Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Access Approval Approver (roles/accessapproval.approver)

Access Approval Config Editor (roles/accessapproval.configEditor)

Access Approval Invalidator (roles/accessapproval.invalidator)

Access Approval Viewer (roles/accessapproval.viewer)

Access Context Manager Admin (roles/accesscontextmanager.policyAdmin)

Access Context Manager Editor (roles/accesscontextmanager.policyEditor)

Access Context Manager Reader (roles/accesscontextmanager.policyReader)

VPC Service Controls Troubleshooter Viewer (roles/accesscontextmanager.vpcScTroubleshooterViewer)

Actions Admin (roles/actions.Admin)

Actions Viewer (roles/actions.Viewer)

Advisory Notifications Admin (roles/advisorynotifications.admin)

Advisory Notifications Viewer (roles/advisorynotifications.viewer)

Vertex AI Administrator (roles/aiplatform.admin)

Colab Enterprise Admin (roles/aiplatform.colabEnterpriseAdmin)

Colab Enterprise User (roles/aiplatform.colabEnterpriseUser)

Vertex AI Feature Store EntityType owner (roles/aiplatform.entityTypeOwner)

Vertex AI Feature Store Admin (roles/aiplatform.featurestoreAdmin)

Vertex AI Feature Store Data Viewer (roles/aiplatform.featurestoreDataViewer)

Vertex AI Feature Store Data Writer (roles/aiplatform.featurestoreDataWriter)

Vertex AI Feature Store Resource Viewer (roles/aiplatform.featurestoreResourceViewer)

Vertex AI Feature Store User (roles/aiplatform.featurestoreUser)

Vertex AI User (roles/aiplatform.user)

Vertex AI Viewer (roles/aiplatform.viewer)

AlloyDB Admin (roles/alloydb.admin)

AlloyDB Client (roles/alloydb.client)

AlloyDB Database User (roles/alloydb.databaseUser)

AlloyDB Viewer (roles/alloydb.viewer)

Analytics Hub Admin (roles/analyticshub.admin)

Analytics Hub Listing Admin (roles/analyticshub.listingAdmin)

Analytics Hub Publisher (roles/analyticshub.publisher)

Analytics Hub Subscriber (roles/analyticshub.subscriber)

Analytics Hub Subscription Owner (roles/analyticshub.subscriptionOwner)

Analytics Hub Viewer (roles/analyticshub.viewer)

ApiGateway Admin (roles/apigateway.admin)

ApiGateway Viewer (roles/apigateway.viewer)

Apigee Organization Admin (roles/apigee.admin)

Apigee Analytics Editor (roles/apigee.analyticsEditor)

Apigee Analytics Viewer (roles/apigee.analyticsViewer)

Apigee API Admin (roles/apigee.apiAdminV2)

Apigee API Reader (roles/apigee.apiReaderV2)

Apigee Developer Admin (roles/apigee.developerAdmin)

Apigee Environment Admin (roles/apigee.environmentAdmin)

Apigee Monetization Admin (roles/apigee.monetizationAdmin)

Apigee Portal Admin (roles/apigee.portalAdmin)

Apigee Read-only Admin (roles/apigee.readOnlyAdmin)

Apigee Security Admin (roles/apigee.securityAdmin)

Apigee Security Viewer (roles/apigee.securityViewer)

Apigee Space Console User (roles/apigee.spaceConsoleUser)

Cloud Apigee Registry Admin (roles/apigeeregistry.admin)

Cloud Apigee Registry Editor (roles/apigeeregistry.editor)

Cloud Apigee Registry Viewer (roles/apigeeregistry.viewer)

Cloud Apigee Registry Worker (roles/apigeeregistry.worker)

Cloud API hub Addons Admin (roles/apihub.addonsAdmin)

Cloud API Hub Admin (roles/apihub.admin)

Cloud API hub Attributes Admin (roles/apihub.attributeAdmin)

Cloud API Hub Editor (roles/apihub.editor)

Cloud API hub Plugins Admin (roles/apihub.pluginAdmin)

Cloud API hub Provisioning Admin (roles/apihub.provisioningAdmin)

Cloud API hub Viewer (roles/apihub.viewer)

API Management Admin (roles/apim.admin)

API Management Viewer (roles/apim.viewer)

App Engine Admin (roles/appengine.appAdmin)

App Engine Creator (roles/appengine.appCreator)

App Engine Viewer (roles/appengine.appViewer)

App Engine Code Viewer (roles/appengine.codeViewer)

App Engine Managed VM Debug Access (roles/appengine.debugger)

App Engine Deployer (roles/appengine.deployer)

App Engine Memcache Data Admin (roles/appengine.memcacheDataAdmin)

App Engine Service Admin (roles/appengine.serviceAdmin)

App Hub Admin (roles/apphub.admin)

App Management Viewer (roles/apphub.appManagementViewer)

App Hub Editor (roles/apphub.editor)

App Hub Viewer (roles/apphub.viewer)

Appliance troubleshooting commands approver (roles/applianceactivation.approver)

Appliance troubleshooter (roles/applianceactivation.troubleshooter)

Workspace Marketplace App Configuration Admin (roles/appmetadata.workspaceMarketplaceAppConfigurationAdmin)

App Topology Viewer (roles/apptopology.viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Container Registry -> Artifact Registry Migration Admin (roles/artifactregistry.containerRegistryMigrationAdmin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Assured Workloads Administrator (roles/assuredworkloads.admin)

Assured Workloads Editor (roles/assuredworkloads.editor)

Assured Workloads Reader (roles/assuredworkloads.reader)

Audit Manager Admin (roles/auditmanager.admin)

Audit Manager Auditor (roles/auditmanager.auditor)

AutoML Admin (roles/automl.admin)

AutoML Editor (roles/automl.editor)

AutoML Predictor (roles/automl.predictor)

AutoML Viewer (roles/automl.viewer)

Recommendations AI Admin (roles/automlrecommendations.admin)

Recommendations AI Admin Viewer (roles/automlrecommendations.adminViewer)

Recommendations AI Editor (roles/automlrecommendations.editor)

Recommendations AI Viewer (roles/automlrecommendations.viewer)

Autoscaling Site Admin (roles/autoscaling.sitesAdmin)

Access Transparency Admin (roles/axt.admin)

Backup and DR Admin (roles/backupdr.admin)

Backup and DR Backup User (roles/backupdr.backupUser)

Backup and DR Compute Engine Operator (roles/backupdr.computeEngineOperator)

Backup and DR Mount User (roles/backupdr.mountUser)

Backup and DR Restore User (roles/backupdr.restoreUser)

Backup and DR User (roles/backupdr.user)

Backup and DR User V2 (roles/backupdr.userv2)

Backup and DR Viewer (roles/backupdr.viewer)

Bare Metal Solution Admin (roles/baremetalsolution.admin)

Bare Metal Solution Editor (roles/baremetalsolution.editor)

Bare Metal Solution Instances Admin (roles/baremetalsolution.instancesadmin)

Bare Metal Solution Instances Viewer (roles/baremetalsolution.instancesviewer)

Bare Metal Solution Storage Admin (roles/baremetalsolution.storageadmin)

Bare Metal Solution Viewer (roles/baremetalsolution.viewer)

Batch Administrator (roles/batch.admin)

Batch Job Editor (roles/batch.jobsEditor)

Batch Job Viewer (roles/batch.jobsViewer)

Batch ResourceAllowance Editor (roles/batch.resourceAllowancesEditor)

Batch ResourceAllowance Viewer (roles/batch.resourceAllowancesViewer)

Cloud BeyondCorp Admin (roles/beyondcorp.admin)

Cloud BeyondCorp Viewer (roles/beyondcorp.viewer)

BigLake Admin (roles/biglake.admin)

BigLake Editor (roles/biglake.editor)

BigLake Metadata Viewer (roles/biglake.metadataViewer)

BigLake Viewer (roles/biglake.viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Data Viewer (roles/bigquery.dataViewer)

BigQuery Job User (roles/bigquery.jobUser)

BigQuery Metadata Viewer (roles/bigquery.metadataViewer)

BigQuery Read Session User (roles/bigquery.readSessionUser)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Resource Editor (roles/bigquery.resourceEditor)

BigQuery Resource Viewer (roles/bigquery.resourceViewer)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery Studio User (roles/bigquery.studioUser)

BigQuery User (roles/bigquery.user)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Reader (roles/bigtable.reader)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Billing Account Administrator (roles/billing.admin)

Binary Authorization Attestor Admin (roles/binaryauthorization.attestorsAdmin)

Binary Authorization Attestor Editor (roles/binaryauthorization.attestorsEditor)

Binary Authorization Attestor Image Verifier (roles/binaryauthorization.attestorsVerifier)

Binary Authorization Attestor Viewer (roles/binaryauthorization.attestorsViewer)

Binary Authorization Policy Administrator (roles/binaryauthorization.policyAdmin)

Binary Authorization Policy Editor (roles/binaryauthorization.policyEditor)

Binary Authorization Policy Evaluator (roles/binaryauthorization.policyEvaluator)

Binary Authorization Policy Viewer (roles/binaryauthorization.policyViewer)

Blockchain Node Engine Admin (roles/blockchainnodeengine.admin)

Blockchain Node Engine Viewer (roles/blockchainnodeengine.viewer)

Blockchain Validator Manager Admin (roles/blockchainvalidatormanager.admin)

Blockchain Validator Viewer (roles/blockchainvalidatormanager.viewer)

Browser (roles/browser)

Capacity Planner Usage Viewer (roles/capacityplanner.viewer)

Care Studio Patients Viewer (roles/carestudio.viewer)

Certificate Manager Editor (roles/certificatemanager.editor)

Certificate Manager Owner (roles/certificatemanager.owner)

Certificate Manager Viewer (roles/certificatemanager.viewer)

Gemini Enterprise for Customer Experience Admin (roles/ces.admin)

Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor)

Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor)

Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor)

Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor)

Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor)

Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor)

Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor)

Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer)

Chronicle API Admin (roles/chronicle.admin)

Chronicle API Data Governor (roles/chronicle.dataGovernor)

Chronicle API Editor (roles/chronicle.editor)

Chronicle API Federation Admin (roles/chronicle.federationAdmin)

Chronicle API Federation Viewer (roles/chronicle.federationViewer)

Chronicle API Limited Viewer (roles/chronicle.limitedViewer)

Chronicle API Restricted Data Access Viewer (roles/chronicle.restrictedDataAccessViewer)

Chronicle SOAR Admin (roles/chronicle.soarAdmin)

Chronicle SOAR Remote Agent (roles/chronicle.soarRemoteAgent)

Chronicle SOAR Threat Manager (roles/chronicle.soarThreatManager)

Chronicle SOAR Vulnerability Manager (roles/chronicle.soarVulnerabilityManager)

Chronicle API Viewer (roles/chronicle.viewer)

Code Repository Indexes Admin (roles/cloudaicompanion.codeRepositoryIndexesAdmin)

Code Repository Indexes Viewer (roles/cloudaicompanion.codeRepositoryIndexesViewer)

Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin)

Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser)

Gemini for Google Cloud User (roles/cloudaicompanion.user)

Cloud Build Approver (roles/cloudbuild.builds.approver)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Build Editor (roles/cloudbuild.builds.editor)

Cloud Build Viewer (roles/cloudbuild.builds.viewer)

Cloud Build Connection Admin (roles/cloudbuild.connectionAdmin)

Cloud Build Connection Viewer (roles/cloudbuild.connectionViewer)

Cloud Build Integrations Editor (roles/cloudbuild.integrationsEditor)

Cloud Build Integrations Owner (roles/cloudbuild.integrationsOwner)

Cloud Build Integrations Viewer (roles/cloudbuild.integrationsViewer)

Cloud Build WorkerPool Editor (roles/cloudbuild.workerPoolEditor)

Cloud Build WorkerPool Owner (roles/cloudbuild.workerPoolOwner)

Cloud Build WorkerPool Viewer (roles/cloudbuild.workerPoolViewer)

Firebase Remote Config Admin (roles/cloudconfig.admin)

Firebase Remote Config Viewer (roles/cloudconfig.viewer)

Cloud Deploy Admin (roles/clouddeploy.admin)

Cloud Deploy Approver (roles/clouddeploy.approver)

Cloud Deploy Custom Target Type Admin (roles/clouddeploy.customTargetTypeAdmin)

Cloud Deploy Developer (roles/clouddeploy.developer)

Cloud Deploy Operator (roles/clouddeploy.operator)

Cloud Deploy Policy Admin (roles/clouddeploy.policyAdmin)

Cloud Deploy Policy Overrider (roles/clouddeploy.policyOverrider)

Cloud Deploy Releaser (roles/clouddeploy.releaser)

Cloud Deploy Viewer (roles/clouddeploy.viewer)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Cloud Functions Viewer (roles/cloudfunctions.viewer)

Cloud Hub Operator (roles/cloudhub.operator)

Cloud Talent Solution Admin (roles/cloudjobdiscovery.admin)

Cloud Talent Solution Job Editor (roles/cloudjobdiscovery.jobsEditor)

Cloud Talent Solution Job Viewer (roles/cloudjobdiscovery.jobsViewer)

Cloud Talent Solution Profile Editor (roles/cloudjobdiscovery.profilesEditor)

Cloud Talent Solution Profile Viewer (roles/cloudjobdiscovery.profilesViewer)

Cloud KMS Admin (roles/cloudkms.admin)

Cloud KMS CryptoKey Decrypter (roles/cloudkms.cryptoKeyDecrypter)

Cloud KMS CryptoKey Decrypter Via Delegation (roles/cloudkms.cryptoKeyDecrypterViaDelegation)

Cloud KMS CryptoKey Encrypter (roles/cloudkms.cryptoKeyEncrypter)

Cloud KMS CryptoKey Encrypter/Decrypter (roles/cloudkms.cryptoKeyEncrypterDecrypter)

Cloud KMS CryptoKey Encrypter/Decrypter Via Delegation (roles/cloudkms.cryptoKeyEncrypterDecrypterViaDelegation)

Cloud KMS CryptoKey Encrypter Via Delegation (roles/cloudkms.cryptoKeyEncrypterViaDelegation)

Cloud KMS Crypto Operator (roles/cloudkms.cryptoOperator)

Cloud KMS CryptoKey Decapsulator (roles/cloudkms.decapsulator)

Cloud KMS EkmConnections Admin (roles/cloudkms.ekmConnectionsAdmin)

Cloud KMS Expert Raw AES-CBC Key Manager (roles/cloudkms.expertRawAesCbc)

Cloud KMS Expert Raw AES-CTR Key Manager (roles/cloudkms.expertRawAesCtr)

Cloud KMS Expert Raw PKCS#1 Key Manager (roles/cloudkms.expertRawPKCS1)

Cloud KMS Importer (roles/cloudkms.importer)

Cloud KMS CryptoKey Public Key Viewer (roles/cloudkms.publicKeyViewer)

Cloud KMS CryptoKey Signer (roles/cloudkms.signer)

Cloud KMS CryptoKey Signer/Verifier (roles/cloudkms.signerVerifier)

Cloud KMS CryptoKey Verifier (roles/cloudkms.verifier)

Cloud KMS Viewer (roles/cloudkms.viewer)

Cloud Location Finder Admin (roles/cloudlocationfinder.admin)

Cloud Location Finder Viewer (roles/cloudlocationfinder.viewer)

Velostrata Manager (roles/cloudmigration.inframanager)

Catalog Consumer (roles/cloudprivatecatalog.consumer)

Catalog Admin (roles/cloudprivatecatalogproducer.admin)

Catalog Manager (roles/cloudprivatecatalogproducer.manager)

Catalog Org Admin (roles/cloudprivatecatalogproducer.orgAdmin)

Cloud Profiler User (roles/cloudprofiler.user)

Cloud Quotas Admin (roles/cloudquotas.admin)

Cloud Quotas Viewer (roles/cloudquotas.viewer)

Cloud Scheduler Admin (roles/cloudscheduler.admin)

Cloud Scheduler Job Runner (roles/cloudscheduler.jobRunner)

Cloud Scheduler Viewer (roles/cloudscheduler.viewer)

Compliance Manager Admin (roles/cloudsecuritycompliance.admin)

Compliance Manager Viewer (roles/cloudsecuritycompliance.viewer)

Web Security Scanner Editor (roles/cloudsecurityscanner.editor)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Cloud SQL Viewer (roles/cloudsql.viewer)

Advisory Support Editor (roles/cloudsupport.advisorySupportEditor)

Advisory Support Viewer (roles/cloudsupport.advisorySupportViewer)

Tech Support Editor (roles/cloudsupport.techSupportEditor)

Tech Support Viewer (roles/cloudsupport.techSupportViewer)

Cloud Tasks Admin (roles/cloudtasks.admin)

Cloud Tasks Enqueuer (roles/cloudtasks.enqueuer)

Cloud Tasks Queue Admin (roles/cloudtasks.queueAdmin)

Cloud Tasks Task Deleter (roles/cloudtasks.taskDeleter)

Cloud Tasks Task Runner (roles/cloudtasks.taskRunner)

Cloud Tasks Viewer (roles/cloudtasks.viewer)

Firebase Test Lab Direct Access Admin (roles/cloudtestservice.directAccessAdmin)

Firebase Test Lab Direct Access Viewer (roles/cloudtestservice.directAccessViewer)

Firebase Test Lab Admin (roles/cloudtestservice.testAdmin)

Firebase Test Lab Viewer (roles/cloudtestservice.testViewer)

Cloud Trace Admin (roles/cloudtrace.admin)

Cloud Trace User (roles/cloudtrace.user)

Cloud Translation API Admin (roles/cloudtranslate.admin)

Cloud Translation API Editor (roles/cloudtranslate.editor)

Cloud Translation API User (roles/cloudtranslate.user)

Cloud Translation API Viewer (roles/cloudtranslate.viewer)

Commerce Agreement Publishing Admin (roles/commerceagreementpublishing.admin)

Commerce Agreement Publishing Viewer (roles/commerceagreementpublishing.viewer)

Commerce Business Enablement Configuration Admin (roles/commercebusinessenablement.admin)

Commerce Business Enablement PaymentConfig Admin (roles/commercebusinessenablement.paymentConfigAdmin)

Commerce Business Enablement PaymentConfig Viewer (roles/commercebusinessenablement.paymentConfigViewer)

Commerce Business Enablement Reseller Discount Admin (roles/commercebusinessenablement.resellerDiscountAdmin)

Commerce Business Enablement Reseller Discount Viewer (roles/commercebusinessenablement.resellerDiscountViewer)

Commerce Business Enablement Configuration Viewer (roles/commercebusinessenablement.viewer)

Commerce Organization Governance Admin (roles/commerceorggovernance.admin)

Governed Marketplace User (roles/commerceorggovernance.user)

Commerce Organization Governance Viewer (roles/commerceorggovernance.viewer)

Commerce Price Management Events Viewer (roles/commercepricemanagement.eventsViewer)

Commerce Price Management Private Offers Admin (roles/commercepricemanagement.privateOffersAdmin)

Commerce Price Management Viewer (roles/commercepricemanagement.viewer)

Commerce Producer Admin (roles/commerceproducer.admin)

Commerce Producer Viewer (roles/commerceproducer.viewer)

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Environment and Storage Object User (roles/composer.environmentAndStorageObjectUser)

Environment and Storage Object Viewer (roles/composer.environmentAndStorageObjectViewer)

Composer Worker (roles/composer.worker)

Compute Admin (roles/compute.admin)

Compute Image User (roles/compute.imageUser)

Compute Instance Admin (beta) (roles/compute.instanceAdmin)

Compute Instance Admin (v1) (roles/compute.instanceAdmin.v1)

Compute Load Balancer Admin (roles/compute.loadBalancerAdmin)

Compute Load Balancer Services User (roles/compute.loadBalancerServiceUser)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Compute Organization Firewall Policy Admin (roles/compute.orgFirewallPolicyAdmin)

Compute Organization Firewall Policy User (roles/compute.orgFirewallPolicyUser)

Compute Organization Security Policy Admin (roles/compute.orgSecurityPolicyAdmin)

Compute Organization Security Policy User (roles/compute.orgSecurityPolicyUser)

Compute Organization Resource Admin (roles/compute.orgSecurityResourceAdmin)

Compute OS Admin Login (roles/compute.osAdminLogin)

Compute OS Login (roles/compute.osLogin)

Compute packet mirroring admin (roles/compute.packetMirroringAdmin)

Compute packet mirroring user (roles/compute.packetMirroringUser)

Compute Public IP Admin (roles/compute.publicIpAdmin)

Compute Security Admin (roles/compute.securityAdmin)

Compute Storage Admin (roles/compute.storageAdmin)

Compute Viewer (roles/compute.viewer)

Compute VM extension policy admin (roles/compute.vmExtensionPolicyAdmin)

Compute VM extension policy viewer (roles/compute.vmExtensionPolicyViewer)

Compute Shared VPC Admin (roles/compute.xpnAdmin)

Cloud Infrastructure Manager Admin (roles/config.admin)

Cloud Infrastructure Manager Viewer (roles/config.viewer)

ConfigDelivery Admin (roles/configdelivery.configDeliveryAdmin)

ConfigDelivery Viewer (roles/configdelivery.configDeliveryViewer)

Config Delivery Resource Bundle Publisher (roles/configdelivery.resourceBundlePublisher)

Connector Admin (roles/connectors.admin)

Connectors Viewer (roles/connectors.viewer)

Consumer Procurement Entitlement Manager (roles/consumerprocurement.entitlementManager)

Consumer Procurement Entitlement Viewer (roles/consumerprocurement.entitlementViewer)

Consumer Procurement Administrator (roles/consumerprocurement.procurementAdmin)

Consumer Procurement Viewer (roles/consumerprocurement.procurementViewer)

Contact Center AI Platform Admin (roles/contactcenteraiplatform.admin)

Contact Center AI Platform Viewer (roles/contactcenteraiplatform.viewer)

Kubernetes Engine Admin (roles/container.admin)

Kubernetes Engine KMS Crypto Key User (roles/container.cloudKmsKeyUser)

Kubernetes Engine Cluster Admin (roles/container.clusterAdmin)

Kubernetes Engine Cluster Viewer (roles/container.clusterViewer)

Kubernetes Engine Developer (roles/container.developer)

Kubernetes Engine Viewer (roles/container.viewer)

Container Analysis Admin (roles/containeranalysis.admin)

Container Analysis Notes Editor (roles/containeranalysis.notes.editor)

Container Analysis Notes Viewer (roles/containeranalysis.notes.viewer)

Container Analysis Occurrences Editor (roles/containeranalysis.occurrences.editor)

Container Analysis Occurrences Viewer (roles/containeranalysis.occurrences.viewer)

GKE Security Posture Viewer (roles/containersecurity.viewer)

Content Warehouse Admin (roles/contentwarehouse.admin)

Content Warehouse Document Admin (roles/contentwarehouse.documentAdmin)

Content Warehouse document creator (roles/contentwarehouse.documentCreator)

Content Warehouse Document Editor (roles/contentwarehouse.documentEditor)

Content Warehouse document schema viewer (roles/contentwarehouse.documentSchemaViewer)

Content Warehouse Viewer (roles/contentwarehouse.documentViewer)

Database Center Admin (roles/databasecenter.admin)

Database Center Viewer (roles/databasecenter.viewer)

Database Insights monitoring viewer (roles/databaseinsights.monitoringViewer)

Database Insights recommendation viewer (roles/databaseinsights.recommendationViewer)

Database Insights viewer (roles/databaseinsights.viewer)

Studio Query Admin (roles/databasesconsole.studioQueryAdmin)

Studio Query User (roles/databasesconsole.studioQueryUser)

Data Catalog Admin (roles/datacatalog.admin)

Policy Tag Admin (roles/datacatalog.categoryAdmin)

DataCatalog Data Steward (roles/datacatalog.dataSteward)

DataCatalog EntryGroup Creator (roles/datacatalog.entryGroupCreator)

DataCatalog EntryGroup Owner (roles/datacatalog.entryGroupOwner)

DataCatalog Entry Owner (roles/datacatalog.entryOwner)

DataCatalog Entry Viewer (roles/datacatalog.entryViewer)

DataCatalog Migration Config Admin (roles/datacatalog.migrationConfigAdmin)

DataCatalog Search Admin (roles/datacatalog.searchAdmin)

Data Catalog TagTemplate Owner (roles/datacatalog.tagTemplateOwner)

Data Catalog TagTemplate User (roles/datacatalog.tagTemplateUser)

Data Catalog TagTemplate Viewer (roles/datacatalog.tagTemplateViewer)

Data Catalog Viewer (roles/datacatalog.viewer)

Connector Admin (roles/dataconnectors.connectorAdmin)

Dataflow Admin (roles/dataflow.admin)

Dataflow Developer (roles/dataflow.developer)

Dataflow Viewer (roles/dataflow.viewer)

Dataform Admin (roles/dataform.admin)

Code Commenter (roles/dataform.codeCommenter)

Code Creator (roles/dataform.codeCreator)

Code Editor (roles/dataform.codeEditor)

Code Owner (roles/dataform.codeOwner)

Code Viewer (roles/dataform.codeViewer)

Dataform Editor (roles/dataform.editor)

Team Folder Commenter (roles/dataform.teamFolderCommenter)

Team Folder Contributor (roles/dataform.teamFolderContributor)

Team Folder Owner (roles/dataform.teamFolderOwner)

Team Folder Viewer (roles/dataform.teamFolderViewer)

Dataform Viewer (roles/dataform.viewer)

Cloud Data Fusion Accessor (roles/datafusion.accessor)

Cloud Data Fusion Admin (roles/datafusion.admin)

Cloud Data Fusion Developer (roles/datafusion.developer)

Cloud Data Fusion Operator (roles/datafusion.operator)

Cloud Data Fusion Viewer (roles/datafusion.viewer)

Data Labeling Service Admin (roles/datalabeling.admin)

Data Labeling Service Editor (roles/datalabeling.editor)

Data Labeling Service Viewer (roles/datalabeling.viewer)

Data Lineage Administrator (roles/datalineage.admin)

Data Lineage Editor (roles/datalineage.editor)

Data Lineage Events Producer (roles/datalineage.producer)

Data Lineage Viewer (roles/datalineage.viewer)

Database Migration Admin (roles/datamigration.admin)

Data pipelines Admin (roles/datapipelines.admin)

Data pipelines Invoker (roles/datapipelines.invoker)

Data pipelines Viewer (roles/datapipelines.viewer)

Dataplex Administrator (roles/dataplex.admin)

Dataplex Aspect Type Owner (roles/dataplex.aspectTypeOwner)

Dataplex Aspect Type User (roles/dataplex.aspectTypeUser)

Dataplex Catalog Admin (roles/dataplex.catalogAdmin)

Dataplex Catalog Editor (roles/dataplex.catalogEditor)

Dataplex Catalog Viewer (roles/dataplex.catalogViewer)

Dataplex Data Products Admin (roles/dataplex.dataProductsAdmin)

Dataplex Data Products Consumer (roles/dataplex.dataProductsConsumer)

Dataplex Data Products Editor (roles/dataplex.dataProductsEditor)

Dataplex Data Products Viewer (roles/dataplex.dataProductsViewer)

Dataplex Entry Group Exporter (roles/dataplex.entryGroupExporter)

Dataplex Entry Group Importer (roles/dataplex.entryGroupImporter)

Dataplex Entry Group Owner (roles/dataplex.entryGroupOwner)

Dataplex Entry and EntryLink Owner (roles/dataplex.entryOwner)

Dataplex Entry Type Owner (roles/dataplex.entryTypeOwner)

Dataplex Entry Type User (roles/dataplex.entryTypeUser)

Dataplex Metadata Feed Owner (roles/dataplex.metadataFeedOwner)

Dataplex Metadata Feed Viewer (roles/dataplex.metadataFeedViewer)

Dataplex Metadata Job Owner (roles/dataplex.metadataJobOwner)

Dataplex Metadata Job Viewer (roles/dataplex.metadataJobViewer)

Dataplex Metadata Reader (roles/dataplex.metadataReader)

Dataplex Metadata Writer (roles/dataplex.metadataWriter)

Dataprep User (roles/dataprep.projects.user)

Dataproc Administrator (roles/dataproc.admin)

Dataproc Editor (roles/dataproc.editor)

Dataproc Hub Agent (roles/dataproc.hubAgent)

Dataproc Serverless Editor (roles/dataproc.serverlessEditor)

Dataproc Serverless Viewer (roles/dataproc.serverlessViewer)

Dataproc Viewer (roles/dataproc.viewer)

Dataproc Resource Manager Admin (roles/dataprocrm.admin)

Dataproc Resource Manager Viewer (roles/dataprocrm.viewer)

Cloud Datastore Bulk Admin (roles/datastore.bulkAdmin)

Cloud Datastore Import Export Admin (roles/datastore.importExportAdmin)

Cloud Datastore Index Admin (roles/datastore.indexAdmin)

Cloud Datastore Key Visualizer Viewer (roles/datastore.keyVisualizerViewer)

Cloud Datastore Owner (roles/datastore.owner)

Cloud Datastore User (roles/datastore.user)

Cloud Datastore Viewer (roles/datastore.viewer)

Datastream Admin (roles/datastream.admin)

Datastream Viewer (roles/datastream.viewer)

Data Studio Admin (roles/datastudio.admin)

Data Studio Workspace Content Manager (roles/datastudio.contentManager)

Data Studio Workspace Contributor (roles/datastudio.contributor)

Data Studio Asset Editor (roles/datastudio.editor)

Data Studio Workspace Manager (roles/datastudio.manager)

Data Studio Asset Viewer (roles/datastudio.viewer)

Data Studio Workspace Viewer (roles/datastudio.workspaceViewer)

Dell EMC Cloud OneFS Admin (roles/dellemccloudonefs.admin)

Dell EMC Cloud OneFS User (roles/dellemccloudonefs.user)

Dell EMC Cloud OneFS Viewer (roles/dellemccloudonefs.viewer)

Deployment Manager Editor (roles/deploymentmanager.editor)

Deployment Manager Type Editor (roles/deploymentmanager.typeEditor)

Deployment Manager Type Viewer (roles/deploymentmanager.typeViewer)

Deployment Manager Viewer (roles/deploymentmanager.viewer)

Application Design Center Admin (roles/designcenter.admin)

Application Admin (roles/designcenter.applicationAdmin)

Application Editor (roles/designcenter.applicationEditor)

Application Viewer (roles/designcenter.applicationViewer)

Application Design Center User (roles/designcenter.user)

Application Design Center Viewer (roles/designcenter.viewer)

Developer Connect Admin (roles/developerconnect.admin)

Developer Connect Insights Admin (roles/developerconnect.insightsAdmin)

Developer Connect Insights Viewer (roles/developerconnect.insightsViewer)

Developer Connect OAuth Admin (roles/developerconnect.oauthAdmin)

Developer Connect OAuth User (roles/developerconnect.oauthUser)

Developer Connect User (roles/developerconnect.user)

Developer Connect Viewer (roles/developerconnect.viewer)

Device Streaming Admin (roles/devicestreaming.admin)

Device Streaming Viewer (roles/devicestreaming.viewer)

CX Premium Admin (roles/dialogflow.aamAdmin)

CX Premium Conversational Architect (roles/dialogflow.aamConversationalArchitect)

CX Premium Dialog Designer (roles/dialogflow.aamDialogDesigner)

CX Premium Lead Dialog Designer (roles/dialogflow.aamLeadDialogDesigner)

CX Premium Viewer (roles/dialogflow.aamViewer)

Dialogflow API Admin (roles/dialogflow.admin)

Dialogflow Console Agent Editor (roles/dialogflow.consoleAgentEditor)

Dialogflow Console Simulator User (roles/dialogflow.consoleSimulatorUser)

Dialogflow Console Smart Messaging Allowlist Editor (roles/dialogflow.consoleSmartMessagingAllowlistEditor)

Dialogflow API Reader (roles/dialogflow.reader)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM User (roles/discoveryengine.notebookLmUser)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

DLP Administrator (roles/dlp.admin)

DLP Connections Admin (roles/dlp.connectionsAdmin)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

DLP Subscription Admin (roles/dlp.subscriptionsAdmin)

DNS Administrator (roles/dns.admin)

DNS Reader (roles/dns.reader)

Document AI Administrator (roles/documentai.admin)

Document AI Editor (roles/documentai.editor)

Document AI Viewer (roles/documentai.viewer)

Cloud Domains Admin (roles/domains.admin)

Cloud Domains Viewer (roles/domains.viewer)

Earth Subscriptions Administrator (roles/earth.subscriptionsAdmin)

Earth Subscriptions Viewer (roles/earth.subscriptionsViewer)

Earth Engine Resource Admin (roles/earthengine.admin)

Earth Engine Apps Publisher (roles/earthengine.appsPublisher)

Earth Engine Resource Viewer (roles/earthengine.viewer)

Earth Engine Resource Writer (roles/earthengine.writer)

Edge Container Admin (roles/edgecontainer.admin)

Edge Container Machine User (roles/edgecontainer.machineUser)

Edge Container Cluster offline Credential User (roles/edgecontainer.offlineCredentialUser)

Edge Container Viewer (roles/edgecontainer.viewer)

Edge Network Admin (roles/edgenetwork.admin)

Edge Network Viewer (roles/edgenetwork.viewer)

Enterprise Knowledge Graph Admin (roles/enterpriseknowledgegraph.admin)

Enterprise Knowledge Graph Editor (roles/enterpriseknowledgegraph.editor)

Enterprise Knowledge Graph Viewer (roles/enterpriseknowledgegraph.viewer)

Enterprise Purchasing Admin (roles/enterprisepurchasing.admin)

Enterprise Purchasing Editor (roles/enterprisepurchasing.editor)

Enterprise Purchasing Viewer (roles/enterprisepurchasing.viewer)

Error Reporting Admin (roles/errorreporting.admin)

Error Reporting User (roles/errorreporting.user)

Error Reporting Viewer (roles/errorreporting.viewer)

Eventarc Admin (roles/eventarc.admin)

Eventarc Connection Publisher (roles/eventarc.connectionPublisher)

Eventarc Developer (roles/eventarc.developer)

Eventarc Publisher (roles/eventarc.publisher)

Eventarc Viewer (roles/eventarc.viewer)

Financial Services Admin (roles/financialservices.admin)

Financial Services Viewer (roles/financialservices.viewer)

Firebase Admin (roles/firebase.admin)

Firebase Analytics Admin (roles/firebase.analyticsAdmin)

Firebase Analytics Viewer (roles/firebase.analyticsViewer)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Grow Admin (roles/firebase.growthAdmin)

Firebase Grow Viewer (roles/firebase.growthViewer)

Firebase Quality Admin (roles/firebase.qualityAdmin)

Firebase Quality Viewer (roles/firebase.qualityViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase A/B Testing Admin (roles/firebaseabt.admin)

Firebase A/B Testing Viewer (roles/firebaseabt.viewer)

Firebase App Distribution Admin (roles/firebaseappdistro.admin)

Firebase App Distribution Viewer (roles/firebaseappdistro.viewer)

Firebase App Hosting Admin (roles/firebaseapphosting.admin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Firebase App Hosting Developer (roles/firebaseapphosting.developer)

Firebase App Hosting Viewer (roles/firebaseapphosting.viewer)

Firebase Authentication Admin (roles/firebaseauth.admin)

Firebase Authentication Viewer (roles/firebaseauth.viewer)

Firebase Cloud Messaging API Admin (roles/firebasecloudmessaging.admin)

Firebase Crash Symbol Uploader (roles/firebasecrash.symbolMappingsAdmin)

Firebase Crashlytics Admin (roles/firebasecrashlytics.admin)

Firebase Crashlytics Viewer (roles/firebasecrashlytics.viewer)

Firebase Realtime Database Admin (roles/firebasedatabase.admin)

Firebase Realtime Database Viewer (roles/firebasedatabase.viewer)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer)

Firebase Dynamic Links Admin (roles/firebasedynamiclinks.admin)

Firebase Dynamic Links Viewer (roles/firebasedynamiclinks.viewer)

Firebase Extensions Developer (roles/firebaseextensions.developer)

Firebase Extensions Viewer (roles/firebaseextensions.viewer)

Firebase Extensions Publisher - Extensions Admin (roles/firebaseextensionspublisher.extensionsAdmin)

Firebase Extensions Publisher - Extensions Viewer (roles/firebaseextensionspublisher.extensionsViewer)

Firebase Hosting Admin (roles/firebasehosting.admin)

Firebase Hosting Viewer (roles/firebasehosting.viewer)

Firebase In-App Messaging Admin (roles/firebaseinappmessaging.admin)

Firebase In-App Messaging Viewer (roles/firebaseinappmessaging.viewer)

Firebase ML Kit Admin (roles/firebaseml.admin)

Firebase ML Kit Viewer (roles/firebaseml.viewer)

Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent)

Firebase Cloud Messaging Admin (roles/firebasenotifications.admin)

Firebase Cloud Messaging Viewer (roles/firebasenotifications.viewer)

Firebase Performance Reporting Admin (roles/firebaseperformance.admin)

Firebase Performance Reporting Viewer (roles/firebaseperformance.viewer)

Firebase Rules Admin (roles/firebaserules.admin)

Firebase Rules System (roles/firebaserules.system)

Firebase Rules Viewer (roles/firebaserules.viewer)

Cloud Storage for Firebase Admin (roles/firebasestorage.admin)

Cloud Storage for Firebase Viewer (roles/firebasestorage.viewer)

Firebase AI Logic Admin (roles/firebasevertexai.admin)

Firebase AI Logic Viewer (roles/firebasevertexai.viewer)

Fleet Engine Delivery Admin (roles/fleetengine.deliveryAdmin)

Fleet Engine Delivery Super User (roles/fleetengine.deliverySuperUser)

Fleet Engine On-Demand Admin (roles/fleetengine.ondemandAdmin)

Fleet Engine Service Super User (roles/fleetengine.serviceSuperUser)

GDC Hardware Management Admin (roles/gdchardwaremanagement.admin)

GDC Hardware Management Operator (roles/gdchardwaremanagement.operator)

GDC Hardware Management Reader (roles/gdchardwaremanagement.reader)

Gemini Cloud Assist Investigation Admin (roles/geminicloudassist.investigationAdmin)

Gemini Cloud Assist Investigation Creator (roles/geminicloudassist.investigationCreator)

Gemini Cloud Assist Investigation Editor (roles/geminicloudassist.investigationEditor)

Gemini Cloud Assist Investigation Owner (roles/geminicloudassist.investigationOwner)

Gemini Cloud Assist Investigation User (roles/geminicloudassist.investigationUser)

Gemini Cloud Assist Investigation Viewer (roles/geminicloudassist.investigationViewer)

Gemini Cloud Assist User (roles/geminicloudassist.user)

Backup for GKE Admin (roles/gkebackup.admin)

Backup for GKE Backup Admin (roles/gkebackup.backupAdmin)

Backup for GKE Restore Admin (roles/gkebackup.restoreAdmin)

Backup for GKE Viewer (roles/gkebackup.viewer)

Fleet Admin (formerly GKE Hub Admin) (roles/gkehub.admin)

Fleet Editor (formerly GKE Hub Editor) (roles/gkehub.editor)

Fleet Project-level Scope Editor (roles/gkehub.scopeEditorProjectLevel)

Fleet Project-level Scope Viewer (roles/gkehub.scopeViewerProjectLevel)

Fleet Viewer (formerly GKE Hub Viewer) (roles/gkehub.viewer)

Anthos Multi-cloud Admin (roles/gkemulticloud.admin)

Anthos Multi-cloud Viewer (roles/gkemulticloud.viewer)

GKE on-prem Admin (roles/gkeonprem.admin)

GKE on-prem Viewer (roles/gkeonprem.viewer)

Google Workspace Add-ons Developer (roles/gsuiteaddons.developer)

Google Workspace Add-ons Reader (roles/gsuiteaddons.reader)

Google Workspace Add-ons Tester (roles/gsuiteaddons.tester)

Healthcare Annotation Editor (roles/healthcare.annotationEditor)

Healthcare Annotation Reader (roles/healthcare.annotationReader)

Healthcare Annotation Administrator (roles/healthcare.annotationStoreAdmin)

Healthcare Annotation Store Viewer (roles/healthcare.annotationStoreViewer)

Healthcare Attribute Definition Editor (roles/healthcare.attributeDefinitionEditor)

Healthcare Attribute Definition Reader (roles/healthcare.attributeDefinitionReader)

Healthcare Consent Artifact Administrator (roles/healthcare.consentArtifactAdmin)

Healthcare Consent Artifact Editor (roles/healthcare.consentArtifactEditor)

Healthcare Consent Artifact Reader (roles/healthcare.consentArtifactReader)

Healthcare Consent Editor (roles/healthcare.consentEditor)

Healthcare Consent Reader (roles/healthcare.consentReader)

Healthcare Consent Store Administrator (roles/healthcare.consentStoreAdmin)

Healthcare Consent Store Viewer (roles/healthcare.consentStoreViewer)

Healthcare Dataset Administrator (roles/healthcare.datasetAdmin)

Healthcare Dataset Viewer (roles/healthcare.datasetViewer)

Healthcare DICOM Editor (roles/healthcare.dicomEditor)

Healthcare DICOM Store Administrator (roles/healthcare.dicomStoreAdmin)

Healthcare DICOM Store Viewer (roles/healthcare.dicomStoreViewer)

Healthcare DICOM Viewer (roles/healthcare.dicomViewer)

Healthcare FHIR Resource Editor (roles/healthcare.fhirResourceEditor)

Healthcare FHIR Resource Reader (roles/healthcare.fhirResourceReader)

Healthcare FHIR Store Administrator (roles/healthcare.fhirStoreAdmin)

Healthcare FHIR Store Viewer (roles/healthcare.fhirStoreViewer)

Healthcare HL7v2 Message Consumer (roles/healthcare.hl7V2Consumer)

Healthcare HL7v2 Message Editor (roles/healthcare.hl7V2Editor)

Healthcare HL7v2 Message Ingest (roles/healthcare.hl7V2Ingest)

Healthcare HL7v2 Store Administrator (roles/healthcare.hl7V2StoreAdmin)

Healthcare HL7v2 Store Viewer (roles/healthcare.hl7V2StoreViewer)

Healthcare NLP Service Viewer (roles/healthcare.nlpServiceViewer)

Healthcare User Data Mapping Editor (roles/healthcare.userDataMappingEditor)

Healthcare User Data Mapping Reader (roles/healthcare.userDataMappingReader)

Cluster Director Editor (roles/hypercomputecluster.editor)

Cluster Director Viewer (roles/hypercomputecluster.viewer)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Network Administrator (roles/iam.networkAdmin)

IAM OAuth Client Admin (roles/iam.oauthClientAdmin)

IAM OAuth Client Viewer (roles/iam.oauthClientViewer)

Organization Role Administrator (roles/iam.organizationRoleAdmin)

Organization Role Viewer (roles/iam.organizationRoleViewer)

Role Administrator (roles/iam.roleAdmin)

Role Viewer (roles/iam.roleViewer)

Security Auditor (roles/iam.securityAuditor)

Service Account Admin (roles/iam.serviceAccountAdmin)

Create Service Accounts (roles/iam.serviceAccountCreator)

Delete Service Accounts (roles/iam.serviceAccountDeleter)

Service Account Key Admin (roles/iam.serviceAccountKeyAdmin)

Service Account Token Creator (roles/iam.serviceAccountTokenCreator)

Service Account User (roles/iam.serviceAccountUser)

View Service Accounts (roles/iam.serviceAccountViewer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

IAM Workload Identity Pool Admin (roles/iam.workloadIdentityPoolAdmin)

IAM Workload Identity Pool Viewer (roles/iam.workloadIdentityPoolViewer)

Cloud IDS Admin (roles/ids.admin)

Cloud IDS Viewer (roles/ids.viewer)

Apigee Integration Admin (roles/integrations.apigeeIntegrationAdminRole)

Apigee Integration Deployer (roles/integrations.apigeeIntegrationDeployerRole)

Apigee Integration Editor (roles/integrations.apigeeIntegrationEditorRole)

Apigee Integration Invoker (roles/integrations.apigeeIntegrationInvokerRole)

Apigee Integration Viewer (roles/integrations.apigeeIntegrationsViewer)

Apigee Integration Approver (roles/integrations.apigeeSuspensionResolver)

Certificate Viewer (roles/integrations.certificateViewer)

Application Integration Admin (roles/integrations.integrationAdmin)

Application Integration Deployer (roles/integrations.integrationDeployer)

Application Integration Editor (roles/integrations.integrationEditor)

Application Integration Invoker (roles/integrations.integrationInvoker)

Application Integration Viewer (roles/integrations.integrationViewer)

Application Integration SFDC Instance Admin (roles/integrations.sfdcInstanceAdmin)

Application Integration SFDC Instance Editor (roles/integrations.sfdcInstanceEditor)

Application Integration SFDC Instance Viewer (roles/integrations.sfdcInstanceViewer)

Application Integration Approver (roles/integrations.suspensionResolver)

Issuerswitch Account Manager Admin (roles/issuerswitch.accountManagerAdmin)

Issuerswitch Account Manager Transactions Admin (roles/issuerswitch.accountManagerTransactionsAdmin)

Issuerswitch Account Manager Transactions Viewer (roles/issuerswitch.accountManagerTransactionsViewer)

Issuerswitch Admin (roles/issuerswitch.admin)

Issuerswitch Participants Admin (roles/issuerswitch.issuerParticipantsAdmin)

Issuerswitch Resolutions Admin (roles/issuerswitch.resolutionsAdmin)

Issuerswitch Rules Admin (roles/issuerswitch.rulesAdmin)

Issuerswitch Rules Viewer (roles/issuerswitch.rulesViewer)

Issuerswitch Transactions Viewer (roles/issuerswitch.transactionsViewer)

Config Controller Admin (roles/krmapihosting.admin)

Config Controller Viewer (roles/krmapihosting.viewer)

Cloud License Manager Admin (roles/licensemanager.admin)

Cloud License Manager Viewer (roles/licensemanager.viewer)

Cloud Life Sciences Viewer (roles/lifesciences.viewer)

Live Stream Editor (roles/livestream.editor)

Live Stream Viewer (roles/livestream.viewer)

Logging Admin (roles/logging.admin)

Logs Configuration Writer (roles/logging.configWriter)

Private Logs Viewer (roles/logging.privateLogViewer)

Logs Viewer (roles/logging.viewer)

Looker Admin (roles/looker.admin)

Looker Instance User (roles/looker.instanceUser)

Looker Viewer (roles/looker.viewer)

Looker Admin (roles/lookerstudio.lookerAdmin)

Looker Studio Pro Manager (roles/lookerstudio.proManager)

Google Cloud Managed Lustre Admin (roles/lustre.admin)

Google Cloud Managed Lustre Viewer (roles/lustre.viewer)

Maintenance API Viewer (roles/maintenance.viewer)

Managed Flink Admin (roles/managedflink.admin)

Managed Flink Developer (roles/managedflink.developer)

Managed Flink Viewer (roles/managedflink.viewer)

Google Cloud Managed Identities Admin (roles/managedidentities.admin)

Google Cloud Managed Identities Backup Admin (roles/managedidentities.backupAdmin)

Google Cloud Managed Identities Backup Viewer (roles/managedidentities.backupViewer)

Google Cloud Managed Identities Domain Admin (roles/managedidentities.domainAdmin)

Google Cloud Managed Identities Peering Admin (roles/managedidentities.peeringAdmin)

Google Cloud Managed Identities Peering Viewer (roles/managedidentities.peeringViewer)

Google Cloud Managed Identities Viewer (roles/managedidentities.viewer)

Managed Kafka Admin (roles/managedkafka.admin)

Managed Kafka Client (roles/managedkafka.client)

Managed Kafka Cluster Editor (roles/managedkafka.clusterEditor)

Managed Kafka Connector Editor (roles/managedkafka.connectorEditor)

Managed Kafka Consumer Group Editor (roles/managedkafka.consumerGroupEditor)

Managed Kafka Topic Editor (roles/managedkafka.topicEditor)

Managed Kafka Viewer (roles/managedkafka.viewer)

Mandiant Attack Surface Management Editor (roles/mandiant.attackSurfaceManagementEditor)

Mandiant Attack Surface Management Viewer (roles/mandiant.attackSurfaceManagementViewer)

Mandiant Digital Threat Monitoring Editor (roles/mandiant.digitalThreatMonitoringEditor)

Mandiant Digital Threat Monitoring Viewer (roles/mandiant.digitalThreatMonitoringViewer)

Mandiant Expertise On Demand Editor (roles/mandiant.expertiseOnDemandEditor)

Mandiant Expertise On Demand Viewer (roles/mandiant.expertiseOnDemandViewer)

Mandiant Threat Intel Editor (roles/mandiant.threatIntelEditor)

Mandiant Threat Intel Viewer (roles/mandiant.threatIntelViewer)

Mandiant Validation Editor (roles/mandiant.validationEditor)

Mandiant Validation Viewer (roles/mandiant.validationViewer)

Maps API Admin (roles/mapsadmin.admin)

Maps API Viewer (roles/mapsadmin.viewer)

Mobility Solutions Overages Viewer (roles/mapsanalytics.mobilitySolutionsOverageViewer)

Maps Analytics Viewer (roles/mapsanalytics.viewer)

Maps Platform Datasets Admin (roles/mapsplatformdatasets.admin)

Maps Platform Datasets Viewer (roles/mapsplatformdatasets.viewer)

Marketplace Solutions Admin (roles/marketplacesolutions.admin)

Marketplace Solutions Editor (roles/marketplacesolutions.editor)

Marketplace Solutions Viewer (roles/marketplacesolutions.viewer)

MCP tool user (roles/mcp.toolUser)

Cloud Memorystore Memcached Admin (roles/memcache.admin)

Cloud Memorystore Memcached Editor (roles/memcache.editor)

Cloud Memorystore Memcached Viewer (roles/memcache.viewer)

Memorystore Admin (roles/memorystore.admin)

Memorystore Viewer (roles/memorystore.viewer)

Dataproc Metastore Admin (roles/metastore.admin)

Dataproc Metastore Editor (roles/metastore.editor)

Dataproc Metastore Metadata Operator (roles/metastore.metadataOperator)

Dataproc Metastore Viewer (roles/metastore.user)

Migration Center Admin (roles/migrationcenter.admin)

Migration Center Discovery Client Registrator (roles/migrationcenter.discoveryClientRegistrator)

Migration Center Viewer (roles/migrationcenter.viewer)

AI Platform Admin (roles/ml.admin)

AI Platform Developer (roles/ml.developer)

AI Platform Viewer (roles/ml.viewer)

Model Armor Admin (roles/modelarmor.admin)

Model Armor Callout User (roles/modelarmor.calloutUser)

Model Armor Floor Setting Admin (roles/modelarmor.floorSettingsAdmin)

Model Armor Floor Setting Viewer (roles/modelarmor.floorSettingsViewer)

Model Armor User (roles/modelarmor.user)

Model Armor Viewer (roles/modelarmor.viewer)

Monitoring Admin (roles/monitoring.admin)

Monitoring Editor (roles/monitoring.editor)

Monitoring Metrics Scopes Admin (roles/monitoring.metricsScopesAdmin)

Monitoring Metrics Scopes Viewer (roles/monitoring.metricsScopesViewer)

Monitoring Viewer (roles/monitoring.viewer)

Google Home Developer Console Admin (roles/nestconsole.homeDeveloperAdmin)

Google Home Developer Console Editor (roles/nestconsole.homeDeveloperEditor)

Google Home Developer Console Reader (roles/nestconsole.homeDeveloperViewer)

Google Cloud NetApp Volumes Admin (roles/netapp.admin)

Google Cloud NetApp Volumes Viewer (roles/netapp.viewer)

NetApp Cloud Volumes Admin (roles/netappcloudvolumes.admin)

NetApp Cloud Volumes Viewer (roles/netappcloudvolumes.viewer)

Service Automation Consumer Network Admin (roles/networkconnectivity.consumerNetworkAdmin)

Group Admin (roles/networkconnectivity.groupAdmin)

Hub & Spoke Admin (roles/networkconnectivity.hubAdmin)

Hub & Spoke Viewer (roles/networkconnectivity.hubViewer)

Multicloud Data Transfer Config Admin (roles/networkconnectivity.multicloudDataTransferConfigAdmin)

Multicloud Data Transfer Config Viewer (roles/networkconnectivity.multicloudDataTransferConfigViewer)

Destination Admin (roles/networkconnectivity.multicloudDataTransferDestinationAdmin)

Destination Viewer (roles/networkconnectivity.multicloudDataTransferDestinationViewer)

Regional Endpoint Admin (roles/networkconnectivity.regionalEndpointAdmin)

Regional Endpoint Viewer (roles/networkconnectivity.regionalEndpointViewer)

Service Class User (roles/networkconnectivity.serviceClassUser)

Service Automation Service Producer Admin (roles/networkconnectivity.serviceProducerAdmin)

Spoke Admin (roles/networkconnectivity.spokeAdmin)

Transport Admin (roles/networkconnectivity.transportAdmin)

Transport Viewer (roles/networkconnectivity.transportViewer)

Network Management Admin (roles/networkmanagement.admin)

Network Management Viewer (roles/networkmanagement.viewer)

DNS Threat Detector Admin (roles/networksecurity.dnsThreatDetectorAdmin)

DNS Threat Detector Viewer (roles/networksecurity.dnsThreatDetectorViewer)

Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin)

Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin)

Intercept Deployment Viewer (roles/networksecurity.interceptDeploymentViewer)

Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin)

Intercept Endpoint Viewer (roles/networksecurity.interceptEndpointViewer)

Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin)

Mirroring Deployment Viewer (roles/networksecurity.mirroringDeploymentViewer)

Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin)

Mirroring Endpoint Viewer (roles/networksecurity.mirroringEndpointViewer)

Security Profile Admin (roles/networksecurity.securityProfileAdmin)

Service Extensions Admin (roles/networkservices.serviceExtensionsAdmin)

Service Extensions Viewer (roles/networkservices.serviceExtensionsViewer)

Notebooks Admin (roles/notebooks.admin)

Notebooks Legacy Admin (roles/notebooks.legacyAdmin)

Notebooks Legacy Viewer (roles/notebooks.legacyViewer)

Notebooks Runner (roles/notebooks.runner)

Notebooks Viewer (roles/notebooks.viewer)

Oracle Database@Google Cloud admin (roles/oracledatabase.admin)

Oracle Database@Google Cloud Autonomous Database Admin (roles/oracledatabase.autonomousDatabaseAdmin)

Oracle Database@Google Cloud Autonomous Database Viewer (roles/oracledatabase.autonomousDatabaseViewer)

Oracle Database@Google Cloud Exadata Infrastructure Admin (roles/oracledatabase.cloudExadataInfrastructureAdmin)

Oracle Database@Google Cloud Exadata Infrastructure User (roles/oracledatabase.cloudExadataInfrastructureUser)

Oracle Database@Google Cloud Exadata Infrastructure Viewer (roles/oracledatabase.cloudExadataInfrastructureViewer)

Oracle Database@Google Cloud VM Cluster Admin (roles/oracledatabase.cloudVmClusterAdmin)

Oracle Database@Google Cloud VM Cluster Viewer (roles/oracledatabase.cloudVmClusterViewer)

Oracle Database@Google Cloud Container Database Viewer (roles/oracledatabase.databaseViewer)

Oracle Database@Google Cloud DB System Admin (roles/oracledatabase.dbSystemAdmin)

Oracle Database@Google Cloud DB System Viewer (roles/oracledatabase.dbSystemViewer)

Oracle Database@Google Cloud Exadata Database Service on Exascale Infrastracture VM Cluster Admin (roles/oracledatabase.exadbVmClusterAdmin)

Oracle Database@Google Cloud Exadata Database Service on Exascale Infrastracture VM Cluster Viewer (roles/oracledatabase.exadbVmClusterViewer)

Oracle Database@Google Cloud Exadata Database Service on Exascale Infrastracture Storage Vault Admin (roles/oracledatabase.exascaleDbStorageVaultAdmin)

Oracle Database@Google Cloud Exadata Database Service on Exascale Infrastracture Storage Vault Viewer (roles/oracledatabase.exascaleDbStorageVaultViewer)

Oracle Database@Google Network Admin (roles/oracledatabase.networkAdmin)

Oracle Database@Google ODB Network Admin (roles/oracledatabase.odbNetworkAdmin)

Oracle Database@Google ODB Network Viewer (roles/oracledatabase.odbNetworkViewer)

Oracle Database@Google ODB Subnet Admin (roles/oracledatabase.odbSubnetAdmin)

Oracle Database@Google ODB Subnet User (roles/oracledatabase.odbSubnetUser)

Oracle Database@Google ODB Subnet Viewer (roles/oracledatabase.odbSubnetViewer)

Oracle Database@Google Cloud Pluggable Database Viewer (roles/oracledatabase.pluggableDatabaseViewer)

Oracle Database@Google Cloud viewer (roles/oracledatabase.viewer)

GuestPolicy Admin (roles/osconfig.guestPolicyAdmin)

GuestPolicy Editor (roles/osconfig.guestPolicyEditor)

GuestPolicy Viewer (roles/osconfig.guestPolicyViewer)

InstanceOSPoliciesCompliance Viewer (roles/osconfig.instanceOSPoliciesComplianceViewer)

OS Inventory Viewer (roles/osconfig.inventoryViewer)

OSPolicyAssignment Admin (roles/osconfig.osPolicyAssignmentAdmin)

OSPolicyAssignment Editor (roles/osconfig.osPolicyAssignmentEditor)

OSPolicyAssignmentReport Viewer (roles/osconfig.osPolicyAssignmentReportViewer)

OSPolicyAssignment Viewer (roles/osconfig.osPolicyAssignmentViewer)

PatchDeployment Admin (roles/osconfig.patchDeploymentAdmin)

PatchDeployment Viewer (roles/osconfig.patchDeploymentViewer)

Patch Job Executor (roles/osconfig.patchJobExecutor)

Patch Job Viewer (roles/osconfig.patchJobViewer)

Project Feature Settings Editor (roles/osconfig.projectFeatureSettingsEditor)

Project Feature Settings Viewer (roles/osconfig.projectFeatureSettingsViewer)

Upgrade Report Viewer (roles/osconfig.upgradeReportViewer)

OS VulnerabilityReport Viewer (roles/osconfig.vulnerabilityReportViewer)

Parallelstore Admin (roles/parallelstore.admin)

Parallelstore Viewer (roles/parallelstore.viewer)

Parameter Manager Admin (roles/parametermanager.admin)

Parameter Manager Parameter Accessor (roles/parametermanager.parameterAccessor)

Parameter Manager Parameter Version Adder (roles/parametermanager.parameterVersionAdder)

Parameter Manager Parameter Version Manager (roles/parametermanager.parameterVersionManager)

Parameter Manager Parameter Viewer (roles/parametermanager.parameterViewer)

Payments Reseller Admin (roles/paymentsresellersubscription.partnerAdmin)

Payments Reseller Viewer (roles/paymentsresellersubscription.partnerViewer)

Payments Reseller Products Viewer (roles/paymentsresellersubscription.productViewer)

Payments Reseller Promotions Viewer (roles/paymentsresellersubscription.promotionViewer)

Payments Reseller Subscriptions Editor (roles/paymentsresellersubscription.subscriptionEditor)

Payments Reseller Subscriptions Viewer (roles/paymentsresellersubscription.subscriptionViewer)

CA Service Admin (roles/privateca.admin)

CA Service Auditor (roles/privateca.auditor)

CA Service Operation Manager (roles/privateca.caManager)

CA Service Certificate Manager (roles/privateca.certificateManager)

Privileged Access Manager Admin (roles/privilegedaccessmanager.admin)

Privileged Access Manager Viewer (roles/privilegedaccessmanager.viewer)

Beacon Attachment Editor (roles/proximitybeacon.attachmentEditor)

Beacon Attachment Publisher (roles/proximitybeacon.attachmentPublisher)

Beacon Attachment Viewer (roles/proximitybeacon.attachmentViewer)

Beacon Editor (roles/proximitybeacon.beaconEditor)

External Account Key Creator (roles/publicca.externalAccountKeyCreator)

Pub/Sub Admin (roles/pubsub.admin)

Pub/Sub Editor (roles/pubsub.editor)

Pub/Sub Viewer (roles/pubsub.viewer)

Subscription Linking Admin (roles/readerrevenuesubscriptionlinking.admin)

Subscription Linking Viewer (roles/readerrevenuesubscriptionlinking.viewer)

reCAPTCHA Enterprise Admin (roles/recaptchaenterprise.admin)

reCAPTCHA Enterprise Agent (roles/recaptchaenterprise.agent)

reCAPTCHA Enterprise Viewer (roles/recaptchaenterprise.viewer)

AlloyDB Recommender Admin (roles/recommender.alloydbAdmin)

AlloyDB Recommender Viewer (roles/recommender.alloydbViewer)

BigQuery Slot Recommender Admin (roles/recommender.bigQueryCapacityCommitmentsAdmin)

BigQuery Recommender Project Admin (roles/recommender.bigQueryCapacityCommitmentsProjectAdmin)

BigQuery Recommender Project Viewer (roles/recommender.bigQueryCapacityCommitmentsProjectViewer)

BigQuery Slot Recommender Viewer (roles/recommender.bigQueryCapacityCommitmentsViewer)

BigQuery Materialized View Recommender Admin (roles/recommender.bigqueryMaterializedViewAdmin)

BigQuery Materialized View Recommender Viewer (roles/recommender.bigqueryMaterializedViewViewer)

BigQuery Partitioning Clustering Recommender Admin (roles/recommender.bigqueryPartitionClusterAdmin)

BigQuery Partitioning Clustering Recommender Viewer (roles/recommender.bigqueryPartitionClusterViewer)

Bigtable Cluster Performance Recommender Admin (roles/recommender.bigtableClusterPerformanceAdmin)

Bigtable Cluster Performance Recommender Viewer (roles/recommender.bigtableClusterPerformanceViewer)

Cloud Asset Insights Admin (roles/recommender.cloudAssetInsightsAdmin)

Cloud Asset Insights Viewer (roles/recommender.cloudAssetInsightsViewer)

Cloud Cost General Recommendations Recommender Admin (roles/recommender.cloudCostRecommendationAdmin)

Cloud Cost General Recommendations Recommender Viewer (roles/recommender.cloudCostRecommendationViewer)

Cloud Deprecation General Recommender Admin (roles/recommender.cloudDeprecationRecommendationAdmin)

Cloud Deprecation General Recommender Viewer (roles/recommender.cloudDeprecationRecommendationViewer)

Cloud Manageability General Recommendations Recommender Admin (roles/recommender.cloudManageabilityRecommendationAdmin)

Cloud Manageability General Recommendations Recommender Viewer (roles/recommender.cloudManageabilityRecommendationViewer)

Cloud Performance General Recommendations Recommender Admin (roles/recommender.cloudPerformanceRecommendationAdmin)

Cloud Performance General Recommendations Recommender Viewer (roles/recommender.cloudPerformanceRecommendationViewer)

Cloud Reliability General Recommendations Recommender Admin (roles/recommender.cloudReliabilityRecommendationAdmin)

Cloud Reliability General Recommendations Recommender Viewer (roles/recommender.cloudReliabilityRecommendationViewer)

Cloud Security General Recommendations Recommender Admin (roles/recommender.cloudSecurityRecommendationAdmin)

Cloud Security General Recommendations Recommender Viewer (roles/recommender.cloudSecurityRecommendationViewer)

Cloud SQL Recommender Admin (roles/recommender.cloudsqlAdmin)

Cloud SQL Recommender Viewer (roles/recommender.cloudsqlViewer)

Compute Recommender Admin (roles/recommender.computeAdmin)

Compute Recommender Viewer (roles/recommender.computeViewer)

GKE Diagnosis Recommender Admin (roles/recommender.containerDiagnosisAdmin)

GKE Diagnosis Recommender Viewer (roles/recommender.containerDiagnosisViewer)

Dataflow Diagnostics Admin (roles/recommender.dataflowDiagnosticsAdmin)

Dataflow Diagnostics Viewer (roles/recommender.dataflowDiagnosticsViewer)

Error Reporting Recommender Admin (roles/recommender.errorReportingAdmin)

Error Reporting Recommender Viewer (roles/recommender.errorReportingViewer)

Firestore Database Firebase rules Recommender Admin (roles/recommender.firestoredatabasefirebaserulesAdmin)

Firestore Database Firebase rules Recommender Viewer (roles/recommender.firestoredatabasefirebaserulesViewer)

Firestore Database Reliability Recommender Admin (roles/recommender.firestoredatabasereliabilityAdmin)

Firestore Database Reliability Recommender Viewer (roles/recommender.firestoredatabasereliabilityViewer)

Firewall Recommender Admin (roles/recommender.firewallAdmin)

Firewall Recommender Viewer (roles/recommender.firewallViewer)

Google Maps Platform Insights/Recommendations Admin (roles/recommender.gmpAdmin)

Google Maps Platform Insights/Recommendations Viewer (roles/recommender.gmpViewer)

IAM Recommender Admin (roles/recommender.iamAdmin)

IAM Recommender Viewer (roles/recommender.iamViewer)

IAM Policy Change Risk Recommender Admin (roles/recommender.iampolicychangeriskAdmin)

IAM Policy Change Risk Recommender Viewer (roles/recommender.iampolicychangeriskViewer)

Memorystore Manageability Recommender Admin (roles/recommender.memorystoremanageabilityAdmin)

Memorystore Manageability Recommender Viewer (roles/recommender.memorystoremanageabilityViewer)

Memorystore Performance Recommender Admin (roles/recommender.memorystoreperformanceAdmin)

Memorystore Performance Recommender Viewer (roles/recommender.memorystoreperformanceViewer)

Memorystore Reliability Recommender Admin (roles/recommender.memorystorereliabilityAdmin)

Memorystore Reliability Recommender Viewer (roles/recommender.memorystorereliabilityViewer)

Network Analyzer Recommender Admin (roles/recommender.networkAnalyzerAdmin)

Network Analyzer Cloud SQL Recommender Admin (roles/recommender.networkAnalyzerCloudSqlAdmin)

Network Analyzer Cloud SQL Recommender Viewer (roles/recommender.networkAnalyzerCloudSqlViewer)

Network Analyzer Dynamic Route Recommender Admin (roles/recommender.networkAnalyzerDynamicRouteAdmin)

Network Analyzer Dynamic Route Recommender Viewer (roles/recommender.networkAnalyzerDynamicRouteViewer)

Network Analyzer GKE Connectivity Recommender Admin (roles/recommender.networkAnalyzerGkeConnectivityAdmin)

Network Analyzer GKE Connectivity Recommender Viewer (roles/recommender.networkAnalyzerGkeConnectivityViewer)

Network Analyzer GKE IP Address Recommender Admin (roles/recommender.networkAnalyzerGkeIpAddressAdmin)

Network Analyzer GKE IP Address Recommender Viewer (roles/recommender.networkAnalyzerGkeIpAddressViewer)

Network Analyzer GKE Service Account Insights Recommender Admin (roles/recommender.networkAnalyzerGkeServiceAccountAdmin)

Network Analyzer GKE Service Account Insights Recommender Viewer (roles/recommender.networkAnalyzerGkeServiceAccountViewer)

Network Analyzer IP Address Recommender Admin (roles/recommender.networkAnalyzerIpAddressAdmin)

Network Analyzer IP Address Recommender Viewer (roles/recommender.networkAnalyzerIpAddressViewer)

Network Analyzer Load Balancer Recommender Admin (roles/recommender.networkAnalyzerLoadBalancerAdmin)

Network Analyzer Load Balancer Recommender Viewer (roles/recommender.networkAnalyzerLoadBalancerViewer)

Network Analyzer Recommender Viewer (roles/recommender.networkAnalyzerViewer)

Network Analyzer VPC Connectivity Recommender Admin (roles/recommender.networkAnalyzerVpcConnectivityAdmin)

Network Analyzer VPC Connectivity Recommender Viewer (roles/recommender.networkAnalyzerVpcConnectivityViewer)

Org Policy Recommender Admin (roles/recommender.orgPolicyAdmin)

Org Policy Recommender Viewer (roles/recommender.orgPolicyViewer)

Product Suggestion Recommenders Admin (roles/recommender.productSuggestionAdmin)

Product Suggestion Recommenders Viewer (roles/recommender.productSuggestionViewer)

Project Usage Commitment Recommender Admin (roles/recommender.projectCudAdmin)

Project Usage Commitment Recommender Viewer (roles/recommender.projectCudViewer)

Project Utilization Recommender Admin (roles/recommender.projectUtilAdmin)

Project Utilization Recommender Viewer (roles/recommender.projectUtilViewer)

RecentChange RecommenderConfig Admin (roles/recommender.recentChangeConfigAdmin)

Recent Change Risk Recommender Admin (roles/recommender.recentchangeriskAdmin)

Recent Change Risk Recommender Viewer (roles/recommender.recentchangeriskViewer)

Service Limit Recommender Admin (roles/recommender.serviceLimitAdmin)

Service Limit Recommender Viewer (roles/recommender.serviceLimitViewer)

Service Account Change Risk Recommender Admin (roles/recommender.serviceaccntchangeriskAdmin)

Service Account Change Risk Recommender Viewer (roles/recommender.serviceaccntchangeriskViewer)

Spanner Project Reliability Recommender Admin (roles/recommender.spannerAdmin)

Spanner Project Reliability Recommender Viewer (roles/recommender.spannerViewer)

Recommender Viewer (roles/recommender.viewer)

Cloud Memorystore Redis Admin (roles/redis.admin)

Cloud Memorystore Redis Editor (roles/redis.editor)

Cloud Memorystore Redis Viewer (roles/redis.viewer)

Redis Enterprise Cloud Admin (roles/redisenterprisecloud.admin)

Redis Enterprise Cloud Viewer (roles/redisenterprisecloud.viewer)

Folder Admin (roles/resourcemanager.folderAdmin)

Folder Creator (roles/resourcemanager.folderCreator)

Folder Editor (roles/resourcemanager.folderEditor)

Folder Viewer (roles/resourcemanager.folderViewer)

Organization Administrator (roles/resourcemanager.organizationAdmin)

Project IAM Admin (roles/resourcemanager.projectIamAdmin)

Project Mover (roles/resourcemanager.projectMover)

Tag User (roles/resourcemanager.tagUser)

Retail Admin (roles/retail.admin)

Retail Editor (roles/retail.editor)

Retail Merchant Approver (roles/retail.merchantApprover)

Retail Merchant Creator (roles/retail.merchantCreator)

Retail Viewer (roles/retail.viewer)

Risk Manager Admin (roles/riskmanager.admin)

Risk Manager Editor (roles/riskmanager.editor)

Risk Manager Report Reviewer (roles/riskmanager.reviewer)

Risk Manager Viewer (roles/riskmanager.viewer)

Rapid Migration Assessment Admin (roles/rma.admin)

Rapid Migration Assessment Runner (roles/rma.runner)

Rapid Migration Assessment Viewer (roles/rma.viewer)

Route Optimization Editor (roles/routeoptimization.editor)

Route Optimization Viewer (roles/routeoptimization.viewer)

Cloud Run Admin (roles/run.admin)

Cloud Run Developer (roles/run.developer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

Cloud Run Viewer (roles/run.viewer)

Serverless Integrations Developer (roles/runapps.developer)

Serverless Integrations Operator (roles/runapps.operator)

Serverless Integrations Viewer (roles/runapps.viewer)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

SaaS Service Management Viewer (roles/saasservicemgmt.viewer)

Secret Manager Admin (roles/secretmanager.admin)

Secret Manager Secret Accessor (roles/secretmanager.secretAccessor)

Secret Manager Secret Version Adder (roles/secretmanager.secretVersionAdder)

Secret Manager Secret Version Manager (roles/secretmanager.secretVersionManager)

Secret Manager Viewer (roles/secretmanager.viewer)

Overwatch Activator (roles/securedlandingzone.overwatchActivator)

Overwatch Admin (roles/securedlandingzone.overwatchAdmin)

Overwatch Viewer (roles/securedlandingzone.overwatchViewer)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Instance Accessor (roles/securesourcemanager.instanceAccessor)

Secure Source Manager Instance Manager (roles/securesourcemanager.instanceManager)

Secure Source Manager Instance Owner (roles/securesourcemanager.instanceOwner)

Secure Source Manager Instance Repository Creator (roles/securesourcemanager.instanceRepositoryCreator)

Secure Source Manager Repository Admin (roles/securesourcemanager.repoAdmin)

Secure Source Manager Repository Creator (roles/securesourcemanager.repoCreator)

Secure Source Manager Repository Pull Request Approver (roles/securesourcemanager.repoPullRequestApprover)

Secure Source Manager Repository Reader (roles/securesourcemanager.repoReader)

Secure Source Manager Repository Writer (roles/securesourcemanager.repoWriter)

Secure Source Manager SSH Key User (roles/securesourcemanager.sshKeyUser)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Security Center Assets Viewer (roles/securitycenter.assetsViewer)

Security Center BigQuery Exports Editor (roles/securitycenter.bigQueryExportsEditor)

Security Center BigQuery Exports Viewer (roles/securitycenter.bigQueryExportsViewer)

Security Center Findings Editor (roles/securitycenter.findingsEditor)

Security Center Findings Viewer (roles/securitycenter.findingsViewer)

Security Center Settings Admin (roles/securitycenter.settingsAdmin)

Security Center Settings Editor (roles/securitycenter.settingsEditor)

Security Center Settings Viewer (roles/securitycenter.settingsViewer)

Security Center Management Admin (roles/securitycentermanagement.admin)

Security Center Management Custom Modules Editor (roles/securitycentermanagement.customModulesEditor)

Security Center Management Custom Modules Viewer (roles/securitycentermanagement.customModulesViewer)

Security Center Management Custom ETD Modules Editor (roles/securitycentermanagement.etdCustomModulesEditor)

Security Center Management ETD Custom Modules Viewer (roles/securitycentermanagement.etdCustomModulesViewer)

Security Center Management Settings Editor (roles/securitycentermanagement.settingsEditor)

Security Center Management Settings Viewer (roles/securitycentermanagement.settingsViewer)

Security Center Management SHA Custom Modules Editor (roles/securitycentermanagement.shaCustomModulesEditor)

Security Center Management SHA Custom Modules Viewer (roles/securitycentermanagement.shaCustomModulesViewer)

Security Center Management Viewer (roles/securitycentermanagement.viewer)

Service Directory Admin (roles/servicedirectory.admin)

Service Directory Editor (roles/servicedirectory.editor)

Service Directory Network Attacher (roles/servicedirectory.networkAttacher)

Private Service Connect Authorized Service (roles/servicedirectory.pscAuthorizedService)

Service Directory Viewer (roles/servicedirectory.viewer)

Personalized Service Health Viewer (roles/servicehealth.viewer)

Service Management Administrator (roles/servicemanagement.admin)

Quota Administrator (roles/servicemanagement.quotaAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Restore Admin (roles/spanner.restoreAdmin)

Cloud Spanner Viewer (roles/spanner.viewer)

Stackdriver Accounts Editor (roles/stackdriver.accounts.editor)

Stackdriver Accounts Viewer (roles/stackdriver.accounts.viewer)

Storage Admin (roles/storage.admin)

Storage Folder Admin (roles/storage.folderAdmin)

Storage HMAC Key Admin (roles/storage.hmacKeyAdmin)

Storage Insights Collector Service (roles/storage.insightsCollectorService)

Storage Object Admin (roles/storage.objectAdmin)

Storage Object Creator (roles/storage.objectCreator)

Storage Object User (roles/storage.objectUser)

Storage Object Viewer (roles/storage.objectViewer)

Storage Batch Operations Admin (roles/storagebatchoperations.admin)

Storage Batch Operations Viewer (roles/storagebatchoperations.viewer)

Storage Insights Admin (roles/storageinsights.admin)

Storage Insights Analyst (roles/storageinsights.analyst)

Storage Insights Viewer (roles/storageinsights.viewer)

Storage Transfer Admin (roles/storagetransfer.admin)

Storage Transfer User (roles/storagetransfer.user)

Storage Transfer Viewer (roles/storagetransfer.viewer)

Stream Admin (roles/stream.admin)

Stream Content Admin (roles/stream.contentAdmin)

Stream Content Builder (roles/stream.contentBuilder)

Stream Instance Admin (roles/stream.instanceAdmin)

Stream Viewer (roles/stream.viewer)

Subscribe with Google Developer (roles/subscribewithgoogledeveloper.developer)

Telco Automation Admin (roles/telcoautomation.admin)

Telco Automation Tier 1 Operations Admin (roles/telcoautomation.opsAdminTier1)

Telco Automation Tier 4 Operations Admin (roles/telcoautomation.opsAdminTier4)

GTI Alert Admin (roles/threatintelligence.alertAdmin)

GTI Alert User (roles/threatintelligence.alertUser)

CTEM Admin (roles/threatintelligence.ctemAdmin)

CTEM Editor (roles/threatintelligence.ctemEditor)

CTEM Project Admin (roles/threatintelligence.ctemProjectAdmin)

CTEM Viewer (roles/threatintelligence.ctemViewer)

TPU Admin (roles/tpu.admin)

TPU Viewer (roles/tpu.viewer)

Transcoder Admin (roles/transcoder.admin)

Transcoder Viewer (roles/transcoder.viewer)

Transfer Appliance Admin (roles/transferappliance.admin)

Transfer Appliance Viewer (roles/transferappliance.viewer)

Translation Hub Admin (roles/translationhub.admin)

Translation Hub Portal User (roles/translationhub.portalUser)

Vector Search Admin (roles/vectorsearch.admin)

Vector Search Collection Writer (roles/vectorsearch.collectionWriter)

Vector Search DataObject Writer (roles/vectorsearch.dataObjectWriter)

Vector Search Index Writer (roles/vectorsearch.indexWriter)

Vector Search Viewer (roles/vectorsearch.viewer)

Video Stitcher Admin (roles/videostitcher.admin)

Video Stitcher User (roles/videostitcher.user)

Video Stitcher Viewer (roles/videostitcher.viewer)

VisionAI Admin (roles/visionai.admin)

VisionAI Editor (roles/visionai.editor)

VisionAI Viewer (roles/visionai.viewer)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

VMware Engine Service Admin (roles/vmwareengine.vmwareengineAdmin)

VMware Engine Service Privileged User (roles/vmwareengine.vmwareenginePrivilegedUser)

VMware Engine Service Viewer (roles/vmwareengine.vmwareengineViewer)

Serverless VPC Access Admin (roles/vpcaccess.admin)

Serverless VPC Access User (roles/vpcaccess.user)

Serverless VPC Access Viewer (roles/vpcaccess.viewer)

Workflows Admin (roles/workflows.admin)

Workflows Editor (roles/workflows.editor)

Workflows Invoker (roles/workflows.invoker)

Workflows Viewer (roles/workflows.viewer)

Workload Certificate Admin (roles/workloadcertificate.admin)

Workload Certificate Registration Admin (roles/workloadcertificate.registrationAdmin)

Workload Certificate Registration Viewer (roles/workloadcertificate.registrationViewer)

Workload Certificate Viewer (roles/workloadcertificate.viewer)

Workload Manager Admin (roles/workloadmanager.admin)

Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin)

Workload Manager Deployment Viewer (roles/workloadmanager.deploymentViewer)

Workload Manager Evaluation Admin (roles/workloadmanager.evaluationAdmin)

Workload Manager Evaluation Viewer (roles/workloadmanager.evaluationViewer)

Workload Manager Viewer (roles/workloadmanager.viewer)

Workload Manager Worker (roles/workloadmanager.worker)

Workload Manager Workload Viewer (roles/workloadmanager.workloadViewer)

Cloud Workstations Admin (roles/workstations.admin)

Cloud Workstations Creator (roles/workstations.workstationCreator)

Cloud Workstations Limit Exempted Creator (roles/workstations.workstationLimitExemptedCreator)

Service agent roles

• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)
• Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent)
• Vertex AI Service Agent (roles/aiplatform.serviceAgent)
• Vertex AI Tuning Service Agent (roles/aiplatform.tuningServiceAgent)
• Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
• Anthos Support Service Agent (roles/anthossupport.serviceAgent)
• App Engine flexible environment Service Agent (roles/appengineflex.serviceAgent)
• Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
• Backup and DR Service Agent (roles/backupdr.serviceAgent)
• Bare Metal Solution Service Agent (roles/baremetalsolution.serviceAgent)
• Google Batch Service Agent (roles/batch.serviceAgent)
• BigQuery Data Transfer Service Agent (roles/bigquerydatatransfer.serviceAgent)
• Binary Authorization Service Agent (roles/binaryauthorization.serviceAgent)
• Chronicle Service Agent (roles/chronicle.serviceAgent)
• Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
• Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent)
• Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
• Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• [Deprecated] Kubernetes Engine Node Service Agent (roles/container.nodeServiceAgent)
• Kubernetes Engine Service Agent (roles/container.serviceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
• Container Threat Detection Service Agent (roles/containerthreatdetection.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Dataform Service Agent (roles/dataform.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Data Labeling Service Agent (roles/datalabeling.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DesignCenter Service Agent (roles/designcenter.serviceAgent)
• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Enterprise Knowledge Graph Service Agent (roles/enterpriseknowledgegraph.serviceAgent)
• Cloud Filestore Service Agent (roles/file.serviceAgent)
• Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
• FleetEngine Service Agent (roles/fleetengine.serviceAgent)
• Game Services Service Agent (roles/gameservices.serviceAgent)
• Genomics Service Agent (roles/genomics.serviceAgent)
• Backup for GKE Service Agent (roles/gkebackup.serviceAgent)
• Warp Run Service Agent (roles/gkedataplanemanagement.warpRunServiceAgent)
• GKE Hub Service Agent (roles/gkehub.serviceAgent)
• Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
• Anthos Multi-Cloud Service Agent (roles/gkemulticloud.serviceAgent)
• Healthcare Service Agent (roles/healthcare.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• KRM API Hosting AnthosApiEndpoint Service Agent (roles/krmapihosting.anthosApiEndpointServiceAgent)
• KRM API Hosting Service Agent (roles/krmapihosting.serviceAgent)
• KubeRun Events Control Plane Service Agent (roles/kuberun.eventsControlPlaneServiceAgent)
• KubeRun Events Data Plane Service Agent (roles/kuberun.eventsDataPlaneServiceAgent)
• Cloud Life Sciences Service Agent (roles/lifesciences.serviceAgent)
• Looker Service Agent (roles/looker.restrictedServiceAgent)
• Looker Service Agent (roles/looker.serviceAgent)
• Cloud Managed Identities Service Agent (roles/managedidentities.serviceAgent)
• Cloud Memorystore Memcached Service Agent (roles/memcache.serviceAgent)
• Cloud Memorystore Service Agent (roles/memorystore.serviceAgent)
• Mesh Managed Control Plane Service Agent (roles/meshcontrolplane.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Multi-Cluster Service Discovery Service Agent (roles/multiclusterservicediscovery.serviceAgent)
• AI Platform Notebooks Service Agent (roles/notebooks.serviceAgent)
• Oracle Database@Google Cloud Service Agent (roles/oci.serviceAgent)
• Cloud OS Config Service Agent (roles/osconfig.serviceAgent)
• Parallelstore Service Agent (roles/parallelstore.serviceAgent)
• Privileged Access Manager Project Service Agent (roles/privilegedaccessmanager.projectServiceAgent)
• Privileged Access Manager Service Agent (roles/privilegedaccessmanager.serviceAgent)
• Cloud Pub/Sub Service Agent (roles/pubsub.serviceAgent)
• RMA Service Agent (roles/rapidmigrationassessment.serviceAgent)
• Cloud Memorystore Redis Service Agent (roles/redis.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Risk Manager Service Agent (roles/riskmanager.serviceAgent)
• Cloud Run Service Agent (roles/run.serviceAgent)
• Secured Landing Zone Service Agent (roles/securedlandingzone.serviceAgent)
• Attack Surface Management Scanner Service Agent (roles/securitycenter.attackSurfaceManagementScannerServiceAgent)
• Security Center Automation Service Agent (roles/securitycenter.automationServiceAgent)
• Security Center Control Service Agent (roles/securitycenter.controlServiceAgent)
• Security Health Analytics Service Agent (roles/securitycenter.securityHealthAnalyticsServiceAgent)
• Security Center Service Agent (roles/securitycenter.serviceAgent)
• Service Directory Service Agent (roles/servicedirectory.serviceAgent)
• Service Networking Service Agent (roles/servicenetworking.serviceAgent)
• Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
• Stream Service Agent (roles/stream.serviceAgent)
• Cloud TPU API Service Agent (roles/tpu.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• VMware Engine Service Agent (roles/vmwareengine.serviceAgent)
• Serverless VPC Access Service Agent (roles/vpcaccess.serviceAgent)
• Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)