Multicast permissions reference

GA with allowlist: Access to Cloud Multicast is available to select Google Cloud customers. If you are interested, submit an access request form.

This page describes the Identity and Access Management (IAM) roles and permissions that are required to use multicast. For more information about granting roles and permissions, see the IAM documentation.

The following table lists the specific permissions required to use multicast resources.

The predefined Multicast Admin role (networkservices.multicastAdmin) grants all of the permissions in the following table. Additionally, the predefined role grants networkconnectivity.internalRanges.*.

Resource	Permissions
Multicast administrator resources
Multicast domain group	networkservices.multicastDomainGroups.* networkservices.multicastDomainGroups.create networkservices.multicastDomainGroups.delete networkservices.multicastDomainGroups.get networkservices.multicastDomainGroups.list
Multicast domain	networkservices.multicastDomains.* networkservices.multicastDomains.create networkservices.multicastDomains.delete networkservices.multicastDomains.get networkservices.multicastDomains.list
Multicast domain activation	networkservices.multicastDomainActivations.* networkservices.multicastDomainActivations.create networkservices.multicastDomainActivations.delete networkservices.multicastDomainActivations.update networkservices.multicastDomainActivations.get networkservices.multicastDomainActivations.list
Multicast group range	networkservices.multicastGroupRanges.* networkservices.multicastGroupRanges.create networkservices.multicastGroupRanges.delete networkservices.multicastGroupRanges.update networkservices.multicastGroupRanges.get networkservices.multicastGroupRanges.list
Multicast group range activation	networkservices.multicastGroupRangeActivations.* networkservices.multicastGroupRangeActivations.create networkservices.multicastGroupRangeActivations.delete networkservices.multicastGroupRangeActivations.update networkservices.multicastGroupRangeActivations.get networkservices.multicastGroupRangeActivations.list
Multicast producer resources
Multicast producer association	networkservices.multicastProducerAssociations.* networkservices.multicastProducerAssociations.create networkservices.multicastProducerAssociations.delete networkservices.multicastProducerAssociations.get networkservices.multicastProducerAssociations.list
Multicast group producer activation	networkservices.multicastGroupProducerActivations.* networkservices.multicastGroupProducerActivations.create networkservices.multicastGroupProducerActivations.delete networkservices.multicastGroupProducerActivations.get networkservices.multicastGroupProducerActivations.list
Multicast consumer resources
Multicast consumer association	networkservices.multicastConsumerAssociations.* networkservices.multicastConsumerAssociations.create networkservices.multicastConsumerAssociations.delete networkservices.multicastConsumerAssociations.get networkservices.multicastConsumerAssociations.list
Multicast group consumer activation	networkservices.multicastGroupConsumerActivations.* networkservices.multicastGroupConsumerActivations.create networkservices.multicastGroupConsumerActivations.delete networkservices.multicastGroupConsumerActivations.update networkservices.multicastGroupConsumerActivations.get networkservices.multicastGroupConsumerActivations.list