monitoring.alertPolicies.create

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring AlertPolicy Editor (roles/monitoring.alertPolicyEditor)

Monitoring Editor (roles/monitoring.editor)

Quota Administrator (roles/servicemanagement.quotaAdmin)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Chronicle Service Agent (roles/chronicle.serviceAgent)

monitoring.alertPolicies.createTagBinding

Owner (roles/owner)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring AlertPolicy Editor (roles/monitoring.alertPolicyEditor)

Monitoring Editor (roles/monitoring.editor)

Tag User (roles/resourcemanager.tagUser)

Quota Administrator (roles/servicemanagement.quotaAdmin)

monitoring.alertPolicies.delete

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring AlertPolicy Editor (roles/monitoring.alertPolicyEditor)

Monitoring Editor (roles/monitoring.editor)

Quota Administrator (roles/servicemanagement.quotaAdmin)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Chronicle Service Agent (roles/chronicle.serviceAgent)

monitoring.alertPolicies.deleteTagBinding

Owner (roles/owner)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring AlertPolicy Editor (roles/monitoring.alertPolicyEditor)

Monitoring Editor (roles/monitoring.editor)

Tag User (roles/resourcemanager.tagUser)

Quota Administrator (roles/servicemanagement.quotaAdmin)

monitoring.alertPolicies.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring AlertPolicy Editor (roles/monitoring.alertPolicyEditor)

Monitoring AlertPolicy Viewer (roles/monitoring.alertPolicyViewer)

Monitoring Editor (roles/monitoring.editor)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Quota Administrator (roles/servicemanagement.quotaAdmin)

Service agent roles

• Chronicle Service Agent (roles/chronicle.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

monitoring.alertPolicies.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring AlertPolicy Editor (roles/monitoring.alertPolicyEditor)

Monitoring AlertPolicy Viewer (roles/monitoring.alertPolicyViewer)

Monitoring Editor (roles/monitoring.editor)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Quota Administrator (roles/servicemanagement.quotaAdmin)

Service agent roles

• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
• Chronicle Service Agent (roles/chronicle.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Security Center Control Service Agent (roles/securitycenter.controlServiceAgent)
• Security Health Analytics Service Agent (roles/securitycenter.securityHealthAnalyticsServiceAgent)
• Security Center Service Agent (roles/securitycenter.serviceAgent)
• Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent)

monitoring.alertPolicies.listEffectiveTags

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring AlertPolicy Editor (roles/monitoring.alertPolicyEditor)

Monitoring AlertPolicy Viewer (roles/monitoring.alertPolicyViewer)

Monitoring Editor (roles/monitoring.editor)

Monitoring Viewer (roles/monitoring.viewer)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Quota Administrator (roles/servicemanagement.quotaAdmin)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

monitoring.alertPolicies.listTagBindings

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring AlertPolicy Editor (roles/monitoring.alertPolicyEditor)

Monitoring AlertPolicy Viewer (roles/monitoring.alertPolicyViewer)

Monitoring Editor (roles/monitoring.editor)

Monitoring Viewer (roles/monitoring.viewer)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Quota Administrator (roles/servicemanagement.quotaAdmin)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

monitoring.alertPolicies.update

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring AlertPolicy Editor (roles/monitoring.alertPolicyEditor)

Monitoring Editor (roles/monitoring.editor)

Quota Administrator (roles/servicemanagement.quotaAdmin)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Chronicle Service Agent (roles/chronicle.serviceAgent)

monitoring.alerts.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Alert Viewer (roles/monitoring.alertViewer)

Monitoring Cloud Console Incident Editor (roles/monitoring.cloudConsoleIncidentEditor)

Monitoring Cloud Console Incident Viewer (roles/monitoring.cloudConsoleIncidentViewer)

Monitoring Editor (roles/monitoring.editor)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

monitoring.alerts.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Alert Viewer (roles/monitoring.alertViewer)

Monitoring Cloud Console Incident Editor (roles/monitoring.cloudConsoleIncidentEditor)

Monitoring Cloud Console Incident Viewer (roles/monitoring.cloudConsoleIncidentViewer)

Monitoring Editor (roles/monitoring.editor)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

monitoring.dashboards.create

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Dashboard Configuration Editor (roles/monitoring.dashboardEditor)

Monitoring Editor (roles/monitoring.editor)

Service agent roles

• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

monitoring.dashboards.createTagBinding

Owner (roles/owner)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Dashboard Configuration Editor (roles/monitoring.dashboardEditor)

Monitoring Editor (roles/monitoring.editor)

Tag User (roles/resourcemanager.tagUser)

monitoring.dashboards.delete

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Dashboard Configuration Editor (roles/monitoring.dashboardEditor)

Monitoring Editor (roles/monitoring.editor)

Service agent roles

• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

monitoring.dashboards.deleteTagBinding

Owner (roles/owner)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Dashboard Configuration Editor (roles/monitoring.dashboardEditor)

Monitoring Editor (roles/monitoring.editor)

Tag User (roles/resourcemanager.tagUser)

monitoring.dashboards.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Apigee Organization Admin (roles/apigee.admin)

Cloud API Hub Admin (roles/apihub.admin)

Cloud API hub Insights Viewer (roles/apihub.apiInsightsViewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Dashboard Configuration Editor (roles/monitoring.dashboardEditor)

Monitoring Dashboard Configuration Viewer (roles/monitoring.dashboardViewer)

Monitoring Editor (roles/monitoring.editor)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

monitoring.dashboards.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Apigee Organization Admin (roles/apigee.admin)

Cloud API Hub Admin (roles/apihub.admin)

Cloud API hub Insights Viewer (roles/apihub.apiInsightsViewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Dashboard Configuration Editor (roles/monitoring.dashboardEditor)

Monitoring Dashboard Configuration Viewer (roles/monitoring.dashboardViewer)

Monitoring Editor (roles/monitoring.editor)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

monitoring.dashboards.listEffectiveTags

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Dashboard Configuration Editor (roles/monitoring.dashboardEditor)

Monitoring Dashboard Configuration Viewer (roles/monitoring.dashboardViewer)

Monitoring Editor (roles/monitoring.editor)

Monitoring Viewer (roles/monitoring.viewer)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

monitoring.dashboards.listTagBindings

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Dashboard Configuration Editor (roles/monitoring.dashboardEditor)

Monitoring Dashboard Configuration Viewer (roles/monitoring.dashboardViewer)

Monitoring Editor (roles/monitoring.editor)

Monitoring Viewer (roles/monitoring.viewer)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

monitoring.dashboards.update

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Dashboard Configuration Editor (roles/monitoring.dashboardEditor)

Monitoring Editor (roles/monitoring.editor)

Service agent roles

• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

monitoring.groups.create

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

monitoring.groups.delete

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

monitoring.groups.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

monitoring.groups.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

monitoring.groups.update

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

monitoring.metricDescriptors.create

Owner (roles/owner)

Editor (roles/editor)

Composer Worker (roles/composer.worker)

Kubernetes Engine Default Node Service Account (roles/container.defaultNodeServiceAccount)

Dataproc Worker (roles/dataproc.worker)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Anthos Multi-cloud Telemetry Writer (roles/gkemulticloud.telemetryWriter)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Metric Writer (roles/monitoring.metricWriter)

Service agent roles

• Vertex AI Notebook Service Agent (roles/aiplatform.notebookServiceAgent)
• Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent)
• Vertex AI Service Agent (roles/aiplatform.serviceAgent)
• Vertex AI Telemetry Service Agent (roles/aiplatform.telemetryServiceAgent)
• Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
• Apigee Service Agent (roles/apigee.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
• BigQuery Connection Service Agent (roles/bigqueryconnection.serviceAgent)
• Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Connectors Platform Service Agent (roles/connectors.serviceAgent)
• Kubernetes Engine Default Node Service Agent (roles/container.defaultNodeServiceAgent)
• [Deprecated] Kubernetes Engine Node Service Agent (roles/container.nodeServiceAgent)
• Kubernetes Engine Service Agent (roles/container.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Resource Manager Node Service Agent (roles/dataprocrm.nodeServiceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Cloud Filestore Service Agent (roles/file.serviceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Managed Flink Service Agent (roles/managedflink.serviceAgent)
• Cloud Managed Identities Service Agent (roles/managedidentities.serviceAgent)
• Cloud Memorystore Memcached Service Agent (roles/memcache.serviceAgent)
• Cloud Memorystore Service Agent (roles/memorystore.serviceAgent)
• Mesh Managed Control Plane Service Agent (roles/meshcontrolplane.serviceAgent)
• Mesh Data Plane Service Agent (roles/meshdataplane.serviceAgent)
• RMA Service Agent (roles/rapidmigrationassessment.serviceAgent)
• Cloud Memorystore Redis Service Agent (roles/redis.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Cloud TPU API Service Agent (roles/tpu.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)

monitoring.metricDescriptors.delete

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

monitoring.metricDescriptors.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Apigee Organization Admin (roles/apigee.admin)

Cloud API Hub Admin (roles/apihub.admin)

Cloud API hub Insights Viewer (roles/apihub.apiInsightsViewer)

App Management Viewer (roles/apphub.appManagementViewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Reader (roles/bigtable.reader)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Cloud Hub Operator (roles/cloudhub.operator)

Composer Worker (roles/composer.worker)

Dataproc Worker (roles/dataproc.worker)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Anthos Multi-cloud Telemetry Writer (roles/gkemulticloud.telemetryWriter)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Metric Writer (roles/monitoring.metricWriter)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Vertex AI Notebook Service Agent (roles/aiplatform.notebookServiceAgent)
• Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent)
• Vertex AI Service Agent (roles/aiplatform.serviceAgent)
• Vertex AI Telemetry Service Agent (roles/aiplatform.telemetryServiceAgent)
• Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
• Apigee Service Agent (roles/apigee.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
• BigQuery Connection Service Agent (roles/bigqueryconnection.serviceAgent)
• Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Connectors Platform Service Agent (roles/connectors.serviceAgent)
• Kubernetes Engine Service Agent (roles/container.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Resource Manager Node Service Agent (roles/dataprocrm.nodeServiceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Cloud Filestore Service Agent (roles/file.serviceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Managed Flink Service Agent (roles/managedflink.serviceAgent)
• Cloud Managed Identities Service Agent (roles/managedidentities.serviceAgent)
• Cloud Memorystore Memcached Service Agent (roles/memcache.serviceAgent)
• Cloud Memorystore Service Agent (roles/memorystore.serviceAgent)
• Mesh Managed Control Plane Service Agent (roles/meshcontrolplane.serviceAgent)
• Mesh Data Plane Service Agent (roles/meshdataplane.serviceAgent)
• Monitoring Service Agent (roles/monitoring.notificationServiceAgent)
• Cloud Memorystore Redis Service Agent (roles/redis.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Cloud TPU API Service Agent (roles/tpu.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Workload Manager Service Agent (roles/workloadmanager.serviceAgent)
• Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)

monitoring.metricDescriptors.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

ApiGateway Admin (roles/apigateway.admin)

ApiGateway Viewer (roles/apigateway.viewer)

Apigee Organization Admin (roles/apigee.admin)

Cloud API Hub Admin (roles/apihub.admin)

Cloud API hub Insights Viewer (roles/apihub.apiInsightsViewer)

App Management Viewer (roles/apphub.appManagementViewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Reader (roles/bigtable.reader)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Cloud Hub Operator (roles/cloudhub.operator)

Composer Worker (roles/composer.worker)

Kubernetes Engine Default Node Service Account (roles/container.defaultNodeServiceAccount)

Dataproc Worker (roles/dataproc.worker)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Anthos Multi-cloud Telemetry Writer (roles/gkemulticloud.telemetryWriter)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Metric Writer (roles/monitoring.metricWriter)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Vertex AI Notebook Service Agent (roles/aiplatform.notebookServiceAgent)
• Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent)
• Vertex AI Service Agent (roles/aiplatform.serviceAgent)
• Vertex AI Telemetry Service Agent (roles/aiplatform.telemetryServiceAgent)
• Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
• Apigee Service Agent (roles/apigee.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
• BigQuery Connection Service Agent (roles/bigqueryconnection.serviceAgent)
• Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Connectors Platform Service Agent (roles/connectors.serviceAgent)
• Kubernetes Engine Default Node Service Agent (roles/container.defaultNodeServiceAgent)
• [Deprecated] Kubernetes Engine Node Service Agent (roles/container.nodeServiceAgent)
• Kubernetes Engine Service Agent (roles/container.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Resource Manager Node Service Agent (roles/dataprocrm.nodeServiceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Cloud Filestore Service Agent (roles/file.serviceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Managed Flink Service Agent (roles/managedflink.serviceAgent)
• Cloud Managed Identities Service Agent (roles/managedidentities.serviceAgent)
• Cloud Memorystore Memcached Service Agent (roles/memcache.serviceAgent)
• Cloud Memorystore Service Agent (roles/memorystore.serviceAgent)
• Mesh Managed Control Plane Service Agent (roles/meshcontrolplane.serviceAgent)
• Mesh Data Plane Service Agent (roles/meshdataplane.serviceAgent)
• Monitoring Service Agent (roles/monitoring.notificationServiceAgent)
• RMA Service Agent (roles/rapidmigrationassessment.serviceAgent)
• Cloud Memorystore Redis Service Agent (roles/redis.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Cloud TPU API Service Agent (roles/tpu.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Workload Manager Service Agent (roles/workloadmanager.serviceAgent)
• Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)

monitoring.metricsScopes.link

Owner (roles/owner)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Metrics Scopes Admin (roles/monitoring.metricsScopesAdmin)

Observability Scopes Editor (roles/observability.scopesEditor)

Service agent roles

• GKE Hub Service Agent (roles/gkehub.serviceAgent)

monitoring.monitoredResourceDescriptors.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

ApiGateway Admin (roles/apigateway.admin)

ApiGateway Viewer (roles/apigateway.viewer)

Apigee Organization Admin (roles/apigee.admin)

Cloud API Hub Admin (roles/apihub.admin)

Cloud API hub Insights Viewer (roles/apihub.apiInsightsViewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Composer Worker (roles/composer.worker)

Dataproc Worker (roles/dataproc.worker)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Anthos Multi-cloud Telemetry Writer (roles/gkemulticloud.telemetryWriter)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Metric Writer (roles/monitoring.metricWriter)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Vertex AI Notebook Service Agent (roles/aiplatform.notebookServiceAgent)
• Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent)
• Vertex AI Service Agent (roles/aiplatform.serviceAgent)
• Vertex AI Telemetry Service Agent (roles/aiplatform.telemetryServiceAgent)
• Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
• Apigee Service Agent (roles/apigee.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
• BigQuery Connection Service Agent (roles/bigqueryconnection.serviceAgent)
• Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Connectors Platform Service Agent (roles/connectors.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Resource Manager Node Service Agent (roles/dataprocrm.nodeServiceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Cloud Filestore Service Agent (roles/file.serviceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Managed Flink Service Agent (roles/managedflink.serviceAgent)
• Cloud Managed Identities Service Agent (roles/managedidentities.serviceAgent)
• Cloud Memorystore Memcached Service Agent (roles/memcache.serviceAgent)
• Cloud Memorystore Service Agent (roles/memorystore.serviceAgent)
• Mesh Managed Control Plane Service Agent (roles/meshcontrolplane.serviceAgent)
• Mesh Data Plane Service Agent (roles/meshdataplane.serviceAgent)
• Monitoring Service Agent (roles/monitoring.notificationServiceAgent)
• Cloud Memorystore Redis Service Agent (roles/redis.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Cloud TPU API Service Agent (roles/tpu.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Workload Manager Service Agent (roles/workloadmanager.serviceAgent)
• Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)

monitoring.monitoredResourceDescriptors.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Apigee Organization Admin (roles/apigee.admin)

Cloud API Hub Admin (roles/apihub.admin)

Cloud API hub Insights Viewer (roles/apihub.apiInsightsViewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Composer Worker (roles/composer.worker)

Dataproc Worker (roles/dataproc.worker)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Anthos Multi-cloud Telemetry Writer (roles/gkemulticloud.telemetryWriter)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Metric Writer (roles/monitoring.metricWriter)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Vertex AI Notebook Service Agent (roles/aiplatform.notebookServiceAgent)
• Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent)
• Vertex AI Service Agent (roles/aiplatform.serviceAgent)
• Vertex AI Telemetry Service Agent (roles/aiplatform.telemetryServiceAgent)
• Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
• Apigee Service Agent (roles/apigee.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
• BigQuery Connection Service Agent (roles/bigqueryconnection.serviceAgent)
• Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Connectors Platform Service Agent (roles/connectors.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Resource Manager Node Service Agent (roles/dataprocrm.nodeServiceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Cloud Filestore Service Agent (roles/file.serviceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Managed Flink Service Agent (roles/managedflink.serviceAgent)
• Cloud Managed Identities Service Agent (roles/managedidentities.serviceAgent)
• Cloud Memorystore Memcached Service Agent (roles/memcache.serviceAgent)
• Cloud Memorystore Service Agent (roles/memorystore.serviceAgent)
• Mesh Managed Control Plane Service Agent (roles/meshcontrolplane.serviceAgent)
• Mesh Data Plane Service Agent (roles/meshdataplane.serviceAgent)
• Monitoring Service Agent (roles/monitoring.notificationServiceAgent)
• Cloud Memorystore Redis Service Agent (roles/redis.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Cloud TPU API Service Agent (roles/tpu.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Workload Manager Service Agent (roles/workloadmanager.serviceAgent)
• Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)

monitoring.notificationChannelDescriptors.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring NotificationChannel Editor (roles/monitoring.notificationChannelEditor)

Monitoring NotificationChannel Viewer (roles/monitoring.notificationChannelViewer)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

monitoring.notificationChannelDescriptors.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring NotificationChannel Editor (roles/monitoring.notificationChannelEditor)

Monitoring NotificationChannel Viewer (roles/monitoring.notificationChannelViewer)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

monitoring.notificationChannels.create

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring NotificationChannel Editor (roles/monitoring.notificationChannelEditor)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

monitoring.notificationChannels.delete

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring NotificationChannel Editor (roles/monitoring.notificationChannelEditor)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

monitoring.notificationChannels.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring NotificationChannel Editor (roles/monitoring.notificationChannelEditor)

Monitoring NotificationChannel Viewer (roles/monitoring.notificationChannelViewer)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Vertex AI Service Agent (roles/aiplatform.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Vertex AI Model Monitoring Service Agent (roles/aiplatform.modelMonitoringServiceAgent)

monitoring.notificationChannels.getVerificationCode

Owner (roles/owner)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

monitoring.notificationChannels.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring NotificationChannel Editor (roles/monitoring.notificationChannelEditor)

Monitoring NotificationChannel Viewer (roles/monitoring.notificationChannelViewer)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

monitoring.notificationChannels.sendVerificationCode

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring NotificationChannel Editor (roles/monitoring.notificationChannelEditor)

monitoring.notificationChannels.update

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring NotificationChannel Editor (roles/monitoring.notificationChannelEditor)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

monitoring.notificationChannels.verify

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring NotificationChannel Editor (roles/monitoring.notificationChannelEditor)

monitoring.services.create

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Services Editor (roles/monitoring.servicesEditor)

monitoring.services.delete

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Services Editor (roles/monitoring.servicesEditor)

monitoring.services.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Services Editor (roles/monitoring.servicesEditor)

Monitoring Services Viewer (roles/monitoring.servicesViewer)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

monitoring.services.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Services Editor (roles/monitoring.servicesEditor)

Monitoring Services Viewer (roles/monitoring.servicesViewer)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

monitoring.services.update

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Services Editor (roles/monitoring.servicesEditor)

monitoring.slos.create

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Services Editor (roles/monitoring.servicesEditor)

monitoring.slos.delete

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Services Editor (roles/monitoring.servicesEditor)

monitoring.slos.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Services Editor (roles/monitoring.servicesEditor)

Monitoring Services Viewer (roles/monitoring.servicesViewer)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

monitoring.slos.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Services Editor (roles/monitoring.servicesEditor)

Monitoring Services Viewer (roles/monitoring.servicesViewer)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

monitoring.slos.update

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Services Editor (roles/monitoring.servicesEditor)

monitoring.snoozes.create

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Snooze Editor (roles/monitoring.snoozeEditor)

monitoring.snoozes.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Snooze Editor (roles/monitoring.snoozeEditor)

Monitoring Snooze Viewer (roles/monitoring.snoozeViewer)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

monitoring.snoozes.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Snooze Editor (roles/monitoring.snoozeEditor)

Monitoring Snooze Viewer (roles/monitoring.snoozeViewer)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

monitoring.snoozes.update

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Snooze Editor (roles/monitoring.snoozeEditor)

monitoring.timeSeries.create

Owner (roles/owner)

Editor (roles/editor)

AlloyDB Client (roles/alloydb.client)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Reader (roles/bigtable.reader)

Bigtable User (roles/bigtable.user)

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Composer Worker (roles/composer.worker)

Kubernetes Engine Default Node Service Account (roles/container.defaultNodeServiceAccount)

Dataflow Worker (roles/dataflow.worker)

Dataproc Worker (roles/dataproc.worker)

Application Design Center Admin (roles/designcenter.admin)

Application Design Center User (roles/designcenter.user)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Anthos Multi-cloud Telemetry Writer (roles/gkemulticloud.telemetryWriter)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Metric Writer (roles/monitoring.metricWriter)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Database Reader (roles/spanner.databaseReader)

Cloud Spanner Database Reader with DataBoost (roles/spanner.databaseReaderWithDataBoost)

Cloud Spanner Database User (roles/spanner.databaseUser)

Storage Admin (roles/storage.admin)

Storage Object Admin (roles/storage.objectAdmin)

Storage Object User (roles/storage.objectUser)

Storage Transfer Agent (roles/storagetransfer.transferAgent)

Service agent roles

• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)
• Vertex AI Notebook Service Agent (roles/aiplatform.notebookServiceAgent)
• Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent)
• Vertex AI Service Agent (roles/aiplatform.serviceAgent)
• Vertex AI Telemetry Service Agent (roles/aiplatform.telemetryServiceAgent)
• Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
• Apigee Service Agent (roles/apigee.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
• BigQuery Connection Service Agent (roles/bigqueryconnection.serviceAgent)
• Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Connectors Platform Service Agent (roles/connectors.serviceAgent)
• Kubernetes Engine Default Node Service Agent (roles/container.defaultNodeServiceAgent)
• [Deprecated] Kubernetes Engine Node Service Agent (roles/container.nodeServiceAgent)
• Kubernetes Engine Service Agent (roles/container.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• Dataproc Resource Manager Node Service Agent (roles/dataprocrm.nodeServiceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Eventarc Service Agent (roles/eventarc.serviceAgent)
• Cloud Filestore Service Agent (roles/file.serviceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• KubeRun Events Data Plane Service Agent (roles/kuberun.eventsDataPlaneServiceAgent)
• Managed Flink Service Agent (roles/managedflink.serviceAgent)
• Cloud Managed Identities Service Agent (roles/managedidentities.serviceAgent)
• Cloud Memorystore Memcached Service Agent (roles/memcache.serviceAgent)
• Cloud Memorystore Service Agent (roles/memorystore.serviceAgent)
• Mesh Managed Control Plane Service Agent (roles/meshcontrolplane.serviceAgent)
• Mesh Data Plane Service Agent (roles/meshdataplane.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• RMA Service Agent (roles/rapidmigrationassessment.serviceAgent)
• Cloud Memorystore Redis Service Agent (roles/redis.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Cloud TPU API Service Agent (roles/tpu.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)

monitoring.timeSeries.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

ApiGateway Admin (roles/apigateway.admin)

ApiGateway Viewer (roles/apigateway.viewer)

Apigee Organization Admin (roles/apigee.admin)

Apigee Read-only Admin (roles/apigee.readOnlyAdmin)

App Management Viewer (roles/apphub.appManagementViewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Reader (roles/bigtable.reader)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Capacity Planner Usage Viewer (roles/capacityplanner.viewer)

Cloud Hub Operator (roles/cloudhub.operator)

Cloud Quotas Admin (roles/cloudquotas.admin)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Cloud SQL Viewer (roles/cloudsql.viewer)

Cloud Tasks Admin (roles/cloudtasks.admin)

Cloud Tasks Viewer (roles/cloudtasks.viewer)

Composer Worker (roles/composer.worker)

Cloud Infrastructure Manager Agent (roles/config.agent)

Kubernetes Engine Default Node Service Account (roles/container.defaultNodeServiceAccount)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Grow Admin (roles/firebase.growthAdmin)

Firebase Grow Viewer (roles/firebase.growthViewer)

Firebase Quality Admin (roles/firebase.qualityAdmin)

Firebase Quality Viewer (roles/firebase.qualityViewer)

Firebase Viewer (roles/firebase.viewer)

Fleet Project-level Scope Editor (roles/gkehub.scopeEditorProjectLevel)

Fleet Project-level Scope Viewer (roles/gkehub.scopeViewerProjectLevel)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Viewer (roles/monitoring.viewer)

Service Extensions Admin (roles/networkservices.serviceExtensionsAdmin)

Service Extensions Viewer (roles/networkservices.serviceExtensionsViewer)

reCAPTCHA Enterprise Admin (roles/recaptchaenterprise.admin)

reCAPTCHA Enterprise Viewer (roles/recaptchaenterprise.viewer)

Firewall Recommender Admin (roles/recommender.firewallAdmin)

Firewall Recommender Viewer (roles/recommender.firewallViewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service Management Administrator (roles/servicemanagement.admin)

Quota Administrator (roles/servicemanagement.quotaAdmin)

Quota Viewer (roles/servicemanagement.quotaViewer)

Service Usage Admin (roles/serviceusage.serviceUsageAdmin)

Service Usage Consumer (roles/serviceusage.serviceUsageConsumer)

Service Usage Viewer (roles/serviceusage.serviceUsageViewer)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Restore Admin (roles/spanner.restoreAdmin)

Cloud Spanner Viewer (roles/spanner.viewer)

Telco Automation Admin (roles/telcoautomation.admin)

Workload Manager Admin (roles/workloadmanager.admin)

Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin)

Service agent roles

• Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
• Blockchain Node Engine Service Agent (roles/blockchainnodeengine.serviceAgent)
• Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Kubernetes Engine Default Node Service Agent (roles/container.defaultNodeServiceAgent)
• [Deprecated] Kubernetes Engine Node Service Agent (roles/container.nodeServiceAgent)
• Kubernetes Engine Service Agent (roles/container.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datastream Service Agent (roles/datastream.serviceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Monitoring Service Agent (roles/monitoring.notificationServiceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Security Center Control Service Agent (roles/securitycenter.controlServiceAgent)
• Security Center Service Agent (roles/securitycenter.serviceAgent)
• Workload Manager Service Agent (roles/workloadmanager.serviceAgent)
• Vertex AI Telemetry Service Agent (roles/aiplatform.telemetryServiceAgent)

monitoring.uptimeCheckConfigs.create

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Uptime Check Configuration Editor (roles/monitoring.uptimeCheckConfigEditor)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

monitoring.uptimeCheckConfigs.delete

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Uptime Check Configuration Editor (roles/monitoring.uptimeCheckConfigEditor)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

monitoring.uptimeCheckConfigs.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Uptime Check Configuration Editor (roles/monitoring.uptimeCheckConfigEditor)

Monitoring Uptime Check Configuration Viewer (roles/monitoring.uptimeCheckConfigViewer)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

monitoring.uptimeCheckConfigs.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Uptime Check Configuration Editor (roles/monitoring.uptimeCheckConfigEditor)

Monitoring Uptime Check Configuration Viewer (roles/monitoring.uptimeCheckConfigViewer)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

monitoring.uptimeCheckConfigs.update

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Uptime Check Configuration Editor (roles/monitoring.uptimeCheckConfigEditor)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

opsconfigmonitoring.resourceMetadata.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Viewer (roles/monitoring.viewer)

Ops Config Monitoring Resource Metadata Viewer (roles/opsconfigmonitoring.resourceMetadata.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

opsconfigmonitoring.resourceMetadata.write

Owner (roles/owner)

Editor (roles/editor)

Anthos Multi-cloud Telemetry Writer (roles/gkemulticloud.telemetryWriter)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Ops Config Monitoring Resource Metadata Writer (roles/opsconfigmonitoring.resourceMetadata.writer)

Service agent roles

• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)

stackdriver.projects.edit

Owner (roles/owner)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Stackdriver Accounts Editor (roles/stackdriver.accounts.editor)

stackdriver.projects.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Error Reporting Admin (roles/errorreporting.admin)

Error Reporting User (roles/errorreporting.user)

Error Reporting Viewer (roles/errorreporting.viewer)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Stackdriver Accounts Editor (roles/stackdriver.accounts.editor)

Stackdriver Accounts Viewer (roles/stackdriver.accounts.viewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Security Center Control Service Agent (roles/securitycenter.controlServiceAgent)
• Security Health Analytics Service Agent (roles/securitycenter.securityHealthAnalyticsServiceAgent)
• Security Center Service Agent (roles/securitycenter.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

stackdriver.resourceMetadata.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Viewer (roles/monitoring.viewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

stackdriver.resourceMetadata.write

Owner (roles/owner)

Editor (roles/editor)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Stackdriver Resource Metadata Writer (roles/stackdriver.resourceMetadata.writer)

Service agent roles

• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)