| roles/accessapproval.approver |
X |
X |
X |
| roles/accessapproval.configEditor |
X |
X |
X |
| roles/accessapproval.viewer |
X |
X |
X |
| roles/accesscontextmanager.policyAdmin |
X |
X |
X |
| roles/accesscontextmanager.policyEditor |
X |
X |
X |
| roles/accesscontextmanager.policyReader |
X |
X |
X |
| roles/accesscontextmanager.vpcScTroubleshooterViewer |
X |
X |
X |
| roles/actions.Admin |
X |
X |
X |
| roles/actions.Viewer |
X |
X |
X |
| roles/androidmanagement.user |
X |
X |
X |
| roles/anthos.serviceAgent |
X |
X |
X |
| roles/anthosconfigmanagement.serviceAgent |
X |
X |
X |
| roles/apigateway.admin |
X |
X |
X |
| roles/apigateway.viewer |
X |
X |
X |
| roles/apigee.admin |
X |
X |
X |
| roles/apigee.analyticsAgent |
X |
X |
X |
| roles/apigee.analyticsEditor |
X |
X |
X |
| roles/apigee.analyticsViewer |
X |
X |
X |
| roles/apigee.apiCreator |
X |
X |
X |
| roles/apigee.deployer |
X |
X |
X |
| roles/apigee.developerAdmin |
X |
X |
X |
| roles/apigee.portalAdmin |
X |
X |
X |
| roles/apigee.readOnlyAdmin |
X |
X |
X |
| roles/apigee.runtimeAgent |
X |
X |
X |
| roles/apigee.serviceAgent |
X |
X |
X |
| roles/apigee.synchronizerManager |
X |
X |
X |
| roles/apigeeconnect.Admin |
X |
X |
X |
| roles/apigeeconnect.Agent |
X |
X |
X |
| roles/appengine.appAdmin |
X |
X |
X |
| roles/appengine.appCreator |
X |
X |
X |
| roles/appengine.appViewer |
X |
X |
X |
| roles/appengine.codeViewer |
X |
X |
X |
| roles/appengine.deployer |
X |
X |
X |
| roles/appengine.serviceAdmin |
X |
X |
X |
| roles/appengineflex.serviceAgent |
X |
X |
X |
| roles/artifactregistry.admin |
X |
X |
X |
| roles/artifactregistry.reader |
X |
X |
X |
| roles/artifactregistry.repoAdmin |
X |
X |
X |
| roles/artifactregistry.serviceAgent |
X |
X |
X |
| roles/artifactregistry.writer |
X |
X |
X |
| roles/assuredworkloads.admin |
X |
|
|
| roles/assuredworkloads.editor |
X |
|
|
| roles/assuredworkloads.reader |
X |
X |
X |
| roles/automl.admin |
X |
X |
X |
| roles/automl.editor |
X |
X |
X |
| roles/automl.predictor |
X |
X |
X |
| roles/automl.serviceAgent |
X |
X |
X |
| roles/automl.viewer |
X |
X |
X |
| roles/automlrecommendations.admin |
X |
X |
X |
| roles/automlrecommendations.adminViewer |
X |
X |
X |
| roles/automlrecommendations.editor |
X |
X |
X |
| roles/automlrecommendations.serviceAgent |
X |
X |
X |
| roles/automlrecommendations.viewer |
X |
X |
X |
| roles/axt.admin |
X |
X |
X |
| roles/bigquery.admin |
X |
X |
X |
| roles/bigquery.connectionAdmin |
X |
X |
X |
| roles/bigquery.connectionUser |
X |
X |
X |
| roles/bigquery.dataEditor |
X |
X |
X |
| roles/bigquery.dataOwner |
X |
X |
X |
| roles/bigquery.dataViewer |
X |
X |
X |
| roles/bigquery.jobUser |
X |
X |
X |
| roles/bigquery.metadataViewer |
X |
X |
X |
| roles/bigquery.readSessionUser |
X |
X |
X |
| roles/bigquery.resourceAdmin |
X |
X |
X |
| roles/bigquery.resourceEditor |
X |
X |
X |
| roles/bigquery.resourceViewer |
X |
X |
X |
| roles/bigquery.user |
X |
X |
X |
| roles/bigqueryconnection.serviceAgent |
X |
X |
X |
| roles/bigquerydatatransfer.serviceAgent |
X |
X |
X |
| roles/bigtable.admin |
X |
X |
X |
| roles/bigtable.reader |
X |
X |
X |
| roles/bigtable.user |
X |
X |
X |
| roles/bigtable.viewer |
X |
X |
X |
| roles/billing.admin |
X |
|
|
| roles/billing.creator |
X |
|
|
| roles/billing.projectManager |
X |
X |
X |
| roles/billing.user |
X |
|
|
| roles/billing.viewer |
X |
|
|
| roles/binaryauthorization.attestorsAdmin |
X |
X |
X |
| roles/binaryauthorization.attestorsEditor |
X |
X |
X |
| roles/binaryauthorization.attestorsVerifier |
X |
X |
X |
| roles/binaryauthorization.attestorsViewer |
X |
X |
X |
| roles/binaryauthorization.policyAdmin |
X |
X |
X |
| roles/binaryauthorization.policyEditor |
X |
X |
X |
| roles/binaryauthorization.policyViewer |
X |
X |
X |
| roles/binaryauthorization.serviceAgent |
X |
X |
X |
| roles/browser |
X |
X |
X |
| roles/chat.owner |
X |
X |
X |
| roles/chat.reader |
X |
X |
X |
| roles/cloudasset.owner |
X |
X |
X |
| roles/cloudasset.serviceAgent |
X |
X |
X |
| roles/cloudasset.viewer |
X |
X |
X |
| roles/cloudbuild.builds.builder |
X |
X |
X |
| roles/cloudbuild.builds.editor |
X |
X |
X |
| roles/cloudbuild.builds.viewer |
X |
X |
X |
| roles/cloudbuild.serviceAgent |
X |
X |
X |
| roles/cloudconfig.admin |
X |
X |
X |
| roles/cloudconfig.viewer |
X |
X |
X |
| roles/clouddebugger.agent |
X |
X |
X |
| roles/clouddebugger.user |
X |
X |
X |
| roles/cloudfunctions.admin |
X |
X |
X |
| roles/cloudfunctions.developer |
X |
X |
X |
| roles/cloudfunctions.invoker |
X |
X |
X |
| roles/cloudfunctions.serviceAgent |
X |
X |
X |
| roles/cloudfunctions.viewer |
X |
X |
X |
| roles/cloudiot.admin |
X |
X |
X |
| roles/cloudiot.deviceController |
X |
X |
X |
| roles/cloudiot.editor |
X |
X |
X |
| roles/cloudiot.provisioner |
X |
X |
X |
| roles/cloudiot.serviceAgent |
X |
X |
X |
| roles/cloudiot.viewer |
X |
X |
X |
| roles/cloudjobdiscovery.admin |
X |
X |
X |
| roles/cloudjobdiscovery.jobsEditor |
X |
X |
X |
| roles/cloudjobdiscovery.jobsViewer |
X |
X |
X |
| roles/cloudjobdiscovery.profilesEditor |
X |
X |
X |
| roles/cloudjobdiscovery.profilesViewer |
X |
X |
X |
| roles/cloudkms.admin |
X |
X |
X |
| roles/cloudkms.cryptoKeyDecrypter |
X |
X |
X |
| roles/cloudkms.cryptoKeyEncrypter |
X |
X |
X |
| roles/cloudkms.cryptoKeyEncrypterDecrypter |
X |
X |
X |
| roles/cloudkms.importer |
X |
X |
X |
| roles/cloudkms.publicKeyViewer |
X |
X |
X |
| roles/cloudkms.serviceAgent |
X |
X |
X |
| roles/cloudkms.signer |
X |
X |
X |
| roles/cloudkms.signerVerifier |
X |
X |
X |
| roles/cloudmigration.inframanager |
X |
X |
X |
| roles/cloudmigration.storageaccess |
X |
X |
X |
| roles/cloudmigration.velostrataconnect |
X |
X |
X |
| roles/cloudprivatecatalog.consumer |
X |
X |
X |
| roles/cloudprivatecatalogproducer.admin |
X |
X |
X |
| roles/cloudprivatecatalogproducer.manager |
X |
X |
X |
| roles/cloudprofiler.agent |
X |
X |
X |
| roles/cloudprofiler.user |
X |
X |
X |
| roles/cloudscheduler.admin |
X |
X |
X |
| roles/cloudscheduler.jobRunner |
X |
X |
X |
| roles/cloudscheduler.serviceAgent |
X |
X |
X |
| roles/cloudscheduler.viewer |
X |
X |
X |
| roles/cloudsecurityscanner.editor |
X |
X |
|
| roles/cloudsecurityscanner.runner |
X |
X |
X |
| roles/cloudsecurityscanner.viewer |
X |
X |
X |
| roles/cloudsql.admin |
X |
X |
X |
| roles/cloudsql.client |
X |
X |
X |
| roles/cloudsql.editor |
X |
X |
X |
| roles/cloudsql.instanceUser |
X |
X |
X |
| roles/cloudsql.serviceAgent |
X |
X |
X |
| roles/cloudsql.viewer |
X |
X |
X |
| roles/cloudsupport.admin |
X |
|
|
| roles/cloudsupport.techSupportEditor |
X |
X |
X |
| roles/cloudsupport.techSupportViewer |
X |
X |
X |
| roles/cloudsupport.viewer |
X |
|
|
| roles/cloudtasks.admin |
X |
X |
X |
| roles/cloudtasks.enqueuer |
X |
X |
X |
| roles/cloudtasks.queueAdmin |
X |
X |
X |
| roles/cloudtasks.serviceAgent |
X |
X |
X |
| roles/cloudtasks.taskDeleter |
X |
X |
X |
| roles/cloudtasks.taskRunner |
X |
X |
X |
| roles/cloudtasks.viewer |
X |
X |
X |
| roles/cloudtestservice.testAdmin |
X |
X |
X |
| roles/cloudtestservice.testViewer |
X |
X |
X |
| roles/cloudtpu.serviceAgent |
X |
X |
X |
| roles/cloudtrace.admin |
X |
X |
X |
| roles/cloudtrace.agent |
X |
X |
X |
| roles/cloudtrace.user |
X |
X |
X |
| roles/cloudtranslate.admin |
X |
X |
X |
| roles/cloudtranslate.editor |
X |
X |
X |
| roles/cloudtranslate.user |
X |
X |
X |
| roles/cloudtranslate.viewer |
X |
X |
X |
| roles/codelabapikeys.admin |
X |
X |
X |
| roles/codelabapikeys.editor |
X |
X |
X |
| roles/codelabapikeys.viewer |
X |
X |
X |
| roles/composer.admin |
X |
X |
X |
| roles/composer.environmentAndStorageObjectAdmin |
X |
X |
X |
| roles/composer.environmentAndStorageObjectViewer |
X |
X |
X |
| roles/composer.serviceAgent |
X |
X |
X |
| roles/composer.user |
X |
X |
X |
| roles/composer.worker |
X |
X |
X |
| roles/compute.admin |
X |
X |
X |
| roles/compute.imageUser |
X |
X |
X |
| roles/compute.instanceAdmin |
X |
X |
X |
| roles/compute.instanceAdmin.v1 |
X |
X |
X |
| roles/compute.loadBalancerAdmin |
X |
X |
X |
| roles/compute.networkAdmin |
X |
X |
X |
| roles/compute.networkUser |
X |
X |
X |
| roles/compute.networkViewer |
X |
X |
X |
| roles/compute.orgSecurityPolicyAdmin |
X |
X |
X |
| roles/compute.orgSecurityPolicyUser |
X |
X |
X |
| roles/compute.orgSecurityResourceAdmin |
X |
X |
X |
| roles/compute.osAdminLogin |
X |
X |
X |
| roles/compute.osLogin |
X |
X |
X |
| roles/compute.osLoginExternalUser |
X |
|
|
| roles/compute.packetMirroringAdmin |
X |
X |
X |
| roles/compute.packetMirroringUser |
X |
X |
X |
| roles/compute.publicIpAdmin |
X |
X |
X |
| roles/compute.securityAdmin |
X |
X |
X |
| roles/compute.serviceAgent |
X |
X |
X |
| roles/compute.storageAdmin |
X |
X |
X |
| roles/compute.viewer |
X |
X |
X |
| roles/compute.xpnAdmin |
X |
|
X |
| roles/computescanning.serviceAgent |
X |
X |
X |
| roles/consumerprocurement.entitlementManager |
X |
X |
X |
| roles/consumerprocurement.entitlementViewer |
X |
X |
X |
| roles/consumerprocurement.orderAdmin |
X |
|
|
| roles/consumerprocurement.orderViewer |
X |
|
|
| roles/container.admin |
X |
X |
X |
| roles/container.clusterAdmin |
X |
X |
X |
| roles/container.clusterViewer |
X |
X |
X |
| roles/container.developer |
X |
X |
X |
| roles/container.hostServiceAgentUser |
X |
X |
X |
| roles/container.serviceAgent |
X |
X |
X |
| roles/container.viewer |
X |
X |
X |
| roles/containeranalysis.ServiceAgent |
X |
X |
X |
| roles/containeranalysis.admin |
X |
X |
X |
| roles/containeranalysis.notes.attacher |
X |
X |
X |
| roles/containeranalysis.notes.editor |
X |
X |
X |
| roles/containeranalysis.notes.occurrences.viewer |
X |
X |
X |
| roles/containeranalysis.notes.viewer |
X |
X |
X |
| roles/containeranalysis.occurrences.editor |
X |
X |
X |
| roles/containeranalysis.occurrences.viewer |
X |
X |
X |
| roles/containerregistry.ServiceAgent |
X |
X |
X |
| roles/containerscanning.ServiceAgent |
X |
X |
X |
| roles/containerthreatdetection.serviceAgent |
X |
X |
X |
| roles/datacatalog.admin |
X |
X |
X |
| roles/datacatalog.categoryAdmin |
X |
X |
X |
| roles/datacatalog.categoryFineGrainedReader |
X |
X |
X |
| roles/datacatalog.entryGroupCreator |
X |
X |
X |
| roles/datacatalog.entryGroupOwner |
X |
X |
X |
| roles/datacatalog.entryOwner |
X |
X |
X |
| roles/datacatalog.entryViewer |
X |
X |
X |
| roles/datacatalog.tagEditor |
X |
X |
X |
| roles/datacatalog.tagTemplateCreator |
X |
X |
X |
| roles/datacatalog.tagTemplateOwner |
X |
X |
X |
| roles/datacatalog.tagTemplateUser |
X |
X |
X |
| roles/datacatalog.tagTemplateViewer |
X |
X |
X |
| roles/datacatalog.viewer |
X |
X |
X |
| roles/dataflow.admin |
X |
X |
X |
| roles/dataflow.developer |
X |
X |
X |
| roles/dataflow.serviceAgent |
X |
X |
X |
| roles/dataflow.viewer |
X |
X |
X |
| roles/dataflow.worker |
X |
X |
X |
| roles/datafusion.admin |
X |
X |
X |
| roles/datafusion.runner |
X |
X |
X |
| roles/datafusion.serviceAgent |
X |
X |
X |
| roles/datafusion.viewer |
X |
X |
X |
| roles/datalabeling.admin |
X |
X |
X |
| roles/datalabeling.editor |
X |
X |
X |
| roles/datalabeling.serviceAgent |
X |
X |
X |
| roles/datalabeling.viewer |
X |
X |
X |
| roles/dataprep.projects.user |
X |
X |
X |
| roles/dataprep.serviceAgent |
X |
X |
X |
| roles/dataproc.admin |
X |
X |
X |
| roles/dataproc.editor |
X |
X |
X |
| roles/dataproc.serviceAgent |
X |
X |
X |
| roles/dataproc.viewer |
X |
X |
X |
| roles/dataproc.worker |
X |
X |
X |
| roles/dataprocessing.admin |
X |
X |
X |
| roles/dataprocessing.iamAccessHistoryExporter |
X |
X |
X |
| roles/datastore.importExportAdmin |
X |
X |
X |
| roles/datastore.indexAdmin |
X |
X |
X |
| roles/datastore.owner |
X |
X |
X |
| roles/datastore.user |
X |
X |
X |
| roles/datastore.viewer |
X |
X |
X |
| roles/datastudio.serviceAgent |
X |
X |
X |
| roles/deploymentmanager.editor |
X |
X |
X |
| roles/deploymentmanager.typeEditor |
X |
X |
X |
| roles/deploymentmanager.typeViewer |
X |
X |
X |
| roles/deploymentmanager.viewer |
X |
X |
X |
| roles/dialogflow.admin |
X |
X |
X |
| roles/dialogflow.client |
X |
X |
X |
| roles/dialogflow.consoleAgentEditor |
X |
X |
X |
| roles/dialogflow.reader |
X |
X |
X |
| roles/dialogflow.serviceAgent |
X |
X |
X |
| roles/dlp.admin |
X |
X |
X |
| roles/dlp.analyzeRiskTemplatesEditor |
X |
X |
X |
| roles/dlp.analyzeRiskTemplatesReader |
X |
X |
X |
| roles/dlp.deidentifyTemplatesEditor |
X |
X |
X |
| roles/dlp.deidentifyTemplatesReader |
X |
X |
X |
| roles/dlp.inspectFindingsReader |
X |
X |
X |
| roles/dlp.inspectTemplatesEditor |
X |
X |
X |
| roles/dlp.inspectTemplatesReader |
X |
X |
X |
| roles/dlp.jobTriggersEditor |
X |
X |
X |
| roles/dlp.jobTriggersReader |
X |
X |
X |
| roles/dlp.jobsEditor |
X |
X |
X |
| roles/dlp.jobsReader |
X |
X |
X |
| roles/dlp.reader |
X |
X |
X |
| roles/dlp.serviceAgent |
X |
X |
X |
| roles/dlp.storedInfoTypesEditor |
X |
X |
X |
| roles/dlp.storedInfoTypesReader |
X |
X |
X |
| roles/dlp.user |
X |
X |
X |
| roles/dns.admin |
X |
X |
X |
| roles/dns.peer |
X |
X |
X |
| roles/dns.reader |
X |
X |
X |
| roles/documentaicore.serviceAgent |
X |
X |
X |
| roles/domains.admin |
X |
X |
X |
| roles/domains.viewer |
X |
X |
X |
| roles/editor |
X |
X |
X |
| roles/endpoints.portalAdmin |
X |
X |
X |
| roles/endpoints.serviceAgent |
X |
X |
X |
| roles/endpointsportal.serviceAgent |
X |
X |
X |
| roles/errorreporting.admin |
X |
X |
X |
| roles/errorreporting.user |
X |
X |
X |
| roles/errorreporting.viewer |
X |
X |
X |
| roles/errorreporting.writer |
X |
X |
X |
| roles/file.editor |
X |
X |
X |
| roles/file.serviceAgent |
X |
X |
X |
| roles/file.viewer |
X |
X |
X |
| roles/firebase.admin |
X |
X |
X |
| roles/firebase.analyticsAdmin |
X |
X |
X |
| roles/firebase.analyticsViewer |
X |
X |
X |
| roles/firebase.appDistributionSdkServiceAgent |
X |
X |
X |
| roles/firebase.developAdmin |
X |
X |
X |
| roles/firebase.developViewer |
X |
X |
X |
| roles/firebase.growthAdmin |
X |
X |
X |
| roles/firebase.growthViewer |
X |
X |
X |
| roles/firebase.managementServiceAgent |
X |
X |
X |
| roles/firebase.qualityAdmin |
X |
X |
X |
| roles/firebase.qualityViewer |
X |
X |
X |
| roles/firebase.sdkAdminServiceAgent |
X |
X |
X |
| roles/firebase.sdkProvisioningServiceAgent |
X |
X |
X |
| roles/firebase.viewer |
X |
X |
X |
| roles/firebaseabt.admin |
X |
X |
X |
| roles/firebaseabt.viewer |
X |
X |
X |
| roles/firebaseappdistro.admin |
X |
X |
X |
| roles/firebaseappdistro.viewer |
X |
X |
X |
| roles/firebaseauth.admin |
X |
X |
X |
| roles/firebaseauth.viewer |
X |
X |
X |
| roles/firebasecrash.symbolMappingsAdmin |
X |
X |
X |
| roles/firebasecrashlytics.admin |
X |
X |
X |
| roles/firebasecrashlytics.viewer |
X |
X |
X |
| roles/firebasedatabase.admin |
X |
X |
X |
| roles/firebasedatabase.viewer |
X |
X |
X |
| roles/firebasedynamiclinks.admin |
X |
X |
X |
| roles/firebasedynamiclinks.viewer |
X |
X |
X |
| roles/firebasehosting.admin |
X |
X |
X |
| roles/firebasehosting.viewer |
X |
X |
X |
| roles/firebaseinappmessaging.admin |
X |
X |
X |
| roles/firebaseinappmessaging.viewer |
X |
X |
X |
| roles/firebaseml.admin |
X |
X |
X |
| roles/firebaseml.viewer |
X |
X |
X |
| roles/firebasemods.serviceAgent |
X |
X |
X |
| roles/firebasenotifications.admin |
X |
X |
X |
| roles/firebasenotifications.viewer |
X |
X |
X |
| roles/firebaseperformance.admin |
X |
X |
X |
| roles/firebaseperformance.viewer |
X |
X |
X |
| roles/firebasepredictions.admin |
X |
X |
X |
| roles/firebasepredictions.viewer |
X |
X |
X |
| roles/firebaserules.admin |
X |
X |
X |
| roles/firebaserules.viewer |
X |
X |
X |
| roles/firebasestorage.serviceAgent |
X |
X |
X |
| roles/firewallinsights.serviceAgent |
X |
X |
X |
| roles/gameservices.admin |
X |
X |
X |
| roles/gameservices.serviceAgent |
X |
X |
X |
| roles/gameservices.viewer |
X |
X |
X |
| roles/genomics.admin |
X |
X |
X |
| roles/genomics.editor |
X |
X |
X |
| roles/genomics.pipelinesRunner |
X |
X |
X |
| roles/genomics.serviceAgent |
X |
X |
X |
| roles/genomics.viewer |
X |
X |
X |
| roles/gkehub.admin |
X |
X |
X |
| roles/gkehub.connect |
X |
X |
X |
| roles/gkehub.gatewayAdmin |
X |
X |
X |
| roles/gkehub.serviceAgent |
X |
X |
X |
| roles/gkehub.viewer |
X |
X |
X |
| roles/healthcare.annotationEditor |
X |
X |
X |
| roles/healthcare.annotationReader |
X |
X |
X |
| roles/healthcare.annotationStoreAdmin |
X |
X |
X |
| roles/healthcare.annotationStoreViewer |
X |
X |
X |
| roles/healthcare.datasetAdmin |
X |
X |
X |
| roles/healthcare.datasetViewer |
X |
X |
X |
| roles/healthcare.dicomEditor |
X |
X |
X |
| roles/healthcare.dicomStoreAdmin |
X |
X |
X |
| roles/healthcare.dicomStoreViewer |
X |
X |
X |
| roles/healthcare.dicomViewer |
X |
X |
X |
| roles/healthcare.fhirResourceEditor |
X |
X |
X |
| roles/healthcare.fhirResourceReader |
X |
X |
X |
| roles/healthcare.fhirStoreAdmin |
X |
X |
X |
| roles/healthcare.fhirStoreViewer |
X |
X |
X |
| roles/healthcare.hl7V2Consumer |
X |
X |
X |
| roles/healthcare.hl7V2Editor |
X |
X |
X |
| roles/healthcare.hl7V2Ingest |
X |
X |
X |
| roles/healthcare.hl7V2StoreAdmin |
X |
X |
X |
| roles/healthcare.hl7V2StoreViewer |
X |
X |
X |
| roles/healthcare.serviceAgent |
X |
X |
X |
| roles/iam.organizationRoleAdmin |
X |
|
|
| roles/iam.organizationRoleViewer |
X |
|
|
| roles/iam.roleAdmin |
|
X |
|
| roles/iam.roleViewer |
|
X |
|
| roles/iam.securityAdmin |
X |
X |
X |
| roles/iam.securityReviewer |
X |
X |
X |
| roles/iam.serviceAccountAdmin |
X |
X |
X |
| roles/iam.serviceAccountCreator |
X |
X |
X |
| roles/iam.serviceAccountDeleter |
X |
X |
X |
| roles/iam.serviceAccountKeyAdmin |
X |
X |
X |
| roles/iam.serviceAccountTokenCreator |
X |
X |
X |
| roles/iam.serviceAccountUser |
X |
X |
X |
| roles/iam.workloadIdentityPoolAdmin |
X |
X |
X |
| roles/iam.workloadIdentityPoolViewer |
X |
X |
X |
| roles/iam.workloadIdentityUser |
X |
X |
X |
| roles/iap.admin |
X |
X |
X |
| roles/iap.httpsResourceAccessor |
X |
X |
X |
| roles/iap.settingsAdmin |
X |
X |
X |
| roles/iap.tunnelResourceAccessor |
X |
X |
X |
| roles/identityplatform.admin |
X |
X |
X |
| roles/identityplatform.viewer |
X |
X |
X |
| roles/identitytoolkit.admin |
X |
X |
X |
| roles/identitytoolkit.viewer |
X |
X |
X |
| roles/lifesciences.admin |
X |
X |
X |
| roles/lifesciences.editor |
X |
X |
X |
| roles/lifesciences.serviceAgent |
X |
X |
X |
| roles/lifesciences.viewer |
X |
X |
X |
| roles/lifesciences.workflowsRunner |
X |
X |
X |
| roles/logging.admin |
X |
X |
X |
| roles/logging.bucketWriter |
X |
X |
X |
| roles/logging.configWriter |
X |
X |
X |
| roles/logging.logWriter |
X |
X |
X |
| roles/logging.privateLogViewer |
X |
X |
X |
| roles/logging.viewAccessor |
X |
X |
X |
| roles/logging.viewer |
X |
X |
X |
| roles/managedidentities.admin |
X |
X |
X |
| roles/managedidentities.domainAdmin |
X |
X |
X |
| roles/managedidentities.serviceAgent |
X |
X |
X |
| roles/managedidentities.viewer |
X |
X |
X |
| roles/memcache.admin |
X |
X |
X |
| roles/memcache.editor |
X |
X |
X |
| roles/memcache.serviceAgent |
X |
X |
X |
| roles/memcache.viewer |
X |
X |
X |
| roles/meshconfig.serviceAgent |
X |
X |
X |
| roles/meshdataplane.serviceAgent |
X |
X |
X |
| roles/ml.admin |
X |
X |
X |
| roles/ml.developer |
X |
X |
X |
| roles/ml.jobOwner |
|
|
|
| roles/ml.modelOwner |
|
|
|
| roles/ml.modelUser |
|
|
|
| roles/ml.operationOwner |
|
|
|
| roles/ml.serviceAgent |
X |
X |
X |
| roles/ml.viewer |
X |
X |
X |
| roles/monitoring.admin |
X |
X |
X |
| roles/monitoring.alertPolicyEditor |
X |
X |
X |
| roles/monitoring.alertPolicyViewer |
X |
X |
X |
| roles/monitoring.dashboardEditor |
X |
X |
X |
| roles/monitoring.dashboardViewer |
X |
X |
X |
| roles/monitoring.editor |
X |
X |
X |
| roles/monitoring.metricWriter |
X |
X |
X |
| roles/monitoring.notificationChannelEditor |
X |
X |
X |
| roles/monitoring.notificationChannelViewer |
X |
X |
X |
| roles/monitoring.notificationServiceAgent |
X |
X |
X |
| roles/monitoring.servicesEditor |
X |
X |
X |
| roles/monitoring.servicesViewer |
X |
X |
X |
| roles/monitoring.uptimeCheckConfigEditor |
X |
X |
X |
| roles/monitoring.uptimeCheckConfigViewer |
X |
X |
X |
| roles/monitoring.viewer |
X |
X |
X |
| roles/multiclusteringress.serviceAgent |
X |
X |
X |
| roles/multiclustermetering.serviceAgent |
X |
X |
X |
| roles/netappcloudvolumes.admin |
X |
X |
X |
| roles/netappcloudvolumes.viewer |
X |
X |
X |
| roles/networkmanagement.admin |
X |
X |
X |
| roles/networkmanagement.serviceAgent |
X |
X |
X |
| roles/networkmanagement.viewer |
X |
X |
X |
| roles/notebooks.admin |
X |
X |
X |
| roles/notebooks.legacyAdmin |
X |
X |
X |
| roles/notebooks.legacyViewer |
X |
X |
X |
| roles/notebooks.runner |
X |
X |
X |
| roles/notebooks.serviceAgent |
X |
X |
X |
| roles/notebooks.viewer |
X |
X |
X |
| roles/oauthconfig.editor |
X |
X |
X |
| roles/oauthconfig.viewer |
X |
X |
X |
| roles/opsconfigmonitoring.resourceMetadata.writer |
X |
X |
X |
| roles/orgpolicy.policyAdmin |
X |
|
|
| roles/orgpolicy.policyViewer |
X |
X |
X |
| roles/osconfig.assignmentAdmin |
X |
X |
X |
| roles/osconfig.assignmentEditor |
X |
X |
X |
| roles/osconfig.assignmentViewer |
X |
X |
X |
| roles/osconfig.guestPolicyAdmin |
X |
X |
X |
| roles/osconfig.guestPolicyEditor |
X |
X |
X |
| roles/osconfig.guestPolicyViewer |
X |
X |
X |
| roles/osconfig.osConfigAdmin |
X |
X |
X |
| roles/osconfig.osConfigEditor |
X |
X |
X |
| roles/osconfig.osConfigViewer |
X |
X |
X |
| roles/osconfig.patchDeploymentAdmin |
X |
X |
X |
| roles/osconfig.patchDeploymentViewer |
X |
X |
X |
| roles/osconfig.patchJobExecutor |
X |
X |
X |
| roles/osconfig.patchJobViewer |
X |
X |
X |
| roles/osconfig.serviceAgent |
X |
X |
X |
| roles/owner |
X |
X |
X |
| roles/privateca.admin |
X |
X |
X |
| roles/privateca.auditor |
X |
X |
X |
| roles/privateca.caManager |
X |
X |
X |
| roles/privateca.certificateManager |
X |
X |
X |
| roles/privateca.certificateRequester |
X |
X |
X |
| roles/proximitybeacon.attachmentEditor |
X |
X |
X |
| roles/proximitybeacon.attachmentPublisher |
X |
X |
X |
| roles/proximitybeacon.attachmentViewer |
X |
X |
X |
| roles/proximitybeacon.beaconEditor |
X |
X |
X |
| roles/pubsub.admin |
X |
X |
X |
| roles/pubsub.editor |
X |
X |
X |
| roles/pubsub.publisher |
X |
X |
X |
| roles/pubsub.serviceAgent |
X |
X |
X |
| roles/pubsub.subscriber |
X |
X |
X |
| roles/pubsub.viewer |
X |
X |
X |
| roles/pubsublite.admin |
X |
X |
X |
| roles/pubsublite.editor |
X |
X |
X |
| roles/pubsublite.publisher |
X |
X |
X |
| roles/pubsublite.subscriber |
X |
X |
X |
| roles/pubsublite.viewer |
X |
X |
X |
| roles/recaptchaenterprise.admin |
X |
X |
X |
| roles/recaptchaenterprise.agent |
X |
X |
X |
| roles/recaptchaenterprise.viewer |
X |
X |
X |
| roles/recommender.billingAccountCudAdmin |
X |
X |
X |
| roles/recommender.billingAccountCudViewer |
X |
X |
X |
| roles/recommender.computeAdmin |
X |
X |
X |
| roles/recommender.computeViewer |
X |
X |
X |
| roles/recommender.firewallAdmin |
X |
X |
X |
| roles/recommender.firewallViewer |
X |
X |
X |
| roles/recommender.iamAdmin |
X |
X |
X |
| roles/recommender.iamViewer |
X |
X |
X |
| roles/recommender.projectCudAdmin |
X |
X |
X |
| roles/recommender.projectCudViewer |
X |
X |
X |
| roles/redis.admin |
X |
X |
X |
| roles/redis.editor |
X |
X |
X |
| roles/redis.serviceAgent |
X |
X |
X |
| roles/redis.viewer |
X |
X |
X |
| roles/redisenterprisecloud.admin |
X |
X |
X |
| roles/redisenterprisecloud.viewer |
X |
X |
X |
| roles/remotebuildexecution.actionCacheWriter |
X |
X |
X |
| roles/remotebuildexecution.artifactAdmin |
X |
X |
X |
| roles/remotebuildexecution.artifactCreator |
X |
X |
X |
| roles/remotebuildexecution.artifactViewer |
X |
X |
X |
| roles/remotebuildexecution.configurationAdmin |
X |
X |
X |
| roles/remotebuildexecution.configurationViewer |
X |
X |
X |
| roles/remotebuildexecution.logstreamWriter |
X |
X |
X |
| roles/remotebuildexecution.reservationAdmin |
X |
X |
X |
| roles/remotebuildexecution.serviceAgent |
X |
X |
X |
| roles/remotebuildexecution.worker |
X |
X |
X |
| roles/resourcemanager.folderAdmin |
X |
|
X |
| roles/resourcemanager.folderCreator |
X |
|
X |
| roles/resourcemanager.folderEditor |
X |
|
X |
| roles/resourcemanager.folderIamAdmin |
X |
|
X |
| roles/resourcemanager.folderMover |
X |
|
X |
| roles/resourcemanager.folderViewer |
X |
|
X |
| roles/resourcemanager.lienModifier |
X |
X |
X |
| roles/resourcemanager.organizationAdmin |
X |
X |
X |
| roles/resourcemanager.organizationCreator |
|
|
|
| roles/resourcemanager.organizationViewer |
X |
X |
X |
| roles/resourcemanager.projectCreator |
X |
|
X |
| roles/resourcemanager.projectDeleter |
X |
X |
X |
| roles/resourcemanager.projectIamAdmin |
X |
X |
X |
| roles/resourcemanager.projectMover |
X |
X |
X |
| roles/run.admin |
X |
X |
X |
| roles/run.invoker |
X |
X |
X |
| roles/run.serviceAgent |
X |
X |
X |
| roles/run.viewer |
X |
X |
X |
| roles/runtimeconfig.admin |
X |
X |
X |
| roles/secretmanager.admin |
X |
X |
X |
| roles/secretmanager.secretAccessor |
X |
X |
X |
| roles/secretmanager.secretVersionAdder |
X |
X |
X |
| roles/secretmanager.secretVersionManager |
X |
X |
X |
| roles/secretmanager.viewer |
X |
X |
X |
| roles/securitycenter.admin |
X |
X |
X |
| roles/securitycenter.adminEditor |
X |
X |
X |
| roles/securitycenter.adminViewer |
X |
X |
X |
| roles/securitycenter.assetSecurityMarksWriter |
X |
|
|
| roles/securitycenter.assetsDiscoveryRunner |
X |
|
|
| roles/securitycenter.assetsViewer |
X |
|
|
| roles/securitycenter.automationServiceAgent |
X |
X |
X |
| roles/securitycenter.controlServiceAgent |
X |
X |
X |
| roles/securitycenter.findingSecurityMarksWriter |
X |
|
|
| roles/securitycenter.findingsEditor |
X |
|
|
| roles/securitycenter.findingsStateSetter |
X |
|
|
| roles/securitycenter.findingsViewer |
X |
|
|
| roles/securitycenter.findingsWorkflowStateSetter |
X |
|
|
| roles/securitycenter.notificationConfigEditor |
X |
|
|
| roles/securitycenter.notificationConfigViewer |
X |
|
|
| roles/securitycenter.notificationServiceAgent |
X |
X |
X |
| roles/securitycenter.securityHealthAnalyticsServiceAgent |
X |
X |
X |
| roles/securitycenter.serviceAgent |
X |
X |
X |
| roles/securitycenter.settingsAdmin |
X |
X |
X |
| roles/securitycenter.settingsEditor |
X |
X |
X |
| roles/securitycenter.settingsViewer |
X |
X |
X |
| roles/securitycenter.sourcesAdmin |
X |
|
|
| roles/securitycenter.sourcesEditor |
X |
|
|
| roles/securitycenter.sourcesViewer |
X |
|
|
| roles/serverless.serviceAgent |
X |
X |
X |
| roles/servicebroker.admin |
X |
X |
X |
| roles/servicebroker.operator |
X |
X |
X |
| roles/serviceconsumermanagement.tenancyUnitsAdmin |
X |
X |
X |
| roles/serviceconsumermanagement.tenancyUnitsViewer |
X |
X |
X |
| roles/servicedirectory.admin |
X |
X |
X |
| roles/servicedirectory.editor |
X |
X |
X |
| roles/servicedirectory.viewer |
X |
X |
X |
| roles/servicemanagement.admin |
X |
X |
X |
| roles/servicemanagement.configEditor |
X |
X |
X |
| roles/servicemanagement.quotaAdmin |
X |
X |
X |
| roles/servicemanagement.quotaViewer |
X |
X |
X |
| roles/servicemanagement.serviceConsumer |
|
|
|
| roles/servicemanagement.serviceController |
X |
X |
X |
| roles/servicenetworking.networksAdmin |
X |
X |
X |
| roles/servicenetworking.serviceAgent |
X |
X |
X |
| roles/serviceusage.apiKeysAdmin |
X |
X |
X |
| roles/serviceusage.apiKeysViewer |
X |
X |
X |
| roles/serviceusage.serviceUsageAdmin |
X |
X |
X |
| roles/serviceusage.serviceUsageConsumer |
X |
X |
X |
| roles/serviceusage.serviceUsageViewer |
X |
X |
X |
| roles/source.admin |
X |
X |
X |
| roles/source.reader |
X |
X |
X |
| roles/source.writer |
X |
X |
X |
| roles/sourcerepo.serviceAgent |
X |
X |
X |
| roles/spanner.admin |
X |
X |
X |
| roles/spanner.backupAdmin |
X |
X |
X |
| roles/spanner.backupWriter |
X |
X |
X |
| roles/spanner.databaseAdmin |
X |
X |
X |
| roles/spanner.databaseReader |
X |
X |
X |
| roles/spanner.databaseUser |
X |
X |
X |
| roles/spanner.restoreAdmin |
X |
X |
X |
| roles/spanner.viewer |
X |
X |
X |
| roles/stackdriver.accounts.editor |
X |
X |
X |
| roles/stackdriver.accounts.viewer |
X |
X |
X |
| roles/stackdriver.resourceMaintenanceWindow.editor |
X |
X |
X |
| roles/stackdriver.resourceMaintenanceWindow.viewer |
X |
X |
X |
| roles/stackdriver.resourceMetadata.writer |
X |
X |
X |
| roles/storage.admin |
X |
X |
X |
| roles/storage.hmacKeyAdmin |
X |
X |
X |
| roles/storage.legacyBucketOwner |
|
|
|
| roles/storage.legacyBucketReader |
|
|
|
| roles/storage.legacyBucketWriter |
|
|
|
| roles/storage.legacyObjectOwner |
|
|
|
| roles/storage.legacyObjectReader |
|
|
|
| roles/storage.objectAdmin |
X |
X |
X |
| roles/storage.objectCreator |
X |
X |
X |
| roles/storage.objectViewer |
X |
X |
X |
| roles/storagetransfer.admin |
X |
X |
X |
| roles/storagetransfer.user |
X |
X |
X |
| roles/storagetransfer.viewer |
X |
X |
X |
| roles/subscribewithgoogledeveloper.developer |
X |
X |
X |
| roles/threatdetection.editor |
X |
X |
X |
| roles/threatdetection.viewer |
X |
X |
X |
| roles/tpu.admin |
X |
X |
X |
| roles/tpu.serviceAgent |
X |
X |
X |
| roles/tpu.viewer |
X |
X |
X |
| roles/transcoder.admin |
X |
X |
X |
| roles/transcoder.viewer |
X |
X |
X |
| roles/viewer |
X |
X |
X |
| roles/vmmigration.admin |
X |
X |
X |
| roles/vmmigration.viewer |
X |
X |
X |
| roles/vmwareengine.vmwareengineAdmin |
X |
X |
X |
| roles/vmwareengine.vmwareengineViewer |
X |
X |
X |
| roles/vpcaccess.admin |
X |
X |
X |
| roles/vpcaccess.serviceAgent |
X |
X |
X |
| roles/vpcaccess.user |
X |
X |
X |
| roles/vpcaccess.viewer |
X |
X |
X |
| roles/websecurityscanner.serviceAgent |
X |
X |
X |
| roles/workflows.admin |
X |
X |
X |
| roles/workflows.editor |
X |
X |
X |
| roles/workflows.invoker |
X |
X |
X |
| roles/workflows.serviceAgent |
X |
X |
X |
| roles/workflows.viewer |
X |
X |
X |