Identity-Aware Proxy roles and permissions

iap.projects.getSettings

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

IAP Settings Admin (roles/iap.settingsAdmin)

iap.projects.updateSettings

Owner (roles/owner)

Editor (roles/editor)

IAP Settings Admin (roles/iap.settingsAdmin)

iap.tunnel.getIamPolicy

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

IAP Policy Admin (roles/iap.admin)

iap.tunnel.setIamPolicy

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

IAP Policy Admin (roles/iap.admin)

iap.tunnelDestGroups.accessViaIAP

Owner (roles/owner)

IAP-secured Tunnel User (roles/iap.tunnelResourceAccessor)

iap.tunnelDestGroups.create

Owner (roles/owner)

Editor (roles/editor)

IAP-secured Tunnel Destination Group Editor (roles/iap.tunnelDestGroupEditor)

iap.tunnelDestGroups.delete

Owner (roles/owner)

Editor (roles/editor)

IAP-secured Tunnel Destination Group Editor (roles/iap.tunnelDestGroupEditor)

iap.tunnelDestGroups.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

IAP-secured Tunnel Destination Group Editor (roles/iap.tunnelDestGroupEditor)

IAP-secured Tunnel Destination Group Viewer (roles/iap.tunnelDestGroupViewer)

iap.tunnelDestGroups.getIamPolicy

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

IAP Policy Admin (roles/iap.admin)

iap.tunnelDestGroups.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

IAP-secured Tunnel Destination Group Editor (roles/iap.tunnelDestGroupEditor)

IAP-secured Tunnel Destination Group Viewer (roles/iap.tunnelDestGroupViewer)

iap.tunnelDestGroups.remediate

Owner (roles/owner)

IAP-secured Resource Remediator User (roles/iap.remediatorUser)

iap.tunnelDestGroups.setIamPolicy

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

IAP Policy Admin (roles/iap.admin)

iap.tunnelDestGroups.update

Owner (roles/owner)

Editor (roles/editor)

IAP-secured Tunnel Destination Group Editor (roles/iap.tunnelDestGroupEditor)

iap.tunnelInstances.accessViaIAP

Owner (roles/owner)

IAP-secured Tunnel User (roles/iap.tunnelResourceAccessor)

iap.tunnelInstances.getIamPolicy

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

IAP Policy Admin (roles/iap.admin)

iap.tunnelInstances.setIamPolicy

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

IAP Policy Admin (roles/iap.admin)

iap.tunnelLocations.getIamPolicy

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

IAP Policy Admin (roles/iap.admin)

iap.tunnelLocations.setIamPolicy

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

IAP Policy Admin (roles/iap.admin)

iap.tunnelZones.getIamPolicy

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

IAP Policy Admin (roles/iap.admin)

iap.tunnelZones.setIamPolicy

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

IAP Policy Admin (roles/iap.admin)

iap.tunnelinstances.remediate

Owner (roles/owner)

IAP-secured Resource Remediator User (roles/iap.remediatorUser)

iap.web.getIamPolicy

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

IAP Policy Admin (roles/iap.admin)

iap.web.getSettings

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

IAP Settings Admin (roles/iap.settingsAdmin)

iap.web.setIamPolicy

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

IAP Policy Admin (roles/iap.admin)

iap.web.updateSettings

Owner (roles/owner)

Editor (roles/editor)

IAP Settings Admin (roles/iap.settingsAdmin)

iap.webServiceVersions.accessViaIAP

IAP-secured Web App User (roles/iap.httpsResourceAccessor)

iap.webServiceVersions.getIamPolicy

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

IAP Policy Admin (roles/iap.admin)

iap.webServiceVersions.getSettings

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

IAP Settings Admin (roles/iap.settingsAdmin)

iap.webServiceVersions.remediate

Owner (roles/owner)

IAP-secured Resource Remediator User (roles/iap.remediatorUser)

iap.webServiceVersions.setIamPolicy

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

IAP Policy Admin (roles/iap.admin)

iap.webServiceVersions.updateSettings

Owner (roles/owner)

Editor (roles/editor)

IAP Settings Admin (roles/iap.settingsAdmin)

iap.webServices.getIamPolicy

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

IAP Policy Admin (roles/iap.admin)

iap.webServices.getSettings

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

IAP Settings Admin (roles/iap.settingsAdmin)

iap.webServices.setIamPolicy

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

IAP Policy Admin (roles/iap.admin)

iap.webServices.updateSettings

Owner (roles/owner)

Editor (roles/editor)

IAP Settings Admin (roles/iap.settingsAdmin)

iap.webTypes.getIamPolicy

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

IAP Policy Admin (roles/iap.admin)

iap.webTypes.getSettings

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

IAP Settings Admin (roles/iap.settingsAdmin)

iap.webTypes.setIamPolicy

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

IAP Policy Admin (roles/iap.admin)

iap.webTypes.updateSettings

Owner (roles/owner)

Editor (roles/editor)

IAP Settings Admin (roles/iap.settingsAdmin)