| accessapproval | 4 | approver, configEditor, invalidator, viewer |
| accesscontextmanager | 6 | gcpAccessAdmin, gcpAccessReader, policyAdmin, policyEditor, policyReader, vpcScTroubleshooterViewer |
| actions | 2 | Admin, Viewer |
| advisorynotifications | 2 | admin, viewer |
| aiplatform | 29 | admin, batchPredictionServiceAgent, colabEnterpriseAdmin, colabEnterpriseUser, colabServiceAgent, customCodeServiceAgent, entityTypeOwner, extensionCustomCodeServiceAgent, extensionServiceAgent, featurestoreAdmin, featurestoreDataViewer, featurestoreDataWriter, featurestoreInstanceCreator, featurestoreResourceViewer, featurestoreUser, migrator, modelMonitoringServiceAgent, notebookExecutorUser, notebookRuntimeAdmin, notebookRuntimeUser, notebookServiceAgent, ragServiceAgent, rapidevalServiceAgent, reasoningEngineServiceAgent, serviceAgent, tensorboardWebAppUser, tuningServiceAgent, user, viewer |
| alloydb | 5 | admin, client, databaseUser, serviceAgent, viewer |
| analyticshub | 6 | admin, listingAdmin, publisher, subscriber, subscriptionOwner, viewer |
| androidmanagement | 1 | user |
| anthos | 1 | serviceAgent |
| anthosaudit | 1 | serviceAgent |
| anthosconfigmanagement | 1 | serviceAgent |
| anthosidentityservice | 1 | serviceAgent |
| anthospolicycontroller | 1 | serviceAgent |
| anthosservicemesh | 1 | serviceAgent |
| anthossupport | 1 | serviceAgent |
| apigateway | 3 | admin, serviceAgent, viewer |
| apigateway_management | 1 | serviceAgent |
| apigee | 17 | admin, analyticsAgent, analyticsEditor, analyticsViewer, apiAdminV2, apiReaderV2, deploymentInvoker, developerAdmin, environmentAdmin, monetizationAdmin, portalAdmin, readOnlyAdmin, runtimeAgent, securityAdmin, securityViewer, serviceAgent, synchronizerManager |
| apigeeconnect | 2 | Admin, Agent |
| apigeeregistry | 4 | admin, editor, viewer, worker |
| apihub | 7 | admin, attributeAdmin, editor, pluginAdmin, provisioningAdmin, runtimeProjectServiceAgent, viewer |
| apim | 3 | admin, apiDiscoveryServiceAgent, viewer |
| appdevelopmentexperience | 1 | serviceAgent |
| appengine | 9 | appAdmin, appCreator, appViewer, codeViewer, debugger, deployer, memcacheDataAdmin, serviceAdmin, serviceAgent |
| appengineflex | 1 | serviceAgent |
| apphub | 3 | admin, editor, viewer |
| applianceactivation | 3 | approver, client, troubleshooter |
| artifactregistry | 7 | admin, createOnPushRepoAdmin, createOnPushWriter, reader, repoAdmin, serviceAgent, writer |
| assuredoss | 4 | admin, projectAdmin, reader, user |
| assuredworkloads | 5 | admin, editor, monitoringServiceAgent, reader, serviceAgent |
| auditmanager | 3 | admin, auditor, serviceAgent |
| automl | 5 | admin, editor, predictor, serviceAgent, viewer |
| automlrecommendations | 5 | admin, adminViewer, editor, serviceAgent, viewer |
| autoscaling | 4 | metricsWriter, recommendationsReader, sitesAdmin, stateWriter |
| axt | 1 | admin |
| backupdr | 15 | admin, backupUser, backupvaultAccessor, backupvaultAdmin, backupvaultLister, backupvaultViewer, cloudStorageOperator, computeEngineOperator, managementServerAccessor, mountUser, restoreUser, serviceAgent, user, userv2, viewer |
| baremetalsolution | 26 | admin, editor, instancesadmin, instancesviewer, lunsadmin, lunsviewer, maintenanceeventsadmin, maintenanceeventseditor, maintenanceeventsviewer, networksadmin, nfssharesadmin, nfsshareseditor, nfssharesviewer, osimagesviewer, procurementsadmin, procurementseditor, procurementsviewer, serviceAgent, storageadmin, viewer, volumesadmin, volumeseditor, volumesnapshotsadmin, volumesnapshotseditor, volumesnapshotsviewer, volumessviewer |
| batch | 7 | admin, agentReporter, jobsEditor, jobsViewer, resourceAllowancesEditor, resourceAllowancesViewer, serviceAgent |
| beyondcorp | 9 | admin, clientConnectorAdmin, clientConnectorServiceUser, clientConnectorViewer, partnerServiceDelegateAdmin, partnerServiceDelegateViewer, subscriptionAdmin, subscriptionViewer, viewer |
| biglake | 2 | admin, viewer |
| bigquery | 16 | admin, connectionAdmin, connectionUser, dataEditor, dataOwner, dataViewer, filteredDataViewer, jobUser, metadataViewer, readSessionUser, resourceAdmin, resourceEditor, resourceViewer, studioAdmin, studioUser, user |
| bigqueryconnection | 1 | serviceAgent |
| bigquerycontinuousquery | 1 | serviceAgent |
| bigquerydatapolicy | 2 | maskedReader, rawDataReader |
| bigquerydatatransfer | 1 | serviceAgent |
| bigquerymigration | 5 | editor, orchestrator, translationUser, viewer, worker |
| bigqueryomni | 1 | serviceAgent |
| bigqueryspark | 1 | serviceAgent |
| bigtable | 4 | admin, reader, user, viewer |
| billing | 7 | admin, carbonViewer, costsManager, creator, projectManager, user, viewer |
| binaryauthorization | 9 | attestorsAdmin, attestorsEditor, attestorsVerifier, attestorsViewer, policyAdmin, policyEditor, policyEvaluator, policyViewer, serviceAgent |
| blockchainnodeengine | 3 | admin, serviceAgent, viewer |
| capacityplanner | 1 | viewer |
| carestudio | 1 | viewer |
| certificatemanager | 4 | editor, owner, serviceAgent, viewer |
| chat | 2 | owner, reader |
| chronicle | 12 | admin, editor, globalDataAccess, limitedViewer, restrictedDataAccess, restrictedDataAccessViewer, serviceAgent, soarAdmin, soarServiceAgent, soarThreatManager, soarVulnerabilityManager, viewer |
| chroniclesm | 2 | admin, viewer |
| ciem | 1 | serviceAgent |
| cloud | 1 | locationReader |
| cloudaicompanion | 5 | codeRepositoryIndexesAdmin, codeRepositoryIndexesViewer, repositoryGroupsUser, serviceAgent, user |
| cloudasset | 4 | effectivePolicyServiceAgent, owner, serviceAgent, viewer |
| cloudbuild | 17 | builds.approver, builds.builder, builds.editor, builds.viewer, connectionAdmin, connectionViewer, integrationsEditor, integrationsOwner, integrationsViewer, loggingServiceAgent, readTokenAccessor, serviceAgent, tokenAccessor, workerPoolEditor, workerPoolOwner, workerPoolUser, workerPoolViewer |
| cloudconfig | 3 | admin, serviceAgent, viewer |
| cloudcontrolspartner | 8 | accessApprovalServiceAgent, admin, editor, ekmServiceAgent, inspectabilityReader, monitoringReader, monitoringServiceAgent, reader |
| clouddebugger | 2 | agent, user |
| clouddeploy | 11 | admin, approver, customTargetTypeAdmin, developer, jobRunner, operator, policyAdmin, policyOverrider, releaser, serviceAgent, viewer |
| clouddeploymentmanager | 1 | serviceAgent |
| cloudfunctions | 5 | admin, developer, invoker, serviceAgent, viewer |
| cloudiot | 1 | serviceAgent |
| cloudjobdiscovery | 5 | admin, jobsEditor, jobsViewer, profilesEditor, profilesViewer |
| cloudkms | 23 | admin, autokeyAdmin, autokeyUser, cryptoKeyDecrypter, cryptoKeyDecrypterViaDelegation, cryptoKeyEncrypter, cryptoKeyEncrypterDecrypter, cryptoKeyEncrypterDecrypterViaDelegation, cryptoKeyEncrypterViaDelegation, cryptoOperator, ekmConnectionsAdmin, expertRawAesCbc, expertRawAesCtr, expertRawPKCS1, importer, orgServiceAgent, protectedResourcesViewer, publicKeyViewer, serviceAgent, signer, signerVerifier, verifier, viewer |
| cloudkmskacls | 1 | serviceAgent |
| cloudmigration | 3 | inframanager, storageaccess, velostrataconnect |
| cloudoptimization | 4 | admin, editor, serviceAgent, viewer |
| cloudprivatecatalog | 1 | consumer |
| cloudprivatecatalogproducer | 3 | admin, manager, orgAdmin |
| cloudprofiler | 2 | agent, user |
| cloudquotas | 2 | admin, viewer |
| cloudscheduler | 4 | admin, jobRunner, serviceAgent, viewer |
| cloudsecurityscanner | 3 | editor, runner, viewer |
| cloudsql | 8 | admin, client, editor, instanceUser, schemaViewer, serviceAgent, studioUser, viewer |
| cloudsupport | 4 | admin, techSupportEditor, techSupportViewer, viewer |
| cloudtasks | 7 | admin, enqueuer, queueAdmin, serviceAgent, taskDeleter, taskRunner, viewer |
| cloudtestservice | 4 | directAccessAdmin, directAccessViewer, testAdmin, testViewer |
| cloudtpu | 1 | serviceAgent |
| cloudtrace | 3 | admin, agent, user |
| cloudtranslate | 5 | admin, editor, serviceAgent, user, viewer |
| commerceagreementpublishing | 2 | admin, viewer |
| commercebusinessenablement | 8 | admin, paymentConfigAdmin, paymentConfigViewer, rebatesAdmin, rebatesViewer, resellerDiscountAdmin, resellerDiscountViewer, viewer |
| commerceoffercatalog | 1 | offersViewer |
| commerceorggovernance | 3 | admin, user, viewer |
| commercepricemanagement | 3 | eventsViewer, privateOffersAdmin, viewer |
| commerceproducer | 2 | admin, viewer |
| compliancescanning | 1 | serviceAgent |
| composer | 9 | ServiceAgentV2Ext, admin, environmentAndStorageObjectAdmin, environmentAndStorageObjectUser, environmentAndStorageObjectViewer, serviceAgent, sharedVpcAgent, user, worker |
| compute | 30 | admin, futureReservationAdmin, futureReservationUser, futureReservationViewer, imageUser, instanceAdmin, instanceAdmin.v1, instanceGroupManagerServiceAgent, loadBalancerAdmin, loadBalancerServiceUser, networkAdmin, networkUser, networkViewer, orgFirewallPolicyAdmin, orgFirewallPolicyUser, orgSecurityPolicyAdmin, orgSecurityPolicyUser, orgSecurityResourceAdmin, osAdminLogin, osLogin, osLoginExternalUser, packetMirroringAdmin, packetMirroringUser, publicIpAdmin, securityAdmin, serviceAgent, soleTenantViewer, storageAdmin, viewer, xpnAdmin |
| confidentialcomputing | 1 | workloadUser |
| config | 3 | admin, agent, viewer |
| configdelivery | 4 | configDeliveryAdmin, configDeliveryViewer, resourceBundlePublisher, serviceAgent |
| connectors | 13 | admin, customConnectorAdmin, customConnectorViewer, endpointAttachmentAdmin, endpointAttachmentViewer, eventSubscriptionAdmin, eventSubscriptionViewer, invoker, listener, managedZoneAdmin, managedZoneViewer, serviceAgent, viewer |
| consumerprocurement | 9 | entitlementManager, entitlementViewer, eventsViewer, licensePoolEditor, licensePoolViewer, orderAdmin, orderViewer, procurementAdmin, procurementViewer |
| contactcenteraiplatform | 2 | admin, viewer |
| contactcenterinsights | 3 | editor, serviceAgent, viewer |
| container | 9 | admin, clusterAdmin, clusterViewer, defaultNodeServiceAccount, developer, hostServiceAgentUser, nodeServiceAgent, serviceAgent, viewer |
| containeranalysis | 8 | ServiceAgent, admin, notes.attacher, notes.editor, notes.occurrences.viewer, notes.viewer, occurrences.editor, occurrences.viewer |
| containerregistry | 1 | ServiceAgent |
| containerscanning | 1 | ServiceAgent |
| containersecurity | 1 | viewer |
| containerthreatdetection | 1 | serviceAgent |
| contentwarehouse | 7 | admin, documentAdmin, documentCreator, documentEditor, documentSchemaViewer, documentViewer, serviceAgent |
| databasecenter | 1 | viewer |
| databaseinsights | 5 | eventsViewer, monitoringViewer, operationsAdmin, recommendationViewer, viewer |
| datacatalog | 18 | admin, categoryAdmin, categoryFineGrainedReader, dataSteward, entryGroupCreator, entryGroupOwner, entryOwner, entryViewer, glossaryOwner, glossaryUser, migrationConfigAdmin, searchAdmin, tagEditor, tagTemplateCreator, tagTemplateOwner, tagTemplateUser, tagTemplateViewer, viewer |
| dataconnectors | 3 | connectorAdmin, connectorUser, serviceAgent |
| dataflow | 5 | admin, developer, serviceAgent, viewer, worker |
| dataform | 8 | admin, codeCreator, codeEditor, codeOwner, codeViewer, editor, serviceAgent, viewer |
| datafusion | 7 | accessor, admin, developer, operator, runner, serviceAgent, viewer |
| datalabeling | 4 | admin, editor, serviceAgent, viewer |
| datalineage | 4 | admin, editor, producer, viewer |
| datamigration | 2 | admin, serviceAgent |
| datapipelines | 4 | admin, invoker, serviceAgent, viewer |
| dataplex | 35 | admin, aspectTypeOwner, aspectTypeUser, bindingAdmin, catalogAdmin, catalogEditor, catalogViewer, dataOwner, dataReader, dataScanAdmin, dataScanCreator, dataScanDataViewer, dataScanEditor, dataScanViewer, dataWriter, developer, editor, entryGroupExporter, entryGroupImporter, entryGroupOwner, entryOwner, entryTypeOwner, entryTypeUser, metadataJobOwner, metadataJobViewer, metadataReader, metadataWriter, securityAdmin, serviceAgent, storageDataOwner, storageDataReader, storageDataWriter, taxonomyAdmin, taxonomyViewer, viewer |
| dataprep | 2 | projects.user, serviceAgent |
| dataproc | 6 | admin, editor, hubAgent, serviceAgent, viewer, worker |
| dataprocessing | 2 | admin, dataSourceManager |
| dataprocrm | 2 | admin, viewer |
| datastore | 12 | backupSchedulesAdmin, backupSchedulesViewer, backupsAdmin, backupsViewer, bulkAdmin, importExportAdmin, indexAdmin, keyVisualizerViewer, owner, restoreAdmin, user, viewer |
| datastream | 3 | admin, serviceAgent, viewer |
| datastudio | 8 | admin, contentManager, contributor, editor, manager, serviceAgent, viewer, workspaceViewer |
| dellemccloudonefs | 3 | admin, user, viewer |
| deploymentmanager | 4 | editor, typeEditor, typeViewer, viewer |
| developerconnect | 5 | admin, readTokenAccessor, tokenAccessor, user, viewer |
| dialogflow | 21 | aamAdmin, aamConversationalArchitect, aamDialogDesigner, aamLeadDialogDesigner, aamViewer, admin, agentAssistClient, client, consoleAgentEditor, consoleSimulatorUser, consoleSmartMessagingAllowlistEditor, conversationManager, entityTypeAdmin, environmentEditor, flowEditor, integrationManager, intentAdmin, reader, serviceAgent, testCaseAdmin, webhookAdmin |
| discoveryengine | 5 | admin, editor, serviceAgent, user, viewer |
| dlp | 32 | admin, analyzeRiskTemplatesEditor, analyzeRiskTemplatesReader, columnDataProfilesReader, connectionsAdmin, connectionsReader, dataProfilesAdmin, dataProfilesReader, deidentifyTemplatesEditor, deidentifyTemplatesReader, estimatesAdmin, fileStoreProfilesAdmin, fileStoreProfilesReader, inspectFindingsReader, inspectTemplatesEditor, inspectTemplatesReader, jobTriggersEditor, jobTriggersReader, jobsEditor, jobsReader, orgdriver, projectDataProfilesReader, projectdriver, reader, serviceAgent, storedInfoTypesEditor, storedInfoTypesReader, subscriptionsAdmin, subscriptionsReader, tableDataProfilesAdmin, tableDataProfilesReader, user |
| dns | 4 | admin, peer, reader, serviceAgent |
| documentai | 4 | admin, apiUser, editor, viewer |
| documentaicore | 1 | serviceAgent |
| domains | 2 | admin, viewer |
| dspm | 1 | serviceAgent |
| earthengine | 4 | admin, appsPublisher, viewer, writer |
| edgecontainer | 6 | admin, clusterServiceAgent, machineUser, offlineCredentialUser, serviceAgent, viewer |
| edgenetwork | 2 | admin, viewer |
| endpoints | 1 | serviceAgent |
| endpointsportal | 1 | serviceAgent |
| enterpriseknowledgegraph | 4 | admin, editor, serviceAgent, viewer |
| enterprisepurchasing | 3 | admin, editor, viewer |
| errorreporting | 4 | admin, user, viewer, writer |
| essentialcontacts | 2 | admin, viewer |
| eventarc | 7 | admin, connectionPublisher, developer, eventReceiver, publisher, serviceAgent, viewer |
| file | 3 | editor, serviceAgent, viewer |
| financialservices | 2 | admin, viewer |
| firebase | 14 | admin, analyticsAdmin, analyticsViewer, appDistributionSdkServiceAgent, developAdmin, developViewer, growthAdmin, growthViewer, managementServiceAgent, qualityAdmin, qualityViewer, sdkAdminServiceAgent, sdkProvisioningServiceAgent, viewer |
| firebaseabt | 2 | admin, viewer |
| firebaseappcheck | 4 | admin, serviceAgent, tokenVerifier, viewer |
| firebaseappdistro | 2 | admin, viewer |
| firebaseapphosting | 1 | serviceAgent |
| firebaseauth | 2 | admin, viewer |
| firebasecloudmessaging | 1 | admin |
| firebasecrash | 1 | symbolMappingsAdmin |
| firebasecrashlytics | 2 | admin, viewer |
| firebasedatabase | 3 | admin, serviceAgent, viewer |
| firebasedataconnect | 5 | admin, dataAdmin, dataViewer, serviceAgent, viewer |
| firebasedynamiclinks | 2 | admin, viewer |
| firebaseextensions | 2 | developer, viewer |
| firebaseextensionspublisher | 2 | extensionsAdmin, extensionsViewer |
| firebasehosting | 2 | admin, viewer |
| firebaseinappmessaging | 2 | admin, viewer |
| firebasemessagingcampaigns | 2 | admin, viewer |
| firebaseml | 3 | admin, serviceAgent, viewer |
| firebasemods | 1 | serviceAgent |
| firebasenotifications | 2 | admin, viewer |
| firebaseperformance | 2 | admin, viewer |
| firebaserules | 4 | admin, firestoreServiceAgent, system, viewer |
| firebasestorage | 3 | admin, serviceAgent, viewer |
| firestore | 1 | serviceAgent |
| firewallinsights | 1 | serviceAgent |
| fleetengine | 11 | consumerSdkUser, deliveryAdmin, deliveryConsumer, deliveryFleetReader, deliverySuperUser, deliveryTrustedDriver, deliveryUntrustedDriver, driverSdkUser, ondemandAdmin, serviceAgent, serviceSuperUser |
| gameservices | 1 | serviceAgent |
| gdchardwaremanagement | 3 | admin, operator, reader |
| genomics | 5 | admin, editor, pipelinesRunner, serviceAgent, viewer |
| gkebackup | 7 | admin, backupAdmin, delegatedBackupAdmin, delegatedRestoreAdmin, restoreAdmin, serviceAgent, viewer |
| gkedataplanemanagement | 1 | warpRunServiceAgent |
| gkehub | 14 | admin, connect, crossProjectServiceAgent, editor, gatewayAdmin, gatewayEditor, gatewayReader, scopeAdmin, scopeEditor, scopeEditorProjectLevel, scopeViewer, scopeViewerProjectLevel, serviceAgent, viewer |
| gkemulticloud | 7 | admin, containerServiceAgent, controlPlaneMachineServiceAgent, nodePoolMachineServiceAgent, serviceAgent, telemetryWriter, viewer |
| gkeonprem | 3 | admin, serviceAgent, viewer |
| gsuiteaddons | 3 | developer, reader, tester |
| healthcare | 32 | annotationEditor, annotationReader, annotationStoreAdmin, annotationStoreViewer, attributeDefinitionEditor, attributeDefinitionReader, consentArtifactAdmin, consentArtifactEditor, consentArtifactReader, consentEditor, consentReader, consentStoreAdmin, consentStoreViewer, datasetAdmin, datasetViewer, dicomEditor, dicomStoreAdmin, dicomStoreViewer, dicomViewer, fhirResourceEditor, fhirResourceReader, fhirStoreAdmin, fhirStoreViewer, hl7V2Consumer, hl7V2Editor, hl7V2Ingest, hl7V2StoreAdmin, hl7V2StoreViewer, nlpServiceViewer, serviceAgent, userDataMappingEditor, userDataMappingReader |
| iam | 29 | denyAdmin, denyReviewer, oauthClientAdmin, oauthClientViewer, operationViewer, organizationRoleAdmin, organizationRoleViewer, principalAccessBoundaryAdmin, principalAccessBoundaryUser, principalAccessBoundaryViewer, roleAdmin, roleViewer, securityAdmin, securityReviewer, serviceAccountAdmin, serviceAccountCreator, serviceAccountDeleter, serviceAccountKeyAdmin, serviceAccountOpenIdTokenCreator, serviceAccountTokenCreator, serviceAccountUser, serviceAccountViewer, workforcePoolAdmin, workforcePoolEditor, workforcePoolViewer, workloadIdentityPoolAdmin, workloadIdentityPoolViewer, workloadIdentityUser, workspacePoolAdmin |
| iap | 7 | admin, httpsResourceAccessor, remediatorUser, settingsAdmin, tunnelDestGroupEditor, tunnelDestGroupViewer, tunnelResourceAccessor |
| identityplatform | 2 | admin, viewer |
| identitytoolkit | 3 | admin, serviceAgent, viewer |
| ids | 2 | admin, viewer |
| integrations | 18 | apigeeIntegrationAdminRole, apigeeIntegrationDeployerRole, apigeeIntegrationEditorRole, apigeeIntegrationInvokerRole, apigeeIntegrationsViewer, apigeeSuspensionResolver, certificateViewer, integrationAdmin, integrationDeployer, integrationEditor, integrationInvoker, integrationViewer, securityIntegrationAdmin, serviceAgent, sfdcInstanceAdmin, sfdcInstanceEditor, sfdcInstanceViewer, suspensionResolver |
| issuerswitch | 9 | accountManagerAdmin, accountManagerTransactionsAdmin, accountManagerTransactionsViewer, admin, issuerParticipantsAdmin, resolutionsAdmin, rulesAdmin, rulesViewer, transactionsViewer |
| krmapihosting | 4 | admin, anthosApiEndpointServiceAgent, serviceAgent, viewer |
| kubernetesmetadata | 1 | publisher |
| kuberun | 2 | eventsControlPlaneServiceAgent, eventsDataPlaneServiceAgent |
| lifesciences | 5 | admin, editor, serviceAgent, viewer, workflowsRunner |
| livestream | 3 | editor, serviceAgent, viewer |
| logging | 11 | admin, bucketWriter, configWriter, fieldAccessor, linkViewer, logWriter, privateLogViewer, serviceAgent, sqlAlertWriter, viewAccessor, viewer |
| looker | 4 | admin, instanceUser, serviceAgent, viewer |
| lookerstudio | 1 | proManager |
| managedflink | 4 | admin, developer, serviceAgent, viewer |
| managedidentities | 9 | admin, backupAdmin, backupViewer, domainAdmin, domainJoin, peeringAdmin, peeringViewer, serviceAgent, viewer |
| managedkafka | 7 | admin, client, clusterEditor, consumerGroupEditor, serviceAgent, topicEditor, viewer |
| mandiant | 10 | attackSurfaceManagementEditor, attackSurfaceManagementViewer, digitalThreatMonitoringEditor, digitalThreatMonitoringViewer, expertiseOnDemandEditor, expertiseOnDemandViewer, threatIntelEditor, threatIntelViewer, validationEditor, validationViewer |
| mapsadmin | 2 | admin, viewer |
| mapsanalytics | 2 | mobilitySolutionsOverageViewer, viewer |
| mapsplatformdatasets | 2 | admin, viewer |
| marketplacesolutions | 3 | admin, editor, viewer |
| mediaasset | 1 | serviceAgent |
| memcache | 4 | admin, editor, serviceAgent, viewer |
| memorystore | 4 | admin, dbConnectionUser, serviceAgent, viewer |
| meshconfig | 3 | admin, serviceAgent, viewer |
| meshcontrolplane | 1 | serviceAgent |
| meshdataplane | 1 | serviceAgent |
| metastore | 13 | admin, editor, federationAccessor, metadataEditor, metadataMutateAdmin, metadataOperator, metadataOwner, metadataQueryAdmin, metadataUser, metadataViewer, migrationAdmin, serviceAgent, user |
| migrationcenter | 5 | admin, discoveryClient, discoveryClientRegistrator, serviceAgent, viewer |
| ml | 8 | admin, developer, jobOwner, modelOwner, modelUser, operationOwner, serviceAgent, viewer |
| monitoring | 21 | admin, alertPolicyEditor, alertPolicyViewer, cloudConsoleIncidentEditor, cloudConsoleIncidentViewer, dashboardEditor, dashboardViewer, editor, metricWriter, metricsScopesAdmin, metricsScopesViewer, notificationChannelEditor, notificationChannelViewer, notificationServiceAgent, servicesEditor, servicesViewer, snoozeEditor, snoozeViewer, uptimeCheckConfigEditor, uptimeCheckConfigViewer, viewer |
| multiclusteringress | 1 | serviceAgent |
| multiclustermetering | 1 | serviceAgent |
| multiclusterservicediscovery | 1 | serviceAgent |
| nestconsole | 3 | homeDeveloperAdmin, homeDeveloperEditor, homeDeveloperViewer |
| netapp | 2 | admin, viewer |
| netappcloudvolumes | 2 | admin, viewer |
| networkactions | 1 | serviceAgent |
| networkconnectivity | 10 | consumerNetworkAdmin, groupUser, hubAdmin, hubViewer, regionalEndpointAdmin, regionalEndpointViewer, serviceAgent, serviceClassUser, serviceProducerAdmin, spokeAdmin |
| networkmanagement | 3 | admin, serviceAgent, viewer |
| networksecurity | 6 | mirroringDeploymentAdmin, mirroringDeploymentUser, mirroringDeploymentViewer, mirroringEndpointAdmin, mirroringEndpointUser, mirroringEndpointViewer |
| notebooks | 6 | admin, legacyAdmin, legacyViewer, runner, serviceAgent, viewer |
| oauthconfig | 2 | editor, viewer |
| observability | 3 | admin, editor, viewer |
| oci | 1 | serviceAgent |
| ondemandscanning | 2 | admin, serviceAgent |
| opsconfigmonitoring | 2 | resourceMetadata.viewer, resourceMetadata.writer |
| oracledatabase | 8 | admin, autonomousDatabaseAdmin, autonomousDatabaseViewer, cloudExadataInfrastructureAdmin, cloudExadataInfrastructureViewer, cloudVmClusterAdmin, cloudVmClusterViewer, viewer |
| orgpolicy | 2 | policyAdmin, policyViewer |
| osconfig | 20 | admin, guestPolicyAdmin, guestPolicyEditor, guestPolicyViewer, instanceOSPoliciesComplianceViewer, inventoryViewer, osPolicyAssignmentAdmin, osPolicyAssignmentEditor, osPolicyAssignmentReportViewer, osPolicyAssignmentViewer, patchDeploymentAdmin, patchDeploymentViewer, patchJobExecutor, patchJobViewer, projectFeatureSettingsEditor, projectFeatureSettingsViewer, serviceAgent, upgradeReportViewer, viewer, vulnerabilityReportViewer |
| parallelstore | 1 | serviceAgent |
| paymentsresellersubscription | 6 | partnerAdmin, partnerViewer, productViewer, promotionViewer, subscriptionEditor, subscriptionViewer |
| policyanalyzer | 1 | activityAnalysisViewer |
| policyremediatormanager | 2 | policyRemediatorAdmin, policyRemediatorReader |
| policysimulator | 2 | admin, orgPolicyAdmin |
| privateca | 8 | admin, auditor, caManager, certificateManager, certificateRequester, poolReader, templateUser, workloadCertificateRequester |
| privilegedaccessmanager | 6 | admin, folderServiceAgent, organizationServiceAgent, projectServiceAgent, serviceAgent, viewer |
| progressiverollout | 1 | serviceAgent |
| project | 4 | owner, editor, viewer, browser |
| proximitybeacon | 4 | attachmentEditor, attachmentPublisher, attachmentViewer, beaconEditor |
| publicca | 1 | externalAccountKeyCreator |
| pubsub | 6 | admin, editor, publisher, serviceAgent, subscriber, viewer |
| pubsublite | 6 | admin, editor, publisher, serviceAgent, subscriber, viewer |
| rapidmigrationassessment | 1 | serviceAgent |
| readerrevenuesubscriptionlinking | 3 | admin, entitlementsViewer, viewer |
| recaptchaenterprise | 3 | admin, agent, viewer |
| recommender | 83 | alloydbAdmin, alloydbViewer, bigQueryCapacityCommitmentsAdmin, bigQueryCapacityCommitmentsBillingAccountAdmin, bigQueryCapacityCommitmentsBillingAccountViewer, bigQueryCapacityCommitmentsProjectAdmin, bigQueryCapacityCommitmentsProjectViewer, bigQueryCapacityCommitmentsViewer, bigqueryMaterializedViewAdmin, bigqueryMaterializedViewViewer, bigqueryPartitionClusterAdmin, bigqueryPartitionClusterViewer, billingAccountCudAdmin, billingAccountCudViewer, cloudAssetInsightsAdmin, cloudAssetInsightsViewer, cloudCostRecommendationAdmin, cloudCostRecommendationViewer, cloudDeprecationRecommendationAdmin, cloudDeprecationRecommendationViewer, cloudManageabilityRecommendationAdmin, cloudManageabilityRecommendationViewer, cloudPerformanceRecommendationAdmin, cloudPerformanceRecommendationViewer, cloudReliabilityRecommendationAdmin, cloudReliabilityRecommendationViewer, cloudSecurityRecommendationAdmin, cloudSecurityRecommendationViewer, cloudsqlAdmin, cloudsqlViewer, computeAdmin, computeViewer, containerDiagnosisAdmin, containerDiagnosisViewer, dataflowDiagnosticsAdmin, dataflowDiagnosticsViewer, errorReportingAdmin, errorReportingViewer, exporter, firestoredatabasereliabilityAdmin, firestoredatabasereliabilityViewer, firewallAdmin, firewallViewer, gmpAdmin, gmpViewer, iamAdmin, iamViewer, iampolicychangeriskAdmin, iampolicychangeriskViewer, networkAnalyzerAdmin, networkAnalyzerCloudSqlAdmin, networkAnalyzerCloudSqlViewer, networkAnalyzerDynamicRouteAdmin, networkAnalyzerDynamicRouteViewer, networkAnalyzerGkeConnectivityAdmin, networkAnalyzerGkeConnectivityViewer, networkAnalyzerGkeIpAddressAdmin, networkAnalyzerGkeIpAddressViewer, networkAnalyzerGkeServiceAccountAdmin, networkAnalyzerGkeServiceAccountViewer, networkAnalyzerIpAddressAdmin, networkAnalyzerIpAddressViewer, networkAnalyzerLoadBalancerAdmin, networkAnalyzerLoadBalancerViewer, networkAnalyzerViewer, networkAnalyzerVpcConnectivityAdmin, networkAnalyzerVpcConnectivityViewer, productSuggestionAdmin, productSuggestionViewer, projectCudAdmin, projectCudViewer, projectUtilAdmin, projectUtilViewer, recentChangeConfigAdmin, recentchangeriskAdmin, recentchangeriskViewer, serviceLimitAdmin, serviceLimitViewer, serviceaccntchangeriskAdmin, serviceaccntchangeriskViewer, ucsAdmin, ucsViewer, viewer |
| redis | 5 | admin, dbConnectionUser, editor, serviceAgent, viewer |
| redisenterprisecloud | 2 | admin, viewer |
| remotebuildexecution | 10 | actionCacheWriter, artifactAdmin, artifactCreator, artifactViewer, configurationAdmin, configurationViewer, logstreamWriter, reservationAdmin, serviceAgent, worker |
| remotingcloud | 1 | serviceAgent |
| resourcemanager | 17 | folderAdmin, folderCreator, folderEditor, folderIamAdmin, folderMover, folderViewer, lienModifier, organizationAdmin, organizationViewer, projectCreator, projectDeleter, projectIamAdmin, projectMover, tagAdmin, tagHoldAdmin, tagUser, tagViewer |
| resourcesettings | 2 | admin, viewer |
| retail | 4 | admin, editor, serviceAgent, viewer |
| riscconfigs | 2 | admin, viewer |
| riskmanager | 5 | admin, editor, reviewer, serviceAgent, viewer |
| rma | 3 | admin, runner, viewer |
| routeoptimization | 3 | editor, serviceAgent, viewer |
| run | 8 | admin, builder, developer, invoker, serviceAgent, sourceDeveloper, sourceViewer, viewer |
| runapps | 4 | developer, operator, serviceAgent, viewer |
| runtimeconfig | 1 | admin |
| seclm | 1 | serviceAgent |
| secretmanager | 5 | admin, secretAccessor, secretVersionAdder, secretVersionManager, viewer |
| securedlandingzone | 6 | bqdwOrgRemediator, bqdwProjectRemediator, overwatchActivator, overwatchAdmin, overwatchViewer, serviceAgent |
| securesourcemanager | 12 | admin, instanceAccessor, instanceManager, instanceOwner, instanceRepositoryCreator, repoAdmin, repoCreator, repoPullRequestApprover, repoReader, repoWriter, serviceAgent, sshKeyUser |
| securitycenter | 42 | admin, adminEditor, adminViewer, assetSecurityMarksWriter, assetsDiscoveryRunner, assetsViewer, attackPathsViewer, attackSurfaceManagementScannerServiceAgent, automationServiceAgent, bigQueryExportsEditor, bigQueryExportsViewer, complianceReportsViewer, complianceSnapshotsViewer, controlServiceAgent, externalSystemsEditor, findingSecurityMarksWriter, findingsBulkMuteEditor, findingsEditor, findingsMuteSetter, findingsStateSetter, findingsViewer, findingsWorkflowStateSetter, integrationExecutorServiceAgent, muteConfigsEditor, muteConfigsViewer, notificationConfigEditor, notificationConfigViewer, notificationServiceAgent, resourceValueConfigsEditor, resourceValueConfigsViewer, securityHealthAnalyticsCustomModulesTester, securityHealthAnalyticsServiceAgent, securityResponseServiceAgent, serviceAgent, settingsAdmin, settingsEditor, settingsViewer, simulationsViewer, sourcesAdmin, sourcesEditor, sourcesViewer, valuedResourcesViewer |
| securitycentermanagement | 12 | admin, customModulesEditor, customModulesViewer, etdCustomModulesEditor, etdCustomModulesViewer, securityCenterServicesEditor, securityCenterServicesViewer, settingsEditor, settingsViewer, shaCustomModulesEditor, shaCustomModulesViewer, viewer |
| securityposture | 7 | admin, postureDeployer, postureDeploymentsViewer, postureEditor, postureViewer, reportCreator, viewer |
| serverless | 1 | serviceAgent |
| servicebroker | 2 | admin, operator |
| serviceconsumermanagement | 2 | tenancyUnitsAdmin, tenancyUnitsViewer |
| servicedirectory | 6 | admin, editor, networkAttacher, pscAuthorizedService, serviceAgent, viewer |
| servicehealth | 1 | viewer |
| servicemanagement | 7 | admin, configEditor, quotaAdmin, quotaViewer, reporter, serviceConsumer, serviceController |
| servicenetworking | 2 | networksAdmin, serviceAgent |
| servicesecurityinsights | 1 | securityInsightsViewer |
| serviceusage | 5 | apiKeysAdmin, apiKeysViewer, serviceUsageAdmin, serviceUsageConsumer, serviceUsageViewer |
| source | 3 | admin, reader, writer |
| sourcerepo | 1 | serviceAgent |
| spanner | 11 | admin, backupAdmin, backupWriter, databaseAdmin, databaseReader, databaseRoleUser, databaseUser, fineGrainedAccessUser, restoreAdmin, serviceAgent, viewer |
| speakerid | 4 | admin, editor, verifier, viewer |
| spectrumsas | 1 | serviceAgent |
| speech | 4 | admin, client, editor, serviceAgent |
| stackdriver | 3 | accounts.editor, accounts.viewer, resourceMetadata.writer |
| storage | 13 | admin, folderAdmin, hmacKeyAdmin, insightsCollectorService, legacyBucketOwner, legacyBucketReader, legacyBucketWriter, legacyObjectOwner, legacyObjectReader, objectAdmin, objectCreator, objectUser, objectViewer |
| storageinsights | 4 | admin, analyst, serviceAgent, viewer |
| storagetransfer | 5 | admin, serviceAgent, transferAgent, user, viewer |
| stream | 6 | admin, contentAdmin, contentBuilder, instanceAdmin, serviceAgent, viewer |
| subscribewithgoogledeveloper | 1 | developer |
| telcoautomation | 6 | admin, blueprintDesigner, deploymentAdmin, opsAdminTier1, opsAdminTier4, serviceOrchestrator |
| timeseriesinsights | 3 | datasetsEditor, datasetsOwner, datasetsViewer |
| tpu | 4 | admin, serviceAgent, viewer, xpnAgent |
| trafficdirector | 1 | client |
| transcoder | 3 | admin, serviceAgent, viewer |
| transferappliance | 2 | admin, viewer |
| translationhub | 2 | admin, portalUser |
| videostitcher | 3 | admin, user, viewer |
| visionai | 41 | admin, analysisEditor, analysisViewer, annotationEditor, annotationViewer, applicationEditor, applicationViewer, assetCreator, assetEditor, assetViewer, clusterEditor, clusterViewer, corpusAdmin, corpusEditor, corpusViewer, corpusWriter, editor, eventEditor, eventViewer, indexEndpointAdmin, indexEndpointEditor, indexEndpointViewer, indexEndpointWriter, operatorEditor, operatorViewer, packetReceiver, packetSender, processorEditor, processorViewer, retailcatalogEditor, retailcatalogViewer, retailendpointEditor, retailendpointViewer, seriesEditor, seriesViewer, serviceAgent, streamEditor, streamViewer, uiStreamEditor, uiStreamViewer, viewer |
| visualinspection | 4 | editor, serviceAgent, usageMetricsReporter, viewer |
| vmmigration | 3 | admin, serviceAgent, viewer |
| vmwareengine | 3 | serviceAgent, vmwareengineAdmin, vmwareengineViewer |
| vpcaccess | 4 | admin, serviceAgent, user, viewer |
| websecurityscanner | 1 | serviceAgent |
| workflows | 5 | admin, editor, invoker, serviceAgent, viewer |
| workloadcertificate | 5 | admin, registrationAdmin, registrationViewer, serviceAgent, viewer |
| workloadmanager | 10 | admin, deploymentAdmin, deploymentViewer, evaluationAdmin, evaluationViewer, insightWriter, serviceAgent, viewer, worker, workloadViewer |
| workstations | 6 | admin, networkAdmin, operationViewer, serviceAgent, user, workstationCreator |