roles/cloudkmskacls.serviceAgent 📋 Copy

Title: Cloud KMS KACLS Service Agent

Description: Grants Cloud KMS KACLS Service Agent access to KMS resource permissions to perform DEK encryption/decryption.

Stage: GA

3 Assigned Permissions:

• cloudkms.cryptoKeyVersions.useToDecrypt
• cloudkms.cryptoKeyVersions.useToEncrypt
• cloudkms.cryptoKeys.get