roles/serverless.serviceAgent
Title: Cloud Run Service Agent
Description: Gives Cloud Run service account access to managed resources.
Stage: GA
71 Assigned Permissions:
- artifactregistry.attachments.get
- artifactregistry.attachments.list
- artifactregistry.dockerimages.get
- artifactregistry.dockerimages.list
- artifactregistry.files.download
- artifactregistry.files.get
- artifactregistry.files.list
- artifactregistry.locations.get
- artifactregistry.locations.list
- artifactregistry.mavenartifacts.get
- artifactregistry.mavenartifacts.list
- artifactregistry.npmpackages.get
- artifactregistry.npmpackages.list
- artifactregistry.packages.get
- artifactregistry.packages.list
- artifactregistry.projectsettings.get
- artifactregistry.pythonpackages.get
- artifactregistry.pythonpackages.list
- artifactregistry.repositories.downloadArtifacts
- artifactregistry.repositories.get
- artifactregistry.repositories.list
- artifactregistry.repositories.listEffectiveTags
- artifactregistry.repositories.listTagBindings
- artifactregistry.repositories.readViaVirtualRepository
- artifactregistry.rules.get
- artifactregistry.rules.list
- artifactregistry.tags.get
- artifactregistry.tags.list
- artifactregistry.versions.get
- artifactregistry.versions.list
- binaryauthorization.platformPolicies.evaluatePolicy
- binaryauthorization.policy.evaluatePolicy
- clientauthconfig.clients.list
- cloudbuild.builds.create
- cloudbuild.builds.get
- compute.addresses.createInternal
- compute.addresses.deleteInternal
- compute.addresses.get
- compute.addresses.list
- compute.globalOperations.get
- compute.networks.access
- compute.networks.get
- compute.subnetworks.get
- compute.subnetworks.use
- iam.serviceAccounts.actAs
- iam.serviceAccounts.getAccessToken
- iam.serviceAccounts.getOpenIdToken
- iam.serviceAccounts.signBlob
- pubsub.subscriptions.create
- pubsub.subscriptions.delete
- pubsub.subscriptions.get
- pubsub.subscriptions.list
- pubsub.topics.attachSubscription
- pubsub.topics.create
- pubsub.topics.delete
- pubsub.topics.get
- pubsub.topics.list
- pubsub.topics.publish
- resourcemanager.projects.get
- resourcemanager.projects.getIamPolicy
- resourcemanager.projects.list
- run.routes.invoke
- serviceusage.services.use
- storage.folders.get
- storage.folders.list
- storage.managedFolders.get
- storage.managedFolders.list
- storage.objects.get
- storage.objects.list
- vpcaccess.connectors.get
- vpcaccess.connectors.use