Service Extensions roles and permissions

This page lists the IAM roles and permissions for Service Extensions. To search through all roles and permissions, see the role and permission index.

Service Extensions roles

Service Extensions permissions

Permission	Included in roles
serviceextensions.callouts.invoke	Owner (roles/owner) Editor (roles/editor) Service Extensions Admin (roles/serviceextensions.admin) Service Extensions Editor (roles/serviceextensions.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
serviceextensions.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Service Extensions Admin (roles/serviceextensions.admin) Service Extensions Editor (roles/serviceextensions.editor) Service Extensions Viewer (roles/serviceextensions.viewer) Support User (roles/iam.supportUser)
serviceextensions.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Service Extensions Admin (roles/serviceextensions.admin) Service Extensions Editor (roles/serviceextensions.editor) Service Extensions Viewer (roles/serviceextensions.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)