Workload Identity API roles and permissions

This page lists the IAM roles and permissions for Workload Identity API. To search through all roles and permissions, see the role and permission index.

Workload Identity API roles

Role	Permissions
Workload Identity API Admin (roles/workloadidentity.admin) Full access to Workload Identity API resources.	resourcemanager.projects.get resourcemanager.projects.list workloadidentity.* workloadidentity.locations.get workloadidentity.locations.list workloadidentity.operations.cancel workloadidentity.operations.delete workloadidentity.operations.get workloadidentity.operations.list workloadidentity.serviceAgents.create
Workload Identity API Viewer (roles/workloadidentity.viewer) Readonly access to Workload Identity API resources.	resourcemanager.projects.get resourcemanager.projects.list workloadidentity.locations.* workloadidentity.locations.get workloadidentity.locations.list workloadidentity.operations.get workloadidentity.operations.list

Workload Identity API permissions

Permission	Included in roles
workloadidentity.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Workload Identity API Admin (roles/workloadidentity.admin) Workload Identity API Viewer (roles/workloadidentity.viewer) Support User (roles/iam.supportUser)
workloadidentity.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Workload Identity API Admin (roles/workloadidentity.admin) Workload Identity API Viewer (roles/workloadidentity.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
workloadidentity.operations.cancel	Owner (roles/owner) Editor (roles/editor) Workload Identity API Admin (roles/workloadidentity.admin)
workloadidentity.operations.delete	Owner (roles/owner) Editor (roles/editor) Workload Identity API Admin (roles/workloadidentity.admin)
workloadidentity.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Workload Identity API Admin (roles/workloadidentity.admin) Workload Identity API Viewer (roles/workloadidentity.viewer) Support User (roles/iam.supportUser)
workloadidentity.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Workload Identity API Admin (roles/workloadidentity.admin) Workload Identity API Viewer (roles/workloadidentity.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
workloadidentity.serviceAgents.create	Owner (roles/owner) Editor (roles/editor) Workload Identity API Admin (roles/workloadidentity.admin)