gcp-iam-catalog Roles Permissions
🔐

roles/iam.admin

Title Iam Admin
Stage GA
Role Type Predefined
Permissions 144
Description Admin role for iam
🔍
iam.accesspolicies.bind
iam.accesspolicies.create
iam.accesspolicies.delete
iam.accesspolicies.get
iam.accesspolicies.list
iam.accesspolicies.searchPolicyBindings
iam.accesspolicies.unbind
iam.accesspolicies.update
iam.denypolicies.get
iam.denypolicies.list
iam.googleapis.com/oauthClientCredentials.create
iam.googleapis.com/oauthClientCredentials.delete
iam.googleapis.com/oauthClientCredentials.get
iam.googleapis.com/oauthClientCredentials.list
iam.googleapis.com/oauthClientCredentials.update
iam.googleapis.com/oauthClients.create
iam.googleapis.com/oauthClients.delete
iam.googleapis.com/oauthClients.get
iam.googleapis.com/oauthClients.list
iam.googleapis.com/oauthClients.undelete
iam.googleapis.com/oauthClients.update
iam.googleapis.com/workforcePoolProviderKeys.create
iam.googleapis.com/workforcePoolProviderKeys.delete
iam.googleapis.com/workforcePoolProviderKeys.get
iam.googleapis.com/workforcePoolProviderKeys.list
iam.googleapis.com/workforcePoolProviderKeys.undelete
iam.googleapis.com/workforcePoolProviderScimGroups.create
iam.googleapis.com/workforcePoolProviderScimGroups.delete
iam.googleapis.com/workforcePoolProviderScimGroups.get
iam.googleapis.com/workforcePoolProviderScimGroups.list
iam.googleapis.com/workforcePoolProviderScimGroups.patch
iam.googleapis.com/workforcePoolProviderScimGroups.put
iam.googleapis.com/workforcePoolProviderScimUsers.create
iam.googleapis.com/workforcePoolProviderScimUsers.delete
iam.googleapis.com/workforcePoolProviderScimUsers.get
iam.googleapis.com/workforcePoolProviderScimUsers.list
iam.googleapis.com/workforcePoolProviderScimUsers.patch
iam.googleapis.com/workforcePoolProviderScimUsers.put
iam.googleapis.com/workforcePoolProviders.computeUserAttributes
iam.googleapis.com/workforcePoolProviders.create
iam.googleapis.com/workforcePoolProviders.delete
iam.googleapis.com/workforcePoolProviders.get
iam.googleapis.com/workforcePoolProviders.list
iam.googleapis.com/workforcePoolProviders.undelete
iam.googleapis.com/workforcePoolProviders.update
iam.googleapis.com/workforcePoolSubjects.delete
iam.googleapis.com/workforcePoolSubjects.undelete
iam.googleapis.com/workforcePools.create
iam.googleapis.com/workforcePools.createPolicyBinding
iam.googleapis.com/workforcePools.delete
iam.googleapis.com/workforcePools.deletePolicyBinding
iam.googleapis.com/workforcePools.get
iam.googleapis.com/workforcePools.getIamPolicy
iam.googleapis.com/workforcePools.list
iam.googleapis.com/workforcePools.searchPolicyBindings
iam.googleapis.com/workforcePools.setIamPolicy
iam.googleapis.com/workforcePools.undelete
iam.googleapis.com/workforcePools.update
iam.googleapis.com/workforcePools.updatePolicyBinding
iam.googleapis.com/workloadIdentityPoolManagedIdentities.create
iam.googleapis.com/workloadIdentityPoolManagedIdentities.delete
iam.googleapis.com/workloadIdentityPoolManagedIdentities.get
iam.googleapis.com/workloadIdentityPoolManagedIdentities.getAttestationRules
iam.googleapis.com/workloadIdentityPoolManagedIdentities.list
iam.googleapis.com/workloadIdentityPoolManagedIdentities.setAttestationRules
iam.googleapis.com/workloadIdentityPoolManagedIdentities.undelete
iam.googleapis.com/workloadIdentityPoolManagedIdentities.update
iam.googleapis.com/workloadIdentityPoolNamespaces.create
iam.googleapis.com/workloadIdentityPoolNamespaces.delete
iam.googleapis.com/workloadIdentityPoolNamespaces.get
iam.googleapis.com/workloadIdentityPoolNamespaces.list
iam.googleapis.com/workloadIdentityPoolNamespaces.undelete
iam.googleapis.com/workloadIdentityPoolNamespaces.update
iam.googleapis.com/workloadIdentityPoolProviderKeys.create
iam.googleapis.com/workloadIdentityPoolProviderKeys.delete
iam.googleapis.com/workloadIdentityPoolProviderKeys.get
iam.googleapis.com/workloadIdentityPoolProviderKeys.list
iam.googleapis.com/workloadIdentityPoolProviderKeys.undelete
iam.googleapis.com/workloadIdentityPoolProviders.create
iam.googleapis.com/workloadIdentityPoolProviders.delete
iam.googleapis.com/workloadIdentityPoolProviders.get
iam.googleapis.com/workloadIdentityPoolProviders.list
iam.googleapis.com/workloadIdentityPoolProviders.undelete
iam.googleapis.com/workloadIdentityPoolProviders.update
iam.googleapis.com/workloadIdentityPools.create
iam.googleapis.com/workloadIdentityPools.delete
iam.googleapis.com/workloadIdentityPools.get
iam.googleapis.com/workloadIdentityPools.getAttestationRules
iam.googleapis.com/workloadIdentityPools.getIamPolicy
iam.googleapis.com/workloadIdentityPools.list
iam.googleapis.com/workloadIdentityPools.setAttestationRules
iam.googleapis.com/workloadIdentityPools.setIamPolicy
iam.googleapis.com/workloadIdentityPools.undelete
iam.googleapis.com/workloadIdentityPools.update
iam.googleapis.com/workspacePools.createPolicyBinding
iam.googleapis.com/workspacePools.deletePolicyBinding
iam.googleapis.com/workspacePools.searchPolicyBindings
iam.googleapis.com/workspacePools.updatePolicyBinding
iam.operations.get
iam.policybindings.get
iam.policybindings.list
iam.principalaccessboundarypolicies.get
iam.principalaccessboundarypolicies.list
iam.principalaccessboundarypolicies.searchPolicyBindings
iam.roles.create
iam.roles.createTagBinding
iam.roles.delete
iam.roles.deleteTagBinding
iam.roles.get
iam.roles.list
iam.roles.listEffectiveTags
iam.roles.listTagBindings
iam.roles.undelete
iam.roles.update
iam.serviceAccountApiKeyBindings.create
iam.serviceAccountApiKeyBindings.delete
iam.serviceAccountApiKeyBindings.undelete
iam.serviceAccountKeys.create
iam.serviceAccountKeys.delete
iam.serviceAccountKeys.disable
iam.serviceAccountKeys.enable
iam.serviceAccountKeys.get
iam.serviceAccountKeys.list
iam.serviceAccounts.actAs
iam.serviceAccounts.create
iam.serviceAccounts.createTagBinding
iam.serviceAccounts.delete
iam.serviceAccounts.deleteTagBinding
iam.serviceAccounts.disable
iam.serviceAccounts.enable
iam.serviceAccounts.get
iam.serviceAccounts.getIamPolicy
iam.serviceAccounts.list
iam.serviceAccounts.listEffectiveTags
iam.serviceAccounts.listTagBindings
iam.serviceAccounts.setIamPolicy
iam.serviceAccounts.undelete
iam.serviceAccounts.update
iam.workloadIdentityPools.createPolicyBinding
iam.workloadIdentityPools.deletePolicyBinding
iam.workloadIdentityPools.searchPolicyBindings
iam.workloadIdentityPools.updatePolicyBinding
resourcemanager.projects.get
resourcemanager.projects.list
🔍