roles/cloudkms.admin

Title: Cloud KMS Admin

Description: Enables management of crypto resources.

Stage: GA

Role Type: Predefined

56 Assigned Permissions:

🔍

cloudkms.autokeyConfigs.get

cloudkms.autokeyConfigs.update

cloudkms.cryptoKeyVersions.create

cloudkms.cryptoKeyVersions.destroy

cloudkms.cryptoKeyVersions.get

cloudkms.cryptoKeyVersions.list

cloudkms.cryptoKeyVersions.restore

cloudkms.cryptoKeyVersions.update

cloudkms.cryptoKeyVersions.useToDecryptViaDelegation

cloudkms.cryptoKeyVersions.useToEncryptViaDelegation

cloudkms.cryptoKeys.create

cloudkms.cryptoKeys.get

cloudkms.cryptoKeys.getIamPolicy

cloudkms.cryptoKeys.list

cloudkms.cryptoKeys.setIamPolicy

cloudkms.cryptoKeys.update

cloudkms.ekmConfigs.get

cloudkms.ekmConfigs.getIamPolicy

cloudkms.ekmConfigs.setIamPolicy

cloudkms.ekmConfigs.update

cloudkms.ekmConnections.create

cloudkms.ekmConnections.get

cloudkms.ekmConnections.getIamPolicy

cloudkms.ekmConnections.list

cloudkms.ekmConnections.setIamPolicy

cloudkms.ekmConnections.update

cloudkms.ekmConnections.use

cloudkms.ekmConnections.verifyConnectivity

cloudkms.importJobs.create

cloudkms.importJobs.get

cloudkms.importJobs.getIamPolicy

cloudkms.importJobs.list

cloudkms.importJobs.setIamPolicy

cloudkms.importJobs.useToImport

cloudkms.kajPolicyConfigs.get

cloudkms.kajPolicyConfigs.update

cloudkms.keyHandles.create

cloudkms.keyHandles.get

cloudkms.keyHandles.list

cloudkms.keyRings.create

cloudkms.keyRings.createTagBinding

cloudkms.keyRings.deleteTagBinding

cloudkms.keyRings.get

cloudkms.keyRings.getIamPolicy

cloudkms.keyRings.list

cloudkms.keyRings.listEffectiveTags

cloudkms.keyRings.listTagBindings

cloudkms.keyRings.setIamPolicy

cloudkms.locations.get

cloudkms.locations.list

cloudkms.locations.optOutKeyDeletionMsa

cloudkms.operations.get

cloudkms.projects.showEffectiveAutokeyConfig

cloudkms.projects.showEffectiveKajEnrollmentConfig

cloudkms.projects.showEffectiveKajPolicyConfig

resourcemanager.projects.get