roles/securedlandingzone.serviceAgent
Title: Secured Landing Zone Service Agent
Description: Grants Secured Landing Zone service account permissions to manage resources in the customer project
Stage: GA
22 Assigned Permissions:
- cloudasset.assets.exportOrgPolicy
- cloudasset.assets.exportResource
- cloudasset.feeds.create
- cloudasset.feeds.delete
- cloudasset.feeds.update
- logging.logEntries.list
- pubsub.subscriptions.consume
- pubsub.subscriptions.create
- pubsub.subscriptions.delete
- pubsub.topics.attachSubscription
- pubsub.topics.create
- pubsub.topics.delete
- pubsub.topics.detachSubscription
- pubsub.topics.getIamPolicy
- pubsub.topics.setIamPolicy
- resourcemanager.projects.get
- securitycenter.assetsecuritymarks.update
- securitycenter.findings.list
- securitycenter.findings.update
- securitycenter.sources.list
- securitycenter.sources.update
- serviceusage.services.use