roles/cloudkms.decapsulator

Title: Cloud KMS CryptoKey Decapsulator

Description: Enables Decapsulate and GetPublicKey operations

Stage: BETA

Role Type: Predefined

5 Assigned Permissions:

🔍

cloudkms.cryptoKeyVersions.useToDecapsulate

cloudkms.cryptoKeyVersions.viewPublicKey

cloudkms.locations.get

cloudkms.locations.list

resourcemanager.projects.get