GCP Roles
- roles/accessapproval.approver
- roles/accessapproval.configEditor
- roles/accessapproval.invalidator
- roles/accessapproval.viewer
- roles/accesscontextmanager.gcpAccessAdmin
- roles/accesscontextmanager.gcpAccessReader
- roles/accesscontextmanager.policyAdmin
- roles/accesscontextmanager.policyEditor
- roles/accesscontextmanager.policyReader
- roles/accesscontextmanager.vpcScTroubleshooterViewer
- roles/actions.Admin
- roles/actions.Viewer
- roles/advisorynotifications.admin
- roles/advisorynotifications.viewer
- roles/aiplatform.admin
- roles/aiplatform.batchPredictionServiceAgent
- roles/aiplatform.colabEnterpriseAdmin
- roles/aiplatform.colabEnterpriseUser
- roles/aiplatform.colabServiceAgent
- roles/aiplatform.customCodeServiceAgent
- roles/aiplatform.entityTypeOwner
- roles/aiplatform.expressAdmin
- roles/aiplatform.expressUser
- roles/aiplatform.extensionCustomCodeServiceAgent
- roles/aiplatform.extensionServiceAgent
- roles/aiplatform.featurestoreAdmin
- roles/aiplatform.featurestoreDataViewer
- roles/aiplatform.featurestoreDataWriter
- roles/aiplatform.featurestoreInstanceCreator
- roles/aiplatform.featurestoreResourceViewer
- roles/aiplatform.featurestoreUser
- roles/aiplatform.migrator
- roles/aiplatform.modelMonitoringServiceAgent
- roles/aiplatform.notebookExecutorUser
- roles/aiplatform.notebookRuntimeAdmin
- roles/aiplatform.notebookRuntimeUser
- roles/aiplatform.notebookServiceAgent
- roles/aiplatform.onlinePredictionServiceAgent
- roles/aiplatform.provisionedThroughputAdmin
- roles/aiplatform.ragServiceAgent
- roles/aiplatform.rapidevalServiceAgent
- roles/aiplatform.reasoningEngineServiceAgent
- roles/aiplatform.serviceAgent
- roles/aiplatform.tensorboardWebAppUser
- roles/aiplatform.tuningServiceAgent
- roles/aiplatform.user
- roles/aiplatform.viewer
- roles/alloydb.admin
- roles/alloydb.client
- roles/alloydb.databaseUser
- roles/alloydb.serviceAgent
- roles/alloydb.viewer
- roles/analyticshub.admin
- roles/analyticshub.listingAdmin
- roles/analyticshub.publisher
- roles/analyticshub.subscriber
- roles/analyticshub.subscriptionOwner
- roles/analyticshub.viewer
- roles/androidmanagement.user
- roles/anthos.serviceAgent
- roles/anthosaudit.serviceAgent
- roles/anthosconfigmanagement.serviceAgent
- roles/anthosidentityservice.serviceAgent
- roles/anthospolicycontroller.serviceAgent
- roles/anthosservicemesh.serviceAgent
- roles/anthossupport.serviceAgent
- roles/apigateway.admin
- roles/apigateway.serviceAgent
- roles/apigateway.viewer
- roles/apigateway_management.serviceAgent
- roles/apigee.admin
- roles/apigee.analyticsAgent
- roles/apigee.analyticsEditor
- roles/apigee.analyticsViewer
- roles/apigee.apiAdminV2
- roles/apigee.apiReaderV2
- roles/apigee.deploymentInvoker
- roles/apigee.developerAdmin
- roles/apigee.environmentAdmin
- roles/apigee.monetizationAdmin
- roles/apigee.portalAdmin
- roles/apigee.readOnlyAdmin
- roles/apigee.runtimeAgent
- roles/apigee.securityAdmin
- roles/apigee.securityViewer
- roles/apigee.serviceAgent
- roles/apigee.synchronizerManager
- roles/apigeeconnect.Admin
- roles/apigeeconnect.Agent
- roles/apigeeregistry.admin
- roles/apigeeregistry.editor
- roles/apigeeregistry.viewer
- roles/apigeeregistry.worker
- roles/apihub.admin
- roles/apihub.attributeAdmin
- roles/apihub.editor
- roles/apihub.pluginAdmin
- roles/apihub.provisioningAdmin
- roles/apihub.runtimeProjectServiceAgent
- roles/apihub.viewer
- roles/apim.admin
- roles/apim.apiDiscoveryServiceAgent
- roles/apim.viewer
- roles/appdevelopmentexperience.serviceAgent
- roles/appengine.appAdmin
- roles/appengine.appCreator
- roles/appengine.appViewer
- roles/appengine.codeViewer
- roles/appengine.debugger
- roles/appengine.deployer
- roles/appengine.memcacheDataAdmin
- roles/appengine.serviceAdmin
- roles/appengine.serviceAgent
- roles/appengineflex.serviceAgent
- roles/apphub.admin
- roles/apphub.editor
- roles/apphub.viewer
- roles/applianceactivation.approver
- roles/applianceactivation.client
- roles/applianceactivation.troubleshooter
- roles/artifactregistry.admin
- roles/artifactregistry.containerRegistryMigrationAdmin
- roles/artifactregistry.createOnPushRepoAdmin
- roles/artifactregistry.createOnPushWriter
- roles/artifactregistry.reader
- roles/artifactregistry.repoAdmin
- roles/artifactregistry.serviceAgent
- roles/artifactregistry.writer
- roles/assuredoss.admin
- roles/assuredoss.projectAdmin
- roles/assuredoss.reader
- roles/assuredoss.user
- roles/assuredworkloads.admin
- roles/assuredworkloads.editor
- roles/assuredworkloads.monitoringServiceAgent
- roles/assuredworkloads.reader
- roles/assuredworkloads.serviceAgent
- roles/auditmanager.admin
- roles/auditmanager.auditor
- roles/auditmanager.ccfAdmin
- roles/auditmanager.ccfViewer
- roles/auditmanager.serviceAgent
- roles/automl.admin
- roles/automl.editor
- roles/automl.predictor
- roles/automl.serviceAgent
- roles/automl.viewer
- roles/automlrecommendations.admin
- roles/automlrecommendations.adminViewer
- roles/automlrecommendations.editor
- roles/automlrecommendations.serviceAgent
- roles/automlrecommendations.viewer
- roles/autoscaling.metricsWriter
- roles/autoscaling.recommendationsReader
- roles/autoscaling.sitesAdmin
- roles/autoscaling.stateWriter
- roles/axt.admin
- roles/backupdr.admin
- roles/backupdr.backupConfigViewer
- roles/backupdr.backupUser
- roles/backupdr.backupvaultAccessor
- roles/backupdr.backupvaultAdmin
- roles/backupdr.backupvaultLister
- roles/backupdr.backupvaultViewer
- roles/backupdr.cloudStorageOperator
- roles/backupdr.computeEngineOperator
- roles/backupdr.managementServerAccessor
- roles/backupdr.mountUser
- roles/backupdr.restoreUser
- roles/backupdr.serviceAgent
- roles/backupdr.user
- roles/backupdr.userv2
- roles/backupdr.viewer
- roles/baremetalsolution.admin
- roles/baremetalsolution.editor
- roles/baremetalsolution.instancesadmin
- roles/baremetalsolution.instancesviewer
- roles/baremetalsolution.lunsadmin
- roles/baremetalsolution.lunsviewer
- roles/baremetalsolution.maintenanceeventsadmin
- roles/baremetalsolution.maintenanceeventseditor
- roles/baremetalsolution.maintenanceeventsviewer
- roles/baremetalsolution.networksadmin
- roles/baremetalsolution.nfssharesadmin
- roles/baremetalsolution.nfsshareseditor
- roles/baremetalsolution.nfssharesviewer
- roles/baremetalsolution.osimagesviewer
- roles/baremetalsolution.procurementsadmin
- roles/baremetalsolution.procurementseditor
- roles/baremetalsolution.procurementsviewer
- roles/baremetalsolution.serviceAgent
- roles/baremetalsolution.storageadmin
- roles/baremetalsolution.viewer
- roles/baremetalsolution.volumesadmin
- roles/baremetalsolution.volumeseditor
- roles/baremetalsolution.volumesnapshotsadmin
- roles/baremetalsolution.volumesnapshotseditor
- roles/baremetalsolution.volumesnapshotsviewer
- roles/baremetalsolution.volumessviewer
- roles/batch.admin
- roles/batch.agentReporter
- roles/batch.jobsEditor
- roles/batch.jobsViewer
- roles/batch.resourceAllowancesEditor
- roles/batch.resourceAllowancesViewer
- roles/batch.serviceAgent
- roles/beyondcorp.admin
- roles/beyondcorp.clientConnectorAdmin
- roles/beyondcorp.clientConnectorServiceUser
- roles/beyondcorp.clientConnectorViewer
- roles/beyondcorp.partnerServiceDelegateAdmin
- roles/beyondcorp.partnerServiceDelegateViewer
- roles/beyondcorp.subscriptionAdmin
- roles/beyondcorp.subscriptionViewer
- roles/beyondcorp.viewer
- roles/biglake.admin
- roles/biglake.viewer
- roles/bigquery.admin
- roles/bigquery.connectionAdmin
- roles/bigquery.connectionUser
- roles/bigquery.dataEditor
- roles/bigquery.dataOwner
- roles/bigquery.dataViewer
- roles/bigquery.filteredDataViewer
- roles/bigquery.jobUser
- roles/bigquery.metadataViewer
- roles/bigquery.readSessionUser
- roles/bigquery.resourceAdmin
- roles/bigquery.resourceEditor
- roles/bigquery.resourceViewer
- roles/bigquery.studioAdmin
- roles/bigquery.studioUser
- roles/bigquery.user
- roles/bigqueryconnection.serviceAgent
- roles/bigquerycontinuousquery.serviceAgent
- roles/bigquerydatapolicy.admin
- roles/bigquerydatapolicy.maskedReader
- roles/bigquerydatapolicy.rawDataReader
- roles/bigquerydatapolicy.viewer
- roles/bigquerydatatransfer.serviceAgent
- roles/bigquerymigration.editor
- roles/bigquerymigration.orchestrator
- roles/bigquerymigration.translationUser
- roles/bigquerymigration.viewer
- roles/bigquerymigration.worker
- roles/bigqueryomni.serviceAgent
- roles/bigqueryspark.serviceAgent
- roles/bigtable.admin
- roles/bigtable.reader
- roles/bigtable.user
- roles/bigtable.viewer
- roles/billing.admin
- roles/billing.carbonViewer
- roles/billing.costsManager
- roles/billing.creator
- roles/billing.projectManager
- roles/billing.user
- roles/billing.viewer
- roles/binaryauthorization.attestorsAdmin
- roles/binaryauthorization.attestorsEditor
- roles/binaryauthorization.attestorsVerifier
- roles/binaryauthorization.attestorsViewer
- roles/binaryauthorization.policyAdmin
- roles/binaryauthorization.policyEditor
- roles/binaryauthorization.policyEvaluator
- roles/binaryauthorization.policyViewer
- roles/binaryauthorization.serviceAgent
- roles/blockchainnodeengine.admin
- roles/blockchainnodeengine.serviceAgent
- roles/blockchainnodeengine.viewer
- roles/blockchainvalidatormanager.admin
- roles/blockchainvalidatormanager.viewer
- roles/browser
- roles/capacityplanner.viewer
- roles/carestudio.viewer
- roles/certificatemanager.editor
- roles/certificatemanager.owner
- roles/certificatemanager.serviceAgent
- roles/certificatemanager.viewer
- roles/chat.owner
- roles/chat.reader
- roles/chronicle.admin
- roles/chronicle.editor
- roles/chronicle.globalDataAccess
- roles/chronicle.limitedViewer
- roles/chronicle.restrictedDataAccess
- roles/chronicle.restrictedDataAccessViewer
- roles/chronicle.serviceAgent
- roles/chronicle.soarAdmin
- roles/chronicle.soarServiceAgent
- roles/chronicle.soarThreatManager
- roles/chronicle.soarVulnerabilityManager
- roles/chronicle.viewer
- roles/chroniclesm.admin
- roles/chroniclesm.viewer
- roles/ciem.serviceAgent
- roles/cloud.locationReader
- roles/cloudaicompanion.codeRepositoryIndexesAdmin
- roles/cloudaicompanion.codeRepositoryIndexesViewer
- roles/cloudaicompanion.repositoryGroupsUser
- roles/cloudaicompanion.serviceAgent
- roles/cloudaicompanion.user
- roles/cloudasset.effectivePolicyServiceAgent
- roles/cloudasset.owner
- roles/cloudasset.serviceAgent
- roles/cloudasset.viewer
- roles/cloudbuild.builds.approver
- roles/cloudbuild.builds.builder
- roles/cloudbuild.builds.editor
- roles/cloudbuild.builds.viewer
- roles/cloudbuild.connectionAdmin
- roles/cloudbuild.connectionViewer
- roles/cloudbuild.integrationsEditor
- roles/cloudbuild.integrationsOwner
- roles/cloudbuild.integrationsViewer
- roles/cloudbuild.loggingServiceAgent
- roles/cloudbuild.readTokenAccessor
- roles/cloudbuild.serviceAgent
- roles/cloudbuild.tokenAccessor
- roles/cloudbuild.workerPoolEditor
- roles/cloudbuild.workerPoolOwner
- roles/cloudbuild.workerPoolUser
- roles/cloudbuild.workerPoolViewer
- roles/cloudconfig.admin
- roles/cloudconfig.serviceAgent
- roles/cloudconfig.viewer
- roles/cloudcontrolspartner.accessApprovalServiceAgent
- roles/cloudcontrolspartner.admin
- roles/cloudcontrolspartner.editor
- roles/cloudcontrolspartner.ekmServiceAgent
- roles/cloudcontrolspartner.inspectabilityReader
- roles/cloudcontrolspartner.monitoringReader
- roles/cloudcontrolspartner.monitoringServiceAgent
- roles/cloudcontrolspartner.reader
- roles/cloudcontrolspartner.supportCaseServiceAgent
- roles/clouddebugger.agent
- roles/clouddebugger.user
- roles/clouddeploy.admin
- roles/clouddeploy.approver
- roles/clouddeploy.customTargetTypeAdmin
- roles/clouddeploy.developer
- roles/clouddeploy.jobRunner
- roles/clouddeploy.operator
- roles/clouddeploy.policyAdmin
- roles/clouddeploy.policyOverrider
- roles/clouddeploy.releaser
- roles/clouddeploy.serviceAgent
- roles/clouddeploy.viewer
- roles/clouddeploymentmanager.serviceAgent
- roles/cloudfunctions.admin
- roles/cloudfunctions.developer
- roles/cloudfunctions.invoker
- roles/cloudfunctions.serviceAgent
- roles/cloudfunctions.viewer
- roles/cloudiot.serviceAgent
- roles/cloudjobdiscovery.admin
- roles/cloudjobdiscovery.jobsEditor
- roles/cloudjobdiscovery.jobsViewer
- roles/cloudjobdiscovery.profilesEditor
- roles/cloudjobdiscovery.profilesViewer
- roles/cloudkms.admin
- roles/cloudkms.autokeyAdmin
- roles/cloudkms.autokeyUser
- roles/cloudkms.cryptoKeyDecrypter
- roles/cloudkms.cryptoKeyDecrypterViaDelegation
- roles/cloudkms.cryptoKeyEncrypter
- roles/cloudkms.cryptoKeyEncrypterDecrypter
- roles/cloudkms.cryptoKeyEncrypterDecrypterViaDelegation
- roles/cloudkms.cryptoKeyEncrypterViaDelegation
- roles/cloudkms.cryptoOperator
- roles/cloudkms.ekmConnectionsAdmin
- roles/cloudkms.expertRawAesCbc
- roles/cloudkms.expertRawAesCtr
- roles/cloudkms.expertRawPKCS1
- roles/cloudkms.importer
- roles/cloudkms.orgServiceAgent
- roles/cloudkms.protectedResourcesViewer
- roles/cloudkms.publicKeyViewer
- roles/cloudkms.serviceAgent
- roles/cloudkms.signer
- roles/cloudkms.signerVerifier
- roles/cloudkms.verifier
- roles/cloudkms.viewer
- roles/cloudkmskacls.serviceAgent
- roles/cloudmigration.inframanager
- roles/cloudmigration.storageaccess
- roles/cloudmigration.velostrataconnect
- roles/cloudoptimization.admin
- roles/cloudoptimization.editor
- roles/cloudoptimization.serviceAgent
- roles/cloudoptimization.viewer
- roles/cloudprivatecatalog.consumer
- roles/cloudprivatecatalogproducer.admin
- roles/cloudprivatecatalogproducer.manager
- roles/cloudprivatecatalogproducer.orgAdmin
- roles/cloudprofiler.agent
- roles/cloudprofiler.user
- roles/cloudquotas.admin
- roles/cloudquotas.viewer
- roles/cloudscheduler.admin
- roles/cloudscheduler.jobRunner
- roles/cloudscheduler.serviceAgent
- roles/cloudscheduler.viewer
- roles/cloudsecurityscanner.editor
- roles/cloudsecurityscanner.runner
- roles/cloudsecurityscanner.viewer
- roles/cloudsql.admin
- roles/cloudsql.client
- roles/cloudsql.editor
- roles/cloudsql.instanceUser
- roles/cloudsql.schemaViewer
- roles/cloudsql.serviceAgent
- roles/cloudsql.studioUser
- roles/cloudsql.viewer
- roles/cloudsupport.admin
- roles/cloudsupport.techSupportEditor
- roles/cloudsupport.techSupportViewer
- roles/cloudsupport.viewer
- roles/cloudtasks.admin
- roles/cloudtasks.enqueuer
- roles/cloudtasks.queueAdmin
- roles/cloudtasks.serviceAgent
- roles/cloudtasks.taskDeleter
- roles/cloudtasks.taskRunner
- roles/cloudtasks.viewer
- roles/cloudtestservice.directAccessAdmin
- roles/cloudtestservice.directAccessViewer
- roles/cloudtestservice.testAdmin
- roles/cloudtestservice.testViewer
- roles/cloudtpu.serviceAgent
- roles/cloudtrace.admin
- roles/cloudtrace.agent
- roles/cloudtrace.user
- roles/cloudtranslate.admin
- roles/cloudtranslate.editor
- roles/cloudtranslate.serviceAgent
- roles/cloudtranslate.user
- roles/cloudtranslate.viewer
- roles/commerceagreementpublishing.admin
- roles/commerceagreementpublishing.viewer
- roles/commercebusinessenablement.admin
- roles/commercebusinessenablement.paymentConfigAdmin
- roles/commercebusinessenablement.paymentConfigViewer
- roles/commercebusinessenablement.rebatesAdmin
- roles/commercebusinessenablement.rebatesViewer
- roles/commercebusinessenablement.resellerDiscountAdmin
- roles/commercebusinessenablement.resellerDiscountViewer
- roles/commercebusinessenablement.viewer
- roles/commerceoffercatalog.offersViewer
- roles/commerceorggovernance.admin
- roles/commerceorggovernance.user
- roles/commerceorggovernance.viewer
- roles/commercepricemanagement.eventsViewer
- roles/commercepricemanagement.privateOffersAdmin
- roles/commercepricemanagement.viewer
- roles/commerceproducer.admin
- roles/commerceproducer.viewer
- roles/compliancescanning.serviceAgent
- roles/composer.ServiceAgentV2Ext
- roles/composer.admin
- roles/composer.environmentAndStorageObjectAdmin
- roles/composer.environmentAndStorageObjectUser
- roles/composer.environmentAndStorageObjectViewer
- roles/composer.serviceAgent
- roles/composer.sharedVpcAgent
- roles/composer.user
- roles/composer.worker
- roles/compute.admin
- roles/compute.futureReservationAdmin
- roles/compute.futureReservationUser
- roles/compute.futureReservationViewer
- roles/compute.imageUser
- roles/compute.instanceAdmin
- roles/compute.instanceAdmin.v1
- roles/compute.instanceGroupManagerServiceAgent
- roles/compute.loadBalancerAdmin
- roles/compute.loadBalancerServiceUser
- roles/compute.networkAdmin
- roles/compute.networkUser
- roles/compute.networkViewer
- roles/compute.orgFirewallPolicyAdmin
- roles/compute.orgFirewallPolicyUser
- roles/compute.orgSecurityPolicyAdmin
- roles/compute.orgSecurityPolicyUser
- roles/compute.orgSecurityResourceAdmin
- roles/compute.osAdminLogin
- roles/compute.osLogin
- roles/compute.osLoginExternalUser
- roles/compute.packetMirroringAdmin
- roles/compute.packetMirroringUser
- roles/compute.peerSubnetMigrationAdmin
- roles/compute.publicIpAdmin
- roles/compute.securityAdmin
- roles/compute.serviceAgent
- roles/compute.soleTenantViewer
- roles/compute.storageAdmin
- roles/compute.viewer
- roles/compute.xpnAdmin
- roles/confidentialcomputing.workloadUser
- roles/config.admin
- roles/config.agent
- roles/config.viewer
- roles/configdelivery.configDeliveryAdmin
- roles/configdelivery.configDeliveryViewer
- roles/configdelivery.resourceBundlePublisher
- roles/configdelivery.serviceAgent
- roles/connectors.admin
- roles/connectors.customConnectorAdmin
- roles/connectors.customConnectorViewer
- roles/connectors.endpointAttachmentAdmin
- roles/connectors.endpointAttachmentViewer
- roles/connectors.eventSubscriptionAdmin
- roles/connectors.eventSubscriptionViewer
- roles/connectors.invoker
- roles/connectors.listener
- roles/connectors.managedZoneAdmin
- roles/connectors.managedZoneViewer
- roles/connectors.serviceAgent
- roles/connectors.viewer
- roles/consumerprocurement.entitlementManager
- roles/consumerprocurement.entitlementViewer
- roles/consumerprocurement.eventsViewer
- roles/consumerprocurement.licensePoolEditor
- roles/consumerprocurement.licensePoolViewer
- roles/consumerprocurement.orderAdmin
- roles/consumerprocurement.orderViewer
- roles/consumerprocurement.procurementAdmin
- roles/consumerprocurement.procurementViewer
- roles/contactcenteraiplatform.admin
- roles/contactcenteraiplatform.viewer
- roles/contactcenterinsights.editor
- roles/contactcenterinsights.serviceAgent
- roles/contactcenterinsights.viewer
- roles/container.admin
- roles/container.cloudKmsKeyUser
- roles/container.clusterAdmin
- roles/container.clusterViewer
- roles/container.defaultNodeServiceAccount
- roles/container.developer
- roles/container.hostServiceAgentUser
- roles/container.nodeServiceAgent
- roles/container.serviceAgent
- roles/container.viewer
- roles/containeranalysis.ServiceAgent
- roles/containeranalysis.admin
- roles/containeranalysis.notes.attacher
- roles/containeranalysis.notes.editor
- roles/containeranalysis.notes.occurrences.viewer
- roles/containeranalysis.notes.viewer
- roles/containeranalysis.occurrences.editor
- roles/containeranalysis.occurrences.viewer
- roles/containerregistry.ServiceAgent
- roles/containerscanning.ServiceAgent
- roles/containersecurity.viewer
- roles/containerthreatdetection.serviceAgent
- roles/contentwarehouse.admin
- roles/contentwarehouse.documentAdmin
- roles/contentwarehouse.documentCreator
- roles/contentwarehouse.documentEditor
- roles/contentwarehouse.documentSchemaViewer
- roles/contentwarehouse.documentViewer
- roles/contentwarehouse.serviceAgent
- roles/databasecenter.viewer
- roles/databaseinsights.eventsViewer
- roles/databaseinsights.monitoringViewer
- roles/databaseinsights.operationsAdmin
- roles/databaseinsights.recommendationViewer
- roles/databaseinsights.viewer
- roles/datacatalog.admin
- roles/datacatalog.categoryAdmin
- roles/datacatalog.categoryFineGrainedReader
- roles/datacatalog.dataSteward
- roles/datacatalog.entryGroupCreator
- roles/datacatalog.entryGroupOwner
- roles/datacatalog.entryOwner
- roles/datacatalog.entryViewer
- roles/datacatalog.glossaryOwner
- roles/datacatalog.glossaryUser
- roles/datacatalog.migrationConfigAdmin
- roles/datacatalog.searchAdmin
- roles/datacatalog.tagEditor
- roles/datacatalog.tagTemplateCreator
- roles/datacatalog.tagTemplateOwner
- roles/datacatalog.tagTemplateUser
- roles/datacatalog.tagTemplateViewer
- roles/datacatalog.viewer
- roles/dataconnectors.connectorAdmin
- roles/dataconnectors.connectorUser
- roles/dataconnectors.serviceAgent
- roles/dataflow.admin
- roles/dataflow.developer
- roles/dataflow.serviceAgent
- roles/dataflow.viewer
- roles/dataflow.worker
- roles/dataform.admin
- roles/dataform.codeCommenter
- roles/dataform.codeCreator
- roles/dataform.codeEditor
- roles/dataform.codeOwner
- roles/dataform.codeViewer
- roles/dataform.editor
- roles/dataform.serviceAgent
- roles/dataform.viewer
- roles/datafusion.accessor
- roles/datafusion.admin
- roles/datafusion.developer
- roles/datafusion.operator
- roles/datafusion.runner
- roles/datafusion.serviceAgent
- roles/datafusion.viewer
- roles/datalabeling.admin
- roles/datalabeling.editor
- roles/datalabeling.serviceAgent
- roles/datalabeling.viewer
- roles/datalineage.admin
- roles/datalineage.editor
- roles/datalineage.producer
- roles/datalineage.viewer
- roles/datamigration.admin
- roles/datamigration.serviceAgent
- roles/datapipelines.admin
- roles/datapipelines.invoker
- roles/datapipelines.serviceAgent
- roles/datapipelines.viewer
- roles/dataplex.admin
- roles/dataplex.aspectTypeOwner
- roles/dataplex.aspectTypeUser
- roles/dataplex.bindingAdmin
- roles/dataplex.catalogAdmin
- roles/dataplex.catalogEditor
- roles/dataplex.catalogViewer
- roles/dataplex.dataOwner
- roles/dataplex.dataReader
- roles/dataplex.dataScanAdmin
- roles/dataplex.dataScanCreator
- roles/dataplex.dataScanDataViewer
- roles/dataplex.dataScanEditor
- roles/dataplex.dataScanViewer
- roles/dataplex.dataWriter
- roles/dataplex.developer
- roles/dataplex.discoveryBigLakePublishingServiceAgent
- roles/dataplex.discoveryPublishingServiceAgent
- roles/dataplex.discoveryServiceAgent
- roles/dataplex.editor
- roles/dataplex.encryptionAdmin
- roles/dataplex.entryGroupExporter
- roles/dataplex.entryGroupImporter
- roles/dataplex.entryGroupOwner
- roles/dataplex.entryOwner
- roles/dataplex.entryTypeOwner
- roles/dataplex.entryTypeUser
- roles/dataplex.metadataJobOwner
- roles/dataplex.metadataJobViewer
- roles/dataplex.metadataReader
- roles/dataplex.metadataWriter
- roles/dataplex.securityAdmin
- roles/dataplex.serviceAgent
- roles/dataplex.storageDataOwner
- roles/dataplex.storageDataReader
- roles/dataplex.storageDataWriter
- roles/dataplex.taxonomyAdmin
- roles/dataplex.taxonomyViewer
- roles/dataplex.viewer
- roles/dataprep.projects.user
- roles/dataprep.serviceAgent
- roles/dataproc.admin
- roles/dataproc.editor
- roles/dataproc.hubAgent
- roles/dataproc.serverlessEditor
- roles/dataproc.serverlessNode
- roles/dataproc.serverlessViewer
- roles/dataproc.serviceAgent
- roles/dataproc.viewer
- roles/dataproc.worker
- roles/dataprocessing.admin
- roles/dataprocessing.dataSourceManager
- roles/dataprocrm.admin
- roles/dataprocrm.nodeServiceAgent
- roles/dataprocrm.viewer
- roles/datastore.backupSchedulesAdmin
- roles/datastore.backupSchedulesViewer
- roles/datastore.backupsAdmin
- roles/datastore.backupsViewer
- roles/datastore.bulkAdmin
- roles/datastore.importExportAdmin
- roles/datastore.indexAdmin
- roles/datastore.keyVisualizerViewer
- roles/datastore.owner
- roles/datastore.restoreAdmin
- roles/datastore.user
- roles/datastore.viewer
- roles/datastream.admin
- roles/datastream.serviceAgent
- roles/datastream.viewer
- roles/datastudio.admin
- roles/datastudio.contentManager
- roles/datastudio.contributor
- roles/datastudio.editor
- roles/datastudio.manager
- roles/datastudio.serviceAgent
- roles/datastudio.viewer
- roles/datastudio.workspaceViewer
- roles/dellemccloudonefs.admin
- roles/dellemccloudonefs.user
- roles/dellemccloudonefs.viewer
- roles/deploymentmanager.editor
- roles/deploymentmanager.typeEditor
- roles/deploymentmanager.typeViewer
- roles/deploymentmanager.viewer
- roles/designcenter.serviceAgent
- roles/developerconnect.admin
- roles/developerconnect.readTokenAccessor
- roles/developerconnect.tokenAccessor
- roles/developerconnect.user
- roles/developerconnect.viewer
- roles/dialogflow.aamAdmin
- roles/dialogflow.aamConversationalArchitect
- roles/dialogflow.aamDialogDesigner
- roles/dialogflow.aamLeadDialogDesigner
- roles/dialogflow.aamViewer
- roles/dialogflow.admin
- roles/dialogflow.agentAssistClient
- roles/dialogflow.client
- roles/dialogflow.consoleAgentEditor
- roles/dialogflow.consoleSimulatorUser
- roles/dialogflow.consoleSmartMessagingAllowlistEditor
- roles/dialogflow.conversationManager
- roles/dialogflow.entityTypeAdmin
- roles/dialogflow.environmentEditor
- roles/dialogflow.flowEditor
- roles/dialogflow.integrationManager
- roles/dialogflow.intentAdmin
- roles/dialogflow.reader
- roles/dialogflow.serviceAgent
- roles/dialogflow.testCaseAdmin
- roles/dialogflow.webhookAdmin
- roles/discoveryengine.admin
- roles/discoveryengine.editor
- roles/discoveryengine.serviceAgent
- roles/discoveryengine.user
- roles/discoveryengine.viewer
- roles/dlp.admin
- roles/dlp.analyzeRiskTemplatesEditor
- roles/dlp.analyzeRiskTemplatesReader
- roles/dlp.columnDataProfilesReader
- roles/dlp.connectionsAdmin
- roles/dlp.connectionsReader
- roles/dlp.dataProfilesAdmin
- roles/dlp.dataProfilesReader
- roles/dlp.deidentifyTemplatesEditor
- roles/dlp.deidentifyTemplatesReader
- roles/dlp.estimatesAdmin
- roles/dlp.fileStoreProfilesAdmin
- roles/dlp.fileStoreProfilesReader
- roles/dlp.inspectFindingsReader
- roles/dlp.inspectTemplatesEditor
- roles/dlp.inspectTemplatesReader
- roles/dlp.jobTriggersEditor
- roles/dlp.jobTriggersReader
- roles/dlp.jobsEditor
- roles/dlp.jobsReader
- roles/dlp.orgdriver
- roles/dlp.projectDataProfilesReader
- roles/dlp.projectdriver
- roles/dlp.reader
- roles/dlp.serviceAgent
- roles/dlp.storedInfoTypesEditor
- roles/dlp.storedInfoTypesReader
- roles/dlp.subscriptionsAdmin
- roles/dlp.subscriptionsReader
- roles/dlp.tableDataProfilesAdmin
- roles/dlp.tableDataProfilesReader
- roles/dlp.user
- roles/dns.admin
- roles/dns.peer
- roles/dns.reader
- roles/dns.serviceAgent
- roles/documentai.admin
- roles/documentai.apiUser
- roles/documentai.editor
- roles/documentai.viewer
- roles/documentaicore.serviceAgent
- roles/domains.admin
- roles/domains.viewer
- roles/dspm.serviceAgent
- roles/earthengine.admin
- roles/earthengine.appsPublisher
- roles/earthengine.viewer
- roles/earthengine.writer
- roles/edgecontainer.admin
- roles/edgecontainer.clusterServiceAgent
- roles/edgecontainer.machineUser
- roles/edgecontainer.offlineCredentialUser
- roles/edgecontainer.serviceAgent
- roles/edgecontainer.viewer
- roles/edgenetwork.admin
- roles/edgenetwork.viewer
- roles/editor
- roles/endpoints.serviceAgent
- roles/endpointsportal.serviceAgent
- roles/enterpriseknowledgegraph.admin
- roles/enterpriseknowledgegraph.editor
- roles/enterpriseknowledgegraph.serviceAgent
- roles/enterpriseknowledgegraph.viewer
- roles/enterprisepurchasing.admin
- roles/enterprisepurchasing.editor
- roles/enterprisepurchasing.viewer
- roles/errorreporting.admin
- roles/errorreporting.user
- roles/errorreporting.viewer
- roles/errorreporting.writer
- roles/essentialcontacts.admin
- roles/essentialcontacts.viewer
- roles/eventarc.admin
- roles/eventarc.connectionPublisher
- roles/eventarc.developer
- roles/eventarc.eventReceiver
- roles/eventarc.messageBusAdmin
- roles/eventarc.messageBusUser
- roles/eventarc.publisher
- roles/eventarc.serviceAgent
- roles/eventarc.viewer
- roles/file.editor
- roles/file.serviceAgent
- roles/file.viewer
- roles/financialservices.admin
- roles/financialservices.viewer
- roles/firebase.admin
- roles/firebase.analyticsAdmin
- roles/firebase.analyticsViewer
- roles/firebase.appDistributionSdkServiceAgent
- roles/firebase.developAdmin
- roles/firebase.developViewer
- roles/firebase.growthAdmin
- roles/firebase.growthViewer
- roles/firebase.managementServiceAgent
- roles/firebase.qualityAdmin
- roles/firebase.qualityViewer
- roles/firebase.sdkAdminServiceAgent
- roles/firebase.sdkProvisioningServiceAgent
- roles/firebase.viewer
- roles/firebaseabt.admin
- roles/firebaseabt.viewer
- roles/firebaseappcheck.admin
- roles/firebaseappcheck.serviceAgent
- roles/firebaseappcheck.tokenVerifier
- roles/firebaseappcheck.viewer
- roles/firebaseappdistro.admin
- roles/firebaseappdistro.viewer
- roles/firebaseapphosting.serviceAgent
- roles/firebaseauth.admin
- roles/firebaseauth.viewer
- roles/firebasecloudmessaging.admin
- roles/firebasecrash.symbolMappingsAdmin
- roles/firebasecrashlytics.admin
- roles/firebasecrashlytics.serviceAgent
- roles/firebasecrashlytics.viewer
- roles/firebasedatabase.admin
- roles/firebasedatabase.serviceAgent
- roles/firebasedatabase.viewer
- roles/firebasedataconnect.admin
- roles/firebasedataconnect.dataAdmin
- roles/firebasedataconnect.dataViewer
- roles/firebasedataconnect.serviceAgent
- roles/firebasedataconnect.viewer
- roles/firebasedynamiclinks.admin
- roles/firebasedynamiclinks.viewer
- roles/firebaseextensions.developer
- roles/firebaseextensions.viewer
- roles/firebaseextensionspublisher.extensionsAdmin
- roles/firebaseextensionspublisher.extensionsViewer
- roles/firebasehosting.admin
- roles/firebasehosting.viewer
- roles/firebaseinappmessaging.admin
- roles/firebaseinappmessaging.viewer
- roles/firebasemessagingcampaigns.admin
- roles/firebasemessagingcampaigns.viewer
- roles/firebaseml.admin
- roles/firebaseml.serviceAgent
- roles/firebaseml.viewer
- roles/firebasemods.serviceAgent
- roles/firebasenotifications.admin
- roles/firebasenotifications.viewer
- roles/firebaseperformance.admin
- roles/firebaseperformance.viewer
- roles/firebaserules.admin
- roles/firebaserules.firestoreServiceAgent
- roles/firebaserules.system
- roles/firebaserules.viewer
- roles/firebasestorage.admin
- roles/firebasestorage.serviceAgent
- roles/firebasestorage.viewer
- roles/firestore.serviceAgent
- roles/firewallinsights.serviceAgent
- roles/fleetengine.consumerSdkUser
- roles/fleetengine.deliveryAdmin
- roles/fleetengine.deliveryConsumer
- roles/fleetengine.deliveryFleetReader
- roles/fleetengine.deliverySuperUser
- roles/fleetengine.deliveryTrustedDriver
- roles/fleetengine.deliveryUntrustedDriver
- roles/fleetengine.driverSdkUser
- roles/fleetengine.ondemandAdmin
- roles/fleetengine.serviceAgent
- roles/fleetengine.serviceSuperUser
- roles/gameservices.serviceAgent
- roles/gdchardwaremanagement.admin
- roles/gdchardwaremanagement.operator
- roles/gdchardwaremanagement.reader
- roles/genomics.admin
- roles/genomics.editor
- roles/genomics.pipelinesRunner
- roles/genomics.serviceAgent
- roles/genomics.viewer
- roles/gkebackup.admin
- roles/gkebackup.backupAdmin
- roles/gkebackup.delegatedBackupAdmin
- roles/gkebackup.delegatedRestoreAdmin
- roles/gkebackup.restoreAdmin
- roles/gkebackup.serviceAgent
- roles/gkebackup.viewer
- roles/gkedataplanemanagement.warpRunServiceAgent
- roles/gkehub.admin
- roles/gkehub.connect
- roles/gkehub.crossProjectServiceAgent
- roles/gkehub.editor
- roles/gkehub.gatewayAdmin
- roles/gkehub.gatewayEditor
- roles/gkehub.gatewayReader
- roles/gkehub.scopeAdmin
- roles/gkehub.scopeEditor
- roles/gkehub.scopeEditorProjectLevel
- roles/gkehub.scopeViewer
- roles/gkehub.scopeViewerProjectLevel
- roles/gkehub.serviceAgent
- roles/gkehub.viewer
- roles/gkemulticloud.admin
- roles/gkemulticloud.containerServiceAgent
- roles/gkemulticloud.controlPlaneMachineServiceAgent
- roles/gkemulticloud.nodePoolMachineServiceAgent
- roles/gkemulticloud.serviceAgent
- roles/gkemulticloud.telemetryWriter
- roles/gkemulticloud.viewer
- roles/gkeonprem.admin
- roles/gkeonprem.serviceAgent
- roles/gkeonprem.viewer
- roles/gsuiteaddons.developer
- roles/gsuiteaddons.reader
- roles/gsuiteaddons.tester
- roles/healthcare.annotationEditor
- roles/healthcare.annotationReader
- roles/healthcare.annotationStoreAdmin
- roles/healthcare.annotationStoreViewer
- roles/healthcare.attributeDefinitionEditor
- roles/healthcare.attributeDefinitionReader
- roles/healthcare.consentArtifactAdmin
- roles/healthcare.consentArtifactEditor
- roles/healthcare.consentArtifactReader
- roles/healthcare.consentEditor
- roles/healthcare.consentReader
- roles/healthcare.consentStoreAdmin
- roles/healthcare.consentStoreViewer
- roles/healthcare.datasetAdmin
- roles/healthcare.datasetViewer
- roles/healthcare.dicomEditor
- roles/healthcare.dicomStoreAdmin
- roles/healthcare.dicomStoreViewer
- roles/healthcare.dicomViewer
- roles/healthcare.fhirResourceEditor
- roles/healthcare.fhirResourceReader
- roles/healthcare.fhirStoreAdmin
- roles/healthcare.fhirStoreViewer
- roles/healthcare.hl7V2Consumer
- roles/healthcare.hl7V2Editor
- roles/healthcare.hl7V2Ingest
- roles/healthcare.hl7V2StoreAdmin
- roles/healthcare.hl7V2StoreViewer
- roles/healthcare.nlpServiceViewer
- roles/healthcare.serviceAgent
- roles/healthcare.userDataMappingEditor
- roles/healthcare.userDataMappingReader
- roles/iam.denyAdmin
- roles/iam.denyReviewer
- roles/iam.oauthClientAdmin
- roles/iam.oauthClientViewer
- roles/iam.operationViewer
- roles/iam.organizationRoleAdmin
- roles/iam.organizationRoleViewer
- roles/iam.principalAccessBoundaryAdmin
- roles/iam.principalAccessBoundaryUser
- roles/iam.principalAccessBoundaryViewer
- roles/iam.roleAdmin
- roles/iam.roleViewer
- roles/iam.securityAdmin
- roles/iam.securityReviewer
- roles/iam.serviceAccountAdmin
- roles/iam.serviceAccountCreator
- roles/iam.serviceAccountDeleter
- roles/iam.serviceAccountKeyAdmin
- roles/iam.serviceAccountOpenIdTokenCreator
- roles/iam.serviceAccountTokenCreator
- roles/iam.serviceAccountUser
- roles/iam.serviceAccountViewer
- roles/iam.workforcePoolAdmin
- roles/iam.workforcePoolEditor
- roles/iam.workforcePoolViewer
- roles/iam.workloadIdentityPoolAdmin
- roles/iam.workloadIdentityPoolViewer
- roles/iam.workloadIdentityUser
- roles/iam.workspacePoolAdmin
- roles/iap.admin
- roles/iap.httpsResourceAccessor
- roles/iap.remediatorUser
- roles/iap.settingsAdmin
- roles/iap.tunnelDestGroupEditor
- roles/iap.tunnelDestGroupViewer
- roles/iap.tunnelResourceAccessor
- roles/identityplatform.admin
- roles/identityplatform.viewer
- roles/identitytoolkit.admin
- roles/identitytoolkit.serviceAgent
- roles/identitytoolkit.viewer
- roles/ids.admin
- roles/ids.viewer
- roles/integrations.apigeeIntegrationAdminRole
- roles/integrations.apigeeIntegrationDeployerRole
- roles/integrations.apigeeIntegrationEditorRole
- roles/integrations.apigeeIntegrationInvokerRole
- roles/integrations.apigeeIntegrationsViewer
- roles/integrations.apigeeSuspensionResolver
- roles/integrations.certificateViewer
- roles/integrations.integrationAdmin
- roles/integrations.integrationDeployer
- roles/integrations.integrationEditor
- roles/integrations.integrationInvoker
- roles/integrations.integrationViewer
- roles/integrations.securityIntegrationAdmin
- roles/integrations.serviceAgent
- roles/integrations.sfdcInstanceAdmin
- roles/integrations.sfdcInstanceEditor
- roles/integrations.sfdcInstanceViewer
- roles/integrations.suspensionResolver
- roles/issuerswitch.accountManagerAdmin
- roles/issuerswitch.accountManagerTransactionsAdmin
- roles/issuerswitch.accountManagerTransactionsViewer
- roles/issuerswitch.admin
- roles/issuerswitch.issuerParticipantsAdmin
- roles/issuerswitch.resolutionsAdmin
- roles/issuerswitch.rulesAdmin
- roles/issuerswitch.rulesViewer
- roles/issuerswitch.transactionsViewer
- roles/krmapihosting.admin
- roles/krmapihosting.anthosApiEndpointServiceAgent
- roles/krmapihosting.serviceAgent
- roles/krmapihosting.viewer
- roles/kubernetesmetadata.publisher
- roles/kuberun.eventsControlPlaneServiceAgent
- roles/kuberun.eventsDataPlaneServiceAgent
- roles/licensemanager.admin
- roles/licensemanager.viewer
- roles/lifesciences.admin
- roles/lifesciences.editor
- roles/lifesciences.serviceAgent
- roles/lifesciences.viewer
- roles/lifesciences.workflowsRunner
- roles/livestream.editor
- roles/livestream.serviceAgent
- roles/livestream.viewer
- roles/logging.admin
- roles/logging.bucketWriter
- roles/logging.configWriter
- roles/logging.fieldAccessor
- roles/logging.linkViewer
- roles/logging.logWriter
- roles/logging.privateLogViewer
- roles/logging.serviceAgent
- roles/logging.sqlAlertWriter
- roles/logging.viewAccessor
- roles/logging.viewer
- roles/looker.admin
- roles/looker.instanceUser
- roles/looker.serviceAgent
- roles/looker.viewer
- roles/lookerstudio.lookerAdmin
- roles/lookerstudio.proManager
- roles/managedflink.admin
- roles/managedflink.developer
- roles/managedflink.serviceAgent
- roles/managedflink.viewer
- roles/managedidentities.admin
- roles/managedidentities.backupAdmin
- roles/managedidentities.backupViewer
- roles/managedidentities.domainAdmin
- roles/managedidentities.domainJoin
- roles/managedidentities.peeringAdmin
- roles/managedidentities.peeringViewer
- roles/managedidentities.serviceAgent
- roles/managedidentities.viewer
- roles/managedkafka.admin
- roles/managedkafka.client
- roles/managedkafka.clusterEditor
- roles/managedkafka.consumerGroupEditor
- roles/managedkafka.serviceAgent
- roles/managedkafka.topicEditor
- roles/managedkafka.viewer
- roles/mandiant.attackSurfaceManagementEditor
- roles/mandiant.attackSurfaceManagementViewer
- roles/mandiant.digitalThreatMonitoringEditor
- roles/mandiant.digitalThreatMonitoringViewer
- roles/mandiant.expertiseOnDemandEditor
- roles/mandiant.expertiseOnDemandViewer
- roles/mandiant.threatIntelEditor
- roles/mandiant.threatIntelViewer
- roles/mandiant.validationEditor
- roles/mandiant.validationViewer
- roles/mapsadmin.admin
- roles/mapsadmin.viewer
- roles/mapsanalytics.mobilitySolutionsOverageViewer
- roles/mapsanalytics.viewer
- roles/mapsplatformdatasets.admin
- roles/mapsplatformdatasets.viewer
- roles/marketplacesolutions.admin
- roles/marketplacesolutions.editor
- roles/marketplacesolutions.viewer
- roles/mediaasset.serviceAgent
- roles/memcache.admin
- roles/memcache.editor
- roles/memcache.serviceAgent
- roles/memcache.viewer
- roles/memorystore.admin
- roles/memorystore.dbConnectionUser
- roles/memorystore.serviceAgent
- roles/memorystore.viewer
- roles/meshconfig.admin
- roles/meshconfig.serviceAgent
- roles/meshconfig.viewer
- roles/meshcontrolplane.serviceAgent
- roles/meshdataplane.serviceAgent
- roles/metastore.admin
- roles/metastore.editor
- roles/metastore.federationAccessor
- roles/metastore.metadataEditor
- roles/metastore.metadataMutateAdmin
- roles/metastore.metadataOperator
- roles/metastore.metadataOwner
- roles/metastore.metadataQueryAdmin
- roles/metastore.metadataUser
- roles/metastore.metadataViewer
- roles/metastore.migrationAdmin
- roles/metastore.serviceAgent
- roles/metastore.user
- roles/migrationcenter.admin
- roles/migrationcenter.discoveryClient
- roles/migrationcenter.discoveryClientRegistrator
- roles/migrationcenter.serviceAgent
- roles/migrationcenter.viewer
- roles/ml.admin
- roles/ml.developer
- roles/ml.jobOwner
- roles/ml.modelOwner
- roles/ml.modelUser
- roles/ml.operationOwner
- roles/ml.serviceAgent
- roles/ml.viewer
- roles/modelarmor.serviceAgent
- roles/monitoring.admin
- roles/monitoring.alertPolicyEditor
- roles/monitoring.alertPolicyViewer
- roles/monitoring.cloudConsoleIncidentEditor
- roles/monitoring.cloudConsoleIncidentViewer
- roles/monitoring.dashboardEditor
- roles/monitoring.dashboardViewer
- roles/monitoring.editor
- roles/monitoring.metricWriter
- roles/monitoring.metricsScopesAdmin
- roles/monitoring.metricsScopesViewer
- roles/monitoring.notificationChannelEditor
- roles/monitoring.notificationChannelViewer
- roles/monitoring.notificationServiceAgent
- roles/monitoring.servicesEditor
- roles/monitoring.servicesViewer
- roles/monitoring.snoozeEditor
- roles/monitoring.snoozeViewer
- roles/monitoring.uptimeCheckConfigEditor
- roles/monitoring.uptimeCheckConfigViewer
- roles/monitoring.viewer
- roles/multiclusteringress.serviceAgent
- roles/multiclustermetering.serviceAgent
- roles/multiclusterservicediscovery.serviceAgent
- roles/nestconsole.homeDeveloperAdmin
- roles/nestconsole.homeDeveloperEditor
- roles/nestconsole.homeDeveloperViewer
- roles/netapp.admin
- roles/netapp.viewer
- roles/netappcloudvolumes.admin
- roles/netappcloudvolumes.viewer
- roles/networkactions.serviceAgent
- roles/networkconnectivity.consumerNetworkAdmin
- roles/networkconnectivity.groupUser
- roles/networkconnectivity.hubAdmin
- roles/networkconnectivity.hubViewer
- roles/networkconnectivity.regionalEndpointAdmin
- roles/networkconnectivity.regionalEndpointViewer
- roles/networkconnectivity.serviceAgent
- roles/networkconnectivity.serviceClassUser
- roles/networkconnectivity.serviceProducerAdmin
- roles/networkconnectivity.spokeAdmin
- roles/networkmanagement.admin
- roles/networkmanagement.serviceAgent
- roles/networkmanagement.viewer
- roles/networksecurity.interceptDeploymentAdmin
- roles/networksecurity.interceptDeploymentUser
- roles/networksecurity.interceptDeploymentViewer
- roles/networksecurity.interceptEndpointAdmin
- roles/networksecurity.interceptEndpointUser
- roles/networksecurity.interceptEndpointViewer
- roles/networksecurity.mirroringDeploymentAdmin
- roles/networksecurity.mirroringDeploymentUser
- roles/networksecurity.mirroringDeploymentViewer
- roles/networksecurity.mirroringEndpointAdmin
- roles/networksecurity.mirroringEndpointUser
- roles/networksecurity.mirroringEndpointViewer
- roles/networksecurity.securityProfileAdmin
- roles/networkservices.serviceExtensionsAdmin
- roles/networkservices.serviceExtensionsViewer
- roles/notebooks.admin
- roles/notebooks.legacyAdmin
- roles/notebooks.legacyViewer
- roles/notebooks.runner
- roles/notebooks.serviceAgent
- roles/notebooks.viewer
- roles/oauthconfig.editor
- roles/oauthconfig.viewer
- roles/observability.admin
- roles/observability.analyticsUser
- roles/observability.editor
- roles/observability.viewer
- roles/oci.serviceAgent
- roles/ondemandscanning.admin
- roles/ondemandscanning.serviceAgent
- roles/opsconfigmonitoring.resourceMetadata.viewer
- roles/opsconfigmonitoring.resourceMetadata.writer
- roles/oracledatabase.admin
- roles/oracledatabase.autonomousDatabaseAdmin
- roles/oracledatabase.autonomousDatabaseViewer
- roles/oracledatabase.cloudExadataInfrastructureAdmin
- roles/oracledatabase.cloudExadataInfrastructureViewer
- roles/oracledatabase.cloudVmClusterAdmin
- roles/oracledatabase.cloudVmClusterViewer
- roles/oracledatabase.viewer
- roles/orgpolicy.policyAdmin
- roles/orgpolicy.policyViewer
- roles/osconfig.admin
- roles/osconfig.guestPolicyAdmin
- roles/osconfig.guestPolicyEditor
- roles/osconfig.guestPolicyViewer
- roles/osconfig.instanceOSPoliciesComplianceViewer
- roles/osconfig.inventoryViewer
- roles/osconfig.osPolicyAssignmentAdmin
- roles/osconfig.osPolicyAssignmentEditor
- roles/osconfig.osPolicyAssignmentReportViewer
- roles/osconfig.osPolicyAssignmentViewer
- roles/osconfig.patchDeploymentAdmin
- roles/osconfig.patchDeploymentViewer
- roles/osconfig.patchJobExecutor
- roles/osconfig.patchJobViewer
- roles/osconfig.policyOrchestratorAdmin
- roles/osconfig.policyOrchestratorViewer
- roles/osconfig.projectFeatureSettingsEditor
- roles/osconfig.projectFeatureSettingsViewer
- roles/osconfig.rolloutServiceAgent
- roles/osconfig.serviceAgent
- roles/osconfig.upgradeReportViewer
- roles/osconfig.viewer
- roles/osconfig.vulnerabilityReportViewer
- roles/owner
- roles/parallelstore.admin
- roles/parallelstore.serviceAgent
- roles/parallelstore.viewer
- roles/parametermanager.admin
- roles/parametermanager.parameterAccessor
- roles/parametermanager.parameterVersionAdder
- roles/parametermanager.parameterVersionManager
- roles/parametermanager.parameterViewer
- roles/paymentsresellersubscription.partnerAdmin
- roles/paymentsresellersubscription.partnerViewer
- roles/paymentsresellersubscription.productViewer
- roles/paymentsresellersubscription.promotionViewer
- roles/paymentsresellersubscription.subscriptionEditor
- roles/paymentsresellersubscription.subscriptionViewer
- roles/paymentsresellersubscription.userSessionEditor
- roles/policyanalyzer.activityAnalysisViewer
- roles/policyremediatormanager.policyRemediatorAdmin
- roles/policyremediatormanager.policyRemediatorReader
- roles/policysimulator.admin
- roles/policysimulator.orgPolicyAdmin
- roles/privateca.admin
- roles/privateca.auditor
- roles/privateca.caManager
- roles/privateca.certificateManager
- roles/privateca.certificateRequester
- roles/privateca.poolReader
- roles/privateca.templateUser
- roles/privateca.workloadCertificateRequester
- roles/privilegedaccessmanager.admin
- roles/privilegedaccessmanager.folderServiceAgent
- roles/privilegedaccessmanager.organizationServiceAgent
- roles/privilegedaccessmanager.projectServiceAgent
- roles/privilegedaccessmanager.serviceAgent
- roles/privilegedaccessmanager.viewer
- roles/progressiverollout.serviceAgent
- roles/proximitybeacon.attachmentEditor
- roles/proximitybeacon.attachmentPublisher
- roles/proximitybeacon.attachmentViewer
- roles/proximitybeacon.beaconEditor
- roles/publicca.externalAccountKeyCreator
- roles/pubsub.admin
- roles/pubsub.editor
- roles/pubsub.publisher
- roles/pubsub.serviceAgent
- roles/pubsub.subscriber
- roles/pubsub.viewer
- roles/pubsublite.admin
- roles/pubsublite.editor
- roles/pubsublite.publisher
- roles/pubsublite.serviceAgent
- roles/pubsublite.subscriber
- roles/pubsublite.viewer
- roles/rapidmigrationassessment.serviceAgent
- roles/readerrevenuesubscriptionlinking.admin
- roles/readerrevenuesubscriptionlinking.entitlementsViewer
- roles/readerrevenuesubscriptionlinking.viewer
- roles/recaptchaenterprise.admin
- roles/recaptchaenterprise.agent
- roles/recaptchaenterprise.viewer
- roles/recommender.alloydbAdmin
- roles/recommender.alloydbViewer
- roles/recommender.bigQueryCapacityCommitmentsAdmin
- roles/recommender.bigQueryCapacityCommitmentsBillingAccountAdmin
- roles/recommender.bigQueryCapacityCommitmentsBillingAccountViewer
- roles/recommender.bigQueryCapacityCommitmentsProjectAdmin
- roles/recommender.bigQueryCapacityCommitmentsProjectViewer
- roles/recommender.bigQueryCapacityCommitmentsViewer
- roles/recommender.bigqueryMaterializedViewAdmin
- roles/recommender.bigqueryMaterializedViewViewer
- roles/recommender.bigqueryPartitionClusterAdmin
- roles/recommender.bigqueryPartitionClusterViewer
- roles/recommender.billingAccountCudAdmin
- roles/recommender.billingAccountCudViewer
- roles/recommender.cloudAssetInsightsAdmin
- roles/recommender.cloudAssetInsightsViewer
- roles/recommender.cloudCostRecommendationAdmin
- roles/recommender.cloudCostRecommendationViewer
- roles/recommender.cloudDeprecationRecommendationAdmin
- roles/recommender.cloudDeprecationRecommendationViewer
- roles/recommender.cloudManageabilityRecommendationAdmin
- roles/recommender.cloudManageabilityRecommendationViewer
- roles/recommender.cloudPerformanceRecommendationAdmin
- roles/recommender.cloudPerformanceRecommendationViewer
- roles/recommender.cloudReliabilityRecommendationAdmin
- roles/recommender.cloudReliabilityRecommendationViewer
- roles/recommender.cloudSecurityRecommendationAdmin
- roles/recommender.cloudSecurityRecommendationViewer
- roles/recommender.cloudsqlAdmin
- roles/recommender.cloudsqlViewer
- roles/recommender.computeAdmin
- roles/recommender.computeViewer
- roles/recommender.containerDiagnosisAdmin
- roles/recommender.containerDiagnosisViewer
- roles/recommender.dataflowDiagnosticsAdmin
- roles/recommender.dataflowDiagnosticsViewer
- roles/recommender.errorReportingAdmin
- roles/recommender.errorReportingViewer
- roles/recommender.exporter
- roles/recommender.firestoredatabasereliabilityAdmin
- roles/recommender.firestoredatabasereliabilityViewer
- roles/recommender.firewallAdmin
- roles/recommender.firewallViewer
- roles/recommender.gmpAdmin
- roles/recommender.gmpViewer
- roles/recommender.iamAdmin
- roles/recommender.iamViewer
- roles/recommender.iampolicychangeriskAdmin
- roles/recommender.iampolicychangeriskViewer
- roles/recommender.networkAnalyzerAdmin
- roles/recommender.networkAnalyzerCloudSqlAdmin
- roles/recommender.networkAnalyzerCloudSqlViewer
- roles/recommender.networkAnalyzerDynamicRouteAdmin
- roles/recommender.networkAnalyzerDynamicRouteViewer
- roles/recommender.networkAnalyzerGkeConnectivityAdmin
- roles/recommender.networkAnalyzerGkeConnectivityViewer
- roles/recommender.networkAnalyzerGkeIpAddressAdmin
- roles/recommender.networkAnalyzerGkeIpAddressViewer
- roles/recommender.networkAnalyzerGkeServiceAccountAdmin
- roles/recommender.networkAnalyzerGkeServiceAccountViewer
- roles/recommender.networkAnalyzerIpAddressAdmin
- roles/recommender.networkAnalyzerIpAddressViewer
- roles/recommender.networkAnalyzerLoadBalancerAdmin
- roles/recommender.networkAnalyzerLoadBalancerViewer
- roles/recommender.networkAnalyzerViewer
- roles/recommender.networkAnalyzerVpcConnectivityAdmin
- roles/recommender.networkAnalyzerVpcConnectivityViewer
- roles/recommender.orgPolicyAdmin
- roles/recommender.orgPolicyViewer
- roles/recommender.productSuggestionAdmin
- roles/recommender.productSuggestionViewer
- roles/recommender.projectCudAdmin
- roles/recommender.projectCudViewer
- roles/recommender.projectUtilAdmin
- roles/recommender.projectUtilViewer
- roles/recommender.recentChangeConfigAdmin
- roles/recommender.recentchangeriskAdmin
- roles/recommender.recentchangeriskViewer
- roles/recommender.serviceLimitAdmin
- roles/recommender.serviceLimitViewer
- roles/recommender.serviceaccntchangeriskAdmin
- roles/recommender.serviceaccntchangeriskViewer
- roles/recommender.spannerAdmin
- roles/recommender.spannerViewer
- roles/recommender.ucsAdmin
- roles/recommender.ucsViewer
- roles/recommender.viewer
- roles/redis.admin
- roles/redis.dbConnectionUser
- roles/redis.editor
- roles/redis.serviceAgent
- roles/redis.viewer
- roles/redisenterprisecloud.admin
- roles/redisenterprisecloud.viewer
- roles/remotebuildexecution.actionCacheWriter
- roles/remotebuildexecution.artifactAdmin
- roles/remotebuildexecution.artifactCreator
- roles/remotebuildexecution.artifactViewer
- roles/remotebuildexecution.configurationAdmin
- roles/remotebuildexecution.configurationViewer
- roles/remotebuildexecution.logstreamWriter
- roles/remotebuildexecution.reservationAdmin
- roles/remotebuildexecution.serviceAgent
- roles/remotebuildexecution.worker
- roles/remotingcloud.serviceAgent
- roles/resourcemanager.folderAdmin
- roles/resourcemanager.folderCreator
- roles/resourcemanager.folderEditor
- roles/resourcemanager.folderIamAdmin
- roles/resourcemanager.folderMover
- roles/resourcemanager.folderViewer
- roles/resourcemanager.lienModifier
- roles/resourcemanager.organizationAdmin
- roles/resourcemanager.organizationViewer
- roles/resourcemanager.projectCreator
- roles/resourcemanager.projectDeleter
- roles/resourcemanager.projectIamAdmin
- roles/resourcemanager.projectMover
- roles/resourcemanager.tagAdmin
- roles/resourcemanager.tagHoldAdmin
- roles/resourcemanager.tagUser
- roles/resourcemanager.tagViewer
- roles/resourcesettings.admin
- roles/resourcesettings.viewer
- roles/retail.admin
- roles/retail.editor
- roles/retail.serviceAgent
- roles/retail.viewer
- roles/riscconfigs.admin
- roles/riscconfigs.viewer
- roles/riskmanager.admin
- roles/riskmanager.editor
- roles/riskmanager.reviewer
- roles/riskmanager.serviceAgent
- roles/riskmanager.viewer
- roles/rma.admin
- roles/rma.runner
- roles/rma.viewer
- roles/routeoptimization.editor
- roles/routeoptimization.serviceAgent
- roles/routeoptimization.viewer
- roles/run.admin
- roles/run.builder
- roles/run.developer
- roles/run.invoker
- roles/run.jobsExecutor
- roles/run.jobsExecutorWithOverrides
- roles/run.serviceAgent
- roles/run.servicesInvoker
- roles/run.sourceDeveloper
- roles/run.sourceViewer
- roles/run.viewer
- roles/runapps.developer
- roles/runapps.operator
- roles/runapps.serviceAgent
- roles/runapps.viewer
- roles/runtimeconfig.admin
- roles/seclm.serviceAgent
- roles/secretmanager.admin
- roles/secretmanager.secretAccessor
- roles/secretmanager.secretVersionAdder
- roles/secretmanager.secretVersionManager
- roles/secretmanager.viewer
- roles/securedlandingzone.bqdwOrgRemediator
- roles/securedlandingzone.bqdwProjectRemediator
- roles/securedlandingzone.overwatchActivator
- roles/securedlandingzone.overwatchAdmin
- roles/securedlandingzone.overwatchViewer
- roles/securedlandingzone.serviceAgent
- roles/securesourcemanager.admin
- roles/securesourcemanager.instanceAccessor
- roles/securesourcemanager.instanceManager
- roles/securesourcemanager.instanceOwner
- roles/securesourcemanager.instanceRepositoryCreator
- roles/securesourcemanager.repoAdmin
- roles/securesourcemanager.repoCreator
- roles/securesourcemanager.repoPullRequestApprover
- roles/securesourcemanager.repoReader
- roles/securesourcemanager.repoWriter
- roles/securesourcemanager.serviceAgent
- roles/securesourcemanager.sshKeyUser
- roles/securitycenter.admin
- roles/securitycenter.adminEditor
- roles/securitycenter.adminViewer
- roles/securitycenter.assetSecurityMarksWriter
- roles/securitycenter.assetsDiscoveryRunner
- roles/securitycenter.assetsViewer
- roles/securitycenter.attackPathsViewer
- roles/securitycenter.attackSurfaceManagementScannerServiceAgent
- roles/securitycenter.automationServiceAgent
- roles/securitycenter.bigQueryExportsEditor
- roles/securitycenter.bigQueryExportsViewer
- roles/securitycenter.complianceReportsViewer
- roles/securitycenter.complianceSnapshotsViewer
- roles/securitycenter.controlServiceAgent
- roles/securitycenter.externalSystemsEditor
- roles/securitycenter.findingSecurityMarksWriter
- roles/securitycenter.findingsBulkMuteEditor
- roles/securitycenter.findingsEditor
- roles/securitycenter.findingsMuteSetter
- roles/securitycenter.findingsStateSetter
- roles/securitycenter.findingsViewer
- roles/securitycenter.findingsWorkflowStateSetter
- roles/securitycenter.integrationExecutorServiceAgent
- roles/securitycenter.muteConfigsEditor
- roles/securitycenter.muteConfigsViewer
- roles/securitycenter.notificationConfigEditor
- roles/securitycenter.notificationConfigViewer
- roles/securitycenter.notificationServiceAgent
- roles/securitycenter.resourceValueConfigsEditor
- roles/securitycenter.resourceValueConfigsViewer
- roles/securitycenter.securityHealthAnalyticsCustomModulesTester
- roles/securitycenter.securityHealthAnalyticsServiceAgent
- roles/securitycenter.securityResponseServiceAgent
- roles/securitycenter.serviceAgent
- roles/securitycenter.settingsAdmin
- roles/securitycenter.settingsEditor
- roles/securitycenter.settingsViewer
- roles/securitycenter.simulationsViewer
- roles/securitycenter.sourcesAdmin
- roles/securitycenter.sourcesEditor
- roles/securitycenter.sourcesViewer
- roles/securitycenter.valuedResourcesViewer
- roles/securitycentermanagement.admin
- roles/securitycentermanagement.customModulesEditor
- roles/securitycentermanagement.customModulesViewer
- roles/securitycentermanagement.etdCustomModulesEditor
- roles/securitycentermanagement.etdCustomModulesViewer
- roles/securitycentermanagement.securityCenterServicesEditor
- roles/securitycentermanagement.securityCenterServicesViewer
- roles/securitycentermanagement.settingsEditor
- roles/securitycentermanagement.settingsViewer
- roles/securitycentermanagement.shaCustomModulesEditor
- roles/securitycentermanagement.shaCustomModulesViewer
- roles/securitycentermanagement.viewer
- roles/securityposture.admin
- roles/securityposture.postureDeployer
- roles/securityposture.postureDeploymentsViewer
- roles/securityposture.postureEditor
- roles/securityposture.postureViewer
- roles/securityposture.reportCreator
- roles/securityposture.viewer
- roles/serverless.serviceAgent
- roles/servicebroker.admin
- roles/servicebroker.operator
- roles/serviceconsumermanagement.tenancyUnitsAdmin
- roles/serviceconsumermanagement.tenancyUnitsViewer
- roles/servicedirectory.admin
- roles/servicedirectory.editor
- roles/servicedirectory.networkAttacher
- roles/servicedirectory.pscAuthorizedService
- roles/servicedirectory.serviceAgent
- roles/servicedirectory.viewer
- roles/servicehealth.viewer
- roles/servicemanagement.admin
- roles/servicemanagement.configEditor
- roles/servicemanagement.quotaAdmin
- roles/servicemanagement.quotaViewer
- roles/servicemanagement.reporter
- roles/servicemanagement.serviceConsumer
- roles/servicemanagement.serviceController
- roles/servicenetworking.networksAdmin
- roles/servicenetworking.serviceAgent
- roles/servicesecurityinsights.securityInsightsViewer
- roles/serviceusage.apiKeysAdmin
- roles/serviceusage.apiKeysViewer
- roles/serviceusage.serviceUsageAdmin
- roles/serviceusage.serviceUsageConsumer
- roles/serviceusage.serviceUsageViewer
- roles/source.admin
- roles/source.reader
- roles/source.writer
- roles/sourcerepo.serviceAgent
- roles/spanner.admin
- roles/spanner.backupAdmin
- roles/spanner.backupWriter
- roles/spanner.databaseAdmin
- roles/spanner.databaseReader
- roles/spanner.databaseReaderWithDataBoost
- roles/spanner.databaseRoleUser
- roles/spanner.databaseUser
- roles/spanner.fineGrainedAccessUser
- roles/spanner.restoreAdmin
- roles/spanner.serviceAgent
- roles/spanner.viewer
- roles/speakerid.admin
- roles/speakerid.editor
- roles/speakerid.verifier
- roles/speakerid.viewer
- roles/spectrumsas.serviceAgent
- roles/speech.admin
- roles/speech.client
- roles/speech.editor
- roles/speech.serviceAgent
- roles/stackdriver.accounts.editor
- roles/stackdriver.accounts.viewer
- roles/stackdriver.resourceMetadata.writer
- roles/storage.admin
- roles/storage.folderAdmin
- roles/storage.hmacKeyAdmin
- roles/storage.insightsCollectorService
- roles/storage.legacyBucketOwner
- roles/storage.legacyBucketReader
- roles/storage.legacyBucketWriter
- roles/storage.legacyObjectOwner
- roles/storage.legacyObjectReader
- roles/storage.objectAdmin
- roles/storage.objectCreator
- roles/storage.objectUser
- roles/storage.objectViewer
- roles/storageinsights.admin
- roles/storageinsights.analyst
- roles/storageinsights.serviceAgent
- roles/storageinsights.viewer
- roles/storagetransfer.admin
- roles/storagetransfer.serviceAgent
- roles/storagetransfer.transferAgent
- roles/storagetransfer.user
- roles/storagetransfer.viewer
- roles/stream.admin
- roles/stream.contentAdmin
- roles/stream.contentBuilder
- roles/stream.instanceAdmin
- roles/stream.serviceAgent
- roles/stream.viewer
- roles/subscribewithgoogledeveloper.developer
- roles/telcoautomation.admin
- roles/telcoautomation.blueprintDesigner
- roles/telcoautomation.deploymentAdmin
- roles/telcoautomation.opsAdminTier1
- roles/telcoautomation.opsAdminTier4
- roles/telcoautomation.serviceOrchestrator
- roles/telemetry.metricsWriter
- roles/telemetry.tracesWriter
- roles/telemetry.writer
- roles/timeseriesinsights.datasetsEditor
- roles/timeseriesinsights.datasetsOwner
- roles/timeseriesinsights.datasetsViewer
- roles/tpu.admin
- roles/tpu.serviceAgent
- roles/tpu.viewer
- roles/tpu.xpnAgent
- roles/trafficdirector.client
- roles/transcoder.admin
- roles/transcoder.serviceAgent
- roles/transcoder.viewer
- roles/transferappliance.admin
- roles/transferappliance.viewer
- roles/translationhub.admin
- roles/translationhub.portalUser
- roles/videostitcher.admin
- roles/videostitcher.user
- roles/videostitcher.viewer
- roles/viewer
- roles/visionai.admin
- roles/visionai.analysisEditor
- roles/visionai.analysisViewer
- roles/visionai.annotationEditor
- roles/visionai.annotationViewer
- roles/visionai.applicationEditor
- roles/visionai.applicationViewer
- roles/visionai.assetCreator
- roles/visionai.assetEditor
- roles/visionai.assetViewer
- roles/visionai.clusterEditor
- roles/visionai.clusterViewer
- roles/visionai.corpusAdmin
- roles/visionai.corpusEditor
- roles/visionai.corpusViewer
- roles/visionai.corpusWriter
- roles/visionai.editor
- roles/visionai.eventEditor
- roles/visionai.eventViewer
- roles/visionai.indexEndpointAdmin
- roles/visionai.indexEndpointEditor
- roles/visionai.indexEndpointViewer
- roles/visionai.indexEndpointWriter
- roles/visionai.operatorEditor
- roles/visionai.operatorViewer
- roles/visionai.packetReceiver
- roles/visionai.packetSender
- roles/visionai.processorEditor
- roles/visionai.processorViewer
- roles/visionai.retailcatalogEditor
- roles/visionai.retailcatalogViewer
- roles/visionai.retailendpointEditor
- roles/visionai.retailendpointViewer
- roles/visionai.seriesEditor
- roles/visionai.seriesViewer
- roles/visionai.serviceAgent
- roles/visionai.streamEditor
- roles/visionai.streamViewer
- roles/visionai.uiStreamEditor
- roles/visionai.uiStreamViewer
- roles/visionai.viewer
- roles/visualinspection.editor
- roles/visualinspection.serviceAgent
- roles/visualinspection.usageMetricsReporter
- roles/visualinspection.viewer
- roles/vmmigration.admin
- roles/vmmigration.serviceAgent
- roles/vmmigration.viewer
- roles/vmwareengine.serviceAgent
- roles/vmwareengine.vmwareengineAdmin
- roles/vmwareengine.vmwareengineViewer
- roles/vpcaccess.admin
- roles/vpcaccess.serviceAgent
- roles/vpcaccess.user
- roles/vpcaccess.viewer
- roles/websecurityscanner.serviceAgent
- roles/workflows.admin
- roles/workflows.editor
- roles/workflows.invoker
- roles/workflows.serviceAgent
- roles/workflows.viewer
- roles/workloadcertificate.admin
- roles/workloadcertificate.registrationAdmin
- roles/workloadcertificate.registrationViewer
- roles/workloadcertificate.serviceAgent
- roles/workloadcertificate.viewer
- roles/workloadmanager.admin
- roles/workloadmanager.deploymentAdmin
- roles/workloadmanager.deploymentViewer
- roles/workloadmanager.evaluationAdmin
- roles/workloadmanager.evaluationViewer
- roles/workloadmanager.insightWriter
- roles/workloadmanager.serviceAgent
- roles/workloadmanager.viewer
- roles/workloadmanager.worker
- roles/workloadmanager.workloadViewer
- roles/workstations.admin
- roles/workstations.networkAdmin
- roles/workstations.operationViewer
- roles/workstations.policyAdmin
- roles/workstations.serviceAgent
- roles/workstations.user
- roles/workstations.workstationCreator