Network Connectivity Center roles and permissions

`networkconnectivity.gatewayAdvertisedRoutes.create`

Owner (roles/owner)

Editor (roles/editor)

Network Administrator (roles/iam.networkAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

`networkconnectivity.gatewayAdvertisedRoutes.delete`

Owner (roles/owner)

Editor (roles/editor)

Network Administrator (roles/iam.networkAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

`networkconnectivity.gatewayAdvertisedRoutes.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Network Administrator (roles/iam.networkAdmin)

Support User (roles/iam.supportUser)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Hub & Spoke Viewer (roles/networkconnectivity.hubViewer)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

`networkconnectivity.gatewayAdvertisedRoutes.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Hub & Spoke Viewer (roles/networkconnectivity.hubViewer)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

`networkconnectivity.gatewayAdvertisedRoutes.update`

Owner (roles/owner)

Editor (roles/editor)

Network Administrator (roles/iam.networkAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

`networkconnectivity.groups.acceptSpoke`

Owner (roles/owner)

Editor (roles/editor)

Network Administrator (roles/iam.networkAdmin)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

`networkconnectivity.groups.acceptSpokeUpdate`

Owner (roles/owner)

Editor (roles/editor)

Network Administrator (roles/iam.networkAdmin)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

`networkconnectivity.groups.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Network Administrator (roles/iam.networkAdmin)

Support User (roles/iam.supportUser)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Hub & Spoke Viewer (roles/networkconnectivity.hubViewer)

`networkconnectivity.groups.getIamPolicy`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Hub & Spoke Viewer (roles/networkconnectivity.hubViewer)

`networkconnectivity.groups.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Hub & Spoke Viewer (roles/networkconnectivity.hubViewer)

`networkconnectivity.groups.rejectSpoke`

Owner (roles/owner)

Editor (roles/editor)

Network Administrator (roles/iam.networkAdmin)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

`networkconnectivity.groups.rejectSpokeUpdate`

Owner (roles/owner)

Editor (roles/editor)

Network Administrator (roles/iam.networkAdmin)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

`networkconnectivity.groups.setIamPolicy`

Owner (roles/owner)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

`networkconnectivity.groups.use`

Owner (roles/owner)

Editor (roles/editor)

Network Administrator (roles/iam.networkAdmin)

Group Admin (roles/networkconnectivity.groupAdmin)

Group User (roles/networkconnectivity.groupUser)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

`networkconnectivity.hubRouteTables.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Network Administrator (roles/iam.networkAdmin)

Support User (roles/iam.supportUser)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Hub & Spoke Viewer (roles/networkconnectivity.hubViewer)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

Service agent roles

Network Connectivity Service Agent (roles/networkconnectivity.serviceAgent)

`networkconnectivity.hubRouteTables.getIamPolicy`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Hub & Spoke Viewer (roles/networkconnectivity.hubViewer)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

`networkconnectivity.hubRouteTables.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Hub & Spoke Viewer (roles/networkconnectivity.hubViewer)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

Service agent roles

Network Connectivity Service Agent (roles/networkconnectivity.serviceAgent)

`networkconnectivity.hubRouteTables.setIamPolicy`

Owner (roles/owner)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

`networkconnectivity.hubRoutes.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Network Administrator (roles/iam.networkAdmin)

Support User (roles/iam.supportUser)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Hub & Spoke Viewer (roles/networkconnectivity.hubViewer)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

Service agent roles

Network Connectivity Service Agent (roles/networkconnectivity.serviceAgent)

`networkconnectivity.hubRoutes.getIamPolicy`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Hub & Spoke Viewer (roles/networkconnectivity.hubViewer)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

`networkconnectivity.hubRoutes.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Hub & Spoke Viewer (roles/networkconnectivity.hubViewer)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

Service agent roles

Network Connectivity Service Agent (roles/networkconnectivity.serviceAgent)

`networkconnectivity.hubRoutes.setIamPolicy`

Owner (roles/owner)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

`networkconnectivity.hubs.create`

Owner (roles/owner)

Editor (roles/editor)

Network Administrator (roles/iam.networkAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

`networkconnectivity.hubs.delete`

Owner (roles/owner)

Editor (roles/editor)

Network Administrator (roles/iam.networkAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

`networkconnectivity.hubs.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Network Administrator (roles/iam.networkAdmin)

Support User (roles/iam.supportUser)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Hub & Spoke Viewer (roles/networkconnectivity.hubViewer)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

`networkconnectivity.hubs.getIamPolicy`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Hub & Spoke Viewer (roles/networkconnectivity.hubViewer)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

`networkconnectivity.hubs.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Hub & Spoke Viewer (roles/networkconnectivity.hubViewer)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

`networkconnectivity.hubs.listSpokes`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Network Administrator (roles/iam.networkAdmin)

Support User (roles/iam.supportUser)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Hub & Spoke Viewer (roles/networkconnectivity.hubViewer)

`networkconnectivity.hubs.queryStatus`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Network Administrator (roles/iam.networkAdmin)

Support User (roles/iam.supportUser)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Hub & Spoke Viewer (roles/networkconnectivity.hubViewer)

`networkconnectivity.hubs.setIamPolicy`

Owner (roles/owner)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

`networkconnectivity.hubs.update`

Owner (roles/owner)

Editor (roles/editor)

Network Administrator (roles/iam.networkAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

`networkconnectivity.internalRanges.create`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Network Connectivity Service Agent (roles/networkconnectivity.serviceAgent)
Oracle Database@Google Cloud Service Agent (roles/oci.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.internalRanges.delete`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Network Connectivity Service Agent (roles/networkconnectivity.serviceAgent)
Oracle Database@Google Cloud Service Agent (roles/oci.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.internalRanges.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Network Connectivity Service Agent (roles/networkconnectivity.serviceAgent)
Oracle Database@Google Cloud Service Agent (roles/oci.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.internalRanges.getIamPolicy`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.internalRanges.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Network Connectivity Service Agent (roles/networkconnectivity.serviceAgent)
Oracle Database@Google Cloud Service Agent (roles/oci.serviceAgent)
Service Networking Service Agent (roles/servicenetworking.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.internalRanges.setIamPolicy`

Owner (roles/owner)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.internalRanges.update`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Oracle Database@Google Cloud Service Agent (roles/oci.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.locations.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Hub & Spoke Viewer (roles/networkconnectivity.hubViewer)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

Transport Admin (roles/networkconnectivity.transportAdmin)

Transport Viewer (roles/networkconnectivity.transportViewer)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.locations.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Hub & Spoke Viewer (roles/networkconnectivity.hubViewer)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

Transport Admin (roles/networkconnectivity.transportAdmin)

Transport Viewer (roles/networkconnectivity.transportViewer)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.multicloudDataTransferConfigs.create`

Owner (roles/owner)

Editor (roles/editor)

Multicloud Data Transfer Config Admin (roles/networkconnectivity.multicloudDataTransferConfigAdmin)

`networkconnectivity.multicloudDataTransferConfigs.delete`

Owner (roles/owner)

Editor (roles/editor)

Multicloud Data Transfer Config Admin (roles/networkconnectivity.multicloudDataTransferConfigAdmin)

`networkconnectivity.multicloudDataTransferConfigs.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Multicloud Data Transfer Config Admin (roles/networkconnectivity.multicloudDataTransferConfigAdmin)

Multicloud Data Transfer Config Viewer (roles/networkconnectivity.multicloudDataTransferConfigViewer)

`networkconnectivity.multicloudDataTransferConfigs.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Multicloud Data Transfer Config Admin (roles/networkconnectivity.multicloudDataTransferConfigAdmin)

Multicloud Data Transfer Config Viewer (roles/networkconnectivity.multicloudDataTransferConfigViewer)

`networkconnectivity.multicloudDataTransferConfigs.update`

Owner (roles/owner)

Editor (roles/editor)

Multicloud Data Transfer Config Admin (roles/networkconnectivity.multicloudDataTransferConfigAdmin)

`networkconnectivity.multicloudDataTransferDestinations.create`

Owner (roles/owner)

Editor (roles/editor)

Multicloud Data Transfer Config Admin (roles/networkconnectivity.multicloudDataTransferConfigAdmin)

Destination Admin (roles/networkconnectivity.multicloudDataTransferDestinationAdmin)

`networkconnectivity.multicloudDataTransferDestinations.delete`

Owner (roles/owner)

Editor (roles/editor)

Multicloud Data Transfer Config Admin (roles/networkconnectivity.multicloudDataTransferConfigAdmin)

Destination Admin (roles/networkconnectivity.multicloudDataTransferDestinationAdmin)

`networkconnectivity.multicloudDataTransferDestinations.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Multicloud Data Transfer Config Admin (roles/networkconnectivity.multicloudDataTransferConfigAdmin)

Multicloud Data Transfer Config Viewer (roles/networkconnectivity.multicloudDataTransferConfigViewer)

Destination Admin (roles/networkconnectivity.multicloudDataTransferDestinationAdmin)

Destination Viewer (roles/networkconnectivity.multicloudDataTransferDestinationViewer)

`networkconnectivity.multicloudDataTransferDestinations.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Multicloud Data Transfer Config Admin (roles/networkconnectivity.multicloudDataTransferConfigAdmin)

Multicloud Data Transfer Config Viewer (roles/networkconnectivity.multicloudDataTransferConfigViewer)

Destination Admin (roles/networkconnectivity.multicloudDataTransferDestinationAdmin)

Destination Viewer (roles/networkconnectivity.multicloudDataTransferDestinationViewer)

`networkconnectivity.multicloudDataTransferDestinations.update`

Owner (roles/owner)

Editor (roles/editor)

Multicloud Data Transfer Config Admin (roles/networkconnectivity.multicloudDataTransferConfigAdmin)

Destination Admin (roles/networkconnectivity.multicloudDataTransferDestinationAdmin)

`networkconnectivity.multicloudDataTransferSupportedServices.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Multicloud Data Transfer Config Admin (roles/networkconnectivity.multicloudDataTransferConfigAdmin)

Multicloud Data Transfer Config Viewer (roles/networkconnectivity.multicloudDataTransferConfigViewer)

Destination Admin (roles/networkconnectivity.multicloudDataTransferDestinationAdmin)

Destination Viewer (roles/networkconnectivity.multicloudDataTransferDestinationViewer)

`networkconnectivity.multicloudDataTransferSupportedServices.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Multicloud Data Transfer Config Admin (roles/networkconnectivity.multicloudDataTransferConfigAdmin)

Multicloud Data Transfer Config Viewer (roles/networkconnectivity.multicloudDataTransferConfigViewer)

Destination Admin (roles/networkconnectivity.multicloudDataTransferDestinationAdmin)

Destination Viewer (roles/networkconnectivity.multicloudDataTransferDestinationViewer)

`networkconnectivity.operations.cancel`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Transport Admin (roles/networkconnectivity.transportAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.operations.delete`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Transport Admin (roles/networkconnectivity.transportAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.operations.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Multicloud Data Transfer Config Admin (roles/networkconnectivity.multicloudDataTransferConfigAdmin)

Multicloud Data Transfer Config Viewer (roles/networkconnectivity.multicloudDataTransferConfigViewer)

Destination Admin (roles/networkconnectivity.multicloudDataTransferDestinationAdmin)

Destination Viewer (roles/networkconnectivity.multicloudDataTransferDestinationViewer)

Service Automation Service Producer Admin (roles/networkconnectivity.serviceProducerAdmin)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

Transport Admin (roles/networkconnectivity.transportAdmin)

Transport Viewer (roles/networkconnectivity.transportViewer)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Network Connectivity Service Agent (roles/networkconnectivity.serviceAgent)
Oracle Database@Google Cloud Service Agent (roles/oci.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.operations.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Multicloud Data Transfer Config Admin (roles/networkconnectivity.multicloudDataTransferConfigAdmin)

Multicloud Data Transfer Config Viewer (roles/networkconnectivity.multicloudDataTransferConfigViewer)

Destination Admin (roles/networkconnectivity.multicloudDataTransferDestinationAdmin)

Destination Viewer (roles/networkconnectivity.multicloudDataTransferDestinationViewer)

Service Automation Service Producer Admin (roles/networkconnectivity.serviceProducerAdmin)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

Transport Admin (roles/networkconnectivity.transportAdmin)

Transport Viewer (roles/networkconnectivity.transportViewer)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Oracle Database@Google Cloud Service Agent (roles/oci.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.policyBasedRoutes.create`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.policyBasedRoutes.delete`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.policyBasedRoutes.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.policyBasedRoutes.getIamPolicy`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.policyBasedRoutes.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.policyBasedRoutes.setIamPolicy`

Owner (roles/owner)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.regionalEndpoints.create`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Regional Endpoint Admin (roles/networkconnectivity.regionalEndpointAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.regionalEndpoints.delete`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Regional Endpoint Admin (roles/networkconnectivity.regionalEndpointAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.regionalEndpoints.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Support User (roles/iam.supportUser)

Regional Endpoint Admin (roles/networkconnectivity.regionalEndpointAdmin)

Regional Endpoint Viewer (roles/networkconnectivity.regionalEndpointViewer)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.regionalEndpoints.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Regional Endpoint Admin (roles/networkconnectivity.regionalEndpointAdmin)

Regional Endpoint Viewer (roles/networkconnectivity.regionalEndpointViewer)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.remoteTransportProfiles.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Transport Admin (roles/networkconnectivity.transportAdmin)

Transport Viewer (roles/networkconnectivity.transportViewer)

`networkconnectivity.remoteTransportProfiles.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Transport Admin (roles/networkconnectivity.transportAdmin)

Transport Viewer (roles/networkconnectivity.transportViewer)

`networkconnectivity.serviceClasses.create`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service Automation Service Producer Admin (roles/networkconnectivity.serviceProducerAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.serviceClasses.delete`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service Automation Service Producer Admin (roles/networkconnectivity.serviceProducerAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.serviceClasses.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Support User (roles/iam.supportUser)

Service Class User (roles/networkconnectivity.serviceClassUser)

Service Automation Service Producer Admin (roles/networkconnectivity.serviceProducerAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.serviceClasses.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service Class User (roles/networkconnectivity.serviceClassUser)

Service Automation Service Producer Admin (roles/networkconnectivity.serviceProducerAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.serviceClasses.update`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service Automation Service Producer Admin (roles/networkconnectivity.serviceProducerAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.serviceClasses.use`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service Class User (roles/networkconnectivity.serviceClassUser)

Service Automation Service Producer Admin (roles/networkconnectivity.serviceProducerAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Instance Group Manager Service Agent (roles/compute.instanceGroupManagerServiceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.serviceConnectionMaps.create`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service Automation Service Producer Admin (roles/networkconnectivity.serviceProducerAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.serviceConnectionMaps.delete`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service Automation Service Producer Admin (roles/networkconnectivity.serviceProducerAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.serviceConnectionMaps.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Support User (roles/iam.supportUser)

Service Automation Service Producer Admin (roles/networkconnectivity.serviceProducerAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.serviceConnectionMaps.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service Automation Service Producer Admin (roles/networkconnectivity.serviceProducerAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.serviceConnectionMaps.update`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service Automation Service Producer Admin (roles/networkconnectivity.serviceProducerAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.serviceConnectionPolicies.create`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service Automation Consumer Network Admin (roles/networkconnectivity.consumerNetworkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.serviceConnectionPolicies.delete`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service Automation Consumer Network Admin (roles/networkconnectivity.consumerNetworkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.serviceConnectionPolicies.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Support User (roles/iam.supportUser)

Service Automation Consumer Network Admin (roles/networkconnectivity.consumerNetworkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.serviceConnectionPolicies.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service Automation Consumer Network Admin (roles/networkconnectivity.consumerNetworkAdmin)

Cloud Memorystore Redis Admin (roles/redis.admin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.serviceConnectionPolicies.update`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service Automation Consumer Network Admin (roles/networkconnectivity.consumerNetworkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networkconnectivity.spokes.create`

Owner (roles/owner)

Editor (roles/editor)

Network Administrator (roles/iam.networkAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

`networkconnectivity.spokes.delete`

Owner (roles/owner)

Editor (roles/editor)

Network Administrator (roles/iam.networkAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

`networkconnectivity.spokes.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Network Administrator (roles/iam.networkAdmin)

Support User (roles/iam.supportUser)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Hub & Spoke Viewer (roles/networkconnectivity.hubViewer)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

`networkconnectivity.spokes.getIamPolicy`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Hub & Spoke Viewer (roles/networkconnectivity.hubViewer)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

`networkconnectivity.spokes.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Hub & Spoke Viewer (roles/networkconnectivity.hubViewer)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

`networkconnectivity.spokes.setIamPolicy`

Owner (roles/owner)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

`networkconnectivity.spokes.update`

Owner (roles/owner)

Editor (roles/editor)

Network Administrator (roles/iam.networkAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

`networkconnectivity.transports.create`

Owner (roles/owner)

Editor (roles/editor)

Transport Admin (roles/networkconnectivity.transportAdmin)

`networkconnectivity.transports.delete`

Owner (roles/owner)

Editor (roles/editor)

Transport Admin (roles/networkconnectivity.transportAdmin)

`networkconnectivity.transports.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Transport Admin (roles/networkconnectivity.transportAdmin)

Transport Viewer (roles/networkconnectivity.transportViewer)

`networkconnectivity.transports.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Transport Admin (roles/networkconnectivity.transportAdmin)

Transport Viewer (roles/networkconnectivity.transportViewer)

`networkconnectivity.transports.update`

Owner (roles/owner)

Editor (roles/editor)

Transport Admin (roles/networkconnectivity.transportAdmin)