roles/osconfig.serviceAgent
Title: Cloud OS Config Service Agent
Description: Grants OS Config Service Account access to Google Compute Engine instances.
Stage: GA
27 Assigned Permissions:
- cloudasset.assets.listOSConfigOSPolicyAssignments
- cloudasset.assets.listPatchDeployments
- compute.globalOperations.get
- compute.instances.get
- compute.instances.getGuestAttributes
- compute.instances.list
- compute.instances.setMetadata
- compute.projects.get
- compute.projects.setCommonInstanceMetadata
- compute.zones.get
- compute.zones.list
- containeranalysis.notes.attachOccurrence
- containeranalysis.notes.create
- containeranalysis.notes.delete
- containeranalysis.notes.get
- containeranalysis.notes.list
- containeranalysis.notes.update
- containeranalysis.occurrences.create
- containeranalysis.occurrences.delete
- containeranalysis.occurrences.get
- containeranalysis.occurrences.list
- containeranalysis.occurrences.update
- iam.serviceAccounts.actAs
- osconfig.projectFeatureSettings.get
- osconfig.projectFeatureSettings.update
- resourcemanager.projects.get
- resourcemanager.projects.list