Service Usage roles and permissions

This page lists the IAM roles and permissions for Service Usage. To search through all roles and permissions, see the role and permission index.

Service Usage roles

Role	Permissions
API Keys Admin (roles/serviceusage.apiKeysAdmin) Ability to create, delete, update, get and list API keys for a project.	apikeys.* apikeys.keys.create apikeys.keys.delete apikeys.keys.get apikeys.keys.getKeyString apikeys.keys.list apikeys.keys.lookup apikeys.keys.undelete apikeys.keys.update orgpolicy.policy.get serviceusage.apiKeys.* serviceusage.apiKeys.regenerate serviceusage.apiKeys.revert serviceusage.operations.get
Service Usage Admin (roles/serviceusage.serviceUsageAdmin) Ability to enable, disable, and inspect service states, inspect operations, and consume quota and billing for a consumer project.	cloudquotas.* cloudquotas.quotas.get cloudquotas.quotas.update monitoring.timeSeries.list serviceusage.consumerpolicy.* serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.consumerpolicy.update serviceusage.contentsecuritypolicy.* serviceusage.contentsecuritypolicy.get serviceusage.contentsecuritypolicy.update serviceusage.effectivemcppolicy.get serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.mcppolicy.* serviceusage.mcppolicy.get serviceusage.mcppolicy.update serviceusage.operations.get serviceusage.quotas.* serviceusage.quotas.get serviceusage.quotas.update serviceusage.services.* serviceusage.services.disable serviceusage.services.enable serviceusage.services.get serviceusage.services.list serviceusage.services.use serviceusage.values.test
Service Usage Consumer (roles/serviceusage.serviceUsageConsumer) Ability to inspect service states and operations, and consume quota and billing for a consumer project.	monitoring.timeSeries.list serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.contentsecuritypolicy.get serviceusage.effectivemcppolicy.get serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.mcppolicy.get serviceusage.operations.get serviceusage.quotas.get serviceusage.services.get serviceusage.services.list serviceusage.services.use serviceusage.values.test
Service Usage Viewer (roles/serviceusage.serviceUsageViewer) Ability to inspect service states and operations for a consumer project.	monitoring.timeSeries.list serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.contentsecuritypolicy.get serviceusage.effectivemcppolicy.get serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.mcppolicy.get serviceusage.operations.get serviceusage.quotas.get serviceusage.services.get serviceusage.services.list serviceusage.values.test
API Keys Viewer (roles/serviceusage.apiKeysViewer) Ability to get and list API keys for a project.	apikeys.keys.get apikeys.keys.getKeyString apikeys.keys.list apikeys.keys.lookup

Service Usage permissions

Permission	Included in roles
serviceusage.apiKeys.regenerate	Owner (roles/owner) Editor (roles/editor) API Keys Admin (roles/serviceusage.apiKeysAdmin)
serviceusage.apiKeys.revert	Owner (roles/owner) Editor (roles/editor) API Keys Admin (roles/serviceusage.apiKeysAdmin)
serviceusage.consumerpolicy.analyze	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) ApiGateway Admin (roles/apigateway.admin) Apigateway Editor (roles/apigateway.editor) ApiGateway Viewer (roles/apigateway.viewer) Assured OSS Admin (roles/assuredoss.admin) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Recommendations AI Admin (roles/automlrecommendations.admin) Recommendations AI Editor (roles/automlrecommendations.editor) Recommendations AI Viewer (roles/automlrecommendations.viewer) Cloud Functions Admin (roles/cloudfunctions.admin) Cloudfunctions Editor (roles/cloudfunctions.editor) Cloud Functions Viewer (roles/cloudfunctions.viewer) Cloud Scheduler Admin (roles/cloudscheduler.admin) Cloud Scheduler Viewer (roles/cloudscheduler.viewer) Web Security Scanner Editor (roles/cloudsecurityscanner.editor) Web Security Scanner Viewer (roles/cloudsecurityscanner.viewer) Cloud SQL Admin (roles/cloudsql.admin) Cloud SQL Editor (roles/cloudsql.editor) Cloud SQL Viewer (roles/cloudsql.viewer) Commercepricemanagement Editor (roles/commercepricemanagement.editor) Commerce Price Management Viewer (roles/commercepricemanagement.viewer) Composer Administrator (roles/composer.admin) Composer User (roles/composer.user) Compute Admin (roles/compute.admin) Compute Editor (roles/compute.editor) Compute Instance Admin (beta) (roles/compute.instanceAdmin) Compute Instance Admin (v1) (roles/compute.instanceAdmin.v1) Compute Load Balancer Admin (roles/compute.loadBalancerAdmin) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Compute OS Admin Login (roles/compute.osAdminLogin) Compute OS Login (roles/compute.osLogin) Compute Security Admin (roles/compute.securityAdmin) Compute Storage Admin (roles/compute.storageAdmin) Compute Viewer (roles/compute.viewer) Dataprep Admin (roles/dataprep.admin) Deployment Manager Editor (roles/deploymentmanager.editor) Deployment Manager Viewer (roles/deploymentmanager.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Managed Kafka Admin (roles/managedkafka.admin) Managed Kafka Viewer (roles/managedkafka.viewer) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Notebooks Admin (roles/notebooks.admin) Notebooks Editor (roles/notebooks.editor) Notebooks Viewer (roles/notebooks.viewer) Pub/Sub Admin (roles/pubsub.admin) Pub/Sub Editor (roles/pubsub.editor) Pub/Sub Viewer (roles/pubsub.viewer) Security Center Admin (roles/securitycenter.admin) Service Management Administrator (roles/servicemanagement.admin) Service Usage Admin (roles/serviceusage.serviceUsageAdmin) Service Usage Consumer (roles/serviceusage.serviceUsageConsumer) Service Usage Viewer (roles/serviceusage.serviceUsageViewer) Telco Automation Admin (roles/telcoautomation.admin) Workload Manager Admin (roles/workloadmanager.admin) Android Management User (roles/androidmanagement.user) Assured OSS Project Admin (roles/assuredoss.projectAdmin) Assured OSS Reader (roles/assuredoss.reader) Recommendations AI Admin Viewer (roles/automlrecommendations.adminViewer) Cloud Functions Developer (roles/cloudfunctions.developer) Cloud Hub Operator (roles/cloudhub.operator) Cloud Profiler User (roles/cloudprofiler.user) Cloud Scheduler Job Runner (roles/cloudscheduler.jobRunner) Commerce Price Management Private Offers Admin (roles/commercepricemanagement.privateOffersAdmin) Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin) Environment and Storage Object User (roles/composer.environmentAndStorageObjectUser) Environment and Storage Object Viewer (roles/composer.environmentAndStorageObjectViewer) Composer Worker (roles/composer.worker) Compute Image User (roles/compute.imageUser) Compute Load Balancer Services User (roles/compute.loadBalancerServiceUser) Compute Organization Firewall Policy Admin (roles/compute.orgFirewallPolicyAdmin) Compute Organization Firewall Policy User (roles/compute.orgFirewallPolicyUser) Compute Organization Security Policy Admin (roles/compute.orgSecurityPolicyAdmin) Compute Organization Security Policy User (roles/compute.orgSecurityPolicyUser) Compute Organization Resource Admin (roles/compute.orgSecurityResourceAdmin) Compute packet mirroring admin (roles/compute.packetMirroringAdmin) Compute packet mirroring user (roles/compute.packetMirroringUser) Consumer Procurement Entitlement Manager (roles/consumerprocurement.entitlementManager) Consumer Procurement Entitlement Viewer (roles/consumerprocurement.entitlementViewer) Consumer Procurement Administrator (roles/consumerprocurement.procurementAdmin) Consumer Procurement Viewer (roles/consumerprocurement.procurementViewer) Dataprep User (roles/dataprep.projects.user) Deployment Manager Type Editor (roles/deploymentmanager.typeEditor) Deployment Manager Type Viewer (roles/deploymentmanager.typeViewer) Earth Engine Apps Publisher (roles/earthengine.appsPublisher) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Grow Admin (roles/firebase.growthAdmin) Firebase Grow Viewer (roles/firebase.growthViewer) Firebase Quality Admin (roles/firebase.qualityAdmin) Firebase Quality Viewer (roles/firebase.qualityViewer) Connect Gateway Admin (roles/gkehub.gatewayAdmin) Connect Gateway Editor (roles/gkehub.gatewayEditor) Connect Gateway Reader (roles/gkehub.gatewayReader) Fleet Project-level Scope Editor (roles/gkehub.scopeEditorProjectLevel) Fleet Project-level Scope Viewer (roles/gkehub.scopeViewerProjectLevel) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Managed Kafka Client (roles/managedkafka.client) Managed Kafka Cluster Editor (roles/managedkafka.clusterEditor) Managed Kafka Connector Editor (roles/managedkafka.connectorEditor) Managed Kafka Consumer Group Editor (roles/managedkafka.consumerGroupEditor) Managed Kafka Topic Editor (roles/managedkafka.topicEditor) Notebooks Legacy Admin (roles/notebooks.legacyAdmin) Notebooks Legacy Viewer (roles/notebooks.legacyViewer) Notebooks Runner (roles/notebooks.runner) Cloud Run Source Developer (roles/run.sourceDeveloper) Cloud Run Source Viewer (roles/run.sourceViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Quota Administrator (roles/servicemanagement.quotaAdmin) Quota Viewer (roles/servicemanagement.quotaViewer) Stackdriver Accounts Editor (roles/stackdriver.accounts.editor) Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin) Workload Manager Workload Viewer (roles/workloadmanager.workloadViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Agent (roles/anthos.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Anthos Support Service Agent (roles/anthossupport.serviceAgent) Cloud API Gateway Management Service Agent (roles/apigateway_management.serviceAgent) App Engine Standard Environment Service Agent (roles/appengine.serviceAgent) Assured Workloads Service Agent (roles/assuredworkloads.serviceAgent) Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent) Google Batch Service Agent (roles/batch.serviceAgent) Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent) Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Container Analysis Service Agent (roles/containeranalysis.ServiceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Data Labeling Service Agent (roles/datalabeling.serviceAgent) Datapipelines Service Agent (roles/datapipelines.serviceAgent) Dataprep Service Agent (roles/dataprep.serviceAgent) Dataproc Service Agent (roles/dataproc.serviceAgent) DLP API Service Agent (roles/dlp.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Firebase SDK Provisioning Service Agent (roles/firebase.sdkProvisioningServiceAgent) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) Genomics Service Agent (roles/genomics.serviceAgent) GKE Hub Service Agent (roles/gkehub.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent) Application Integration Service Agent (roles/integrations.serviceAgent) KRM API Hosting AnthosApiEndpoint Service Agent (roles/krmapihosting.anthosApiEndpointServiceAgent) Cloud Life Sciences Service Agent (roles/lifesciences.serviceAgent) Mesh Managed Control Plane Service Agent (roles/meshcontrolplane.serviceAgent) Multi Cluster Ingress Service Agent (roles/multiclusteringress.serviceAgent) AI Platform Notebooks Service Agent (roles/notebooks.serviceAgent) Security Center Automation Service Agent (roles/securitycenter.automationServiceAgent) Security Center Control Service Agent (roles/securitycenter.controlServiceAgent) Security Health Analytics Service Agent (roles/securitycenter.securityHealthAnalyticsServiceAgent) Security Center Service Agent (roles/securitycenter.serviceAgent)
serviceusage.consumerpolicy.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) ApiGateway Admin (roles/apigateway.admin) Apigateway Editor (roles/apigateway.editor) ApiGateway Viewer (roles/apigateway.viewer) Assured OSS Admin (roles/assuredoss.admin) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Recommendations AI Admin (roles/automlrecommendations.admin) Recommendations AI Editor (roles/automlrecommendations.editor) Recommendations AI Viewer (roles/automlrecommendations.viewer) Capacity Planner Viewer (roles/capacityplanner.viewer) Cloud Functions Admin (roles/cloudfunctions.admin) Cloudfunctions Editor (roles/cloudfunctions.editor) Cloud Functions Viewer (roles/cloudfunctions.viewer) Cloud Scheduler Admin (roles/cloudscheduler.admin) Cloud Scheduler Viewer (roles/cloudscheduler.viewer) Web Security Scanner Editor (roles/cloudsecurityscanner.editor) Web Security Scanner Viewer (roles/cloudsecurityscanner.viewer) Cloud SQL Admin (roles/cloudsql.admin) Cloud SQL Editor (roles/cloudsql.editor) Cloud SQL Viewer (roles/cloudsql.viewer) Commercepricemanagement Editor (roles/commercepricemanagement.editor) Commerce Price Management Viewer (roles/commercepricemanagement.viewer) Composer Administrator (roles/composer.admin) Composer User (roles/composer.user) Compute Admin (roles/compute.admin) Compute Editor (roles/compute.editor) Compute Instance Admin (beta) (roles/compute.instanceAdmin) Compute Instance Admin (v1) (roles/compute.instanceAdmin.v1) Compute Load Balancer Admin (roles/compute.loadBalancerAdmin) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Compute OS Admin Login (roles/compute.osAdminLogin) Compute OS Login (roles/compute.osLogin) Compute Security Admin (roles/compute.securityAdmin) Compute Storage Admin (roles/compute.storageAdmin) Compute Viewer (roles/compute.viewer) Dataprep Admin (roles/dataprep.admin) Deployment Manager Editor (roles/deploymentmanager.editor) Deployment Manager Viewer (roles/deploymentmanager.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Managed Kafka Admin (roles/managedkafka.admin) Managed Kafka Viewer (roles/managedkafka.viewer) Maps Analytics Viewer (roles/mapsanalytics.viewer) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Notebooks Admin (roles/notebooks.admin) Notebooks Editor (roles/notebooks.editor) Notebooks Viewer (roles/notebooks.viewer) Pub/Sub Admin (roles/pubsub.admin) Pub/Sub Editor (roles/pubsub.editor) Pub/Sub Viewer (roles/pubsub.viewer) Security Center Admin (roles/securitycenter.admin) Service Management Administrator (roles/servicemanagement.admin) Service Usage Admin (roles/serviceusage.serviceUsageAdmin) Service Usage Consumer (roles/serviceusage.serviceUsageConsumer) Service Usage Viewer (roles/serviceusage.serviceUsageViewer) Telco Automation Admin (roles/telcoautomation.admin) Workload Manager Admin (roles/workloadmanager.admin) Android Management User (roles/androidmanagement.user) Assured OSS Project Admin (roles/assuredoss.projectAdmin) Assured OSS Reader (roles/assuredoss.reader) Recommendations AI Admin Viewer (roles/automlrecommendations.adminViewer) Capacity Planner (roles/capacityplanner.planner) Cloud Functions Developer (roles/cloudfunctions.developer) Cloud Hub Operator (roles/cloudhub.operator) Cloud Profiler User (roles/cloudprofiler.user) Cloud Scheduler Job Runner (roles/cloudscheduler.jobRunner) Commerce Price Management Private Offers Admin (roles/commercepricemanagement.privateOffersAdmin) Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin) Environment and Storage Object User (roles/composer.environmentAndStorageObjectUser) Environment and Storage Object Viewer (roles/composer.environmentAndStorageObjectViewer) Composer Worker (roles/composer.worker) Compute Image User (roles/compute.imageUser) Compute Load Balancer Services User (roles/compute.loadBalancerServiceUser) Compute Organization Firewall Policy Admin (roles/compute.orgFirewallPolicyAdmin) Compute Organization Firewall Policy User (roles/compute.orgFirewallPolicyUser) Compute Organization Security Policy Admin (roles/compute.orgSecurityPolicyAdmin) Compute Organization Security Policy User (roles/compute.orgSecurityPolicyUser) Compute Organization Resource Admin (roles/compute.orgSecurityResourceAdmin) Compute packet mirroring admin (roles/compute.packetMirroringAdmin) Compute packet mirroring user (roles/compute.packetMirroringUser) Consumer Procurement Entitlement Manager (roles/consumerprocurement.entitlementManager) Consumer Procurement Entitlement Viewer (roles/consumerprocurement.entitlementViewer) Consumer Procurement Administrator (roles/consumerprocurement.procurementAdmin) Consumer Procurement Viewer (roles/consumerprocurement.procurementViewer) Dataprep User (roles/dataprep.projects.user) Deployment Manager Type Editor (roles/deploymentmanager.typeEditor) Deployment Manager Type Viewer (roles/deploymentmanager.typeViewer) Earth Engine Apps Publisher (roles/earthengine.appsPublisher) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Grow Admin (roles/firebase.growthAdmin) Firebase Grow Viewer (roles/firebase.growthViewer) Firebase Quality Admin (roles/firebase.qualityAdmin) Firebase Quality Viewer (roles/firebase.qualityViewer) Connect Gateway Admin (roles/gkehub.gatewayAdmin) Connect Gateway Editor (roles/gkehub.gatewayEditor) Connect Gateway Reader (roles/gkehub.gatewayReader) Fleet Project-level Scope Editor (roles/gkehub.scopeEditorProjectLevel) Fleet Project-level Scope Viewer (roles/gkehub.scopeViewerProjectLevel) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Managed Kafka Client (roles/managedkafka.client) Managed Kafka Cluster Editor (roles/managedkafka.clusterEditor) Managed Kafka Connector Editor (roles/managedkafka.connectorEditor) Managed Kafka Consumer Group Editor (roles/managedkafka.consumerGroupEditor) Managed Kafka Topic Editor (roles/managedkafka.topicEditor) Mobility Solutions Overages Viewer (roles/mapsanalytics.mobilitySolutionsOverageViewer) Notebooks Legacy Admin (roles/notebooks.legacyAdmin) Notebooks Legacy Viewer (roles/notebooks.legacyViewer) Notebooks Runner (roles/notebooks.runner) Cloud Run Source Developer (roles/run.sourceDeveloper) Cloud Run Source Viewer (roles/run.sourceViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Quota Administrator (roles/servicemanagement.quotaAdmin) Quota Viewer (roles/servicemanagement.quotaViewer) Stackdriver Accounts Editor (roles/stackdriver.accounts.editor) Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin) Workload Manager Workload Viewer (roles/workloadmanager.workloadViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Agent (roles/anthos.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Anthos Support Service Agent (roles/anthossupport.serviceAgent) Cloud API Gateway Management Service Agent (roles/apigateway_management.serviceAgent) App Engine Standard Environment Service Agent (roles/appengine.serviceAgent) Assured Workloads Service Agent (roles/assuredworkloads.serviceAgent) Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent) Google Batch Service Agent (roles/batch.serviceAgent) Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent) Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Container Analysis Service Agent (roles/containeranalysis.ServiceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Data Labeling Service Agent (roles/datalabeling.serviceAgent) Datapipelines Service Agent (roles/datapipelines.serviceAgent) Dataprep Service Agent (roles/dataprep.serviceAgent) Dataproc Service Agent (roles/dataproc.serviceAgent) DLP API Service Agent (roles/dlp.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Firebase SDK Provisioning Service Agent (roles/firebase.sdkProvisioningServiceAgent) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) Genomics Service Agent (roles/genomics.serviceAgent) GKE Hub Service Agent (roles/gkehub.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent) Application Integration Service Agent (roles/integrations.serviceAgent) KRM API Hosting AnthosApiEndpoint Service Agent (roles/krmapihosting.anthosApiEndpointServiceAgent) Cloud Life Sciences Service Agent (roles/lifesciences.serviceAgent) Mesh Managed Control Plane Service Agent (roles/meshcontrolplane.serviceAgent) Multi Cluster Ingress Service Agent (roles/multiclusteringress.serviceAgent) AI Platform Notebooks Service Agent (roles/notebooks.serviceAgent) Security Center Automation Service Agent (roles/securitycenter.automationServiceAgent) Security Center Control Service Agent (roles/securitycenter.controlServiceAgent) Security Health Analytics Service Agent (roles/securitycenter.securityHealthAnalyticsServiceAgent) Security Center Service Agent (roles/securitycenter.serviceAgent)
serviceusage.consumerpolicy.update	Owner (roles/owner) Editor (roles/editor) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Service Usage Admin (roles/serviceusage.serviceUsageAdmin) Telco Automation Admin (roles/telcoautomation.admin) Consumer Procurement Entitlement Manager (roles/consumerprocurement.entitlementManager) Consumer Procurement Administrator (roles/consumerprocurement.procurementAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Quota Administrator (roles/servicemanagement.quotaAdmin) Stackdriver Accounts Editor (roles/stackdriver.accounts.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. App Engine Standard Environment Service Agent (roles/appengine.serviceAgent) Assured Workloads Service Agent (roles/assuredworkloads.serviceAgent) Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent) Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent) Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Firebase SDK Provisioning Service Agent (roles/firebase.sdkProvisioningServiceAgent) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) KRM API Hosting AnthosApiEndpoint Service Agent (roles/krmapihosting.anthosApiEndpointServiceAgent) Security Center Automation Service Agent (roles/securitycenter.automationServiceAgent) Security Center Control Service Agent (roles/securitycenter.controlServiceAgent) Security Center Service Agent (roles/securitycenter.serviceAgent)
serviceusage.contentsecuritypolicy.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Service Usage Admin (roles/serviceusage.serviceUsageAdmin) Service Usage Consumer (roles/serviceusage.serviceUsageConsumer) Service Usage Viewer (roles/serviceusage.serviceUsageViewer) Telco Automation Admin (roles/telcoautomation.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Grow Admin (roles/firebase.growthAdmin) Firebase Grow Viewer (roles/firebase.growthViewer) Firebase Quality Admin (roles/firebase.qualityAdmin) Firebase Quality Viewer (roles/firebase.qualityViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent) Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
serviceusage.contentsecuritypolicy.update	Owner (roles/owner) Editor (roles/editor) Service Usage Admin (roles/serviceusage.serviceUsageAdmin) Telco Automation Admin (roles/telcoautomation.admin)
serviceusage.effectivemcppolicy.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud API Registry Admin (roles/cloudapiregistry.admin) Cloud API Registry Viewer (roles/cloudapiregistry.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Service Usage Admin (roles/serviceusage.serviceUsageAdmin) Service Usage Consumer (roles/serviceusage.serviceUsageConsumer) Service Usage Viewer (roles/serviceusage.serviceUsageViewer) Telco Automation Admin (roles/telcoautomation.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Grow Admin (roles/firebase.growthAdmin) Firebase Grow Viewer (roles/firebase.growthViewer) Firebase Quality Admin (roles/firebase.qualityAdmin) Firebase Quality Viewer (roles/firebase.qualityViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent) Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
serviceusage.effectivepolicy.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) ApiGateway Admin (roles/apigateway.admin) Apigateway Editor (roles/apigateway.editor) ApiGateway Viewer (roles/apigateway.viewer) Assured OSS Admin (roles/assuredoss.admin) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Recommendations AI Admin (roles/automlrecommendations.admin) Recommendations AI Editor (roles/automlrecommendations.editor) Recommendations AI Viewer (roles/automlrecommendations.viewer) Capacity Planner Viewer (roles/capacityplanner.viewer) Cloud Functions Admin (roles/cloudfunctions.admin) Cloudfunctions Editor (roles/cloudfunctions.editor) Cloud Functions Viewer (roles/cloudfunctions.viewer) Cloud Scheduler Admin (roles/cloudscheduler.admin) Cloud Scheduler Viewer (roles/cloudscheduler.viewer) Web Security Scanner Editor (roles/cloudsecurityscanner.editor) Web Security Scanner Viewer (roles/cloudsecurityscanner.viewer) Cloud SQL Admin (roles/cloudsql.admin) Cloud SQL Editor (roles/cloudsql.editor) Cloud SQL Viewer (roles/cloudsql.viewer) Commercepricemanagement Editor (roles/commercepricemanagement.editor) Commerce Price Management Viewer (roles/commercepricemanagement.viewer) Composer Administrator (roles/composer.admin) Composer User (roles/composer.user) Compute Admin (roles/compute.admin) Compute Editor (roles/compute.editor) Compute Instance Admin (beta) (roles/compute.instanceAdmin) Compute Instance Admin (v1) (roles/compute.instanceAdmin.v1) Compute Load Balancer Admin (roles/compute.loadBalancerAdmin) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Compute OS Admin Login (roles/compute.osAdminLogin) Compute OS Login (roles/compute.osLogin) Compute Security Admin (roles/compute.securityAdmin) Compute Storage Admin (roles/compute.storageAdmin) Compute Viewer (roles/compute.viewer) Dataprep Admin (roles/dataprep.admin) Deployment Manager Editor (roles/deploymentmanager.editor) Deployment Manager Viewer (roles/deploymentmanager.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Managed Kafka Admin (roles/managedkafka.admin) Managed Kafka Viewer (roles/managedkafka.viewer) Maps Analytics Viewer (roles/mapsanalytics.viewer) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Notebooks Admin (roles/notebooks.admin) Notebooks Editor (roles/notebooks.editor) Notebooks Viewer (roles/notebooks.viewer) Pub/Sub Admin (roles/pubsub.admin) Pub/Sub Editor (roles/pubsub.editor) Pub/Sub Viewer (roles/pubsub.viewer) Security Center Admin (roles/securitycenter.admin) Service Management Administrator (roles/servicemanagement.admin) Service Usage Admin (roles/serviceusage.serviceUsageAdmin) Service Usage Consumer (roles/serviceusage.serviceUsageConsumer) Service Usage Viewer (roles/serviceusage.serviceUsageViewer) Telco Automation Admin (roles/telcoautomation.admin) Workload Manager Admin (roles/workloadmanager.admin) Android Management User (roles/androidmanagement.user) Assured OSS Project Admin (roles/assuredoss.projectAdmin) Assured OSS Reader (roles/assuredoss.reader) Recommendations AI Admin Viewer (roles/automlrecommendations.adminViewer) Capacity Planner (roles/capacityplanner.planner) Cloud Functions Developer (roles/cloudfunctions.developer) Cloud Hub Operator (roles/cloudhub.operator) Cloud Profiler User (roles/cloudprofiler.user) Cloud Scheduler Job Runner (roles/cloudscheduler.jobRunner) Commerce Price Management Private Offers Admin (roles/commercepricemanagement.privateOffersAdmin) Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin) Environment and Storage Object User (roles/composer.environmentAndStorageObjectUser) Environment and Storage Object Viewer (roles/composer.environmentAndStorageObjectViewer) Composer Worker (roles/composer.worker) Compute Image User (roles/compute.imageUser) Compute Load Balancer Services User (roles/compute.loadBalancerServiceUser) Compute Organization Firewall Policy Admin (roles/compute.orgFirewallPolicyAdmin) Compute Organization Firewall Policy User (roles/compute.orgFirewallPolicyUser) Compute Organization Security Policy Admin (roles/compute.orgSecurityPolicyAdmin) Compute Organization Security Policy User (roles/compute.orgSecurityPolicyUser) Compute Organization Resource Admin (roles/compute.orgSecurityResourceAdmin) Compute packet mirroring admin (roles/compute.packetMirroringAdmin) Compute packet mirroring user (roles/compute.packetMirroringUser) Consumer Procurement Entitlement Manager (roles/consumerprocurement.entitlementManager) Consumer Procurement Entitlement Viewer (roles/consumerprocurement.entitlementViewer) Consumer Procurement Administrator (roles/consumerprocurement.procurementAdmin) Consumer Procurement Viewer (roles/consumerprocurement.procurementViewer) Dataprep User (roles/dataprep.projects.user) Deployment Manager Type Editor (roles/deploymentmanager.typeEditor) Deployment Manager Type Viewer (roles/deploymentmanager.typeViewer) Earth Engine Apps Publisher (roles/earthengine.appsPublisher) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Grow Admin (roles/firebase.growthAdmin) Firebase Grow Viewer (roles/firebase.growthViewer) Firebase Quality Admin (roles/firebase.qualityAdmin) Firebase Quality Viewer (roles/firebase.qualityViewer) Connect Gateway Admin (roles/gkehub.gatewayAdmin) Connect Gateway Editor (roles/gkehub.gatewayEditor) Connect Gateway Reader (roles/gkehub.gatewayReader) Fleet Project-level Scope Editor (roles/gkehub.scopeEditorProjectLevel) Fleet Project-level Scope Viewer (roles/gkehub.scopeViewerProjectLevel) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Managed Kafka Client (roles/managedkafka.client) Managed Kafka Cluster Editor (roles/managedkafka.clusterEditor) Managed Kafka Connector Editor (roles/managedkafka.connectorEditor) Managed Kafka Consumer Group Editor (roles/managedkafka.consumerGroupEditor) Managed Kafka Topic Editor (roles/managedkafka.topicEditor) Mobility Solutions Overages Viewer (roles/mapsanalytics.mobilitySolutionsOverageViewer) Notebooks Legacy Admin (roles/notebooks.legacyAdmin) Notebooks Legacy Viewer (roles/notebooks.legacyViewer) Notebooks Runner (roles/notebooks.runner) Cloud Run Source Developer (roles/run.sourceDeveloper) Cloud Run Source Viewer (roles/run.sourceViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Quota Administrator (roles/servicemanagement.quotaAdmin) Quota Viewer (roles/servicemanagement.quotaViewer) Stackdriver Accounts Editor (roles/stackdriver.accounts.editor) Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin) Workload Manager Workload Viewer (roles/workloadmanager.workloadViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Agent (roles/anthos.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Anthos Support Service Agent (roles/anthossupport.serviceAgent) Cloud API Gateway Management Service Agent (roles/apigateway_management.serviceAgent) App Engine Standard Environment Service Agent (roles/appengine.serviceAgent) Assured Workloads Service Agent (roles/assuredworkloads.serviceAgent) Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent) Google Batch Service Agent (roles/batch.serviceAgent) Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent) Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Container Analysis Service Agent (roles/containeranalysis.ServiceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Data Labeling Service Agent (roles/datalabeling.serviceAgent) Datapipelines Service Agent (roles/datapipelines.serviceAgent) Dataprep Service Agent (roles/dataprep.serviceAgent) Dataproc Service Agent (roles/dataproc.serviceAgent) DLP API Service Agent (roles/dlp.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Firebase SDK Provisioning Service Agent (roles/firebase.sdkProvisioningServiceAgent) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) Genomics Service Agent (roles/genomics.serviceAgent) GKE Hub Service Agent (roles/gkehub.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent) Application Integration Service Agent (roles/integrations.serviceAgent) KRM API Hosting AnthosApiEndpoint Service Agent (roles/krmapihosting.anthosApiEndpointServiceAgent) Cloud Life Sciences Service Agent (roles/lifesciences.serviceAgent) Mesh Managed Control Plane Service Agent (roles/meshcontrolplane.serviceAgent) Multi Cluster Ingress Service Agent (roles/multiclusteringress.serviceAgent) AI Platform Notebooks Service Agent (roles/notebooks.serviceAgent) Security Center Automation Service Agent (roles/securitycenter.automationServiceAgent) Security Center Control Service Agent (roles/securitycenter.controlServiceAgent) Security Health Analytics Service Agent (roles/securitycenter.securityHealthAnalyticsServiceAgent) Security Center Service Agent (roles/securitycenter.serviceAgent)
serviceusage.groups.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) ApiGateway Admin (roles/apigateway.admin) Apigateway Editor (roles/apigateway.editor) ApiGateway Viewer (roles/apigateway.viewer) Assured OSS Admin (roles/assuredoss.admin) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Recommendations AI Admin (roles/automlrecommendations.admin) Recommendations AI Editor (roles/automlrecommendations.editor) Recommendations AI Viewer (roles/automlrecommendations.viewer) Capacity Planner Viewer (roles/capacityplanner.viewer) Cloud Functions Admin (roles/cloudfunctions.admin) Cloudfunctions Editor (roles/cloudfunctions.editor) Cloud Functions Viewer (roles/cloudfunctions.viewer) Cloud Scheduler Admin (roles/cloudscheduler.admin) Cloud Scheduler Viewer (roles/cloudscheduler.viewer) Web Security Scanner Editor (roles/cloudsecurityscanner.editor) Web Security Scanner Viewer (roles/cloudsecurityscanner.viewer) Cloud SQL Admin (roles/cloudsql.admin) Cloud SQL Editor (roles/cloudsql.editor) Cloud SQL Viewer (roles/cloudsql.viewer) Commercepricemanagement Editor (roles/commercepricemanagement.editor) Commerce Price Management Viewer (roles/commercepricemanagement.viewer) Composer Administrator (roles/composer.admin) Composer User (roles/composer.user) Compute Admin (roles/compute.admin) Compute Editor (roles/compute.editor) Compute Instance Admin (beta) (roles/compute.instanceAdmin) Compute Instance Admin (v1) (roles/compute.instanceAdmin.v1) Compute Load Balancer Admin (roles/compute.loadBalancerAdmin) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Compute OS Admin Login (roles/compute.osAdminLogin) Compute OS Login (roles/compute.osLogin) Compute Security Admin (roles/compute.securityAdmin) Compute Storage Admin (roles/compute.storageAdmin) Compute Viewer (roles/compute.viewer) Dataprep Admin (roles/dataprep.admin) Deployment Manager Editor (roles/deploymentmanager.editor) Deployment Manager Viewer (roles/deploymentmanager.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Managed Kafka Admin (roles/managedkafka.admin) Managed Kafka Viewer (roles/managedkafka.viewer) Maps Analytics Viewer (roles/mapsanalytics.viewer) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Notebooks Admin (roles/notebooks.admin) Notebooks Editor (roles/notebooks.editor) Notebooks Viewer (roles/notebooks.viewer) Pub/Sub Admin (roles/pubsub.admin) Pub/Sub Editor (roles/pubsub.editor) Pub/Sub Viewer (roles/pubsub.viewer) Security Center Admin (roles/securitycenter.admin) Service Management Administrator (roles/servicemanagement.admin) Service Usage Admin (roles/serviceusage.serviceUsageAdmin) Service Usage Consumer (roles/serviceusage.serviceUsageConsumer) Service Usage Viewer (roles/serviceusage.serviceUsageViewer) Telco Automation Admin (roles/telcoautomation.admin) Workload Manager Admin (roles/workloadmanager.admin) Android Management User (roles/androidmanagement.user) Assured OSS Project Admin (roles/assuredoss.projectAdmin) Assured OSS Reader (roles/assuredoss.reader) Recommendations AI Admin Viewer (roles/automlrecommendations.adminViewer) Capacity Planner (roles/capacityplanner.planner) Cloud Functions Developer (roles/cloudfunctions.developer) Cloud Hub Operator (roles/cloudhub.operator) Cloud Profiler User (roles/cloudprofiler.user) Cloud Scheduler Job Runner (roles/cloudscheduler.jobRunner) Commerce Price Management Private Offers Admin (roles/commercepricemanagement.privateOffersAdmin) Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin) Environment and Storage Object User (roles/composer.environmentAndStorageObjectUser) Environment and Storage Object Viewer (roles/composer.environmentAndStorageObjectViewer) Composer Worker (roles/composer.worker) Compute Image User (roles/compute.imageUser) Compute Load Balancer Services User (roles/compute.loadBalancerServiceUser) Compute Organization Firewall Policy Admin (roles/compute.orgFirewallPolicyAdmin) Compute Organization Firewall Policy User (roles/compute.orgFirewallPolicyUser) Compute Organization Security Policy Admin (roles/compute.orgSecurityPolicyAdmin) Compute Organization Security Policy User (roles/compute.orgSecurityPolicyUser) Compute Organization Resource Admin (roles/compute.orgSecurityResourceAdmin) Compute packet mirroring admin (roles/compute.packetMirroringAdmin) Compute packet mirroring user (roles/compute.packetMirroringUser) Consumer Procurement Entitlement Manager (roles/consumerprocurement.entitlementManager) Consumer Procurement Entitlement Viewer (roles/consumerprocurement.entitlementViewer) Consumer Procurement Administrator (roles/consumerprocurement.procurementAdmin) Consumer Procurement Viewer (roles/consumerprocurement.procurementViewer) Dataprep User (roles/dataprep.projects.user) Deployment Manager Type Editor (roles/deploymentmanager.typeEditor) Deployment Manager Type Viewer (roles/deploymentmanager.typeViewer) Earth Engine Apps Publisher (roles/earthengine.appsPublisher) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Grow Admin (roles/firebase.growthAdmin) Firebase Grow Viewer (roles/firebase.growthViewer) Firebase Quality Admin (roles/firebase.qualityAdmin) Firebase Quality Viewer (roles/firebase.qualityViewer) Connect Gateway Admin (roles/gkehub.gatewayAdmin) Connect Gateway Editor (roles/gkehub.gatewayEditor) Connect Gateway Reader (roles/gkehub.gatewayReader) Fleet Project-level Scope Editor (roles/gkehub.scopeEditorProjectLevel) Fleet Project-level Scope Viewer (roles/gkehub.scopeViewerProjectLevel) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Managed Kafka Client (roles/managedkafka.client) Managed Kafka Cluster Editor (roles/managedkafka.clusterEditor) Managed Kafka Connector Editor (roles/managedkafka.connectorEditor) Managed Kafka Consumer Group Editor (roles/managedkafka.consumerGroupEditor) Managed Kafka Topic Editor (roles/managedkafka.topicEditor) Mobility Solutions Overages Viewer (roles/mapsanalytics.mobilitySolutionsOverageViewer) Notebooks Legacy Admin (roles/notebooks.legacyAdmin) Notebooks Legacy Viewer (roles/notebooks.legacyViewer) Notebooks Runner (roles/notebooks.runner) Cloud Run Source Developer (roles/run.sourceDeveloper) Cloud Run Source Viewer (roles/run.sourceViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Quota Administrator (roles/servicemanagement.quotaAdmin) Quota Viewer (roles/servicemanagement.quotaViewer) Stackdriver Accounts Editor (roles/stackdriver.accounts.editor) Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin) Workload Manager Workload Viewer (roles/workloadmanager.workloadViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Agent (roles/anthos.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Anthos Support Service Agent (roles/anthossupport.serviceAgent) Cloud API Gateway Management Service Agent (roles/apigateway_management.serviceAgent) App Engine Standard Environment Service Agent (roles/appengine.serviceAgent) Assured Workloads Service Agent (roles/assuredworkloads.serviceAgent) Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent) Google Batch Service Agent (roles/batch.serviceAgent) Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent) Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Container Analysis Service Agent (roles/containeranalysis.ServiceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Data Labeling Service Agent (roles/datalabeling.serviceAgent) Datapipelines Service Agent (roles/datapipelines.serviceAgent) Dataprep Service Agent (roles/dataprep.serviceAgent) Dataproc Service Agent (roles/dataproc.serviceAgent) DLP API Service Agent (roles/dlp.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Firebase SDK Provisioning Service Agent (roles/firebase.sdkProvisioningServiceAgent) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) Genomics Service Agent (roles/genomics.serviceAgent) GKE Hub Service Agent (roles/gkehub.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent) Application Integration Service Agent (roles/integrations.serviceAgent) KRM API Hosting AnthosApiEndpoint Service Agent (roles/krmapihosting.anthosApiEndpointServiceAgent) Cloud Life Sciences Service Agent (roles/lifesciences.serviceAgent) Mesh Managed Control Plane Service Agent (roles/meshcontrolplane.serviceAgent) Multi Cluster Ingress Service Agent (roles/multiclusteringress.serviceAgent) AI Platform Notebooks Service Agent (roles/notebooks.serviceAgent) Security Center Automation Service Agent (roles/securitycenter.automationServiceAgent) Security Center Control Service Agent (roles/securitycenter.controlServiceAgent) Security Health Analytics Service Agent (roles/securitycenter.securityHealthAnalyticsServiceAgent) Security Center Service Agent (roles/securitycenter.serviceAgent)
serviceusage.groups.listExpandedMembers	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) ApiGateway Admin (roles/apigateway.admin) Apigateway Editor (roles/apigateway.editor) ApiGateway Viewer (roles/apigateway.viewer) Assured OSS Admin (roles/assuredoss.admin) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Recommendations AI Admin (roles/automlrecommendations.admin) Recommendations AI Editor (roles/automlrecommendations.editor) Recommendations AI Viewer (roles/automlrecommendations.viewer) Cloud Functions Admin (roles/cloudfunctions.admin) Cloudfunctions Editor (roles/cloudfunctions.editor) Cloud Functions Viewer (roles/cloudfunctions.viewer) Cloud Scheduler Admin (roles/cloudscheduler.admin) Cloud Scheduler Viewer (roles/cloudscheduler.viewer) Web Security Scanner Editor (roles/cloudsecurityscanner.editor) Web Security Scanner Viewer (roles/cloudsecurityscanner.viewer) Cloud SQL Admin (roles/cloudsql.admin) Cloud SQL Editor (roles/cloudsql.editor) Cloud SQL Viewer (roles/cloudsql.viewer) Commercepricemanagement Editor (roles/commercepricemanagement.editor) Commerce Price Management Viewer (roles/commercepricemanagement.viewer) Composer Administrator (roles/composer.admin) Composer User (roles/composer.user) Compute Admin (roles/compute.admin) Compute Editor (roles/compute.editor) Compute Instance Admin (beta) (roles/compute.instanceAdmin) Compute Instance Admin (v1) (roles/compute.instanceAdmin.v1) Compute Load Balancer Admin (roles/compute.loadBalancerAdmin) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Compute OS Admin Login (roles/compute.osAdminLogin) Compute OS Login (roles/compute.osLogin) Compute Security Admin (roles/compute.securityAdmin) Compute Storage Admin (roles/compute.storageAdmin) Compute Viewer (roles/compute.viewer) Dataprep Admin (roles/dataprep.admin) Deployment Manager Editor (roles/deploymentmanager.editor) Deployment Manager Viewer (roles/deploymentmanager.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Managed Kafka Admin (roles/managedkafka.admin) Managed Kafka Viewer (roles/managedkafka.viewer) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Notebooks Admin (roles/notebooks.admin) Notebooks Editor (roles/notebooks.editor) Notebooks Viewer (roles/notebooks.viewer) Pub/Sub Admin (roles/pubsub.admin) Pub/Sub Editor (roles/pubsub.editor) Pub/Sub Viewer (roles/pubsub.viewer) Security Center Admin (roles/securitycenter.admin) Service Management Administrator (roles/servicemanagement.admin) Service Usage Admin (roles/serviceusage.serviceUsageAdmin) Service Usage Consumer (roles/serviceusage.serviceUsageConsumer) Service Usage Viewer (roles/serviceusage.serviceUsageViewer) Telco Automation Admin (roles/telcoautomation.admin) Workload Manager Admin (roles/workloadmanager.admin) Android Management User (roles/androidmanagement.user) Assured OSS Project Admin (roles/assuredoss.projectAdmin) Assured OSS Reader (roles/assuredoss.reader) Recommendations AI Admin Viewer (roles/automlrecommendations.adminViewer) Cloud Functions Developer (roles/cloudfunctions.developer) Cloud Hub Operator (roles/cloudhub.operator) Cloud Profiler User (roles/cloudprofiler.user) Cloud Scheduler Job Runner (roles/cloudscheduler.jobRunner) Commerce Price Management Private Offers Admin (roles/commercepricemanagement.privateOffersAdmin) Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin) Environment and Storage Object User (roles/composer.environmentAndStorageObjectUser) Environment and Storage Object Viewer (roles/composer.environmentAndStorageObjectViewer) Composer Worker (roles/composer.worker) Compute Image User (roles/compute.imageUser) Compute Load Balancer Services User (roles/compute.loadBalancerServiceUser) Compute Organization Firewall Policy Admin (roles/compute.orgFirewallPolicyAdmin) Compute Organization Firewall Policy User (roles/compute.orgFirewallPolicyUser) Compute Organization Security Policy Admin (roles/compute.orgSecurityPolicyAdmin) Compute Organization Security Policy User (roles/compute.orgSecurityPolicyUser) Compute Organization Resource Admin (roles/compute.orgSecurityResourceAdmin) Compute packet mirroring admin (roles/compute.packetMirroringAdmin) Compute packet mirroring user (roles/compute.packetMirroringUser) Consumer Procurement Entitlement Manager (roles/consumerprocurement.entitlementManager) Consumer Procurement Entitlement Viewer (roles/consumerprocurement.entitlementViewer) Consumer Procurement Administrator (roles/consumerprocurement.procurementAdmin) Consumer Procurement Viewer (roles/consumerprocurement.procurementViewer) Dataprep User (roles/dataprep.projects.user) Deployment Manager Type Editor (roles/deploymentmanager.typeEditor) Deployment Manager Type Viewer (roles/deploymentmanager.typeViewer) Earth Engine Apps Publisher (roles/earthengine.appsPublisher) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Grow Admin (roles/firebase.growthAdmin) Firebase Grow Viewer (roles/firebase.growthViewer) Firebase Quality Admin (roles/firebase.qualityAdmin) Firebase Quality Viewer (roles/firebase.qualityViewer) Connect Gateway Admin (roles/gkehub.gatewayAdmin) Connect Gateway Editor (roles/gkehub.gatewayEditor) Connect Gateway Reader (roles/gkehub.gatewayReader) Fleet Project-level Scope Editor (roles/gkehub.scopeEditorProjectLevel) Fleet Project-level Scope Viewer (roles/gkehub.scopeViewerProjectLevel) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Managed Kafka Client (roles/managedkafka.client) Managed Kafka Cluster Editor (roles/managedkafka.clusterEditor) Managed Kafka Connector Editor (roles/managedkafka.connectorEditor) Managed Kafka Consumer Group Editor (roles/managedkafka.consumerGroupEditor) Managed Kafka Topic Editor (roles/managedkafka.topicEditor) Notebooks Legacy Admin (roles/notebooks.legacyAdmin) Notebooks Legacy Viewer (roles/notebooks.legacyViewer) Notebooks Runner (roles/notebooks.runner) Cloud Run Source Developer (roles/run.sourceDeveloper) Cloud Run Source Viewer (roles/run.sourceViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Quota Administrator (roles/servicemanagement.quotaAdmin) Quota Viewer (roles/servicemanagement.quotaViewer) Stackdriver Accounts Editor (roles/stackdriver.accounts.editor) Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin) Workload Manager Workload Viewer (roles/workloadmanager.workloadViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Agent (roles/anthos.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Anthos Support Service Agent (roles/anthossupport.serviceAgent) Cloud API Gateway Management Service Agent (roles/apigateway_management.serviceAgent) App Engine Standard Environment Service Agent (roles/appengine.serviceAgent) Assured Workloads Service Agent (roles/assuredworkloads.serviceAgent) Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent) Google Batch Service Agent (roles/batch.serviceAgent) Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent) Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Container Analysis Service Agent (roles/containeranalysis.ServiceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Data Labeling Service Agent (roles/datalabeling.serviceAgent) Datapipelines Service Agent (roles/datapipelines.serviceAgent) Dataprep Service Agent (roles/dataprep.serviceAgent) Dataproc Service Agent (roles/dataproc.serviceAgent) DLP API Service Agent (roles/dlp.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Firebase SDK Provisioning Service Agent (roles/firebase.sdkProvisioningServiceAgent) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) Genomics Service Agent (roles/genomics.serviceAgent) GKE Hub Service Agent (roles/gkehub.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent) Application Integration Service Agent (roles/integrations.serviceAgent) KRM API Hosting AnthosApiEndpoint Service Agent (roles/krmapihosting.anthosApiEndpointServiceAgent) Cloud Life Sciences Service Agent (roles/lifesciences.serviceAgent) Mesh Managed Control Plane Service Agent (roles/meshcontrolplane.serviceAgent) Multi Cluster Ingress Service Agent (roles/multiclusteringress.serviceAgent) AI Platform Notebooks Service Agent (roles/notebooks.serviceAgent) Security Center Automation Service Agent (roles/securitycenter.automationServiceAgent) Security Center Control Service Agent (roles/securitycenter.controlServiceAgent) Security Health Analytics Service Agent (roles/securitycenter.securityHealthAnalyticsServiceAgent) Security Center Service Agent (roles/securitycenter.serviceAgent)
serviceusage.groups.listMembers	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) ApiGateway Admin (roles/apigateway.admin) Apigateway Editor (roles/apigateway.editor) ApiGateway Viewer (roles/apigateway.viewer) Assured OSS Admin (roles/assuredoss.admin) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Recommendations AI Admin (roles/automlrecommendations.admin) Recommendations AI Editor (roles/automlrecommendations.editor) Recommendations AI Viewer (roles/automlrecommendations.viewer) Capacity Planner Viewer (roles/capacityplanner.viewer) Cloud Functions Admin (roles/cloudfunctions.admin) Cloudfunctions Editor (roles/cloudfunctions.editor) Cloud Functions Viewer (roles/cloudfunctions.viewer) Cloud Scheduler Admin (roles/cloudscheduler.admin) Cloud Scheduler Viewer (roles/cloudscheduler.viewer) Web Security Scanner Editor (roles/cloudsecurityscanner.editor) Web Security Scanner Viewer (roles/cloudsecurityscanner.viewer) Cloud SQL Admin (roles/cloudsql.admin) Cloud SQL Editor (roles/cloudsql.editor) Cloud SQL Viewer (roles/cloudsql.viewer) Commercepricemanagement Editor (roles/commercepricemanagement.editor) Commerce Price Management Viewer (roles/commercepricemanagement.viewer) Composer Administrator (roles/composer.admin) Composer User (roles/composer.user) Compute Admin (roles/compute.admin) Compute Editor (roles/compute.editor) Compute Instance Admin (beta) (roles/compute.instanceAdmin) Compute Instance Admin (v1) (roles/compute.instanceAdmin.v1) Compute Load Balancer Admin (roles/compute.loadBalancerAdmin) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Compute OS Admin Login (roles/compute.osAdminLogin) Compute OS Login (roles/compute.osLogin) Compute Security Admin (roles/compute.securityAdmin) Compute Storage Admin (roles/compute.storageAdmin) Compute Viewer (roles/compute.viewer) Dataprep Admin (roles/dataprep.admin) Deployment Manager Editor (roles/deploymentmanager.editor) Deployment Manager Viewer (roles/deploymentmanager.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Managed Kafka Admin (roles/managedkafka.admin) Managed Kafka Viewer (roles/managedkafka.viewer) Maps Analytics Viewer (roles/mapsanalytics.viewer) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Notebooks Admin (roles/notebooks.admin) Notebooks Editor (roles/notebooks.editor) Notebooks Viewer (roles/notebooks.viewer) Pub/Sub Admin (roles/pubsub.admin) Pub/Sub Editor (roles/pubsub.editor) Pub/Sub Viewer (roles/pubsub.viewer) Security Center Admin (roles/securitycenter.admin) Service Management Administrator (roles/servicemanagement.admin) Service Usage Admin (roles/serviceusage.serviceUsageAdmin) Service Usage Consumer (roles/serviceusage.serviceUsageConsumer) Service Usage Viewer (roles/serviceusage.serviceUsageViewer) Telco Automation Admin (roles/telcoautomation.admin) Workload Manager Admin (roles/workloadmanager.admin) Android Management User (roles/androidmanagement.user) Assured OSS Project Admin (roles/assuredoss.projectAdmin) Assured OSS Reader (roles/assuredoss.reader) Recommendations AI Admin Viewer (roles/automlrecommendations.adminViewer) Capacity Planner (roles/capacityplanner.planner) Cloud Functions Developer (roles/cloudfunctions.developer) Cloud Hub Operator (roles/cloudhub.operator) Cloud Profiler User (roles/cloudprofiler.user) Cloud Scheduler Job Runner (roles/cloudscheduler.jobRunner) Commerce Price Management Private Offers Admin (roles/commercepricemanagement.privateOffersAdmin) Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin) Environment and Storage Object User (roles/composer.environmentAndStorageObjectUser) Environment and Storage Object Viewer (roles/composer.environmentAndStorageObjectViewer) Composer Worker (roles/composer.worker) Compute Image User (roles/compute.imageUser) Compute Load Balancer Services User (roles/compute.loadBalancerServiceUser) Compute Organization Firewall Policy Admin (roles/compute.orgFirewallPolicyAdmin) Compute Organization Firewall Policy User (roles/compute.orgFirewallPolicyUser) Compute Organization Security Policy Admin (roles/compute.orgSecurityPolicyAdmin) Compute Organization Security Policy User (roles/compute.orgSecurityPolicyUser) Compute Organization Resource Admin (roles/compute.orgSecurityResourceAdmin) Compute packet mirroring admin (roles/compute.packetMirroringAdmin) Compute packet mirroring user (roles/compute.packetMirroringUser) Consumer Procurement Entitlement Manager (roles/consumerprocurement.entitlementManager) Consumer Procurement Entitlement Viewer (roles/consumerprocurement.entitlementViewer) Consumer Procurement Administrator (roles/consumerprocurement.procurementAdmin) Consumer Procurement Viewer (roles/consumerprocurement.procurementViewer) Dataprep User (roles/dataprep.projects.user) Deployment Manager Type Editor (roles/deploymentmanager.typeEditor) Deployment Manager Type Viewer (roles/deploymentmanager.typeViewer) Earth Engine Apps Publisher (roles/earthengine.appsPublisher) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Grow Admin (roles/firebase.growthAdmin) Firebase Grow Viewer (roles/firebase.growthViewer) Firebase Quality Admin (roles/firebase.qualityAdmin) Firebase Quality Viewer (roles/firebase.qualityViewer) Connect Gateway Admin (roles/gkehub.gatewayAdmin) Connect Gateway Editor (roles/gkehub.gatewayEditor) Connect Gateway Reader (roles/gkehub.gatewayReader) Fleet Project-level Scope Editor (roles/gkehub.scopeEditorProjectLevel) Fleet Project-level Scope Viewer (roles/gkehub.scopeViewerProjectLevel) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Managed Kafka Client (roles/managedkafka.client) Managed Kafka Cluster Editor (roles/managedkafka.clusterEditor) Managed Kafka Connector Editor (roles/managedkafka.connectorEditor) Managed Kafka Consumer Group Editor (roles/managedkafka.consumerGroupEditor) Managed Kafka Topic Editor (roles/managedkafka.topicEditor) Mobility Solutions Overages Viewer (roles/mapsanalytics.mobilitySolutionsOverageViewer) Notebooks Legacy Admin (roles/notebooks.legacyAdmin) Notebooks Legacy Viewer (roles/notebooks.legacyViewer) Notebooks Runner (roles/notebooks.runner) Cloud Run Source Developer (roles/run.sourceDeveloper) Cloud Run Source Viewer (roles/run.sourceViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Quota Administrator (roles/servicemanagement.quotaAdmin) Quota Viewer (roles/servicemanagement.quotaViewer) Stackdriver Accounts Editor (roles/stackdriver.accounts.editor) Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin) Workload Manager Workload Viewer (roles/workloadmanager.workloadViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Agent (roles/anthos.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Anthos Support Service Agent (roles/anthossupport.serviceAgent) Cloud API Gateway Management Service Agent (roles/apigateway_management.serviceAgent) App Engine Standard Environment Service Agent (roles/appengine.serviceAgent) Assured Workloads Service Agent (roles/assuredworkloads.serviceAgent) Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent) Google Batch Service Agent (roles/batch.serviceAgent) Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent) Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Container Analysis Service Agent (roles/containeranalysis.ServiceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Data Labeling Service Agent (roles/datalabeling.serviceAgent) Datapipelines Service Agent (roles/datapipelines.serviceAgent) Dataprep Service Agent (roles/dataprep.serviceAgent) Dataproc Service Agent (roles/dataproc.serviceAgent) DLP API Service Agent (roles/dlp.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Firebase SDK Provisioning Service Agent (roles/firebase.sdkProvisioningServiceAgent) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) Genomics Service Agent (roles/genomics.serviceAgent) GKE Hub Service Agent (roles/gkehub.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent) Application Integration Service Agent (roles/integrations.serviceAgent) KRM API Hosting AnthosApiEndpoint Service Agent (roles/krmapihosting.anthosApiEndpointServiceAgent) Cloud Life Sciences Service Agent (roles/lifesciences.serviceAgent) Mesh Managed Control Plane Service Agent (roles/meshcontrolplane.serviceAgent) Multi Cluster Ingress Service Agent (roles/multiclusteringress.serviceAgent) AI Platform Notebooks Service Agent (roles/notebooks.serviceAgent) Security Center Automation Service Agent (roles/securitycenter.automationServiceAgent) Security Center Control Service Agent (roles/securitycenter.controlServiceAgent) Security Health Analytics Service Agent (roles/securitycenter.securityHealthAnalyticsServiceAgent) Security Center Service Agent (roles/securitycenter.serviceAgent)
serviceusage.mcppolicy.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Service Usage Admin (roles/serviceusage.serviceUsageAdmin) Service Usage Consumer (roles/serviceusage.serviceUsageConsumer) Service Usage Viewer (roles/serviceusage.serviceUsageViewer) Telco Automation Admin (roles/telcoautomation.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Grow Admin (roles/firebase.growthAdmin) Firebase Grow Viewer (roles/firebase.growthViewer) Firebase Quality Admin (roles/firebase.qualityAdmin) Firebase Quality Viewer (roles/firebase.qualityViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent) Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
serviceusage.mcppolicy.update	Owner (roles/owner) Editor (roles/editor) Service Usage Admin (roles/serviceusage.serviceUsageAdmin) Telco Automation Admin (roles/telcoautomation.admin)
serviceusage.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Commerce Business Enablement Configuration Admin (roles/commercebusinessenablement.admin) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) API Keys Admin (roles/serviceusage.apiKeysAdmin) Service Usage Admin (roles/serviceusage.serviceUsageAdmin) Service Usage Consumer (roles/serviceusage.serviceUsageConsumer) Service Usage Viewer (roles/serviceusage.serviceUsageViewer) Telco Automation Admin (roles/telcoautomation.admin) Consumer Procurement Entitlement Manager (roles/consumerprocurement.entitlementManager) Consumer Procurement Administrator (roles/consumerprocurement.procurementAdmin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Grow Admin (roles/firebase.growthAdmin) Firebase Grow Viewer (roles/firebase.growthViewer) Firebase Quality Admin (roles/firebase.qualityAdmin) Firebase Quality Viewer (roles/firebase.qualityViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent) Chronicle Service Agent (roles/chronicle.serviceAgent) Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent) Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Security Center Control Service Agent (roles/securitycenter.controlServiceAgent) Security Center Service Agent (roles/securitycenter.serviceAgent)
serviceusage.quotas.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Assured OSS Admin (roles/assuredoss.admin) Capacity Planner Viewer (roles/capacityplanner.viewer) Cloud Functions Admin (roles/cloudfunctions.admin) Cloudfunctions Editor (roles/cloudfunctions.editor) Cloud Functions Viewer (roles/cloudfunctions.viewer) Web Security Scanner Editor (roles/cloudsecurityscanner.editor) Web Security Scanner Viewer (roles/cloudsecurityscanner.viewer) Cloud SQL Admin (roles/cloudsql.admin) Cloud SQL Editor (roles/cloudsql.editor) Cloud SQL Viewer (roles/cloudsql.viewer) Composer Administrator (roles/composer.admin) Composer User (roles/composer.user) Compute Admin (roles/compute.admin) Compute Editor (roles/compute.editor) Compute Instance Admin (beta) (roles/compute.instanceAdmin) Compute Instance Admin (v1) (roles/compute.instanceAdmin.v1) Compute Load Balancer Admin (roles/compute.loadBalancerAdmin) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Compute OS Admin Login (roles/compute.osAdminLogin) Compute OS Login (roles/compute.osLogin) Compute Security Admin (roles/compute.securityAdmin) Compute Storage Admin (roles/compute.storageAdmin) Compute Viewer (roles/compute.viewer) Dataprep Admin (roles/dataprep.admin) Deployment Manager Editor (roles/deploymentmanager.editor) Deployment Manager Viewer (roles/deploymentmanager.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Looker Admin (roles/looker.admin) Managed Kafka Admin (roles/managedkafka.admin) Managed Kafka Viewer (roles/managedkafka.viewer) Migration Center Admin (roles/migrationcenter.admin) Migration Center Viewer (roles/migrationcenter.viewer) Notebooks Admin (roles/notebooks.admin) Notebooks Editor (roles/notebooks.editor) Notebooks Viewer (roles/notebooks.viewer) Pub/Sub Admin (roles/pubsub.admin) Pub/Sub Editor (roles/pubsub.editor) Pub/Sub Viewer (roles/pubsub.viewer) Security Center Admin (roles/securitycenter.admin) Service Management Administrator (roles/servicemanagement.admin) Service Usage Admin (roles/serviceusage.serviceUsageAdmin) Service Usage Consumer (roles/serviceusage.serviceUsageConsumer) Service Usage Viewer (roles/serviceusage.serviceUsageViewer) Telco Automation Admin (roles/telcoautomation.admin) Workload Manager Admin (roles/workloadmanager.admin) Android Management User (roles/androidmanagement.user) Assured OSS Project Admin (roles/assuredoss.projectAdmin) Assured OSS Reader (roles/assuredoss.reader) Capacity Planner (roles/capacityplanner.planner) Cloud Functions Developer (roles/cloudfunctions.developer) Cloud Hub Operator (roles/cloudhub.operator) Cloud Profiler User (roles/cloudprofiler.user) Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin) Environment and Storage Object User (roles/composer.environmentAndStorageObjectUser) Environment and Storage Object Viewer (roles/composer.environmentAndStorageObjectViewer) Composer Worker (roles/composer.worker) Compute Image User (roles/compute.imageUser) Compute Load Balancer Services User (roles/compute.loadBalancerServiceUser) Compute Organization Firewall Policy Admin (roles/compute.orgFirewallPolicyAdmin) Compute Organization Firewall Policy User (roles/compute.orgFirewallPolicyUser) Compute Organization Security Policy Admin (roles/compute.orgSecurityPolicyAdmin) Compute Organization Security Policy User (roles/compute.orgSecurityPolicyUser) Compute Organization Resource Admin (roles/compute.orgSecurityResourceAdmin) Compute packet mirroring admin (roles/compute.packetMirroringAdmin) Compute packet mirroring user (roles/compute.packetMirroringUser) Dataprep User (roles/dataprep.projects.user) Deployment Manager Type Editor (roles/deploymentmanager.typeEditor) Deployment Manager Type Viewer (roles/deploymentmanager.typeViewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Grow Admin (roles/firebase.growthAdmin) Firebase Grow Viewer (roles/firebase.growthViewer) Firebase Quality Admin (roles/firebase.qualityAdmin) Firebase Quality Viewer (roles/firebase.qualityViewer) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Managed Kafka Client (roles/managedkafka.client) Managed Kafka Cluster Editor (roles/managedkafka.clusterEditor) Managed Kafka Connector Editor (roles/managedkafka.connectorEditor) Managed Kafka Consumer Group Editor (roles/managedkafka.consumerGroupEditor) Managed Kafka Topic Editor (roles/managedkafka.topicEditor) Service Extensions Admin (roles/networkservices.serviceExtensionsAdmin) Service Extensions Viewer (roles/networkservices.serviceExtensionsViewer) Notebooks Legacy Admin (roles/notebooks.legacyAdmin) Notebooks Legacy Viewer (roles/notebooks.legacyViewer) Notebooks Runner (roles/notebooks.runner) Cloud Run Source Developer (roles/run.sourceDeveloper) Cloud Run Source Viewer (roles/run.sourceViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Quota Administrator (roles/servicemanagement.quotaAdmin) Quota Viewer (roles/servicemanagement.quotaViewer) Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent) Google Batch Service Agent (roles/batch.serviceAgent) Chronicle Service Agent (roles/chronicle.serviceAgent) Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent) Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Container Analysis Service Agent (roles/containeranalysis.ServiceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Dataprep Service Agent (roles/dataprep.serviceAgent) Dataproc Service Agent (roles/dataproc.serviceAgent) DLP API Service Agent (roles/dlp.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) Genomics Service Agent (roles/genomics.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent) Application Integration Service Agent (roles/integrations.serviceAgent) Cloud Life Sciences Service Agent (roles/lifesciences.serviceAgent) AI Platform Notebooks Service Agent (roles/notebooks.serviceAgent) Security Center Control Service Agent (roles/securitycenter.controlServiceAgent) Security Health Analytics Service Agent (roles/securitycenter.securityHealthAnalyticsServiceAgent) Security Center Service Agent (roles/securitycenter.serviceAgent) Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
serviceusage.quotas.update	Owner (roles/owner) Editor (roles/editor) Service Usage Admin (roles/serviceusage.serviceUsageAdmin) Telco Automation Admin (roles/telcoautomation.admin) Quota Administrator (roles/servicemanagement.quotaAdmin)
serviceusage.services.disable	Owner (roles/owner) Editor (roles/editor) Service Usage Admin (roles/serviceusage.serviceUsageAdmin) Telco Automation Admin (roles/telcoautomation.admin) Consumer Procurement Entitlement Manager (roles/consumerprocurement.entitlementManager) Consumer Procurement Administrator (roles/consumerprocurement.procurementAdmin) Quota Administrator (roles/servicemanagement.quotaAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent) Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent) Security Center Control Service Agent (roles/securitycenter.controlServiceAgent) Security Center Service Agent (roles/securitycenter.serviceAgent)
serviceusage.services.enable	Owner (roles/owner) Editor (roles/editor) Assured OSS Admin (roles/assuredoss.admin) Commerce Business Enablement Configuration Admin (roles/commercebusinessenablement.admin) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Security Center Admin (roles/securitycenter.admin) Service Usage Admin (roles/serviceusage.serviceUsageAdmin) Telco Automation Admin (roles/telcoautomation.admin) Assured OSS Project Admin (roles/assuredoss.projectAdmin) Consumer Procurement Entitlement Manager (roles/consumerprocurement.entitlementManager) Consumer Procurement Administrator (roles/consumerprocurement.procurementAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Quota Administrator (roles/servicemanagement.quotaAdmin) Stackdriver Accounts Editor (roles/stackdriver.accounts.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. App Engine Standard Environment Service Agent (roles/appengine.serviceAgent) App Engine flexible environment Service Agent (roles/appengineflex.serviceAgent) Assured Workloads Service Agent (roles/assuredworkloads.serviceAgent) Chronicle Service Agent (roles/chronicle.serviceAgent) Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent) Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent) Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent) DSPM Service Agent (roles/dspm.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Firebase SDK Provisioning Service Agent (roles/firebase.sdkProvisioningServiceAgent) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) FleetEngine Service Agent (roles/fleetengine.serviceAgent) KRM API Hosting AnthosApiEndpoint Service Agent (roles/krmapihosting.anthosApiEndpointServiceAgent) Security Center Automation Service Agent (roles/securitycenter.automationServiceAgent) Security Center Control Service Agent (roles/securitycenter.controlServiceAgent) Security Center Service Agent (roles/securitycenter.serviceAgent)
serviceusage.services.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) ApiGateway Admin (roles/apigateway.admin) Apigateway Editor (roles/apigateway.editor) ApiGateway Viewer (roles/apigateway.viewer) Assured OSS Admin (roles/assuredoss.admin) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Recommendations AI Admin (roles/automlrecommendations.admin) Recommendations AI Editor (roles/automlrecommendations.editor) Recommendations AI Viewer (roles/automlrecommendations.viewer) Capacity Planner Viewer (roles/capacityplanner.viewer) Cloud Functions Admin (roles/cloudfunctions.admin) Cloudfunctions Editor (roles/cloudfunctions.editor) Cloud Functions Viewer (roles/cloudfunctions.viewer) Cloud Scheduler Admin (roles/cloudscheduler.admin) Cloud Scheduler Viewer (roles/cloudscheduler.viewer) Web Security Scanner Editor (roles/cloudsecurityscanner.editor) Web Security Scanner Viewer (roles/cloudsecurityscanner.viewer) Cloud SQL Admin (roles/cloudsql.admin) Cloud SQL Editor (roles/cloudsql.editor) Cloud SQL Viewer (roles/cloudsql.viewer) Commerce Business Enablement Configuration Admin (roles/commercebusinessenablement.admin) Commercepricemanagement Editor (roles/commercepricemanagement.editor) Commerce Price Management Viewer (roles/commercepricemanagement.viewer) Composer Administrator (roles/composer.admin) Composer User (roles/composer.user) Compute Admin (roles/compute.admin) Compute Editor (roles/compute.editor) Compute Instance Admin (beta) (roles/compute.instanceAdmin) Compute Instance Admin (v1) (roles/compute.instanceAdmin.v1) Compute Load Balancer Admin (roles/compute.loadBalancerAdmin) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Compute OS Admin Login (roles/compute.osAdminLogin) Compute OS Login (roles/compute.osLogin) Compute Security Admin (roles/compute.securityAdmin) Compute Storage Admin (roles/compute.storageAdmin) Compute Viewer (roles/compute.viewer) Dataprep Admin (roles/dataprep.admin) Deployment Manager Editor (roles/deploymentmanager.editor) Deployment Manager Viewer (roles/deploymentmanager.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Managed Kafka Admin (roles/managedkafka.admin) Managed Kafka Viewer (roles/managedkafka.viewer) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Notebooks Admin (roles/notebooks.admin) Notebooks Editor (roles/notebooks.editor) Notebooks Viewer (roles/notebooks.viewer) Pub/Sub Admin (roles/pubsub.admin) Pub/Sub Editor (roles/pubsub.editor) Pub/Sub Viewer (roles/pubsub.viewer) Security Center Admin (roles/securitycenter.admin) Service Management Administrator (roles/servicemanagement.admin) Service Usage Admin (roles/serviceusage.serviceUsageAdmin) Service Usage Consumer (roles/serviceusage.serviceUsageConsumer) Service Usage Viewer (roles/serviceusage.serviceUsageViewer) Telco Automation Admin (roles/telcoautomation.admin) Workload Manager Admin (roles/workloadmanager.admin) Android Management User (roles/androidmanagement.user) Workspace Marketplace App Configuration Admin (roles/appmetadata.workspaceMarketplaceAppConfigurationAdmin) Assured OSS Project Admin (roles/assuredoss.projectAdmin) Assured OSS Reader (roles/assuredoss.reader) Recommendations AI Admin Viewer (roles/automlrecommendations.adminViewer) Capacity Planner (roles/capacityplanner.planner) Cloud Functions Developer (roles/cloudfunctions.developer) Cloud Hub Operator (roles/cloudhub.operator) Cloud Profiler User (roles/cloudprofiler.user) Cloud Scheduler Job Runner (roles/cloudscheduler.jobRunner) Cloud SQL Studio User (roles/cloudsql.studioUser) Commerce Price Management Private Offers Admin (roles/commercepricemanagement.privateOffersAdmin) Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin) Environment and Storage Object User (roles/composer.environmentAndStorageObjectUser) Environment and Storage Object Viewer (roles/composer.environmentAndStorageObjectViewer) Composer Worker (roles/composer.worker) Compute Image User (roles/compute.imageUser) Compute Load Balancer Services User (roles/compute.loadBalancerServiceUser) Compute Organization Firewall Policy Admin (roles/compute.orgFirewallPolicyAdmin) Compute Organization Firewall Policy User (roles/compute.orgFirewallPolicyUser) Compute Organization Security Policy Admin (roles/compute.orgSecurityPolicyAdmin) Compute Organization Security Policy User (roles/compute.orgSecurityPolicyUser) Compute Organization Resource Admin (roles/compute.orgSecurityResourceAdmin) Compute packet mirroring admin (roles/compute.packetMirroringAdmin) Compute packet mirroring user (roles/compute.packetMirroringUser) Consumer Procurement Entitlement Manager (roles/consumerprocurement.entitlementManager) Consumer Procurement Entitlement Viewer (roles/consumerprocurement.entitlementViewer) Consumer Procurement Administrator (roles/consumerprocurement.procurementAdmin) Consumer Procurement Viewer (roles/consumerprocurement.procurementViewer) Dataprep User (roles/dataprep.projects.user) Deployment Manager Type Editor (roles/deploymentmanager.typeEditor) Deployment Manager Type Viewer (roles/deploymentmanager.typeViewer) Earth Engine Apps Publisher (roles/earthengine.appsPublisher) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Grow Admin (roles/firebase.growthAdmin) Firebase Grow Viewer (roles/firebase.growthViewer) Firebase Quality Admin (roles/firebase.qualityAdmin) Firebase Quality Viewer (roles/firebase.qualityViewer) Connect Gateway Admin (roles/gkehub.gatewayAdmin) Connect Gateway Editor (roles/gkehub.gatewayEditor) Connect Gateway Reader (roles/gkehub.gatewayReader) Fleet Project-level Scope Editor (roles/gkehub.scopeEditorProjectLevel) Fleet Project-level Scope Viewer (roles/gkehub.scopeViewerProjectLevel) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Managed Kafka Client (roles/managedkafka.client) Managed Kafka Cluster Editor (roles/managedkafka.clusterEditor) Managed Kafka Connector Editor (roles/managedkafka.connectorEditor) Managed Kafka Consumer Group Editor (roles/managedkafka.consumerGroupEditor) Managed Kafka Topic Editor (roles/managedkafka.topicEditor) Service Extensions Admin (roles/networkservices.serviceExtensionsAdmin) Service Extensions Viewer (roles/networkservices.serviceExtensionsViewer) Notebooks Legacy Admin (roles/notebooks.legacyAdmin) Notebooks Legacy Viewer (roles/notebooks.legacyViewer) Notebooks Runner (roles/notebooks.runner) Cloud Run Source Developer (roles/run.sourceDeveloper) Cloud Run Source Viewer (roles/run.sourceViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Quota Administrator (roles/servicemanagement.quotaAdmin) Quota Viewer (roles/servicemanagement.quotaViewer) Stackdriver Accounts Editor (roles/stackdriver.accounts.editor) Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin) Workload Manager Workload Viewer (roles/workloadmanager.workloadViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Online Prediction Service Agent (roles/aiplatform.onlinePredictionServiceAgent) Anthos Service Agent (roles/anthos.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Anthos Support Service Agent (roles/anthossupport.serviceAgent) Cloud API Gateway Management Service Agent (roles/apigateway_management.serviceAgent) App Engine Standard Environment Service Agent (roles/appengine.serviceAgent) Assured Workloads Service Agent (roles/assuredworkloads.serviceAgent) Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent) Google Batch Service Agent (roles/batch.serviceAgent) Chronicle Service Agent (roles/chronicle.serviceAgent) Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent) Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent) Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Container Analysis Service Agent (roles/containeranalysis.ServiceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Data Labeling Service Agent (roles/datalabeling.serviceAgent) Datapipelines Service Agent (roles/datapipelines.serviceAgent) Dataprep Service Agent (roles/dataprep.serviceAgent) Dataproc Service Agent (roles/dataproc.serviceAgent) DLP API Service Agent (roles/dlp.serviceAgent) DSPM Service Agent (roles/dspm.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Edge Container Service Agent (roles/edgecontainer.serviceAgent) Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Firebase SDK Provisioning Service Agent (roles/firebase.sdkProvisioningServiceAgent) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) Genomics Service Agent (roles/genomics.serviceAgent) GKE Hub Service Agent (roles/gkehub.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent) Application Integration Service Agent (roles/integrations.serviceAgent) KRM API Hosting AnthosApiEndpoint Service Agent (roles/krmapihosting.anthosApiEndpointServiceAgent) Cloud Life Sciences Service Agent (roles/lifesciences.serviceAgent) Mesh Managed Control Plane Service Agent (roles/meshcontrolplane.serviceAgent) Multi Cluster Ingress Service Agent (roles/multiclusteringress.serviceAgent) AI Platform Notebooks Service Agent (roles/notebooks.serviceAgent) Cloud Run Service Agent (roles/run.serviceAgent) Security Center Automation Service Agent (roles/securitycenter.automationServiceAgent) Security Center Control Service Agent (roles/securitycenter.controlServiceAgent) Security Health Analytics Service Agent (roles/securitycenter.securityHealthAnalyticsServiceAgent) Security Center Service Agent (roles/securitycenter.serviceAgent) Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent) Workstations Service Agent (roles/workstations.serviceAgent)
serviceusage.services.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) ApiGateway Admin (roles/apigateway.admin) Apigateway Editor (roles/apigateway.editor) ApiGateway Viewer (roles/apigateway.viewer) Assured OSS Admin (roles/assuredoss.admin) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Recommendations AI Admin (roles/automlrecommendations.admin) Recommendations AI Editor (roles/automlrecommendations.editor) Recommendations AI Viewer (roles/automlrecommendations.viewer) Cloud Functions Admin (roles/cloudfunctions.admin) Cloudfunctions Editor (roles/cloudfunctions.editor) Cloud Functions Viewer (roles/cloudfunctions.viewer) Cloud Scheduler Admin (roles/cloudscheduler.admin) Cloud Scheduler Viewer (roles/cloudscheduler.viewer) Web Security Scanner Editor (roles/cloudsecurityscanner.editor) Web Security Scanner Viewer (roles/cloudsecurityscanner.viewer) Cloud SQL Admin (roles/cloudsql.admin) Cloud SQL Editor (roles/cloudsql.editor) Cloud SQL Viewer (roles/cloudsql.viewer) Commercepricemanagement Editor (roles/commercepricemanagement.editor) Commerce Price Management Viewer (roles/commercepricemanagement.viewer) Composer Administrator (roles/composer.admin) Composer User (roles/composer.user) Compute Admin (roles/compute.admin) Compute Editor (roles/compute.editor) Compute Instance Admin (beta) (roles/compute.instanceAdmin) Compute Instance Admin (v1) (roles/compute.instanceAdmin.v1) Compute Load Balancer Admin (roles/compute.loadBalancerAdmin) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Compute OS Admin Login (roles/compute.osAdminLogin) Compute OS Login (roles/compute.osLogin) Compute Security Admin (roles/compute.securityAdmin) Compute Storage Admin (roles/compute.storageAdmin) Compute Viewer (roles/compute.viewer) Dataprep Admin (roles/dataprep.admin) Deployment Manager Editor (roles/deploymentmanager.editor) Deployment Manager Viewer (roles/deploymentmanager.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Managed Kafka Admin (roles/managedkafka.admin) Managed Kafka Viewer (roles/managedkafka.viewer) Maps Analytics Viewer (roles/mapsanalytics.viewer) Notebooks Admin (roles/notebooks.admin) Notebooks Editor (roles/notebooks.editor) Notebooks Viewer (roles/notebooks.viewer) Pub/Sub Admin (roles/pubsub.admin) Pub/Sub Editor (roles/pubsub.editor) Pub/Sub Viewer (roles/pubsub.viewer) Retail Admin (roles/retail.admin) Retail Editor (roles/retail.editor) Retail Viewer (roles/retail.viewer) Security Center Admin (roles/securitycenter.admin) Service Usage Admin (roles/serviceusage.serviceUsageAdmin) Service Usage Consumer (roles/serviceusage.serviceUsageConsumer) Service Usage Viewer (roles/serviceusage.serviceUsageViewer) Telco Automation Admin (roles/telcoautomation.admin) Android Management User (roles/androidmanagement.user) Assured OSS Project Admin (roles/assuredoss.projectAdmin) Assured OSS Reader (roles/assuredoss.reader) Recommendations AI Admin Viewer (roles/automlrecommendations.adminViewer) Cloud Functions Developer (roles/cloudfunctions.developer) Cloud Hub Operator (roles/cloudhub.operator) Cloud Profiler User (roles/cloudprofiler.user) Cloud Scheduler Job Runner (roles/cloudscheduler.jobRunner) Cloud SQL Studio User (roles/cloudsql.studioUser) Commerce Price Management Private Offers Admin (roles/commercepricemanagement.privateOffersAdmin) Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin) Environment and Storage Object User (roles/composer.environmentAndStorageObjectUser) Environment and Storage Object Viewer (roles/composer.environmentAndStorageObjectViewer) Composer Worker (roles/composer.worker) Compute Image User (roles/compute.imageUser) Compute Load Balancer Services User (roles/compute.loadBalancerServiceUser) Compute Organization Firewall Policy Admin (roles/compute.orgFirewallPolicyAdmin) Compute Organization Firewall Policy User (roles/compute.orgFirewallPolicyUser) Compute Organization Security Policy Admin (roles/compute.orgSecurityPolicyAdmin) Compute Organization Security Policy User (roles/compute.orgSecurityPolicyUser) Compute Organization Resource Admin (roles/compute.orgSecurityResourceAdmin) Compute packet mirroring admin (roles/compute.packetMirroringAdmin) Compute packet mirroring user (roles/compute.packetMirroringUser) Consumer Procurement Entitlement Manager (roles/consumerprocurement.entitlementManager) Consumer Procurement Entitlement Viewer (roles/consumerprocurement.entitlementViewer) Consumer Procurement Administrator (roles/consumerprocurement.procurementAdmin) Consumer Procurement Viewer (roles/consumerprocurement.procurementViewer) Dataprep User (roles/dataprep.projects.user) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Grow Admin (roles/firebase.growthAdmin) Firebase Grow Viewer (roles/firebase.growthViewer) Firebase Quality Admin (roles/firebase.qualityAdmin) Firebase Quality Viewer (roles/firebase.qualityViewer) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Managed Kafka Client (roles/managedkafka.client) Managed Kafka Cluster Editor (roles/managedkafka.clusterEditor) Managed Kafka Connector Editor (roles/managedkafka.connectorEditor) Managed Kafka Consumer Group Editor (roles/managedkafka.consumerGroupEditor) Managed Kafka Topic Editor (roles/managedkafka.topicEditor) Mobility Solutions Overages Viewer (roles/mapsanalytics.mobilitySolutionsOverageViewer) Notebooks Legacy Admin (roles/notebooks.legacyAdmin) Notebooks Legacy Viewer (roles/notebooks.legacyViewer) Notebooks Runner (roles/notebooks.runner) Retail Merchant Approver (roles/retail.merchantApprover) Retail Merchant Creator (roles/retail.merchantCreator) Cloud Run Source Developer (roles/run.sourceDeveloper) Cloud Run Source Viewer (roles/run.sourceViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Quota Administrator (roles/servicemanagement.quotaAdmin) Quota Viewer (roles/servicemanagement.quotaViewer) Workload Manager Workload Viewer (roles/workloadmanager.workloadViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (roles/aiplatform.serviceAgent) Anthos Service Agent (roles/anthos.serviceAgent) Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent) Google Batch Service Agent (roles/batch.serviceAgent) Chronicle Service Agent (roles/chronicle.serviceAgent) Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Container Analysis Service Agent (roles/containeranalysis.ServiceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Data Labeling Service Agent (roles/datalabeling.serviceAgent) Datapipelines Service Agent (roles/datapipelines.serviceAgent) Dataprep Service Agent (roles/dataprep.serviceAgent) Dataproc Service Agent (roles/dataproc.serviceAgent) DLP API Service Agent (roles/dlp.serviceAgent) DSPM Service Agent (roles/dspm.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Edge Container Service Agent (roles/edgecontainer.serviceAgent) Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) Genomics Service Agent (roles/genomics.serviceAgent) GKE Hub Service Agent (roles/gkehub.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent) Application Integration Service Agent (roles/integrations.serviceAgent) KRM API Hosting AnthosApiEndpoint Service Agent (roles/krmapihosting.anthosApiEndpointServiceAgent) Cloud Life Sciences Service Agent (roles/lifesciences.serviceAgent) Multi Cluster Ingress Service Agent (roles/multiclusteringress.serviceAgent) AI Platform Notebooks Service Agent (roles/notebooks.serviceAgent) Security Center Control Service Agent (roles/securitycenter.controlServiceAgent) Security Health Analytics Service Agent (roles/securitycenter.securityHealthAnalyticsServiceAgent) Security Center Service Agent (roles/securitycenter.serviceAgent) Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
serviceusage.services.use	Owner (roles/owner) Editor (roles/editor) Actions Admin (roles/actions.Admin) Actions Viewer (roles/actions.Viewer) DLP Administrator (roles/dlp.admin) DLP User (roles/dlp.user) Cloud Memorystore Redis Admin (roles/redis.admin) Cloud Memorystore Redis Editor (roles/redis.editor) Cloud Memorystore Redis Viewer (roles/redis.viewer) Security Center Admin (roles/securitycenter.admin) Service Usage Admin (roles/serviceusage.serviceUsageAdmin) Service Usage Consumer (roles/serviceusage.serviceUsageConsumer) Telco Automation Admin (roles/telcoautomation.admin) Container Registry -> Artifact Registry Migration Admin (roles/artifactregistry.containerRegistryMigrationAdmin) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Fleet Engine Delivery Admin (roles/fleetengine.deliveryAdmin) Fleet Engine On-Demand Admin (roles/fleetengine.ondemandAdmin) Gemini Cloud Assist Investigation Admin (roles/geminicloudassist.investigationAdmin) Gemini Cloud Assist Investigation Creator (roles/geminicloudassist.investigationCreator) Gemini Cloud Assist Investigation Editor (roles/geminicloudassist.investigationEditor) Gemini Cloud Assist Investigation Owner (roles/geminicloudassist.investigationOwner) Gemini Cloud Assist Investigation User (roles/geminicloudassist.investigationUser) Gemini Cloud Assist Investigation Viewer (roles/geminicloudassist.investigationViewer) Gemini Cloud Assist User (roles/geminicloudassist.user) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Cloud Run Source Developer (roles/run.sourceDeveloper) SLZ BQDW Blueprint Project Level Remediator (roles/securedlandingzone.bqdwProjectRemediator) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Agent Sandbox Service Agent (roles/aiplatform.agentSandboxServiceAgent) Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent) Vertex AI Extension Service Agent (roles/aiplatform.extensionServiceAgent) Vertex AI Model Monitoring Service Agent (roles/aiplatform.modelMonitoringServiceAgent) Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent) Vertex AI Service Agent (roles/aiplatform.serviceAgent) Vertex AI Tuning Service Agent (roles/aiplatform.tuningServiceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Assured Workloads Service Agent (roles/assuredworkloads.serviceAgent) AutoML Service Agent (roles/automl.serviceAgent) Google Batch Service Agent (roles/batch.serviceAgent) BigQuery Data Transfer Service Agent (roles/bigquerydatatransfer.serviceAgent) Customer Engagement Suite Service Agent (roles/ces.serviceAgent) Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent) Cloud Build Service Agent (roles/cloudbuild.serviceAgent) Infrastructure Manager Service Agent (roles/cloudconfig.serviceAgent) Cloud Deploy Service Agent (roles/clouddeploy.serviceAgent) Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent) Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent) Contact Center AI Insights Service Agent (roles/contactcenterinsights.serviceAgent) Kubernetes Engine Default Node Service Agent (roles/container.defaultNodeServiceAgent) [Deprecated] Kubernetes Engine Node Service Agent (roles/container.nodeServiceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Database Migration Service Agent (roles/datamigration.serviceAgent) Cloud Dataplex Service Agent (roles/dataplex.serviceAgent) Dataproc Service Agent (roles/dataproc.serviceAgent) Dataproc Resource Manager Node Service Agent (roles/dataprocrm.nodeServiceAgent) Dialogflow Service Agent (roles/dialogflow.serviceAgent) DLP API Service Agent (roles/dlp.serviceAgent) Eventarc Service Agent (roles/eventarc.serviceAgent) External Exposure Service Agent (roles/externalexposure.serviceAgent) Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Firebase App Check Service Agent (roles/firebaseappcheck.serviceAgent) Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent) Firebase Crashlytics Service Agent (roles/firebasecrashlytics.serviceAgent) Firebase Realtime Database Service Agent (roles/firebasedatabase.serviceAgent) Firebase Data Connect Service Agent (roles/firebasedataconnect.serviceAgent) Genomics Service Agent (roles/genomics.serviceAgent) Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Anthos Multi-Cloud Control Plane Machine Service Agent (roles/gkemulticloud.controlPlaneMachineServiceAgent) Anthos Multi-Cloud Node Pool Machine Service Agent (roles/gkemulticloud.nodePoolMachineServiceAgent) Cluster Director Service Agent (roles/hypercomputecluster.serviceAgent) KRM API Hosting AnthosApiEndpoint Service Agent (roles/krmapihosting.anthosApiEndpointServiceAgent) KRM API Hosting Service Agent (roles/krmapihosting.serviceAgent) Cloud Life Sciences Service Agent (roles/lifesciences.serviceAgent) Looker Service Agent (roles/looker.restrictedServiceAgent) Looker Service Agent (roles/looker.serviceAgent) Managed Flink Service Agent (roles/managedflink.serviceAgent) Mesh Managed Control Plane Service Agent (roles/meshcontrolplane.serviceAgent) Mesh Data Plane Service Agent (roles/meshdataplane.serviceAgent) Model Armor Service Agent (roles/modelarmor.serviceAgent) Monitoring Service Agent (roles/monitoring.notificationServiceAgent) Multi Cluster Ingress Service Agent (roles/multiclusteringress.serviceAgent) Cloud Pub/Sub Service Agent (roles/pubsub.serviceAgent) Cloud Run Service Agent (roles/run.serviceAgent) Serverless Integrations Service Agent (roles/runapps.serviceAgent) Secured Landing Zone Service Agent (roles/securedlandingzone.serviceAgent) Secure Source Manager Service Agent (roles/securesourcemanager.serviceAgent) StorageInsights Service Agent (roles/storageinsights.serviceAgent) Cloud Vision AI Service Agent (roles/visionai.serviceAgent) Cloud Workflows Service Agent (roles/workflows.serviceAgent) Workload Certificate Service Agent (roles/workloadcertificate.serviceAgent) Workload Manager Service Agent (roles/workloadmanager.serviceAgent)
serviceusage.values.test	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) ApiGateway Admin (roles/apigateway.admin) Apigateway Editor (roles/apigateway.editor) ApiGateway Viewer (roles/apigateway.viewer) Assured OSS Admin (roles/assuredoss.admin) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Recommendations AI Admin (roles/automlrecommendations.admin) Recommendations AI Editor (roles/automlrecommendations.editor) Recommendations AI Viewer (roles/automlrecommendations.viewer) Capacity Planner Viewer (roles/capacityplanner.viewer) Cloud Functions Admin (roles/cloudfunctions.admin) Cloudfunctions Editor (roles/cloudfunctions.editor) Cloud Functions Viewer (roles/cloudfunctions.viewer) Cloud Scheduler Admin (roles/cloudscheduler.admin) Cloud Scheduler Viewer (roles/cloudscheduler.viewer) Web Security Scanner Editor (roles/cloudsecurityscanner.editor) Web Security Scanner Viewer (roles/cloudsecurityscanner.viewer) Cloud SQL Admin (roles/cloudsql.admin) Cloud SQL Editor (roles/cloudsql.editor) Cloud SQL Viewer (roles/cloudsql.viewer) Commercepricemanagement Editor (roles/commercepricemanagement.editor) Commerce Price Management Viewer (roles/commercepricemanagement.viewer) Composer Administrator (roles/composer.admin) Composer User (roles/composer.user) Compute Admin (roles/compute.admin) Compute Editor (roles/compute.editor) Compute Instance Admin (beta) (roles/compute.instanceAdmin) Compute Instance Admin (v1) (roles/compute.instanceAdmin.v1) Compute Load Balancer Admin (roles/compute.loadBalancerAdmin) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Compute OS Admin Login (roles/compute.osAdminLogin) Compute OS Login (roles/compute.osLogin) Compute Security Admin (roles/compute.securityAdmin) Compute Storage Admin (roles/compute.storageAdmin) Compute Viewer (roles/compute.viewer) Dataprep Admin (roles/dataprep.admin) Deployment Manager Editor (roles/deploymentmanager.editor) Deployment Manager Viewer (roles/deploymentmanager.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Managed Kafka Admin (roles/managedkafka.admin) Managed Kafka Viewer (roles/managedkafka.viewer) Maps Analytics Viewer (roles/mapsanalytics.viewer) Monitoring Admin (roles/monitoring.admin) Monitoring Editor (roles/monitoring.editor) Notebooks Admin (roles/notebooks.admin) Notebooks Editor (roles/notebooks.editor) Notebooks Viewer (roles/notebooks.viewer) Pub/Sub Admin (roles/pubsub.admin) Pub/Sub Editor (roles/pubsub.editor) Pub/Sub Viewer (roles/pubsub.viewer) Security Center Admin (roles/securitycenter.admin) Service Management Administrator (roles/servicemanagement.admin) Service Usage Admin (roles/serviceusage.serviceUsageAdmin) Service Usage Consumer (roles/serviceusage.serviceUsageConsumer) Service Usage Viewer (roles/serviceusage.serviceUsageViewer) Telco Automation Admin (roles/telcoautomation.admin) Workload Manager Admin (roles/workloadmanager.admin) Android Management User (roles/androidmanagement.user) Assured OSS Project Admin (roles/assuredoss.projectAdmin) Assured OSS Reader (roles/assuredoss.reader) Recommendations AI Admin Viewer (roles/automlrecommendations.adminViewer) Capacity Planner (roles/capacityplanner.planner) Cloud Functions Developer (roles/cloudfunctions.developer) Cloud Hub Operator (roles/cloudhub.operator) Cloud Profiler User (roles/cloudprofiler.user) Cloud Scheduler Job Runner (roles/cloudscheduler.jobRunner) Commerce Price Management Private Offers Admin (roles/commercepricemanagement.privateOffersAdmin) Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin) Environment and Storage Object User (roles/composer.environmentAndStorageObjectUser) Environment and Storage Object Viewer (roles/composer.environmentAndStorageObjectViewer) Composer Worker (roles/composer.worker) Compute Image User (roles/compute.imageUser) Compute Load Balancer Services User (roles/compute.loadBalancerServiceUser) Compute Organization Firewall Policy Admin (roles/compute.orgFirewallPolicyAdmin) Compute Organization Firewall Policy User (roles/compute.orgFirewallPolicyUser) Compute Organization Security Policy Admin (roles/compute.orgSecurityPolicyAdmin) Compute Organization Security Policy User (roles/compute.orgSecurityPolicyUser) Compute Organization Resource Admin (roles/compute.orgSecurityResourceAdmin) Compute packet mirroring admin (roles/compute.packetMirroringAdmin) Compute packet mirroring user (roles/compute.packetMirroringUser) Consumer Procurement Entitlement Manager (roles/consumerprocurement.entitlementManager) Consumer Procurement Entitlement Viewer (roles/consumerprocurement.entitlementViewer) Consumer Procurement Administrator (roles/consumerprocurement.procurementAdmin) Consumer Procurement Viewer (roles/consumerprocurement.procurementViewer) Dataprep User (roles/dataprep.projects.user) Deployment Manager Type Editor (roles/deploymentmanager.typeEditor) Deployment Manager Type Viewer (roles/deploymentmanager.typeViewer) Earth Engine Apps Publisher (roles/earthengine.appsPublisher) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Grow Admin (roles/firebase.growthAdmin) Firebase Grow Viewer (roles/firebase.growthViewer) Firebase Quality Admin (roles/firebase.qualityAdmin) Firebase Quality Viewer (roles/firebase.qualityViewer) Connect Gateway Admin (roles/gkehub.gatewayAdmin) Connect Gateway Editor (roles/gkehub.gatewayEditor) Connect Gateway Reader (roles/gkehub.gatewayReader) Fleet Project-level Scope Editor (roles/gkehub.scopeEditorProjectLevel) Fleet Project-level Scope Viewer (roles/gkehub.scopeViewerProjectLevel) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Managed Kafka Client (roles/managedkafka.client) Managed Kafka Cluster Editor (roles/managedkafka.clusterEditor) Managed Kafka Connector Editor (roles/managedkafka.connectorEditor) Managed Kafka Consumer Group Editor (roles/managedkafka.consumerGroupEditor) Managed Kafka Topic Editor (roles/managedkafka.topicEditor) Mobility Solutions Overages Viewer (roles/mapsanalytics.mobilitySolutionsOverageViewer) Notebooks Legacy Admin (roles/notebooks.legacyAdmin) Notebooks Legacy Viewer (roles/notebooks.legacyViewer) Notebooks Runner (roles/notebooks.runner) Cloud Run Source Developer (roles/run.sourceDeveloper) Cloud Run Source Viewer (roles/run.sourceViewer) Security Center Admin Editor (roles/securitycenter.adminEditor) Security Center Admin Viewer (roles/securitycenter.adminViewer) Quota Administrator (roles/servicemanagement.quotaAdmin) Quota Viewer (roles/servicemanagement.quotaViewer) Stackdriver Accounts Editor (roles/stackdriver.accounts.editor) Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin) Workload Manager Workload Viewer (roles/workloadmanager.workloadViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Service Agent (roles/anthos.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Anthos Support Service Agent (roles/anthossupport.serviceAgent) Cloud API Gateway Management Service Agent (roles/apigateway_management.serviceAgent) App Engine Standard Environment Service Agent (roles/appengine.serviceAgent) Assured Workloads Service Agent (roles/assuredworkloads.serviceAgent) Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent) Google Batch Service Agent (roles/batch.serviceAgent) Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent) Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Container Analysis Service Agent (roles/containeranalysis.ServiceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Data Labeling Service Agent (roles/datalabeling.serviceAgent) Datapipelines Service Agent (roles/datapipelines.serviceAgent) Dataprep Service Agent (roles/dataprep.serviceAgent) Dataproc Service Agent (roles/dataproc.serviceAgent) DLP API Service Agent (roles/dlp.serviceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent) Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Firebase SDK Provisioning Service Agent (roles/firebase.sdkProvisioningServiceAgent) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) Genomics Service Agent (roles/genomics.serviceAgent) GKE Hub Service Agent (roles/gkehub.serviceAgent) Cluster Director Shared VPC Service Agent (roles/hypercomputecluster.sharedVpcServiceAgent) Application Integration Service Agent (roles/integrations.serviceAgent) KRM API Hosting AnthosApiEndpoint Service Agent (roles/krmapihosting.anthosApiEndpointServiceAgent) Cloud Life Sciences Service Agent (roles/lifesciences.serviceAgent) Mesh Managed Control Plane Service Agent (roles/meshcontrolplane.serviceAgent) Multi Cluster Ingress Service Agent (roles/multiclusteringress.serviceAgent) AI Platform Notebooks Service Agent (roles/notebooks.serviceAgent) Security Center Automation Service Agent (roles/securitycenter.automationServiceAgent) Security Center Control Service Agent (roles/securitycenter.controlServiceAgent) Security Health Analytics Service Agent (roles/securitycenter.securityHealthAnalyticsServiceAgent) Security Center Service Agent (roles/securitycenter.serviceAgent)