEditor`) [Tech Support Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsupport.md.txt#cloudsupport.techSupportViewer) (`roles/cloudsupport.techSupportViewer`) [Cloud Tasks Enqueuer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtasks.md.txt#cloudtasks.enqueuer) (`roles/cloudtasks.enqueuer`) [Cloud Tasks Queue Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtasks.md.txt#cloudtasks.queueAdmin) (`roles/cloudtasks.queueAdmin`) [Cloud Tasks Task Deleter](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtasks.md.txt#cloudtasks.taskDeleter) (`roles/cloudtasks.taskDeleter`) [Cloud Tasks Task Runner](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtasks.md.txt#cloudtasks.taskRunner) (`roles/cloudtasks.taskRunner`) [Firebase Test Lab Direct Access Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtestservice.md.txt#cloudtestservice.directAccessAdmin) (`roles/cloudtestservice.directAccessAdmin`) [Firebase Test Lab Direct Access Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtestservice.md.txt#cloudtestservice.directAccessViewer) (`roles/cloudtestservice.directAccessViewer`) [Firebase Test Lab Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtestservice.md.txt#cloudtestservice.testAdmin) (`roles/cloudtestservice.testAdmin`) [Firebase Test Lab Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudtestservice.md.txt#cloudtestservice.testViewer) (`roles/cloudtestservice.testViewer`) [Commerce Business Enablement PaymentConfig Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/commercebusinessenablement.md.txt#commercebusinessenablement.paymentConfigAdmin) (`roles/commercebusinessenablement.paymentConfigAdmin`) [Commerce Business Enablement PaymentConfig Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/commercebusinessenablement.md.txt#commercebusinessenablement.paymentConfigViewer) (`roles/commercebusinessenablement.paymentConfigViewer`) [Commerce Business Enablement Reseller Discount Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/commercebusinessenablement.md.txt#commercebusinessenablement.resellerDiscountAdmin) (`roles/commercebusinessenablement.resellerDiscountAdmin`) [Commerce Business Enablement Reseller Discount Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/commercebusinessenablement.md.txt#commercebusinessenablement.resellerDiscountViewer) (`roles/commercebusinessenablement.resellerDiscountViewer`) [Governed Marketplace User](https://docs.cloud.google.com/iam/docs/roles-permissions/commerceorggovernance.md.txt#commerceorggovernance.user) (`roles/commerceorggovernance.user`) [Commerce Price Management Events Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/commercepricemanagement.md.txt#commercepricemanagement.eventsViewer) (`roles/commercepricemanagement.eventsViewer`) [Commerce Price Management Private Offers Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/commercepricemanagement.md.txt#commercepricemanagement.privateOffersAdmin) (`roles/commercepricemanagement.privateOffersAdmin`) [Environment and Storage Object Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.environmentAndStorageObjectAdmin) (`roles/composer.environmentAndStorageObjectAdmin`) [Environment and Storage Object User](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.environmentAndStorageObjectUser) (`roles/composer.environmentAndStorageObjectUser`) [Environment and Storage Object Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.environmentAndStorageObjectViewer) (`roles/composer.environmentAndStorageObjectViewer`) [Composer Worker](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.worker) (`roles/composer.worker`) [Compute Image User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.imageUser) (`roles/compute.imageUser`) [Compute Load Balancer Services User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.loadBalancerServiceUser) (`roles/compute.loadBalancerServiceUser`) [Compute Organization Firewall Policy Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.orgFirewallPolicyAdmin) (`roles/compute.orgFirewallPolicyAdmin`) [Compute Organization Firewall Policy User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.orgFirewallPolicyUser) (`roles/compute.orgFirewallPolicyUser`) [Compute Organization Security Policy Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.orgSecurityPolicyAdmin) (`roles/compute.orgSecurityPolicyAdmin`) [Compute Organization Security Policy User](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.orgSecurityPolicyUser) (`roles/compute.orgSecurityPolicyUser`) [Compute Organization Resource Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.orgSecurityResourceAdmin) (`roles/compute.orgSecurityResourceAdmin`) [Compute packet mirroring admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.packetMirroringAdmin) (`roles/compute.packetMirroringAdmin`) [Compute packet mirroring user](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.packetMirroringUser) (`roles/compute.packetMirroringUser`) [Compute Public IP Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.publicIpAdmin) (`roles/compute.publicIpAdmin`) [Compute VM extension policy admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.vmExtensionPolicyAdmin) (`roles/compute.vmExtensionPolicyAdmin`) [Compute VM extension policy viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.vmExtensionPolicyViewer) (`roles/compute.vmExtensionPolicyViewer`) [Compute Shared VPC Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.xpnAdmin) (`roles/compute.xpnAdmin`) [ConfigDelivery Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/configdelivery.md.txt#configdelivery.configDeliveryAdmin) (`roles/configdelivery.configDeliveryAdmin`) [ConfigDelivery Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/configdelivery.md.txt#configdelivery.configDeliveryViewer) (`roles/configdelivery.configDeliveryViewer`) [Config Delivery Resource Bundle Publisher](https://docs.cloud.google.com/iam/docs/roles-permissions/configdelivery.md.txt#configdelivery.resourceBundlePublisher) (`roles/configdelivery.resourceBundlePublisher`) [Consumer Procurement Entitlement Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/consumerprocurement.md.txt#consumerprocurement.entitlementManager) (`roles/consumerprocurement.entitlementManager`) [Consumer Procurement Entitlement Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/consumerprocurement.md.txt#consumerprocurement.entitlementViewer) (`roles/consumerprocurement.entitlementViewer`) [Consumer Procurement Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/consumerprocurement.md.txt#consumerprocurement.procurementAdmin) (`roles/consumerprocurement.procurementAdmin`) [Consumer Procurement Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/consumerprocurement.md.txt#consumerprocurement.procurementViewer) (`roles/consumerprocurement.procurementViewer`) [Container Analysis Notes Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/containeranalysis.md.txt#containeranalysis.notes.editor) (`roles/containeranalysis.notes.editor`) [Container Analysis Notes Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/containeranalysis.md.txt#containeranalysis.notes.viewer) (`roles/containeranalysis.notes.viewer`) [Container Analysis Occurrences Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/containeranalysis.md.txt#containeranalysis.occurrences.editor) (`roles/containeranalysis.occurrences.editor`) [Container Analysis Occurrences Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/containeranalysis.md.txt#containeranalysis.occurrences.viewer) (`roles/containeranalysis.occurrences.viewer`) [Content Warehouse Document Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/contentwarehouse.md.txt#contentwarehouse.documentAdmin) (`roles/contentwarehouse.documentAdmin`) [Content Warehouse document creator](https://docs.cloud.google.com/iam/docs/roles-permissions/contentwarehouse.md.txt#contentwarehouse.documentCreator) (`roles/contentwarehouse.documentCreator`) [Content Warehouse Document Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/contentwarehouse.md.txt#contentwarehouse.documentEditor) (`roles/contentwarehouse.documentEditor`) [Content Warehouse document schema viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/contentwarehouse.md.txt#contentwarehouse.documentSchemaViewer) (`roles/contentwarehouse.documentSchemaViewer`) [Content Warehouse Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/contentwarehouse.md.txt#contentwarehouse.documentViewer) (`roles/contentwarehouse.documentViewer`) [Database Insights monitoring viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/databaseinsights.md.txt#databaseinsights.monitoringViewer) (`roles/databaseinsights.monitoringViewer`) [Database Insights recommendation viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/databaseinsights.md.txt#databaseinsights.recommendationViewer) (`roles/databaseinsights.recommendationViewer`) [Studio Query Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/databasesconsole.md.txt#databasesconsole.studioQueryAdmin) (`roles/databasesconsole.studioQueryAdmin`) [Studio Query User](https://docs.cloud.google.com/iam/docs/roles-permissions/databasesconsole.md.txt#databasesconsole.studioQueryUser) (`roles/databasesconsole.studioQueryUser`) [Policy Tag Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.categoryAdmin) (`roles/datacatalog.categoryAdmin`) [DataCatalog Data Steward](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.dataSteward) (`roles/datacatalog.dataSteward`) [DataCatalog EntryGroup Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.entryGroupCreator) (`roles/datacatalog.entryGroupCreator`) [DataCatalog EntryGroup Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.entryGroupOwner) (`roles/datacatalog.entryGroupOwner`) [DataCatalog Entry Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.entryOwner) (`roles/datacatalog.entryOwner`) [DataCatalog Entry Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.entryViewer) (`roles/datacatalog.entryViewer`) [DataCatalog Migration Config Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.migrationConfigAdmin) (`roles/datacatalog.migrationConfigAdmin`) [DataCatalog Search Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.searchAdmin) (`roles/datacatalog.searchAdmin`) [Data Catalog TagTemplate Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.tagTemplateOwner) (`roles/datacatalog.tagTemplateOwner`) [Data Catalog TagTemplate User](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.tagTemplateUser) (`roles/datacatalog.tagTemplateUser`) [Data Catalog TagTemplate Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/datacatalog.md.txt#datacatalog.tagTemplateViewer) (`roles/datacatalog.tagTemplateViewer`) [Connector Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dataconnectors.md.txt#dataconnectors.connectorAdmin) (`roles/dataconnectors.connectorAdmin`) [Dataflow Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.developer) (`roles/dataflow.developer`) [Code Commenter](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.codeCommenter) (`roles/dataform.codeCommenter`) [Code Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.codeCreator) (`roles/dataform.codeCreator`) [Code Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.codeEditor) (`roles/dataform.codeEditor`) [Code Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.codeOwner) (`roles/dataform.codeOwner`) [Code Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.codeViewer) (`roles/dataform.codeViewer`) [Team Folder Commenter](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.teamFolderCommenter) (`roles/dataform.teamFolderCommenter`) [Team Folder Contributor](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.teamFolderContributor) (`roles/dataform.teamFolderContributor`) [Team Folder Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.teamFolderOwner) (`roles/dataform.teamFolderOwner`) [Team Folder Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.teamFolderViewer) (`roles/dataform.teamFolderViewer`) [Cloud Data Fusion Accessor](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.accessor) (`roles/datafusion.accessor`) [Cloud Data Fusion Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.developer) (`roles/datafusion.developer`) [Cloud Data Fusion Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.operator) (`roles/datafusion.operator`) [Data Lineage Events Producer](https://docs.cloud.google.com/iam/docs/roles-permissions/datalineage.md.txt#datalineage.producer) (`roles/datalineage.producer`) [Data pipelines Invoker](https://docs.cloud.google.com/iam/docs/roles-permissions/datapipelines.md.txt#datapipelines.invoker) (`roles/datapipelines.invoker`) [Dataplex Aspect Type Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.aspectTypeOwner) (`roles/dataplex.aspectTypeOwner`) [Dataplex Aspect Type User](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.aspectTypeUser) (`roles/dataplex.aspectTypeUser`) [Dataplex Catalog Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.catalogAdmin) (`roles/dataplex.catalogAdmin`) [Dataplex Catalog Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.catalogEditor) (`roles/dataplex.catalogEditor`) [Dataplex Catalog Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.catalogViewer) (`roles/dataplex.catalogViewer`) [Dataplex Content Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.contentAdmin) (`roles/dataplex.contentAdmin`) [Dataplex Content Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.contentCreator) (`roles/dataplex.contentCreator`) [Dataplex Content Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.contentEditor) (`roles/dataplex.contentEditor`) [Dataplex Content User](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.contentUser) (`roles/dataplex.contentUser`) [Dataplex Content Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.contentViewer) (`roles/dataplex.contentViewer`) [Dataplex Data Domain Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.dataDomainAdmin) (`roles/dataplex.dataDomainAdmin`) [Dataplex Data Domain Configuration Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.dataDomainEditor) (`roles/dataplex.dataDomainEditor`) [Dataplex Data Domain Configuration Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.dataDomainViewer) (`roles/dataplex.dataDomainViewer`) [Dataplex Data Products Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.dataProductsAdmin) (`roles/dataplex.dataProductsAdmin`) [Dataplex Data Products Consumer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.dataProductsConsumer) (`roles/dataplex.dataProductsConsumer`) [Dataplex Data Products Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.dataProductsEditor) (`roles/dataplex.dataProductsEditor`) [Dataplex Data Products Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.dataProductsViewer) (`roles/dataplex.dataProductsViewer`) [Dataplex Entry Group Exporter](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.entryGroupExporter) (`roles/dataplex.entryGroupExporter`) [Dataplex Entry Group Importer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.entryGroupImporter) (`roles/dataplex.entryGroupImporter`) [Dataplex Entry Group Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.entryGroupOwner) (`roles/dataplex.entryGroupOwner`) [Dataplex Entry Link Type Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.entryLinkTypeOwner) (`roles/dataplex.entryLinkTypeOwner`) [Dataplex Entry Link Type User](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.entryLinkTypeUser) (`roles/dataplex.entryLinkTypeUser`) [Dataplex Entry and EntryLink Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.entryOwner) (`roles/dataplex.entryOwner`) [Dataplex Entry Type Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.entryTypeOwner) (`roles/dataplex.entryTypeOwner`) [Dataplex Entry Type User](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.entryTypeUser) (`roles/dataplex.entryTypeUser`) [Dataplex Metadata Feed Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.metadataFeedOwner) (`roles/dataplex.metadataFeedOwner`) [Dataplex Metadata Feed Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.metadataFeedViewer) (`roles/dataplex.metadataFeedViewer`) [Dataplex Metadata Job Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.metadataJobOwner) (`roles/dataplex.metadataJobOwner`) [Dataplex Metadata Job Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.metadataJobViewer) (`roles/dataplex.metadataJobViewer`) [Dataplex Metadata Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.metadataReader) (`roles/dataplex.metadataReader`) [Dataplex Metadata Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.metadataWriter) (`roles/dataplex.metadataWriter`) [Dataproc Hub Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.hubAgent) (`roles/dataproc.hubAgent`) [Dataproc Serverless Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.serverlessEditor) (`roles/dataproc.serverlessEditor`) [Dataproc Serverless Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.serverlessViewer) (`roles/dataproc.serverlessViewer`) [Cloud Datastore Bulk Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firestore.md.txt#datastore.bulkAdmin) (`roles/datastore.bulkAdmin`) [Cloud Datastore Import Export Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firestore.md.txt#datastore.importExportAdmin) (`roles/datastore.importExportAdmin`) [Cloud Datastore Index Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firestore.md.txt#datastore.indexAdmin) (`roles/datastore.indexAdmin`) [Cloud Datastore Key Visualizer Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firestore.md.txt#datastore.keyVisualizerViewer) (`roles/datastore.keyVisualizerViewer`) [Dell EMC Cloud OneFS User](https://docs.cloud.google.com/iam/docs/roles-permissions/dellemccloudonefs.md.txt#dellemccloudonefs.user) (`roles/dellemccloudonefs.user`) [Deployment Manager Type Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#deploymentmanager.typeEditor) (`roles/deploymentmanager.typeEditor`) [Deployment Manager Type Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#deploymentmanager.typeViewer) (`roles/deploymentmanager.typeViewer`) [Application Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/designcenter.md.txt#designcenter.applicationAdmin) (`roles/designcenter.applicationAdmin`) [Application Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/designcenter.md.txt#designcenter.applicationEditor) (`roles/designcenter.applicationEditor`) [Application Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/designcenter.md.txt#designcenter.applicationViewer) (`roles/designcenter.applicationViewer`) [Application Design Center User](https://docs.cloud.google.com/iam/docs/roles-permissions/designcenter.md.txt#designcenter.user) (`roles/designcenter.user`) [Developer Connect Insights Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/developerconnect.md.txt#developerconnect.insightsAdmin) (`roles/developerconnect.insightsAdmin`) [Developer Connect Insights Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/developerconnect.md.txt#developerconnect.insightsViewer) (`roles/developerconnect.insightsViewer`) [Developer Connect OAuth Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/developerconnect.md.txt#developerconnect.oauthAdmin) (`roles/developerconnect.oauthAdmin`) [Developer Connect OAuth User](https://docs.cloud.google.com/iam/docs/roles-permissions/developerconnect.md.txt#developerconnect.oauthUser) (`roles/developerconnect.oauthUser`) [Developer Connect User](https://docs.cloud.google.com/iam/docs/roles-permissions/developerconnect.md.txt#developerconnect.user) (`roles/developerconnect.user`) [CX Premium Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.aamAdmin) (`roles/dialogflow.aamAdmin`) [CX Premium Conversational Architect](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.aamConversationalArchitect) (`roles/dialogflow.aamConversationalArchitect`) [CX Premium Dialog Designer](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.aamDialogDesigner) (`roles/dialogflow.aamDialogDesigner`) [CX Premium Lead Dialog Designer](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.aamLeadDialogDesigner) (`roles/dialogflow.aamLeadDialogDesigner`) [CX Premium Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.aamViewer) (`roles/dialogflow.aamViewer`) [Dialogflow Console Simulator User](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.consoleSimulatorUser) (`roles/dialogflow.consoleSimulatorUser`) [Dialogflow Console Smart Messaging Allowlist Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.consoleSmartMessagingAllowlistEditor) (`roles/dialogflow.consoleSmartMessagingAllowlistEditor`) [Gemini Enterprise Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceAdmin) (`roles/discoveryengine.agentspaceAdmin`) [Gemini Enterprise Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceEditor) (`roles/discoveryengine.agentspaceEditor`) [Gemini Enterprise Restricted User](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceRestrictedUser) (`roles/discoveryengine.agentspaceRestrictedUser`) [Gemini Enterprise User](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceUser) (`roles/discoveryengine.agentspaceUser`) [Gemini Enterprise Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.agentspaceViewer) (`roles/discoveryengine.agentspaceViewer`) [Cloud NotebookLM Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.notebookLmOwner) (`roles/discoveryengine.notebookLmOwner`) [Cloud NotebookLM User](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.notebookLmUser) (`roles/discoveryengine.notebookLmUser`) [Podcast API User](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.podcastApiUser) (`roles/discoveryengine.podcastApiUser`) [DLP Connections Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.connectionsAdmin) (`roles/dlp.connectionsAdmin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Subscription Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.subscriptionsAdmin) (`roles/dlp.subscriptionsAdmin`) [DNS Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dns.md.txt#dns.reader) (`roles/dns.reader`) [Earth Subscriptions Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/earth.md.txt#earth.subscriptionsAdmin) (`roles/earth.subscriptionsAdmin`) [Earth Subscriptions Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/earth.md.txt#earth.subscriptionsViewer) (`roles/earth.subscriptionsViewer`) [Earth Engine Resource Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/earthengine.md.txt#earthengine.writer) (`roles/earthengine.writer`) [Edge Container Machine User](https://docs.cloud.google.com/iam/docs/roles-permissions/edgecontainer.md.txt#edgecontainer.machineUser) (`roles/edgecontainer.machineUser`) [Edge Container Cluster offline Credential User](https://docs.cloud.google.com/iam/docs/roles-permissions/edgecontainer.md.txt#edgecontainer.offlineCredentialUser) (`roles/edgecontainer.offlineCredentialUser`) [Eventarc Connection Publisher](https://docs.cloud.google.com/iam/docs/roles-permissions/eventarc.md.txt#eventarc.connectionPublisher) (`roles/eventarc.connectionPublisher`) [Eventarc Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/eventarc.md.txt#eventarc.developer) (`roles/eventarc.developer`) [Eventarc Publisher](https://docs.cloud.google.com/iam/docs/roles-permissions/eventarc.md.txt#eventarc.publisher) (`roles/eventarc.publisher`) [Fault Testing Admin/Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/faulttesting.md.txt#faulttesting.operator) (`roles/faulttesting.operator`) [Firebase Analytics Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.analyticsAdmin) (`roles/firebase.analyticsAdmin`) [Firebase Analytics Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.analyticsViewer) (`roles/firebase.analyticsViewer`) [Firebase Develop Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.developAdmin) (`roles/firebase.developAdmin`) [Firebase Develop Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.developViewer) (`roles/firebase.developViewer`) [Firebase Grow Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.growthAdmin) (`roles/firebase.growthAdmin`) [Firebase Grow Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.growthViewer) (`roles/firebase.growthViewer`) [Firebase Quality Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.qualityAdmin) (`roles/firebase.qualityAdmin`) [Firebase Quality Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.qualityViewer) (`roles/firebase.qualityViewer`) [Firebase App Hosting Compute Runner](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseapphosting.md.txt#firebaseapphosting.computeRunner) (`roles/firebaseapphosting.computeRunner`) [Firebase App Hosting Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseapphosting.md.txt#firebaseapphosting.developer) (`roles/firebaseapphosting.developer`) [Firebase Extensions Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseextensions.md.txt#firebaseextensions.developer) (`roles/firebaseextensions.developer`) [Firebase Extensions Publisher - Extensions Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseextensionspublisher.md.txt#firebaseextensionspublisher.extensionsAdmin) (`roles/firebaseextensionspublisher.extensionsAdmin`) [Firebase Extensions Publisher - Extensions Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/firebaseextensionspublisher.md.txt#firebaseextensionspublisher.extensionsViewer) (`roles/firebaseextensionspublisher.extensionsViewer`) [Fleet Engine Delivery Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/fleetengine.md.txt#fleetengine.deliveryAdmin) (`roles/fleetengine.deliveryAdmin`) [Fleet Engine Delivery Super User](https://docs.cloud.google.com/iam/docs/roles-permissions/fleetengine.md.txt#fleetengine.deliverySuperUser) (`roles/fleetengine.deliverySuperUser`) [Fleet Engine On-Demand Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/fleetengine.md.txt#fleetengine.ondemandAdmin) (`roles/fleetengine.ondemandAdmin`) [Fleet Engine Service Super User](https://docs.cloud.google.com/iam/docs/roles-permissions/fleetengine.md.txt#fleetengine.serviceSuperUser) (`roles/fleetengine.serviceSuperUser`) [GDC Hardware Management Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/gdchardwaremanagement.md.txt#gdchardwaremanagement.operator) (`roles/gdchardwaremanagement.operator`) [GDC Hardware Management Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/gdchardwaremanagement.md.txt#gdchardwaremanagement.reader) (`roles/gdchardwaremanagement.reader`) [Gemini Cloud Assist Investigation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/geminicloudassist.md.txt#geminicloudassist.investigationAdmin) (`roles/geminicloudassist.investigationAdmin`) [Gemini Cloud Assist Investigation Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/geminicloudassist.md.txt#geminicloudassist.investigationCreator) (`roles/geminicloudassist.investigationCreator`) [Gemini Cloud Assist Investigation Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/geminicloudassist.md.txt#geminicloudassist.investigationEditor) (`roles/geminicloudassist.investigationEditor`) [Gemini Cloud Assist Investigation User](https://docs.cloud.google.com/iam/docs/roles-permissions/geminicloudassist.md.txt#geminicloudassist.investigationUser) (`roles/geminicloudassist.investigationUser`) [Gemini Cloud Assist Investigation Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/geminicloudassist.md.txt#geminicloudassist.investigationViewer) (`roles/geminicloudassist.investigationViewer`) [Backup for GKE Backup Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/gkebackup.md.txt#gkebackup.backupAdmin) (`roles/gkebackup.backupAdmin`) [Backup for GKE Restore Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/gkebackup.md.txt#gkebackup.restoreAdmin) (`roles/gkebackup.restoreAdmin`) [Fleet Project-level Scope Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.scopeEditorProjectLevel) (`roles/gkehub.scopeEditorProjectLevel`) [Fleet Project-level Scope Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.scopeViewerProjectLevel) (`roles/gkehub.scopeViewerProjectLevel`) [Google Workspace Add-ons Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/gsuiteaddons.md.txt#gsuiteaddons.developer) (`roles/gsuiteaddons.developer`) [Google Workspace Add-ons Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/gsuiteaddons.md.txt#gsuiteaddons.reader) (`roles/gsuiteaddons.reader`) [Google Workspace Add-ons Tester](https://docs.cloud.google.com/iam/docs/roles-permissions/gsuiteaddons.md.txt#gsuiteaddons.tester) (`roles/gsuiteaddons.tester`) [Healthcare Annotation Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.annotationEditor) (`roles/healthcare.annotationEditor`) [Healthcare Annotation Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.annotationReader) (`roles/healthcare.annotationReader`) [Healthcare Annotation Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.annotationStoreAdmin) (`roles/healthcare.annotationStoreAdmin`) [Healthcare Annotation Store Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.annotationStoreViewer) (`roles/healthcare.annotationStoreViewer`) [Healthcare Attribute Definition Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.attributeDefinitionEditor) (`roles/healthcare.attributeDefinitionEditor`) [Healthcare Attribute Definition Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.attributeDefinitionReader) (`roles/healthcare.attributeDefinitionReader`) [Healthcare Consent Artifact Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.consentArtifactAdmin) (`roles/healthcare.consentArtifactAdmin`) [Healthcare Consent Artifact Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.consentArtifactEditor) (`roles/healthcare.consentArtifactEditor`) [Healthcare Consent Artifact Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.consentArtifactReader) (`roles/healthcare.consentArtifactReader`) [Healthcare Consent Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.consentEditor) (`roles/healthcare.consentEditor`) [Healthcare Consent Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.consentReader) (`roles/healthcare.consentReader`) [Healthcare Consent Store Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.consentStoreAdmin) (`roles/healthcare.consentStoreAdmin`) [Healthcare Consent Store Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.consentStoreViewer) (`roles/healthcare.consentStoreViewer`) [Healthcare Dataset Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.datasetAdmin) (`roles/healthcare.datasetAdmin`) [Healthcare Dataset Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.datasetViewer) (`roles/healthcare.datasetViewer`) [Healthcare DICOM Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.dicomEditor) (`roles/healthcare.dicomEditor`) [Healthcare DICOM Store Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.dicomStoreAdmin) (`roles/healthcare.dicomStoreAdmin`) [Healthcare DICOM Store Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.dicomStoreViewer) (`roles/healthcare.dicomStoreViewer`) [Healthcare DICOM Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.dicomViewer) (`roles/healthcare.dicomViewer`) [Healthcare FHIR Resource Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.fhirResourceEditor) (`roles/healthcare.fhirResourceEditor`) [Healthcare FHIR Resource Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.fhirResourceReader) (`roles/healthcare.fhirResourceReader`) [Healthcare FHIR Store Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.fhirStoreAdmin) (`roles/healthcare.fhirStoreAdmin`) [Healthcare FHIR Store Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.fhirStoreViewer) (`roles/healthcare.fhirStoreViewer`) [Healthcare HL7v2 Message Consumer](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.hl7V2Consumer) (`roles/healthcare.hl7V2Consumer`) [Healthcare HL7v2 Message Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.hl7V2Editor) (`roles/healthcare.hl7V2Editor`) [Healthcare HL7v2 Message Ingest](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.hl7V2Ingest) (`roles/healthcare.hl7V2Ingest`) [Healthcare HL7v2 Store Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.hl7V2StoreAdmin) (`roles/healthcare.hl7V2StoreAdmin`) [Healthcare HL7v2 Store Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.hl7V2StoreViewer) (`roles/healthcare.hl7V2StoreViewer`) [Healthcare NLP Service Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.nlpServiceViewer) (`roles/healthcare.nlpServiceViewer`) [Healthcare User Data Mapping Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.userDataMappingEditor) (`roles/healthcare.userDataMappingEditor`) [Healthcare User Data Mapping Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.userDataMappingReader) (`roles/healthcare.userDataMappingReader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Dev Ops](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.devOps) (`roles/iam.devOps`) [Infrastructure Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.infrastructureAdmin) (`roles/iam.infrastructureAdmin`) [ML Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.mlEngineer) (`roles/iam.mlEngineer`) [Network Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.networkAdmin) (`roles/iam.networkAdmin`) [IAM OAuth Client Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.oauthClientAdmin) (`roles/iam.oauthClientAdmin`) [IAM OAuth Client Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.oauthClientViewer) (`roles/iam.oauthClientViewer`) [Organization Role Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.organizationRoleAdmin) (`roles/iam.organizationRoleAdmin`) [Organization Role Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.organizationRoleViewer) (`roles/iam.organizationRoleViewer`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Delete Service Accounts](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.serviceAccountDeleter) (`roles/iam.serviceAccountDeleter`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [IAM Workload Identity Pool Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.workloadIdentityPoolAdmin) (`roles/iam.workloadIdentityPoolAdmin`) [IAM Workload Identity Pool Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.workloadIdentityPoolViewer) (`roles/iam.workloadIdentityPoolViewer`) [Apigee Integration Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.apigeeIntegrationAdminRole) (`roles/integrations.apigeeIntegrationAdminRole`) [Apigee Integration Deployer](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.apigeeIntegrationDeployerRole) (`roles/integrations.apigeeIntegrationDeployerRole`) [Apigee Integration Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.apigeeIntegrationEditorRole) (`roles/integrations.apigeeIntegrationEditorRole`) [Apigee Integration Invoker](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.apigeeIntegrationInvokerRole) (`roles/integrations.apigeeIntegrationInvokerRole`) [Apigee Integration Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.apigeeIntegrationsViewer) (`roles/integrations.apigeeIntegrationsViewer`) [Apigee Integration Approver](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.apigeeSuspensionResolver) (`roles/integrations.apigeeSuspensionResolver`) [Certificate Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.certificateViewer) (`roles/integrations.certificateViewer`) [Application Integration Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.integrationAdmin) (`roles/integrations.integrationAdmin`) [Application Integration Deployer](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.integrationDeployer) (`roles/integrations.integrationDeployer`) [Application Integration Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.integrationEditor) (`roles/integrations.integrationEditor`) [Application Integration Invoker](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.integrationInvoker) (`roles/integrations.integrationInvoker`) [Application Integration Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.integrationViewer) (`roles/integrations.integrationViewer`) [Application Integration SFDC Instance Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.sfdcInstanceAdmin) (`roles/integrations.sfdcInstanceAdmin`) [Application Integration SFDC Instance Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.sfdcInstanceEditor) (`roles/integrations.sfdcInstanceEditor`) [Application Integration SFDC Instance Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.sfdcInstanceViewer) (`roles/integrations.sfdcInstanceViewer`) [Application Integration Approver](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.suspensionResolver) (`roles/integrations.suspensionResolver`) [Issuerswitch Account Manager Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/issuerswitch.md.txt#issuerswitch.accountManagerAdmin) (`roles/issuerswitch.accountManagerAdmin`) [Issuerswitch Account Manager Transactions Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/issuerswitch.md.txt#issuerswitch.accountManagerTransactionsAdmin) (`roles/issuerswitch.accountManagerTransactionsAdmin`) [Issuerswitch Account Manager Transactions Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/issuerswitch.md.txt#issuerswitch.accountManagerTransactionsViewer) (`roles/issuerswitch.accountManagerTransactionsViewer`) [Issuerswitch Participants Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/issuerswitch.md.txt#issuerswitch.issuerParticipantsAdmin) (`roles/issuerswitch.issuerParticipantsAdmin`) [Issuerswitch Resolutions Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/issuerswitch.md.txt#issuerswitch.resolutionsAdmin) (`roles/issuerswitch.resolutionsAdmin`) [Issuerswitch Rules Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/issuerswitch.md.txt#issuerswitch.rulesAdmin) (`roles/issuerswitch.rulesAdmin`) [Issuerswitch Rules Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/issuerswitch.md.txt#issuerswitch.rulesViewer) (`roles/issuerswitch.rulesViewer`) [Issuerswitch Transactions Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/issuerswitch.md.txt#issuerswitch.transactionsViewer) (`roles/issuerswitch.transactionsViewer`) [Logs Configuration Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/logging.md.txt#logging.configWriter) (`roles/logging.configWriter`) [Looker Instance User](https://docs.cloud.google.com/iam/docs/roles-permissions/looker.md.txt#looker.instanceUser) (`roles/looker.instanceUser`) [Looker Studio Pro Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/datastudio.md.txt#lookerstudio.proManager) (`roles/lookerstudio.proManager`) [Managed Flink Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/managedflink.md.txt#managedflink.developer) (`roles/managedflink.developer`) [Google Cloud Managed Identities Backup Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/managedidentities.md.txt#managedidentities.backupAdmin) (`roles/managedidentities.backupAdmin`) [Google Cloud Managed Identities Backup Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/managedidentities.md.txt#managedidentities.backupViewer) (`roles/managedidentities.backupViewer`) [Google Cloud Managed Identities Domain Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/managedidentities.md.txt#managedidentities.domainAdmin) (`roles/managedidentities.domainAdmin`) [Google Cloud Managed Identities Peering Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/managedidentities.md.txt#managedidentities.peeringAdmin) (`roles/managedidentities.peeringAdmin`) [Google Cloud Managed Identities Peering Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/managedidentities.md.txt#managedidentities.peeringViewer) (`roles/managedidentities.peeringViewer`) [Managed Kafka Client](https://docs.cloud.google.com/iam/docs/roles-permissions/managedkafka.md.txt#managedkafka.client) (`roles/managedkafka.client`) [Managed Kafka Cluster Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/managedkafka.md.txt#managedkafka.clusterEditor) (`roles/managedkafka.clusterEditor`) [Managed Kafka Connector Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/managedkafka.md.txt#managedkafka.connectorEditor) (`roles/managedkafka.connectorEditor`) [Managed Kafka Consumer Group Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/managedkafka.md.txt#managedkafka.consumerGroupEditor) (`roles/managedkafka.consumerGroupEditor`) [Managed Kafka Topic Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/managedkafka.md.txt#managedkafka.topicEditor) (`roles/managedkafka.topicEditor`) [Mandiant Attack Surface Management Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/mandiant.md.txt#mandiant.attackSurfaceManagementEditor) (`roles/mandiant.attackSurfaceManagementEditor`) [Mandiant Attack Surface Management Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/mandiant.md.txt#mandiant.attackSurfaceManagementViewer) (`roles/mandiant.attackSurfaceManagementViewer`) [Mandiant Digital Threat Monitoring Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/mandiant.md.txt#mandiant.digitalThreatMonitoringEditor) (`roles/mandiant.digitalThreatMonitoringEditor`) [Mandiant Digital Threat Monitoring Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/mandiant.md.txt#mandiant.digitalThreatMonitoringViewer) (`roles/mandiant.digitalThreatMonitoringViewer`) [Mandiant Expertise On Demand Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/mandiant.md.txt#mandiant.expertiseOnDemandEditor) (`roles/mandiant.expertiseOnDemandEditor`) [Mandiant Expertise On Demand Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/mandiant.md.txt#mandiant.expertiseOnDemandViewer) (`roles/mandiant.expertiseOnDemandViewer`) [Mandiant Threat Intel Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/mandiant.md.txt#mandiant.threatIntelEditor) (`roles/mandiant.threatIntelEditor`) [Mandiant Threat Intel Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/mandiant.md.txt#mandiant.threatIntelViewer) (`roles/mandiant.threatIntelViewer`) [Mandiant Validation Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/mandiant.md.txt#mandiant.validationEditor) (`roles/mandiant.validationEditor`) [Mandiant Validation Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/mandiant.md.txt#mandiant.validationViewer) (`roles/mandiant.validationViewer`) [Mobility Solutions Overages Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/mapsanalytics.md.txt#mapsanalytics.mobilitySolutionsOverageViewer) (`roles/mapsanalytics.mobilitySolutionsOverageViewer`) [Dataproc Metastore Metadata Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/metastore.md.txt#metastore.metadataOperator) (`roles/metastore.metadataOperator`) [Dataproc Metastore Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/metastore.md.txt#metastore.user) (`roles/metastore.user`) [Migration Center Discovery Client Registrator](https://docs.cloud.google.com/iam/docs/roles-permissions/migrationcenter.md.txt#migrationcenter.discoveryClientRegistrator) (`roles/migrationcenter.discoveryClientRegistrator`) [Model Armor Callout User](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.calloutUser) (`roles/modelarmor.calloutUser`) [Model Armor Floor Setting Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.floorSettingsAdmin) (`roles/modelarmor.floorSettingsAdmin`) [Model Armor Floor Setting Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.floorSettingsViewer) (`roles/modelarmor.floorSettingsViewer`) [Model Armor User](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.user) (`roles/modelarmor.user`) [Monitoring Metrics Scopes Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/monitoring.md.txt#monitoring.metricsScopesAdmin) (`roles/monitoring.metricsScopesAdmin`) [Monitoring Metrics Scopes Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/monitoring.md.txt#monitoring.metricsScopesViewer) (`roles/monitoring.metricsScopesViewer`) [Google Home Developer Console Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/nestconsole.md.txt#nestconsole.homeDeveloperAdmin) (`roles/nestconsole.homeDeveloperAdmin`) [Google Home Developer Console Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/nestconsole.md.txt#nestconsole.homeDeveloperEditor) (`roles/nestconsole.homeDeveloperEditor`) [Google Home Developer Console Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/nestconsole.md.txt#nestconsole.homeDeveloperViewer) (`roles/nestconsole.homeDeveloperViewer`) [Service Automation Consumer Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.consumerNetworkAdmin) (`roles/networkconnectivity.consumerNetworkAdmin`) [Group Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.groupAdmin) (`roles/networkconnectivity.groupAdmin`) [Hub \& Spoke Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.hubAdmin) (`roles/networkconnectivity.hubAdmin`) [Hub \& Spoke Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.hubViewer) (`roles/networkconnectivity.hubViewer`) [Multicloud Data Transfer Config Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.multicloudDataTransferConfigAdmin) (`roles/networkconnectivity.multicloudDataTransferConfigAdmin`) [Multicloud Data Transfer Config Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.multicloudDataTransferConfigViewer) (`roles/networkconnectivity.multicloudDataTransferConfigViewer`) [Destination Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.multicloudDataTransferDestinationAdmin) (`roles/networkconnectivity.multicloudDataTransferDestinationAdmin`) [Destination Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.multicloudDataTransferDestinationViewer) (`roles/networkconnectivity.multicloudDataTransferDestinationViewer`) [Regional Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.regionalEndpointAdmin) (`roles/networkconnectivity.regionalEndpointAdmin`) [Regional Endpoint Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.regionalEndpointViewer) (`roles/networkconnectivity.regionalEndpointViewer`) [Service Class User](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.serviceClassUser) (`roles/networkconnectivity.serviceClassUser`) [Service Automation Service Producer Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.serviceProducerAdmin) (`roles/networkconnectivity.serviceProducerAdmin`) [Spoke Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.spokeAdmin) (`roles/networkconnectivity.spokeAdmin`) [Transport Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.transportAdmin) (`roles/networkconnectivity.transportAdmin`) [Transport Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networkconnectivity.md.txt#networkconnectivity.transportViewer) (`roles/networkconnectivity.transportViewer`) [Cloud Network Insights Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkmanagement.md.txt#networkmanagement.CloudNetworkInsightsAdmin) (`roles/networkmanagement.CloudNetworkInsightsAdmin`) [Cloud Network Insights Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/networkmanagement.md.txt#networkmanagement.CloudNetworkInsightsEditor) (`roles/networkmanagement.CloudNetworkInsightsEditor`) [Cloud Network Insights Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networkmanagement.md.txt#networkmanagement.CloudNetworkInsightsViewer) (`roles/networkmanagement.CloudNetworkInsightsViewer`) [DNS Threat Detector Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.dnsThreatDetectorAdmin) (`roles/networksecurity.dnsThreatDetectorAdmin`) [DNS Threat Detector Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.dnsThreatDetectorViewer) (`roles/networksecurity.dnsThreatDetectorViewer`) [Firewall Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.firewallEndpointAdmin) (`roles/networksecurity.firewallEndpointAdmin`) [Intercept Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptDeploymentAdmin) (`roles/networksecurity.interceptDeploymentAdmin`) [Intercept Deployment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptDeploymentViewer) (`roles/networksecurity.interceptDeploymentViewer`) [Intercept Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptEndpointAdmin) (`roles/networksecurity.interceptEndpointAdmin`) [Intercept Endpoint Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.interceptEndpointViewer) (`roles/networksecurity.interceptEndpointViewer`) [Mirroring Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringDeploymentAdmin) (`roles/networksecurity.mirroringDeploymentAdmin`) [Mirroring Deployment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringDeploymentViewer) (`roles/networksecurity.mirroringDeploymentViewer`) [Mirroring Endpoint Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringEndpointAdmin) (`roles/networksecurity.mirroringEndpointAdmin`) [Mirroring Endpoint Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.mirroringEndpointViewer) (`roles/networksecurity.mirroringEndpointViewer`) [Security Profile Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networksecurity.md.txt#networksecurity.securityProfileAdmin) (`roles/networksecurity.securityProfileAdmin`) [Google Tag Gateway Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkservices.md.txt#networkservices.GoogleTagGatewayPolicyAdmin) (`roles/networkservices.GoogleTagGatewayPolicyAdmin`) [Service Extensions Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/networkservices.md.txt#networkservices.serviceExtensionsAdmin) (`roles/networkservices.serviceExtensionsAdmin`) [Service Extensions Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/networkservices.md.txt#networkservices.serviceExtensionsViewer) (`roles/networkservices.serviceExtensionsViewer`) [Notebooks Legacy Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/notebooks.md.txt#notebooks.legacyAdmin) (`roles/notebooks.legacyAdmin`) [Notebooks Legacy Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/notebooks.md.txt#notebooks.legacyViewer) (`roles/notebooks.legacyViewer`) [Notebooks Runner](https://docs.cloud.google.com/iam/docs/roles-permissions/notebooks.md.txt#notebooks.runner) (`roles/notebooks.runner`) [Oracle Database@Google Cloud Autonomous Database Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.autonomousDatabaseAdmin) (`roles/oracledatabase.autonomousDatabaseAdmin`) [Oracle Database@Google Cloud Autonomous Database Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.autonomousDatabaseViewer) (`roles/oracledatabase.autonomousDatabaseViewer`) [Oracle Database@Google Cloud Exadata Infrastructure Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.cloudExadataInfrastructureAdmin) (`roles/oracledatabase.cloudExadataInfrastructureAdmin`) [Oracle Database@Google Cloud Exadata Infrastructure User](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.cloudExadataInfrastructureUser) (`roles/oracledatabase.cloudExadataInfrastructureUser`) [Oracle Database@Google Cloud Exadata Infrastructure Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.cloudExadataInfrastructureViewer) (`roles/oracledatabase.cloudExadataInfrastructureViewer`) [Oracle Database@Google Cloud VM Cluster Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.cloudVmClusterAdmin) (`roles/oracledatabase.cloudVmClusterAdmin`) [Oracle Database@Google Cloud VM Cluster Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.cloudVmClusterViewer) (`roles/oracledatabase.cloudVmClusterViewer`) [Oracle Database@Google Cloud Container Database Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.databaseViewer) (`roles/oracledatabase.databaseViewer`) [Oracle Database@Google Cloud DB System Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.dbSystemAdmin) (`roles/oracledatabase.dbSystemAdmin`) [Oracle Database@Google Cloud DB System Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.dbSystemViewer) (`roles/oracledatabase.dbSystemViewer`) [Oracle Database@Google Cloud Exadata Database Service on Exascale Infrastructure VM Cluster Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.exadbVmClusterAdmin) (`roles/oracledatabase.exadbVmClusterAdmin`) [Oracle Database@Google Cloud Exadata Database Service on Exascale Infrastructure VM Cluster Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.exadbVmClusterViewer) (`roles/oracledatabase.exadbVmClusterViewer`) [Oracle Database@Google Cloud Exadata Database Service on Exascale Infrastructure Storage Vault Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.exascaleDbStorageVaultAdmin) (`roles/oracledatabase.exascaleDbStorageVaultAdmin`) [Oracle Database@Google Cloud Exadata Database Service on Exascale Infrastructure Storage Vault User](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.exascaleDbStorageVaultUser) (`roles/oracledatabase.exascaleDbStorageVaultUser`) [Oracle Database@Google Cloud Exadata Database Service on Exascale Infrastructure Storage Vault Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.exascaleDbStorageVaultViewer) (`roles/oracledatabase.exascaleDbStorageVaultViewer`) [Oracle Database@Google Cloud GoldenGate Connection Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.goldenGateConnectionAdmin) (`roles/oracledatabase.goldenGateConnectionAdmin`) [Oracle Database@Google Cloud GoldenGate Connection Assignment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.goldenGateConnectionAssignmentAdmin) (`roles/oracledatabase.goldenGateConnectionAssignmentAdmin`) [Oracle Database@Google Cloud GoldenGate Connection Assignment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.goldenGateConnectionAssignmentViewer) (`roles/oracledatabase.goldenGateConnectionAssignmentViewer`) [Oracle Database@Google Cloud GoldenGate Connection Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.goldenGateConnectionViewer) (`roles/oracledatabase.goldenGateConnectionViewer`) [Oracle Database@Google GoldenGate Connections User](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.goldenGateConnectionsUser) (`roles/oracledatabase.goldenGateConnectionsUser`) [Oracle Database@Google Cloud GoldenGate Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.goldenGateDeploymentAdmin) (`roles/oracledatabase.goldenGateDeploymentAdmin`) [Oracle Database@Google Cloud GoldenGate Deployment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.goldenGateDeploymentViewer) (`roles/oracledatabase.goldenGateDeploymentViewer`) [Oracle Database@Google GoldenGate Deployments User](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.goldenGateDeploymentsUser) (`roles/oracledatabase.goldenGateDeploymentsUser`) [Oracle Database@Google Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.networkAdmin) (`roles/oracledatabase.networkAdmin`) [Oracle Database@Google ODB Network Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.odbNetworkAdmin) (`roles/oracledatabase.odbNetworkAdmin`) [Oracle Database@Google ODB Network Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.odbNetworkViewer) (`roles/oracledatabase.odbNetworkViewer`) [Oracle Database@Google ODB Subnet Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.odbSubnetAdmin) (`roles/oracledatabase.odbSubnetAdmin`) [Oracle Database@Google ODB Subnet User](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.odbSubnetUser) (`roles/oracledatabase.odbSubnetUser`) [Oracle Database@Google ODB Subnet Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.odbSubnetViewer) (`roles/oracledatabase.odbSubnetViewer`) [Oracle Database@Google Cloud Pluggable Database Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/oracledatabase.md.txt#oracledatabase.pluggableDatabaseViewer) (`roles/oracledatabase.pluggableDatabaseViewer`) [GuestPolicy Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.guestPolicyAdmin) (`roles/osconfig.guestPolicyAdmin`) [GuestPolicy Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.guestPolicyEditor) (`roles/osconfig.guestPolicyEditor`) [GuestPolicy Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.guestPolicyViewer) (`roles/osconfig.guestPolicyViewer`) [InstanceOSPoliciesCompliance Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.instanceOSPoliciesComplianceViewer) (`roles/osconfig.instanceOSPoliciesComplianceViewer`) [OS Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.inventoryViewer) (`roles/osconfig.inventoryViewer`) [OSPolicyAssignment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.osPolicyAssignmentAdmin) (`roles/osconfig.osPolicyAssignmentAdmin`) [OSPolicyAssignment Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.osPolicyAssignmentEditor) (`roles/osconfig.osPolicyAssignmentEditor`) [OSPolicyAssignmentReport Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.osPolicyAssignmentReportViewer) (`roles/osconfig.osPolicyAssignmentReportViewer`) [OSPolicyAssignment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.osPolicyAssignmentViewer) (`roles/osconfig.osPolicyAssignmentViewer`) [PatchDeployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.patchDeploymentAdmin) (`roles/osconfig.patchDeploymentAdmin`) [PatchDeployment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.patchDeploymentViewer) (`roles/osconfig.patchDeploymentViewer`) [Patch Job Executor](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.patchJobExecutor) (`roles/osconfig.patchJobExecutor`) [Patch Job Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.patchJobViewer) (`roles/osconfig.patchJobViewer`) [Project Feature Settings Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.projectFeatureSettingsEditor) (`roles/osconfig.projectFeatureSettingsEditor`) [Project Feature Settings Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.projectFeatureSettingsViewer) (`roles/osconfig.projectFeatureSettingsViewer`) [Upgrade Report Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.upgradeReportViewer) (`roles/osconfig.upgradeReportViewer`) [OS VulnerabilityReport Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.vulnerabilityReportViewer) (`roles/osconfig.vulnerabilityReportViewer`) [Parameter Manager Parameter Accessor](https://docs.cloud.google.com/iam/docs/roles-permissions/parametermanager.md.txt#parametermanager.parameterAccessor) (`roles/parametermanager.parameterAccessor`) [Parameter Manager Parameter Version Adder](https://docs.cloud.google.com/iam/docs/roles-permissions/parametermanager.md.txt#parametermanager.parameterVersionAdder) (`roles/parametermanager.parameterVersionAdder`) [Parameter Manager Parameter Version Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/parametermanager.md.txt#parametermanager.parameterVersionManager) (`roles/parametermanager.parameterVersionManager`) [Parameter Manager Parameter Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/parametermanager.md.txt#parametermanager.parameterViewer) (`roles/parametermanager.parameterViewer`) [Parameter Manager Template Version Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/parametermanager.md.txt#parametermanager.templateVersionManager) (`roles/parametermanager.templateVersionManager`) [Parameter Manager Template Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/parametermanager.md.txt#parametermanager.templateViewer) (`roles/parametermanager.templateViewer`) [Payments Reseller Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/paymentsresellersubscription.md.txt#paymentsresellersubscription.partnerAdmin) (`roles/paymentsresellersubscription.partnerAdmin`) [Payments Reseller Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/paymentsresellersubscription.md.txt#paymentsresellersubscription.partnerViewer) (`roles/paymentsresellersubscription.partnerViewer`) [Payments Reseller Products Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/paymentsresellersubscription.md.txt#paymentsresellersubscription.productViewer) (`roles/paymentsresellersubscription.productViewer`) [Payments Reseller Promotions Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/paymentsresellersubscription.md.txt#paymentsresellersubscription.promotionViewer) (`roles/paymentsresellersubscription.promotionViewer`) [Payments Reseller Subscriptions Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/paymentsresellersubscription.md.txt#paymentsresellersubscription.subscriptionEditor) (`roles/paymentsresellersubscription.subscriptionEditor`) [Payments Reseller Subscriptions Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/paymentsresellersubscription.md.txt#paymentsresellersubscription.subscriptionViewer) (`roles/paymentsresellersubscription.subscriptionViewer`) [CA Service Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/privateca.md.txt#privateca.auditor) (`roles/privateca.auditor`) [CA Service Operation Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/privateca.md.txt#privateca.caManager) (`roles/privateca.caManager`) [CA Service Certificate Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/privateca.md.txt#privateca.certificateManager) (`roles/privateca.certificateManager`) [Beacon Attachment Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/proximitybeacon.md.txt#proximitybeacon.attachmentEditor) (`roles/proximitybeacon.attachmentEditor`) [Beacon Attachment Publisher](https://docs.cloud.google.com/iam/docs/roles-permissions/proximitybeacon.md.txt#proximitybeacon.attachmentPublisher) (`roles/proximitybeacon.attachmentPublisher`) [Beacon Attachment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/proximitybeacon.md.txt#proximitybeacon.attachmentViewer) (`roles/proximitybeacon.attachmentViewer`) [Beacon Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/proximitybeacon.md.txt#proximitybeacon.beaconEditor) (`roles/proximitybeacon.beaconEditor`) [External Account Key Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/publicca.md.txt#publicca.externalAccountKeyCreator) (`roles/publicca.externalAccountKeyCreator`) [reCAPTCHA Enterprise Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/recaptchaenterprise.md.txt#recaptchaenterprise.agent) (`roles/recaptchaenterprise.agent`) [AlloyDB Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.alloydbAdmin) (`roles/recommender.alloydbAdmin`) [AlloyDB Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.alloydbViewer) (`roles/recommender.alloydbViewer`) [App Engine Version Cost Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.appengineversioncostAdmin) (`roles/recommender.appengineversioncostAdmin`) [App Engine Version Cost Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.appengineversioncostViewer) (`roles/recommender.appengineversioncostViewer`) [BigQuery Slot Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.bigQueryCapacityCommitmentsAdmin) (`roles/recommender.bigQueryCapacityCommitmentsAdmin`) [BigQuery Recommender Project Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.bigQueryCapacityCommitmentsProjectAdmin) (`roles/recommender.bigQueryCapacityCommitmentsProjectAdmin`) [BigQuery Recommender Project Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.bigQueryCapacityCommitmentsProjectViewer) (`roles/recommender.bigQueryCapacityCommitmentsProjectViewer`) [BigQuery Slot Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.bigQueryCapacityCommitmentsViewer) (`roles/recommender.bigQueryCapacityCommitmentsViewer`) [BigQuery Materialized View Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.bigqueryMaterializedViewAdmin) (`roles/recommender.bigqueryMaterializedViewAdmin`) [BigQuery Materialized View Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.bigqueryMaterializedViewViewer) (`roles/recommender.bigqueryMaterializedViewViewer`) [BigQuery Partitioning Clustering Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.bigqueryPartitionClusterAdmin) (`roles/recommender.bigqueryPartitionClusterAdmin`) [BigQuery Partitioning Clustering Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.bigqueryPartitionClusterViewer) (`roles/recommender.bigqueryPartitionClusterViewer`) [Bigtable Cluster Performance Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.bigtableClusterPerformanceAdmin) (`roles/recommender.bigtableClusterPerformanceAdmin`) [Bigtable Cluster Performance Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.bigtableClusterPerformanceViewer) (`roles/recommender.bigtableClusterPerformanceViewer`) [Cloud Asset Insights Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudAssetInsightsAdmin) (`roles/recommender.cloudAssetInsightsAdmin`) [Cloud Asset Insights Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudAssetInsightsViewer) (`roles/recommender.cloudAssetInsightsViewer`) [Cloud Cost General Recommendations Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudCostRecommendationAdmin) (`roles/recommender.cloudCostRecommendationAdmin`) [Cloud Cost General Recommendations Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudCostRecommendationViewer) (`roles/recommender.cloudCostRecommendationViewer`) [Cloud Deprecation General Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudDeprecationRecommendationAdmin) (`roles/recommender.cloudDeprecationRecommendationAdmin`) [Cloud Deprecation General Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudDeprecationRecommendationViewer) (`roles/recommender.cloudDeprecationRecommendationViewer`) [Cloud Manageability General Recommendations Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudManageabilityRecommendationAdmin) (`roles/recommender.cloudManageabilityRecommendationAdmin`) [Cloud Manageability General Recommendations Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudManageabilityRecommendationViewer) (`roles/recommender.cloudManageabilityRecommendationViewer`) [Cloud Performance General Recommendations Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudPerformanceRecommendationAdmin) (`roles/recommender.cloudPerformanceRecommendationAdmin`) [Cloud Performance General Recommendations Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudPerformanceRecommendationViewer) (`roles/recommender.cloudPerformanceRecommendationViewer`) [Cloud Reliability General Recommendations Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudReliabilityRecommendationAdmin) (`roles/recommender.cloudReliabilityRecommendationAdmin`) [Cloud Reliability General Recommendations Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudReliabilityRecommendationViewer) (`roles/recommender.cloudReliabilityRecommendationViewer`) [Cloud Security General Recommendations Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudSecurityRecommendationAdmin) (`roles/recommender.cloudSecurityRecommendationAdmin`) [Cloud Security General Recommendations Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudSecurityRecommendationViewer) (`roles/recommender.cloudSecurityRecommendationViewer`) [Cloud SQL Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudsqlAdmin) (`roles/recommender.cloudsqlAdmin`) [Cloud SQL Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.cloudsqlViewer) (`roles/recommender.cloudsqlViewer`) [Compute Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.computeAdmin) (`roles/recommender.computeAdmin`) [Compute Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.computeViewer) (`roles/recommender.computeViewer`) [GKE Diagnosis Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.containerDiagnosisAdmin) (`roles/recommender.containerDiagnosisAdmin`) [GKE Diagnosis Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.containerDiagnosisViewer) (`roles/recommender.containerDiagnosisViewer`) [Dataflow Diagnostics Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.dataflowDiagnosticsAdmin) (`roles/recommender.dataflowDiagnosticsAdmin`) [Dataflow Diagnostics Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.dataflowDiagnosticsViewer) (`roles/recommender.dataflowDiagnosticsViewer`) [Error Reporting Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.errorReportingAdmin) (`roles/recommender.errorReportingAdmin`) [Error Reporting Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.errorReportingViewer) (`roles/recommender.errorReportingViewer`) [Firestore Database Firebase rules Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.firestoredatabasefirebaserulesAdmin) (`roles/recommender.firestoredatabasefirebaserulesAdmin`) [Firestore Database Firebase rules Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.firestoredatabasefirebaserulesViewer) (`roles/recommender.firestoredatabasefirebaserulesViewer`) [Firestore Database Reliability Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.firestoredatabasereliabilityAdmin) (`roles/recommender.firestoredatabasereliabilityAdmin`) [Firestore Database Reliability Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.firestoredatabasereliabilityViewer) (`roles/recommender.firestoredatabasereliabilityViewer`) [Firewall Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.firewallAdmin) (`roles/recommender.firewallAdmin`) [Firewall Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.firewallViewer) (`roles/recommender.firewallViewer`) [Google Maps Platform Insights/Recommendations Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.gmpAdmin) (`roles/recommender.gmpAdmin`) [Google Maps Platform Insights/Recommendations Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.gmpViewer) (`roles/recommender.gmpViewer`) [IAM Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.iamAdmin) (`roles/recommender.iamAdmin`) [IAM Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.iamViewer) (`roles/recommender.iamViewer`) [IAM Policy Change Risk Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.iampolicychangeriskAdmin) (`roles/recommender.iampolicychangeriskAdmin`) [IAM Policy Change Risk Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.iampolicychangeriskViewer) (`roles/recommender.iampolicychangeriskViewer`) [Memorystore Manageability Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.memorystoremanageabilityAdmin) (`roles/recommender.memorystoremanageabilityAdmin`) [Memorystore Manageability Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.memorystoremanageabilityViewer) (`roles/recommender.memorystoremanageabilityViewer`) [Memorystore Performance Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.memorystoreperformanceAdmin) (`roles/recommender.memorystoreperformanceAdmin`) [Memorystore Performance Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.memorystoreperformanceViewer) (`roles/recommender.memorystoreperformanceViewer`) [Memorystore Reliability Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.memorystorereliabilityAdmin) (`roles/recommender.memorystorereliabilityAdmin`) [Memorystore Reliability Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.memorystorereliabilityViewer) (`roles/recommender.memorystorereliabilityViewer`) [Network Analyzer Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerAdmin) (`roles/recommender.networkAnalyzerAdmin`) [Network Analyzer Cloud SQL Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerCloudSqlAdmin) (`roles/recommender.networkAnalyzerCloudSqlAdmin`) [Network Analyzer Cloud SQL Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerCloudSqlViewer) (`roles/recommender.networkAnalyzerCloudSqlViewer`) [Network Analyzer Dynamic Route Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerDynamicRouteAdmin) (`roles/recommender.networkAnalyzerDynamicRouteAdmin`) [Network Analyzer Dynamic Route Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerDynamicRouteViewer) (`roles/recommender.networkAnalyzerDynamicRouteViewer`) [Network Analyzer GKE Connectivity Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerGkeConnectivityAdmin) (`roles/recommender.networkAnalyzerGkeConnectivityAdmin`) [Network Analyzer GKE Connectivity Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerGkeConnectivityViewer) (`roles/recommender.networkAnalyzerGkeConnectivityViewer`) [Network Analyzer GKE IP Address Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerGkeIpAddressAdmin) (`roles/recommender.networkAnalyzerGkeIpAddressAdmin`) [Network Analyzer GKE IP Address Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerGkeIpAddressViewer) (`roles/recommender.networkAnalyzerGkeIpAddressViewer`) [Network Analyzer GKE Service Account Insights Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerGkeServiceAccountAdmin) (`roles/recommender.networkAnalyzerGkeServiceAccountAdmin`) [Network Analyzer GKE Service Account Insights Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerGkeServiceAccountViewer) (`roles/recommender.networkAnalyzerGkeServiceAccountViewer`) [Network Analyzer IP Address Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerIpAddressAdmin) (`roles/recommender.networkAnalyzerIpAddressAdmin`) [Network Analyzer IP Address Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerIpAddressViewer) (`roles/recommender.networkAnalyzerIpAddressViewer`) [Network Analyzer Load Balancer Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerLoadBalancerAdmin) (`roles/recommender.networkAnalyzerLoadBalancerAdmin`) [Network Analyzer Load Balancer Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerLoadBalancerViewer) (`roles/recommender.networkAnalyzerLoadBalancerViewer`) [Network Analyzer Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerViewer) (`roles/recommender.networkAnalyzerViewer`) [Network Analyzer VPC Connectivity Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerVpcConnectivityAdmin) (`roles/recommender.networkAnalyzerVpcConnectivityAdmin`) [Network Analyzer VPC Connectivity Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.networkAnalyzerVpcConnectivityViewer) (`roles/recommender.networkAnalyzerVpcConnectivityViewer`) [Org Policy Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.orgPolicyAdmin) (`roles/recommender.orgPolicyAdmin`) [Org Policy Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.orgPolicyViewer) (`roles/recommender.orgPolicyViewer`) [Product Suggestion Recommenders Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.productSuggestionAdmin) (`roles/recommender.productSuggestionAdmin`) [Product Suggestion Recommenders Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.productSuggestionViewer) (`roles/recommender.productSuggestionViewer`) [Project Usage Commitment Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.projectCudAdmin) (`roles/recommender.projectCudAdmin`) [Project Usage Commitment Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.projectCudViewer) (`roles/recommender.projectCudViewer`) [Project Utilization Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.projectUtilAdmin) (`roles/recommender.projectUtilAdmin`) [Project Utilization Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.projectUtilViewer) (`roles/recommender.projectUtilViewer`) [RecentChange RecommenderConfig Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.recentChangeConfigAdmin) (`roles/recommender.recentChangeConfigAdmin`) [Recent Change Risk Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.recentchangeriskAdmin) (`roles/recommender.recentchangeriskAdmin`) [Recent Change Risk Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.recentchangeriskViewer) (`roles/recommender.recentchangeriskViewer`) [Service Limit Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.serviceLimitAdmin) (`roles/recommender.serviceLimitAdmin`) [Service Limit Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.serviceLimitViewer) (`roles/recommender.serviceLimitViewer`) [Service Account Change Risk Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.serviceaccntchangeriskAdmin) (`roles/recommender.serviceaccntchangeriskAdmin`) [Service Account Change Risk Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.serviceaccntchangeriskViewer) (`roles/recommender.serviceaccntchangeriskViewer`) [Spanner Project Reliability Recommender Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.spannerAdmin) (`roles/recommender.spannerAdmin`) [Spanner Project Reliability Recommender Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/recommender.md.txt#recommender.spannerViewer) (`roles/recommender.spannerViewer`) [Folder Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderCreator) (`roles/resourcemanager.folderCreator`) [Folder Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderEditor) (`roles/resourcemanager.folderEditor`) [Folder Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderViewer) (`roles/resourcemanager.folderViewer`) [Retail Merchant Approver](https://docs.cloud.google.com/iam/docs/roles-permissions/retail.md.txt#retail.merchantApprover) (`roles/retail.merchantApprover`) [Retail Merchant Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/retail.md.txt#retail.merchantCreator) (`roles/retail.merchantCreator`) [Risk Manager Report Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/riskmanager.md.txt#riskmanager.reviewer) (`roles/riskmanager.reviewer`) [Rapid Migration Assessment Runner](https://docs.cloud.google.com/iam/docs/roles-permissions/rapidmigrationassessment.md.txt#rma.runner) (`roles/rma.runner`) [Roads Selection Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/roads.md.txt#roads.roadsSelectionAdmin) (`roles/roads.roadsSelectionAdmin`) [Roads Selection Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/roads.md.txt#roads.roadsSelectionViewer) (`roles/roads.roadsSelectionViewer`) [Cloud Run Source Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/run.md.txt#run.sourceDeveloper) (`roles/run.sourceDeveloper`) [Cloud Run Source Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/run.md.txt#run.sourceViewer) (`roles/run.sourceViewer`) [Serverless Integrations Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/runapps.md.txt#runapps.developer) (`roles/runapps.developer`) [Serverless Integrations Operator](https://docs.cloud.google.com/iam/docs/roles-permissions/runapps.md.txt#runapps.operator) (`roles/runapps.operator`) [Secret Manager Secret Version Adder](https://docs.cloud.google.com/iam/docs/roles-permissions/secretmanager.md.txt#secretmanager.secretVersionAdder) (`roles/secretmanager.secretVersionAdder`) [Secret Manager Secret Version Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/secretmanager.md.txt#secretmanager.secretVersionManager) (`roles/secretmanager.secretVersionManager`) [Overwatch Activator](https://docs.cloud.google.com/iam/docs/roles-permissions/securedlandingzone.md.txt#securedlandingzone.overwatchActivator) (`roles/securedlandingzone.overwatchActivator`) [Overwatch Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securedlandingzone.md.txt#securedlandingzone.overwatchAdmin) (`roles/securedlandingzone.overwatchAdmin`) [Overwatch Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securedlandingzone.md.txt#securedlandingzone.overwatchViewer) (`roles/securedlandingzone.overwatchViewer`) [Secure Source Manager Developer Connect Linker](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.developerConnectLinker) (`roles/securesourcemanager.developerConnectLinker`) [Secure Source Manager Instance Accessor](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.instanceAccessor) (`roles/securesourcemanager.instanceAccessor`) [Secure Source Manager Instance Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.instanceManager) (`roles/securesourcemanager.instanceManager`) [Secure Source Manager Instance Owner](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.instanceOwner) (`roles/securesourcemanager.instanceOwner`) [Secure Source Manager Instance Repository Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.instanceRepositoryCreator) (`roles/securesourcemanager.instanceRepositoryCreator`) [Secure Source Manager Repository Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.repoAdmin) (`roles/securesourcemanager.repoAdmin`) [Secure Source Manager Repository Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.repoCreator) (`roles/securesourcemanager.repoCreator`) [Secure Source Manager Repository Pull Request Approver](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.repoPullRequestApprover) (`roles/securesourcemanager.repoPullRequestApprover`) [Secure Source Manager Repository Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.repoReader) (`roles/securesourcemanager.repoReader`) [Secure Source Manager Repository Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.repoWriter) (`roles/securesourcemanager.repoWriter`) [Secure Source Manager SSH Key User](https://docs.cloud.google.com/iam/docs/roles-permissions/securesourcemanager.md.txt#securesourcemanager.sshKeyUser) (`roles/securesourcemanager.sshKeyUser`) [Security Center Admin Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminEditor) (`roles/securitycenter.adminEditor`) [Security Center Admin Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminViewer) (`roles/securitycenter.adminViewer`) [Security Center BigQuery Exports Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.bigQueryExportsEditor) (`roles/securitycenter.bigQueryExportsEditor`) [Security Center BigQuery Exports Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.bigQueryExportsViewer) (`roles/securitycenter.bigQueryExportsViewer`) [Security Center Settings Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.settingsAdmin) (`roles/securitycenter.settingsAdmin`) [Security Center Settings Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.settingsEditor) (`roles/securitycenter.settingsEditor`) [Security Center Settings Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.settingsViewer) (`roles/securitycenter.settingsViewer`) [Security Center Management Custom Modules Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.customModulesEditor) (`roles/securitycentermanagement.customModulesEditor`) [Security Center Management Custom Modules Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.customModulesViewer) (`roles/securitycentermanagement.customModulesViewer`) [Security Center Management Custom ETD Modules Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.etdCustomModulesEditor) (`roles/securitycentermanagement.etdCustomModulesEditor`) [Security Center Management ETD Custom Modules Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.etdCustomModulesViewer) (`roles/securitycentermanagement.etdCustomModulesViewer`) [Security Center Management Settings Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.settingsEditor) (`roles/securitycentermanagement.settingsEditor`) [Security Center Management Settings Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.settingsViewer) (`roles/securitycentermanagement.settingsViewer`) [Security Center Management SHA Custom Modules Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.shaCustomModulesEditor) (`roles/securitycentermanagement.shaCustomModulesEditor`) [Security Center Management SHA Custom Modules Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycentermanagement.md.txt#securitycentermanagement.shaCustomModulesViewer) (`roles/securitycentermanagement.shaCustomModulesViewer`) [Service Directory Network Attacher](https://docs.cloud.google.com/iam/docs/roles-permissions/servicedirectory.md.txt#servicedirectory.networkAttacher) (`roles/servicedirectory.networkAttacher`) [Private Service Connect Authorized Service](https://docs.cloud.google.com/iam/docs/roles-permissions/servicedirectory.md.txt#servicedirectory.pscAuthorizedService) (`roles/servicedirectory.pscAuthorizedService`) [Quota Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/servicemanagement.md.txt#servicemanagement.quotaAdmin) (`roles/servicemanagement.quotaAdmin`) [Cloud Spanner Backup Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/spanner.md.txt#spanner.backupAdmin) (`roles/spanner.backupAdmin`) [Cloud Spanner Database Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/spanner.md.txt#spanner.databaseAdmin) (`roles/spanner.databaseAdmin`) [Cloud Spanner Restore Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/spanner.md.txt#spanner.restoreAdmin) (`roles/spanner.restoreAdmin`) [Stackdriver Accounts Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/monitoring.md.txt#stackdriver.accounts.editor) (`roles/stackdriver.accounts.editor`) [Stackdriver Accounts Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/monitoring.md.txt#stackdriver.accounts.viewer) (`roles/stackdriver.accounts.viewer`) [Storage HMAC Key Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/storage.md.txt#storage.hmacKeyAdmin) (`roles/storage.hmacKeyAdmin`) [Storage Insights Collector Service](https://docs.cloud.google.com/iam/docs/roles-permissions/storage.md.txt#storage.insightsCollectorService) (`roles/storage.insightsCollectorService`) [Storage Insights Analyst](https://docs.cloud.google.com/iam/docs/roles-permissions/storageinsights.md.txt#storageinsights.analyst) (`roles/storageinsights.analyst`) [Storage Transfer User](https://docs.cloud.google.com/iam/docs/roles-permissions/storagetransfer.md.txt#storagetransfer.user) (`roles/storagetransfer.user`) [Stream Content Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/stream.md.txt#stream.contentAdmin) (`roles/stream.contentAdmin`) [Stream Content Builder](https://docs.cloud.google.com/iam/docs/roles-permissions/stream.md.txt#stream.contentBuilder) (`roles/stream.contentBuilder`) [Stream Instance Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/stream.md.txt#stream.instanceAdmin) (`roles/stream.instanceAdmin`) [Subscribe with Google Developer](https://docs.cloud.google.com/iam/docs/roles-permissions/subscribewithgoogledeveloper.md.txt#subscribewithgoogledeveloper.developer) (`roles/subscribewithgoogledeveloper.developer`) [GTI Alert Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/threatintelligence.md.txt#threatintelligence.alertAdmin) (`roles/threatintelligence.alertAdmin`) [GTI Alert User](https://docs.cloud.google.com/iam/docs/roles-permissions/threatintelligence.md.txt#threatintelligence.alertUser) (`roles/threatintelligence.alertUser`) [CTEM Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/threatintelligence.md.txt#threatintelligence.ctemAdmin) (`roles/threatintelligence.ctemAdmin`) [CTEM Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/threatintelligence.md.txt#threatintelligence.ctemEditor) (`roles/threatintelligence.ctemEditor`) [CTEM Project Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/threatintelligence.md.txt#threatintelligence.ctemProjectAdmin) (`roles/threatintelligence.ctemProjectAdmin`) [CTEM Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/threatintelligence.md.txt#threatintelligence.ctemViewer) (`roles/threatintelligence.ctemViewer`) [Translation Hub Portal User](https://docs.cloud.google.com/iam/docs/roles-permissions/translationhub.md.txt#translationhub.portalUser) (`roles/translationhub.portalUser`) [Vector Search Collection Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/vectorsearch.md.txt#vectorsearch.collectionWriter) (`roles/vectorsearch.collectionWriter`) [Vector Search DataObject Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/vectorsearch.md.txt#vectorsearch.dataObjectWriter) (`roles/vectorsearch.dataObjectWriter`) [Vector Search Index Writer](https://docs.cloud.google.com/iam/docs/roles-permissions/vectorsearch.md.txt#vectorsearch.indexWriter) (`roles/vectorsearch.indexWriter`) [Video Stitcher User](https://docs.cloud.google.com/iam/docs/roles-permissions/videostitcher.md.txt#videostitcher.user) (`roles/videostitcher.user`) [VMware Engine Service Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/vmwareengine.md.txt#vmwareengine.vmwareengineAdmin) (`roles/vmwareengine.vmwareengineAdmin`) [VMware Engine Service Privileged User](https://docs.cloud.google.com/iam/docs/roles-permissions/vmwareengine.md.txt#vmwareengine.vmwareenginePrivilegedUser) (`roles/vmwareengine.vmwareenginePrivilegedUser`) [VMware Engine Service Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/vmwareengine.md.txt#vmwareengine.vmwareengineViewer) (`roles/vmwareengine.vmwareengineViewer`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) [Workflows Invoker](https://docs.cloud.google.com/iam/docs/roles-permissions/workflows.md.txt#workflows.invoker) (`roles/workflows.invoker`) [Workload Certificate Registration Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadcertificate.md.txt#workloadcertificate.registrationAdmin) (`roles/workloadcertificate.registrationAdmin`) [Workload Certificate Registration Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadcertificate.md.txt#workloadcertificate.registrationViewer) (`roles/workloadcertificate.registrationViewer`) [Workload Manager Deployment Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadmanager.md.txt#workloadmanager.deploymentAdmin) (`roles/workloadmanager.deploymentAdmin`) [Workload Manager Deployment Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadmanager.md.txt#workloadmanager.deploymentViewer) (`roles/workloadmanager.deploymentViewer`) [Workload Manager Evaluation Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadmanager.md.txt#workloadmanager.evaluationAdmin) (`roles/workloadmanager.evaluationAdmin`) [Workload Manager Evaluation Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadmanager.md.txt#workloadmanager.evaluationViewer) (`roles/workloadmanager.evaluationViewer`) [Workload Manager Worker](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadmanager.md.txt#workloadmanager.worker) (`roles/workloadmanager.worker`) [Workload Manager Workload Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/workloadmanager.md.txt#workloadmanager.workloadViewer) (`roles/workloadmanager.workloadViewer`) [Cloud Workstations Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/workstations.md.txt#workstations.workstationCreator) (`roles/workstations.workstationCreator`) [Cloud Workstations Limit Exempted Creator](https://docs.cloud.google.com/iam/docs/roles-permissions/workstations.md.txt#workstations.workstationLimitExemptedCreator) (`roles/workstations.workstationLimitExemptedCreator`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Vertex AI Custom Code Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.customCodeServiceAgent) (`roles/aiplatform.customCodeServiceAgent`) - [Vertex AI Extension Custom Code Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.extensionCustomCodeServiceAgent) (`roles/aiplatform.extensionCustomCodeServiceAgent`) - [Vertex AI Reasoning Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.reasoningEngineServiceAgent) (`roles/aiplatform.reasoningEngineServiceAgent`) - [Vertex AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.serviceAgent) (`roles/aiplatform.serviceAgent`) - [Analytics Hub Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/analyticshub.md.txt#analyticshub.serviceAgent) (`roles/analyticshub.serviceAgent`) - [Anthos Support Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/anthossupport.md.txt#anthossupport.serviceAgent) (`roles/anthossupport.serviceAgent`) - [Audit Manager Auditing Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.serviceAgent) (`roles/auditmanager.serviceAgent`) - [Recommendations AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/automlrecommendations.md.txt#automlrecommendations.serviceAgent) (`roles/automlrecommendations.serviceAgent`) - [Backup and DR Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/backupdr.md.txt#backupdr.serviceAgent) (`roles/backupdr.serviceAgent`) - [Google Batch Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/batch.md.txt#batch.serviceAgent) (`roles/batch.serviceAgent`) - [BigQuery Data Transfer Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/bigquerydatatransfer.md.txt#bigquerydatatransfer.serviceAgent) (`roles/bigquerydatatransfer.serviceAgent`) - [Binary Authorization Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/binaryauthorization.md.txt#binaryauthorization.serviceAgent) (`roles/binaryauthorization.serviceAgent`) - [Cloud Build Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudbuild.md.txt#cloudbuild.serviceAgent) (`roles/cloudbuild.serviceAgent`) - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [(Deprecated) Cloud Functions Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudfunctions.md.txt#cloudfunctions.serviceAgent) (`roles/cloudfunctions.serviceAgent`) - [Cloud Functions Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudfunctions.md.txt#cloudfunctions.standardServiceAgent) (`roles/cloudfunctions.standardServiceAgent`) - [Cloud Security Compliance Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.serviceAgent) (`roles/cloudsecuritycompliance.serviceAgent`) - [Cloud TPU V2 API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#cloudtpu.serviceAgent) (`roles/cloudtpu.serviceAgent`) - [Compliance Scanning Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/compliancescanning.md.txt#compliancescanning.serviceAgent) (`roles/compliancescanning.serviceAgent`) - [Cloud Composer API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/composer.md.txt#composer.serviceAgent) (`roles/composer.serviceAgent`) - [Compute Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.serviceAgent) (`roles/compute.serviceAgent`) - [\[Deprecated\] Kubernetes Engine Node Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.nodeServiceAgent) (`roles/container.nodeServiceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Container Analysis Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/containeranalysis.md.txt#containeranalysis.ServiceAgent) (`roles/containeranalysis.ServiceAgent`) - [Container Scanner Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/containerscanning.md.txt#containerscanning.ServiceAgent) (`roles/containerscanning.ServiceAgent`) - [Container Threat Detection Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/containerthreatdetection.md.txt#containerthreatdetection.serviceAgent) (`roles/containerthreatdetection.serviceAgent`) - [Cloud Dataflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataflow.md.txt#dataflow.serviceAgent) (`roles/dataflow.serviceAgent`) - [Dataform Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataform.md.txt#dataform.serviceAgent) (`roles/dataform.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [Data Labeling Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datalabeling.md.txt#datalabeling.serviceAgent) (`roles/datalabeling.serviceAgent`) - [Datapipelines Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datapipelines.md.txt#datapipelines.serviceAgent) (`roles/datapipelines.serviceAgent`) - [Cloud Dataplex Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataplex.md.txt#dataplex.serviceAgent) (`roles/dataplex.serviceAgent`) - [Dataprep Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataprep.md.txt#dataprep.serviceAgent) (`roles/dataprep.serviceAgent`) - [Dataproc Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.serviceAgent) (`roles/dataproc.serviceAgent`) - [Dialogflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.serviceAgent) (`roles/dialogflow.serviceAgent`) - [Discovery Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.serviceAgent) (`roles/discoveryengine.serviceAgent`) - [DLP API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.serviceAgent) (`roles/dlp.serviceAgent`) - [Edge Container Cluster Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/edgecontainer.md.txt#edgecontainer.clusterServiceAgent) (`roles/edgecontainer.clusterServiceAgent`) - [Enterprise Knowledge Graph Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/enterpriseknowledgegraph.md.txt#enterpriseknowledgegraph.serviceAgent) (`roles/enterpriseknowledgegraph.serviceAgent`) - [Cloud Filestore Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/file.md.txt#file.serviceAgent) (`roles/file.serviceAgent`) - [Firebase Admin SDK Administrator Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.sdkAdminServiceAgent) (`roles/firebase.sdkAdminServiceAgent`) - [Firebase Extensions API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasemods.md.txt#firebasemods.serviceAgent) (`roles/firebasemods.serviceAgent`) - [FleetEngine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/fleetengine.md.txt#fleetengine.serviceAgent) (`roles/fleetengine.serviceAgent`) - [Game Services Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gameservices.md.txt#gameservices.serviceAgent) (`roles/gameservices.serviceAgent`) - [Genomics Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/lifesciences.md.txt#genomics.serviceAgent) (`roles/genomics.serviceAgent`) - [Backup for GKE Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkebackup.md.txt#gkebackup.serviceAgent) (`roles/gkebackup.serviceAgent`) - [Warp Run Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkedataplanemanagement.md.txt#gkedataplanemanagement.warpRunServiceAgent) (`roles/gkedataplanemanagement.warpRunServiceAgent`) - [GKE Hub Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.serviceAgent) (`roles/gkehub.serviceAgent`) - [Anthos Multi-Cloud Container Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkemulticloud.md.txt#gkemulticloud.containerServiceAgent) (`roles/gkemulticloud.containerServiceAgent`) - [Anthos Multi-Cloud Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkemulticloud.md.txt#gkemulticloud.serviceAgent) (`roles/gkemulticloud.serviceAgent`) - [Healthcare Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/healthcare.md.txt#healthcare.serviceAgent) (`roles/healthcare.serviceAgent`) - [Cluster Director Shared VPC Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.sharedVpcServiceAgent) (`roles/hypercomputecluster.sharedVpcServiceAgent`) - [Application Integration Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/integrations.md.txt#integrations.serviceAgent) (`roles/integrations.serviceAgent`) - [KRM API Hosting AnthosApiEndpoint Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/krmapihosting.md.txt#krmapihosting.anthosApiEndpointServiceAgent) (`roles/krmapihosting.anthosApiEndpointServiceAgent`) - [KRM API Hosting Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/krmapihosting.md.txt#krmapihosting.serviceAgent) (`roles/krmapihosting.serviceAgent`) - [Cloud Life Sciences Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/lifesciences.md.txt#lifesciences.serviceAgent) (`roles/lifesciences.serviceAgent`) - [Cloud Managed Identities Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/managedidentities.md.txt#managedidentities.serviceAgent) (`roles/managedidentities.serviceAgent`) - [Cloud Memorystore Memcached Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/memcache.md.txt#memcache.serviceAgent) (`roles/memcache.serviceAgent`) - [Cloud Memorystore Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/memorystore.md.txt#memorystore.serviceAgent) (`roles/memorystore.serviceAgent`) - [Mesh Managed Control Plane Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/meshcontrolplane.md.txt#meshcontrolplane.serviceAgent) (`roles/meshcontrolplane.serviceAgent`) - [AI Platform Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/ml.md.txt#ml.serviceAgent) (`roles/ml.serviceAgent`) - [Multi-Cluster Service Discovery Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/multiclusterservicediscovery.md.txt#multiclusterservicediscovery.serviceAgent) (`roles/multiclusterservicediscovery.serviceAgent`) - [AI Platform Notebooks Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/notebooks.md.txt#notebooks.serviceAgent) (`roles/notebooks.serviceAgent`) - [Cloud OS Config Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/osconfig.md.txt#osconfig.serviceAgent) (`roles/osconfig.serviceAgent`) - [Parallelstore Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/parallelstore.md.txt#parallelstore.serviceAgent) (`roles/parallelstore.serviceAgent`) - [Cloud Pub/Sub Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/pubsub.md.txt#pubsub.serviceAgent) (`roles/pubsub.serviceAgent`) - [Cloud Memorystore Redis Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/redis.md.txt#redis.serviceAgent) (`roles/redis.serviceAgent`) - [Retail Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/retail.md.txt#retail.serviceAgent) (`roles/retail.serviceAgent`) - [Risk Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/riskmanager.md.txt#riskmanager.serviceAgent) (`roles/riskmanager.serviceAgent`) - [Cloud Run Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/run.md.txt#run.serviceAgent) (`roles/run.serviceAgent`) - [Security Center Automation Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.automationServiceAgent) (`roles/securitycenter.automationServiceAgent`) - [Security Center Control Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.controlServiceAgent) (`roles/securitycenter.controlServiceAgent`) - [Security Health Analytics Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.securityHealthAnalyticsServiceAgent) (`roles/securitycenter.securityHealthAnalyticsServiceAgent`) - [Security Center Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.serviceAgent) (`roles/securitycenter.serviceAgent`) - [Service Directory Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/servicedirectory.md.txt#servicedirectory.serviceAgent) (`roles/servicedirectory.serviceAgent`) - [Service Networking Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/servicenetworking.md.txt#servicenetworking.serviceAgent) (`roles/servicenetworking.serviceAgent`) - [Stream Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/stream.md.txt#stream.serviceAgent) (`roles/stream.serviceAgent`) - [Cloud TPU API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/tpu.md.txt#tpu.serviceAgent) (`roles/tpu.serviceAgent`) - [Visual Inspection AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/visualinspection.md.txt#visualinspection.serviceAgent) (`roles/visualinspection.serviceAgent`) - [VMware Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/vmwareengine.md.txt#vmwareengine.serviceAgent) (`roles/vmwareengine.serviceAgent`) |
| #### `resourcemanager.projects.move` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Project Mover](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.projectMover) (`roles/resourcemanager.projectMover`) [Folder Mover](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderMover) (`roles/resourcemanager.folderMover`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) |
| #### `resourcemanager.projects.searchPolicyBindings` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Organization Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationAdmin) (`roles/resourcemanager.organizationAdmin`) [Project IAM Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.projectIamAdmin) (`roles/resourcemanager.projectIamAdmin`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) |
| #### `resourcemanager.projects.setIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Organization Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationAdmin) (`roles/resourcemanager.organizationAdmin`) [Project IAM Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.projectIamAdmin) (`roles/resourcemanager.projectIamAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [App Engine flexible environment Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/appengineflex.md.txt#appengineflex.serviceAgent) (`roles/appengineflex.serviceAgent`) - [Firebase Service Management Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.managementServiceAgent) (`roles/firebase.managementServiceAgent`) - [GKE Hub Cross Project Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkehub.md.txt#gkehub.crossProjectServiceAgent) (`roles/gkehub.crossProjectServiceAgent`) - [KRM API Hosting AnthosApiEndpoint Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/krmapihosting.md.txt#krmapihosting.anthosApiEndpointServiceAgent) (`roles/krmapihosting.anthosApiEndpointServiceAgent`) - [Privileged Access Manager Project Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/privilegedaccessmanager.md.txt#privilegedaccessmanager.projectServiceAgent) (`roles/privilegedaccessmanager.projectServiceAgent`) - [Privileged Access Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/privilegedaccessmanager.md.txt#privilegedaccessmanager.serviceAgent) (`roles/privilegedaccessmanager.serviceAgent`) |
| #### `resourcemanager.projects.undelete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) |
| #### `resourcemanager.projects.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Project Mover](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.projectMover) (`roles/resourcemanager.projectMover`) [SLZ BQDW Blueprint Project Level Remediator](https://docs.cloud.google.com/iam/docs/roles-permissions/securedlandingzone.md.txt#securedlandingzone.bqdwProjectRemediator) (`roles/securedlandingzone.bqdwProjectRemediator`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Firebase Service Management Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.managementServiceAgent) (`roles/firebase.managementServiceAgent`) - [Firebase Admin SDK Administrator Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/firebase.md.txt#firebase.sdkAdminServiceAgent) (`roles/firebase.sdkAdminServiceAgent`) |
| #### `resourcemanager.projects.updateLiens` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Looker Studio Pro Manager](https://docs.cloud.google.com/iam/docs/roles-permissions/datastudio.md.txt#lookerstudio.proManager) (`roles/lookerstudio.proManager`) [Project Lien Modifier](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.lienModifier) (`roles/resourcemanager.lienModifier`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Firebase Extensions API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/firebasemods.md.txt#firebasemods.serviceAgent) (`roles/firebasemods.serviceAgent`) - [Backup for GKE Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/gkebackup.md.txt#gkebackup.serviceAgent) (`roles/gkebackup.serviceAgent`) - [Oracle Database@Google Cloud Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/oci.md.txt#oci.serviceAgent) (`roles/oci.serviceAgent`) |
| #### `resourcemanager.projects.updatePolicyBinding` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Folder Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.folderAdmin) (`roles/resourcemanager.folderAdmin`) [Organization Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.organizationAdmin) (`roles/resourcemanager.organizationAdmin`) [Project IAM Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.projectIamAdmin) (`roles/resourcemanager.projectIamAdmin`) |
| #### `resourcemanager.tagHolds.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Tag Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagAdmin) (`roles/resourcemanager.tagAdmin`) [Tag Hold Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagHoldAdmin) (`roles/resourcemanager.tagHoldAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) |
| #### `resourcemanager.tagHolds.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Tag Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagAdmin) (`roles/resourcemanager.tagAdmin`) [Tag Hold Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagHoldAdmin) (`roles/resourcemanager.tagHoldAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) |
| #### `resourcemanager.tagHolds.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Tag Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagAdmin) (`roles/resourcemanager.tagAdmin`) [Tag Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagViewer) (`roles/resourcemanager.tagViewer`) [Resource Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.viewer) (`roles/resourcemanager.viewer`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Tag Hold Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagHoldAdmin) (`roles/resourcemanager.tagHoldAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Audit Manager Auditing Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.serviceAgent) (`roles/auditmanager.serviceAgent`) - [Cloud Security Compliance Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.serviceAgent) (`roles/cloudsecuritycompliance.serviceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) |
| #### `resourcemanager.tagKeys.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Tag Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagAdmin) (`roles/resourcemanager.tagAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Dataproc Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.serviceAgent) (`roles/dataproc.serviceAgent`) - [DSPM Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dspm.md.txt#dspm.serviceAgent) (`roles/dspm.serviceAgent`) |
| #### `resourcemanager.tagKeys.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Tag Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagAdmin) (`roles/resourcemanager.tagAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [DSPM Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dspm.md.txt#dspm.serviceAgent) (`roles/dspm.serviceAgent`) |
| #### `resourcemanager.tagKeys.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Tag Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagAdmin) (`roles/resourcemanager.tagAdmin`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [Tag Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagViewer) (`roles/resourcemanager.tagViewer`) [Resource Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.viewer) (`roles/resourcemanager.viewer`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Audit Manager Auditing Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.serviceAgent) (`roles/auditmanager.serviceAgent`) - [Cloud Security Compliance Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.serviceAgent) (`roles/cloudsecuritycompliance.serviceAgent`) - [Dataproc Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.serviceAgent) (`roles/dataproc.serviceAgent`) - [DSPM Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dspm.md.txt#dspm.serviceAgent) (`roles/dspm.serviceAgent`) |
| #### `resourcemanager.tagKeys.getIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Tag Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagAdmin) (`roles/resourcemanager.tagAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Dataproc Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.serviceAgent) (`roles/dataproc.serviceAgent`) - [DSPM Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dspm.md.txt#dspm.serviceAgent) (`roles/dspm.serviceAgent`) |
| #### `resourcemanager.tagKeys.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Tag Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagAdmin) (`roles/resourcemanager.tagAdmin`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [Tag Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagViewer) (`roles/resourcemanager.tagViewer`) [Resource Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.viewer) (`roles/resourcemanager.viewer`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Audit Manager Auditing Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.serviceAgent) (`roles/auditmanager.serviceAgent`) - [Cloud Security Compliance Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.serviceAgent) (`roles/cloudsecuritycompliance.serviceAgent`) - [DSPM Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dspm.md.txt#dspm.serviceAgent) (`roles/dspm.serviceAgent`) |
| #### `resourcemanager.tagKeys.setIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Tag Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagAdmin) (`roles/resourcemanager.tagAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Dataproc Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.serviceAgent) (`roles/dataproc.serviceAgent`) |
| #### `resourcemanager.tagKeys.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Tag Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagAdmin) (`roles/resourcemanager.tagAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [DSPM Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dspm.md.txt#dspm.serviceAgent) (`roles/dspm.serviceAgent`) |
| #### `resourcemanager.tagValueBindings.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Instance Group Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.instanceGroupManagerServiceAgent) (`roles/compute.instanceGroupManagerServiceAgent`) - [Kubernetes Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/container.md.txt#container.serviceAgent) (`roles/container.serviceAgent`) - [Dataproc Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.serviceAgent) (`roles/dataproc.serviceAgent`) - [DSPM Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dspm.md.txt#dspm.serviceAgent) (`roles/dspm.serviceAgent`) - [Cluster Director Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.serviceAgent) (`roles/hypercomputecluster.serviceAgent`) - [Workstations Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/workstations.md.txt#workstations.serviceAgent) (`roles/workstations.serviceAgent`) |
| #### `resourcemanager.tagValueBindings.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Instance Group Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.instanceGroupManagerServiceAgent) (`roles/compute.instanceGroupManagerServiceAgent`) - [Dataproc Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.serviceAgent) (`roles/dataproc.serviceAgent`) - [DSPM Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dspm.md.txt#dspm.serviceAgent) (`roles/dspm.serviceAgent`) - [Cluster Director Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/hypercomputecluster.md.txt#hypercomputecluster.serviceAgent) (`roles/hypercomputecluster.serviceAgent`) - [Workstations Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/workstations.md.txt#workstations.serviceAgent) (`roles/workstations.serviceAgent`) |
| #### `resourcemanager.tagValues.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Tag Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagAdmin) (`roles/resourcemanager.tagAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Dataproc Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.serviceAgent) (`roles/dataproc.serviceAgent`) - [DSPM Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dspm.md.txt#dspm.serviceAgent) (`roles/dspm.serviceAgent`) |
| #### `resourcemanager.tagValues.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Tag Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagAdmin) (`roles/resourcemanager.tagAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [DSPM Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dspm.md.txt#dspm.serviceAgent) (`roles/dspm.serviceAgent`) |
| #### `resourcemanager.tagValues.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Tag Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagAdmin) (`roles/resourcemanager.tagAdmin`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [Tag Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagViewer) (`roles/resourcemanager.tagViewer`) [Resource Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.viewer) (`roles/resourcemanager.viewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Security Center Admin Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminEditor) (`roles/securitycenter.adminEditor`) [Security Center Admin Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminViewer) (`roles/securitycenter.adminViewer`) [Security Center Resource Value Configurations Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.resourceValueConfigsEditor) (`roles/securitycenter.resourceValueConfigsEditor`) [Security Center Resource Value Configurations Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.resourceValueConfigsViewer) (`roles/securitycenter.resourceValueConfigsViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Audit Manager Auditing Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.serviceAgent) (`roles/auditmanager.serviceAgent`) - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud Security Compliance Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.serviceAgent) (`roles/cloudsecuritycompliance.serviceAgent`) - [Instance Group Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/compute.md.txt#compute.instanceGroupManagerServiceAgent) (`roles/compute.instanceGroupManagerServiceAgent`) - [Dataproc Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dataproc.md.txt#dataproc.serviceAgent) (`roles/dataproc.serviceAgent`) - [DSPM Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dspm.md.txt#dspm.serviceAgent) (`roles/dspm.serviceAgent`) - [Security Center Control Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.controlServiceAgent) (`roles/securitycenter.controlServiceAgent`) - [Security Center Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.serviceAgent) (`roles/securitycenter.serviceAgent`) |
| #### `resourcemanager.tagValues.getIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Tag Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagAdmin) (`roles/resourcemanager.tagAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [DSPM Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dspm.md.txt#dspm.serviceAgent) (`roles/dspm.serviceAgent`) |
| #### `resourcemanager.tagValues.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Tag Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagAdmin) (`roles/resourcemanager.tagAdmin`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [Tag Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagViewer) (`roles/resourcemanager.tagViewer`) [Resource Manager Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.viewer) (`roles/resourcemanager.viewer`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Audit Manager Auditing Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.serviceAgent) (`roles/auditmanager.serviceAgent`) - [Cloud Security Compliance Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.serviceAgent) (`roles/cloudsecuritycompliance.serviceAgent`) - [DSPM Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dspm.md.txt#dspm.serviceAgent) (`roles/dspm.serviceAgent`) |
| #### `resourcemanager.tagValues.setIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Tag Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagAdmin) (`roles/resourcemanager.tagAdmin`) |
| #### `resourcemanager.tagValues.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Resource Manager Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.editor) (`roles/resourcemanager.editor`) [Tag Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagAdmin) (`roles/resourcemanager.tagAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [DSPM Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dspm.md.txt#dspm.serviceAgent) (`roles/dspm.serviceAgent`) |