roles/cloudkms.admin
Title: Cloud KMS Admin
Description: Enables management of crypto resources.
Stage: GA
52 Assigned Permissions:
- cloudkms.autokeyConfigs.get
- cloudkms.autokeyConfigs.update
- cloudkms.cryptoKeyVersions.create
- cloudkms.cryptoKeyVersions.destroy
- cloudkms.cryptoKeyVersions.get
- cloudkms.cryptoKeyVersions.list
- cloudkms.cryptoKeyVersions.restore
- cloudkms.cryptoKeyVersions.update
- cloudkms.cryptoKeyVersions.useToDecryptViaDelegation
- cloudkms.cryptoKeyVersions.useToEncryptViaDelegation
- cloudkms.cryptoKeys.create
- cloudkms.cryptoKeys.get
- cloudkms.cryptoKeys.getIamPolicy
- cloudkms.cryptoKeys.list
- cloudkms.cryptoKeys.setIamPolicy
- cloudkms.cryptoKeys.update
- cloudkms.ekmConfigs.get
- cloudkms.ekmConfigs.getIamPolicy
- cloudkms.ekmConfigs.setIamPolicy
- cloudkms.ekmConfigs.update
- cloudkms.ekmConnections.create
- cloudkms.ekmConnections.get
- cloudkms.ekmConnections.getIamPolicy
- cloudkms.ekmConnections.list
- cloudkms.ekmConnections.setIamPolicy
- cloudkms.ekmConnections.update
- cloudkms.ekmConnections.use
- cloudkms.ekmConnections.verifyConnectivity
- cloudkms.importJobs.create
- cloudkms.importJobs.get
- cloudkms.importJobs.getIamPolicy
- cloudkms.importJobs.list
- cloudkms.importJobs.setIamPolicy
- cloudkms.importJobs.useToImport
- cloudkms.keyHandles.create
- cloudkms.keyHandles.get
- cloudkms.keyHandles.list
- cloudkms.keyRings.create
- cloudkms.keyRings.createTagBinding
- cloudkms.keyRings.deleteTagBinding
- cloudkms.keyRings.get
- cloudkms.keyRings.getIamPolicy
- cloudkms.keyRings.list
- cloudkms.keyRings.listEffectiveTags
- cloudkms.keyRings.listTagBindings
- cloudkms.keyRings.setIamPolicy
- cloudkms.locations.get
- cloudkms.locations.list
- cloudkms.locations.optOutKeyDeletionMsa
- cloudkms.operations.get
- cloudkms.projects.showEffectiveAutokeyConfig
- resourcemanager.projects.get