Telemetry API roles and permissions

This page lists the IAM roles and permissions for Telemetry API. To search through all roles and permissions, see the role and permission index.

Telemetry API roles

Role	Permissions
Telemetry Admin (roles/telemetry.admin) Admin role for telemetry	resourcemanager.projects.get resourcemanager.projects.list telemetry.* telemetry.consumers.getIamPolicy telemetry.consumers.setIamPolicy telemetry.consumers.writeLogs telemetry.consumers.writeMetrics telemetry.consumers.writeTraces telemetry.traces.write
Telemetry Editor (roles/telemetry.editor) Editor role for telemetry	resourcemanager.projects.get resourcemanager.projects.list telemetry.traces.write
Consumer Admin ^Beta (roles/telemetry.consumerAdmin) Grants permission management access to consumer resources.	telemetry.consumers.getIamPolicy telemetry.consumers.setIamPolicy
Cloud Telemetry Logs Writer ^Beta (roles/telemetry.logsWriter) Access to write logs.	logging.logEntries.create
Cloud Telemetry Metrics Writer (roles/telemetry.metricsWriter) Access to write metrics.	monitoring.timeSeries.create
Integrated Service Telemetry Logs Writer ^Beta (roles/telemetry.serviceLogsWriter) Allows an onboarded service to write log data to a destination.	telemetry.consumers.writeLogs
Integrated Service Telemetry Metrics Writer ^Beta (roles/telemetry.serviceMetricsWriter) Allows an onboarded service to write metrics data to a destination.	telemetry.consumers.writeMetrics
Integrated Service Telemetry Writer ^Beta (roles/telemetry.serviceTelemetryWriter) Allows an onboarded service to write all telemetry data to a destination.	telemetry.consumers.writeLogs telemetry.consumers.writeMetrics telemetry.consumers.writeTraces
Integrated Service Telemetry Traces Writer ^Beta (roles/telemetry.serviceTracesWriter) Allows an onboarded service to write trace data to a destination.	telemetry.consumers.writeTraces
Cloud Telemetry Traces Writer (roles/telemetry.tracesWriter) Access to write trace spans.	telemetry.traces.write
Cloud Telemetry Writer (roles/telemetry.writer) Full access to write all telemetry data.	logging.logEntries.create monitoring.timeSeries.create telemetry.traces.write

Telemetry API permissions

Permission	Included in roles
telemetry.consumers.getIamPolicy	Owner (roles/owner) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Telemetry Admin (roles/telemetry.admin) Security Auditor (roles/iam.securityAuditor) Consumer Admin (roles/telemetry.consumerAdmin)
telemetry.consumers.setIamPolicy	Owner (roles/owner) Security Admin (roles/iam.securityAdmin) Telemetry Admin (roles/telemetry.admin) Consumer Admin (roles/telemetry.consumerAdmin)
telemetry.consumers.writeLogs	Owner (roles/owner) Telemetry Admin (roles/telemetry.admin) Integrated Service Telemetry Logs Writer (roles/telemetry.serviceLogsWriter) Integrated Service Telemetry Writer (roles/telemetry.serviceTelemetryWriter)
telemetry.consumers.writeMetrics	Owner (roles/owner) Telemetry Admin (roles/telemetry.admin) Integrated Service Telemetry Metrics Writer (roles/telemetry.serviceMetricsWriter) Integrated Service Telemetry Writer (roles/telemetry.serviceTelemetryWriter)
telemetry.consumers.writeTraces	Owner (roles/owner) Telemetry Admin (roles/telemetry.admin) Integrated Service Telemetry Writer (roles/telemetry.serviceTelemetryWriter) Integrated Service Telemetry Traces Writer (roles/telemetry.serviceTracesWriter)
telemetry.traces.write	Owner (roles/owner) Editor (roles/editor) Cloud Trace Admin (roles/cloudtrace.admin) Telemetry Admin (roles/telemetry.admin) Telemetry Editor (roles/telemetry.editor) Cloud Trace Agent (roles/cloudtrace.agent) Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner) Cloud Telemetry Traces Writer (roles/telemetry.tracesWriter) Cloud Telemetry Writer (roles/telemetry.writer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent) Apigee Core Service Agent (roles/apigee.coreServiceAgent) Apigee Service Agent (roles/apigee.serviceAgent) Kubernetes Engine Default Node Service Agent (roles/container.defaultNodeServiceAgent) Firebase Machine Learning Service Agent (roles/firebaseml.serviceAgent) Mesh Data Plane Service Agent (roles/meshdataplane.serviceAgent)