| accessapproval | 3 | approver, configEditor, viewer |
| accesscontextmanager | 6 | gcpAccessAdmin, gcpAccessReader, policyAdmin, policyEditor, policyReader, vpcScTroubleshooterViewer |
| actions | 2 | Admin, Viewer |
| aiplatform | 5 | admin, featurestoreAdmin, migrator, user, viewer |
| androidmanagement | 1 | user |
| anthos | 1 | serviceAgent |
| anthosconfigmanagement | 1 | serviceAgent |
| anthosidentityservice | 1 | serviceAgent |
| apigateway | 2 | admin, viewer |
| apigee | 15 | admin, analyticsAgent, analyticsEditor, analyticsViewer, apiAdmin, apiCreator, apiReader, deployer, developerAdmin, environmentAdmin, portalAdmin, readOnlyAdmin, runtimeAgent, serviceAgent, synchronizerManager |
| apigeeconnect | 2 | Admin, Agent |
| appengine | 6 | appAdmin, appCreator, appViewer, codeViewer, deployer, serviceAdmin |
| appengineflex | 1 | serviceAgent |
| artifactregistry | 5 | admin, reader, repoAdmin, serviceAgent, writer |
| assuredworkloads | 3 | admin, editor, reader |
| automl | 5 | admin, editor, predictor, serviceAgent, viewer |
| automlrecommendations | 5 | admin, adminViewer, editor, serviceAgent, viewer |
| axt | 1 | admin |
| bigquery | 13 | admin, connectionAdmin, connectionUser, dataEditor, dataOwner, dataViewer, jobUser, metadataViewer, readSessionUser, resourceAdmin, resourceEditor, resourceViewer, user |
| bigqueryconnection | 1 | serviceAgent |
| bigquerydatatransfer | 1 | serviceAgent |
| bigtable | 4 | admin, reader, user, viewer |
| billing | 5 | admin, creator, projectManager, user, viewer |
| binaryauthorization | 8 | attestorsAdmin, attestorsEditor, attestorsVerifier, attestorsViewer, policyAdmin, policyEditor, policyViewer, serviceAgent |
| chat | 2 | owner, reader |
| cloudasset | 3 | owner, serviceAgent, viewer |
| cloudbuild | 4 | builds.builder, builds.editor, builds.viewer, serviceAgent |
| cloudconfig | 2 | admin, viewer |
| clouddebugger | 2 | agent, user |
| cloudfunctions | 5 | admin, developer, invoker, serviceAgent, viewer |
| cloudiot | 6 | admin, deviceController, editor, provisioner, serviceAgent, viewer |
| cloudjobdiscovery | 5 | admin, jobsEditor, jobsViewer, profilesEditor, profilesViewer |
| cloudkms | 9 | admin, cryptoKeyDecrypter, cryptoKeyEncrypter, cryptoKeyEncrypterDecrypter, importer, publicKeyViewer, serviceAgent, signer, signerVerifier |
| cloudmigration | 3 | inframanager, storageaccess, velostrataconnect |
| cloudprivatecatalog | 1 | consumer |
| cloudprivatecatalogproducer | 3 | admin, manager, orgAdmin |
| cloudprofiler | 2 | agent, user |
| cloudscheduler | 4 | admin, jobRunner, serviceAgent, viewer |
| cloudsecurityscanner | 3 | editor, runner, viewer |
| cloudsql | 6 | admin, client, editor, instanceUser, serviceAgent, viewer |
| cloudsupport | 4 | admin, techSupportEditor, techSupportViewer, viewer |
| cloudtasks | 7 | admin, enqueuer, queueAdmin, serviceAgent, taskDeleter, taskRunner, viewer |
| cloudtestservice | 2 | testAdmin, testViewer |
| cloudtpu | 1 | serviceAgent |
| cloudtrace | 3 | admin, agent, user |
| cloudtranslate | 5 | admin, editor, serviceAgent, user, viewer |
| codelabapikeys | 3 | admin, editor, viewer |
| composer | 7 | admin, environmentAndStorageObjectAdmin, environmentAndStorageObjectViewer, serviceAgent, sharedVpcAgent, user, worker |
| compute | 24 | admin, imageUser, instanceAdmin, instanceAdmin.v1, loadBalancerAdmin, networkAdmin, networkUser, networkViewer, orgFirewallPolicyAdmin, orgFirewallPolicyUser, orgSecurityPolicyAdmin, orgSecurityPolicyUser, orgSecurityResourceAdmin, osAdminLogin, osLogin, osLoginExternalUser, packetMirroringAdmin, packetMirroringUser, publicIpAdmin, securityAdmin, serviceAgent, storageAdmin, viewer, xpnAdmin |
| computescanning | 1 | serviceAgent |
| consumerprocurement | 4 | entitlementManager, entitlementViewer, orderAdmin, orderViewer |
| container | 7 | admin, clusterAdmin, clusterViewer, developer, hostServiceAgentUser, serviceAgent, viewer |
| containeranalysis | 8 | ServiceAgent, admin, notes.attacher, notes.editor, notes.occurrences.viewer, notes.viewer, occurrences.editor, occurrences.viewer |
| containerregistry | 1 | ServiceAgent |
| containerscanning | 1 | ServiceAgent |
| containerthreatdetection | 1 | serviceAgent |
| datacatalog | 13 | admin, categoryAdmin, categoryFineGrainedReader, entryGroupCreator, entryGroupOwner, entryOwner, entryViewer, tagEditor, tagTemplateCreator, tagTemplateOwner, tagTemplateUser, tagTemplateViewer, viewer |
| dataflow | 5 | admin, developer, serviceAgent, viewer, worker |
| datafusion | 4 | admin, runner, serviceAgent, viewer |
| datalabeling | 4 | admin, editor, serviceAgent, viewer |
| datamigration | 1 | admin |
| dataprep | 2 | projects.user, serviceAgent |
| dataproc | 6 | admin, editor, hubAgent, serviceAgent, viewer, worker |
| dataprocessing | 1 | admin |
| datastore | 5 | importExportAdmin, indexAdmin, owner, user, viewer |
| datastudio | 1 | serviceAgent |
| dellemccloudonefs | 3 | admin, user, viewer |
| deploymentmanager | 4 | editor, typeEditor, typeViewer, viewer |
| dialogflow | 7 | admin, client, consoleAgentEditor, conversationManager, integrationManager, reader, serviceAgent |
| dlp | 17 | admin, analyzeRiskTemplatesEditor, analyzeRiskTemplatesReader, deidentifyTemplatesEditor, deidentifyTemplatesReader, inspectFindingsReader, inspectTemplatesEditor, inspectTemplatesReader, jobTriggersEditor, jobTriggersReader, jobsEditor, jobsReader, reader, serviceAgent, storedInfoTypesEditor, storedInfoTypesReader, user |
| dns | 3 | admin, peer, reader |
| documentai | 4 | admin, apiUser, editor, viewer |
| documentaicore | 1 | serviceAgent |
| domains | 2 | admin, viewer |
| earlyaccesscenter | 2 | admin, viewer |
| endpoints | 2 | portalAdmin, serviceAgent |
| endpointsportal | 1 | serviceAgent |
| errorreporting | 4 | admin, user, viewer, writer |
| essentialcontacts | 2 | admin, viewer |
| eventarc | 3 | admin, serviceAgent, viewer |
| file | 3 | editor, serviceAgent, viewer |
| firebase | 14 | admin, analyticsAdmin, analyticsViewer, appDistributionSdkServiceAgent, developAdmin, developViewer, growthAdmin, growthViewer, managementServiceAgent, qualityAdmin, qualityViewer, sdkAdminServiceAgent, sdkProvisioningServiceAgent, viewer |
| firebaseabt | 2 | admin, viewer |
| firebaseappdistro | 2 | admin, viewer |
| firebaseauth | 2 | admin, viewer |
| firebasecrash | 1 | symbolMappingsAdmin |
| firebasecrashlytics | 2 | admin, viewer |
| firebasedatabase | 2 | admin, viewer |
| firebasedynamiclinks | 2 | admin, viewer |
| firebasehosting | 2 | admin, viewer |
| firebaseinappmessaging | 2 | admin, viewer |
| firebaseml | 2 | admin, viewer |
| firebasemods | 1 | serviceAgent |
| firebasenotifications | 2 | admin, viewer |
| firebaseperformance | 2 | admin, viewer |
| firebasepredictions | 2 | admin, viewer |
| firebaserules | 2 | admin, viewer |
| firebasestorage | 1 | serviceAgent |
| firewallinsights | 1 | serviceAgent |
| gameservices | 3 | admin, serviceAgent, viewer |
| genomics | 5 | admin, editor, pipelinesRunner, serviceAgent, viewer |
| gkehub | 5 | admin, connect, gatewayAdmin, serviceAgent, viewer |
| healthcare | 32 | annotationEditor, annotationReader, annotationStoreAdmin, annotationStoreViewer, attributeDefinitionEditor, attributeDefinitionReader, consentArtifactAdmin, consentArtifactEditor, consentArtifactReader, consentEditor, consentReader, consentStoreAdmin, consentStoreViewer, datasetAdmin, datasetViewer, dicomEditor, dicomStoreAdmin, dicomStoreViewer, dicomViewer, fhirResourceEditor, fhirResourceReader, fhirStoreAdmin, fhirStoreViewer, hl7V2Consumer, hl7V2Editor, hl7V2Ingest, hl7V2StoreAdmin, hl7V2StoreViewer, nlpServiceViewer, serviceAgent, userDataMappingEditor, userDataMappingReader |
| iam | 15 | organizationRoleAdmin, organizationRoleViewer, roleAdmin, roleViewer, securityAdmin, securityReviewer, serviceAccountAdmin, serviceAccountCreator, serviceAccountDeleter, serviceAccountKeyAdmin, serviceAccountTokenCreator, serviceAccountUser, workloadIdentityPoolAdmin, workloadIdentityPoolViewer, workloadIdentityUser |
| iap | 4 | admin, httpsResourceAccessor, settingsAdmin, tunnelResourceAccessor |
| identityplatform | 2 | admin, viewer |
| identitytoolkit | 2 | admin, viewer |
| lifesciences | 5 | admin, editor, serviceAgent, viewer, workflowsRunner |
| logging | 7 | admin, bucketWriter, configWriter, logWriter, privateLogViewer, viewAccessor, viewer |
| managedidentities | 4 | admin, domainAdmin, serviceAgent, viewer |
| memcache | 4 | admin, editor, serviceAgent, viewer |
| meshconfig | 1 | serviceAgent |
| meshdataplane | 1 | serviceAgent |
| metastore | 4 | admin, editor, metadataOperator, user |
| ml | 8 | admin, developer, jobOwner, modelOwner, modelUser, operationOwner, serviceAgent, viewer |
| monitoring | 15 | admin, alertPolicyEditor, alertPolicyViewer, dashboardEditor, dashboardViewer, editor, metricWriter, notificationChannelEditor, notificationChannelViewer, notificationServiceAgent, servicesEditor, servicesViewer, uptimeCheckConfigEditor, uptimeCheckConfigViewer, viewer |
| multiclusteringress | 1 | serviceAgent |
| multiclustermetering | 1 | serviceAgent |
| netappcloudvolumes | 2 | admin, viewer |
| networkmanagement | 3 | admin, serviceAgent, viewer |
| notebooks | 6 | admin, legacyAdmin, legacyViewer, runner, serviceAgent, viewer |
| oauthconfig | 2 | editor, viewer |
| opsconfigmonitoring | 1 | resourceMetadata.writer |
| orgpolicy | 2 | policyAdmin, policyViewer |
| osconfig | 8 | guestPolicyAdmin, guestPolicyEditor, guestPolicyViewer, patchDeploymentAdmin, patchDeploymentViewer, patchJobExecutor, patchJobViewer, serviceAgent |
| privateca | 5 | admin, auditor, caManager, certificateManager, certificateRequester |
| project | 4 | owner, editor, viewer, browser |
| proximitybeacon | 4 | attachmentEditor, attachmentPublisher, attachmentViewer, beaconEditor |
| pubsub | 6 | admin, editor, publisher, serviceAgent, subscriber, viewer |
| pubsublite | 5 | admin, editor, publisher, subscriber, viewer |
| recaptchaenterprise | 3 | admin, agent, viewer |
| recommender | 10 | billingAccountCudAdmin, billingAccountCudViewer, computeAdmin, computeViewer, firewallAdmin, firewallViewer, iamAdmin, iamViewer, projectCudAdmin, projectCudViewer |
| redis | 4 | admin, editor, serviceAgent, viewer |
| redisenterprisecloud | 2 | admin, viewer |
| remotebuildexecution | 10 | actionCacheWriter, artifactAdmin, artifactCreator, artifactViewer, configurationAdmin, configurationViewer, logstreamWriter, reservationAdmin, serviceAgent, worker |
| resourcemanager | 13 | folderAdmin, folderCreator, folderEditor, folderIamAdmin, folderMover, folderViewer, lienModifier, organizationAdmin, organizationViewer, projectCreator, projectDeleter, projectIamAdmin, projectMover |
| retail | 4 | admin, editor, serviceAgent, viewer |
| run | 4 | admin, invoker, serviceAgent, viewer |
| runtimeconfig | 1 | admin |
| secretmanager | 5 | admin, secretAccessor, secretVersionAdder, secretVersionManager, viewer |
| securitycenter | 24 | admin, adminEditor, adminViewer, assetSecurityMarksWriter, assetsDiscoveryRunner, assetsViewer, automationServiceAgent, controlServiceAgent, findingSecurityMarksWriter, findingsEditor, findingsStateSetter, findingsViewer, findingsWorkflowStateSetter, notificationConfigEditor, notificationConfigViewer, notificationServiceAgent, securityHealthAnalyticsServiceAgent, serviceAgent, settingsAdmin, settingsEditor, settingsViewer, sourcesAdmin, sourcesEditor, sourcesViewer |
| serverless | 1 | serviceAgent |
| servicebroker | 2 | admin, operator |
| serviceconsumermanagement | 2 | tenancyUnitsAdmin, tenancyUnitsViewer |
| servicedirectory | 3 | admin, editor, viewer |
| servicemanagement | 7 | admin, configEditor, quotaAdmin, quotaViewer, reporter, serviceConsumer, serviceController |
| servicenetworking | 2 | networksAdmin, serviceAgent |
| serviceusage | 5 | apiKeysAdmin, apiKeysViewer, serviceUsageAdmin, serviceUsageConsumer, serviceUsageViewer |
| source | 3 | admin, reader, writer |
| sourcerepo | 1 | serviceAgent |
| spanner | 8 | admin, backupAdmin, backupWriter, databaseAdmin, databaseReader, databaseUser, restoreAdmin, viewer |
| stackdriver | 3 | accounts.editor, accounts.viewer, resourceMetadata.writer |
| storage | 10 | admin, hmacKeyAdmin, legacyBucketOwner, legacyBucketReader, legacyBucketWriter, legacyObjectOwner, legacyObjectReader, objectAdmin, objectCreator, objectViewer |
| storagetransfer | 3 | admin, user, viewer |
| subscribewithgoogledeveloper | 1 | developer |
| threatdetection | 2 | editor, viewer |
| tpu | 3 | admin, serviceAgent, viewer |
| trafficdirector | 1 | client |
| transcoder | 2 | admin, viewer |
| vmmigration | 2 | admin, viewer |
| vmwareengine | 2 | vmwareengineAdmin, vmwareengineViewer |
| vpcaccess | 4 | admin, serviceAgent, user, viewer |
| websecurityscanner | 1 | serviceAgent |
| workflows | 5 | admin, editor, invoker, serviceAgent, viewer |