ServiceCountRoles
accessapproval6admin, approver, configEditor, editor, invalidator, viewer
accesscontextmanager6gcpAccessAdmin, gcpAccessReader, policyAdmin, policyEditor, policyReader, vpcScTroubleshooterViewer
actions2Admin, Viewer
advisorynotifications2admin, viewer
agentgateway1serviceAgent
agentregistry3admin, editor, viewer
aiedgeportal1serviceAgent
aiplatform43admin, agentSandboxServiceAgent, batchPredictionServiceAgent, colabEnterpriseAdmin, colabEnterpriseUser, colabServiceAgent, customCodeServiceAgent, entityTypeOwner, expressAdmin, expressUser, extensionCustomCodeServiceAgent, extensionServiceAgent, featurestoreAdmin, featurestoreDataViewer, featurestoreDataWriter, featurestoreInstanceCreator, featurestoreResourceViewer, featurestoreUser, memoryEditor, memoryUser, memoryViewer, migrator, modelMonitoringServiceAgent, notebookExecutorUser, notebookRuntimeAdmin, notebookRuntimeUser, notebookServiceAgent, onlinePredictionServiceAgent, provisionedThroughputAdmin, publisherProvisionedThroughputAdmin, publisherProvisionedThroughputViewer, ragServiceAgent, rapidevalServiceAgent, reasoningEngineServiceAgent, serviceAgent, sessionEditor, sessionUser, sessionViewer, telemetryServiceAgent, tensorboardWebAppUser, tuningServiceAgent, user, viewer
alloydb6admin, client, databaseUser, editor, serviceAgent, viewer
analyticshub7admin, editor, listingAdmin, publisher, subscriber, subscriptionOwner, viewer
androidmanagement2admin, user
anthos1serviceAgent
anthosaudit1serviceAgent
anthosconfigmanagement1serviceAgent
anthosidentityservice1serviceAgent
anthospolicycontroller1serviceAgent
anthosservicemesh1serviceAgent
anthossupport1serviceAgent
apigateway4admin, editor, serviceAgent, viewer
apigateway_management1serviceAgent
apigee24admin, analyticsAgent, analyticsEditor, analyticsViewer, apiAdminV2, apiReaderV2, apimServiceExtensionServiceAgent, coreServiceAgent, deploymentInvoker, developerAdmin, editor, environmentAdmin, monetizationAdmin, portalAdmin, readOnlyAdmin, runtimeAgent, securityAdmin, securityViewer, serviceAgent, spaceConsoleUser, spaceContentEditor, spaceContentViewer, synchronizerManager, viewer
apigeeconnect3Admin, Agent, viewer
apigeeregistry4admin, editor, viewer, worker
apihub10addonsAdmin, admin, apiInsightsViewer, attributeAdmin, editor, pluginAdmin, provisioningAdmin, runTimeProjectAttachmentsEditor, runtimeProjectServiceAgent, viewer
apim3admin, apiDiscoveryServiceAgent, viewer
appdevelopmentexperience1serviceAgent
appengine9appAdmin, appCreator, appViewer, codeViewer, debugger, deployer, memcacheDataAdmin, serviceAdmin, serviceAgent
appengineflex1serviceAgent
apphub4admin, appManagementViewer, editor, viewer
applianceactivation3approver, client, troubleshooter
appmetadata1workspaceMarketplaceAppConfigurationAdmin
apptopology1viewer
artifactregistry10admin, attachmentReader, attachmentWriter, containerRegistryMigrationAdmin, createOnPushRepoAdmin, createOnPushWriter, reader, repoAdmin, serviceAgent, writer
assuredoss6admin, editor, projectAdmin, reader, user, viewer
assuredworkloads5admin, editor, monitoringServiceAgent, reader, serviceAgent
auditmanager5admin, auditor, ccfAdmin, ccfViewer, serviceAgent
automl5admin, editor, predictor, serviceAgent, viewer
automlrecommendations5admin, adminViewer, editor, serviceAgent, viewer
autoscaling7admin, editor, metricsWriter, recommendationsReader, sitesAdmin, stateWriter, viewer
axt1admin
backupdr21admin, alloydbOperator, backupConfigViewer, backupUser, backupvaultAccessor, backupvaultAdmin, backupvaultLister, backupvaultViewer, cloudSqlOperator, cloudStorageOperator, computeEngineOperator, diskOperator, editor, filestoreOperator, managementServerAccessor, mountUser, restoreUser, serviceAgent, user, userv2, viewer
baremetalsolution26admin, editor, instancesadmin, instancesviewer, lunsadmin, lunsviewer, maintenanceeventsadmin, maintenanceeventseditor, maintenanceeventsviewer, networksadmin, nfssharesadmin, nfsshareseditor, nfssharesviewer, osimagesviewer, procurementsadmin, procurementseditor, procurementsviewer, serviceAgent, storageadmin, viewer, volumesadmin, volumeseditor, volumesnapshotsadmin, volumesnapshotseditor, volumesnapshotsviewer, volumessviewer
batch7admin, agentReporter, jobsEditor, jobsViewer, resourceAllowancesEditor, resourceAllowancesViewer, serviceAgent
beyondcorp5admin, editor, subscriptionAdmin, subscriptionViewer, viewer
biglake4admin, editor, metadataViewer, viewer
bigquery24admin, connectedSheetsServiceAgent, connectionAdmin, connectionUser, dataEditor, dataOwner, dataViewer, filteredDataViewer, jobUser, metadataViewer, objectRefAdmin, objectRefReader, readSessionUser, resourceAdmin, resourceEditor, resourceViewer, routineAdmin, routineDataEditor, routineDataViewer, routineMetadataViewer, securityAdmin, studioAdmin, studioUser, user
bigqueryconnection1serviceAgent
bigquerycontinuousquery1serviceAgent
bigquerydatapolicy5admin, editor, maskedReader, rawDataReader, viewer
bigquerydatatransfer1serviceAgent
bigquerymigration6admin, editor, orchestrator, translationUser, viewer, worker
bigqueryomni1serviceAgent
bigqueryspark1serviceAgent
bigtable5admin, editor, reader, user, viewer
billing9admin, carbonViewer, costsManager, creator, linkAdmin, projectCostsManager, projectManager, user, viewer
binaryauthorization12admin, attestorsAdmin, attestorsEditor, attestorsVerifier, attestorsViewer, editor, policyAdmin, policyEditor, policyEvaluator, policyViewer, serviceAgent, viewer
blockchainnodeengine3admin, serviceAgent, viewer
blockchainvalidatormanager2admin, viewer
businessaicode1user
capacityplanner2planner, viewer
carestudio2admin, viewer
certificatemanager5admin, editor, owner, serviceAgent, viewer
ces11admin, agentEditor, appEditor, client, deploymentEditor, evalsEditor, guardrailsEditor, securitySettingsEditor, serviceAgent, toolsEditor, viewer
chat4admin, owner, reader, viewer
chronicle16admin, dataGovernor, editor, federationAdmin, federationViewer, globalDataAccess, limitedViewer, restrictedDataAccess, restrictedDataAccessViewer, serviceAgent, soarAdmin, soarRemoteAgent, soarServiceAgent, soarThreatManager, soarVulnerabilityManager, viewer
chroniclesm2admin, viewer
ciem1serviceAgent
cloud3admin, locationReader, viewer
cloudaicompanion12codeRepositoryIndexesAdmin, codeRepositoryIndexesViewer, codeToolsAdmin, codeToolsUser, individualUser, repositoryGroupsUser, serviceAgent, settingsAdmin, settingsUser, topicAdmin, topicReader, user
cloudapiregistry2admin, viewer
cloudasset4effectivePolicyServiceAgent, owner, serviceAgent, viewer
cloudbuild20admin, builds.approver, builds.builder, builds.editor, builds.viewer, connectionAdmin, connectionViewer, editor, integrationsEditor, integrationsOwner, integrationsViewer, loggingServiceAgent, readTokenAccessor, serviceAgent, tokenAccessor, viewer, workerPoolEditor, workerPoolOwner, workerPoolUser, workerPoolViewer
cloudconfig3admin, serviceAgent, viewer
cloudcontrolspartner10accessApprovalServiceAgent, admin, editor, ekmServiceAgent, inspectabilityReader, monitoringReader, monitoringServiceAgent, reader, supportCaseServiceAgent, viewer
clouddebugger2agent, user
clouddeploy12admin, approver, customTargetTypeAdmin, developer, editor, jobRunner, operator, policyAdmin, policyOverrider, releaser, serviceAgent, viewer
clouddeploymentmanager1serviceAgent
cloudfunctions6admin, developer, editor, invoker, serviceAgent, viewer
cloudhub1operator
cloudiot1serviceAgent
cloudjobdiscovery6admin, jobsEditor, jobsViewer, profilesEditor, profilesViewer, viewer
cloudkms31admin, autokeyAdmin, autokeyUser, cryptoKeyDecrypter, cryptoKeyDecrypterViaDelegation, cryptoKeyEncrypter, cryptoKeyEncrypterDecrypter, cryptoKeyEncrypterDecrypterViaDelegation, cryptoKeyEncrypterViaDelegation, cryptoOperator, decapsulator, ekmConnectionsAdmin, expertPqcSigner, expertRawAesCbc, expertRawAesCtr, expertRawPKCS1, hsmSingleTenantExecutor, hsmSingleTenantKeyCreator, hsmSingleTenantProposer, hsmSingleTenantQuorumMember, importer, keyAccessJustificationsEnrollmentConfigViewer, keyAccessJustificationsPolicyConfigAdmin, orgServiceAgent, protectedResourcesViewer, publicKeyViewer, serviceAgent, signer, signerVerifier, verifier, viewer
cloudkmskacls1serviceAgent
cloudlocationfinder2admin, viewer
cloudmigration3inframanager, storageaccess, velostrataconnect
cloudoptimization4admin, editor, serviceAgent, viewer
cloudprivatecatalog1consumer
cloudprivatecatalogproducer5admin, editor, manager, orgAdmin, viewer
cloudprofiler4admin, agent, user, viewer
cloudquotas2admin, viewer
cloudscheduler4admin, jobRunner, serviceAgent, viewer
cloudsecuritycompliance3admin, serviceAgent, viewer
cloudsecurityscanner3editor, runner, viewer
cloudsql8admin, client, editor, instanceUser, schemaViewer, serviceAgent, studioUser, viewer
cloudsupport6admin, advisorySupportEditor, advisorySupportViewer, techSupportEditor, techSupportViewer, viewer
cloudtasks8admin, editor, enqueuer, queueAdmin, serviceAgent, taskDeleter, taskRunner, viewer
cloudtestservice6admin, directAccessAdmin, directAccessViewer, testAdmin, testViewer, viewer
cloudtpu1serviceAgent
cloudtrace3admin, agent, user
cloudtranslate5admin, editor, serviceAgent, user, viewer
commerceagreementpublishing2admin, viewer
commercebusinessenablement8admin, paymentConfigAdmin, paymentConfigViewer, rebatesAdmin, rebatesViewer, resellerDiscountAdmin, resellerDiscountViewer, viewer
commerceoffercatalog1offersViewer
commerceorggovernance3admin, user, viewer
commercepricemanagement4editor, eventsViewer, privateOffersAdmin, viewer
commerceproducer2admin, viewer
compliancescanning1serviceAgent
composer11ServiceAgentV2Ext, admin, editor, environmentAndStorageObjectAdmin, environmentAndStorageObjectUser, environmentAndStorageObjectViewer, serviceAgent, sharedVpcAgent, user, viewer, worker
compute36admin, editor, futureReservationAdmin, futureReservationUser, futureReservationViewer, imageUser, instanceAdmin, instanceAdmin.v1, instanceGroupManagerServiceAgent, interconnectAttachmentGroupAnalyzer, interconnectGroupAnalyzer, loadBalancerAdmin, loadBalancerServiceUser, networkAdmin, networkUser, networkViewer, orgFirewallPolicyAdmin, orgFirewallPolicyUser, orgSecurityPolicyAdmin, orgSecurityPolicyUser, orgSecurityResourceAdmin, osAdminLogin, osLogin, osLoginExternalUser, packetMirroringAdmin, packetMirroringUser, peerSubnetMigrationAdmin, publicIpAdmin, securityAdmin, serviceAgent, soleTenantViewer, storageAdmin, viewer, vmExtensionPolicyAdmin, vmExtensionPolicyViewer, xpnAdmin
confidentialcomputing4admin, gkeWorkloadUser, viewer, workloadUser
config4admin, agent, editor, viewer
configdelivery6admin, configDeliveryAdmin, configDeliveryViewer, resourceBundlePublisher, serviceAgent, viewer
connectors13admin, customConnectorAdmin, customConnectorViewer, endpointAttachmentAdmin, endpointAttachmentViewer, eventSubscriptionAdmin, eventSubscriptionViewer, invoker, listener, managedZoneAdmin, managedZoneViewer, serviceAgent, viewer
consumerprocurement9entitlementManager, entitlementViewer, eventsViewer, licensePoolEditor, licensePoolViewer, orderAdmin, orderViewer, procurementAdmin, procurementViewer
contactcenteraiplatform3admin, viewer, workforceSchedulingShiftGenerator
contactcenterinsights6admin, authorizedEditor, authorizedViewer, editor, serviceAgent, viewer
container12admin, cloudKmsKeyUser, clusterAdmin, clusterViewer, defaultNodeServiceAccount, defaultNodeServiceAgent, developer, editor, hostServiceAgentUser, nodeServiceAgent, serviceAgent, viewer
containeranalysis10ServiceAgent, admin, editor, notes.attacher, notes.editor, notes.occurrences.viewer, notes.viewer, occurrences.editor, occurrences.viewer, viewer
containerregistry1ServiceAgent
containerscanning1ServiceAgent
containersecurity2admin, viewer
containerthreatdetection1serviceAgent
contentwarehouse7admin, documentAdmin, documentCreator, documentEditor, documentSchemaViewer, documentViewer, serviceAgent
databasecenter2admin, viewer
databaseinsights8assistantViewer, eventsViewer, intelligenceViewer, monitoringViewer, operationsAdmin, recommendationViewer, viewer, virtualDbxViewer
databasesconsole4editor, studioQueryAdmin, studioQueryUser, viewer
datacatalog19admin, categoryAdmin, categoryFineGrainedReader, dataSteward, editor, entryGroupCreator, entryGroupOwner, entryOwner, entryViewer, glossaryOwner, glossaryUser, migrationConfigAdmin, searchAdmin, tagEditor, tagTemplateCreator, tagTemplateOwner, tagTemplateUser, tagTemplateViewer, viewer
dataconnectors6admin, connectorAdmin, connectorUser, editor, serviceAgent, viewer
dataflow5admin, developer, serviceAgent, viewer, worker
dataform15admin, codeCommenter, codeCreator, codeEditor, codeOwner, codeScheduler, codeViewer, editor, serviceAgent, teamFolderCommenter, teamFolderContributor, teamFolderCreator, teamFolderOwner, teamFolderViewer, viewer
datafusion7accessor, admin, developer, operator, runner, serviceAgent, viewer
datalabeling4admin, editor, serviceAgent, viewer
datalineage4admin, editor, producer, viewer
datamigration2admin, serviceAgent
datapipelines4admin, invoker, serviceAgent, viewer
dataplex45admin, aspectTypeOwner, aspectTypeUser, bindingAdmin, catalogAdmin, catalogEditor, catalogViewer, dataOwner, dataProductsAdmin, dataProductsConsumer, dataProductsEditor, dataProductsViewer, dataReader, dataScanAdmin, dataScanCreator, dataScanDataViewer, dataScanEditor, dataScanViewer, dataWriter, developer, discoveryBigLakePublishingServiceAgent, discoveryPublishingServiceAgent, discoveryServiceAgent, editor, encryptionAdmin, entryGroupExporter, entryGroupImporter, entryGroupOwner, entryOwner, entryTypeOwner, entryTypeUser, metadataFeedOwner, metadataFeedViewer, metadataJobOwner, metadataJobViewer, metadataReader, metadataWriter, securityAdmin, serviceAgent, storageDataOwner, storageDataReader, storageDataWriter, taxonomyAdmin, taxonomyViewer, viewer
dataprep3admin, projects.user, serviceAgent
dataproc9admin, editor, hubAgent, serverlessEditor, serverlessNode, serverlessViewer, serviceAgent, viewer, worker
dataprocessing4admin, dataSourceManager, editor, viewer
dataprocrm3admin, nodeServiceAgent, viewer
datastore17admin, backupSchedulesAdmin, backupSchedulesViewer, backupsAdmin, backupsViewer, bulkAdmin, cloneAdmin, editor, importExportAdmin, indexAdmin, keyVisualizerViewer, owner, restoreAdmin, user, userCredsAdmin, userCredsViewer, viewer
datastream4admin, bigqueryWriter, serviceAgent, viewer
datastudio8admin, contentManager, contributor, editor, manager, serviceAgent, viewer, workspaceViewer
dellemccloudonefs3admin, user, viewer
deploymentmanager4editor, typeEditor, typeViewer, viewer
designcenter8admin, applicationAdmin, applicationEditor, applicationViewer, editor, serviceAgent, user, viewer
developerconnect15admin, connectionHttpProxyWriter, editor, gitProxyReader, gitProxyUser, insightsAdmin, insightsAgent, insightsViewer, oauthAdmin, oauthUser, readTokenAccessor, serviceAgent, tokenAccessor, user, viewer
devicestreaming2admin, viewer
dialogflow22aamAdmin, aamConversationalArchitect, aamDialogDesigner, aamLeadDialogDesigner, aamViewer, admin, agentAssistClient, client, consoleAgentEditor, consoleSimulatorUser, consoleSmartMessagingAllowlistEditor, conversationManager, entityTypeAdmin, environmentEditor, flowEditor, integrationManager, intentAdmin, reader, serviceAgent, testCaseAdmin, viewer, webhookAdmin
discoveryengine17admin, agentAdmin, agentspaceAdmin, agentspaceEditor, agentspaceRestrictedUser, agentspaceUser, agentspaceViewer, editor, notebookEditor, notebookLmOwner, notebookLmUser, notebookOwner, notebookViewer, podcastApiUser, serviceAgent, user, viewer
dlp34admin, analyzeRiskTemplatesEditor, analyzeRiskTemplatesReader, columnDataProfilesReader, connectionsAdmin, connectionsReader, dataProfilesAdmin, dataProfilesReader, deidentifyTemplatesEditor, deidentifyTemplatesReader, editor, estimatesAdmin, fileStoreProfilesAdmin, fileStoreProfilesReader, inspectFindingsReader, inspectTemplatesEditor, inspectTemplatesReader, jobTriggersEditor, jobTriggersReader, jobsEditor, jobsReader, orgdriver, projectDataProfilesReader, projectdriver, reader, serviceAgent, storedInfoTypesEditor, storedInfoTypesReader, subscriptionsAdmin, subscriptionsReader, tableDataProfilesAdmin, tableDataProfilesReader, user, viewer
dns4admin, peer, reader, serviceAgent
documentai4admin, apiUser, editor, viewer
documentaicore1serviceAgent
domains3admin, editor, viewer
dspm3admin, serviceAgent, viewer
earth4admin, subscriptionsAdmin, subscriptionsViewer, viewer
earthengine4admin, appsPublisher, viewer, writer
edgecontainer22admin, apiKeyAdmin, apiKeyViewer, clusterServiceAgent, identityProviderAdmin, identityProviderViewer, machineUser, offlineCredentialUser, serviceAccountAdmin, serviceAccountKeyAdmin, serviceAccountKeyViewer, serviceAccountViewer, serviceAgent, viewer, zonalProjectAdmin, zonalProjectViewer, zonalServiceAdmin, zonalServiceViewer, zoneIamAdmin, zoneIamViewer, zoneRolesViewer, zoneViewer
edgenetwork3admin, editor, viewer
endpoints1serviceAgent
endpointsportal1serviceAgent
enterpriseknowledgegraph4admin, editor, serviceAgent, viewer
enterprisepurchasing3admin, editor, viewer
errorreporting4admin, user, viewer, writer
essentialcontacts2admin, viewer
eventarc11admin, connectionPublisher, developer, editor, eventReceiver, messageBusAdmin, messageBusUser, multiProjectEventCollector, publisher, serviceAgent, viewer
externalexposure1serviceAgent
file4admin, editor, serviceAgent, viewer
financialservices2admin, viewer
firebase15admin, analyticsAdmin, analyticsViewer, appDistributionSdkServiceAgent, developAdmin, developViewer, editor, growthAdmin, growthViewer, managementServiceAgent, qualityAdmin, qualityViewer, sdkAdminServiceAgent, sdkProvisioningServiceAgent, viewer
firebaseabt2admin, viewer
firebaseappcheck4admin, serviceAgent, tokenVerifier, viewer
firebaseappdistro2admin, viewer
firebaseapphosting5admin, computeRunner, developer, serviceAgent, viewer
firebaseauth2admin, viewer
firebasecloudmessaging1admin
firebasecrash1symbolMappingsAdmin
firebasecrashlytics3admin, serviceAgent, viewer
firebasedatabase3admin, serviceAgent, viewer
firebasedataconnect5admin, dataAdmin, dataViewer, serviceAgent, viewer
firebasedynamiclinks3admin, editor, viewer
firebaseextensions3developer, editor, viewer
firebaseextensionspublisher4admin, extensionsAdmin, extensionsViewer, viewer
firebasehosting2admin, viewer
firebaseinappmessaging2admin, viewer
firebasemessagingcampaigns2admin, viewer
firebaseml3admin, serviceAgent, viewer
firebasemods1serviceAgent
firebasenotifications2admin, viewer
firebaseperformance2admin, viewer
firebaserules4admin, firestoreServiceAgent, system, viewer
firebasestorage3admin, serviceAgent, viewer
firebasevertexai2admin, viewer
firestore1serviceAgent
firewallinsights1serviceAgent
fleetengine11consumerSdkUser, deliveryAdmin, deliveryConsumer, deliveryFleetReader, deliverySuperUser, deliveryTrustedDriver, deliveryUntrustedDriver, driverSdkUser, ondemandAdmin, serviceAgent, serviceSuperUser
gameservices1serviceAgent
gdchardwaremanagement3admin, operator, reader
geminicloudassist7investigationAdmin, investigationCreator, investigationEditor, investigationOwner, investigationUser, investigationViewer, user
geminicodeassistmanagement1serviceAgent
geminidataanalytics7dataAgentCreator, dataAgentEditor, dataAgentOwner, dataAgentStatelessUser, dataAgentUser, dataAgentViewer, queryDataUser
generativelanguage1serviceAgent
genomics5admin, editor, pipelinesRunner, serviceAgent, viewer
gkebackup8admin, backupAdmin, crossProjectServiceAgent, delegatedBackupAdmin, delegatedRestoreAdmin, restoreAdmin, serviceAgent, viewer
gkedataplanemanagement1warpRunServiceAgent
gkehub14admin, connect, crossProjectServiceAgent, editor, gatewayAdmin, gatewayEditor, gatewayReader, scopeAdmin, scopeEditor, scopeEditorProjectLevel, scopeViewer, scopeViewerProjectLevel, serviceAgent, viewer
gkemulticloud8admin, containerServiceAgent, controlPlaneMachineServiceAgent, editor, nodePoolMachineServiceAgent, serviceAgent, telemetryWriter, viewer
gkeonprem3admin, serviceAgent, viewer
gsuiteaddons5admin, developer, reader, tester, viewer
healthcare32annotationEditor, annotationReader, annotationStoreAdmin, annotationStoreViewer, attributeDefinitionEditor, attributeDefinitionReader, consentArtifactAdmin, consentArtifactEditor, consentArtifactReader, consentEditor, consentReader, consentStoreAdmin, consentStoreViewer, datasetAdmin, datasetViewer, dicomEditor, dicomStoreAdmin, dicomStoreViewer, dicomViewer, fhirResourceEditor, fhirResourceReader, fhirStoreAdmin, fhirStoreViewer, hl7V2Consumer, hl7V2Editor, hl7V2Ingest, hl7V2StoreAdmin, hl7V2StoreViewer, nlpServiceViewer, serviceAgent, userDataMappingEditor, userDataMappingReader
hypercomputecluster5admin, editor, serviceAgent, sharedVpcServiceAgent, viewer
iam46accessPolicyAdmin, accessPolicyUser, accessPolicyViewer, admin, dataScientist, databasesAdmin, denyAdmin, denyReviewer, devOps, editor, infrastructureAdmin, mlEngineer, networkAdmin, oauthClientAdmin, oauthClientViewer, operationViewer, organizationRoleAdmin, organizationRoleViewer, principalAccessBoundaryAdmin, principalAccessBoundaryUser, principalAccessBoundaryViewer, roleAdmin, roleViewer, scimSyncer, securityAdmin, securityAuditor, securityReviewer, serviceAccountAdmin, serviceAccountApiKeyBindingAdmin, serviceAccountCreator, serviceAccountDeleter, serviceAccountKeyAdmin, serviceAccountOpenIdTokenCreator, serviceAccountTokenCreator, serviceAccountUser, serviceAccountViewer, siteReliabilityEngineer, supportUser, viewer, workforcePoolAdmin, workforcePoolEditor, workforcePoolViewer, workloadIdentityPoolAdmin, workloadIdentityPoolViewer, workloadIdentityUser, workspacePoolAdmin
iap10admin, editor, egressor, httpsResourceAccessor, remediatorUser, settingsAdmin, tunnelDestGroupEditor, tunnelDestGroupViewer, tunnelResourceAccessor, viewer
identityplatform2admin, viewer
identitytoolkit3admin, serviceAgent, viewer
ids3admin, editor, viewer
integrations20admin, apigeeIntegrationAdminRole, apigeeIntegrationDeployerRole, apigeeIntegrationEditorRole, apigeeIntegrationInvokerRole, apigeeIntegrationsViewer, apigeeSuspensionResolver, certificateViewer, integrationAdmin, integrationDeployer, integrationEditor, integrationInvoker, integrationViewer, securityIntegrationAdmin, serviceAgent, sfdcInstanceAdmin, sfdcInstanceEditor, sfdcInstanceViewer, suspensionResolver, viewer
issuerswitch10accountManagerAdmin, accountManagerTransactionsAdmin, accountManagerTransactionsViewer, admin, issuerParticipantsAdmin, resolutionsAdmin, rulesAdmin, rulesViewer, transactionsViewer, viewer
krmapihosting5admin, anthosApiEndpointServiceAgent, editor, serviceAgent, viewer
kubernetesmetadata1publisher
kuberun2eventsControlPlaneServiceAgent, eventsDataPlaneServiceAgent
licensemanager2admin, viewer
lifesciences5admin, editor, serviceAgent, viewer, workflowsRunner
livestream4admin, editor, serviceAgent, viewer
logging11admin, bucketWriter, configWriter, fieldAccessor, linkViewer, logWriter, privateLogViewer, serviceAgent, sqlAlertWriter, viewAccessor, viewer
looker5admin, instanceUser, restrictedServiceAgent, serviceAgent, viewer
lookerstudio2lookerAdmin, proManager
lustre2admin, viewer
maintenance2admin, viewer
managedflink4admin, developer, serviceAgent, viewer
managedidentities10admin, backupAdmin, backupViewer, domainAdmin, domainJoin, editor, peeringAdmin, peeringViewer, serviceAgent, viewer
managedkafka14aclEditor, aclViewer, admin, client, clusterEditor, connectClusterEditor, connectorEditor, consumerGroupEditor, schemaRegistryAdmin, schemaRegistryEditor, schemaRegistryViewer, serviceAgent, topicEditor, viewer
mandiant10attackSurfaceManagementEditor, attackSurfaceManagementViewer, digitalThreatMonitoringEditor, digitalThreatMonitoringViewer, expertiseOnDemandEditor, expertiseOnDemandViewer, threatIntelEditor, threatIntelViewer, validationEditor, validationViewer
mapsadmin2admin, viewer
mapsanalytics3admin, mobilitySolutionsOverageViewer, viewer
mapsplatformdatasets2admin, viewer
marketplacesolutions3admin, editor, viewer
mcp2admin, toolUser
mediaasset1serviceAgent
memcache4admin, editor, serviceAgent, viewer
memorystore4admin, dbConnectionUser, serviceAgent, viewer
meshconfig3admin, serviceAgent, viewer
meshcontrolplane1serviceAgent
meshdataplane1serviceAgent
metastore14admin, editor, federationAccessor, metadataEditor, metadataMutateAdmin, metadataOperator, metadataOwner, metadataQueryAdmin, metadataUser, metadataViewer, migrationAdmin, serviceAgent, user, viewer
migrationcenter5admin, discoveryClient, discoveryClientRegistrator, serviceAgent, viewer
ml8admin, developer, jobOwner, modelOwner, modelUser, operationOwner, serviceAgent, viewer
modelarmor7admin, calloutUser, floorSettingsAdmin, floorSettingsViewer, serviceAgent, user, viewer
monitoring22admin, alertPolicyEditor, alertPolicyViewer, alertViewer, cloudConsoleIncidentEditor, cloudConsoleIncidentViewer, dashboardEditor, dashboardViewer, editor, metricWriter, metricsScopesAdmin, metricsScopesViewer, notificationChannelEditor, notificationChannelViewer, notificationServiceAgent, servicesEditor, servicesViewer, snoozeEditor, snoozeViewer, uptimeCheckConfigEditor, uptimeCheckConfigViewer, viewer
multiclusteringress1serviceAgent
multiclustermetering1serviceAgent
multiclusterservicediscovery1serviceAgent
nestconsole3homeDeveloperAdmin, homeDeveloperEditor, homeDeveloperViewer
netapp3admin, dataExporter, viewer
netappcloudvolumes2admin, viewer
networkactions1serviceAgent
networkconnectivity18consumerNetworkAdmin, editor, groupAdmin, groupUser, hubAdmin, hubViewer, multicloudDataTransferConfigAdmin, multicloudDataTransferConfigViewer, multicloudDataTransferDestinationAdmin, multicloudDataTransferDestinationViewer, regionalEndpointAdmin, regionalEndpointViewer, serviceAgent, serviceClassUser, serviceProducerAdmin, spokeAdmin, transportAdmin, transportViewer
networkmanagement7CloudNetworkInsightsAdmin, CloudNetworkInsightsEditor, CloudNetworkInsightsViewer, admin, editor, serviceAgent, viewer
networksecurity22admin, authzServiceAgent, dnsThreatDetectorAdmin, dnsThreatDetectorViewer, editor, firewallEndpointAdmin, interceptDeploymentAdmin, interceptDeploymentExternalUser, interceptDeploymentUser, interceptDeploymentViewer, interceptEndpointAdmin, interceptEndpointUser, interceptEndpointViewer, mirroringDeploymentAdmin, mirroringDeploymentExternalUser, mirroringDeploymentUser, mirroringDeploymentViewer, mirroringEndpointAdmin, mirroringEndpointUser, mirroringEndpointViewer, securityProfileAdmin, viewer
networkservices5admin, editor, serviceExtensionsAdmin, serviceExtensionsViewer, viewer
notebooks7admin, editor, legacyAdmin, legacyViewer, runner, serviceAgent, viewer
oauthconfig2editor, viewer
observability7admin, analyticsUser, editor, scopesEditor, serviceAgent, viewAccessor, viewer
oci1serviceAgent
ondemandscanning2admin, viewer
opsconfigmonitoring2resourceMetadata.viewer, resourceMetadata.writer
oracledatabase31admin, autonomousDatabaseAdmin, autonomousDatabaseViewer, cloudExadataInfrastructureAdmin, cloudExadataInfrastructureUser, cloudExadataInfrastructureViewer, cloudVmClusterAdmin, cloudVmClusterViewer, databaseViewer, dbSystemAdmin, dbSystemViewer, exadbVmClusterAdmin, exadbVmClusterViewer, exascaleDbStorageVaultAdmin, exascaleDbStorageVaultViewer, goldenGateConnectionAdmin, goldenGateConnectionAssignmentAdmin, goldenGateConnectionAssignmentViewer, goldenGateConnectionViewer, goldenGateConnectionsUser, goldenGateDeploymentAdmin, goldenGateDeploymentViewer, goldenGateDeploymentsUser, networkAdmin, odbNetworkAdmin, odbNetworkViewer, odbSubnetAdmin, odbSubnetUser, odbSubnetViewer, pluggableDatabaseViewer, viewer
orgpolicy2policyAdmin, policyViewer
osconfig23admin, guestPolicyAdmin, guestPolicyEditor, guestPolicyViewer, instanceOSPoliciesComplianceViewer, inventoryViewer, osPolicyAssignmentAdmin, osPolicyAssignmentEditor, osPolicyAssignmentReportViewer, osPolicyAssignmentViewer, patchDeploymentAdmin, patchDeploymentViewer, patchJobExecutor, patchJobViewer, policyOrchestratorAdmin, policyOrchestratorViewer, projectFeatureSettingsEditor, projectFeatureSettingsViewer, rolloutServiceAgent, serviceAgent, upgradeReportViewer, viewer, vulnerabilityReportViewer
parallelstore3admin, serviceAgent, viewer
parametermanager5admin, parameterAccessor, parameterVersionAdder, parameterVersionManager, parameterViewer
paymentsresellersubscription9admin, partnerAdmin, partnerViewer, productViewer, promotionViewer, subscriptionEditor, subscriptionViewer, userSessionEditor, viewer
policyanalyzer1activityAnalysisViewer
policyremediatormanager4admin, policyRemediatorAdmin, policyRemediatorReader, viewer
policysimulator2admin, orgPolicyAdmin
privateca10admin, auditor, caManager, certificateManager, certificateRequester, editor, poolReader, templateUser, viewer, workloadCertificateRequester
privilegedaccessmanager9admin, editor, folderServiceAgent, organizationServiceAgent, projectServiceAgent, serviceAgent, settingsAdmin, settingsViewer, viewer
progressiverollout1serviceAgent
project4owner, editor, viewer, browser
proximitybeacon7admin, attachmentEditor, attachmentPublisher, attachmentViewer, beaconEditor, editor, viewer
publicca1externalAccountKeyCreator
pubsub6admin, editor, publisher, serviceAgent, subscriber, viewer
pubsublite6admin, editor, publisher, serviceAgent, subscriber, viewer
rapidmigrationassessment1serviceAgent
readerrevenuesubscriptionlinking3admin, entitlementsViewer, viewer
recaptchaenterprise3admin, agent, viewer
recommender99admin, alloydbAdmin, alloydbViewer, bigQueryCapacityCommitmentsAdmin, bigQueryCapacityCommitmentsBillingAccountAdmin, bigQueryCapacityCommitmentsBillingAccountViewer, bigQueryCapacityCommitmentsProjectAdmin, bigQueryCapacityCommitmentsProjectViewer, bigQueryCapacityCommitmentsViewer, bigqueryMaterializedViewAdmin, bigqueryMaterializedViewViewer, bigqueryPartitionClusterAdmin, bigqueryPartitionClusterViewer, bigtableClusterPerformanceAdmin, bigtableClusterPerformanceViewer, billingAccountCudAdmin, billingAccountCudViewer, cloudAssetInsightsAdmin, cloudAssetInsightsViewer, cloudCostRecommendationAdmin, cloudCostRecommendationViewer, cloudDeprecationRecommendationAdmin, cloudDeprecationRecommendationViewer, cloudManageabilityRecommendationAdmin, cloudManageabilityRecommendationViewer, cloudPerformanceRecommendationAdmin, cloudPerformanceRecommendationViewer, cloudReliabilityRecommendationAdmin, cloudReliabilityRecommendationViewer, cloudSecurityRecommendationAdmin, cloudSecurityRecommendationViewer, cloudsqlAdmin, cloudsqlViewer, computeAdmin, computeViewer, containerDiagnosisAdmin, containerDiagnosisViewer, dataflowDiagnosticsAdmin, dataflowDiagnosticsViewer, editor, errorReportingAdmin, errorReportingViewer, exporter, firestoredatabasefirebaserulesAdmin, firestoredatabasefirebaserulesViewer, firestoredatabasereliabilityAdmin, firestoredatabasereliabilityViewer, firewallAdmin, firewallViewer, gmpAdmin, gmpViewer, iamAdmin, iamViewer, iampolicychangeriskAdmin, iampolicychangeriskViewer, memorystoremanageabilityAdmin, memorystoremanageabilityViewer, memorystoreperformanceAdmin, memorystoreperformanceViewer, memorystorereliabilityAdmin, memorystorereliabilityViewer, networkAnalyzerAdmin, networkAnalyzerCloudSqlAdmin, networkAnalyzerCloudSqlViewer, networkAnalyzerDynamicRouteAdmin, networkAnalyzerDynamicRouteViewer, networkAnalyzerGkeConnectivityAdmin, networkAnalyzerGkeConnectivityViewer, networkAnalyzerGkeIpAddressAdmin, networkAnalyzerGkeIpAddressViewer, networkAnalyzerGkeServiceAccountAdmin, networkAnalyzerGkeServiceAccountViewer, networkAnalyzerIpAddressAdmin, networkAnalyzerIpAddressViewer, networkAnalyzerLoadBalancerAdmin, networkAnalyzerLoadBalancerViewer, networkAnalyzerViewer, networkAnalyzerVpcConnectivityAdmin, networkAnalyzerVpcConnectivityViewer, orgPolicyAdmin, orgPolicyViewer, productSuggestionAdmin, productSuggestionViewer, projectCudAdmin, projectCudViewer, projectUtilAdmin, projectUtilViewer, recentChangeConfigAdmin, recentchangeriskAdmin, recentchangeriskViewer, serviceLimitAdmin, serviceLimitViewer, serviceaccntchangeriskAdmin, serviceaccntchangeriskViewer, spannerAdmin, spannerViewer, ucsAdmin, ucsViewer, viewer
redis5admin, dbConnectionUser, editor, serviceAgent, viewer
redisenterprisecloud2admin, viewer
remotebuildexecution13actionCacheWriter, admin, artifactAdmin, artifactCreator, artifactViewer, configurationAdmin, configurationViewer, editor, logstreamWriter, reservationAdmin, serviceAgent, viewer, worker
remotingcloud1serviceAgent
resourcemanager17folderAdmin, folderCreator, folderEditor, folderIamAdmin, folderMover, folderViewer, lienModifier, organizationAdmin, organizationViewer, projectCreator, projectDeleter, projectIamAdmin, projectMover, tagAdmin, tagHoldAdmin, tagUser, tagViewer
resourcesettings2admin, viewer
retail6admin, editor, merchantApprover, merchantCreator, serviceAgent, viewer
riscconfigs2admin, viewer
riskmanager5admin, editor, reviewer, serviceAgent, viewer
rma3admin, runner, viewer
roads2roadsSelectionAdmin, roadsSelectionViewer
routeoptimization4admin, editor, serviceAgent, viewer
run12admin, builder, developer, editor, invoker, jobsExecutor, jobsExecutorWithOverrides, serviceAgent, servicesInvoker, sourceDeveloper, sourceViewer, viewer
runapps4developer, operator, serviceAgent, viewer
runtimeconfig3admin, editor, viewer
saasservicemgmt3admin, serviceAgent, viewer
seclm1serviceAgent
secretmanager5admin, secretAccessor, secretVersionAdder, secretVersionManager, viewer
securedlandingzone6bqdwOrgRemediator, bqdwProjectRemediator, overwatchActivator, overwatchAdmin, overwatchViewer, serviceAgent
securesourcemanager15admin, developerConnectLinker, editor, instanceAccessor, instanceManager, instanceOwner, instanceRepositoryCreator, repoAdmin, repoCreator, repoPullRequestApprover, repoReader, repoWriter, serviceAgent, sshKeyUser, viewer
securitycenter45admin, adminEditor, adminViewer, assetSecurityMarksWriter, assetsDiscoveryRunner, assetsViewer, attackPathsViewer, attackSurfaceManagementScannerServiceAgent, automationServiceAgent, bigQueryExportsEditor, bigQueryExportsViewer, complianceReportsViewer, complianceSnapshotsViewer, controlServiceAgent, externalSystemsEditor, findingSecurityMarksWriter, findingsBulkMuteEditor, findingsEditor, findingsMuteSetter, findingsStateSetter, findingsViewer, findingsWorkflowStateSetter, integrationExecutorServiceAgent, issuesEditor, issuesViewer, muteConfigsEditor, muteConfigsViewer, notificationConfigEditor, notificationConfigViewer, notificationServiceAgent, resourceValueConfigsEditor, resourceValueConfigsViewer, riskReportsViewer, securityHealthAnalyticsCustomModulesTester, securityHealthAnalyticsServiceAgent, securityResponseServiceAgent, serviceAgent, settingsAdmin, settingsEditor, settingsViewer, simulationsViewer, sourcesAdmin, sourcesEditor, sourcesViewer, valuedResourcesViewer
securitycentermanagement13admin, customModulesEditor, customModulesViewer, editor, etdCustomModulesEditor, etdCustomModulesViewer, securityCenterServicesEditor, securityCenterServicesViewer, settingsEditor, settingsViewer, shaCustomModulesEditor, shaCustomModulesViewer, viewer
securityposture7admin, postureDeployer, postureDeploymentsViewer, postureEditor, postureViewer, reportCreator, viewer
servicebroker2admin, operator
serviceconsumermanagement4admin, tenancyUnitsAdmin, tenancyUnitsViewer, viewer
servicedirectory6admin, editor, networkAttacher, pscAuthorizedService, serviceAgent, viewer
servicehealth1viewer
servicemanagement8admin, checker, configEditor, quotaAdmin, quotaViewer, reporter, serviceConsumer, serviceController
servicenetworking5admin, editor, networksAdmin, serviceAgent, viewer
servicesecurityinsights1securityInsightsViewer
serviceusage5apiKeysAdmin, apiKeysViewer, serviceUsageAdmin, serviceUsageConsumer, serviceUsageViewer
source5admin, editor, reader, viewer, writer
sourcerepo1serviceAgent
spanner14admin, backupAdmin, backupWriter, databaseAdmin, databaseReader, databaseReaderWithDataBoost, databaseRoleUser, databaseUser, editor, fineGrainedAccessUser, graphIntelligenceUser, restoreAdmin, serviceAgent, viewer
speakerid4admin, editor, verifier, viewer
spectrumsas1serviceAgent
speech4admin, client, editor, serviceAgent
stackdriver5accounts.editor, accounts.viewer, admin, resourceMetadata.writer, viewer
storage20admin, annotationGeneratorService, bucketViewer, editor, expressModeServiceInput, expressModeServiceOutput, expressModeUserAccess, folderAdmin, hmacKeyAdmin, insightsCollectorService, legacyBucketOwner, legacyBucketReader, legacyBucketWriter, legacyObjectOwner, legacyObjectReader, objectAdmin, objectCreator, objectUser, objectViewer, viewer
storagebatchoperations2admin, viewer
storageinsights4admin, analyst, serviceAgent, viewer
storagetransfer5admin, serviceAgent, transferAgent, user, viewer
stream6admin, contentAdmin, contentBuilder, instanceAdmin, serviceAgent, viewer
subscribewithgoogledeveloper3admin, developer, viewer
telcoautomation6admin, blueprintDesigner, deploymentAdmin, opsAdminTier1, opsAdminTier4, serviceOrchestrator
telemetry11admin, consumerAdmin, editor, logsWriter, metricsWriter, serviceLogsWriter, serviceMetricsWriter, serviceTelemetryWriter, serviceTracesWriter, tracesWriter, writer
threatintelligence6alertAdmin, alertUser, ctemAdmin, ctemEditor, ctemProjectAdmin, ctemViewer
timeseriesinsights3datasetsEditor, datasetsOwner, datasetsViewer
tpu4admin, serviceAgent, viewer, xpnAgent
trafficdirector3admin, client, viewer
transcoder4admin, editor, serviceAgent, viewer
transferappliance2admin, viewer
translationhub2admin, portalUser
vectorsearch6admin, collectionWriter, dataObjectWriter, indexWriter, serviceAgent, viewer
videostitcher3admin, user, viewer
visionai41admin, analysisEditor, analysisViewer, annotationEditor, annotationViewer, applicationEditor, applicationViewer, assetCreator, assetEditor, assetViewer, clusterEditor, clusterViewer, corpusAdmin, corpusEditor, corpusViewer, corpusWriter, editor, eventEditor, eventViewer, indexEndpointAdmin, indexEndpointEditor, indexEndpointViewer, indexEndpointWriter, operatorEditor, operatorViewer, packetReceiver, packetSender, processorEditor, processorViewer, retailcatalogEditor, retailcatalogViewer, retailendpointEditor, retailendpointViewer, seriesEditor, seriesViewer, serviceAgent, streamEditor, streamViewer, uiStreamEditor, uiStreamViewer, viewer
visualinspection4editor, serviceAgent, usageMetricsReporter, viewer
vmmigration3admin, serviceAgent, viewer
vmwareengine7admin, editor, serviceAgent, viewer, vmwareengineAdmin, vmwareenginePrivilegedUser, vmwareengineViewer
vpcaccess4admin, serviceAgent, user, viewer
websecurityscanner1serviceAgent
workflows5admin, editor, invoker, serviceAgent, viewer
workloadcertificate5admin, registrationAdmin, registrationViewer, serviceAgent, viewer
workloadmanager10admin, deploymentAdmin, deploymentViewer, evaluationAdmin, evaluationViewer, insightWriter, serviceAgent, viewer, worker, workloadViewer
workstations9admin, editor, networkAdmin, operationViewer, policyAdmin, serviceAgent, user, workstationCreator, workstationLimitExemptedCreator