pubsub.messageTransforms.validate

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Composer Worker (roles/composer.worker)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Pub/Sub Viewer (roles/pubsub.viewer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

pubsub.schemas.attach

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Composer Worker (roles/composer.worker)

Dev Ops (roles/iam.devOps)

Support User (roles/iam.supportUser)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Service agent roles

• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

pubsub.schemas.commit

Owner (roles/owner)

Editor (roles/editor)

Composer Worker (roles/composer.worker)

Dev Ops (roles/iam.devOps)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

pubsub.schemas.create

Owner (roles/owner)

Editor (roles/editor)

Composer Worker (roles/composer.worker)

Dev Ops (roles/iam.devOps)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

pubsub.schemas.delete

Owner (roles/owner)

Editor (roles/editor)

Composer Worker (roles/composer.worker)

Dev Ops (roles/iam.devOps)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

pubsub.schemas.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Composer Worker (roles/composer.worker)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Pub/Sub Viewer (roles/pubsub.viewer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

pubsub.schemas.getIamPolicy

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Pub/Sub Admin (roles/pubsub.admin)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

pubsub.schemas.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Composer Worker (roles/composer.worker)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Pub/Sub Viewer (roles/pubsub.viewer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

pubsub.schemas.listRevisions

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Composer Worker (roles/composer.worker)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Pub/Sub Viewer (roles/pubsub.viewer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

pubsub.schemas.rollback

Owner (roles/owner)

Editor (roles/editor)

Composer Worker (roles/composer.worker)

Dev Ops (roles/iam.devOps)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

pubsub.schemas.setIamPolicy

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

Pub/Sub Admin (roles/pubsub.admin)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

pubsub.schemas.validate

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Composer Worker (roles/composer.worker)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Pub/Sub Viewer (roles/pubsub.viewer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

pubsub.snapshots.create

Owner (roles/owner)

Editor (roles/editor)

Composer Worker (roles/composer.worker)

Dev Ops (roles/iam.devOps)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

pubsub.snapshots.createTagBinding

Owner (roles/owner)

Composer Worker (roles/composer.worker)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Dev Ops (roles/iam.devOps)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Tag User (roles/resourcemanager.tagUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Service agent roles

• DLP API Service Agent (roles/dlp.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

pubsub.snapshots.delete

Owner (roles/owner)

Editor (roles/editor)

Composer Worker (roles/composer.worker)

Dev Ops (roles/iam.devOps)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

pubsub.snapshots.deleteTagBinding

Owner (roles/owner)

Composer Worker (roles/composer.worker)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Dev Ops (roles/iam.devOps)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Tag User (roles/resourcemanager.tagUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Service agent roles

• DLP API Service Agent (roles/dlp.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

pubsub.snapshots.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Composer Worker (roles/composer.worker)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Pub/Sub Viewer (roles/pubsub.viewer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

pubsub.snapshots.getIamPolicy

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Pub/Sub Admin (roles/pubsub.admin)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

pubsub.snapshots.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Composer Worker (roles/composer.worker)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Pub/Sub Viewer (roles/pubsub.viewer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

pubsub.snapshots.listEffectiveTags

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Composer Worker (roles/composer.worker)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Pub/Sub Viewer (roles/pubsub.viewer)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

pubsub.snapshots.listTagBindings

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Composer Worker (roles/composer.worker)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Pub/Sub Viewer (roles/pubsub.viewer)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

pubsub.snapshots.seek

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Composer Worker (roles/composer.worker)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Support User (roles/iam.supportUser)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Pub/Sub Subscriber (roles/pubsub.subscriber)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

pubsub.snapshots.setIamPolicy

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

Pub/Sub Admin (roles/pubsub.admin)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

pubsub.snapshots.update

Owner (roles/owner)

Editor (roles/editor)

Composer Worker (roles/composer.worker)

Dev Ops (roles/iam.devOps)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

pubsub.subscriptions.consume

Owner (roles/owner)

Editor (roles/editor)

Composer Worker (roles/composer.worker)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Pub/Sub Subscriber (roles/pubsub.subscriber)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Storage Transfer Agent (roles/storagetransfer.transferAgent)

Service agent roles

• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Eventarc Service Agent (roles/eventarc.serviceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• KubeRun Events Data Plane Service Agent (roles/kuberun.eventsDataPlaneServiceAgent)
• Secured Landing Zone Service Agent (roles/securedlandingzone.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Storage Transfer Service Agent (roles/storagetransfer.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)

pubsub.subscriptions.create

Owner (roles/owner)

Editor (roles/editor)

Assured OSS Admin (roles/assuredoss.admin)

Composer Worker (roles/composer.worker)

Dev Ops (roles/iam.devOps)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Storage Transfer Agent (roles/storagetransfer.transferAgent)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Eventarc Service Agent (roles/eventarc.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• KubeRun Events Control Plane Service Agent (roles/kuberun.eventsControlPlaneServiceAgent)
• Secured Landing Zone Service Agent (roles/securedlandingzone.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Storage Transfer Service Agent (roles/storagetransfer.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Cloud Build Service Agent (roles/cloudbuild.serviceAgent)

pubsub.subscriptions.createTagBinding

Owner (roles/owner)

Composer Worker (roles/composer.worker)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Dev Ops (roles/iam.devOps)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Tag User (roles/resourcemanager.tagUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Service agent roles

• DLP API Service Agent (roles/dlp.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

pubsub.subscriptions.delete

Owner (roles/owner)

Editor (roles/editor)

Composer Worker (roles/composer.worker)

Dev Ops (roles/iam.devOps)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Storage Transfer Agent (roles/storagetransfer.transferAgent)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Eventarc Service Agent (roles/eventarc.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• KubeRun Events Control Plane Service Agent (roles/kuberun.eventsControlPlaneServiceAgent)
• Secured Landing Zone Service Agent (roles/securedlandingzone.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Storage Transfer Service Agent (roles/storagetransfer.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Cloud Build Service Agent (roles/cloudbuild.serviceAgent)

pubsub.subscriptions.deleteTagBinding

Owner (roles/owner)

Composer Worker (roles/composer.worker)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Dev Ops (roles/iam.devOps)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Tag User (roles/resourcemanager.tagUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Service agent roles

• DLP API Service Agent (roles/dlp.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

pubsub.subscriptions.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Composer Worker (roles/composer.worker)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Pub/Sub Viewer (roles/pubsub.viewer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Storage Transfer Agent (roles/storagetransfer.transferAgent)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Eventarc Service Agent (roles/eventarc.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• KubeRun Events Control Plane Service Agent (roles/kuberun.eventsControlPlaneServiceAgent)
• KubeRun Events Data Plane Service Agent (roles/kuberun.eventsDataPlaneServiceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Storage Transfer Service Agent (roles/storagetransfer.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Cloud Build Service Agent (roles/cloudbuild.serviceAgent)

pubsub.subscriptions.getIamPolicy

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Pub/Sub Admin (roles/pubsub.admin)

Service agent roles

• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)

pubsub.subscriptions.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Composer Worker (roles/composer.worker)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Pub/Sub Viewer (roles/pubsub.viewer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Eventarc Service Agent (roles/eventarc.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)

pubsub.subscriptions.listEffectiveTags

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Composer Worker (roles/composer.worker)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Pub/Sub Viewer (roles/pubsub.viewer)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)

pubsub.subscriptions.listTagBindings

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Composer Worker (roles/composer.worker)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Pub/Sub Viewer (roles/pubsub.viewer)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)

pubsub.subscriptions.setIamPolicy

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

Pub/Sub Admin (roles/pubsub.admin)

Service agent roles

• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)

pubsub.subscriptions.update

Owner (roles/owner)

Editor (roles/editor)

Assured OSS Admin (roles/assuredoss.admin)

Composer Worker (roles/composer.worker)

Dev Ops (roles/iam.devOps)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Eventarc Service Agent (roles/eventarc.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Storage Transfer Service Agent (roles/storagetransfer.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Cloud Build Service Agent (roles/cloudbuild.serviceAgent)

pubsub.topics.attachSubscription

Owner (roles/owner)

Editor (roles/editor)

Composer Worker (roles/composer.worker)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Pub/Sub Subscriber (roles/pubsub.subscriber)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Storage Transfer Agent (roles/storagetransfer.transferAgent)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Eventarc Service Agent (roles/eventarc.serviceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• KubeRun Events Control Plane Service Agent (roles/kuberun.eventsControlPlaneServiceAgent)
• Secured Landing Zone Service Agent (roles/securedlandingzone.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Storage Transfer Service Agent (roles/storagetransfer.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Cloud Build Service Agent (roles/cloudbuild.serviceAgent)

pubsub.topics.create

Owner (roles/owner)

Editor (roles/editor)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Composer Worker (roles/composer.worker)

Dev Ops (roles/iam.devOps)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Storage Transfer Agent (roles/storagetransfer.transferAgent)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Kubernetes Engine Service Agent (roles/container.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Eventarc Service Agent (roles/eventarc.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• KubeRun Events Control Plane Service Agent (roles/kuberun.eventsControlPlaneServiceAgent)
• Secured Landing Zone Service Agent (roles/securedlandingzone.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Storage Transfer Service Agent (roles/storagetransfer.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Cloud Build Service Agent (roles/cloudbuild.serviceAgent)

pubsub.topics.createTagBinding

Owner (roles/owner)

Composer Worker (roles/composer.worker)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Dev Ops (roles/iam.devOps)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Tag User (roles/resourcemanager.tagUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Service agent roles

• DLP API Service Agent (roles/dlp.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

pubsub.topics.delete

Owner (roles/owner)

Editor (roles/editor)

Composer Worker (roles/composer.worker)

Dev Ops (roles/iam.devOps)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Service agent roles

• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Eventarc Service Agent (roles/eventarc.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• KubeRun Events Control Plane Service Agent (roles/kuberun.eventsControlPlaneServiceAgent)
• Secured Landing Zone Service Agent (roles/securedlandingzone.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Storage Transfer Service Agent (roles/storagetransfer.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

pubsub.topics.deleteTagBinding

Owner (roles/owner)

Composer Worker (roles/composer.worker)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Dev Ops (roles/iam.devOps)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Tag User (roles/resourcemanager.tagUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Service agent roles

• DLP API Service Agent (roles/dlp.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

pubsub.topics.detachSubscription

Owner (roles/owner)

Editor (roles/editor)

Composer Worker (roles/composer.worker)

Dev Ops (roles/iam.devOps)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• Secured Landing Zone Service Agent (roles/securedlandingzone.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

pubsub.topics.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Composer Worker (roles/composer.worker)

Data Catalog Admin (roles/datacatalog.admin)

Data Catalog Viewer (roles/datacatalog.viewer)

Firebase Rules System (roles/firebaserules.system)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Pub/Sub Viewer (roles/pubsub.viewer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

SLZ BQDW Blueprint Project Level Remediator (roles/securedlandingzone.bqdwProjectRemediator)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Storage Transfer Agent (roles/storagetransfer.transferAgent)

Service agent roles

• Cloud Deploy Service Agent (roles/clouddeploy.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Contact Center AI Insights Service Agent (roles/contactcenterinsights.serviceAgent)
• Kubernetes Engine Service Agent (roles/container.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Eventarc Service Agent (roles/eventarc.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• KubeRun Events Control Plane Service Agent (roles/kuberun.eventsControlPlaneServiceAgent)
• KubeRun Events Data Plane Service Agent (roles/kuberun.eventsDataPlaneServiceAgent)
• Media Asset Service Agent (roles/mediaasset.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Storage Transfer Service Agent (roles/storagetransfer.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Cloud Build Service Agent (roles/cloudbuild.serviceAgent)

pubsub.topics.getIamPolicy

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Pub/Sub Admin (roles/pubsub.admin)

SLZ BQDW Blueprint Project Level Remediator (roles/securedlandingzone.bqdwProjectRemediator)

Service agent roles

• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• KubeRun Events Control Plane Service Agent (roles/kuberun.eventsControlPlaneServiceAgent)
• Secured Landing Zone Service Agent (roles/securedlandingzone.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

pubsub.topics.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Composer Worker (roles/composer.worker)

Firebase Rules System (roles/firebaserules.system)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Pub/Sub Viewer (roles/pubsub.viewer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

SLZ BQDW Blueprint Project Level Remediator (roles/securedlandingzone.bqdwProjectRemediator)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Storage Transfer Agent (roles/storagetransfer.transferAgent)

Service agent roles

• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Eventarc Service Agent (roles/eventarc.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)

pubsub.topics.listEffectiveTags

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Composer Worker (roles/composer.worker)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Pub/Sub Viewer (roles/pubsub.viewer)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

pubsub.topics.listTagBindings

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Composer Worker (roles/composer.worker)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Pub/Sub Viewer (roles/pubsub.viewer)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

pubsub.topics.publish

Owner (roles/owner)

Editor (roles/editor)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Composer Worker (roles/composer.worker)

Firebase Rules System (roles/firebaserules.system)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Pub/Sub Publisher (roles/pubsub.publisher)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Storage Transfer Agent (roles/storagetransfer.transferAgent)

Service agent roles

• Google Batch Service Agent (roles/batch.serviceAgent)
• Cloud Asset Service Agent (roles/cloudasset.serviceAgent)
• Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
• Cloud Deploy Service Agent (roles/clouddeploy.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud IoT Core Service Agent (roles/cloudiot.serviceAgent)
• Cloud Scheduler Service Agent (roles/cloudscheduler.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Contact Center AI Insights Service Agent (roles/contactcenterinsights.serviceAgent)
• Kubernetes Engine Service Agent (roles/container.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Container Registry Service Agent (roles/containerregistry.ServiceAgent)
• Content Warehouse Service Agent (roles/contentwarehouse.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Datastream Service Agent (roles/datastream.serviceAgent)
• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Eventarc Service Agent (roles/eventarc.serviceAgent)
• Firebase Realtime Database Service Agent (roles/firebasedatabase.serviceAgent)
• Genomics Service Agent (roles/genomics.serviceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• KubeRun Events Data Plane Service Agent (roles/kuberun.eventsDataPlaneServiceAgent)
• Cloud Life Sciences Service Agent (roles/lifesciences.serviceAgent)
• Media Asset Service Agent (roles/mediaasset.serviceAgent)
• Pub/Sub Lite Service Agent (roles/pubsublite.serviceAgent)
• Security Center Notification Service Agent (roles/securitycenter.notificationServiceAgent)
• Google Cloud Security Response Service Agent (roles/securitycenter.securityResponseServiceAgent)
• Cloud Source Repositories Service Agent (roles/sourcerepo.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Storage Transfer Service Agent (roles/storagetransfer.serviceAgent)
• Transcoder Service Agent (roles/transcoder.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Artifact Registry Service Agent (roles/artifactregistry.serviceAgent)

pubsub.topics.setIamPolicy

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

Pub/Sub Admin (roles/pubsub.admin)

SLZ BQDW Blueprint Project Level Remediator (roles/securedlandingzone.bqdwProjectRemediator)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• KubeRun Events Control Plane Service Agent (roles/kuberun.eventsControlPlaneServiceAgent)
• Secured Landing Zone Service Agent (roles/securedlandingzone.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

pubsub.topics.update

Owner (roles/owner)

Editor (roles/editor)

Composer Worker (roles/composer.worker)

Dev Ops (roles/iam.devOps)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Cloud Run Source Developer (roles/run.sourceDeveloper)

SLZ BQDW Blueprint Project Level Remediator (roles/securedlandingzone.bqdwProjectRemediator)

Service agent roles

• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Eventarc Service Agent (roles/eventarc.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Storage Transfer Service Agent (roles/storagetransfer.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

pubsub.topics.updateTag

Owner (roles/owner)

Editor (roles/editor)

Composer Worker (roles/composer.worker)

Data Catalog Admin (roles/datacatalog.admin)

Data Catalog Tag Editor (roles/datacatalog.tagEditor)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Dev Ops (roles/iam.devOps)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)