roles/cloudfunctions.serviceAgent 📋 Copy

Title: Cloud Functions Service Agent

Description: Gives Cloud Functions service account access to managed resources.

Stage: GA

Role Type: Service Agent

231 Assigned Permissions:

• artifactregistry.aptartifacts.create
• artifactregistry.attachments.create
• artifactregistry.attachments.delete
• artifactregistry.attachments.get
• artifactregistry.attachments.list
• artifactregistry.dockerimages.get
• artifactregistry.dockerimages.list
• artifactregistry.files.delete
• artifactregistry.files.download
• artifactregistry.files.get
• artifactregistry.files.list
• artifactregistry.files.update
• artifactregistry.files.upload
• artifactregistry.kfpartifacts.create
• artifactregistry.locations.get
• artifactregistry.locations.list
• artifactregistry.mavenartifacts.get
• artifactregistry.mavenartifacts.list
• artifactregistry.npmpackages.get
• artifactregistry.npmpackages.list
• artifactregistry.packages.delete
• artifactregistry.packages.get
• artifactregistry.packages.list
• artifactregistry.packages.update
• artifactregistry.projectsettings.get
• artifactregistry.projectsettings.update
• artifactregistry.pythonpackages.get
• artifactregistry.pythonpackages.list
• artifactregistry.repositories.create
• artifactregistry.repositories.createTagBinding
• artifactregistry.repositories.delete
• artifactregistry.repositories.deleteArtifacts
• artifactregistry.repositories.deleteTagBinding
• artifactregistry.repositories.downloadArtifacts
• artifactregistry.repositories.get
• artifactregistry.repositories.getIamPolicy
• artifactregistry.repositories.list
• artifactregistry.repositories.listEffectiveTags
• artifactregistry.repositories.listTagBindings
• artifactregistry.repositories.readViaVirtualRepository
• artifactregistry.repositories.setIamPolicy
• artifactregistry.repositories.update
• artifactregistry.repositories.uploadArtifacts
• artifactregistry.rules.create
• artifactregistry.rules.delete
• artifactregistry.rules.get
• artifactregistry.rules.list
• artifactregistry.rules.update
• artifactregistry.tags.create
• artifactregistry.tags.delete
• artifactregistry.tags.get
• artifactregistry.tags.list
• artifactregistry.tags.update
• artifactregistry.versions.delete
• artifactregistry.versions.get
• artifactregistry.versions.list
• artifactregistry.versions.update
• artifactregistry.yumartifacts.create
• clientauthconfig.clients.list
• cloudbuild.builds.create
• cloudbuild.builds.get
• cloudbuild.builds.list
• cloudbuild.builds.update
• cloudbuild.locations.get
• cloudbuild.locations.list
• cloudbuild.operations.get
• cloudbuild.operations.list
• cloudbuild.workerpools.use
• cloudfunctions.functions.get
• cloudfunctions.functions.invoke
• cloudfunctions.functions.list
• cloudfunctions.operations.get
• cloudfunctions.operations.list
• compute.globalOperations.get
• compute.networks.access
• eventarc.channelConnections.create
• eventarc.channelConnections.delete
• eventarc.channelConnections.get
• eventarc.channelConnections.getIamPolicy
• eventarc.channelConnections.list
• eventarc.channelConnections.publish
• eventarc.channels.attach
• eventarc.channels.create
• eventarc.channels.delete
• eventarc.channels.get
• eventarc.channels.getIamPolicy
• eventarc.channels.list
• eventarc.channels.publish
• eventarc.channels.undelete
• eventarc.channels.update
• eventarc.enrollments.create
• eventarc.enrollments.delete
• eventarc.enrollments.get
• eventarc.enrollments.getIamPolicy
• eventarc.enrollments.list
• eventarc.enrollments.update
• eventarc.googleApiSources.create
• eventarc.googleApiSources.delete
• eventarc.googleApiSources.get
• eventarc.googleApiSources.getIamPolicy
• eventarc.googleApiSources.list
• eventarc.googleApiSources.update
• eventarc.googleChannelConfigs.get
• eventarc.googleChannelConfigs.update
• eventarc.kafkaSources.create
• eventarc.kafkaSources.delete
• eventarc.kafkaSources.get
• eventarc.kafkaSources.getIamPolicy
• eventarc.kafkaSources.list
• eventarc.locations.get
• eventarc.locations.list
• eventarc.operations.cancel
• eventarc.operations.delete
• eventarc.operations.get
• eventarc.operations.list
• eventarc.pipelines.create
• eventarc.pipelines.delete
• eventarc.pipelines.get
• eventarc.pipelines.getIamPolicy
• eventarc.pipelines.list
• eventarc.pipelines.update
• eventarc.providers.get
• eventarc.providers.list
• eventarc.triggers.create
• eventarc.triggers.delete
• eventarc.triggers.get
• eventarc.triggers.getIamPolicy
• eventarc.triggers.list
• eventarc.triggers.undelete
• eventarc.triggers.update
• firebasedatabase.instances.get
• firebasedatabase.instances.update
• iam.serviceAccounts.actAs
• iam.serviceAccounts.getAccessToken
• iam.serviceAccounts.getOpenIdToken
• iam.serviceAccounts.signBlob
• pubsub.subscriptions.consume
• pubsub.subscriptions.create
• pubsub.subscriptions.delete
• pubsub.subscriptions.get
• pubsub.subscriptions.getIamPolicy
• pubsub.subscriptions.list
• pubsub.subscriptions.setIamPolicy
• pubsub.subscriptions.update
• pubsub.topics.attachSubscription
• pubsub.topics.create
• pubsub.topics.get
• pubsub.topics.list
• recommender.locations.get
• recommender.locations.list
• recommender.runServiceCostInsights.get
• recommender.runServiceCostInsights.list
• recommender.runServiceCostInsights.update
• recommender.runServiceCostRecommendations.get
• recommender.runServiceCostRecommendations.list
• recommender.runServiceCostRecommendations.update
• recommender.runServiceIdentityInsights.get
• recommender.runServiceIdentityInsights.list
• recommender.runServiceIdentityInsights.update
• recommender.runServiceIdentityRecommendations.get
• recommender.runServiceIdentityRecommendations.list
• recommender.runServiceIdentityRecommendations.update
• recommender.runServicePerformanceInsights.get
• recommender.runServicePerformanceInsights.list
• recommender.runServicePerformanceInsights.update
• recommender.runServicePerformanceRecommendations.get
• recommender.runServicePerformanceRecommendations.list
• recommender.runServicePerformanceRecommendations.update
• recommender.runServiceSecurityInsights.get
• recommender.runServiceSecurityInsights.list
• recommender.runServiceSecurityInsights.update
• recommender.runServiceSecurityRecommendations.get
• recommender.runServiceSecurityRecommendations.list
• recommender.runServiceSecurityRecommendations.update
• remotebuildexecution.blobs.get
• resourcemanager.projects.get
• resourcemanager.projects.getIamPolicy
• resourcemanager.projects.list
• run.configurations.get
• run.configurations.list
• run.executions.cancel
• run.executions.delete
• run.executions.get
• run.executions.list
• run.jobs.create
• run.jobs.delete
• run.jobs.get
• run.jobs.getIamPolicy
• run.jobs.list
• run.jobs.listEffectiveTags
• run.jobs.listTagBindings
• run.jobs.run
• run.jobs.runWithOverrides
• run.jobs.update
• run.locations.list
• run.operations.delete
• run.operations.get
• run.operations.list
• run.revisions.delete
• run.revisions.get
• run.revisions.list
• run.routes.get
• run.routes.invoke
• run.routes.list
• run.services.create
• run.services.delete
• run.services.get
• run.services.getIamPolicy
• run.services.list
• run.services.listEffectiveTags
• run.services.listTagBindings
• run.services.update
• run.tasks.get
• run.tasks.list
• serviceusage.quotas.get
• serviceusage.services.disable
• serviceusage.services.enable
• serviceusage.services.get
• serviceusage.services.use
• source.repos.get
• source.repos.list
• storage.buckets.create
• storage.buckets.delete
• storage.buckets.get
• storage.buckets.update
• storage.objects.create
• storage.objects.delete
• storage.objects.get
• storage.objects.list
• vpcaccess.connectors.get
• vpcaccess.connectors.use