roles/multiclusteringress.serviceAgent 📋 Copy

Title: Multi Cluster Ingress Service Agent

Description: Gives the Multi Cluster Ingress service agent access to CloudPlatform resources.

Stage: GA

Role Type: Service Agent

298 Assigned Permissions:

• certificatemanager.certissuanceconfigs.create
• certificatemanager.certissuanceconfigs.delete
• certificatemanager.certissuanceconfigs.get
• certificatemanager.certissuanceconfigs.list
• certificatemanager.certissuanceconfigs.listEffectiveTags
• certificatemanager.certissuanceconfigs.listTagBindings
• certificatemanager.certissuanceconfigs.update
• certificatemanager.certissuanceconfigs.use
• certificatemanager.certmapentries.create
• certificatemanager.certmapentries.delete
• certificatemanager.certmapentries.get
• certificatemanager.certmapentries.list
• certificatemanager.certmapentries.listEffectiveTags
• certificatemanager.certmapentries.listTagBindings
• certificatemanager.certmapentries.update
• certificatemanager.certmaps.create
• certificatemanager.certmaps.delete
• certificatemanager.certmaps.get
• certificatemanager.certmaps.list
• certificatemanager.certmaps.listEffectiveTags
• certificatemanager.certmaps.listTagBindings
• certificatemanager.certmaps.update
• certificatemanager.certmaps.use
• certificatemanager.certs.create
• certificatemanager.certs.delete
• certificatemanager.certs.get
• certificatemanager.certs.list
• certificatemanager.certs.listEffectiveTags
• certificatemanager.certs.listTagBindings
• certificatemanager.certs.update
• certificatemanager.certs.use
• certificatemanager.dnsauthorizations.create
• certificatemanager.dnsauthorizations.delete
• certificatemanager.dnsauthorizations.get
• certificatemanager.dnsauthorizations.list
• certificatemanager.dnsauthorizations.listEffectiveTags
• certificatemanager.dnsauthorizations.listTagBindings
• certificatemanager.dnsauthorizations.update
• certificatemanager.dnsauthorizations.use
• compute.addresses.create
• compute.addresses.createInternal
• compute.addresses.delete
• compute.addresses.deleteInternal
• compute.addresses.get
• compute.addresses.list
• compute.addresses.use
• compute.addresses.useInternal
• compute.backendServices.addSignedUrlKey
• compute.backendServices.create
• compute.backendServices.createTagBinding
• compute.backendServices.delete
• compute.backendServices.deleteSignedUrlKey
• compute.backendServices.deleteTagBinding
• compute.backendServices.get
• compute.backendServices.getIamPolicy
• compute.backendServices.list
• compute.backendServices.listEffectiveTags
• compute.backendServices.listTagBindings
• compute.backendServices.setIamPolicy
• compute.backendServices.setSecurityPolicy
• compute.backendServices.update
• compute.backendServices.use
• compute.firewalls.create
• compute.firewalls.createTagBinding
• compute.firewalls.delete
• compute.firewalls.deleteTagBinding
• compute.firewalls.get
• compute.firewalls.list
• compute.firewalls.listEffectiveTags
• compute.firewalls.listTagBindings
• compute.firewalls.update
• compute.forwardingRules.create
• compute.forwardingRules.createTagBinding
• compute.forwardingRules.delete
• compute.forwardingRules.deleteTagBinding
• compute.forwardingRules.get
• compute.forwardingRules.list
• compute.forwardingRules.listEffectiveTags
• compute.forwardingRules.listTagBindings
• compute.forwardingRules.pscCreate
• compute.forwardingRules.pscDelete
• compute.forwardingRules.pscSetLabels
• compute.forwardingRules.pscUpdate
• compute.forwardingRules.setLabels
• compute.forwardingRules.setTarget
• compute.forwardingRules.update
• compute.forwardingRules.use
• compute.globalAddresses.create
• compute.globalAddresses.delete
• compute.globalAddresses.get
• compute.globalAddresses.list
• compute.globalAddresses.use
• compute.globalForwardingRules.create
• compute.globalForwardingRules.createTagBinding
• compute.globalForwardingRules.delete
• compute.globalForwardingRules.deleteTagBinding
• compute.globalForwardingRules.get
• compute.globalForwardingRules.list
• compute.globalForwardingRules.listEffectiveTags
• compute.globalForwardingRules.listTagBindings
• compute.globalForwardingRules.pscCreate
• compute.globalForwardingRules.pscDelete
• compute.globalForwardingRules.pscSetLabels
• compute.globalForwardingRules.pscUpdate
• compute.globalForwardingRules.setLabels
• compute.globalForwardingRules.setTarget
• compute.globalForwardingRules.update
• compute.healthChecks.create
• compute.healthChecks.createTagBinding
• compute.healthChecks.delete
• compute.healthChecks.deleteTagBinding
• compute.healthChecks.get
• compute.healthChecks.list
• compute.healthChecks.listEffectiveTags
• compute.healthChecks.listTagBindings
• compute.healthChecks.update
• compute.healthChecks.use
• compute.healthChecks.useReadOnly
• compute.networkEndpointGroups.get
• compute.networkEndpointGroups.list
• compute.networkEndpointGroups.use
• compute.networks.updatePolicy
• compute.networks.use
• compute.regionBackendServices.create
• compute.regionBackendServices.createTagBinding
• compute.regionBackendServices.delete
• compute.regionBackendServices.deleteTagBinding
• compute.regionBackendServices.get
• compute.regionBackendServices.getIamPolicy
• compute.regionBackendServices.list
• compute.regionBackendServices.listEffectiveTags
• compute.regionBackendServices.listTagBindings
• compute.regionBackendServices.setIamPolicy
• compute.regionBackendServices.setSecurityPolicy
• compute.regionBackendServices.update
• compute.regionBackendServices.use
• compute.regionHealthChecks.create
• compute.regionHealthChecks.createTagBinding
• compute.regionHealthChecks.delete
• compute.regionHealthChecks.deleteTagBinding
• compute.regionHealthChecks.get
• compute.regionHealthChecks.list
• compute.regionHealthChecks.listEffectiveTags
• compute.regionHealthChecks.listTagBindings
• compute.regionHealthChecks.update
• compute.regionHealthChecks.use
• compute.regionHealthChecks.useReadOnly
• compute.regionSslCertificates.create
• compute.regionSslCertificates.createTagBinding
• compute.regionSslCertificates.delete
• compute.regionSslCertificates.deleteTagBinding
• compute.regionSslCertificates.get
• compute.regionSslCertificates.list
• compute.regionSslCertificates.listEffectiveTags
• compute.regionSslCertificates.listTagBindings
• compute.regionSslPolicies.use
• compute.regionTargetHttpProxies.create
• compute.regionTargetHttpProxies.createTagBinding
• compute.regionTargetHttpProxies.delete
• compute.regionTargetHttpProxies.deleteTagBinding
• compute.regionTargetHttpProxies.get
• compute.regionTargetHttpProxies.list
• compute.regionTargetHttpProxies.listEffectiveTags
• compute.regionTargetHttpProxies.listTagBindings
• compute.regionTargetHttpProxies.setUrlMap
• compute.regionTargetHttpProxies.use
• compute.regionTargetHttpsProxies.create
• compute.regionTargetHttpsProxies.createTagBinding
• compute.regionTargetHttpsProxies.delete
• compute.regionTargetHttpsProxies.deleteTagBinding
• compute.regionTargetHttpsProxies.get
• compute.regionTargetHttpsProxies.list
• compute.regionTargetHttpsProxies.listEffectiveTags
• compute.regionTargetHttpsProxies.listTagBindings
• compute.regionTargetHttpsProxies.setSslCertificates
• compute.regionTargetHttpsProxies.setUrlMap
• compute.regionTargetHttpsProxies.update
• compute.regionTargetHttpsProxies.use
• compute.regionUrlMaps.create
• compute.regionUrlMaps.createTagBinding
• compute.regionUrlMaps.delete
• compute.regionUrlMaps.deleteTagBinding
• compute.regionUrlMaps.get
• compute.regionUrlMaps.invalidateCache
• compute.regionUrlMaps.list
• compute.regionUrlMaps.listEffectiveTags
• compute.regionUrlMaps.listTagBindings
• compute.regionUrlMaps.update
• compute.regionUrlMaps.use
• compute.regionUrlMaps.validate
• compute.securityPolicies.use
• compute.sslCertificates.create
• compute.sslCertificates.createTagBinding
• compute.sslCertificates.delete
• compute.sslCertificates.deleteTagBinding
• compute.sslCertificates.get
• compute.sslCertificates.list
• compute.sslCertificates.listEffectiveTags
• compute.sslCertificates.listTagBindings
• compute.sslPolicies.use
• compute.subnetworks.list
• compute.subnetworks.use
• compute.targetHttpProxies.create
• compute.targetHttpProxies.createTagBinding
• compute.targetHttpProxies.delete
• compute.targetHttpProxies.deleteTagBinding
• compute.targetHttpProxies.get
• compute.targetHttpProxies.list
• compute.targetHttpProxies.listEffectiveTags
• compute.targetHttpProxies.listTagBindings
• compute.targetHttpProxies.setUrlMap
• compute.targetHttpProxies.update
• compute.targetHttpProxies.use
• compute.targetHttpsProxies.create
• compute.targetHttpsProxies.createTagBinding
• compute.targetHttpsProxies.delete
• compute.targetHttpsProxies.deleteTagBinding
• compute.targetHttpsProxies.get
• compute.targetHttpsProxies.list
• compute.targetHttpsProxies.listEffectiveTags
• compute.targetHttpsProxies.listTagBindings
• compute.targetHttpsProxies.setCertificateMap
• compute.targetHttpsProxies.setQuicOverride
• compute.targetHttpsProxies.setSslCertificates
• compute.targetHttpsProxies.setSslPolicy
• compute.targetHttpsProxies.setUrlMap
• compute.targetHttpsProxies.update
• compute.targetHttpsProxies.use
• compute.urlMaps.create
• compute.urlMaps.createTagBinding
• compute.urlMaps.delete
• compute.urlMaps.deleteTagBinding
• compute.urlMaps.get
• compute.urlMaps.invalidateCache
• compute.urlMaps.list
• compute.urlMaps.listEffectiveTags
• compute.urlMaps.listTagBindings
• compute.urlMaps.update
• compute.urlMaps.use
• compute.urlMaps.validate
• container.backendConfigs.create
• container.backendConfigs.delete
• container.backendConfigs.get
• container.backendConfigs.list
• container.backendConfigs.update
• container.clusters.get
• container.customResourceDefinitions.create
• container.customResourceDefinitions.delete
• container.customResourceDefinitions.get
• container.customResourceDefinitions.list
• container.customResourceDefinitions.update
• container.deployments.create
• container.deployments.delete
• container.deployments.get
• container.deployments.getScale
• container.deployments.getStatus
• container.deployments.list
• container.deployments.rollback
• container.deployments.update
• container.deployments.updateScale
• container.deployments.updateStatus
• container.events.create
• container.events.update
• container.frontendConfigs.create
• container.frontendConfigs.delete
• container.frontendConfigs.get
• container.frontendConfigs.list
• container.frontendConfigs.update
• container.namespaces.list
• container.secrets.get
• container.secrets.list
• container.services.create
• container.services.delete
• container.services.get
• container.services.getStatus
• container.services.list
• container.services.proxy
• container.services.update
• container.services.updateStatus
• container.thirdPartyObjects.create
• container.thirdPartyObjects.delete
• container.thirdPartyObjects.get
• container.thirdPartyObjects.list
• container.thirdPartyObjects.update
• gkehub.features.get
• gkehub.gateway.delete
• gkehub.gateway.generateCredentials
• gkehub.gateway.get
• gkehub.gateway.patch
• gkehub.gateway.post
• gkehub.gateway.put
• gkehub.locations.get
• gkehub.locations.list
• gkehub.memberships.get
• gkehub.memberships.list
• serviceusage.services.get
• serviceusage.services.list
• serviceusage.services.use