This page lists all the IAM roles and
permissions for Sensitive Data Protection.

## Sensitive Data Protection roles

| Role | Permissions |
|---|---|
| #### DLP Administrator (`roles/dlp.admin`) Administer DLP including jobs and templates. | `dlp.*` - `dlp.analyzeRiskTemplates.create` - `dlp.analyzeRiskTemplates.delete` - `dlp.analyzeRiskTemplates.get` - `dlp.analyzeRiskTemplates.list` - `dlp.analyzeRiskTemplates.update` - `dlp.charts.get` - `dlp.columnDataProfiles.get` - `dlp.columnDataProfiles.list` - `dlp.connections.create` - `dlp.connections.delete` - `dlp.connections.get` - `dlp.connections.list` - `dlp.connections.search` - `dlp.connections.update` - `dlp.contentPolicies.apply` - `dlp.contentPolicies.create` - `dlp.contentPolicies.delete` - `dlp.contentPolicies.get` - `dlp.contentPolicies.list` - `dlp.contentPolicies.update` - `dlp.deidentifyTemplates.create` - `dlp.deidentifyTemplates.delete` - `dlp.deidentifyTemplates.get` - `dlp.deidentifyTemplates.list` - `dlp.deidentifyTemplates.update` - `dlp.estimates.cancel` - `dlp.estimates.create` - `dlp.estimates.delete` - `dlp.estimates.get` - `dlp.estimates.list` - `dlp.fileStoreProfiles.delete` - `dlp.fileStoreProfiles.get` - `dlp.fileStoreProfiles.list` - `dlp.inspectFindings.list` - `dlp.inspectTemplates.create` - `dlp.inspectTemplates.delete` - `dlp.inspectTemplates.get` - `dlp.inspectTemplates.list` - `dlp.inspectTemplates.update` - `dlp.jobTriggers.create` - `dlp.jobTriggers.delete` - `dlp.jobTriggers.get` - `dlp.jobTriggers.hybridInspect` - `dlp.jobTriggers.list` - `dlp.jobTriggers.update` - `dlp.jobs.cancel` - `dlp.jobs.create` - `dlp.jobs.delete` - `dlp.jobs.get` - `dlp.jobs.hybridInspect` - `dlp.jobs.list` - `dlp.kms.encrypt` - `dlp.locations.get` - `dlp.locations.list` - `dlp.projectDataProfiles.get` - `dlp.projectDataProfiles.list` - `dlp.storedInfoTypes.create` - `dlp.storedInfoTypes.delete` - `dlp.storedInfoTypes.get` - `dlp.storedInfoTypes.list` - `dlp.storedInfoTypes.update` - `dlp.subscriptions.cancel` - `dlp.subscriptions.create` - `dlp.subscriptions.get` - `dlp.subscriptions.list` - `dlp.subscriptions.update` - `dlp.tableDataProfiles.delete` - `dlp.tableDataProfiles.get` - `dlp.tableDataProfiles.list` `resourcemanager.projects.get` `resourcemanager.projects.list` `serviceusage.services.use` |
| #### DLP Editor (`roles/dlp.editor`) Editor role for DLP | `dlp.analyzeRiskTemplates.*` - `dlp.analyzeRiskTemplates.create` - `dlp.analyzeRiskTemplates.delete` - `dlp.analyzeRiskTemplates.get` - `dlp.analyzeRiskTemplates.list` - `dlp.analyzeRiskTemplates.update` `dlp.charts.get` `dlp.columnDataProfiles.*` - `dlp.columnDataProfiles.get` - `dlp.columnDataProfiles.list` `dlp.connections.*` - `dlp.connections.create` - `dlp.connections.delete` - `dlp.connections.get` - `dlp.connections.list` - `dlp.connections.search` - `dlp.connections.update` `dlp.contentPolicies.*` - `dlp.contentPolicies.apply` - `dlp.contentPolicies.create` - `dlp.contentPolicies.delete` - `dlp.contentPolicies.get` - `dlp.contentPolicies.list` - `dlp.contentPolicies.update` `dlp.deidentifyTemplates.*` - `dlp.deidentifyTemplates.create` - `dlp.deidentifyTemplates.delete` - `dlp.deidentifyTemplates.get` - `dlp.deidentifyTemplates.list` - `dlp.deidentifyTemplates.update` `dlp.estimates.*` - `dlp.estimates.cancel` - `dlp.estimates.create` - `dlp.estimates.delete` - `dlp.estimates.get` - `dlp.estimates.list` `dlp.fileStoreProfiles.*` - `dlp.fileStoreProfiles.delete` - `dlp.fileStoreProfiles.get` - `dlp.fileStoreProfiles.list` `dlp.inspectFindings.list` `dlp.inspectTemplates.*` - `dlp.inspectTemplates.create` - `dlp.inspectTemplates.delete` - `dlp.inspectTemplates.get` - `dlp.inspectTemplates.list` - `dlp.inspectTemplates.update` `dlp.jobTriggers.*` - `dlp.jobTriggers.create` - `dlp.jobTriggers.delete` - `dlp.jobTriggers.get` - `dlp.jobTriggers.hybridInspect` - `dlp.jobTriggers.list` - `dlp.jobTriggers.update` `dlp.jobs.*` - `dlp.jobs.cancel` - `dlp.jobs.create` - `dlp.jobs.delete` - `dlp.jobs.get` - `dlp.jobs.hybridInspect` - `dlp.jobs.list` `dlp.locations.*` - `dlp.locations.get` - `dlp.locations.list` `dlp.projectDataProfiles.*` - `dlp.projectDataProfiles.get` - `dlp.projectDataProfiles.list` `dlp.storedInfoTypes.*` - `dlp.storedInfoTypes.create` - `dlp.storedInfoTypes.delete` - `dlp.storedInfoTypes.get` - `dlp.storedInfoTypes.list` - `dlp.storedInfoTypes.update` `dlp.subscriptions.*` - `dlp.subscriptions.cancel` - `dlp.subscriptions.create` - `dlp.subscriptions.get` - `dlp.subscriptions.list` - `dlp.subscriptions.update` `dlp.tableDataProfiles.*` - `dlp.tableDataProfiles.delete` - `dlp.tableDataProfiles.get` - `dlp.tableDataProfiles.list` `resourcemanager.projects.get` `resourcemanager.projects.list` |
| #### DLP User (`roles/dlp.user`) Inspect, Redact, and De-identify Content | `dlp.contentPolicies.apply` `dlp.kms.encrypt` `dlp.locations.*` - `dlp.locations.get` - `dlp.locations.list` `serviceusage.services.use` |
| #### DLP Viewer (`roles/dlp.viewer`) Viewer role for DLP | `dlp.analyzeRiskTemplates.get` `dlp.analyzeRiskTemplates.list` `dlp.charts.get` `dlp.columnDataProfiles.*` - `dlp.columnDataProfiles.get` - `dlp.columnDataProfiles.list` `dlp.connections.get` `dlp.connections.list` `dlp.connections.search` `dlp.contentPolicies.get` `dlp.contentPolicies.list` `dlp.deidentifyTemplates.get` `dlp.deidentifyTemplates.list` `dlp.estimates.get` `dlp.estimates.list` `dlp.fileStoreProfiles.get` `dlp.fileStoreProfiles.list` `dlp.inspectFindings.list` `dlp.inspectTemplates.get` `dlp.inspectTemplates.list` `dlp.jobTriggers.get` `dlp.jobTriggers.list` `dlp.jobs.get` `dlp.jobs.list` `dlp.locations.*` - `dlp.locations.get` - `dlp.locations.list` `dlp.projectDataProfiles.*` - `dlp.projectDataProfiles.get` - `dlp.projectDataProfiles.list` `dlp.storedInfoTypes.get` `dlp.storedInfoTypes.list` `dlp.subscriptions.get` `dlp.subscriptions.list` `dlp.tableDataProfiles.get` `dlp.tableDataProfiles.list` `resourcemanager.projects.get` `resourcemanager.projects.list` |
| #### DLP Analyze Risk Templates Editor (`roles/dlp.analyzeRiskTemplatesEditor`) Edit DLP analyze risk templates. | `dlp.analyzeRiskTemplates.*` - `dlp.analyzeRiskTemplates.create` - `dlp.analyzeRiskTemplates.delete` - `dlp.analyzeRiskTemplates.get` - `dlp.analyzeRiskTemplates.list` - `dlp.analyzeRiskTemplates.update` |
| #### DLP Analyze Risk Templates Reader (`roles/dlp.analyzeRiskTemplatesReader`) Read DLP analyze risk templates. | `dlp.analyzeRiskTemplates.get` `dlp.analyzeRiskTemplates.list` |
| #### DLP Column Data Profiles Reader (`roles/dlp.columnDataProfilesReader`) Read DLP column profiles. | `dlp.columnDataProfiles.*` - `dlp.columnDataProfiles.get` - `dlp.columnDataProfiles.list` |
| #### DLP Connections Admin (`roles/dlp.connectionsAdmin`) Manage DLP Connections. | `dlp.connections.*` - `dlp.connections.create` - `dlp.connections.delete` - `dlp.connections.get` - `dlp.connections.list` - `dlp.connections.search` - `dlp.connections.update` `resourcemanager.projects.get` `resourcemanager.projects.list` |
| #### DLP Connections Viewer (`roles/dlp.connectionsReader`) View DLP Connections. | `dlp.connections.get` `dlp.connections.list` `dlp.connections.search` |
| #### DLP Content Policies Consumer (`roles/dlp.contentPoliciesConsumer`) Apply content policies. | `dlp.contentPolicies.apply` `dlp.contentPolicies.get` |
| #### DLP Content Policies Editor (`roles/dlp.contentPoliciesEditor`) Edit DLP content policies. | `dlp.contentPolicies.*` - `dlp.contentPolicies.apply` - `dlp.contentPolicies.create` - `dlp.contentPolicies.delete` - `dlp.contentPolicies.get` - `dlp.contentPolicies.list` - `dlp.contentPolicies.update` |
| #### DLP Content Policies Reader (`roles/dlp.contentPoliciesReader`) Read DLP content policies. | `dlp.contentPolicies.get` `dlp.contentPolicies.list` |
| #### DLP Data Profiles Admin (`roles/dlp.dataProfilesAdmin`) Manage DLP profiles. | `dlp.charts.get` `dlp.columnDataProfiles.*` - `dlp.columnDataProfiles.get` - `dlp.columnDataProfiles.list` `dlp.fileStoreProfiles.*` - `dlp.fileStoreProfiles.delete` - `dlp.fileStoreProfiles.get` - `dlp.fileStoreProfiles.list` `dlp.projectDataProfiles.*` - `dlp.projectDataProfiles.get` - `dlp.projectDataProfiles.list` `dlp.tableDataProfiles.*` - `dlp.tableDataProfiles.delete` - `dlp.tableDataProfiles.get` - `dlp.tableDataProfiles.list` |
| #### DLP Data Profiles Reader (`roles/dlp.dataProfilesReader`) Read DLP profiles. | `dlp.charts.get` `dlp.columnDataProfiles.*` - `dlp.columnDataProfiles.get` - `dlp.columnDataProfiles.list` `dlp.fileStoreProfiles.get` `dlp.fileStoreProfiles.list` `dlp.projectDataProfiles.*` - `dlp.projectDataProfiles.get` - `dlp.projectDataProfiles.list` `dlp.tableDataProfiles.get` `dlp.tableDataProfiles.list` |
| #### DLP De-identify Templates Editor (`roles/dlp.deidentifyTemplatesEditor`) Edit DLP de-identify templates. | `dlp.deidentifyTemplates.*` - `dlp.deidentifyTemplates.create` - `dlp.deidentifyTemplates.delete` - `dlp.deidentifyTemplates.get` - `dlp.deidentifyTemplates.list` - `dlp.deidentifyTemplates.update` |
| #### DLP De-identify Templates Reader (`roles/dlp.deidentifyTemplatesReader`) Read DLP de-identify templates. | `dlp.deidentifyTemplates.get` `dlp.deidentifyTemplates.list` |
| #### DLP Cost Estimation (`roles/dlp.estimatesAdmin`) Manage DLP Cost Estimates. | `dlp.estimates.*` - `dlp.estimates.cancel` - `dlp.estimates.create` - `dlp.estimates.delete` - `dlp.estimates.get` - `dlp.estimates.list` |
| #### DLP File Store Data Profiles Admin (`roles/dlp.fileStoreProfilesAdmin`) Manage DLP file store profiles. | `dlp.fileStoreProfiles.*` - `dlp.fileStoreProfiles.delete` - `dlp.fileStoreProfiles.get` - `dlp.fileStoreProfiles.list` |
| #### DLP File Store Data Profiles Reader (`roles/dlp.fileStoreProfilesReader`) Read DLP file store profiles. | `dlp.charts.get` `dlp.fileStoreProfiles.get` `dlp.fileStoreProfiles.list` |
| #### DLP Inspect Findings Reader (`roles/dlp.inspectFindingsReader`) Read DLP stored findings. | `dlp.inspectFindings.list` |
| #### DLP Inspect Templates Editor (`roles/dlp.inspectTemplatesEditor`) Edit DLP inspect templates. | `dlp.inspectTemplates.*` - `dlp.inspectTemplates.create` - `dlp.inspectTemplates.delete` - `dlp.inspectTemplates.get` - `dlp.inspectTemplates.list` - `dlp.inspectTemplates.update` |
| #### DLP Inspect Templates Reader (`roles/dlp.inspectTemplatesReader`) Read DLP inspect templates. | `dlp.inspectTemplates.get` `dlp.inspectTemplates.list` |
| #### DLP Job Triggers Editor (`roles/dlp.jobTriggersEditor`) Edit job triggers configurations. | `dlp.jobTriggers.*` - `dlp.jobTriggers.create` - `dlp.jobTriggers.delete` - `dlp.jobTriggers.get` - `dlp.jobTriggers.hybridInspect` - `dlp.jobTriggers.list` - `dlp.jobTriggers.update` |
| #### DLP Job Triggers Reader (`roles/dlp.jobTriggersReader`) Read job triggers. | `dlp.jobTriggers.get` `dlp.jobTriggers.list` |
| #### DLP Jobs Editor (`roles/dlp.jobsEditor`) Edit and create jobs | `dlp.jobs.*` - `dlp.jobs.cancel` - `dlp.jobs.create` - `dlp.jobs.delete` - `dlp.jobs.get` - `dlp.jobs.hybridInspect` - `dlp.jobs.list` `dlp.kms.encrypt` |
| #### DLP Jobs Reader (`roles/dlp.jobsReader`) Read jobs | `dlp.jobs.get` `dlp.jobs.list` |
| #### DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) Permissions needed by the DLP service account to generate data profiles within an organization or folder. Lowest-level resources where you can grant this role: - Folder | `aiplatform.agentAnomalyDetectionScopes.get` `aiplatform.agentAnomalyDetectionScopes.list` `aiplatform.agentExamples.get` `aiplatform.agentExamples.list` `aiplatform.agents.get` `aiplatform.agents.list` `aiplatform.analyzedInvocations.*` - `aiplatform.analyzedInvocations.get` - `aiplatform.analyzedInvocations.list` `aiplatform.analyzedSessions.*` - `aiplatform.analyzedSessions.aggregate` - `aiplatform.analyzedSessions.get` - `aiplatform.analyzedSessions.list` `aiplatform.annotationSpecs.get` `aiplatform.annotationSpecs.list` `aiplatform.annotations.get` `aiplatform.annotations.list` `aiplatform.apps.get` `aiplatform.apps.list` `aiplatform.artifacts.get` `aiplatform.artifacts.list` `aiplatform.batchPredictionJobs.get` `aiplatform.batchPredictionJobs.list` `aiplatform.cacheConfigs.get` `aiplatform.cachedContents.get` `aiplatform.cachedContents.list` `aiplatform.consents.get` `aiplatform.contexts.get` `aiplatform.contexts.list` `aiplatform.contexts.queryContextLineageSubgraph` `aiplatform.customJobs.get` `aiplatform.customJobs.list` `aiplatform.dataItems.get` `aiplatform.dataItems.list` `aiplatform.dataLabelingJobs.get` `aiplatform.dataLabelingJobs.list` `aiplatform.datasetVersions.get` `aiplatform.datasetVersions.list` `aiplatform.datasets.get` `aiplatform.datasets.list` `aiplatform.deploymentResourcePools.get` `aiplatform.deploymentResourcePools.list` `aiplatform.deploymentResourcePools.queryDeployedModels` `aiplatform.detectors.get` `aiplatform.detectors.list` `aiplatform.edgeDeploymentJobs.get` `aiplatform.edgeDeploymentJobs.list` `aiplatform.edgeDeviceDebugInfo.get` `aiplatform.edgeDevices.get` `aiplatform.edgeDevices.list` `aiplatform.endpoints.explain` `aiplatform.endpoints.get` `aiplatform.endpoints.getIamPolicy` `aiplatform.endpoints.list` `aiplatform.entityTypes.get` `aiplatform.entityTypes.getIamPolicy` `aiplatform.entityTypes.list` `aiplatform.entityTypes.readFeatureValues` `aiplatform.entityTypes.streamingReadFeatureValues` `aiplatform.evaluationExperiments.get` `aiplatform.evaluationExperiments.list` `aiplatform.evaluationItems.get` `aiplatform.evaluationItems.list` `aiplatform.evaluationMetrics.get` `aiplatform.evaluationMetrics.list` `aiplatform.evaluationRuns.get` `aiplatform.evaluationRuns.list` `aiplatform.evaluationSets.get` `aiplatform.evaluationSets.list` `aiplatform.exampleStores.get` `aiplatform.exampleStores.list` `aiplatform.exampleStores.readExample` `aiplatform.executions.get` `aiplatform.executions.list` `aiplatform.executions.queryExecutionInputsAndOutputs` `aiplatform.extensions.get` `aiplatform.extensions.list` `aiplatform.featureGroups.get` `aiplatform.featureGroups.getIamPolicy` `aiplatform.featureGroups.list` `aiplatform.featureMonitorJobs.get` `aiplatform.featureMonitorJobs.list` `aiplatform.featureMonitors.get` `aiplatform.featureMonitors.list` `aiplatform.featureOnlineStores.get` `aiplatform.featureOnlineStores.getIamPolicy` `aiplatform.featureOnlineStores.list` `aiplatform.featureViewSyncs.*` - `aiplatform.featureViewSyncs.get` - `aiplatform.featureViewSyncs.list` `aiplatform.featureViews.fetchFeatureValues` `aiplatform.featureViews.get` `aiplatform.featureViews.getIamPolicy` `aiplatform.featureViews.list` `aiplatform.featureViews.searchNearestEntities` `aiplatform.features.get` `aiplatform.features.list` `aiplatform.featurestores.get` `aiplatform.featurestores.getIamPolicy` `aiplatform.featurestores.list` `aiplatform.featurestores.readFeatures` `aiplatform.humanInTheLoops.get` `aiplatform.humanInTheLoops.list` `aiplatform.humanInTheLoops.queryAnnotationStats` `aiplatform.hyperparameterTuningJobs.get` `aiplatform.hyperparameterTuningJobs.list` `aiplatform.indexEndpoints.get` `aiplatform.indexEndpoints.list` `aiplatform.indexEndpoints.queryVectors` `aiplatform.indexes.get` `aiplatform.indexes.list` `aiplatform.interactions.get` `aiplatform.interactions.list` `aiplatform.locations.*` - `aiplatform.locations.evaluateInstances` - `aiplatform.locations.get` - `aiplatform.locations.list` `aiplatform.memories.get` `aiplatform.memories.list` `aiplatform.memoryRevisions.get` `aiplatform.memoryRevisions.list` `aiplatform.metadataSchemas.get` `aiplatform.metadataSchemas.list` `aiplatform.metadataStores.get` `aiplatform.metadataStores.list` `aiplatform.migratableResources.search` `aiplatform.modelDeploymentMonitoringJobs.get` `aiplatform.modelDeploymentMonitoringJobs.list` `aiplatform.modelDeploymentMonitoringJobs.searchStatsAnomalies` `aiplatform.modelEvaluationSlices.get` `aiplatform.modelEvaluationSlices.list` `aiplatform.modelEvaluations.get` `aiplatform.modelEvaluations.list` `aiplatform.modelMonitoringJobs.get` `aiplatform.modelMonitoringJobs.list` `aiplatform.modelMonitors.get` `aiplatform.modelMonitors.list` `aiplatform.modelMonitors.searchModelMonitoringAlerts` `aiplatform.modelMonitors.searchModelMonitoringStats` `aiplatform.models.get` `aiplatform.models.list` `aiplatform.monitoredAgents.get` `aiplatform.monitoredAgents.list` `aiplatform.nasJobs.get` `aiplatform.nasJobs.list` `aiplatform.nasTrialDetails.*` - `aiplatform.nasTrialDetails.get` - `aiplatform.nasTrialDetails.list` `aiplatform.notebookExecutionJobs.get` `aiplatform.notebookExecutionJobs.list` `aiplatform.notebookRuntimeTemplates.apply` `aiplatform.notebookRuntimeTemplates.get` `aiplatform.notebookRuntimeTemplates.getIamPolicy` `aiplatform.notebookRuntimeTemplates.list` `aiplatform.notebookRuntimes.get` `aiplatform.notebookRuntimes.list` `aiplatform.onlineEvaluators.get` `aiplatform.onlineEvaluators.list` `aiplatform.operations.list` `aiplatform.persistentResources.get` `aiplatform.persistentResources.list` `aiplatform.pipelineJobs.get` `aiplatform.pipelineJobs.list` `aiplatform.provisionedThroughputRevisions.*` - `aiplatform.provisionedThroughputRevisions.get` - `aiplatform.provisionedThroughputRevisions.list` `aiplatform.provisionedThroughputs.get` `aiplatform.provisionedThroughputs.list` `aiplatform.ragCorpora.get` `aiplatform.ragCorpora.list` `aiplatform.ragCorpora.query` `aiplatform.ragEngineConfigs.get` `aiplatform.ragFiles.get` `aiplatform.ragFiles.list` `aiplatform.reasoningEngineRuntimeRevisions.get` `aiplatform.reasoningEngineRuntimeRevisions.list` `aiplatform.reasoningEngines.get` `aiplatform.reasoningEngines.list` `aiplatform.reasoningEngines.query` `aiplatform.sandboxEnvironments.get` `aiplatform.sandboxEnvironments.list` `aiplatform.schedules.get` `aiplatform.schedules.list` `aiplatform.semanticGovernancePolicies.get` `aiplatform.semanticGovernancePolicies.list` `aiplatform.semanticGovernancePolicyEngine.get` `aiplatform.sessionEvents.list` `aiplatform.sessions.get` `aiplatform.sessions.list` `aiplatform.specialistPools.get` `aiplatform.specialistPools.list` `aiplatform.specialistPools.update` `aiplatform.studies.get` `aiplatform.studies.list` `aiplatform.tasks.get` `aiplatform.tasks.list` `aiplatform.tensorboardExperiments.get` `aiplatform.tensorboardExperiments.list` `aiplatform.tensorboardRuns.get` `aiplatform.tensorboardRuns.list` `aiplatform.tensorboardTimeSeries.batchRead` `aiplatform.tensorboardTimeSeries.get` `aiplatform.tensorboardTimeSeries.list` `aiplatform.tensorboardTimeSeries.read` `aiplatform.tensorboards.get` `aiplatform.tensorboards.list` `aiplatform.trainingPipelines.get` `aiplatform.trainingPipelines.list` `aiplatform.trials.get` `aiplatform.trials.list` `aiplatform.tuningJobs.get` `aiplatform.tuningJobs.list` `alloydb.backups.createTagBinding` `alloydb.backups.deleteTagBinding` `alloydb.backups.get` `alloydb.backups.list` `alloydb.backups.listEffectiveTags` `alloydb.backups.listTagBindings` `alloydb.clusters.createTagBinding` `alloydb.clusters.deleteTagBinding` `alloydb.clusters.export` `alloydb.clusters.generateClientCertificate` `alloydb.clusters.get` `alloydb.clusters.list` `alloydb.clusters.listEffectiveTags` `alloydb.clusters.listTagBindings` `alloydb.databases.get` `alloydb.databases.list` `alloydb.instances.connect` `alloydb.instances.executeSql` `alloydb.instances.executeSqlReadOnly` `alloydb.instances.get` `alloydb.instances.list` `alloydb.locations.*` - `alloydb.locations.get` - `alloydb.locations.list` `alloydb.operations.get` `alloydb.operations.list` `alloydb.supportedDatabaseFlags.*` - `alloydb.supportedDatabaseFlags.get` - `alloydb.supportedDatabaseFlags.list` `alloydb.users.get` `alloydb.users.list` `alloydb.users.login` `apigateway.apis.createTagBinding` `apigateway.apis.deleteTagBinding` `apigateway.apis.listEffectiveTags` `apigateway.apis.listTagBindings` `apigateway.gateways.createTagBinding` `apigateway.gateways.deleteTagBinding` `apigateway.gateways.listEffectiveTags` `apigateway.gateways.listTagBindings` `apihub.apis.createTagBinding` `apihub.apis.deleteTagBinding` `apihub.apis.listEffectiveTags` `apihub.apis.listTagBindings` `apihub.deployments.createTagBinding` `apihub.deployments.deleteTagBinding` `apihub.deployments.listEffectiveTags` `apihub.deployments.listTagBindings` `artifactregistry.repositories.createTagBinding` `artifactregistry.repositories.deleteTagBinding` `artifactregistry.repositories.listEffectiveTags` `artifactregistry.repositories.listTagBindings` `backupdr.backupVaults.createTagBinding` `backupdr.backupVaults.deleteTagBinding` `backupdr.backupVaults.listEffectiveTags` `backupdr.backupVaults.listTagBindings` `backupdr.managementServers.createTagBinding` `backupdr.managementServers.deleteTagBinding` `backupdr.managementServers.listEffectiveTags` `backupdr.managementServers.listTagBindings` `beyondcorp.appConnections.createTagBinding` `beyondcorp.appConnections.deleteTagBinding` `beyondcorp.appConnections.listEffectiveTags` `beyondcorp.appConnections.listTagBindings` `beyondcorp.appConnectors.createTagBinding` `beyondcorp.appConnectors.deleteTagBinding` `beyondcorp.appConnectors.listEffectiveTags` `beyondcorp.appConnectors.listTagBindings` `beyondcorp.appGateways.createTagBinding` `beyondcorp.appGateways.deleteTagBinding` `beyondcorp.appGateways.listEffectiveTags` `beyondcorp.appGateways.listTagBindings` `bigquery.bireservations.get` `bigquery.capacityCommitments.get` `bigquery.capacityCommitments.list` `bigquery.config.get` `bigquery.connections.updateTag` `bigquery.datasets.create` `bigquery.datasets.createTagBinding` `bigquery.datasets.deleteTagBinding` `bigquery.datasets.get` `bigquery.datasets.getIamPolicy` `bigquery.datasets.listEffectiveTags` `bigquery.datasets.listTagBindings` `bigquery.datasets.updateTag` `bigquery.jobs.create` `bigquery.jobs.get` `bigquery.jobs.list` `bigquery.jobs.listAll` `bigquery.jobs.listExecutionMetadata` `bigquery.models.*` - `bigquery.models.create` - `bigquery.models.delete` - `bigquery.models.export` - `bigquery.models.getData` - `bigquery.models.getMetadata` - `bigquery.models.list` - `bigquery.models.updateData` - `bigquery.models.updateMetadata` - `bigquery.models.updateTag` `bigquery.propertyGraphs.*` - `bigquery.propertyGraphs.create` - `bigquery.propertyGraphs.delete` - `bigquery.propertyGraphs.get` - `bigquery.propertyGraphs.list` - `bigquery.propertyGraphs.update` `bigquery.readsessions.*` - `bigquery.readsessions.create` - `bigquery.readsessions.getData` - `bigquery.readsessions.update` `bigquery.reservationAssignments.list` `bigquery.reservationAssignments.search` `bigquery.reservationGroups.get` `bigquery.reservationGroups.list` `bigquery.reservations.get` `bigquery.reservations.list` `bigquery.reservations.listFailoverDatasets` `bigquery.reservations.use` `bigquery.routines.*` - `bigquery.routines.create` - `bigquery.routines.delete` - `bigquery.routines.get` - `bigquery.routines.list` - `bigquery.routines.update` - `bigquery.routines.updateTag` `bigquery.savedqueries.get` `bigquery.savedqueries.list` `bigquery.tables.create` `bigquery.tables.createIndex` `bigquery.tables.createSnapshot` `bigquery.tables.createTagBinding` `bigquery.tables.delete` `bigquery.tables.deleteIndex` `bigquery.tables.deleteTagBinding` `bigquery.tables.export` `bigquery.tables.get` `bigquery.tables.getData` `bigquery.tables.getIamPolicy` `bigquery.tables.list` `bigquery.tables.listEffectiveTags` `bigquery.tables.listTagBindings` `bigquery.tables.replicateData` `bigquery.tables.restoreSnapshot` `bigquery.tables.update` `bigquery.tables.updateData` `bigquery.tables.updateIndex` `bigquery.tables.updateTag` `bigquery.transfers.get` `bigquerymigration.translation.translate` `bigtable.authorizedViews.createTagBinding` `bigtable.authorizedViews.deleteTagBinding` `bigtable.authorizedViews.listEffectiveTags` `bigtable.authorizedViews.listTagBindings` `bigtable.instances.createTagBinding` `bigtable.instances.deleteTagBinding` `bigtable.instances.listEffectiveTags` `bigtable.instances.listTagBindings` `certificatemanager.certissuanceconfigs.createTagBinding` `certificatemanager.certissuanceconfigs.deleteTagBinding` `certificatemanager.certissuanceconfigs.listEffectiveTags` `certificatemanager.certissuanceconfigs.listTagBindings` `certificatemanager.certmapentries.createTagBinding` `certificatemanager.certmapentries.deleteTagBinding` `certificatemanager.certmapentries.listEffectiveTags` `certificatemanager.certmapentries.listTagBindings` `certificatemanager.certmaps.createTagBinding` `certificatemanager.certmaps.deleteTagBinding` `certificatemanager.certmaps.listEffectiveTags` `certificatemanager.certmaps.listTagBindings` `certificatemanager.certs.createTagBinding` `certificatemanager.certs.deleteTagBinding` `certificatemanager.certs.listEffectiveTags` `certificatemanager.certs.listTagBindings` `certificatemanager.dnsauthorizations.createTagBinding` `certificatemanager.dnsauthorizations.deleteTagBinding` `certificatemanager.dnsauthorizations.listEffectiveTags` `certificatemanager.dnsauthorizations.listTagBindings` `certificatemanager.trustconfigs.createTagBinding` `certificatemanager.trustconfigs.deleteTagBinding` `certificatemanager.trustconfigs.listEffectiveTags` `certificatemanager.trustconfigs.listTagBindings` `cloudaicompanion.entitlements.get` `cloudaicompanion.operations.get` `cloudaicompanion.topics.create` `cloudasset.assets.analyzeIamPolicy` `cloudasset.assets.analyzeMove` `cloudasset.assets.analyzeOrgPolicy` `cloudasset.assets.exportAccessLevel` `cloudasset.assets.exportAccessPolicy` `cloudasset.assets.exportAiplatformBatchPredictionJobs` `cloudasset.assets.exportAiplatformCustomJobs` `cloudasset.assets.exportAiplatformDataLabelingJobs` `cloudasset.assets.exportAiplatformDatasets` `cloudasset.assets.exportAiplatformEndpoints` `cloudasset.assets.exportAiplatformHyperparameterTuningJobs` `cloudasset.assets.exportAiplatformMetadataStores` `cloudasset.assets.exportAiplatformModelDeploymentMonitoringJobs` `cloudasset.assets.exportAiplatformModels` `cloudasset.assets.exportAiplatformPipelineJobs` `cloudasset.assets.exportAiplatformSpecialistPools` `cloudasset.assets.exportAiplatformTrainingPipelines` `cloudasset.assets.exportAllAccessPolicy` `cloudasset.assets.exportAnthosConnectedCluster` `cloudasset.assets.exportAnthosedgeCluster` `cloudasset.assets.exportApigatewayApi` `cloudasset.assets.exportApigatewayApiConfig` `cloudasset.assets.exportApigatewayGateway` `cloudasset.assets.exportApikeysKeys` `cloudasset.assets.exportAppengineApplications` `cloudasset.assets.exportAppengineServices` `cloudasset.assets.exportAppengineVersions` `cloudasset.assets.exportArtifactregistryDockerImages` `cloudasset.assets.exportArtifactregistryRepositories` `cloudasset.assets.exportAssuredWorkloadsWorkloads` `cloudasset.assets.exportBeyondCorpApiGateways` `cloudasset.assets.exportBeyondCorpAppConnections` `cloudasset.assets.exportBeyondCorpAppConnectors` `cloudasset.assets.exportBeyondCorpAppGateways` `cloudasset.assets.exportBeyondCorpClientConnectorServices` `cloudasset.assets.exportBeyondCorpClientGateways` `cloudasset.assets.exportBigqueryDatasets` `cloudasset.assets.exportBigqueryModels` `cloudasset.assets.exportBigqueryTables` `cloudasset.assets.exportBigtableAppProfile` `cloudasset.assets.exportBigtableBackup` `cloudasset.assets.exportBigtableCluster` `cloudasset.assets.exportBigtableInstance` `cloudasset.assets.exportBigtableTable` `cloudasset.assets.exportCloudAssetFeeds` `cloudasset.assets.exportCloudDeployDeliveryPipelines` `cloudasset.assets.exportCloudDeployReleases` `cloudasset.assets.exportCloudDeployRollouts` `cloudasset.assets.exportCloudDeployTargets` `cloudasset.assets.exportCloudDocumentAIEvaluation` `cloudasset.assets.exportCloudDocumentAIHumanReviewConfig` `cloudasset.assets.exportCloudDocumentAILabelerPool` `cloudasset.assets.exportCloudDocumentAIProcessor` `cloudasset.assets.exportCloudDocumentAIProcessorVersion` `cloudasset.assets.exportCloudbillingBillingAccounts` `cloudasset.assets.exportCloudbillingProjectBillingInfos` `cloudasset.assets.exportCloudfunctionsFunctions` `cloudasset.assets.exportCloudfunctionsGen2Functions` `cloudasset.assets.exportCloudkmsCryptoKeyVersions` `cloudasset.assets.exportCloudkmsCryptoKeys` `cloudasset.assets.exportCloudkmsEkmConnections` `cloudasset.assets.exportCloudkmsImportJobs` `cloudasset.assets.exportCloudkmsKeyRings` `cloudasset.assets.exportCloudmemcacheInstances` `cloudasset.assets.exportCloudresourcemanagerFolders` `cloudasset.assets.exportCloudresourcemanagerOrganizations` `cloudasset.assets.exportCloudresourcemanagerProjects` `cloudasset.assets.exportCloudresourcemanagerTagBindings` `cloudasset.assets.exportCloudresourcemanagerTagKeys` `cloudasset.assets.exportCloudresourcemanagerTagValues` `cloudasset.assets.exportComposerEnvironments` `cloudasset.assets.exportComputeAddress` `cloudasset.assets.exportComputeAutoscalers` `cloudasset.assets.exportComputeBackendBuckets` `cloudasset.assets.exportComputeBackendServices` `cloudasset.assets.exportComputeCommitments` `cloudasset.assets.exportComputeDisks` `cloudasset.assets.exportComputeExternalVpnGateways` `cloudasset.assets.exportComputeFirewallPolicies` `cloudasset.assets.exportComputeFirewalls` `cloudasset.assets.exportComputeForwardingRules` `cloudasset.assets.exportComputeGlobalAddress` `cloudasset.assets.exportComputeGlobalForwardingRules` `cloudasset.assets.exportComputeHealthChecks` `cloudasset.assets.exportComputeHttpHealthChecks` `cloudasset.assets.exportComputeHttpsHealthChecks` `cloudasset.assets.exportComputeImages` `cloudasset.assets.exportComputeInstanceGroupManagers` `cloudasset.assets.exportComputeInstanceGroups` `cloudasset.assets.exportComputeInstanceTemplates` `cloudasset.assets.exportComputeInstances` `cloudasset.assets.exportComputeInterconnect` `cloudasset.assets.exportComputeInterconnectAttachment` `cloudasset.assets.exportComputeLicenses` `cloudasset.assets.exportComputeNetworkEndpointGroups` `cloudasset.assets.exportComputeNetworks` `cloudasset.assets.exportComputeNodeGroups` `cloudasset.assets.exportComputeNodeTemplates` `cloudasset.assets.exportComputePacketMirrorings` `cloudasset.assets.exportComputeProjects` `cloudasset.assets.exportComputeRegionAutoscaler` `cloudasset.assets.exportComputeRegionBackendServices` `cloudasset.assets.exportComputeRegionDisk` `cloudasset.assets.exportComputeRegionInstanceGroup` `cloudasset.assets.exportComputeRegionInstanceGroupManager` `cloudasset.assets.exportComputeReservations` `cloudasset.assets.exportComputeResourcePolicies` `cloudasset.assets.exportComputeRouters` `cloudasset.assets.exportComputeRoutes` `cloudasset.assets.exportComputeSecurityPolicy` `cloudasset.assets.exportComputeServiceAttachments` `cloudasset.assets.exportComputeSnapshots` `cloudasset.assets.exportComputeSslCertificates` `cloudasset.assets.exportComputeSslPolicies` `cloudasset.assets.exportComputeSubnetworks` `cloudasset.assets.exportComputeTargetHttpProxies` `cloudasset.assets.exportComputeTargetHttpsProxies` `cloudasset.assets.exportComputeTargetInstances` `cloudasset.assets.exportComputeTargetPools` `cloudasset.assets.exportComputeTargetSslProxies` `cloudasset.assets.exportComputeTargetTcpProxies` `cloudasset.assets.exportComputeTargetVpnGateways` `cloudasset.assets.exportComputeUrlMaps` `cloudasset.assets.exportComputeVpnGateways` `cloudasset.assets.exportComputeVpnTunnels` `cloudasset.assets.exportConnectorsConnections` `cloudasset.assets.exportConnectorsConnectorVersions` `cloudasset.assets.exportConnectorsConnectors` `cloudasset.assets.exportConnectorsProviders` `cloudasset.assets.exportConnectorsRuntimeConfigs` `cloudasset.assets.exportContainerAppsDeployment` `cloudasset.assets.exportContainerAppsReplicaSets` `cloudasset.assets.exportContainerBatchJobs` `cloudasset.assets.exportContainerClusterrole` `cloudasset.assets.exportContainerClusterrolebinding` `cloudasset.assets.exportContainerClusters` `cloudasset.assets.exportContainerExtensionsIngresses` `cloudasset.assets.exportContainerJobs` `cloudasset.assets.exportContainerNamespace` `cloudasset.assets.exportContainerNetworkingIngresses` `cloudasset.assets.exportContainerNetworkingNetworkPolicies` `cloudasset.assets.exportContainerNode` `cloudasset.assets.exportContainerNodepool` `cloudasset.assets.exportContainerPod` `cloudasset.assets.exportContainerReplicaSets` `cloudasset.assets.exportContainerRole` `cloudasset.assets.exportContainerRolebinding` `cloudasset.assets.exportContainerServices` `cloudasset.assets.exportContainerregistryImage` `cloudasset.assets.exportDataMigrationConnectionProfiles` `cloudasset.assets.exportDataMigrationMigrationJobs` `cloudasset.assets.exportDataflowJobs` `cloudasset.assets.exportDatafusionInstance` `cloudasset.assets.exportDataplexAssets` `cloudasset.assets.exportDataplexLakes` `cloudasset.assets.exportDataplexTasks` `cloudasset.assets.exportDataplexZones` `cloudasset.assets.exportDataprocAutoscalingPolicies` `cloudasset.assets.exportDataprocBatches` `cloudasset.assets.exportDataprocClusters` `cloudasset.assets.exportDataprocJobs` `cloudasset.assets.exportDataprocSessions` `cloudasset.assets.exportDataprocWorkflowTemplates` `cloudasset.assets.exportDatastreamConnectionProfile` `cloudasset.assets.exportDatastreamPrivateConnection` `cloudasset.assets.exportDatastreamStream` `cloudasset.assets.exportDialogflowAgents` `cloudasset.assets.exportDialogflowConversationProfiles` `cloudasset.assets.exportDialogflowKnowledgeBases` `cloudasset.assets.exportDialogflowLocationSettings` `cloudasset.assets.exportDlpDeidentifyTemplates` `cloudasset.assets.exportDlpDlpJobs` `cloudasset.assets.exportDlpInspectTemplates` `cloudasset.assets.exportDlpJobTriggers` `cloudasset.assets.exportDlpStoredInfoTypes` `cloudasset.assets.exportDnsManagedZones` `cloudasset.assets.exportDnsPolicies` `cloudasset.assets.exportDomainsRegistrations` `cloudasset.assets.exportEventarcTriggers` `cloudasset.assets.exportFileBackups` `cloudasset.assets.exportFileInstances` `cloudasset.assets.exportFirebaseAppInfos` `cloudasset.assets.exportFirebaseProjects` `cloudasset.assets.exportFirestoreDatabases` `cloudasset.assets.exportGKEHubFeatures` `cloudasset.assets.exportGKEHubMemberships` `cloudasset.assets.exportGameservicesGameServerClusters` `cloudasset.assets.exportGameservicesGameServerConfigs` `cloudasset.assets.exportGameservicesGameServerDeployments` `cloudasset.assets.exportGameservicesRealms` `cloudasset.assets.exportGkeBackupBackupPlans` `cloudasset.assets.exportGkeBackupBackups` `cloudasset.assets.exportGkeBackupRestorePlans` `cloudasset.assets.exportGkeBackupRestores` `cloudasset.assets.exportGkeBackupVolumeBackups` `cloudasset.assets.exportGkeBackupVolumeRestores` `cloudasset.assets.exportHealthcareConsentStores` `cloudasset.assets.exportHealthcareDatasets` `cloudasset.assets.exportHealthcareDicomStores` `cloudasset.assets.exportHealthcareFhirStores` `cloudasset.assets.exportHealthcareHl7V2Stores` `cloudasset.assets.exportIamPolicy` `cloudasset.assets.exportIamRoles` `cloudasset.assets.exportIamServiceAccountKeys` `cloudasset.assets.exportIamServiceAccounts` `cloudasset.assets.exportIapTunnel` `cloudasset.assets.exportIapTunnelInstances` `cloudasset.assets.exportIapTunnelZones` `cloudasset.assets.exportIapWeb` `cloudasset.assets.exportIapWebServiceVersion` `cloudasset.assets.exportIapWebServices` `cloudasset.assets.exportIapWebType` `cloudasset.assets.exportIdsEndpoints` `cloudasset.assets.exportIntegrationsAuthConfigs` `cloudasset.assets.exportIntegrationsCertificates` `cloudasset.assets.exportIntegrationsExecutions` `cloudasset.assets.exportIntegrationsIntegrationVersions` `cloudasset.assets.exportIntegrationsIntegrations` `cloudasset.assets.exportIntegrationsSfdcChannels` `cloudasset.assets.exportIntegrationsSfdcInstances` `cloudasset.assets.exportIntegrationsSuspensions` `cloudasset.assets.exportLoggingLogMetrics` `cloudasset.assets.exportLoggingLogSinks` `cloudasset.assets.exportManagedidentitiesDomain` `cloudasset.assets.exportMetastoreBackups` `cloudasset.assets.exportMetastoreMetadataImports` `cloudasset.assets.exportMetastoreServices` `cloudasset.assets.exportMonitoringAlertPolicies` `cloudasset.assets.exportNetworkConnectivityHubs` `cloudasset.assets.exportNetworkConnectivitySpokes` `cloudasset.assets.exportNetworkManagementConnectivityTests` `cloudasset.assets.exportNetworkServicesEndpointPolicies` `cloudasset.assets.exportNetworkServicesGateways` `cloudasset.assets.exportNetworkServicesGrpcRoutes` `cloudasset.assets.exportNetworkServicesHttpRoutes` `cloudasset.assets.exportNetworkServicesMeshes` `cloudasset.assets.exportNetworkServicesServiceBindings` `cloudasset.assets.exportNetworkServicesTcpRoutes` `cloudasset.assets.exportNetworkServicesTlsRoutes` `cloudasset.assets.exportOSConfigOSPolicyAssignmentReports` `cloudasset.assets.exportOSConfigOSPolicyAssignments` `cloudasset.assets.exportOSConfigVulnerabilityReports` `cloudasset.assets.exportOSInventories` `cloudasset.assets.exportOrgPolicy` `cloudasset.assets.exportPatchDeployments` `cloudasset.assets.exportPubsubSnapshots` `cloudasset.assets.exportPubsubSubscriptions` `cloudasset.assets.exportPubsubTopics` `cloudasset.assets.exportRedisInstances` `cloudasset.assets.exportResource` `cloudasset.assets.exportSecretManagerSecretVersions` `cloudasset.assets.exportSecretManagerSecrets` `cloudasset.assets.exportServiceDirectoryNamespaces` `cloudasset.assets.exportServicePerimeter` `cloudasset.assets.exportServiceconsumermanagementConsumerProperty` `cloudasset.assets.exportServiceconsumermanagementConsumerQuotaLimits` `cloudasset.assets.exportServiceconsumermanagementConsumers` `cloudasset.assets.exportServiceconsumermanagementProducerOverrides` `cloudasset.assets.exportServiceconsumermanagementTenancyUnits` `cloudasset.assets.exportServiceconsumermanagementVisibility` `cloudasset.assets.exportServicemanagementServices` `cloudasset.assets.exportServiceusageAdminOverrides` `cloudasset.assets.exportServiceusageConsumerOverrides` `cloudasset.assets.exportServiceusageServices` `cloudasset.assets.exportSpannerBackups` `cloudasset.assets.exportSpannerDatabases` `cloudasset.assets.exportSpannerInstances` `cloudasset.assets.exportSpeakerIdPhrases` `cloudasset.assets.exportSpeakerIdSettings` `cloudasset.assets.exportSpeakerIdSpeakers` `cloudasset.assets.exportSpeechCustomClasses` `cloudasset.assets.exportSpeechPhraseSets` `cloudasset.assets.exportSqladminBackupRuns` `cloudasset.assets.exportSqladminInstances` `cloudasset.assets.exportStorageBuckets` `cloudasset.assets.exportTpuNodes` `cloudasset.assets.exportVpcaccessConnector` `cloudasset.assets.listAccessLevel` `cloudasset.assets.listAccessPolicy` `cloudasset.assets.listAiplatformBatchPredictionJobs` `cloudasset.assets.listAiplatformCustomJobs` `cloudasset.assets.listAiplatformDataLabelingJobs` `cloudasset.assets.listAiplatformDatasets` `cloudasset.assets.listAiplatformEndpoints` `cloudasset.assets.listAiplatformHyperparameterTuningJobs` `cloudasset.assets.listAiplatformMetadataStores` `cloudasset.assets.listAiplatformModelDeploymentMonitoringJobs` `cloudasset.assets.listAiplatformModels` `cloudasset.assets.listAiplatformPipelineJobs` `cloudasset.assets.listAiplatformSpecialistPools` `cloudasset.assets.listAiplatformTrainingPipelines` `cloudasset.assets.listAllAccessPolicy` `cloudasset.assets.listAnthosConnectedCluster` `cloudasset.assets.listAnthosedgeCluster` `cloudasset.assets.listApigatewayApi` `cloudasset.assets.listApigatewayApiConfig` `cloudasset.assets.listApigatewayGateway` `cloudasset.assets.listApikeysKeys` `cloudasset.assets.listAppengineApplications` `cloudasset.assets.listAppengineServices` `cloudasset.assets.listAppengineVersions` `cloudasset.assets.listArtifactregistryDockerImages` `cloudasset.assets.listArtifactregistryRepositories` `cloudasset.assets.listAssuredWorkloadsWorkloads` `cloudasset.assets.listBeyondCorpApiGateways` `cloudasset.assets.listBeyondCorpAppConnections` `cloudasset.assets.listBeyondCorpAppConnectors` `cloudasset.assets.listBeyondCorpAppGateways` `cloudasset.assets.listBeyondCorpClientConnectorServices` `cloudasset.assets.listBeyondCorpClientGateways` `cloudasset.assets.listBigqueryDatasets` `cloudasset.assets.listBigqueryModels` `cloudasset.assets.listBigqueryTables` `cloudasset.assets.listBigtableAppProfile` `cloudasset.assets.listBigtableBackup` `cloudasset.assets.listBigtableCluster` `cloudasset.assets.listBigtableInstance` `cloudasset.assets.listBigtableTable` `cloudasset.assets.listCloudAssetFeeds` `cloudasset.assets.listCloudDeployDeliveryPipelines` `cloudasset.assets.listCloudDeployReleases` `cloudasset.assets.listCloudDeployRollouts` `cloudasset.assets.listCloudDeployTargets` `cloudasset.assets.listCloudDocumentAIEvaluation` `cloudasset.assets.listCloudDocumentAIHumanReviewConfig` `cloudasset.assets.listCloudDocumentAILabelerPool` `cloudasset.assets.listCloudDocumentAIProcessor` `cloudasset.assets.listCloudDocumentAIProcessorVersion` `cloudasset.assets.listCloudbillingBillingAccounts` `cloudasset.assets.listCloudbillingProjectBillingInfos` `cloudasset.assets.listCloudfunctionsFunctions` `cloudasset.assets.listCloudfunctionsGen2Functions` `cloudasset.assets.listCloudkmsCryptoKeyVersions` `cloudasset.assets.listCloudkmsCryptoKeys` `cloudasset.assets.listCloudkmsEkmConnections` `cloudasset.assets.listCloudkmsImportJobs` `cloudasset.assets.listCloudkmsKeyRings` `cloudasset.assets.listCloudmemcacheInstances` `cloudasset.assets.listCloudresourcemanagerFolders` `cloudasset.assets.listCloudresourcemanagerOrganizations` `cloudasset.assets.listCloudresourcemanagerProjects` `cloudasset.assets.listCloudresourcemanagerTagBindings` `cloudasset.assets.listCloudresourcemanagerTagKeys` `cloudasset.assets.listCloudresourcemanagerTagValues` `cloudasset.assets.listComposerEnvironments` `cloudasset.assets.listComputeAddress` `cloudasset.assets.listComputeAutoscalers` `cloudasset.assets.listComputeBackendBuckets` `cloudasset.assets.listComputeBackendServices` `cloudasset.assets.listComputeCommitments` `cloudasset.assets.listComputeDisks` `cloudasset.assets.listComputeExternalVpnGateways` `cloudasset.assets.listComputeFirewallPolicies` `cloudasset.assets.listComputeFirewalls` `cloudasset.assets.listComputeForwardingRules` `cloudasset.assets.listComputeGlobalAddress` `cloudasset.assets.listComputeGlobalForwardingRules` `cloudasset.assets.listComputeHealthChecks` `cloudasset.assets.listComputeHttpHealthChecks` `cloudasset.assets.listComputeHttpsHealthChecks` `cloudasset.assets.listComputeImages` `cloudasset.assets.listComputeInstanceGroupManagers` `cloudasset.assets.listComputeInstanceGroups` `cloudasset.assets.listComputeInstanceTemplates` `cloudasset.assets.listComputeInstances` `cloudasset.assets.listComputeInterconnect` `cloudasset.assets.listComputeInterconnectAttachment` `cloudasset.assets.listComputeLicenses` `cloudasset.assets.listComputeNetworkEndpointGroups` `cloudasset.assets.listComputeNetworks` `cloudasset.assets.listComputeNodeGroups` `cloudasset.assets.listComputeNodeTemplates` `cloudasset.assets.listComputePacketMirrorings` `cloudasset.assets.listComputeProjects` `cloudasset.assets.listComputeRegionAutoscaler` `cloudasset.assets.listComputeRegionBackendServices` `cloudasset.assets.listComputeRegionDisk` `cloudasset.assets.listComputeRegionInstanceGroup` `cloudasset.assets.listComputeRegionInstanceGroupManager` `cloudasset.assets.listComputeReservations` `cloudasset.assets.listComputeResourcePolicies` `cloudasset.assets.listComputeRouters` `cloudasset.assets.listComputeRoutes` `cloudasset.assets.listComputeSecurityPolicy` `cloudasset.assets.listComputeServiceAttachments` `cloudasset.assets.listComputeSnapshots` `cloudasset.assets.listComputeSslCertificates` `cloudasset.assets.listComputeSslPolicies` `cloudasset.assets.listComputeSubnetworks` `cloudasset.assets.listComputeTargetHttpProxies` `cloudasset.assets.listComputeTargetHttpsProxies` `cloudasset.assets.listComputeTargetInstances` `cloudasset.assets.listComputeTargetPools` `cloudasset.assets.listComputeTargetSslProxies` `cloudasset.assets.listComputeTargetTcpProxies` `cloudasset.assets.listComputeTargetVpnGateways` `cloudasset.assets.listComputeUrlMaps` `cloudasset.assets.listComputeVpnGateways` `cloudasset.assets.listComputeVpnTunnels` `cloudasset.assets.listConnectorsConnections` `cloudasset.assets.listConnectorsConnectorVersions` `cloudasset.assets.listConnectorsConnectors` `cloudasset.assets.listConnectorsProviders` `cloudasset.assets.listConnectorsRuntimeConfigs` `cloudasset.assets.listContainerAppsDeployment` `cloudasset.assets.listContainerAppsReplicaSets` `cloudasset.assets.listContainerBatchJobs` `cloudasset.assets.listContainerClusterrole` `cloudasset.assets.listContainerClusterrolebinding` `cloudasset.assets.listContainerClusters` `cloudasset.assets.listContainerExtensionsIngresses` `cloudasset.assets.listContainerJobs` `cloudasset.assets.listContainerNamespace` `cloudasset.assets.listContainerNetworkingIngresses` `cloudasset.assets.listContainerNetworkingNetworkPolicies` `cloudasset.assets.listContainerNode` `cloudasset.assets.listContainerNodepool` `cloudasset.assets.listContainerPod` `cloudasset.assets.listContainerReplicaSets` `cloudasset.assets.listContainerRole` `cloudasset.assets.listContainerRolebinding` `cloudasset.assets.listContainerServices` `cloudasset.assets.listContainerregistryImage` `cloudasset.assets.listDataMigrationConnectionProfiles` `cloudasset.assets.listDataMigrationMigrationJobs` `cloudasset.assets.listDataflowJobs` `cloudasset.assets.listDatafusionInstance` `cloudasset.assets.listDataplexAssets` `cloudasset.assets.listDataplexLakes` `cloudasset.assets.listDataplexTasks` `cloudasset.assets.listDataplexZones` `cloudasset.assets.listDataprocAutoscalingPolicies` `cloudasset.assets.listDataprocBatches` `cloudasset.assets.listDataprocClusters` `cloudasset.assets.listDataprocJobs` `cloudasset.assets.listDataprocSessions` `cloudasset.assets.listDataprocWorkflowTemplates` `cloudasset.assets.listDatastreamConnectionProfile` `cloudasset.assets.listDatastreamPrivateConnection` `cloudasset.assets.listDatastreamStream` `cloudasset.assets.listDialogflowAgents` `cloudasset.assets.listDialogflowConversationProfiles` `cloudasset.assets.listDialogflowKnowledgeBases` `cloudasset.assets.listDialogflowLocationSettings` `cloudasset.assets.listDlpDeidentifyTemplates` `cloudasset.assets.listDlpDlpJobs` `cloudasset.assets.listDlpInspectTemplates` `cloudasset.assets.listDlpJobTriggers` `cloudasset.assets.listDlpStoredInfoTypes` `cloudasset.assets.listDnsManagedZones` `cloudasset.assets.listDnsPolicies` `cloudasset.assets.listDomainsRegistrations` `cloudasset.assets.listEventarcTriggers` `cloudasset.assets.listFileBackups` `cloudasset.assets.listFileInstances` `cloudasset.assets.listFirebaseAppInfos` `cloudasset.assets.listFirebaseProjects` `cloudasset.assets.listFirestoreDatabases` `cloudasset.assets.listGKEHubFeatures` `cloudasset.assets.listGKEHubMemberships` `cloudasset.assets.listGameservicesGameServerClusters` `cloudasset.assets.listGameservicesGameServerConfigs` `cloudasset.assets.listGameservicesGameServerDeployments` `cloudasset.assets.listGameservicesRealms` `cloudasset.assets.listGkeBackupBackupPlans` `cloudasset.assets.listGkeBackupBackups` `cloudasset.assets.listGkeBackupRestorePlans` `cloudasset.assets.listGkeBackupRestores` `cloudasset.assets.listGkeBackupVolumeBackups` `cloudasset.assets.listGkeBackupVolumeRestores` `cloudasset.assets.listHealthcareConsentStores` `cloudasset.assets.listHealthcareDatasets` `cloudasset.assets.listHealthcareDicomStores` `cloudasset.assets.listHealthcareFhirStores` `cloudasset.assets.listHealthcareHl7V2Stores` `cloudasset.assets.listIamPolicy` `cloudasset.assets.listIamRoles` `cloudasset.assets.listIamServiceAccountKeys` `cloudasset.assets.listIamServiceAccounts` `cloudasset.assets.listIapTunnel` `cloudasset.assets.listIapTunnelInstances` `cloudasset.assets.listIapTunnelZones` `cloudasset.assets.listIapWeb` `cloudasset.assets.listIapWebServiceVersion` `cloudasset.assets.listIapWebServices` `cloudasset.assets.listIapWebType` `cloudasset.assets.listIdsEndpoints` `cloudasset.assets.listIntegrationsAuthConfigs` `cloudasset.assets.listIntegrationsCertificates` `cloudasset.assets.listIntegrationsExecutions` `cloudasset.assets.listIntegrationsIntegrationVersions` `cloudasset.assets.listIntegrationsIntegrations` `cloudasset.assets.listIntegrationsSfdcChannels` `cloudasset.assets.listIntegrationsSfdcInstances` `cloudasset.assets.listIntegrationsSuspensions` `cloudasset.assets.listLoggingLogMetrics` `cloudasset.assets.listLoggingLogSinks` `cloudasset.assets.listManagedidentitiesDomain` `cloudasset.assets.listMetastoreBackups` `cloudasset.assets.listMetastoreMetadataImports` `cloudasset.assets.listMetastoreServices` `cloudasset.assets.listMonitoringAlertPolicies` `cloudasset.assets.listNetworkConnectivityHubs` `cloudasset.assets.listNetworkConnectivitySpokes` `cloudasset.assets.listNetworkManagementConnectivityTests` `cloudasset.assets.listNetworkServicesEndpointPolicies` `cloudasset.assets.listNetworkServicesGateways` `cloudasset.assets.listNetworkServicesGrpcRoutes` `cloudasset.assets.listNetworkServicesHttpRoutes` `cloudasset.assets.listNetworkServicesMeshes` `cloudasset.assets.listNetworkServicesServiceBindings` `cloudasset.assets.listNetworkServicesTcpRoutes` `cloudasset.assets.listNetworkServicesTlsRoutes` `cloudasset.assets.listOSConfigOSPolicyAssignmentReports` `cloudasset.assets.listOSConfigOSPolicyAssignments` `cloudasset.assets.listOSConfigVulnerabilityReports` `cloudasset.assets.listOSInventories` `cloudasset.assets.listOrgPolicy` `cloudasset.assets.listPatchDeployments` `cloudasset.assets.listPubsubSnapshots` `cloudasset.assets.listPubsubSubscriptions` `cloudasset.assets.listPubsubTopics` `cloudasset.assets.listRedisInstances` `cloudasset.assets.listResource` `cloudasset.assets.listRunDomainMapping` `cloudasset.assets.listRunRevision` `cloudasset.assets.listRunService` `cloudasset.assets.listSecretManagerSecretVersions` `cloudasset.assets.listSecretManagerSecrets` `cloudasset.assets.listServiceDirectoryNamespaces` `cloudasset.assets.listServicePerimeter` `cloudasset.assets.listServiceconsumermanagementConsumerProperty` `cloudasset.assets.listServiceconsumermanagementConsumerQuotaLimits` `cloudasset.assets.listServiceconsumermanagementConsumers` `cloudasset.assets.listServiceconsumermanagementProducerOverrides` `cloudasset.assets.listServiceconsumermanagementTenancyUnits` `cloudasset.assets.listServiceconsumermanagementVisibility` `cloudasset.assets.listServicemanagementServices` `cloudasset.assets.listServiceusageAdminOverrides` `cloudasset.assets.listServiceusageConsumerOverrides` `cloudasset.assets.listServiceusageServices` `cloudasset.assets.listSpannerBackups` `cloudasset.assets.listSpannerDatabases` `cloudasset.assets.listSpannerInstances` `cloudasset.assets.listSpeakerIdPhrases` `cloudasset.assets.listSpeakerIdSettings` `cloudasset.assets.listSpeakerIdSpeakers` `cloudasset.assets.listSpeechCustomClasses` `cloudasset.assets.listSpeechPhraseSets` `cloudasset.assets.listSqladminBackupRuns` `cloudasset.assets.listSqladminInstances` `cloudasset.assets.listStorageBuckets` `cloudasset.assets.listTpuNodes` `cloudasset.assets.listVpcaccessConnector` `cloudasset.assets.queryAccessPolicy` `cloudasset.assets.queryIamPolicy` `cloudasset.assets.queryOSInventories` `cloudasset.assets.queryResource` `cloudasset.assets.searchAllIamPolicies` `cloudasset.assets.searchAllResources` `cloudasset.othercloudconnections.get` `cloudasset.othercloudconnections.list` `cloudasset.othercloudconnections.verify` `cloudasset.savedqueries.get` `cloudasset.savedqueries.list` `clouddeploy.deliveryPipelines.createTagBinding` `clouddeploy.deliveryPipelines.deleteTagBinding` `clouddeploy.deliveryPipelines.listEffectiveTags` `clouddeploy.deliveryPipelines.listTagBindings` `clouddeploy.targets.createTagBinding` `clouddeploy.targets.deleteTagBinding` `clouddeploy.targets.listEffectiveTags` `clouddeploy.targets.listTagBindings` `cloudkms.keyHandles.*` - `cloudkms.keyHandles.create` - `cloudkms.keyHandles.get` - `cloudkms.keyHandles.list` `cloudkms.keyRings.createTagBinding` `cloudkms.keyRings.deleteTagBinding` `cloudkms.keyRings.listEffectiveTags` `cloudkms.keyRings.listTagBindings` `cloudkms.operations.get` `cloudkms.projects.showEffectiveAutokeyConfig` `cloudsql.instances.connect` `cloudsql.instances.createTagBinding` `cloudsql.instances.deleteTagBinding` `cloudsql.instances.executeSql` `cloudsql.instances.get` `cloudsql.instances.listEffectiveTags` `cloudsql.instances.listTagBindings` `cloudsql.instances.login` `composer.environments.createTagBinding` `composer.environments.deleteTagBinding` `composer.environments.listEffectiveTags` `composer.environments.listTagBindings` `compute.addresses.createTagBinding` `compute.addresses.deleteTagBinding` `compute.addresses.listEffectiveTags` `compute.addresses.listTagBindings` `compute.backendBuckets.createTagBinding` `compute.backendBuckets.deleteTagBinding` `compute.backendBuckets.listEffectiveTags` `compute.backendBuckets.listTagBindings` `compute.backendServices.createTagBinding` `compute.backendServices.deleteTagBinding` `compute.backendServices.listEffectiveTags` `compute.backendServices.listTagBindings` `compute.commitments.createTagBinding` `compute.commitments.deleteTagBinding` `compute.commitments.listEffectiveTags` `compute.commitments.listTagBindings` `compute.disks.createTagBinding` `compute.disks.deleteTagBinding` `compute.disks.listEffectiveTags` `compute.disks.listTagBindings` `compute.externalVpnGateways.createTagBinding` `compute.externalVpnGateways.deleteTagBinding` `compute.externalVpnGateways.listEffectiveTags` `compute.externalVpnGateways.listTagBindings` `compute.firewallPolicies.createTagBinding` `compute.firewallPolicies.deleteTagBinding` `compute.firewallPolicies.listEffectiveTags` `compute.firewallPolicies.listTagBindings` `compute.firewalls.createTagBinding` `compute.firewalls.deleteTagBinding` `compute.firewalls.listEffectiveTags` `compute.firewalls.listTagBindings` `compute.forwardingRules.createTagBinding` `compute.forwardingRules.deleteTagBinding` `compute.forwardingRules.listEffectiveTags` `compute.forwardingRules.listTagBindings` `compute.futureReservations.createTagBinding` `compute.futureReservations.deleteTagBinding` `compute.futureReservations.listEffectiveTags` `compute.futureReservations.listTagBindings` `compute.globalAddresses.createTagBinding` `compute.globalAddresses.deleteTagBinding` `compute.globalAddresses.listEffectiveTags` `compute.globalAddresses.listTagBindings` `compute.globalForwardingRules.createTagBinding` `compute.globalForwardingRules.deleteTagBinding` `compute.globalForwardingRules.listEffectiveTags` `compute.globalForwardingRules.listTagBindings` `compute.globalNetworkEndpointGroups.createTagBinding` `compute.globalNetworkEndpointGroups.deleteTagBinding` `compute.globalNetworkEndpointGroups.listEffectiveTags` `compute.globalNetworkEndpointGroups.listTagBindings` `compute.healthChecks.createTagBinding` `compute.healthChecks.deleteTagBinding` `compute.healthChecks.listEffectiveTags` `compute.healthChecks.listTagBindings` `compute.httpHealthChecks.createTagBinding` `compute.httpHealthChecks.deleteTagBinding` `compute.httpHealthChecks.listEffectiveTags` `compute.httpHealthChecks.listTagBindings` `compute.httpsHealthChecks.createTagBinding` `compute.httpsHealthChecks.deleteTagBinding` `compute.httpsHealthChecks.listEffectiveTags` `compute.httpsHealthChecks.listTagBindings` `compute.images.createTagBinding` `compute.images.deleteTagBinding` `compute.images.listEffectiveTags` `compute.images.listTagBindings` `compute.instanceGroupManagers.createTagBinding` `compute.instanceGroupManagers.deleteTagBinding` `compute.instanceGroupManagers.listEffectiveTags` `compute.instanceGroupManagers.listTagBindings` `compute.instanceGroups.createTagBinding` `compute.instanceGroups.deleteTagBinding` `compute.instanceGroups.listEffectiveTags` `compute.instanceGroups.listTagBindings` `compute.instances.createTagBinding` `compute.instances.deleteTagBinding` `compute.instances.listEffectiveTags` `compute.instances.listTagBindings` `compute.instantSnapshots.createTagBinding` `compute.instantSnapshots.deleteTagBinding` `compute.instantSnapshots.listEffectiveTags` `compute.instantSnapshots.listTagBindings` `compute.interconnectAttachments.createTagBinding` `compute.interconnectAttachments.deleteTagBinding` `compute.interconnectAttachments.listEffectiveTags` `compute.interconnectAttachments.listTagBindings` `compute.interconnects.createTagBinding` `compute.interconnects.deleteTagBinding` `compute.interconnects.listEffectiveTags` `compute.interconnects.listTagBindings` `compute.licenses.createTagBinding` `compute.licenses.deleteTagBinding` `compute.licenses.listEffectiveTags` `compute.licenses.listTagBindings` `compute.machineImages.createTagBinding` `compute.machineImages.deleteTagBinding` `compute.machineImages.listEffectiveTags` `compute.machineImages.listTagBindings` `compute.networkAttachments.createTagBinding` `compute.networkAttachments.deleteTagBinding` `compute.networkAttachments.listEffectiveTags` `compute.networkAttachments.listTagBindings` `compute.networkEdgeSecurityServices.createTagBinding` `compute.networkEdgeSecurityServices.deleteTagBinding` `compute.networkEdgeSecurityServices.listEffectiveTags` `compute.networkEdgeSecurityServices.listTagBindings` `compute.networkEndpointGroups.createTagBinding` `compute.networkEndpointGroups.deleteTagBinding` `compute.networkEndpointGroups.listEffectiveTags` `compute.networkEndpointGroups.listTagBindings` `compute.networks.createTagBinding` `compute.networks.deleteTagBinding` `compute.networks.listEffectiveTags` `compute.networks.listTagBindings` `compute.packetMirrorings.createTagBinding` `compute.packetMirrorings.deleteTagBinding` `compute.packetMirrorings.listEffectiveTags` `compute.packetMirrorings.listTagBindings` `compute.publicDelegatedPrefixes.createTagBinding` `compute.publicDelegatedPrefixes.deleteTagBinding` `compute.publicDelegatedPrefixes.listEffectiveTags` `compute.publicDelegatedPrefixes.listTagBindings` `compute.regionBackendBuckets.createTagBinding` `compute.regionBackendBuckets.deleteTagBinding` `compute.regionBackendBuckets.listEffectiveTags` `compute.regionBackendBuckets.listTagBindings` `compute.regionBackendServices.createTagBinding` `compute.regionBackendServices.deleteTagBinding` `compute.regionBackendServices.listEffectiveTags` `compute.regionBackendServices.listTagBindings` `compute.regionFirewallPolicies.createTagBinding` `compute.regionFirewallPolicies.deleteTagBinding` `compute.regionFirewallPolicies.listEffectiveTags` `compute.regionFirewallPolicies.listTagBindings` `compute.regionHealthChecks.createTagBinding` `compute.regionHealthChecks.deleteTagBinding` `compute.regionHealthChecks.listEffectiveTags` `compute.regionHealthChecks.listTagBindings` `compute.regionNetworkEndpointGroups.createTagBinding` `compute.regionNetworkEndpointGroups.deleteTagBinding` `compute.regionNetworkEndpointGroups.listEffectiveTags` `compute.regionNetworkEndpointGroups.listTagBindings` `compute.regionSecurityPolicies.createTagBinding` `compute.regionSecurityPolicies.deleteTagBinding` `compute.regionSecurityPolicies.listEffectiveTags` `compute.regionSecurityPolicies.listTagBindings` `compute.regionSslCertificates.createTagBinding` `compute.regionSslCertificates.deleteTagBinding` `compute.regionSslCertificates.listEffectiveTags` `compute.regionSslCertificates.listTagBindings` `compute.regionSslPolicies.createTagBinding` `compute.regionSslPolicies.deleteTagBinding` `compute.regionSslPolicies.listEffectiveTags` `compute.regionSslPolicies.listTagBindings` `compute.regionTargetHttpProxies.createTagBinding` `compute.regionTargetHttpProxies.deleteTagBinding` `compute.regionTargetHttpProxies.listEffectiveTags` `compute.regionTargetHttpProxies.listTagBindings` `compute.regionTargetHttpsProxies.createTagBinding` `compute.regionTargetHttpsProxies.deleteTagBinding` `compute.regionTargetHttpsProxies.listEffectiveTags` `compute.regionTargetHttpsProxies.listTagBindings` `compute.regionTargetTcpProxies.createTagBinding` `compute.regionTargetTcpProxies.deleteTagBinding` `compute.regionTargetTcpProxies.listEffectiveTags` `compute.regionTargetTcpProxies.listTagBindings` `compute.regionUrlMaps.createTagBinding` `compute.regionUrlMaps.deleteTagBinding` `compute.regionUrlMaps.listEffectiveTags` `compute.regionUrlMaps.listTagBindings` `compute.reservations.createTagBinding` `compute.reservations.deleteTagBinding` `compute.reservations.listEffectiveTags` `compute.reservations.listTagBindings` `compute.routers.createTagBinding` `compute.routers.deleteTagBinding` `compute.routers.listEffectiveTags` `compute.routers.listTagBindings` `compute.routes.createTagBinding` `compute.routes.deleteTagBinding` `compute.routes.listEffectiveTags` `compute.routes.listTagBindings` `compute.securityPolicies.createTagBinding` `compute.securityPolicies.deleteTagBinding` `compute.securityPolicies.listEffectiveTags` `compute.securityPolicies.listTagBindings` `compute.serviceAttachments.createTagBinding` `compute.serviceAttachments.deleteTagBinding` `compute.serviceAttachments.listEffectiveTags` `compute.serviceAttachments.listTagBindings` `compute.snapshots.createTagBinding` `compute.snapshots.deleteTagBinding` `compute.snapshots.listEffectiveTags` `compute.snapshots.listTagBindings` `compute.sslCertificates.createTagBinding` `compute.sslCertificates.deleteTagBinding` `compute.sslCertificates.listEffectiveTags` `compute.sslCertificates.listTagBindings` `compute.sslPolicies.createTagBinding` `compute.sslPolicies.deleteTagBinding` `compute.sslPolicies.listEffectiveTags` `compute.sslPolicies.listTagBindings` `compute.storagePools.createTagBinding` `compute.storagePools.deleteTagBinding` `compute.storagePools.listEffectiveTags` `compute.storagePools.listTagBindings` `compute.subnetworks.createTagBinding` `compute.subnetworks.deleteTagBinding` `compute.subnetworks.listEffectiveTags` `compute.subnetworks.listTagBindings` `compute.targetGrpcProxies.createTagBinding` `compute.targetGrpcProxies.deleteTagBinding` `compute.targetGrpcProxies.listEffectiveTags` `compute.targetGrpcProxies.listTagBindings` `compute.targetHttpProxies.createTagBinding` `compute.targetHttpProxies.deleteTagBinding` `compute.targetHttpProxies.listEffectiveTags` `compute.targetHttpProxies.listTagBindings` `compute.targetHttpsProxies.createTagBinding` `compute.targetHttpsProxies.deleteTagBinding` `compute.targetHttpsProxies.listEffectiveTags` `compute.targetHttpsProxies.listTagBindings` `compute.targetInstances.createTagBinding` `compute.targetInstances.deleteTagBinding` `compute.targetInstances.listEffectiveTags` `compute.targetInstances.listTagBindings` `compute.targetPools.createTagBinding` `compute.targetPools.deleteTagBinding` `compute.targetPools.listEffectiveTags` `compute.targetPools.listTagBindings` `compute.targetSslProxies.createTagBinding` `compute.targetSslProxies.deleteTagBinding` `compute.targetSslProxies.listEffectiveTags` `compute.targetSslProxies.listTagBindings` `compute.targetTcpProxies.createTagBinding` `compute.targetTcpProxies.deleteTagBinding` `compute.targetTcpProxies.listEffectiveTags` `compute.targetTcpProxies.listTagBindings` `compute.targetVpnGateways.createTagBinding` `compute.targetVpnGateways.deleteTagBinding` `compute.targetVpnGateways.listEffectiveTags` `compute.targetVpnGateways.listTagBindings` `compute.urlMaps.createTagBinding` `compute.urlMaps.deleteTagBinding` `compute.urlMaps.listEffectiveTags` `compute.urlMaps.listTagBindings` `compute.vpnGateways.createTagBinding` `compute.vpnGateways.deleteTagBinding` `compute.vpnGateways.listEffectiveTags` `compute.vpnGateways.listTagBindings` `compute.vpnTunnels.createTagBinding` `compute.vpnTunnels.deleteTagBinding` `compute.vpnTunnels.listEffectiveTags` `compute.vpnTunnels.listTagBindings` `config.deploymentgroups.createTagBinding` `config.deploymentgroups.deleteTagBinding` `config.deploymentgroups.listEffectiveTags` `config.deploymentgroups.listTagBindings` `config.deployments.createTagBinding` `config.deployments.deleteTagBinding` `config.deployments.listEffectiveTags` `config.deployments.listTagBindings` `config.previews.createTagBinding` `config.previews.deleteTagBinding` `config.previews.listEffectiveTags` `config.previews.listTagBindings` `container.clusters.createTagBinding` `container.clusters.deleteTagBinding` `container.clusters.listEffectiveTags` `container.clusters.listTagBindings` `databasesconsole.locations.*` - `databasesconsole.locations.get` - `databasesconsole.locations.list` `databasesconsole.studioQueries.search` `datacatalog.categories.fineGrainedGet` `datacatalog.entries.updateTag` `datacatalog.entryGroups.updateTag` `datacatalog.migrationConfig.get` `datacatalog.tagTemplates.create` `datacatalog.tagTemplates.get` `datacatalog.tagTemplates.getTag` `datacatalog.tagTemplates.use` `dataflow.jobs.createTagBinding` `dataflow.jobs.deleteTagBinding` `dataflow.jobs.listEffectiveTags` `dataflow.jobs.listTagBindings` `dataflow.snapshots.createTagBinding` `dataflow.snapshots.deleteTagBinding` `dataflow.snapshots.listEffectiveTags` `dataflow.snapshots.listTagBindings` `dataform.folders.create` `dataform.locations.*` - `dataform.locations.get` - `dataform.locations.list` `dataform.repositories.create` `dataform.repositories.createTagBinding` `dataform.repositories.deleteTagBinding` `dataform.repositories.list` `dataform.repositories.listEffectiveTags` `dataform.repositories.listTagBindings` `datafusion.instances.createTagBinding` `datafusion.instances.deleteTagBinding` `datafusion.instances.listEffectiveTags` `datafusion.instances.listTagBindings` `datamigration.connectionprofiles.createTagBinding` `datamigration.connectionprofiles.deleteTagBinding` `datamigration.connectionprofiles.listEffectiveTags` `datamigration.connectionprofiles.listTagBindings` `datamigration.migrationjobs.createTagBinding` `datamigration.migrationjobs.deleteTagBinding` `datamigration.migrationjobs.listEffectiveTags` `datamigration.migrationjobs.listTagBindings` `datamigration.privateconnections.createTagBinding` `datamigration.privateconnections.deleteTagBinding` `datamigration.privateconnections.listEffectiveTags` `datamigration.privateconnections.listTagBindings` `dataplex.agentTasks.create` `dataplex.agentTasks.delete` `dataplex.agentTasks.get` `dataplex.agentTasks.getData` `dataplex.agentTasks.getIamPolicy` `dataplex.agentTasks.list` `dataplex.agentTasks.run` `dataplex.agentTasks.update` `dataplex.aspectTypes.create` `dataplex.aspectTypes.get` `dataplex.aspectTypes.list` `dataplex.aspectTypes.use` `dataplex.dataDomains.discover` `dataplex.datascans.cancel` `dataplex.datascans.create` `dataplex.datascans.delete` `dataplex.datascans.get` `dataplex.datascans.getData` `dataplex.datascans.getIamPolicy` `dataplex.datascans.list` `dataplex.datascans.run` `dataplex.datascans.update` `dataplex.entries.get` `dataplex.entries.update` `dataplex.entryGroups.createTagBinding` `dataplex.entryGroups.deleteTagBinding` `dataplex.entryGroups.listEffectiveTags` `dataplex.entryGroups.listTagBindings` `dataplex.entryTypes.createTagBinding` `dataplex.entryTypes.deleteTagBinding` `dataplex.entryTypes.listEffectiveTags` `dataplex.entryTypes.listTagBindings` `dataplex.governanceRules.*` - `dataplex.governanceRules.createTagBinding` - `dataplex.governanceRules.deleteTagBinding` - `dataplex.governanceRules.listEffectiveTags` - `dataplex.governanceRules.listTagBindings` `dataplex.operations.get` `dataplex.operations.list` `dataplex.projects.search` `datastore.databases.createTagBinding` `datastore.databases.deleteTagBinding` `datastore.databases.listEffectiveTags` `datastore.databases.listTagBindings` `datastream.connectionProfiles.createTagBinding` `datastream.connectionProfiles.deleteTagBinding` `datastream.connectionProfiles.listEffectiveTags` `datastream.connectionProfiles.listTagBindings` `datastream.privateConnections.createTagBinding` `datastream.privateConnections.deleteTagBinding` `datastream.privateConnections.listEffectiveTags` `datastream.privateConnections.listTagBindings` `datastream.streams.createTagBinding` `datastream.streams.deleteTagBinding` `datastream.streams.listEffectiveTags` `datastream.streams.listTagBindings` `developerconnect.connections.createTagBinding` `developerconnect.connections.deleteTagBinding` `developerconnect.connections.listEffectiveTags` `developerconnect.connections.listTagBindings` `dlp.*` - `dlp.analyzeRiskTemplates.create` - `dlp.analyzeRiskTemplates.delete` - `dlp.analyzeRiskTemplates.get` - `dlp.analyzeRiskTemplates.list` - `dlp.analyzeRiskTemplates.update` - `dlp.charts.get` - `dlp.columnDataProfiles.get` - `dlp.columnDataProfiles.list` - `dlp.connections.create` - `dlp.connections.delete` - `dlp.connections.get` - `dlp.connections.list` - `dlp.connections.search` - `dlp.connections.update` - `dlp.contentPolicies.apply` - `dlp.contentPolicies.create` - `dlp.contentPolicies.delete` - `dlp.contentPolicies.get` - `dlp.contentPolicies.list` - `dlp.contentPolicies.update` - `dlp.deidentifyTemplates.create` - `dlp.deidentifyTemplates.delete` - `dlp.deidentifyTemplates.get` - `dlp.deidentifyTemplates.list` - `dlp.deidentifyTemplates.update` - `dlp.estimates.cancel` - `dlp.estimates.create` - `dlp.estimates.delete` - `dlp.estimates.get` - `dlp.estimates.list` - `dlp.fileStoreProfiles.delete` - `dlp.fileStoreProfiles.get` - `dlp.fileStoreProfiles.list` - `dlp.inspectFindings.list` - `dlp.inspectTemplates.create` - `dlp.inspectTemplates.delete` - `dlp.inspectTemplates.get` - `dlp.inspectTemplates.list` - `dlp.inspectTemplates.update` - `dlp.jobTriggers.create` - `dlp.jobTriggers.delete` - `dlp.jobTriggers.get` - `dlp.jobTriggers.hybridInspect` - `dlp.jobTriggers.list` - `dlp.jobTriggers.update` - `dlp.jobs.cancel` - `dlp.jobs.create` - `dlp.jobs.delete` - `dlp.jobs.get` - `dlp.jobs.hybridInspect` - `dlp.jobs.list` - `dlp.kms.encrypt` - `dlp.locations.get` - `dlp.locations.list` - `dlp.projectDataProfiles.get` - `dlp.projectDataProfiles.list` - `dlp.storedInfoTypes.create` - `dlp.storedInfoTypes.delete` - `dlp.storedInfoTypes.get` - `dlp.storedInfoTypes.list` - `dlp.storedInfoTypes.update` - `dlp.subscriptions.cancel` - `dlp.subscriptions.create` - `dlp.subscriptions.get` - `dlp.subscriptions.list` - `dlp.subscriptions.update` - `dlp.tableDataProfiles.delete` - `dlp.tableDataProfiles.get` - `dlp.tableDataProfiles.list` `dns.policies.createTagBinding` `dns.policies.deleteTagBinding` `dns.policies.listEffectiveTags` `dns.policies.listTagBindings` `domains.registrations.createTagBinding` `domains.registrations.deleteTagBinding` `domains.registrations.listEffectiveTags` `domains.registrations.listTagBindings` `eventarc.channelConnections.createTagBinding` `eventarc.channelConnections.deleteTagBinding` `eventarc.channelConnections.listEffectiveTags` `eventarc.channelConnections.listTagBindings` `eventarc.channels.createTagBinding` `eventarc.channels.deleteTagBinding` `eventarc.channels.listEffectiveTags` `eventarc.channels.listTagBindings` `eventarc.triggers.createTagBinding` `eventarc.triggers.deleteTagBinding` `eventarc.triggers.listEffectiveTags` `eventarc.triggers.listTagBindings` `file.backups.createTagBinding` `file.backups.deleteTagBinding` `file.backups.listEffectiveTags` `file.backups.listTagBindings` `file.instances.createTagBinding` `file.instances.deleteTagBinding` `file.instances.listEffectiveTags` `file.instances.listTagBindings` `file.snapshots.*` - `file.snapshots.createTagBinding` - `file.snapshots.deleteTagBinding` - `file.snapshots.listEffectiveTags` - `file.snapshots.listTagBindings` `financialservices.v1instances.createTagBinding` `financialservices.v1instances.deleteTagBinding` `financialservices.v1instances.listEffectiveTags` `financialservices.v1instances.listTagBindings` `firebaseapphosting.backends.createTagBinding` `firebaseapphosting.backends.deleteTagBinding` `firebaseapphosting.backends.listEffectiveTags` `firebaseapphosting.backends.listTagBindings` `firebasedataconnect.services.createTagBinding` `firebasedataconnect.services.deleteTagBinding` `firebasedataconnect.services.listEffectiveTags` `firebasedataconnect.services.listTagBindings` `gdchardwaremanagement.hardware.createTagBinding` `gdchardwaremanagement.hardware.deleteTagBinding` `gdchardwaremanagement.hardware.listEffectiveTags` `gdchardwaremanagement.hardware.listTagBindings` `gdchardwaremanagement.orders.createTagBinding` `gdchardwaremanagement.orders.deleteTagBinding` `gdchardwaremanagement.orders.listEffectiveTags` `gdchardwaremanagement.orders.listTagBindings` `gdchardwaremanagement.sites.createTagBinding` `gdchardwaremanagement.sites.deleteTagBinding` `gdchardwaremanagement.sites.listEffectiveTags` `gdchardwaremanagement.sites.listTagBindings` `gdchardwaremanagement.zoneOperations.*` - `gdchardwaremanagement.zoneOperations.createTagBinding` - `gdchardwaremanagement.zoneOperations.deleteTagBinding` - `gdchardwaremanagement.zoneOperations.listEffectiveTags` - `gdchardwaremanagement.zoneOperations.listTagBindings` `gdchardwaremanagement.zones.createTagBinding` `gdchardwaremanagement.zones.deleteTagBinding` `gdchardwaremanagement.zones.listEffectiveTags` `gdchardwaremanagement.zones.listTagBindings` `geminidataanalytics.locations.chat` `gkemulticloud.attachedClusters.createTagBinding` `gkemulticloud.attachedClusters.deleteTagBinding` `gkemulticloud.attachedClusters.listEffectiveTags` `gkemulticloud.attachedClusters.listTagBindings` `gkeonprem.bareMetalAdminClusters.createTagBinding` `gkeonprem.bareMetalAdminClusters.deleteTagBinding` `gkeonprem.bareMetalAdminClusters.listEffectiveTags` `gkeonprem.bareMetalAdminClusters.listTagBindings` `gkeonprem.bareMetalClusters.createTagBinding` `gkeonprem.bareMetalClusters.deleteTagBinding` `gkeonprem.bareMetalClusters.listEffectiveTags` `gkeonprem.bareMetalClusters.listTagBindings` `gkeonprem.vmwareAdminClusters.createTagBinding` `gkeonprem.vmwareAdminClusters.deleteTagBinding` `gkeonprem.vmwareAdminClusters.listEffectiveTags` `gkeonprem.vmwareAdminClusters.listTagBindings` `gkeonprem.vmwareClusters.createTagBinding` `gkeonprem.vmwareClusters.deleteTagBinding` `gkeonprem.vmwareClusters.listEffectiveTags` `gkeonprem.vmwareClusters.listTagBindings` `iam.roles.createTagBinding` `iam.roles.deleteTagBinding` `iam.roles.listEffectiveTags` `iam.roles.listTagBindings` `iam.serviceAccounts.createTagBinding` `iam.serviceAccounts.deleteTagBinding` `iam.serviceAccounts.listEffectiveTags` `iam.serviceAccounts.listTagBindings` `krmapihosting.krmApiHosts.createTagBinding` `krmapihosting.krmApiHosts.deleteTagBinding` `krmapihosting.krmApiHosts.listEffectiveTags` `krmapihosting.krmApiHosts.listTagBindings` `livestream.channels.createTagBinding` `livestream.channels.deleteTagBinding` `livestream.channels.listEffectiveTags` `livestream.channels.listTagBindings` `livestream.inputs.createTagBinding` `livestream.inputs.deleteTagBinding` `livestream.inputs.listEffectiveTags` `livestream.inputs.listTagBindings` `livestream.pools.createTagBinding` `livestream.pools.deleteTagBinding` `livestream.pools.listEffectiveTags` `livestream.pools.listTagBindings` `logging.buckets.createTagBinding` `logging.buckets.deleteTagBinding` `logging.buckets.listEffectiveTags` `logging.buckets.listTagBindings` `looker.instances.createTagBinding` `looker.instances.deleteTagBinding` `looker.instances.listEffectiveTags` `looker.instances.listTagBindings` `managedidentities.domains.createTagBinding` `managedidentities.domains.deleteTagBinding` `managedidentities.domains.listEffectiveTags` `managedidentities.domains.listTagBindings` `memcache.instances.createTagBinding` `memcache.instances.deleteTagBinding` `memcache.instances.listEffectiveTags` `memcache.instances.listTagBindings` `memorystore.backupCollections.createTagBinding` `memorystore.backupCollections.deleteTagBinding` `memorystore.backupCollections.listEffectiveTags` `memorystore.backupCollections.listTagBindings` `memorystore.instances.createTagBinding` `memorystore.instances.deleteTagBinding` `memorystore.instances.listEffectiveTags` `memorystore.instances.listTagBindings` `metastore.federations.createTagBinding` `metastore.federations.deleteTagBinding` `metastore.federations.listEffectiveTags` `metastore.federations.listTagBindings` `metastore.services.createTagBinding` `metastore.services.deleteTagBinding` `metastore.services.listEffectiveTags` `metastore.services.listTagBindings` `monitoring.alertPolicies.createTagBinding` `monitoring.alertPolicies.deleteTagBinding` `monitoring.alertPolicies.listEffectiveTags` `monitoring.alertPolicies.listTagBindings` `monitoring.dashboards.createTagBinding` `monitoring.dashboards.deleteTagBinding` `monitoring.dashboards.listEffectiveTags` `monitoring.dashboards.listTagBindings` `monitoring.timeSeries.create` `networkconnectivity.hubs.createTagBinding` `networkconnectivity.hubs.deleteTagBinding` `networkconnectivity.hubs.listEffectiveTags` `networkconnectivity.hubs.listTagBindings` `networkconnectivity.spokes.createTagBinding` `networkconnectivity.spokes.deleteTagBinding` `networkconnectivity.spokes.listEffectiveTags` `networkconnectivity.spokes.listTagBindings` `networkmanagement.connectivitytests.createTagBinding` `networkmanagement.connectivitytests.deleteTagBinding` `networkmanagement.connectivitytests.listEffectiveTags` `networkmanagement.connectivitytests.listTagBindings` `networksecurity.authorizationPolicies.createTagBinding` `networksecurity.authorizationPolicies.deleteTagBinding` `networksecurity.authorizationPolicies.listEffectiveTags` `networksecurity.authorizationPolicies.listTagBindings` `networksecurity.clientTlsPolicies.createTagBinding` `networksecurity.clientTlsPolicies.deleteTagBinding` `networksecurity.clientTlsPolicies.listEffectiveTags` `networksecurity.clientTlsPolicies.listTagBindings` `networksecurity.serverTlsPolicies.createTagBinding` `networksecurity.serverTlsPolicies.deleteTagBinding` `networksecurity.serverTlsPolicies.listEffectiveTags` `networksecurity.serverTlsPolicies.listTagBindings` `networkservices.endpointConfigSelectors.*` - `networkservices.endpointConfigSelectors.createTagBinding` - `networkservices.endpointConfigSelectors.deleteTagBinding` - `networkservices.endpointConfigSelectors.listEffectiveTags` - `networkservices.endpointConfigSelectors.listTagBindings` `networkservices.gateways.createTagBinding` `networkservices.gateways.deleteTagBinding` `networkservices.gateways.listEffectiveTags` `networkservices.gateways.listTagBindings` `networkservices.httpFilters.createTagBinding` `networkservices.httpFilters.deleteTagBinding` `networkservices.httpFilters.listEffectiveTags` `networkservices.httpFilters.listTagBindings` `networkservices.meshes.createTagBinding` `networkservices.meshes.deleteTagBinding` `networkservices.meshes.listEffectiveTags` `networkservices.meshes.listTagBindings` `notebooks.instances.createTagBinding` `notebooks.instances.deleteTagBinding` `notebooks.instances.listEffectiveTags` `notebooks.instances.listTagBindings` `oracledatabase.autonomousDatabases.createTagBinding` `oracledatabase.autonomousDatabases.deleteTagBinding` `oracledatabase.autonomousDatabases.listEffectiveTags` `oracledatabase.autonomousDatabases.listTagBindings` `oracledatabase.cloudExadataInfrastructures.createTagBinding` `oracledatabase.cloudExadataInfrastructures.deleteTagBinding` `oracledatabase.cloudExadataInfrastructures.listEffectiveTags` `oracledatabase.cloudExadataInfrastructures.listTagBindings` `oracledatabase.cloudVmClusters.createTagBinding` `oracledatabase.cloudVmClusters.deleteTagBinding` `oracledatabase.cloudVmClusters.listEffectiveTags` `oracledatabase.cloudVmClusters.listTagBindings` `oracledatabase.dbSystems.createTagBinding` `oracledatabase.dbSystems.deleteTagBinding` `oracledatabase.dbSystems.listEffectiveTags` `oracledatabase.dbSystems.listTagBindings` `oracledatabase.entitlements.createTagBinding` `oracledatabase.entitlements.deleteTagBinding` `oracledatabase.entitlements.listEffectiveTags` `oracledatabase.entitlements.listTagBindings` `parametermanager.parameters.createTagBinding` `parametermanager.parameters.deleteTagBinding` `parametermanager.parameters.listEffectiveTags` `parametermanager.parameters.listTagBindings` `privateca.caPools.createTagBinding` `privateca.caPools.deleteTagBinding` `privateca.caPools.listEffectiveTags` `privateca.caPools.listTagBindings` `privateca.certificateTemplates.createTagBinding` `privateca.certificateTemplates.deleteTagBinding` `privateca.certificateTemplates.listEffectiveTags` `privateca.certificateTemplates.listTagBindings` `pubsub.snapshots.createTagBinding` `pubsub.snapshots.deleteTagBinding` `pubsub.snapshots.listEffectiveTags` `pubsub.snapshots.listTagBindings` `pubsub.subscriptions.createTagBinding` `pubsub.subscriptions.deleteTagBinding` `pubsub.subscriptions.listEffectiveTags` `pubsub.subscriptions.listTagBindings` `pubsub.topics.createTagBinding` `pubsub.topics.deleteTagBinding` `pubsub.topics.listEffectiveTags` `pubsub.topics.listTagBindings` `pubsub.topics.updateTag` `recaptchaenterprise.keys.createTagBinding` `recaptchaenterprise.keys.deleteTagBinding` `recaptchaenterprise.keys.listEffectiveTags` `recaptchaenterprise.keys.listTagBindings` `recommender.alloydbClusterPerformanceInsights.get` `recommender.alloydbClusterPerformanceInsights.list` `recommender.alloydbClusterPerformanceRecommendations.get` `recommender.alloydbClusterPerformanceRecommendations.list` `recommender.alloydbClusterReliabilityInsights.get` `recommender.alloydbClusterReliabilityInsights.list` `recommender.alloydbClusterReliabilityRecommendations.get` `recommender.alloydbClusterReliabilityRecommendations.list` `recommender.cloudAssetInsights.get` `recommender.cloudAssetInsights.list` `recommender.locations.*` - `recommender.locations.get` - `recommender.locations.list` `redis.clusters.createTagBinding` `redis.clusters.deleteTagBinding` `redis.clusters.listEffectiveTags` `redis.clusters.listTagBindings` `redis.instances.createTagBinding` `redis.instances.deleteTagBinding` `redis.instances.listEffectiveTags` `redis.instances.listTagBindings` `resourcemanager.hierarchyNodes.*` - `resourcemanager.hierarchyNodes.createTagBinding` - `resourcemanager.hierarchyNodes.deleteTagBinding` - `resourcemanager.hierarchyNodes.listEffectiveTags` - `resourcemanager.hierarchyNodes.listTagBindings` `resourcemanager.projects.get` `resourcemanager.projects.list` `resourcemanager.tagKeys.get` `resourcemanager.tagKeys.list` `resourcemanager.tagValueBindings.*` - `resourcemanager.tagValueBindings.create` - `resourcemanager.tagValueBindings.delete` `resourcemanager.tagValues.get` `resourcemanager.tagValues.list` `run.jobs.createTagBinding` `run.jobs.deleteTagBinding` `run.jobs.listEffectiveTags` `run.jobs.listTagBindings` `run.services.createTagBinding` `run.services.deleteTagBinding` `run.services.listEffectiveTags` `run.services.listTagBindings` `secretmanager.secrets.createTagBinding` `secretmanager.secrets.deleteTagBinding` `secretmanager.secrets.listEffectiveTags` `secretmanager.secrets.listTagBindings` `serviceusage.services.use` `spanner.instances.createTagBinding` `spanner.instances.deleteTagBinding` `spanner.instances.listEffectiveTags` `spanner.instances.listTagBindings` `storage.buckets.createTagBinding` `storage.buckets.deleteTagBinding` `storage.buckets.get` `storage.buckets.getIamPolicy` `storage.buckets.listEffectiveTags` `storage.buckets.listTagBindings` `storage.folders.get` `storage.folders.list` `storage.managedFolders.get` `storage.managedFolders.list` `storage.objects.get` `storage.objects.getIamPolicy` `storage.objects.list` `tpu.nodes.createTagBinding` `tpu.nodes.deleteTagBinding` `tpu.nodes.listEffectiveTags` `tpu.nodes.listTagBindings` `transcoder.jobTemplates.createTagBinding` `transcoder.jobTemplates.deleteTagBinding` `transcoder.jobTemplates.listEffectiveTags` `transcoder.jobTemplates.listTagBindings` `transcoder.jobs.createTagBinding` `transcoder.jobs.deleteTagBinding` `transcoder.jobs.listEffectiveTags` `transcoder.jobs.listTagBindings` `videostitcher.cdnKeys.createTagBinding` `videostitcher.cdnKeys.deleteTagBinding` `videostitcher.cdnKeys.listEffectiveTags` `videostitcher.cdnKeys.listTagBindings` `videostitcher.liveConfigs.createTagBinding` `videostitcher.liveConfigs.deleteTagBinding` `videostitcher.liveConfigs.listEffectiveTags` `videostitcher.liveConfigs.listTagBindings` `videostitcher.slates.createTagBinding` `videostitcher.slates.deleteTagBinding` `videostitcher.slates.listEffectiveTags` `videostitcher.slates.listTagBindings` `videostitcher.vodConfigs.createTagBinding` `videostitcher.vodConfigs.deleteTagBinding` `videostitcher.vodConfigs.listEffectiveTags` `videostitcher.vodConfigs.listTagBindings` `vmmigration.groups.createTagBinding` `vmmigration.groups.deleteTagBinding` `vmmigration.groups.listEffectiveTags` `vmmigration.groups.listTagBindings` `vmmigration.sources.createTagBinding` `vmmigration.sources.deleteTagBinding` `vmmigration.sources.listEffectiveTags` `vmmigration.sources.listTagBindings` `vmwareengine.networkPeerings.createTagBinding` `vmwareengine.networkPeerings.deleteTagBinding` `vmwareengine.networkPeerings.listEffectiveTags` `vmwareengine.networkPeerings.listTagBindings` `vmwareengine.networkPolicies.createTagBinding` `vmwareengine.networkPolicies.deleteTagBinding` `vmwareengine.networkPolicies.listEffectiveTags` `vmwareengine.networkPolicies.listTagBindings` `vmwareengine.privateClouds.createTagBinding` `vmwareengine.privateClouds.deleteTagBinding` `vmwareengine.privateClouds.listEffectiveTags` `vmwareengine.privateClouds.listTagBindings` `vmwareengine.privateConnections.createTagBinding` `vmwareengine.privateConnections.deleteTagBinding` `vmwareengine.privateConnections.listEffectiveTags` `vmwareengine.privateConnections.listTagBindings` `vmwareengine.vmwareEngineNetworks.createTagBinding` `vmwareengine.vmwareEngineNetworks.deleteTagBinding` `vmwareengine.vmwareEngineNetworks.listEffectiveTags` `vmwareengine.vmwareEngineNetworks.listTagBindings` `workflows.workflows.createTagBinding` `workflows.workflows.deleteTagBinding` `workflows.workflows.listEffectiveTags` `workflows.workflows.listTagBindings` `workstations.workstationClusters.createTagBinding` `workstations.workstationClusters.deleteTagBinding` `workstations.workstationClusters.listEffectiveTags` `workstations.workstationClusters.listTagBindings` |
| #### DLP Project Data Profiles Reader (`roles/dlp.projectDataProfilesReader`) Read DLP project profiles. | `dlp.projectDataProfiles.*` - `dlp.projectDataProfiles.get` - `dlp.projectDataProfiles.list` |
| #### DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Permissions needed by the DLP service account to generate data profiles within a project. | `aiplatform.agentAnomalyDetectionScopes.get` `aiplatform.agentAnomalyDetectionScopes.list` `aiplatform.agentExamples.get` `aiplatform.agentExamples.list` `aiplatform.agents.get` `aiplatform.agents.list` `aiplatform.analyzedInvocations.*` - `aiplatform.analyzedInvocations.get` - `aiplatform.analyzedInvocations.list` `aiplatform.analyzedSessions.*` - `aiplatform.analyzedSessions.aggregate` - `aiplatform.analyzedSessions.get` - `aiplatform.analyzedSessions.list` `aiplatform.annotationSpecs.get` `aiplatform.annotationSpecs.list` `aiplatform.annotations.get` `aiplatform.annotations.list` `aiplatform.apps.get` `aiplatform.apps.list` `aiplatform.artifacts.get` `aiplatform.artifacts.list` `aiplatform.batchPredictionJobs.get` `aiplatform.batchPredictionJobs.list` `aiplatform.cacheConfigs.get` `aiplatform.cachedContents.get` `aiplatform.cachedContents.list` `aiplatform.consents.get` `aiplatform.contexts.get` `aiplatform.contexts.list` `aiplatform.contexts.queryContextLineageSubgraph` `aiplatform.customJobs.get` `aiplatform.customJobs.list` `aiplatform.dataItems.get` `aiplatform.dataItems.list` `aiplatform.dataLabelingJobs.get` `aiplatform.dataLabelingJobs.list` `aiplatform.datasetVersions.get` `aiplatform.datasetVersions.list` `aiplatform.datasets.get` `aiplatform.datasets.list` `aiplatform.deploymentResourcePools.get` `aiplatform.deploymentResourcePools.list` `aiplatform.deploymentResourcePools.queryDeployedModels` `aiplatform.detectors.get` `aiplatform.detectors.list` `aiplatform.edgeDeploymentJobs.get` `aiplatform.edgeDeploymentJobs.list` `aiplatform.edgeDeviceDebugInfo.get` `aiplatform.edgeDevices.get` `aiplatform.edgeDevices.list` `aiplatform.endpoints.explain` `aiplatform.endpoints.get` `aiplatform.endpoints.getIamPolicy` `aiplatform.endpoints.list` `aiplatform.entityTypes.get` `aiplatform.entityTypes.getIamPolicy` `aiplatform.entityTypes.list` `aiplatform.entityTypes.readFeatureValues` `aiplatform.entityTypes.streamingReadFeatureValues` `aiplatform.evaluationExperiments.get` `aiplatform.evaluationExperiments.list` `aiplatform.evaluationItems.get` `aiplatform.evaluationItems.list` `aiplatform.evaluationMetrics.get` `aiplatform.evaluationMetrics.list` `aiplatform.evaluationRuns.get` `aiplatform.evaluationRuns.list` `aiplatform.evaluationSets.get` `aiplatform.evaluationSets.list` `aiplatform.exampleStores.get` `aiplatform.exampleStores.list` `aiplatform.exampleStores.readExample` `aiplatform.executions.get` `aiplatform.executions.list` `aiplatform.executions.queryExecutionInputsAndOutputs` `aiplatform.extensions.get` `aiplatform.extensions.list` `aiplatform.featureGroups.get` `aiplatform.featureGroups.getIamPolicy` `aiplatform.featureGroups.list` `aiplatform.featureMonitorJobs.get` `aiplatform.featureMonitorJobs.list` `aiplatform.featureMonitors.get` `aiplatform.featureMonitors.list` `aiplatform.featureOnlineStores.get` `aiplatform.featureOnlineStores.getIamPolicy` `aiplatform.featureOnlineStores.list` `aiplatform.featureViewSyncs.*` - `aiplatform.featureViewSyncs.get` - `aiplatform.featureViewSyncs.list` `aiplatform.featureViews.fetchFeatureValues` `aiplatform.featureViews.get` `aiplatform.featureViews.getIamPolicy` `aiplatform.featureViews.list` `aiplatform.featureViews.searchNearestEntities` `aiplatform.features.get` `aiplatform.features.list` `aiplatform.featurestores.get` `aiplatform.featurestores.getIamPolicy` `aiplatform.featurestores.list` `aiplatform.featurestores.readFeatures` `aiplatform.humanInTheLoops.get` `aiplatform.humanInTheLoops.list` `aiplatform.humanInTheLoops.queryAnnotationStats` `aiplatform.hyperparameterTuningJobs.get` `aiplatform.hyperparameterTuningJobs.list` `aiplatform.indexEndpoints.get` `aiplatform.indexEndpoints.list` `aiplatform.indexEndpoints.queryVectors` `aiplatform.indexes.get` `aiplatform.indexes.list` `aiplatform.interactions.get` `aiplatform.interactions.list` `aiplatform.locations.*` - `aiplatform.locations.evaluateInstances` - `aiplatform.locations.get` - `aiplatform.locations.list` `aiplatform.memories.get` `aiplatform.memories.list` `aiplatform.memoryRevisions.get` `aiplatform.memoryRevisions.list` `aiplatform.metadataSchemas.get` `aiplatform.metadataSchemas.list` `aiplatform.metadataStores.get` `aiplatform.metadataStores.list` `aiplatform.migratableResources.search` `aiplatform.modelDeploymentMonitoringJobs.get` `aiplatform.modelDeploymentMonitoringJobs.list` `aiplatform.modelDeploymentMonitoringJobs.searchStatsAnomalies` `aiplatform.modelEvaluationSlices.get` `aiplatform.modelEvaluationSlices.list` `aiplatform.modelEvaluations.get` `aiplatform.modelEvaluations.list` `aiplatform.modelMonitoringJobs.get` `aiplatform.modelMonitoringJobs.list` `aiplatform.modelMonitors.get` `aiplatform.modelMonitors.list` `aiplatform.modelMonitors.searchModelMonitoringAlerts` `aiplatform.modelMonitors.searchModelMonitoringStats` `aiplatform.models.get` `aiplatform.models.list` `aiplatform.monitoredAgents.get` `aiplatform.monitoredAgents.list` `aiplatform.nasJobs.get` `aiplatform.nasJobs.list` `aiplatform.nasTrialDetails.*` - `aiplatform.nasTrialDetails.get` - `aiplatform.nasTrialDetails.list` `aiplatform.notebookExecutionJobs.get` `aiplatform.notebookExecutionJobs.list` `aiplatform.notebookRuntimeTemplates.apply` `aiplatform.notebookRuntimeTemplates.get` `aiplatform.notebookRuntimeTemplates.getIamPolicy` `aiplatform.notebookRuntimeTemplates.list` `aiplatform.notebookRuntimes.get` `aiplatform.notebookRuntimes.list` `aiplatform.onlineEvaluators.get` `aiplatform.onlineEvaluators.list` `aiplatform.operations.list` `aiplatform.persistentResources.get` `aiplatform.persistentResources.list` `aiplatform.pipelineJobs.get` `aiplatform.pipelineJobs.list` `aiplatform.provisionedThroughputRevisions.*` - `aiplatform.provisionedThroughputRevisions.get` - `aiplatform.provisionedThroughputRevisions.list` `aiplatform.provisionedThroughputs.get` `aiplatform.provisionedThroughputs.list` `aiplatform.ragCorpora.get` `aiplatform.ragCorpora.list` `aiplatform.ragCorpora.query` `aiplatform.ragEngineConfigs.get` `aiplatform.ragFiles.get` `aiplatform.ragFiles.list` `aiplatform.reasoningEngineRuntimeRevisions.get` `aiplatform.reasoningEngineRuntimeRevisions.list` `aiplatform.reasoningEngines.get` `aiplatform.reasoningEngines.list` `aiplatform.reasoningEngines.query` `aiplatform.sandboxEnvironments.get` `aiplatform.sandboxEnvironments.list` `aiplatform.schedules.get` `aiplatform.schedules.list` `aiplatform.semanticGovernancePolicies.get` `aiplatform.semanticGovernancePolicies.list` `aiplatform.semanticGovernancePolicyEngine.get` `aiplatform.sessionEvents.list` `aiplatform.sessions.get` `aiplatform.sessions.list` `aiplatform.specialistPools.get` `aiplatform.specialistPools.list` `aiplatform.specialistPools.update` `aiplatform.studies.get` `aiplatform.studies.list` `aiplatform.tasks.get` `aiplatform.tasks.list` `aiplatform.tensorboardExperiments.get` `aiplatform.tensorboardExperiments.list` `aiplatform.tensorboardRuns.get` `aiplatform.tensorboardRuns.list` `aiplatform.tensorboardTimeSeries.batchRead` `aiplatform.tensorboardTimeSeries.get` `aiplatform.tensorboardTimeSeries.list` `aiplatform.tensorboardTimeSeries.read` `aiplatform.tensorboards.get` `aiplatform.tensorboards.list` `aiplatform.trainingPipelines.get` `aiplatform.trainingPipelines.list` `aiplatform.trials.get` `aiplatform.trials.list` `aiplatform.tuningJobs.get` `aiplatform.tuningJobs.list` `alloydb.backups.createTagBinding` `alloydb.backups.deleteTagBinding` `alloydb.backups.get` `alloydb.backups.list` `alloydb.backups.listEffectiveTags` `alloydb.backups.listTagBindings` `alloydb.clusters.createTagBinding` `alloydb.clusters.deleteTagBinding` `alloydb.clusters.export` `alloydb.clusters.generateClientCertificate` `alloydb.clusters.get` `alloydb.clusters.list` `alloydb.clusters.listEffectiveTags` `alloydb.clusters.listTagBindings` `alloydb.databases.get` `alloydb.databases.list` `alloydb.instances.connect` `alloydb.instances.executeSql` `alloydb.instances.executeSqlReadOnly` `alloydb.instances.get` `alloydb.instances.list` `alloydb.locations.*` - `alloydb.locations.get` - `alloydb.locations.list` `alloydb.operations.get` `alloydb.operations.list` `alloydb.supportedDatabaseFlags.*` - `alloydb.supportedDatabaseFlags.get` - `alloydb.supportedDatabaseFlags.list` `alloydb.users.get` `alloydb.users.list` `alloydb.users.login` `apigateway.apis.createTagBinding` `apigateway.apis.deleteTagBinding` `apigateway.apis.listEffectiveTags` `apigateway.apis.listTagBindings` `apigateway.gateways.createTagBinding` `apigateway.gateways.deleteTagBinding` `apigateway.gateways.listEffectiveTags` `apigateway.gateways.listTagBindings` `apihub.apis.createTagBinding` `apihub.apis.deleteTagBinding` `apihub.apis.listEffectiveTags` `apihub.apis.listTagBindings` `apihub.deployments.createTagBinding` `apihub.deployments.deleteTagBinding` `apihub.deployments.listEffectiveTags` `apihub.deployments.listTagBindings` `artifactregistry.repositories.createTagBinding` `artifactregistry.repositories.deleteTagBinding` `artifactregistry.repositories.listEffectiveTags` `artifactregistry.repositories.listTagBindings` `backupdr.backupVaults.createTagBinding` `backupdr.backupVaults.deleteTagBinding` `backupdr.backupVaults.listEffectiveTags` `backupdr.backupVaults.listTagBindings` `backupdr.managementServers.createTagBinding` `backupdr.managementServers.deleteTagBinding` `backupdr.managementServers.listEffectiveTags` `backupdr.managementServers.listTagBindings` `beyondcorp.appConnections.createTagBinding` `beyondcorp.appConnections.deleteTagBinding` `beyondcorp.appConnections.listEffectiveTags` `beyondcorp.appConnections.listTagBindings` `beyondcorp.appConnectors.createTagBinding` `beyondcorp.appConnectors.deleteTagBinding` `beyondcorp.appConnectors.listEffectiveTags` `beyondcorp.appConnectors.listTagBindings` `beyondcorp.appGateways.createTagBinding` `beyondcorp.appGateways.deleteTagBinding` `beyondcorp.appGateways.listEffectiveTags` `beyondcorp.appGateways.listTagBindings` `bigquery.bireservations.get` `bigquery.capacityCommitments.get` `bigquery.capacityCommitments.list` `bigquery.config.get` `bigquery.connections.updateTag` `bigquery.datasets.create` `bigquery.datasets.createTagBinding` `bigquery.datasets.deleteTagBinding` `bigquery.datasets.get` `bigquery.datasets.getIamPolicy` `bigquery.datasets.listEffectiveTags` `bigquery.datasets.listTagBindings` `bigquery.datasets.updateTag` `bigquery.jobs.create` `bigquery.jobs.get` `bigquery.jobs.list` `bigquery.jobs.listAll` `bigquery.jobs.listExecutionMetadata` `bigquery.models.*` - `bigquery.models.create` - `bigquery.models.delete` - `bigquery.models.export` - `bigquery.models.getData` - `bigquery.models.getMetadata` - `bigquery.models.list` - `bigquery.models.updateData` - `bigquery.models.updateMetadata` - `bigquery.models.updateTag` `bigquery.propertyGraphs.*` - `bigquery.propertyGraphs.create` - `bigquery.propertyGraphs.delete` - `bigquery.propertyGraphs.get` - `bigquery.propertyGraphs.list` - `bigquery.propertyGraphs.update` `bigquery.readsessions.*` - `bigquery.readsessions.create` - `bigquery.readsessions.getData` - `bigquery.readsessions.update` `bigquery.reservationAssignments.list` `bigquery.reservationAssignments.search` `bigquery.reservationGroups.get` `bigquery.reservationGroups.list` `bigquery.reservations.get` `bigquery.reservations.list` `bigquery.reservations.listFailoverDatasets` `bigquery.reservations.use` `bigquery.routines.*` - `bigquery.routines.create` - `bigquery.routines.delete` - `bigquery.routines.get` - `bigquery.routines.list` - `bigquery.routines.update` - `bigquery.routines.updateTag` `bigquery.savedqueries.get` `bigquery.savedqueries.list` `bigquery.tables.create` `bigquery.tables.createIndex` `bigquery.tables.createSnapshot` `bigquery.tables.createTagBinding` `bigquery.tables.delete` `bigquery.tables.deleteIndex` `bigquery.tables.deleteTagBinding` `bigquery.tables.export` `bigquery.tables.get` `bigquery.tables.getData` `bigquery.tables.getIamPolicy` `bigquery.tables.list` `bigquery.tables.listEffectiveTags` `bigquery.tables.listTagBindings` `bigquery.tables.replicateData` `bigquery.tables.restoreSnapshot` `bigquery.tables.update` `bigquery.tables.updateData` `bigquery.tables.updateIndex` `bigquery.tables.updateTag` `bigquery.transfers.get` `bigquerymigration.translation.translate` `bigtable.authorizedViews.createTagBinding` `bigtable.authorizedViews.deleteTagBinding` `bigtable.authorizedViews.listEffectiveTags` `bigtable.authorizedViews.listTagBindings` `bigtable.instances.createTagBinding` `bigtable.instances.deleteTagBinding` `bigtable.instances.listEffectiveTags` `bigtable.instances.listTagBindings` `certificatemanager.certissuanceconfigs.createTagBinding` `certificatemanager.certissuanceconfigs.deleteTagBinding` `certificatemanager.certissuanceconfigs.listEffectiveTags` `certificatemanager.certissuanceconfigs.listTagBindings` `certificatemanager.certmapentries.createTagBinding` `certificatemanager.certmapentries.deleteTagBinding` `certificatemanager.certmapentries.listEffectiveTags` `certificatemanager.certmapentries.listTagBindings` `certificatemanager.certmaps.createTagBinding` `certificatemanager.certmaps.deleteTagBinding` `certificatemanager.certmaps.listEffectiveTags` `certificatemanager.certmaps.listTagBindings` `certificatemanager.certs.createTagBinding` `certificatemanager.certs.deleteTagBinding` `certificatemanager.certs.listEffectiveTags` `certificatemanager.certs.listTagBindings` `certificatemanager.dnsauthorizations.createTagBinding` `certificatemanager.dnsauthorizations.deleteTagBinding` `certificatemanager.dnsauthorizations.listEffectiveTags` `certificatemanager.dnsauthorizations.listTagBindings` `certificatemanager.trustconfigs.createTagBinding` `certificatemanager.trustconfigs.deleteTagBinding` `certificatemanager.trustconfigs.listEffectiveTags` `certificatemanager.trustconfigs.listTagBindings` `cloudaicompanion.entitlements.get` `cloudaicompanion.operations.get` `cloudaicompanion.topics.create` `cloudasset.assets.analyzeIamPolicy` `cloudasset.assets.analyzeMove` `cloudasset.assets.analyzeOrgPolicy` `cloudasset.assets.exportAccessLevel` `cloudasset.assets.exportAccessPolicy` `cloudasset.assets.exportAiplatformBatchPredictionJobs` `cloudasset.assets.exportAiplatformCustomJobs` `cloudasset.assets.exportAiplatformDataLabelingJobs` `cloudasset.assets.exportAiplatformDatasets` `cloudasset.assets.exportAiplatformEndpoints` `cloudasset.assets.exportAiplatformHyperparameterTuningJobs` `cloudasset.assets.exportAiplatformMetadataStores` `cloudasset.assets.exportAiplatformModelDeploymentMonitoringJobs` `cloudasset.assets.exportAiplatformModels` `cloudasset.assets.exportAiplatformPipelineJobs` `cloudasset.assets.exportAiplatformSpecialistPools` `cloudasset.assets.exportAiplatformTrainingPipelines` `cloudasset.assets.exportAllAccessPolicy` `cloudasset.assets.exportAnthosConnectedCluster` `cloudasset.assets.exportAnthosedgeCluster` `cloudasset.assets.exportApigatewayApi` `cloudasset.assets.exportApigatewayApiConfig` `cloudasset.assets.exportApigatewayGateway` `cloudasset.assets.exportApikeysKeys` `cloudasset.assets.exportAppengineApplications` `cloudasset.assets.exportAppengineServices` `cloudasset.assets.exportAppengineVersions` `cloudasset.assets.exportArtifactregistryDockerImages` `cloudasset.assets.exportArtifactregistryRepositories` `cloudasset.assets.exportAssuredWorkloadsWorkloads` `cloudasset.assets.exportBeyondCorpApiGateways` `cloudasset.assets.exportBeyondCorpAppConnections` `cloudasset.assets.exportBeyondCorpAppConnectors` `cloudasset.assets.exportBeyondCorpAppGateways` `cloudasset.assets.exportBeyondCorpClientConnectorServices` `cloudasset.assets.exportBeyondCorpClientGateways` `cloudasset.assets.exportBigqueryDatasets` `cloudasset.assets.exportBigqueryModels` `cloudasset.assets.exportBigqueryTables` `cloudasset.assets.exportBigtableAppProfile` `cloudasset.assets.exportBigtableBackup` `cloudasset.assets.exportBigtableCluster` `cloudasset.assets.exportBigtableInstance` `cloudasset.assets.exportBigtableTable` `cloudasset.assets.exportCloudAssetFeeds` `cloudasset.assets.exportCloudDeployDeliveryPipelines` `cloudasset.assets.exportCloudDeployReleases` `cloudasset.assets.exportCloudDeployRollouts` `cloudasset.assets.exportCloudDeployTargets` `cloudasset.assets.exportCloudDocumentAIEvaluation` `cloudasset.assets.exportCloudDocumentAIHumanReviewConfig` `cloudasset.assets.exportCloudDocumentAILabelerPool` `cloudasset.assets.exportCloudDocumentAIProcessor` `cloudasset.assets.exportCloudDocumentAIProcessorVersion` `cloudasset.assets.exportCloudbillingBillingAccounts` `cloudasset.assets.exportCloudbillingProjectBillingInfos` `cloudasset.assets.exportCloudfunctionsFunctions` `cloudasset.assets.exportCloudfunctionsGen2Functions` `cloudasset.assets.exportCloudkmsCryptoKeyVersions` `cloudasset.assets.exportCloudkmsCryptoKeys` `cloudasset.assets.exportCloudkmsEkmConnections` `cloudasset.assets.exportCloudkmsImportJobs` `cloudasset.assets.exportCloudkmsKeyRings` `cloudasset.assets.exportCloudmemcacheInstances` `cloudasset.assets.exportCloudresourcemanagerFolders` `cloudasset.assets.exportCloudresourcemanagerOrganizations` `cloudasset.assets.exportCloudresourcemanagerProjects` `cloudasset.assets.exportCloudresourcemanagerTagBindings` `cloudasset.assets.exportCloudresourcemanagerTagKeys` `cloudasset.assets.exportCloudresourcemanagerTagValues` `cloudasset.assets.exportComposerEnvironments` `cloudasset.assets.exportComputeAddress` `cloudasset.assets.exportComputeAutoscalers` `cloudasset.assets.exportComputeBackendBuckets` `cloudasset.assets.exportComputeBackendServices` `cloudasset.assets.exportComputeCommitments` `cloudasset.assets.exportComputeDisks` `cloudasset.assets.exportComputeExternalVpnGateways` `cloudasset.assets.exportComputeFirewallPolicies` `cloudasset.assets.exportComputeFirewalls` `cloudasset.assets.exportComputeForwardingRules` `cloudasset.assets.exportComputeGlobalAddress` `cloudasset.assets.exportComputeGlobalForwardingRules` `cloudasset.assets.exportComputeHealthChecks` `cloudasset.assets.exportComputeHttpHealthChecks` `cloudasset.assets.exportComputeHttpsHealthChecks` `cloudasset.assets.exportComputeImages` `cloudasset.assets.exportComputeInstanceGroupManagers` `cloudasset.assets.exportComputeInstanceGroups` `cloudasset.assets.exportComputeInstanceTemplates` `cloudasset.assets.exportComputeInstances` `cloudasset.assets.exportComputeInterconnect` `cloudasset.assets.exportComputeInterconnectAttachment` `cloudasset.assets.exportComputeLicenses` `cloudasset.assets.exportComputeNetworkEndpointGroups` `cloudasset.assets.exportComputeNetworks` `cloudasset.assets.exportComputeNodeGroups` `cloudasset.assets.exportComputeNodeTemplates` `cloudasset.assets.exportComputePacketMirrorings` `cloudasset.assets.exportComputeProjects` `cloudasset.assets.exportComputeRegionAutoscaler` `cloudasset.assets.exportComputeRegionBackendServices` `cloudasset.assets.exportComputeRegionDisk` `cloudasset.assets.exportComputeRegionInstanceGroup` `cloudasset.assets.exportComputeRegionInstanceGroupManager` `cloudasset.assets.exportComputeReservations` `cloudasset.assets.exportComputeResourcePolicies` `cloudasset.assets.exportComputeRouters` `cloudasset.assets.exportComputeRoutes` `cloudasset.assets.exportComputeSecurityPolicy` `cloudasset.assets.exportComputeServiceAttachments` `cloudasset.assets.exportComputeSnapshots` `cloudasset.assets.exportComputeSslCertificates` `cloudasset.assets.exportComputeSslPolicies` `cloudasset.assets.exportComputeSubnetworks` `cloudasset.assets.exportComputeTargetHttpProxies` `cloudasset.assets.exportComputeTargetHttpsProxies` `cloudasset.assets.exportComputeTargetInstances` `cloudasset.assets.exportComputeTargetPools` `cloudasset.assets.exportComputeTargetSslProxies` `cloudasset.assets.exportComputeTargetTcpProxies` `cloudasset.assets.exportComputeTargetVpnGateways` `cloudasset.assets.exportComputeUrlMaps` `cloudasset.assets.exportComputeVpnGateways` `cloudasset.assets.exportComputeVpnTunnels` `cloudasset.assets.exportConnectorsConnections` `cloudasset.assets.exportConnectorsConnectorVersions` `cloudasset.assets.exportConnectorsConnectors` `cloudasset.assets.exportConnectorsProviders` `cloudasset.assets.exportConnectorsRuntimeConfigs` `cloudasset.assets.exportContainerAppsDeployment` `cloudasset.assets.exportContainerAppsReplicaSets` `cloudasset.assets.exportContainerBatchJobs` `cloudasset.assets.exportContainerClusterrole` `cloudasset.assets.exportContainerClusterrolebinding` `cloudasset.assets.exportContainerClusters` `cloudasset.assets.exportContainerExtensionsIngresses` `cloudasset.assets.exportContainerJobs` `cloudasset.assets.exportContainerNamespace` `cloudasset.assets.exportContainerNetworkingIngresses` `cloudasset.assets.exportContainerNetworkingNetworkPolicies` `cloudasset.assets.exportContainerNode` `cloudasset.assets.exportContainerNodepool` `cloudasset.assets.exportContainerPod` `cloudasset.assets.exportContainerReplicaSets` `cloudasset.assets.exportContainerRole` `cloudasset.assets.exportContainerRolebinding` `cloudasset.assets.exportContainerServices` `cloudasset.assets.exportContainerregistryImage` `cloudasset.assets.exportDataMigrationConnectionProfiles` `cloudasset.assets.exportDataMigrationMigrationJobs` `cloudasset.assets.exportDataflowJobs` `cloudasset.assets.exportDatafusionInstance` `cloudasset.assets.exportDataplexAssets` `cloudasset.assets.exportDataplexLakes` `cloudasset.assets.exportDataplexTasks` `cloudasset.assets.exportDataplexZones` `cloudasset.assets.exportDataprocAutoscalingPolicies` `cloudasset.assets.exportDataprocBatches` `cloudasset.assets.exportDataprocClusters` `cloudasset.assets.exportDataprocJobs` `cloudasset.assets.exportDataprocSessions` `cloudasset.assets.exportDataprocWorkflowTemplates` `cloudasset.assets.exportDatastreamConnectionProfile` `cloudasset.assets.exportDatastreamPrivateConnection` `cloudasset.assets.exportDatastreamStream` `cloudasset.assets.exportDialogflowAgents` `cloudasset.assets.exportDialogflowConversationProfiles` `cloudasset.assets.exportDialogflowKnowledgeBases` `cloudasset.assets.exportDialogflowLocationSettings` `cloudasset.assets.exportDlpDeidentifyTemplates` `cloudasset.assets.exportDlpDlpJobs` `cloudasset.assets.exportDlpInspectTemplates` `cloudasset.assets.exportDlpJobTriggers` `cloudasset.assets.exportDlpStoredInfoTypes` `cloudasset.assets.exportDnsManagedZones` `cloudasset.assets.exportDnsPolicies` `cloudasset.assets.exportDomainsRegistrations` `cloudasset.assets.exportEventarcTriggers` `cloudasset.assets.exportFileBackups` `cloudasset.assets.exportFileInstances` `cloudasset.assets.exportFirebaseAppInfos` `cloudasset.assets.exportFirebaseProjects` `cloudasset.assets.exportFirestoreDatabases` `cloudasset.assets.exportGKEHubFeatures` `cloudasset.assets.exportGKEHubMemberships` `cloudasset.assets.exportGameservicesGameServerClusters` `cloudasset.assets.exportGameservicesGameServerConfigs` `cloudasset.assets.exportGameservicesGameServerDeployments` `cloudasset.assets.exportGameservicesRealms` `cloudasset.assets.exportGkeBackupBackupPlans` `cloudasset.assets.exportGkeBackupBackups` `cloudasset.assets.exportGkeBackupRestorePlans` `cloudasset.assets.exportGkeBackupRestores` `cloudasset.assets.exportGkeBackupVolumeBackups` `cloudasset.assets.exportGkeBackupVolumeRestores` `cloudasset.assets.exportHealthcareConsentStores` `cloudasset.assets.exportHealthcareDatasets` `cloudasset.assets.exportHealthcareDicomStores` `cloudasset.assets.exportHealthcareFhirStores` `cloudasset.assets.exportHealthcareHl7V2Stores` `cloudasset.assets.exportIamPolicy` `cloudasset.assets.exportIamRoles` `cloudasset.assets.exportIamServiceAccountKeys` `cloudasset.assets.exportIamServiceAccounts` `cloudasset.assets.exportIapTunnel` `cloudasset.assets.exportIapTunnelInstances` `cloudasset.assets.exportIapTunnelZones` `cloudasset.assets.exportIapWeb` `cloudasset.assets.exportIapWebServiceVersion` `cloudasset.assets.exportIapWebServices` `cloudasset.assets.exportIapWebType` `cloudasset.assets.exportIdsEndpoints` `cloudasset.assets.exportIntegrationsAuthConfigs` `cloudasset.assets.exportIntegrationsCertificates` `cloudasset.assets.exportIntegrationsExecutions` `cloudasset.assets.exportIntegrationsIntegrationVersions` `cloudasset.assets.exportIntegrationsIntegrations` `cloudasset.assets.exportIntegrationsSfdcChannels` `cloudasset.assets.exportIntegrationsSfdcInstances` `cloudasset.assets.exportIntegrationsSuspensions` `cloudasset.assets.exportLoggingLogMetrics` `cloudasset.assets.exportLoggingLogSinks` `cloudasset.assets.exportManagedidentitiesDomain` `cloudasset.assets.exportMetastoreBackups` `cloudasset.assets.exportMetastoreMetadataImports` `cloudasset.assets.exportMetastoreServices` `cloudasset.assets.exportMonitoringAlertPolicies` `cloudasset.assets.exportNetworkConnectivityHubs` `cloudasset.assets.exportNetworkConnectivitySpokes` `cloudasset.assets.exportNetworkManagementConnectivityTests` `cloudasset.assets.exportNetworkServicesEndpointPolicies` `cloudasset.assets.exportNetworkServicesGateways` `cloudasset.assets.exportNetworkServicesGrpcRoutes` `cloudasset.assets.exportNetworkServicesHttpRoutes` `cloudasset.assets.exportNetworkServicesMeshes` `cloudasset.assets.exportNetworkServicesServiceBindings` `cloudasset.assets.exportNetworkServicesTcpRoutes` `cloudasset.assets.exportNetworkServicesTlsRoutes` `cloudasset.assets.exportOSConfigOSPolicyAssignmentReports` `cloudasset.assets.exportOSConfigOSPolicyAssignments` `cloudasset.assets.exportOSConfigVulnerabilityReports` `cloudasset.assets.exportOSInventories` `cloudasset.assets.exportOrgPolicy` `cloudasset.assets.exportPatchDeployments` `cloudasset.assets.exportPubsubSnapshots` `cloudasset.assets.exportPubsubSubscriptions` `cloudasset.assets.exportPubsubTopics` `cloudasset.assets.exportRedisInstances` `cloudasset.assets.exportResource` `cloudasset.assets.exportSecretManagerSecretVersions` `cloudasset.assets.exportSecretManagerSecrets` `cloudasset.assets.exportServiceDirectoryNamespaces` `cloudasset.assets.exportServicePerimeter` `cloudasset.assets.exportServiceconsumermanagementConsumerProperty` `cloudasset.assets.exportServiceconsumermanagementConsumerQuotaLimits` `cloudasset.assets.exportServiceconsumermanagementConsumers` `cloudasset.assets.exportServiceconsumermanagementProducerOverrides` `cloudasset.assets.exportServiceconsumermanagementTenancyUnits` `cloudasset.assets.exportServiceconsumermanagementVisibility` `cloudasset.assets.exportServicemanagementServices` `cloudasset.assets.exportServiceusageAdminOverrides` `cloudasset.assets.exportServiceusageConsumerOverrides` `cloudasset.assets.exportServiceusageServices` `cloudasset.assets.exportSpannerBackups` `cloudasset.assets.exportSpannerDatabases` `cloudasset.assets.exportSpannerInstances` `cloudasset.assets.exportSpeakerIdPhrases` `cloudasset.assets.exportSpeakerIdSettings` `cloudasset.assets.exportSpeakerIdSpeakers` `cloudasset.assets.exportSpeechCustomClasses` `cloudasset.assets.exportSpeechPhraseSets` `cloudasset.assets.exportSqladminBackupRuns` `cloudasset.assets.exportSqladminInstances` `cloudasset.assets.exportStorageBuckets` `cloudasset.assets.exportTpuNodes` `cloudasset.assets.exportVpcaccessConnector` `cloudasset.assets.listAccessLevel` `cloudasset.assets.listAccessPolicy` `cloudasset.assets.listAiplatformBatchPredictionJobs` `cloudasset.assets.listAiplatformCustomJobs` `cloudasset.assets.listAiplatformDataLabelingJobs` `cloudasset.assets.listAiplatformDatasets` `cloudasset.assets.listAiplatformEndpoints` `cloudasset.assets.listAiplatformHyperparameterTuningJobs` `cloudasset.assets.listAiplatformMetadataStores` `cloudasset.assets.listAiplatformModelDeploymentMonitoringJobs` `cloudasset.assets.listAiplatformModels` `cloudasset.assets.listAiplatformPipelineJobs` `cloudasset.assets.listAiplatformSpecialistPools` `cloudasset.assets.listAiplatformTrainingPipelines` `cloudasset.assets.listAllAccessPolicy` `cloudasset.assets.listAnthosConnectedCluster` `cloudasset.assets.listAnthosedgeCluster` `cloudasset.assets.listApigatewayApi` `cloudasset.assets.listApigatewayApiConfig` `cloudasset.assets.listApigatewayGateway` `cloudasset.assets.listApikeysKeys` `cloudasset.assets.listAppengineApplications` `cloudasset.assets.listAppengineServices` `cloudasset.assets.listAppengineVersions` `cloudasset.assets.listArtifactregistryDockerImages` `cloudasset.assets.listArtifactregistryRepositories` `cloudasset.assets.listAssuredWorkloadsWorkloads` `cloudasset.assets.listBeyondCorpApiGateways` `cloudasset.assets.listBeyondCorpAppConnections` `cloudasset.assets.listBeyondCorpAppConnectors` `cloudasset.assets.listBeyondCorpAppGateways` `cloudasset.assets.listBeyondCorpClientConnectorServices` `cloudasset.assets.listBeyondCorpClientGateways` `cloudasset.assets.listBigqueryDatasets` `cloudasset.assets.listBigqueryModels` `cloudasset.assets.listBigqueryTables` `cloudasset.assets.listBigtableAppProfile` `cloudasset.assets.listBigtableBackup` `cloudasset.assets.listBigtableCluster` `cloudasset.assets.listBigtableInstance` `cloudasset.assets.listBigtableTable` `cloudasset.assets.listCloudAssetFeeds` `cloudasset.assets.listCloudDeployDeliveryPipelines` `cloudasset.assets.listCloudDeployReleases` `cloudasset.assets.listCloudDeployRollouts` `cloudasset.assets.listCloudDeployTargets` `cloudasset.assets.listCloudDocumentAIEvaluation` `cloudasset.assets.listCloudDocumentAIHumanReviewConfig` `cloudasset.assets.listCloudDocumentAILabelerPool` `cloudasset.assets.listCloudDocumentAIProcessor` `cloudasset.assets.listCloudDocumentAIProcessorVersion` `cloudasset.assets.listCloudbillingBillingAccounts` `cloudasset.assets.listCloudbillingProjectBillingInfos` `cloudasset.assets.listCloudfunctionsFunctions` `cloudasset.assets.listCloudfunctionsGen2Functions` `cloudasset.assets.listCloudkmsCryptoKeyVersions` `cloudasset.assets.listCloudkmsCryptoKeys` `cloudasset.assets.listCloudkmsEkmConnections` `cloudasset.assets.listCloudkmsImportJobs` `cloudasset.assets.listCloudkmsKeyRings` `cloudasset.assets.listCloudmemcacheInstances` `cloudasset.assets.listCloudresourcemanagerFolders` `cloudasset.assets.listCloudresourcemanagerOrganizations` `cloudasset.assets.listCloudresourcemanagerProjects` `cloudasset.assets.listCloudresourcemanagerTagBindings` `cloudasset.assets.listCloudresourcemanagerTagKeys` `cloudasset.assets.listCloudresourcemanagerTagValues` `cloudasset.assets.listComposerEnvironments` `cloudasset.assets.listComputeAddress` `cloudasset.assets.listComputeAutoscalers` `cloudasset.assets.listComputeBackendBuckets` `cloudasset.assets.listComputeBackendServices` `cloudasset.assets.listComputeCommitments` `cloudasset.assets.listComputeDisks` `cloudasset.assets.listComputeExternalVpnGateways` `cloudasset.assets.listComputeFirewallPolicies` `cloudasset.assets.listComputeFirewalls` `cloudasset.assets.listComputeForwardingRules` `cloudasset.assets.listComputeGlobalAddress` `cloudasset.assets.listComputeGlobalForwardingRules` `cloudasset.assets.listComputeHealthChecks` `cloudasset.assets.listComputeHttpHealthChecks` `cloudasset.assets.listComputeHttpsHealthChecks` `cloudasset.assets.listComputeImages` `cloudasset.assets.listComputeInstanceGroupManagers` `cloudasset.assets.listComputeInstanceGroups` `cloudasset.assets.listComputeInstanceTemplates` `cloudasset.assets.listComputeInstances` `cloudasset.assets.listComputeInterconnect` `cloudasset.assets.listComputeInterconnectAttachment` `cloudasset.assets.listComputeLicenses` `cloudasset.assets.listComputeNetworkEndpointGroups` `cloudasset.assets.listComputeNetworks` `cloudasset.assets.listComputeNodeGroups` `cloudasset.assets.listComputeNodeTemplates` `cloudasset.assets.listComputePacketMirrorings` `cloudasset.assets.listComputeProjects` `cloudasset.assets.listComputeRegionAutoscaler` `cloudasset.assets.listComputeRegionBackendServices` `cloudasset.assets.listComputeRegionDisk` `cloudasset.assets.listComputeRegionInstanceGroup` `cloudasset.assets.listComputeRegionInstanceGroupManager` `cloudasset.assets.listComputeReservations` `cloudasset.assets.listComputeResourcePolicies` `cloudasset.assets.listComputeRouters` `cloudasset.assets.listComputeRoutes` `cloudasset.assets.listComputeSecurityPolicy` `cloudasset.assets.listComputeServiceAttachments` `cloudasset.assets.listComputeSnapshots` `cloudasset.assets.listComputeSslCertificates` `cloudasset.assets.listComputeSslPolicies` `cloudasset.assets.listComputeSubnetworks` `cloudasset.assets.listComputeTargetHttpProxies` `cloudasset.assets.listComputeTargetHttpsProxies` `cloudasset.assets.listComputeTargetInstances` `cloudasset.assets.listComputeTargetPools` `cloudasset.assets.listComputeTargetSslProxies` `cloudasset.assets.listComputeTargetTcpProxies` `cloudasset.assets.listComputeTargetVpnGateways` `cloudasset.assets.listComputeUrlMaps` `cloudasset.assets.listComputeVpnGateways` `cloudasset.assets.listComputeVpnTunnels` `cloudasset.assets.listConnectorsConnections` `cloudasset.assets.listConnectorsConnectorVersions` `cloudasset.assets.listConnectorsConnectors` `cloudasset.assets.listConnectorsProviders` `cloudasset.assets.listConnectorsRuntimeConfigs` `cloudasset.assets.listContainerAppsDeployment` `cloudasset.assets.listContainerAppsReplicaSets` `cloudasset.assets.listContainerBatchJobs` `cloudasset.assets.listContainerClusterrole` `cloudasset.assets.listContainerClusterrolebinding` `cloudasset.assets.listContainerClusters` `cloudasset.assets.listContainerExtensionsIngresses` `cloudasset.assets.listContainerJobs` `cloudasset.assets.listContainerNamespace` `cloudasset.assets.listContainerNetworkingIngresses` `cloudasset.assets.listContainerNetworkingNetworkPolicies` `cloudasset.assets.listContainerNode` `cloudasset.assets.listContainerNodepool` `cloudasset.assets.listContainerPod` `cloudasset.assets.listContainerReplicaSets` `cloudasset.assets.listContainerRole` `cloudasset.assets.listContainerRolebinding` `cloudasset.assets.listContainerServices` `cloudasset.assets.listContainerregistryImage` `cloudasset.assets.listDataMigrationConnectionProfiles` `cloudasset.assets.listDataMigrationMigrationJobs` `cloudasset.assets.listDataflowJobs` `cloudasset.assets.listDatafusionInstance` `cloudasset.assets.listDataplexAssets` `cloudasset.assets.listDataplexLakes` `cloudasset.assets.listDataplexTasks` `cloudasset.assets.listDataplexZones` `cloudasset.assets.listDataprocAutoscalingPolicies` `cloudasset.assets.listDataprocBatches` `cloudasset.assets.listDataprocClusters` `cloudasset.assets.listDataprocJobs` `cloudasset.assets.listDataprocSessions` `cloudasset.assets.listDataprocWorkflowTemplates` `cloudasset.assets.listDatastreamConnectionProfile` `cloudasset.assets.listDatastreamPrivateConnection` `cloudasset.assets.listDatastreamStream` `cloudasset.assets.listDialogflowAgents` `cloudasset.assets.listDialogflowConversationProfiles` `cloudasset.assets.listDialogflowKnowledgeBases` `cloudasset.assets.listDialogflowLocationSettings` `cloudasset.assets.listDlpDeidentifyTemplates` `cloudasset.assets.listDlpDlpJobs` `cloudasset.assets.listDlpInspectTemplates` `cloudasset.assets.listDlpJobTriggers` `cloudasset.assets.listDlpStoredInfoTypes` `cloudasset.assets.listDnsManagedZones` `cloudasset.assets.listDnsPolicies` `cloudasset.assets.listDomainsRegistrations` `cloudasset.assets.listEventarcTriggers` `cloudasset.assets.listFileBackups` `cloudasset.assets.listFileInstances` `cloudasset.assets.listFirebaseAppInfos` `cloudasset.assets.listFirebaseProjects` `cloudasset.assets.listFirestoreDatabases` `cloudasset.assets.listGKEHubFeatures` `cloudasset.assets.listGKEHubMemberships` `cloudasset.assets.listGameservicesGameServerClusters` `cloudasset.assets.listGameservicesGameServerConfigs` `cloudasset.assets.listGameservicesGameServerDeployments` `cloudasset.assets.listGameservicesRealms` `cloudasset.assets.listGkeBackupBackupPlans` `cloudasset.assets.listGkeBackupBackups` `cloudasset.assets.listGkeBackupRestorePlans` `cloudasset.assets.listGkeBackupRestores` `cloudasset.assets.listGkeBackupVolumeBackups` `cloudasset.assets.listGkeBackupVolumeRestores` `cloudasset.assets.listHealthcareConsentStores` `cloudasset.assets.listHealthcareDatasets` `cloudasset.assets.listHealthcareDicomStores` `cloudasset.assets.listHealthcareFhirStores` `cloudasset.assets.listHealthcareHl7V2Stores` `cloudasset.assets.listIamPolicy` `cloudasset.assets.listIamRoles` `cloudasset.assets.listIamServiceAccountKeys` `cloudasset.assets.listIamServiceAccounts` `cloudasset.assets.listIapTunnel` `cloudasset.assets.listIapTunnelInstances` `cloudasset.assets.listIapTunnelZones` `cloudasset.assets.listIapWeb` `cloudasset.assets.listIapWebServiceVersion` `cloudasset.assets.listIapWebServices` `cloudasset.assets.listIapWebType` `cloudasset.assets.listIdsEndpoints` `cloudasset.assets.listIntegrationsAuthConfigs` `cloudasset.assets.listIntegrationsCertificates` `cloudasset.assets.listIntegrationsExecutions` `cloudasset.assets.listIntegrationsIntegrationVersions` `cloudasset.assets.listIntegrationsIntegrations` `cloudasset.assets.listIntegrationsSfdcChannels` `cloudasset.assets.listIntegrationsSfdcInstances` `cloudasset.assets.listIntegrationsSuspensions` `cloudasset.assets.listLoggingLogMetrics` `cloudasset.assets.listLoggingLogSinks` `cloudasset.assets.listManagedidentitiesDomain` `cloudasset.assets.listMetastoreBackups` `cloudasset.assets.listMetastoreMetadataImports` `cloudasset.assets.listMetastoreServices` `cloudasset.assets.listMonitoringAlertPolicies` `cloudasset.assets.listNetworkConnectivityHubs` `cloudasset.assets.listNetworkConnectivitySpokes` `cloudasset.assets.listNetworkManagementConnectivityTests` `cloudasset.assets.listNetworkServicesEndpointPolicies` `cloudasset.assets.listNetworkServicesGateways` `cloudasset.assets.listNetworkServicesGrpcRoutes` `cloudasset.assets.listNetworkServicesHttpRoutes` `cloudasset.assets.listNetworkServicesMeshes` `cloudasset.assets.listNetworkServicesServiceBindings` `cloudasset.assets.listNetworkServicesTcpRoutes` `cloudasset.assets.listNetworkServicesTlsRoutes` `cloudasset.assets.listOSConfigOSPolicyAssignmentReports` `cloudasset.assets.listOSConfigOSPolicyAssignments` `cloudasset.assets.listOSConfigVulnerabilityReports` `cloudasset.assets.listOSInventories` `cloudasset.assets.listOrgPolicy` `cloudasset.assets.listPatchDeployments` `cloudasset.assets.listPubsubSnapshots` `cloudasset.assets.listPubsubSubscriptions` `cloudasset.assets.listPubsubTopics` `cloudasset.assets.listRedisInstances` `cloudasset.assets.listResource` `cloudasset.assets.listRunDomainMapping` `cloudasset.assets.listRunRevision` `cloudasset.assets.listRunService` `cloudasset.assets.listSecretManagerSecretVersions` `cloudasset.assets.listSecretManagerSecrets` `cloudasset.assets.listServiceDirectoryNamespaces` `cloudasset.assets.listServicePerimeter` `cloudasset.assets.listServiceconsumermanagementConsumerProperty` `cloudasset.assets.listServiceconsumermanagementConsumerQuotaLimits` `cloudasset.assets.listServiceconsumermanagementConsumers` `cloudasset.assets.listServiceconsumermanagementProducerOverrides` `cloudasset.assets.listServiceconsumermanagementTenancyUnits` `cloudasset.assets.listServiceconsumermanagementVisibility` `cloudasset.assets.listServicemanagementServices` `cloudasset.assets.listServiceusageAdminOverrides` `cloudasset.assets.listServiceusageConsumerOverrides` `cloudasset.assets.listServiceusageServices` `cloudasset.assets.listSpannerBackups` `cloudasset.assets.listSpannerDatabases` `cloudasset.assets.listSpannerInstances` `cloudasset.assets.listSpeakerIdPhrases` `cloudasset.assets.listSpeakerIdSettings` `cloudasset.assets.listSpeakerIdSpeakers` `cloudasset.assets.listSpeechCustomClasses` `cloudasset.assets.listSpeechPhraseSets` `cloudasset.assets.listSqladminBackupRuns` `cloudasset.assets.listSqladminInstances` `cloudasset.assets.listStorageBuckets` `cloudasset.assets.listTpuNodes` `cloudasset.assets.listVpcaccessConnector` `cloudasset.assets.queryAccessPolicy` `cloudasset.assets.queryIamPolicy` `cloudasset.assets.queryOSInventories` `cloudasset.assets.queryResource` `cloudasset.assets.searchAllIamPolicies` `cloudasset.assets.searchAllResources` `cloudasset.othercloudconnections.get` `cloudasset.othercloudconnections.list` `cloudasset.othercloudconnections.verify` `cloudasset.savedqueries.get` `cloudasset.savedqueries.list` `clouddeploy.deliveryPipelines.createTagBinding` `clouddeploy.deliveryPipelines.deleteTagBinding` `clouddeploy.deliveryPipelines.listEffectiveTags` `clouddeploy.deliveryPipelines.listTagBindings` `clouddeploy.targets.createTagBinding` `clouddeploy.targets.deleteTagBinding` `clouddeploy.targets.listEffectiveTags` `clouddeploy.targets.listTagBindings` `cloudkms.keyHandles.*` - `cloudkms.keyHandles.create` - `cloudkms.keyHandles.get` - `cloudkms.keyHandles.list` `cloudkms.keyRings.createTagBinding` `cloudkms.keyRings.deleteTagBinding` `cloudkms.keyRings.listEffectiveTags` `cloudkms.keyRings.listTagBindings` `cloudkms.operations.get` `cloudkms.projects.showEffectiveAutokeyConfig` `cloudsql.instances.connect` `cloudsql.instances.createTagBinding` `cloudsql.instances.deleteTagBinding` `cloudsql.instances.executeSql` `cloudsql.instances.get` `cloudsql.instances.listEffectiveTags` `cloudsql.instances.listTagBindings` `cloudsql.instances.login` `composer.environments.createTagBinding` `composer.environments.deleteTagBinding` `composer.environments.listEffectiveTags` `composer.environments.listTagBindings` `compute.addresses.createTagBinding` `compute.addresses.deleteTagBinding` `compute.addresses.listEffectiveTags` `compute.addresses.listTagBindings` `compute.backendBuckets.createTagBinding` `compute.backendBuckets.deleteTagBinding` `compute.backendBuckets.listEffectiveTags` `compute.backendBuckets.listTagBindings` `compute.backendServices.createTagBinding` `compute.backendServices.deleteTagBinding` `compute.backendServices.listEffectiveTags` `compute.backendServices.listTagBindings` `compute.commitments.createTagBinding` `compute.commitments.deleteTagBinding` `compute.commitments.listEffectiveTags` `compute.commitments.listTagBindings` `compute.disks.createTagBinding` `compute.disks.deleteTagBinding` `compute.disks.listEffectiveTags` `compute.disks.listTagBindings` `compute.externalVpnGateways.createTagBinding` `compute.externalVpnGateways.deleteTagBinding` `compute.externalVpnGateways.listEffectiveTags` `compute.externalVpnGateways.listTagBindings` `compute.firewallPolicies.createTagBinding` `compute.firewallPolicies.deleteTagBinding` `compute.firewallPolicies.listEffectiveTags` `compute.firewallPolicies.listTagBindings` `compute.firewalls.createTagBinding` `compute.firewalls.deleteTagBinding` `compute.firewalls.listEffectiveTags` `compute.firewalls.listTagBindings` `compute.forwardingRules.createTagBinding` `compute.forwardingRules.deleteTagBinding` `compute.forwardingRules.listEffectiveTags` `compute.forwardingRules.listTagBindings` `compute.futureReservations.createTagBinding` `compute.futureReservations.deleteTagBinding` `compute.futureReservations.listEffectiveTags` `compute.futureReservations.listTagBindings` `compute.globalAddresses.createTagBinding` `compute.globalAddresses.deleteTagBinding` `compute.globalAddresses.listEffectiveTags` `compute.globalAddresses.listTagBindings` `compute.globalForwardingRules.createTagBinding` `compute.globalForwardingRules.deleteTagBinding` `compute.globalForwardingRules.listEffectiveTags` `compute.globalForwardingRules.listTagBindings` `compute.globalNetworkEndpointGroups.createTagBinding` `compute.globalNetworkEndpointGroups.deleteTagBinding` `compute.globalNetworkEndpointGroups.listEffectiveTags` `compute.globalNetworkEndpointGroups.listTagBindings` `compute.healthChecks.createTagBinding` `compute.healthChecks.deleteTagBinding` `compute.healthChecks.listEffectiveTags` `compute.healthChecks.listTagBindings` `compute.httpHealthChecks.createTagBinding` `compute.httpHealthChecks.deleteTagBinding` `compute.httpHealthChecks.listEffectiveTags` `compute.httpHealthChecks.listTagBindings` `compute.httpsHealthChecks.createTagBinding` `compute.httpsHealthChecks.deleteTagBinding` `compute.httpsHealthChecks.listEffectiveTags` `compute.httpsHealthChecks.listTagBindings` `compute.images.createTagBinding` `compute.images.deleteTagBinding` `compute.images.listEffectiveTags` `compute.images.listTagBindings` `compute.instanceGroupManagers.createTagBinding` `compute.instanceGroupManagers.deleteTagBinding` `compute.instanceGroupManagers.listEffectiveTags` `compute.instanceGroupManagers.listTagBindings` `compute.instanceGroups.createTagBinding` `compute.instanceGroups.deleteTagBinding` `compute.instanceGroups.listEffectiveTags` `compute.instanceGroups.listTagBindings` `compute.instances.createTagBinding` `compute.instances.deleteTagBinding` `compute.instances.listEffectiveTags` `compute.instances.listTagBindings` `compute.instantSnapshots.createTagBinding` `compute.instantSnapshots.deleteTagBinding` `compute.instantSnapshots.listEffectiveTags` `compute.instantSnapshots.listTagBindings` `compute.interconnectAttachments.createTagBinding` `compute.interconnectAttachments.deleteTagBinding` `compute.interconnectAttachments.listEffectiveTags` `compute.interconnectAttachments.listTagBindings` `compute.interconnects.createTagBinding` `compute.interconnects.deleteTagBinding` `compute.interconnects.listEffectiveTags` `compute.interconnects.listTagBindings` `compute.licenses.createTagBinding` `compute.licenses.deleteTagBinding` `compute.licenses.listEffectiveTags` `compute.licenses.listTagBindings` `compute.machineImages.createTagBinding` `compute.machineImages.deleteTagBinding` `compute.machineImages.listEffectiveTags` `compute.machineImages.listTagBindings` `compute.networkAttachments.createTagBinding` `compute.networkAttachments.deleteTagBinding` `compute.networkAttachments.listEffectiveTags` `compute.networkAttachments.listTagBindings` `compute.networkEdgeSecurityServices.createTagBinding` `compute.networkEdgeSecurityServices.deleteTagBinding` `compute.networkEdgeSecurityServices.listEffectiveTags` `compute.networkEdgeSecurityServices.listTagBindings` `compute.networkEndpointGroups.createTagBinding` `compute.networkEndpointGroups.deleteTagBinding` `compute.networkEndpointGroups.listEffectiveTags` `compute.networkEndpointGroups.listTagBindings` `compute.networks.createTagBinding` `compute.networks.deleteTagBinding` `compute.networks.listEffectiveTags` `compute.networks.listTagBindings` `compute.packetMirrorings.createTagBinding` `compute.packetMirrorings.deleteTagBinding` `compute.packetMirrorings.listEffectiveTags` `compute.packetMirrorings.listTagBindings` `compute.publicDelegatedPrefixes.createTagBinding` `compute.publicDelegatedPrefixes.deleteTagBinding` `compute.publicDelegatedPrefixes.listEffectiveTags` `compute.publicDelegatedPrefixes.listTagBindings` `compute.regionBackendBuckets.createTagBinding` `compute.regionBackendBuckets.deleteTagBinding` `compute.regionBackendBuckets.listEffectiveTags` `compute.regionBackendBuckets.listTagBindings` `compute.regionBackendServices.createTagBinding` `compute.regionBackendServices.deleteTagBinding` `compute.regionBackendServices.listEffectiveTags` `compute.regionBackendServices.listTagBindings` `compute.regionFirewallPolicies.createTagBinding` `compute.regionFirewallPolicies.deleteTagBinding` `compute.regionFirewallPolicies.listEffectiveTags` `compute.regionFirewallPolicies.listTagBindings` `compute.regionHealthChecks.createTagBinding` `compute.regionHealthChecks.deleteTagBinding` `compute.regionHealthChecks.listEffectiveTags` `compute.regionHealthChecks.listTagBindings` `compute.regionNetworkEndpointGroups.createTagBinding` `compute.regionNetworkEndpointGroups.deleteTagBinding` `compute.regionNetworkEndpointGroups.listEffectiveTags` `compute.regionNetworkEndpointGroups.listTagBindings` `compute.regionSecurityPolicies.createTagBinding` `compute.regionSecurityPolicies.deleteTagBinding` `compute.regionSecurityPolicies.listEffectiveTags` `compute.regionSecurityPolicies.listTagBindings` `compute.regionSslCertificates.createTagBinding` `compute.regionSslCertificates.deleteTagBinding` `compute.regionSslCertificates.listEffectiveTags` `compute.regionSslCertificates.listTagBindings` `compute.regionSslPolicies.createTagBinding` `compute.regionSslPolicies.deleteTagBinding` `compute.regionSslPolicies.listEffectiveTags` `compute.regionSslPolicies.listTagBindings` `compute.regionTargetHttpProxies.createTagBinding` `compute.regionTargetHttpProxies.deleteTagBinding` `compute.regionTargetHttpProxies.listEffectiveTags` `compute.regionTargetHttpProxies.listTagBindings` `compute.regionTargetHttpsProxies.createTagBinding` `compute.regionTargetHttpsProxies.deleteTagBinding` `compute.regionTargetHttpsProxies.listEffectiveTags` `compute.regionTargetHttpsProxies.listTagBindings` `compute.regionTargetTcpProxies.createTagBinding` `compute.regionTargetTcpProxies.deleteTagBinding` `compute.regionTargetTcpProxies.listEffectiveTags` `compute.regionTargetTcpProxies.listTagBindings` `compute.regionUrlMaps.createTagBinding` `compute.regionUrlMaps.deleteTagBinding` `compute.regionUrlMaps.listEffectiveTags` `compute.regionUrlMaps.listTagBindings` `compute.reservations.createTagBinding` `compute.reservations.deleteTagBinding` `compute.reservations.listEffectiveTags` `compute.reservations.listTagBindings` `compute.routers.createTagBinding` `compute.routers.deleteTagBinding` `compute.routers.listEffectiveTags` `compute.routers.listTagBindings` `compute.routes.createTagBinding` `compute.routes.deleteTagBinding` `compute.routes.listEffectiveTags` `compute.routes.listTagBindings` `compute.securityPolicies.createTagBinding` `compute.securityPolicies.deleteTagBinding` `compute.securityPolicies.listEffectiveTags` `compute.securityPolicies.listTagBindings` `compute.serviceAttachments.createTagBinding` `compute.serviceAttachments.deleteTagBinding` `compute.serviceAttachments.listEffectiveTags` `compute.serviceAttachments.listTagBindings` `compute.snapshots.createTagBinding` `compute.snapshots.deleteTagBinding` `compute.snapshots.listEffectiveTags` `compute.snapshots.listTagBindings` `compute.sslCertificates.createTagBinding` `compute.sslCertificates.deleteTagBinding` `compute.sslCertificates.listEffectiveTags` `compute.sslCertificates.listTagBindings` `compute.sslPolicies.createTagBinding` `compute.sslPolicies.deleteTagBinding` `compute.sslPolicies.listEffectiveTags` `compute.sslPolicies.listTagBindings` `compute.storagePools.createTagBinding` `compute.storagePools.deleteTagBinding` `compute.storagePools.listEffectiveTags` `compute.storagePools.listTagBindings` `compute.subnetworks.createTagBinding` `compute.subnetworks.deleteTagBinding` `compute.subnetworks.listEffectiveTags` `compute.subnetworks.listTagBindings` `compute.targetGrpcProxies.createTagBinding` `compute.targetGrpcProxies.deleteTagBinding` `compute.targetGrpcProxies.listEffectiveTags` `compute.targetGrpcProxies.listTagBindings` `compute.targetHttpProxies.createTagBinding` `compute.targetHttpProxies.deleteTagBinding` `compute.targetHttpProxies.listEffectiveTags` `compute.targetHttpProxies.listTagBindings` `compute.targetHttpsProxies.createTagBinding` `compute.targetHttpsProxies.deleteTagBinding` `compute.targetHttpsProxies.listEffectiveTags` `compute.targetHttpsProxies.listTagBindings` `compute.targetInstances.createTagBinding` `compute.targetInstances.deleteTagBinding` `compute.targetInstances.listEffectiveTags` `compute.targetInstances.listTagBindings` `compute.targetPools.createTagBinding` `compute.targetPools.deleteTagBinding` `compute.targetPools.listEffectiveTags` `compute.targetPools.listTagBindings` `compute.targetSslProxies.createTagBinding` `compute.targetSslProxies.deleteTagBinding` `compute.targetSslProxies.listEffectiveTags` `compute.targetSslProxies.listTagBindings` `compute.targetTcpProxies.createTagBinding` `compute.targetTcpProxies.deleteTagBinding` `compute.targetTcpProxies.listEffectiveTags` `compute.targetTcpProxies.listTagBindings` `compute.targetVpnGateways.createTagBinding` `compute.targetVpnGateways.deleteTagBinding` `compute.targetVpnGateways.listEffectiveTags` `compute.targetVpnGateways.listTagBindings` `compute.urlMaps.createTagBinding` `compute.urlMaps.deleteTagBinding` `compute.urlMaps.listEffectiveTags` `compute.urlMaps.listTagBindings` `compute.vpnGateways.createTagBinding` `compute.vpnGateways.deleteTagBinding` `compute.vpnGateways.listEffectiveTags` `compute.vpnGateways.listTagBindings` `compute.vpnTunnels.createTagBinding` `compute.vpnTunnels.deleteTagBinding` `compute.vpnTunnels.listEffectiveTags` `compute.vpnTunnels.listTagBindings` `config.deploymentgroups.createTagBinding` `config.deploymentgroups.deleteTagBinding` `config.deploymentgroups.listEffectiveTags` `config.deploymentgroups.listTagBindings` `config.deployments.createTagBinding` `config.deployments.deleteTagBinding` `config.deployments.listEffectiveTags` `config.deployments.listTagBindings` `config.previews.createTagBinding` `config.previews.deleteTagBinding` `config.previews.listEffectiveTags` `config.previews.listTagBindings` `container.clusters.createTagBinding` `container.clusters.deleteTagBinding` `container.clusters.listEffectiveTags` `container.clusters.listTagBindings` `databasesconsole.locations.*` - `databasesconsole.locations.get` - `databasesconsole.locations.list` `databasesconsole.studioQueries.search` `datacatalog.categories.fineGrainedGet` `datacatalog.entries.updateTag` `datacatalog.entryGroups.updateTag` `datacatalog.migrationConfig.get` `datacatalog.tagTemplates.create` `datacatalog.tagTemplates.get` `datacatalog.tagTemplates.getTag` `datacatalog.tagTemplates.use` `dataflow.jobs.createTagBinding` `dataflow.jobs.deleteTagBinding` `dataflow.jobs.listEffectiveTags` `dataflow.jobs.listTagBindings` `dataflow.snapshots.createTagBinding` `dataflow.snapshots.deleteTagBinding` `dataflow.snapshots.listEffectiveTags` `dataflow.snapshots.listTagBindings` `dataform.folders.create` `dataform.locations.*` - `dataform.locations.get` - `dataform.locations.list` `dataform.repositories.create` `dataform.repositories.createTagBinding` `dataform.repositories.deleteTagBinding` `dataform.repositories.list` `dataform.repositories.listEffectiveTags` `dataform.repositories.listTagBindings` `datafusion.instances.createTagBinding` `datafusion.instances.deleteTagBinding` `datafusion.instances.listEffectiveTags` `datafusion.instances.listTagBindings` `datamigration.connectionprofiles.createTagBinding` `datamigration.connectionprofiles.deleteTagBinding` `datamigration.connectionprofiles.listEffectiveTags` `datamigration.connectionprofiles.listTagBindings` `datamigration.migrationjobs.createTagBinding` `datamigration.migrationjobs.deleteTagBinding` `datamigration.migrationjobs.listEffectiveTags` `datamigration.migrationjobs.listTagBindings` `datamigration.privateconnections.createTagBinding` `datamigration.privateconnections.deleteTagBinding` `datamigration.privateconnections.listEffectiveTags` `datamigration.privateconnections.listTagBindings` `dataplex.agentTasks.create` `dataplex.agentTasks.delete` `dataplex.agentTasks.get` `dataplex.agentTasks.getData` `dataplex.agentTasks.getIamPolicy` `dataplex.agentTasks.list` `dataplex.agentTasks.run` `dataplex.agentTasks.update` `dataplex.aspectTypes.create` `dataplex.aspectTypes.get` `dataplex.aspectTypes.list` `dataplex.aspectTypes.use` `dataplex.dataDomains.discover` `dataplex.datascans.cancel` `dataplex.datascans.create` `dataplex.datascans.delete` `dataplex.datascans.get` `dataplex.datascans.getData` `dataplex.datascans.getIamPolicy` `dataplex.datascans.list` `dataplex.datascans.run` `dataplex.datascans.update` `dataplex.entries.get` `dataplex.entries.update` `dataplex.entryGroups.createTagBinding` `dataplex.entryGroups.deleteTagBinding` `dataplex.entryGroups.listEffectiveTags` `dataplex.entryGroups.listTagBindings` `dataplex.entryTypes.createTagBinding` `dataplex.entryTypes.deleteTagBinding` `dataplex.entryTypes.listEffectiveTags` `dataplex.entryTypes.listTagBindings` `dataplex.governanceRules.*` - `dataplex.governanceRules.createTagBinding` - `dataplex.governanceRules.deleteTagBinding` - `dataplex.governanceRules.listEffectiveTags` - `dataplex.governanceRules.listTagBindings` `dataplex.operations.get` `dataplex.operations.list` `dataplex.projects.search` `datastore.databases.createTagBinding` `datastore.databases.deleteTagBinding` `datastore.databases.listEffectiveTags` `datastore.databases.listTagBindings` `datastream.connectionProfiles.createTagBinding` `datastream.connectionProfiles.deleteTagBinding` `datastream.connectionProfiles.listEffectiveTags` `datastream.connectionProfiles.listTagBindings` `datastream.privateConnections.createTagBinding` `datastream.privateConnections.deleteTagBinding` `datastream.privateConnections.listEffectiveTags` `datastream.privateConnections.listTagBindings` `datastream.streams.createTagBinding` `datastream.streams.deleteTagBinding` `datastream.streams.listEffectiveTags` `datastream.streams.listTagBindings` `developerconnect.connections.createTagBinding` `developerconnect.connections.deleteTagBinding` `developerconnect.connections.listEffectiveTags` `developerconnect.connections.listTagBindings` `dlp.*` - `dlp.analyzeRiskTemplates.create` - `dlp.analyzeRiskTemplates.delete` - `dlp.analyzeRiskTemplates.get` - `dlp.analyzeRiskTemplates.list` - `dlp.analyzeRiskTemplates.update` - `dlp.charts.get` - `dlp.columnDataProfiles.get` - `dlp.columnDataProfiles.list` - `dlp.connections.create` - `dlp.connections.delete` - `dlp.connections.get` - `dlp.connections.list` - `dlp.connections.search` - `dlp.connections.update` - `dlp.contentPolicies.apply` - `dlp.contentPolicies.create` - `dlp.contentPolicies.delete` - `dlp.contentPolicies.get` - `dlp.contentPolicies.list` - `dlp.contentPolicies.update` - `dlp.deidentifyTemplates.create` - `dlp.deidentifyTemplates.delete` - `dlp.deidentifyTemplates.get` - `dlp.deidentifyTemplates.list` - `dlp.deidentifyTemplates.update` - `dlp.estimates.cancel` - `dlp.estimates.create` - `dlp.estimates.delete` - `dlp.estimates.get` - `dlp.estimates.list` - `dlp.fileStoreProfiles.delete` - `dlp.fileStoreProfiles.get` - `dlp.fileStoreProfiles.list` - `dlp.inspectFindings.list` - `dlp.inspectTemplates.create` - `dlp.inspectTemplates.delete` - `dlp.inspectTemplates.get` - `dlp.inspectTemplates.list` - `dlp.inspectTemplates.update` - `dlp.jobTriggers.create` - `dlp.jobTriggers.delete` - `dlp.jobTriggers.get` - `dlp.jobTriggers.hybridInspect` - `dlp.jobTriggers.list` - `dlp.jobTriggers.update` - `dlp.jobs.cancel` - `dlp.jobs.create` - `dlp.jobs.delete` - `dlp.jobs.get` - `dlp.jobs.hybridInspect` - `dlp.jobs.list` - `dlp.kms.encrypt` - `dlp.locations.get` - `dlp.locations.list` - `dlp.projectDataProfiles.get` - `dlp.projectDataProfiles.list` - `dlp.storedInfoTypes.create` - `dlp.storedInfoTypes.delete` - `dlp.storedInfoTypes.get` - `dlp.storedInfoTypes.list` - `dlp.storedInfoTypes.update` - `dlp.subscriptions.cancel` - `dlp.subscriptions.create` - `dlp.subscriptions.get` - `dlp.subscriptions.list` - `dlp.subscriptions.update` - `dlp.tableDataProfiles.delete` - `dlp.tableDataProfiles.get` - `dlp.tableDataProfiles.list` `dns.policies.createTagBinding` `dns.policies.deleteTagBinding` `dns.policies.listEffectiveTags` `dns.policies.listTagBindings` `domains.registrations.createTagBinding` `domains.registrations.deleteTagBinding` `domains.registrations.listEffectiveTags` `domains.registrations.listTagBindings` `eventarc.channelConnections.createTagBinding` `eventarc.channelConnections.deleteTagBinding` `eventarc.channelConnections.listEffectiveTags` `eventarc.channelConnections.listTagBindings` `eventarc.channels.createTagBinding` `eventarc.channels.deleteTagBinding` `eventarc.channels.listEffectiveTags` `eventarc.channels.listTagBindings` `eventarc.triggers.createTagBinding` `eventarc.triggers.deleteTagBinding` `eventarc.triggers.listEffectiveTags` `eventarc.triggers.listTagBindings` `file.backups.createTagBinding` `file.backups.deleteTagBinding` `file.backups.listEffectiveTags` `file.backups.listTagBindings` `file.instances.createTagBinding` `file.instances.deleteTagBinding` `file.instances.listEffectiveTags` `file.instances.listTagBindings` `file.snapshots.*` - `file.snapshots.createTagBinding` - `file.snapshots.deleteTagBinding` - `file.snapshots.listEffectiveTags` - `file.snapshots.listTagBindings` `financialservices.v1instances.createTagBinding` `financialservices.v1instances.deleteTagBinding` `financialservices.v1instances.listEffectiveTags` `financialservices.v1instances.listTagBindings` `firebaseapphosting.backends.createTagBinding` `firebaseapphosting.backends.deleteTagBinding` `firebaseapphosting.backends.listEffectiveTags` `firebaseapphosting.backends.listTagBindings` `firebasedataconnect.services.createTagBinding` `firebasedataconnect.services.deleteTagBinding` `firebasedataconnect.services.listEffectiveTags` `firebasedataconnect.services.listTagBindings` `gdchardwaremanagement.hardware.createTagBinding` `gdchardwaremanagement.hardware.deleteTagBinding` `gdchardwaremanagement.hardware.listEffectiveTags` `gdchardwaremanagement.hardware.listTagBindings` `gdchardwaremanagement.orders.createTagBinding` `gdchardwaremanagement.orders.deleteTagBinding` `gdchardwaremanagement.orders.listEffectiveTags` `gdchardwaremanagement.orders.listTagBindings` `gdchardwaremanagement.sites.createTagBinding` `gdchardwaremanagement.sites.deleteTagBinding` `gdchardwaremanagement.sites.listEffectiveTags` `gdchardwaremanagement.sites.listTagBindings` `gdchardwaremanagement.zoneOperations.*` - `gdchardwaremanagement.zoneOperations.createTagBinding` - `gdchardwaremanagement.zoneOperations.deleteTagBinding` - `gdchardwaremanagement.zoneOperations.listEffectiveTags` - `gdchardwaremanagement.zoneOperations.listTagBindings` `gdchardwaremanagement.zones.createTagBinding` `gdchardwaremanagement.zones.deleteTagBinding` `gdchardwaremanagement.zones.listEffectiveTags` `gdchardwaremanagement.zones.listTagBindings` `geminidataanalytics.locations.chat` `gkemulticloud.attachedClusters.createTagBinding` `gkemulticloud.attachedClusters.deleteTagBinding` `gkemulticloud.attachedClusters.listEffectiveTags` `gkemulticloud.attachedClusters.listTagBindings` `gkeonprem.bareMetalAdminClusters.createTagBinding` `gkeonprem.bareMetalAdminClusters.deleteTagBinding` `gkeonprem.bareMetalAdminClusters.listEffectiveTags` `gkeonprem.bareMetalAdminClusters.listTagBindings` `gkeonprem.bareMetalClusters.createTagBinding` `gkeonprem.bareMetalClusters.deleteTagBinding` `gkeonprem.bareMetalClusters.listEffectiveTags` `gkeonprem.bareMetalClusters.listTagBindings` `gkeonprem.vmwareAdminClusters.createTagBinding` `gkeonprem.vmwareAdminClusters.deleteTagBinding` `gkeonprem.vmwareAdminClusters.listEffectiveTags` `gkeonprem.vmwareAdminClusters.listTagBindings` `gkeonprem.vmwareClusters.createTagBinding` `gkeonprem.vmwareClusters.deleteTagBinding` `gkeonprem.vmwareClusters.listEffectiveTags` `gkeonprem.vmwareClusters.listTagBindings` `iam.roles.createTagBinding` `iam.roles.deleteTagBinding` `iam.roles.listEffectiveTags` `iam.roles.listTagBindings` `iam.serviceAccounts.createTagBinding` `iam.serviceAccounts.deleteTagBinding` `iam.serviceAccounts.listEffectiveTags` `iam.serviceAccounts.listTagBindings` `krmapihosting.krmApiHosts.createTagBinding` `krmapihosting.krmApiHosts.deleteTagBinding` `krmapihosting.krmApiHosts.listEffectiveTags` `krmapihosting.krmApiHosts.listTagBindings` `livestream.channels.createTagBinding` `livestream.channels.deleteTagBinding` `livestream.channels.listEffectiveTags` `livestream.channels.listTagBindings` `livestream.inputs.createTagBinding` `livestream.inputs.deleteTagBinding` `livestream.inputs.listEffectiveTags` `livestream.inputs.listTagBindings` `livestream.pools.createTagBinding` `livestream.pools.deleteTagBinding` `livestream.pools.listEffectiveTags` `livestream.pools.listTagBindings` `logging.buckets.createTagBinding` `logging.buckets.deleteTagBinding` `logging.buckets.listEffectiveTags` `logging.buckets.listTagBindings` `looker.instances.createTagBinding` `looker.instances.deleteTagBinding` `looker.instances.listEffectiveTags` `looker.instances.listTagBindings` `managedidentities.domains.createTagBinding` `managedidentities.domains.deleteTagBinding` `managedidentities.domains.listEffectiveTags` `managedidentities.domains.listTagBindings` `memcache.instances.createTagBinding` `memcache.instances.deleteTagBinding` `memcache.instances.listEffectiveTags` `memcache.instances.listTagBindings` `memorystore.backupCollections.createTagBinding` `memorystore.backupCollections.deleteTagBinding` `memorystore.backupCollections.listEffectiveTags` `memorystore.backupCollections.listTagBindings` `memorystore.instances.createTagBinding` `memorystore.instances.deleteTagBinding` `memorystore.instances.listEffectiveTags` `memorystore.instances.listTagBindings` `metastore.federations.createTagBinding` `metastore.federations.deleteTagBinding` `metastore.federations.listEffectiveTags` `metastore.federations.listTagBindings` `metastore.services.createTagBinding` `metastore.services.deleteTagBinding` `metastore.services.listEffectiveTags` `metastore.services.listTagBindings` `monitoring.alertPolicies.createTagBinding` `monitoring.alertPolicies.deleteTagBinding` `monitoring.alertPolicies.listEffectiveTags` `monitoring.alertPolicies.listTagBindings` `monitoring.dashboards.createTagBinding` `monitoring.dashboards.deleteTagBinding` `monitoring.dashboards.listEffectiveTags` `monitoring.dashboards.listTagBindings` `monitoring.timeSeries.create` `networkconnectivity.hubs.createTagBinding` `networkconnectivity.hubs.deleteTagBinding` `networkconnectivity.hubs.listEffectiveTags` `networkconnectivity.hubs.listTagBindings` `networkconnectivity.spokes.createTagBinding` `networkconnectivity.spokes.deleteTagBinding` `networkconnectivity.spokes.listEffectiveTags` `networkconnectivity.spokes.listTagBindings` `networkmanagement.connectivitytests.createTagBinding` `networkmanagement.connectivitytests.deleteTagBinding` `networkmanagement.connectivitytests.listEffectiveTags` `networkmanagement.connectivitytests.listTagBindings` `networksecurity.authorizationPolicies.createTagBinding` `networksecurity.authorizationPolicies.deleteTagBinding` `networksecurity.authorizationPolicies.listEffectiveTags` `networksecurity.authorizationPolicies.listTagBindings` `networksecurity.clientTlsPolicies.createTagBinding` `networksecurity.clientTlsPolicies.deleteTagBinding` `networksecurity.clientTlsPolicies.listEffectiveTags` `networksecurity.clientTlsPolicies.listTagBindings` `networksecurity.serverTlsPolicies.createTagBinding` `networksecurity.serverTlsPolicies.deleteTagBinding` `networksecurity.serverTlsPolicies.listEffectiveTags` `networksecurity.serverTlsPolicies.listTagBindings` `networkservices.endpointConfigSelectors.*` - `networkservices.endpointConfigSelectors.createTagBinding` - `networkservices.endpointConfigSelectors.deleteTagBinding` - `networkservices.endpointConfigSelectors.listEffectiveTags` - `networkservices.endpointConfigSelectors.listTagBindings` `networkservices.gateways.createTagBinding` `networkservices.gateways.deleteTagBinding` `networkservices.gateways.listEffectiveTags` `networkservices.gateways.listTagBindings` `networkservices.httpFilters.createTagBinding` `networkservices.httpFilters.deleteTagBinding` `networkservices.httpFilters.listEffectiveTags` `networkservices.httpFilters.listTagBindings` `networkservices.meshes.createTagBinding` `networkservices.meshes.deleteTagBinding` `networkservices.meshes.listEffectiveTags` `networkservices.meshes.listTagBindings` `notebooks.instances.createTagBinding` `notebooks.instances.deleteTagBinding` `notebooks.instances.listEffectiveTags` `notebooks.instances.listTagBindings` `oracledatabase.autonomousDatabases.createTagBinding` `oracledatabase.autonomousDatabases.deleteTagBinding` `oracledatabase.autonomousDatabases.listEffectiveTags` `oracledatabase.autonomousDatabases.listTagBindings` `oracledatabase.cloudExadataInfrastructures.createTagBinding` `oracledatabase.cloudExadataInfrastructures.deleteTagBinding` `oracledatabase.cloudExadataInfrastructures.listEffectiveTags` `oracledatabase.cloudExadataInfrastructures.listTagBindings` `oracledatabase.cloudVmClusters.createTagBinding` `oracledatabase.cloudVmClusters.deleteTagBinding` `oracledatabase.cloudVmClusters.listEffectiveTags` `oracledatabase.cloudVmClusters.listTagBindings` `oracledatabase.dbSystems.createTagBinding` `oracledatabase.dbSystems.deleteTagBinding` `oracledatabase.dbSystems.listEffectiveTags` `oracledatabase.dbSystems.listTagBindings` `oracledatabase.entitlements.createTagBinding` `oracledatabase.entitlements.deleteTagBinding` `oracledatabase.entitlements.listEffectiveTags` `oracledatabase.entitlements.listTagBindings` `parametermanager.parameters.createTagBinding` `parametermanager.parameters.deleteTagBinding` `parametermanager.parameters.listEffectiveTags` `parametermanager.parameters.listTagBindings` `privateca.caPools.createTagBinding` `privateca.caPools.deleteTagBinding` `privateca.caPools.listEffectiveTags` `privateca.caPools.listTagBindings` `privateca.certificateTemplates.createTagBinding` `privateca.certificateTemplates.deleteTagBinding` `privateca.certificateTemplates.listEffectiveTags` `privateca.certificateTemplates.listTagBindings` `pubsub.snapshots.createTagBinding` `pubsub.snapshots.deleteTagBinding` `pubsub.snapshots.listEffectiveTags` `pubsub.snapshots.listTagBindings` `pubsub.subscriptions.createTagBinding` `pubsub.subscriptions.deleteTagBinding` `pubsub.subscriptions.listEffectiveTags` `pubsub.subscriptions.listTagBindings` `pubsub.topics.createTagBinding` `pubsub.topics.deleteTagBinding` `pubsub.topics.listEffectiveTags` `pubsub.topics.listTagBindings` `pubsub.topics.updateTag` `recaptchaenterprise.keys.createTagBinding` `recaptchaenterprise.keys.deleteTagBinding` `recaptchaenterprise.keys.listEffectiveTags` `recaptchaenterprise.keys.listTagBindings` `recommender.alloydbClusterPerformanceInsights.get` `recommender.alloydbClusterPerformanceInsights.list` `recommender.alloydbClusterPerformanceRecommendations.get` `recommender.alloydbClusterPerformanceRecommendations.list` `recommender.alloydbClusterReliabilityInsights.get` `recommender.alloydbClusterReliabilityInsights.list` `recommender.alloydbClusterReliabilityRecommendations.get` `recommender.alloydbClusterReliabilityRecommendations.list` `recommender.cloudAssetInsights.get` `recommender.cloudAssetInsights.list` `recommender.locations.*` - `recommender.locations.get` - `recommender.locations.list` `redis.clusters.createTagBinding` `redis.clusters.deleteTagBinding` `redis.clusters.listEffectiveTags` `redis.clusters.listTagBindings` `redis.instances.createTagBinding` `redis.instances.deleteTagBinding` `redis.instances.listEffectiveTags` `redis.instances.listTagBindings` `resourcemanager.hierarchyNodes.*` - `resourcemanager.hierarchyNodes.createTagBinding` - `resourcemanager.hierarchyNodes.deleteTagBinding` - `resourcemanager.hierarchyNodes.listEffectiveTags` - `resourcemanager.hierarchyNodes.listTagBindings` `resourcemanager.projects.get` `resourcemanager.projects.list` `resourcemanager.tagKeys.get` `resourcemanager.tagKeys.list` `resourcemanager.tagValueBindings.*` - `resourcemanager.tagValueBindings.create` - `resourcemanager.tagValueBindings.delete` `resourcemanager.tagValues.get` `resourcemanager.tagValues.list` `run.jobs.createTagBinding` `run.jobs.deleteTagBinding` `run.jobs.listEffectiveTags` `run.jobs.listTagBindings` `run.services.createTagBinding` `run.services.deleteTagBinding` `run.services.listEffectiveTags` `run.services.listTagBindings` `secretmanager.secrets.createTagBinding` `secretmanager.secrets.deleteTagBinding` `secretmanager.secrets.listEffectiveTags` `secretmanager.secrets.listTagBindings` `serviceusage.services.use` `spanner.instances.createTagBinding` `spanner.instances.deleteTagBinding` `spanner.instances.listEffectiveTags` `spanner.instances.listTagBindings` `storage.buckets.createTagBinding` `storage.buckets.deleteTagBinding` `storage.buckets.get` `storage.buckets.getIamPolicy` `storage.buckets.listEffectiveTags` `storage.buckets.listTagBindings` `storage.folders.get` `storage.folders.list` `storage.managedFolders.get` `storage.managedFolders.list` `storage.objects.get` `storage.objects.getIamPolicy` `storage.objects.list` `tpu.nodes.createTagBinding` `tpu.nodes.deleteTagBinding` `tpu.nodes.listEffectiveTags` `tpu.nodes.listTagBindings` `transcoder.jobTemplates.createTagBinding` `transcoder.jobTemplates.deleteTagBinding` `transcoder.jobTemplates.listEffectiveTags` `transcoder.jobTemplates.listTagBindings` `transcoder.jobs.createTagBinding` `transcoder.jobs.deleteTagBinding` `transcoder.jobs.listEffectiveTags` `transcoder.jobs.listTagBindings` `videostitcher.cdnKeys.createTagBinding` `videostitcher.cdnKeys.deleteTagBinding` `videostitcher.cdnKeys.listEffectiveTags` `videostitcher.cdnKeys.listTagBindings` `videostitcher.liveConfigs.createTagBinding` `videostitcher.liveConfigs.deleteTagBinding` `videostitcher.liveConfigs.listEffectiveTags` `videostitcher.liveConfigs.listTagBindings` `videostitcher.slates.createTagBinding` `videostitcher.slates.deleteTagBinding` `videostitcher.slates.listEffectiveTags` `videostitcher.slates.listTagBindings` `videostitcher.vodConfigs.createTagBinding` `videostitcher.vodConfigs.deleteTagBinding` `videostitcher.vodConfigs.listEffectiveTags` `videostitcher.vodConfigs.listTagBindings` `vmmigration.groups.createTagBinding` `vmmigration.groups.deleteTagBinding` `vmmigration.groups.listEffectiveTags` `vmmigration.groups.listTagBindings` `vmmigration.sources.createTagBinding` `vmmigration.sources.deleteTagBinding` `vmmigration.sources.listEffectiveTags` `vmmigration.sources.listTagBindings` `vmwareengine.networkPeerings.createTagBinding` `vmwareengine.networkPeerings.deleteTagBinding` `vmwareengine.networkPeerings.listEffectiveTags` `vmwareengine.networkPeerings.listTagBindings` `vmwareengine.networkPolicies.createTagBinding` `vmwareengine.networkPolicies.deleteTagBinding` `vmwareengine.networkPolicies.listEffectiveTags` `vmwareengine.networkPolicies.listTagBindings` `vmwareengine.privateClouds.createTagBinding` `vmwareengine.privateClouds.deleteTagBinding` `vmwareengine.privateClouds.listEffectiveTags` `vmwareengine.privateClouds.listTagBindings` `vmwareengine.privateConnections.createTagBinding` `vmwareengine.privateConnections.deleteTagBinding` `vmwareengine.privateConnections.listEffectiveTags` `vmwareengine.privateConnections.listTagBindings` `vmwareengine.vmwareEngineNetworks.createTagBinding` `vmwareengine.vmwareEngineNetworks.deleteTagBinding` `vmwareengine.vmwareEngineNetworks.listEffectiveTags` `vmwareengine.vmwareEngineNetworks.listTagBindings` `workflows.workflows.createTagBinding` `workflows.workflows.deleteTagBinding` `workflows.workflows.listEffectiveTags` `workflows.workflows.listTagBindings` `workstations.workstationClusters.createTagBinding` `workstations.workstationClusters.deleteTagBinding` `workstations.workstationClusters.listEffectiveTags` `workstations.workstationClusters.listTagBindings` |
| #### DLP Reader (`roles/dlp.reader`) Read DLP entities, such as jobs and templates. | `dlp.analyzeRiskTemplates.get` `dlp.analyzeRiskTemplates.list` `dlp.contentPolicies.get` `dlp.contentPolicies.list` `dlp.deidentifyTemplates.get` `dlp.deidentifyTemplates.list` `dlp.inspectFindings.list` `dlp.inspectTemplates.get` `dlp.inspectTemplates.list` `dlp.jobTriggers.get` `dlp.jobTriggers.list` `dlp.jobs.get` `dlp.jobs.list` `dlp.locations.*` - `dlp.locations.get` - `dlp.locations.list` `dlp.storedInfoTypes.get` `dlp.storedInfoTypes.list` |
| #### DLP Stored InfoTypes Editor (`roles/dlp.storedInfoTypesEditor`) Edit DLP stored info types. | `dlp.storedInfoTypes.*` - `dlp.storedInfoTypes.create` - `dlp.storedInfoTypes.delete` - `dlp.storedInfoTypes.get` - `dlp.storedInfoTypes.list` - `dlp.storedInfoTypes.update` |
| #### DLP Stored InfoTypes Reader (`roles/dlp.storedInfoTypesReader`) Read DLP stored info types. | `dlp.storedInfoTypes.get` `dlp.storedInfoTypes.list` |
| #### DLP Subscription Admin (`roles/dlp.subscriptionsAdmin`) Manage DLP subscriptions. | `dlp.subscriptions.*` - `dlp.subscriptions.cancel` - `dlp.subscriptions.create` - `dlp.subscriptions.get` - `dlp.subscriptions.list` - `dlp.subscriptions.update` `resourcemanager.projects.get` `resourcemanager.projects.list` |
| #### DLP Subscription Viewer (`roles/dlp.subscriptionsReader`) View DLP subscriptions. | `dlp.subscriptions.get` `dlp.subscriptions.list` |
| #### DLP Table Data Profiles Admin (`roles/dlp.tableDataProfilesAdmin`) Manage DLP table profiles. | `dlp.tableDataProfiles.*` - `dlp.tableDataProfiles.delete` - `dlp.tableDataProfiles.get` - `dlp.tableDataProfiles.list` |
| #### DLP Table Data Profiles Reader (`roles/dlp.tableDataProfilesReader`) Read DLP table profiles. | `dlp.tableDataProfiles.get` `dlp.tableDataProfiles.list` |

### Service agent roles


Service agent roles should only be granted to [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt).

| Role | Permissions |
|---|---|
| #### DLP API Service Agent (`roles/dlp.serviceAgent`) Gives the Cloud DLP API service agent permissions for BigQuery, Cloud Storage, Datastore, Pub/Sub, and Cloud KMS. > [!WARNING] > **Warning:** Do not grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). | `aiplatform.endpoints.predict` `appengine.applications.get` `bigquery.config.get` `bigquery.dataPolicies.attach` `bigquery.dataPolicies.create` `bigquery.dataPolicies.delete` `bigquery.dataPolicies.get` `bigquery.dataPolicies.getIamPolicy` `bigquery.dataPolicies.list` `bigquery.dataPolicies.setIamPolicy` `bigquery.dataPolicies.update` `bigquery.datasets.*` - `bigquery.datasets.create` - `bigquery.datasets.createTagBinding` - `bigquery.datasets.delete` - `bigquery.datasets.deleteTagBinding` - `bigquery.datasets.get` - `bigquery.datasets.getIamPolicy` - `bigquery.datasets.link` - `bigquery.datasets.listEffectiveTags` - `bigquery.datasets.listSharedDatasetUsage` - `bigquery.datasets.listTagBindings` - `bigquery.datasets.setIamPolicy` - `bigquery.datasets.update` - `bigquery.datasets.updateTag` `bigquery.jobs.create` `bigquery.jobs.get` `bigquery.jobs.update` `bigquery.models.*` - `bigquery.models.create` - `bigquery.models.delete` - `bigquery.models.export` - `bigquery.models.getData` - `bigquery.models.getMetadata` - `bigquery.models.list` - `bigquery.models.updateData` - `bigquery.models.updateMetadata` - `bigquery.models.updateTag` `bigquery.propertyGraphs.*` - `bigquery.propertyGraphs.create` - `bigquery.propertyGraphs.delete` - `bigquery.propertyGraphs.get` - `bigquery.propertyGraphs.list` - `bigquery.propertyGraphs.update` `bigquery.readsessions.*` - `bigquery.readsessions.create` - `bigquery.readsessions.getData` - `bigquery.readsessions.update` `bigquery.routines.*` - `bigquery.routines.create` - `bigquery.routines.delete` - `bigquery.routines.get` - `bigquery.routines.list` - `bigquery.routines.update` - `bigquery.routines.updateTag` `bigquery.rowAccessPolicies.create` `bigquery.rowAccessPolicies.delete` `bigquery.rowAccessPolicies.get` `bigquery.rowAccessPolicies.getIamPolicy` `bigquery.rowAccessPolicies.list` `bigquery.rowAccessPolicies.setIamPolicy` `bigquery.rowAccessPolicies.update` `bigquery.tables.*` - `bigquery.tables.create` - `bigquery.tables.createIndex` - `bigquery.tables.createSnapshot` - `bigquery.tables.createTagBinding` - `bigquery.tables.delete` - `bigquery.tables.deleteIndex` - `bigquery.tables.deleteSnapshot` - `bigquery.tables.deleteTagBinding` - `bigquery.tables.export` - `bigquery.tables.get` - `bigquery.tables.getData` - `bigquery.tables.getIamPolicy` - `bigquery.tables.list` - `bigquery.tables.listEffectiveTags` - `bigquery.tables.listTagBindings` - `bigquery.tables.replicateData` - `bigquery.tables.restoreSnapshot` - `bigquery.tables.setCategory` - `bigquery.tables.setColumnDataPolicy` - `bigquery.tables.setIamPolicy` - `bigquery.tables.update` - `bigquery.tables.updateData` - `bigquery.tables.updateIndex` - `bigquery.tables.updateTag` `cloudaicompanion.instances.completeTask` `cloudaicompanion.operations.get` `cloudaicompanion.topics.create` `cloudasset.assets.analyzeIamPolicy` `cloudasset.assets.exportResource` `cloudasset.assets.searchAllIamPolicies` `cloudkms.cryptoKeyVersions.useToDecrypt` `cloudkms.locations.get` `cloudkms.locations.list` `databasesconsole.locations.*` - `databasesconsole.locations.get` - `databasesconsole.locations.list` `databasesconsole.studioQueries.create` `databasesconsole.studioQueries.delete` `databasesconsole.studioQueries.search` `databasesconsole.studioQueries.update` `datacatalog.categories.fineGrainedGet` `datacatalog.migrationConfig.get` `datacatalog.tagTemplates.*` - `datacatalog.tagTemplates.create` - `datacatalog.tagTemplates.delete` - `datacatalog.tagTemplates.get` - `datacatalog.tagTemplates.getIamPolicy` - `datacatalog.tagTemplates.getTag` - `datacatalog.tagTemplates.setIamPolicy` - `datacatalog.tagTemplates.update` - `datacatalog.tagTemplates.use` `dataform.folders.create` `dataform.locations.*` - `dataform.locations.get` - `dataform.locations.list` `dataform.repositories.create` `dataform.repositories.list` `dataplex.agentTasks.*` - `dataplex.agentTasks.create` - `dataplex.agentTasks.delete` - `dataplex.agentTasks.get` - `dataplex.agentTasks.getData` - `dataplex.agentTasks.getIamPolicy` - `dataplex.agentTasks.list` - `dataplex.agentTasks.run` - `dataplex.agentTasks.setIamPolicy` - `dataplex.agentTasks.update` `dataplex.aspectTypes.*` - `dataplex.aspectTypes.create` - `dataplex.aspectTypes.delete` - `dataplex.aspectTypes.get` - `dataplex.aspectTypes.getIamPolicy` - `dataplex.aspectTypes.list` - `dataplex.aspectTypes.setIamPolicy` - `dataplex.aspectTypes.update` - `dataplex.aspectTypes.use` `dataplex.dataDomains.discover` `dataplex.datascans.*` - `dataplex.datascans.cancel` - `dataplex.datascans.create` - `dataplex.datascans.delete` - `dataplex.datascans.get` - `dataplex.datascans.getData` - `dataplex.datascans.getIamPolicy` - `dataplex.datascans.list` - `dataplex.datascans.run` - `dataplex.datascans.setIamPolicy` - `dataplex.datascans.update` `dataplex.entries.get` `dataplex.operations.get` `dataplex.operations.list` `dataplex.projects.search` `datastore.databases.get` `datastore.databases.getMetadata` `datastore.databases.list` `datastore.entities.*` - `datastore.entities.allocateIds` - `datastore.entities.create` - `datastore.entities.delete` - `datastore.entities.get` - `datastore.entities.list` - `datastore.entities.update` `datastore.namespaces.*` - `datastore.namespaces.get` - `datastore.namespaces.list` `datastore.schemas.list` `datastore.statistics.*` - `datastore.statistics.get` - `datastore.statistics.list` `dlp.analyzeRiskTemplates.get` `dlp.analyzeRiskTemplates.list` `dlp.deidentifyTemplates.get` `dlp.deidentifyTemplates.list` `dlp.inspectTemplates.get` `dlp.inspectTemplates.list` `dlp.jobs.*` - `dlp.jobs.cancel` - `dlp.jobs.create` - `dlp.jobs.delete` - `dlp.jobs.get` - `dlp.jobs.hybridInspect` - `dlp.jobs.list` `dlp.kms.encrypt` `firebase.projects.get` `geminidataanalytics.locations.chat` `monitoring.dashboards.get` `monitoring.dashboards.list` `monitoring.groups.get` `monitoring.groups.list` `monitoring.metricDescriptors.list` `monitoring.monitoredResourceDescriptors.*` - `monitoring.monitoredResourceDescriptors.get` - `monitoring.monitoredResourceDescriptors.list` `monitoring.timeSeries.*` - `monitoring.timeSeries.create` - `monitoring.timeSeries.list` `orgpolicy.policy.get` `pubsub.*` - `pubsub.messageTransforms.validate` - `pubsub.schemas.attach` - `pubsub.schemas.commit` - `pubsub.schemas.create` - `pubsub.schemas.delete` - `pubsub.schemas.get` - `pubsub.schemas.getIamPolicy` - `pubsub.schemas.list` - `pubsub.schemas.listRevisions` - `pubsub.schemas.rollback` - `pubsub.schemas.setIamPolicy` - `pubsub.schemas.validate` - `pubsub.snapshots.create` - `pubsub.snapshots.createTagBinding` - `pubsub.snapshots.delete` - `pubsub.snapshots.deleteTagBinding` - `pubsub.snapshots.get` - `pubsub.snapshots.getIamPolicy` - `pubsub.snapshots.list` - `pubsub.snapshots.listEffectiveTags` - `pubsub.snapshots.listTagBindings` - `pubsub.snapshots.seek` - `pubsub.snapshots.setIamPolicy` - `pubsub.snapshots.update` - `pubsub.subscriptions.consume` - `pubsub.subscriptions.create` - `pubsub.subscriptions.createTagBinding` - `pubsub.subscriptions.delete` - `pubsub.subscriptions.deleteTagBinding` - `pubsub.subscriptions.get` - `pubsub.subscriptions.getIamPolicy` - `pubsub.subscriptions.list` - `pubsub.subscriptions.listEffectiveTags` - `pubsub.subscriptions.listTagBindings` - `pubsub.subscriptions.setIamPolicy` - `pubsub.subscriptions.update` - `pubsub.topics.attachSubscription` - `pubsub.topics.create` - `pubsub.topics.createTagBinding` - `pubsub.topics.delete` - `pubsub.topics.deleteTagBinding` - `pubsub.topics.detachSubscription` - `pubsub.topics.get` - `pubsub.topics.getIamPolicy` - `pubsub.topics.list` - `pubsub.topics.listEffectiveTags` - `pubsub.topics.listTagBindings` - `pubsub.topics.publish` - `pubsub.topics.setIamPolicy` - `pubsub.topics.update` - `pubsub.topics.updateTag` `recommender.iamPolicyInsights.*` - `recommender.iamPolicyInsights.get` - `recommender.iamPolicyInsights.list` - `recommender.iamPolicyInsights.update` `recommender.iamPolicyRecommendations.*` - `recommender.iamPolicyRecommendations.get` - `recommender.iamPolicyRecommendations.list` - `recommender.iamPolicyRecommendations.update` `recommender.storageBucketSoftDeleteInsights.*` - `recommender.storageBucketSoftDeleteInsights.get` - `recommender.storageBucketSoftDeleteInsights.list` - `recommender.storageBucketSoftDeleteInsights.update` `recommender.storageBucketSoftDeleteRecommendations.*` - `recommender.storageBucketSoftDeleteRecommendations.get` - `recommender.storageBucketSoftDeleteRecommendations.list` - `recommender.storageBucketSoftDeleteRecommendations.update` `resourcemanager.hierarchyNodes.listEffectiveTags` `resourcemanager.projects.get` `resourcemanager.projects.list` `serviceusage.catalogs.listMembers` `serviceusage.consumerpolicy.analyze` `serviceusage.consumerpolicy.get` `serviceusage.effectivepolicy.get` `serviceusage.groups.*` - `serviceusage.groups.list` - `serviceusage.groups.listExpandedMembers` - `serviceusage.groups.listMembers` `serviceusage.quotas.get` `serviceusage.services.get` `serviceusage.services.list` `serviceusage.services.listApis` `serviceusage.services.listDependentServices` `serviceusage.services.use` `serviceusage.values.test` `stackdriver.projects.get` `stackdriver.resourceMetadata.list` `storage.anywhereCaches.*` - `storage.anywhereCaches.create` - `storage.anywhereCaches.disable` - `storage.anywhereCaches.get` - `storage.anywhereCaches.list` - `storage.anywhereCaches.pause` - `storage.anywhereCaches.resume` - `storage.anywhereCaches.update` `storage.bucketOperations.*` - `storage.bucketOperations.cancel` - `storage.bucketOperations.get` - `storage.bucketOperations.list` `storage.buckets.*` - `storage.buckets.create` - `storage.buckets.createTagBinding` - `storage.buckets.delete` - `storage.buckets.deleteTagBinding` - `storage.buckets.enableObjectRetention` - `storage.buckets.get` - `storage.buckets.getIamPolicy` - `storage.buckets.getIpFilter` - `storage.buckets.getObjectInsights` - `storage.buckets.list` - `storage.buckets.listEffectiveTags` - `storage.buckets.listTagBindings` - `storage.buckets.relocate` - `storage.buckets.restore` - `storage.buckets.setIamPolicy` - `storage.buckets.setIpFilter` - `storage.buckets.update` - `storage.buckets.viewIntelligenceDetails` - `storage.buckets.viewSecurityIntelligenceDetails` `storage.featureConfigs.*` - `storage.featureConfigs.create` - `storage.featureConfigs.delete` - `storage.featureConfigs.get` - `storage.featureConfigs.list` - `storage.featureConfigs.update` `storage.folders.*` - `storage.folders.create` - `storage.folders.delete` - `storage.folders.get` - `storage.folders.list` - `storage.folders.rename` `storage.intelligenceConfigs.*` - `storage.intelligenceConfigs.get` - `storage.intelligenceConfigs.update` `storage.managedFolders.*` - `storage.managedFolders.create` - `storage.managedFolders.delete` - `storage.managedFolders.get` - `storage.managedFolders.getIamPolicy` - `storage.managedFolders.list` - `storage.managedFolders.setIamPolicy` - `storage.managedFolders.update` `storage.multipartUploads.*` - `storage.multipartUploads.abort` - `storage.multipartUploads.create` - `storage.multipartUploads.list` - `storage.multipartUploads.listParts` `storage.objects.*` - `storage.objects.create` - `storage.objects.createContext` - `storage.objects.delete` - `storage.objects.deleteContext` - `storage.objects.get` - `storage.objects.getIamPolicy` - `storage.objects.list` - `storage.objects.move` - `storage.objects.overrideUnlockedRetention` - `storage.objects.restore` - `storage.objects.setIamPolicy` - `storage.objects.setRetention` - `storage.objects.update` - `storage.objects.updateContext` `storagebatchoperations.*` - `storagebatchoperations.bucketOperations.get` - `storagebatchoperations.bucketOperations.list` - `storagebatchoperations.jobs.cancel` - `storagebatchoperations.jobs.create` - `storagebatchoperations.jobs.delete` - `storagebatchoperations.jobs.get` - `storagebatchoperations.jobs.list` - `storagebatchoperations.locations.get` - `storagebatchoperations.locations.list` - `storagebatchoperations.operations.cancel` - `storagebatchoperations.operations.delete` - `storagebatchoperations.operations.get` - `storagebatchoperations.operations.list` |

## Sensitive Data Protection permissions

| Permission | Included in roles |
|---|---|
| #### `dlp.analyzeRiskTemplates.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Analyze Risk Templates Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.analyzeRiskTemplatesEditor) (`roles/dlp.analyzeRiskTemplatesEditor`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) |
| #### `dlp.analyzeRiskTemplates.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Analyze Risk Templates Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.analyzeRiskTemplatesEditor) (`roles/dlp.analyzeRiskTemplatesEditor`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) |
| #### `dlp.analyzeRiskTemplates.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Analyze Risk Templates Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.analyzeRiskTemplatesEditor) (`roles/dlp.analyzeRiskTemplatesEditor`) [DLP Analyze Risk Templates Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.analyzeRiskTemplatesReader) (`roles/dlp.analyzeRiskTemplatesReader`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.reader) (`roles/dlp.reader`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [DLP API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.serviceAgent) (`roles/dlp.serviceAgent`) - [Model Armor Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.serviceAgent) (`roles/modelarmor.serviceAgent`) |
| #### `dlp.analyzeRiskTemplates.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Analyze Risk Templates Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.analyzeRiskTemplatesEditor) (`roles/dlp.analyzeRiskTemplatesEditor`) [DLP Analyze Risk Templates Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.analyzeRiskTemplatesReader) (`roles/dlp.analyzeRiskTemplatesReader`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.reader) (`roles/dlp.reader`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [DLP API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.serviceAgent) (`roles/dlp.serviceAgent`) - [Model Armor Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.serviceAgent) (`roles/modelarmor.serviceAgent`) |
| #### `dlp.analyzeRiskTemplates.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Analyze Risk Templates Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.analyzeRiskTemplatesEditor) (`roles/dlp.analyzeRiskTemplatesEditor`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) |
| #### `dlp.charts.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Data Profiles Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.dataProfilesAdmin) (`roles/dlp.dataProfilesAdmin`) [DLP Data Profiles Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.dataProfilesReader) (`roles/dlp.dataProfilesReader`) [DLP File Store Data Profiles Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.fileStoreProfilesReader) (`roles/dlp.fileStoreProfilesReader`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Security Center Admin Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminEditor) (`roles/securitycenter.adminEditor`) [Security Center Admin Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminViewer) (`roles/securitycenter.adminViewer`) |
| #### `dlp.columnDataProfiles.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Column Data Profiles Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.columnDataProfilesReader) (`roles/dlp.columnDataProfilesReader`) [DLP Data Profiles Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.dataProfilesAdmin) (`roles/dlp.dataProfilesAdmin`) [DLP Data Profiles Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.dataProfilesReader) (`roles/dlp.dataProfilesReader`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Security Center Admin Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminEditor) (`roles/securitycenter.adminEditor`) [Security Center Admin Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminViewer) (`roles/securitycenter.adminViewer`) |
| #### `dlp.columnDataProfiles.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Column Data Profiles Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.columnDataProfilesReader) (`roles/dlp.columnDataProfilesReader`) [DLP Data Profiles Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.dataProfilesAdmin) (`roles/dlp.dataProfilesAdmin`) [DLP Data Profiles Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.dataProfilesReader) (`roles/dlp.dataProfilesReader`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Security Center Admin Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminEditor) (`roles/securitycenter.adminEditor`) [Security Center Admin Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminViewer) (`roles/securitycenter.adminViewer`) |
| #### `dlp.connections.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Connections Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.connectionsAdmin) (`roles/dlp.connectionsAdmin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) |
| #### `dlp.connections.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Connections Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.connectionsAdmin) (`roles/dlp.connectionsAdmin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) |
| #### `dlp.connections.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Connections Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.connectionsAdmin) (`roles/dlp.connectionsAdmin`) [DLP Connections Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.connectionsReader) (`roles/dlp.connectionsReader`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) |
| #### `dlp.connections.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Connections Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.connectionsAdmin) (`roles/dlp.connectionsAdmin`) [DLP Connections Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.connectionsReader) (`roles/dlp.connectionsReader`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) |
| #### `dlp.connections.search` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Connections Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.connectionsAdmin) (`roles/dlp.connectionsAdmin`) [DLP Connections Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.connectionsReader) (`roles/dlp.connectionsReader`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) |
| #### `dlp.connections.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Connections Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.connectionsAdmin) (`roles/dlp.connectionsAdmin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) |
| #### `dlp.contentPolicies.apply` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP User](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.user) (`roles/dlp.user`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Content Policies Consumer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.contentPoliciesConsumer) (`roles/dlp.contentPoliciesConsumer`) [DLP Content Policies Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.contentPoliciesEditor) (`roles/dlp.contentPoliciesEditor`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Discovery Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.serviceAgent) (`roles/discoveryengine.serviceAgent`) |
| #### `dlp.contentPolicies.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Content Policies Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.contentPoliciesEditor) (`roles/dlp.contentPoliciesEditor`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) |
| #### `dlp.contentPolicies.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Content Policies Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.contentPoliciesEditor) (`roles/dlp.contentPoliciesEditor`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) |
| #### `dlp.contentPolicies.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Content Policies Consumer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.contentPoliciesConsumer) (`roles/dlp.contentPoliciesConsumer`) [DLP Content Policies Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.contentPoliciesEditor) (`roles/dlp.contentPoliciesEditor`) [DLP Content Policies Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.contentPoliciesReader) (`roles/dlp.contentPoliciesReader`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.reader) (`roles/dlp.reader`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Discovery Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.serviceAgent) (`roles/discoveryengine.serviceAgent`) |
| #### `dlp.contentPolicies.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Content Policies Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.contentPoliciesEditor) (`roles/dlp.contentPoliciesEditor`) [DLP Content Policies Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.contentPoliciesReader) (`roles/dlp.contentPoliciesReader`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.reader) (`roles/dlp.reader`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) |
| #### `dlp.contentPolicies.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Content Policies Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.contentPoliciesEditor) (`roles/dlp.contentPoliciesEditor`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) |
| #### `dlp.deidentifyTemplates.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP De-identify Templates Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.deidentifyTemplatesEditor) (`roles/dlp.deidentifyTemplatesEditor`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) |
| #### `dlp.deidentifyTemplates.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP De-identify Templates Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.deidentifyTemplatesEditor) (`roles/dlp.deidentifyTemplatesEditor`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) |
| #### `dlp.deidentifyTemplates.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP De-identify Templates Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.deidentifyTemplatesEditor) (`roles/dlp.deidentifyTemplatesEditor`) [DLP De-identify Templates Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.deidentifyTemplatesReader) (`roles/dlp.deidentifyTemplatesReader`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.reader) (`roles/dlp.reader`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Customer Engagement Suite Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.serviceAgent) (`roles/ces.serviceAgent`) - [Contact Center AI Insights Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/contactcenterinsights.md.txt#contactcenterinsights.serviceAgent) (`roles/contactcenterinsights.serviceAgent`) - [Dialogflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.serviceAgent) (`roles/dialogflow.serviceAgent`) - [DLP API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.serviceAgent) (`roles/dlp.serviceAgent`) - [Model Armor Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.serviceAgent) (`roles/modelarmor.serviceAgent`) |
| #### `dlp.deidentifyTemplates.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP De-identify Templates Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.deidentifyTemplatesEditor) (`roles/dlp.deidentifyTemplatesEditor`) [DLP De-identify Templates Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.deidentifyTemplatesReader) (`roles/dlp.deidentifyTemplatesReader`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.reader) (`roles/dlp.reader`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Customer Engagement Suite Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.serviceAgent) (`roles/ces.serviceAgent`) - [Contact Center AI Insights Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/contactcenterinsights.md.txt#contactcenterinsights.serviceAgent) (`roles/contactcenterinsights.serviceAgent`) - [Dialogflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.serviceAgent) (`roles/dialogflow.serviceAgent`) - [DLP API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.serviceAgent) (`roles/dlp.serviceAgent`) - [Model Armor Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.serviceAgent) (`roles/modelarmor.serviceAgent`) |
| #### `dlp.deidentifyTemplates.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP De-identify Templates Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.deidentifyTemplatesEditor) (`roles/dlp.deidentifyTemplatesEditor`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) |
| #### `dlp.estimates.cancel` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Cost Estimation](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.estimatesAdmin) (`roles/dlp.estimatesAdmin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) |
| #### `dlp.estimates.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Cost Estimation](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.estimatesAdmin) (`roles/dlp.estimatesAdmin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) |
| #### `dlp.estimates.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Cost Estimation](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.estimatesAdmin) (`roles/dlp.estimatesAdmin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) |
| #### `dlp.estimates.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Cost Estimation](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.estimatesAdmin) (`roles/dlp.estimatesAdmin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) |
| #### `dlp.estimates.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Cost Estimation](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.estimatesAdmin) (`roles/dlp.estimatesAdmin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) |
| #### `dlp.fileStoreProfiles.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Data Profiles Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.dataProfilesAdmin) (`roles/dlp.dataProfilesAdmin`) [DLP File Store Data Profiles Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.fileStoreProfilesAdmin) (`roles/dlp.fileStoreProfilesAdmin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) |
| #### `dlp.fileStoreProfiles.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Data Profiles Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.dataProfilesAdmin) (`roles/dlp.dataProfilesAdmin`) [DLP Data Profiles Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.dataProfilesReader) (`roles/dlp.dataProfilesReader`) [DLP File Store Data Profiles Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.fileStoreProfilesAdmin) (`roles/dlp.fileStoreProfilesAdmin`) [DLP File Store Data Profiles Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.fileStoreProfilesReader) (`roles/dlp.fileStoreProfilesReader`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Security Center Admin Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminEditor) (`roles/securitycenter.adminEditor`) [Security Center Admin Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminViewer) (`roles/securitycenter.adminViewer`) |
| #### `dlp.fileStoreProfiles.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Data Profiles Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.dataProfilesAdmin) (`roles/dlp.dataProfilesAdmin`) [DLP Data Profiles Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.dataProfilesReader) (`roles/dlp.dataProfilesReader`) [DLP File Store Data Profiles Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.fileStoreProfilesAdmin) (`roles/dlp.fileStoreProfilesAdmin`) [DLP File Store Data Profiles Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.fileStoreProfilesReader) (`roles/dlp.fileStoreProfilesReader`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Security Center Admin Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminEditor) (`roles/securitycenter.adminEditor`) [Security Center Admin Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminViewer) (`roles/securitycenter.adminViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Assured Workloads Monitoring Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.monitoringServiceAgent) (`roles/assuredworkloads.monitoringServiceAgent`) - [Cloud Security Compliance Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.serviceAgent) (`roles/cloudsecuritycompliance.serviceAgent`) |
| #### `dlp.inspectFindings.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Inspect Findings Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.inspectFindingsReader) (`roles/dlp.inspectFindingsReader`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.reader) (`roles/dlp.reader`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Model Armor Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.serviceAgent) (`roles/modelarmor.serviceAgent`) |
| #### `dlp.inspectTemplates.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Inspect Templates Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.inspectTemplatesEditor) (`roles/dlp.inspectTemplatesEditor`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) |
| #### `dlp.inspectTemplates.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Inspect Templates Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.inspectTemplatesEditor) (`roles/dlp.inspectTemplatesEditor`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) |
| #### `dlp.inspectTemplates.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Inspect Templates Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.inspectTemplatesEditor) (`roles/dlp.inspectTemplatesEditor`) [DLP Inspect Templates Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.inspectTemplatesReader) (`roles/dlp.inspectTemplatesReader`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.reader) (`roles/dlp.reader`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Customer Engagement Suite Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.serviceAgent) (`roles/ces.serviceAgent`) - [Contact Center AI Insights Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/contactcenterinsights.md.txt#contactcenterinsights.serviceAgent) (`roles/contactcenterinsights.serviceAgent`) - [Dialogflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.serviceAgent) (`roles/dialogflow.serviceAgent`) - [DLP API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.serviceAgent) (`roles/dlp.serviceAgent`) - [Model Armor Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.serviceAgent) (`roles/modelarmor.serviceAgent`) |
| #### `dlp.inspectTemplates.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Inspect Templates Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.inspectTemplatesEditor) (`roles/dlp.inspectTemplatesEditor`) [DLP Inspect Templates Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.inspectTemplatesReader) (`roles/dlp.inspectTemplatesReader`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.reader) (`roles/dlp.reader`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Assured Workloads Monitoring Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.monitoringServiceAgent) (`roles/assuredworkloads.monitoringServiceAgent`) - [Audit Manager Auditing Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.serviceAgent) (`roles/auditmanager.serviceAgent`) - [Customer Engagement Suite Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.serviceAgent) (`roles/ces.serviceAgent`) - [Cloud Security Compliance Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.serviceAgent) (`roles/cloudsecuritycompliance.serviceAgent`) - [Contact Center AI Insights Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/contactcenterinsights.md.txt#contactcenterinsights.serviceAgent) (`roles/contactcenterinsights.serviceAgent`) - [Dialogflow Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dialogflow.md.txt#dialogflow.serviceAgent) (`roles/dialogflow.serviceAgent`) - [DLP API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.serviceAgent) (`roles/dlp.serviceAgent`) - [Model Armor Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.serviceAgent) (`roles/modelarmor.serviceAgent`) |
| #### `dlp.inspectTemplates.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Inspect Templates Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.inspectTemplatesEditor) (`roles/dlp.inspectTemplatesEditor`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) |
| #### `dlp.jobTriggers.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Job Triggers Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.jobTriggersEditor) (`roles/dlp.jobTriggersEditor`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) |
| #### `dlp.jobTriggers.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Job Triggers Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.jobTriggersEditor) (`roles/dlp.jobTriggersEditor`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) |
| #### `dlp.jobTriggers.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Job Triggers Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.jobTriggersEditor) (`roles/dlp.jobTriggersEditor`) [DLP Job Triggers Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.jobTriggersReader) (`roles/dlp.jobTriggersReader`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.reader) (`roles/dlp.reader`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Model Armor Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.serviceAgent) (`roles/modelarmor.serviceAgent`) |
| #### `dlp.jobTriggers.hybridInspect` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Job Triggers Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.jobTriggersEditor) (`roles/dlp.jobTriggersEditor`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) |
| #### `dlp.jobTriggers.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Job Triggers Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.jobTriggersEditor) (`roles/dlp.jobTriggersEditor`) [DLP Job Triggers Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.jobTriggersReader) (`roles/dlp.jobTriggersReader`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.reader) (`roles/dlp.reader`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Assured Workloads Monitoring Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.monitoringServiceAgent) (`roles/assuredworkloads.monitoringServiceAgent`) - [Audit Manager Auditing Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/auditmanager.md.txt#auditmanager.serviceAgent) (`roles/auditmanager.serviceAgent`) - [Cloud Security Compliance Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.serviceAgent) (`roles/cloudsecuritycompliance.serviceAgent`) - [Model Armor Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.serviceAgent) (`roles/modelarmor.serviceAgent`) |
| #### `dlp.jobTriggers.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Job Triggers Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.jobTriggersEditor) (`roles/dlp.jobTriggersEditor`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) |
| #### `dlp.jobs.cancel` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Jobs Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.jobsEditor) (`roles/dlp.jobsEditor`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [DLP API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.serviceAgent) (`roles/dlp.serviceAgent`) |
| #### `dlp.jobs.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Jobs Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.jobsEditor) (`roles/dlp.jobsEditor`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [DLP API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.serviceAgent) (`roles/dlp.serviceAgent`) |
| #### `dlp.jobs.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Jobs Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.jobsEditor) (`roles/dlp.jobsEditor`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [DLP API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.serviceAgent) (`roles/dlp.serviceAgent`) |
| #### `dlp.jobs.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Jobs Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.jobsEditor) (`roles/dlp.jobsEditor`) [DLP Jobs Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.jobsReader) (`roles/dlp.jobsReader`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.reader) (`roles/dlp.reader`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [DLP API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.serviceAgent) (`roles/dlp.serviceAgent`) - [Model Armor Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.serviceAgent) (`roles/modelarmor.serviceAgent`) |
| #### `dlp.jobs.hybridInspect` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Jobs Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.jobsEditor) (`roles/dlp.jobsEditor`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [DLP API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.serviceAgent) (`roles/dlp.serviceAgent`) |
| #### `dlp.jobs.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Jobs Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.jobsEditor) (`roles/dlp.jobsEditor`) [DLP Jobs Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.jobsReader) (`roles/dlp.jobsReader`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.reader) (`roles/dlp.reader`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Assured Workloads Monitoring Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.monitoringServiceAgent) (`roles/assuredworkloads.monitoringServiceAgent`) - [Cloud Security Compliance Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.serviceAgent) (`roles/cloudsecuritycompliance.serviceAgent`) - [DLP API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.serviceAgent) (`roles/dlp.serviceAgent`) - [Model Armor Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.serviceAgent) (`roles/modelarmor.serviceAgent`) |
| #### `dlp.kms.encrypt` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP User](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.user) (`roles/dlp.user`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Jobs Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.jobsEditor) (`roles/dlp.jobsEditor`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Customer Engagement Suite Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.serviceAgent) (`roles/ces.serviceAgent`) - [Contact Center AI Insights Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/contactcenterinsights.md.txt#contactcenterinsights.serviceAgent) (`roles/contactcenterinsights.serviceAgent`) - [DLP API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.serviceAgent) (`roles/dlp.serviceAgent`) - [Model Armor Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.serviceAgent) (`roles/modelarmor.serviceAgent`) |
| #### `dlp.locations.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP User](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.user) (`roles/dlp.user`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.reader) (`roles/dlp.reader`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Customer Engagement Suite Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.serviceAgent) (`roles/ces.serviceAgent`) - [Contact Center AI Insights Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/contactcenterinsights.md.txt#contactcenterinsights.serviceAgent) (`roles/contactcenterinsights.serviceAgent`) - [Model Armor Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.serviceAgent) (`roles/modelarmor.serviceAgent`) |
| #### `dlp.locations.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP User](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.user) (`roles/dlp.user`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.reader) (`roles/dlp.reader`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Customer Engagement Suite Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/ces.md.txt#ces.serviceAgent) (`roles/ces.serviceAgent`) - [Contact Center AI Insights Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/contactcenterinsights.md.txt#contactcenterinsights.serviceAgent) (`roles/contactcenterinsights.serviceAgent`) - [Model Armor Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.serviceAgent) (`roles/modelarmor.serviceAgent`) |
| #### `dlp.projectDataProfiles.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Data Profiles Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.dataProfilesAdmin) (`roles/dlp.dataProfilesAdmin`) [DLP Data Profiles Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.dataProfilesReader) (`roles/dlp.dataProfilesReader`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectDataProfilesReader) (`roles/dlp.projectDataProfilesReader`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Security Center Admin Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminEditor) (`roles/securitycenter.adminEditor`) [Security Center Admin Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminViewer) (`roles/securitycenter.adminViewer`) |
| #### `dlp.projectDataProfiles.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Data Profiles Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.dataProfilesAdmin) (`roles/dlp.dataProfilesAdmin`) [DLP Data Profiles Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.dataProfilesReader) (`roles/dlp.dataProfilesReader`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectDataProfilesReader) (`roles/dlp.projectDataProfilesReader`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Security Center Admin Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminEditor) (`roles/securitycenter.adminEditor`) [Security Center Admin Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminViewer) (`roles/securitycenter.adminViewer`) |
| #### `dlp.storedInfoTypes.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Stored InfoTypes Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.storedInfoTypesEditor) (`roles/dlp.storedInfoTypesEditor`) |
| #### `dlp.storedInfoTypes.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Stored InfoTypes Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.storedInfoTypesEditor) (`roles/dlp.storedInfoTypesEditor`) |
| #### `dlp.storedInfoTypes.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.reader) (`roles/dlp.reader`) [DLP Stored InfoTypes Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.storedInfoTypesEditor) (`roles/dlp.storedInfoTypesEditor`) [DLP Stored InfoTypes Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.storedInfoTypesReader) (`roles/dlp.storedInfoTypesReader`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Model Armor Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.serviceAgent) (`roles/modelarmor.serviceAgent`) |
| #### `dlp.storedInfoTypes.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.reader) (`roles/dlp.reader`) [DLP Stored InfoTypes Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.storedInfoTypesEditor) (`roles/dlp.storedInfoTypesEditor`) [DLP Stored InfoTypes Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.storedInfoTypesReader) (`roles/dlp.storedInfoTypesReader`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Model Armor Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/modelarmor.md.txt#modelarmor.serviceAgent) (`roles/modelarmor.serviceAgent`) |
| #### `dlp.storedInfoTypes.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Stored InfoTypes Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.storedInfoTypesEditor) (`roles/dlp.storedInfoTypesEditor`) |
| #### `dlp.subscriptions.cancel` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Subscription Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.subscriptionsAdmin) (`roles/dlp.subscriptionsAdmin`) |
| #### `dlp.subscriptions.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Subscription Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.subscriptionsAdmin) (`roles/dlp.subscriptionsAdmin`) |
| #### `dlp.subscriptions.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Subscription Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.subscriptionsAdmin) (`roles/dlp.subscriptionsAdmin`) [DLP Subscription Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.subscriptionsReader) (`roles/dlp.subscriptionsReader`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) |
| #### `dlp.subscriptions.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Subscription Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.subscriptionsAdmin) (`roles/dlp.subscriptionsAdmin`) [DLP Subscription Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.subscriptionsReader) (`roles/dlp.subscriptionsReader`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) |
| #### `dlp.subscriptions.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Subscription Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.subscriptionsAdmin) (`roles/dlp.subscriptionsAdmin`) |
| #### `dlp.tableDataProfiles.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Data Profiles Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.dataProfilesAdmin) (`roles/dlp.dataProfilesAdmin`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Table Data Profiles Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.tableDataProfilesAdmin) (`roles/dlp.tableDataProfilesAdmin`) |
| #### `dlp.tableDataProfiles.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Data Profiles Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.dataProfilesAdmin) (`roles/dlp.dataProfilesAdmin`) [DLP Data Profiles Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.dataProfilesReader) (`roles/dlp.dataProfilesReader`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Table Data Profiles Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.tableDataProfilesAdmin) (`roles/dlp.tableDataProfilesAdmin`) [DLP Table Data Profiles Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.tableDataProfilesReader) (`roles/dlp.tableDataProfilesReader`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Security Center Admin Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminEditor) (`roles/securitycenter.adminEditor`) [Security Center Admin Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminViewer) (`roles/securitycenter.adminViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Assured Workloads Monitoring Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.monitoringServiceAgent) (`roles/assuredworkloads.monitoringServiceAgent`) - [Cloud Security Compliance Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/cloudsecuritycompliance.md.txt#cloudsecuritycompliance.serviceAgent) (`roles/cloudsecuritycompliance.serviceAgent`) |
| #### `dlp.tableDataProfiles.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [DLP Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.admin) (`roles/dlp.admin`) [DLP Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.editor) (`roles/dlp.editor`) [DLP Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.viewer) (`roles/dlp.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Security Center Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.admin) (`roles/securitycenter.admin`) [DLP Data Profiles Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.dataProfilesAdmin) (`roles/dlp.dataProfilesAdmin`) [DLP Data Profiles Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.dataProfilesReader) (`roles/dlp.dataProfilesReader`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [DLP Table Data Profiles Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.tableDataProfilesAdmin) (`roles/dlp.tableDataProfilesAdmin`) [DLP Table Data Profiles Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.tableDataProfilesReader) (`roles/dlp.tableDataProfilesReader`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Security Center Admin Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminEditor) (`roles/securitycenter.adminEditor`) [Security Center Admin Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/securitycenter.md.txt#securitycenter.adminViewer) (`roles/securitycenter.adminViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Assured Workloads Monitoring Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/assuredworkloads.md.txt#assuredworkloads.monitoringServiceAgent) (`roles/assuredworkloads.monitoringServiceAgent`) |

## Common permissions

Some
Sensitive Data Protection methods require permissions from other
services. For example, to interact with Cloud Storage or BigQuery,
you need the relevant permissions for those services. Additionally, all billable
methods require that the caller has the `serviceusage.services.use`
permission on the project being used. This permission is included in
many Sensitive Data Protection roles, such as the DLP User role
(`roles/dlp.user`).