roles/workstations.serviceAgent
Title: Workstations Service Agent
Description: Grants the Workstations Service Account access to manage resources in consumer project.
Stage: GA
70 Assigned Permissions:
- compute.addresses.create
- compute.addresses.createInternal
- compute.addresses.delete
- compute.addresses.deleteInternal
- compute.addresses.get
- compute.addresses.use
- compute.disks.create
- compute.disks.createSnapshot
- compute.disks.createTagBinding
- compute.disks.delete
- compute.disks.deleteTagBinding
- compute.disks.get
- compute.disks.list
- compute.disks.setLabels
- compute.disks.use
- compute.disks.useReadOnly
- compute.firewalls.create
- compute.firewalls.delete
- compute.firewalls.get
- compute.firewalls.update
- compute.forwardingRules.create
- compute.forwardingRules.delete
- compute.forwardingRules.get
- compute.forwardingRules.pscCreate
- compute.forwardingRules.pscDelete
- compute.globalOperations.get
- compute.instances.attachDisk
- compute.instances.create
- compute.instances.createTagBinding
- compute.instances.delete
- compute.instances.deleteTagBinding
- compute.instances.detachDisk
- compute.instances.get
- compute.instances.getGuestAttributes
- compute.instances.setLabels
- compute.instances.setMetadata
- compute.instances.setServiceAccount
- compute.instances.setTags
- compute.networks.addPeering
- compute.networks.get
- compute.networks.removePeering
- compute.networks.updatePolicy
- compute.networks.use
- compute.networks.useExternalIp
- compute.regionOperations.get
- compute.regions.get
- compute.snapshots.create
- compute.snapshots.createTagBinding
- compute.snapshots.delete
- compute.snapshots.deleteTagBinding
- compute.snapshots.get
- compute.snapshots.listTagBindings
- compute.snapshots.setLabels
- compute.snapshots.useReadOnly
- compute.subnetworks.get
- compute.subnetworks.use
- compute.subnetworks.useExternalIp
- compute.zoneOperations.get
- dns.networks.bindPrivateDNSZone
- dns.networks.targetWithPeeringZone
- iam.serviceAccounts.actAs
- iam.serviceAccounts.get
- iam.serviceAccounts.list
- resourcemanager.tagValueBindings.create
- resourcemanager.tagValueBindings.delete
- servicedirectory.namespaces.create
- servicedirectory.namespaces.delete
- servicedirectory.services.create
- servicedirectory.services.delete
- serviceusage.services.get