storage.anywhereCaches.create

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Storage Admin (roles/storage.admin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Service agent roles

• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)

storage.anywhereCaches.disable

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Storage Admin (roles/storage.admin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Service agent roles

• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)

storage.anywhereCaches.get

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Storage Admin (roles/storage.admin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Service agent roles

• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)

storage.anywhereCaches.list

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Storage Admin (roles/storage.admin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Service agent roles

• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)

storage.anywhereCaches.pause

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Storage Admin (roles/storage.admin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Service agent roles

• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)

storage.anywhereCaches.resume

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Storage Admin (roles/storage.admin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Service agent roles

• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)

storage.anywhereCaches.update

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Storage Admin (roles/storage.admin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Service agent roles

• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)

storage.bucketOperations.cancel

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Storage Admin (roles/storage.admin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Service agent roles

• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)

storage.bucketOperations.get

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Storage Admin (roles/storage.admin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Service agent roles

• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)

storage.bucketOperations.list

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Storage Admin (roles/storage.admin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Service agent roles

• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)

storage.buckets.create

Owner (roles/owner)

Editor (roles/editor)

Backup and DR Cloud Storage Operator (roles/backupdr.cloudStorageOperator)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Velostrata Manager (roles/cloudmigration.inframanager)

Firebase Test Lab Admin (roles/cloudtestservice.testAdmin)

Composer Worker (roles/composer.worker)

Cloud Infrastructure Manager Agent (roles/config.agent)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

CA Service Admin (roles/privateca.admin)

CA Service Operation Manager (roles/privateca.caManager)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Storage Admin (roles/storage.admin)

Service agent roles

• Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)
• Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
• Vertex AI Model Monitoring Service Agent (roles/aiplatform.modelMonitoringServiceAgent)
• Vertex AI Service Agent (roles/aiplatform.serviceAgent)
• Vertex AI Tuning Service Agent (roles/aiplatform.tuningServiceAgent)
• App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)
• App Engine flexible environment Service Agent (roles/appengineflex.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
• Chronicle Service Agent (roles/chronicle.serviceAgent)
• Cloud Asset Service Agent (roles/cloudasset.serviceAgent)
• Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
• Infrastructure Manager Service Agent (roles/cloudconfig.serviceAgent)
• Cloud Deploy Service Agent (roles/clouddeploy.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DesignCenter Service Agent (roles/designcenter.serviceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• Dataproc Metastore Service Agent (roles/metastore.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Cloud Run Service Agent (roles/run.serviceAgent)
• Serverless Integrations Service Agent (roles/runapps.serviceAgent)
• SaaS Service Management Service Agent (roles/saasservicemgmt.serviceAgent)
• Cloud Spanner API Service Agent (roles/spanner.serviceAgent)
• Stream Service Agent (roles/stream.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• AI Edge Portal Service Agent (roles/aiedgeportal.serviceAgent)

storage.buckets.createTagBinding

Owner (roles/owner)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Tag User (roles/resourcemanager.tagUser)

Storage Admin (roles/storage.admin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Service agent roles

• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• DSPM Service Agent (roles/dspm.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)

storage.buckets.delete

Owner (roles/owner)

Editor (roles/editor)

Velostrata Manager (roles/cloudmigration.inframanager)

Cloud Infrastructure Manager Agent (roles/config.agent)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Storage Admin (roles/storage.admin)

Service agent roles

• Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
• Vertex AI Model Monitoring Service Agent (roles/aiplatform.modelMonitoringServiceAgent)
• Vertex AI Service Agent (roles/aiplatform.serviceAgent)
• App Engine flexible environment Service Agent (roles/appengineflex.serviceAgent)
• Infrastructure Manager Service Agent (roles/cloudconfig.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DesignCenter Service Agent (roles/designcenter.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Dataproc Metastore Service Agent (roles/metastore.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Serverless Integrations Service Agent (roles/runapps.serviceAgent)
• SaaS Service Management Service Agent (roles/saasservicemgmt.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)

storage.buckets.deleteTagBinding

Owner (roles/owner)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Tag User (roles/resourcemanager.tagUser)

Storage Admin (roles/storage.admin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Service agent roles

• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• DSPM Service Agent (roles/dspm.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)

storage.buckets.enableObjectRetention

Owner (roles/owner)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Storage Admin (roles/storage.admin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Service agent roles

• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)

storage.buckets.get

Backup and DR Cloud Storage Operator (roles/backupdr.cloudStorageOperator)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Velostrata Manager (roles/cloudmigration.inframanager)

Firebase Test Lab Admin (roles/cloudtestservice.testAdmin)

Composer Worker (roles/composer.worker)

Cloud Infrastructure Manager Agent (roles/config.agent)

Dataflow Admin (roles/dataflow.admin)

Dataflow Worker (roles/dataflow.worker)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

Dataplex Storage Data Reader (roles/dataplex.storageDataReader)

Dataproc Hub Agent (roles/dataproc.hubAgent)

Dataproc Worker (roles/dataproc.worker)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

SLZ BQDW Blueprint Project Level Remediator (roles/securedlandingzone.bqdwProjectRemediator)

Storage Admin (roles/storage.admin)

Storage Bucket Viewer (roles/storage.bucketViewer)

Storage Express Mode User Access (roles/storage.expressModeUserAccess)

Storage Insights Collector Service (roles/storage.insightsCollectorService)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Storage Legacy Bucket Reader (roles/storage.legacyBucketReader)

Storage Legacy Bucket Writer (roles/storage.legacyBucketWriter)

Service agent roles

• Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)
• Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
• Vertex AI Model Monitoring Service Agent (roles/aiplatform.modelMonitoringServiceAgent)
• Vertex AI RAG Data Service Agent (roles/aiplatform.ragServiceAgent)
• Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent)
• Vertex AI Service Agent (roles/aiplatform.serviceAgent)
• Vertex AI Tuning Service Agent (roles/aiplatform.tuningServiceAgent)
• App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)
• App Engine flexible environment Service Agent (roles/appengineflex.serviceAgent)
• Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent)
• AutoML Service Agent (roles/automl.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
• Chronicle Service Agent (roles/chronicle.serviceAgent)
• Chronicle SOAR Service Agent (roles/chronicle.soarServiceAgent)
• Cloud Asset Service Agent (roles/cloudasset.serviceAgent)
• Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
• Infrastructure Manager Service Agent (roles/cloudconfig.serviceAgent)
• Cloud Deploy Service Agent (roles/clouddeploy.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
• Cloud Optimization Service Agent (roles/cloudoptimization.serviceAgent)
• Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent)
• Cloud Translation API Service Agent (roles/cloudtranslate.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Content Warehouse Service Agent (roles/contentwarehouse.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Dataplex Discovery Service Agent (roles/dataplex.discoveryServiceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• Datastream Service Agent (roles/datastream.serviceAgent)
• DesignCenter Service Agent (roles/designcenter.serviceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• DocumentAI Core Service Agent (roles/documentaicore.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Eventarc Service Agent (roles/eventarc.serviceAgent)
• Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
• Cloud Storage for Firebase Service Agent (roles/firebasestorage.serviceAgent)
• Firestore Service Agent (roles/firestore.serviceAgent)
• Generative Language Service Agent (roles/generativelanguage.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• KubeRun Events Control Plane Service Agent (roles/kuberun.eventsControlPlaneServiceAgent)
• Dataproc Metastore Service Agent (roles/metastore.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Route Optimization Service Agent (roles/routeoptimization.serviceAgent)
• Cloud Run Service Agent (roles/run.serviceAgent)
• Serverless Integrations Service Agent (roles/runapps.serviceAgent)
• SaaS Service Management Service Agent (roles/saasservicemgmt.serviceAgent)
• Security Center Control Service Agent (roles/securitycenter.controlServiceAgent)
• Google Cloud Security Response Service Agent (roles/securitycenter.securityResponseServiceAgent)
• Security Center Service Agent (roles/securitycenter.serviceAgent)
• Cloud Spanner API Service Agent (roles/spanner.serviceAgent)
• Cloud Speech-to-Text Service Agent (roles/speech.serviceAgent)
• Stream Service Agent (roles/stream.serviceAgent)
• Vector Search Service Agent (roles/vectorsearch.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• AI Edge Portal Service Agent (roles/aiedgeportal.serviceAgent)

storage.buckets.getIamPolicy

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Viewer (roles/firebase.viewer)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

SLZ BQDW Blueprint Project Level Remediator (roles/securedlandingzone.bqdwProjectRemediator)

Storage Admin (roles/storage.admin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Service agent roles

• App Engine flexible environment Service Agent (roles/appengineflex.serviceAgent)
• Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent)
• Chronicle Service Agent (roles/chronicle.serviceAgent)
• Chronicle SOAR Service Agent (roles/chronicle.soarServiceAgent)
• Cloud Asset Service Agent (roles/cloudasset.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
• Cloud Storage for Firebase Service Agent (roles/firebasestorage.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• SaaS Service Management Service Agent (roles/saasservicemgmt.serviceAgent)
• Security Center Control Service Agent (roles/securitycenter.controlServiceAgent)
• Security Center Service Agent (roles/securitycenter.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Tuning Service Agent (roles/aiplatform.tuningServiceAgent)

storage.buckets.getIpFilter

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Support User (roles/iam.supportUser)

Storage Admin (roles/storage.admin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Service agent roles

• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)

storage.buckets.getObjectInsights

Owner (roles/owner)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Storage Admin (roles/storage.admin)

Storage Insights Collector Service (roles/storage.insightsCollectorService)

Service agent roles

• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)

storage.buckets.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Velostrata Manager (roles/cloudmigration.inframanager)

Composer Worker (roles/composer.worker)

Cloud Infrastructure Manager Agent (roles/config.agent)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

SLZ BQDW Blueprint Project Level Remediator (roles/securedlandingzone.bqdwProjectRemediator)

Storage Admin (roles/storage.admin)

Storage Bucket Viewer (roles/storage.bucketViewer)

Storage Express Mode User Access (roles/storage.expressModeUserAccess)

Workload Manager Admin (roles/workloadmanager.admin)

Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin)

Service agent roles

• Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)
• Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
• Vertex AI Model Monitoring Service Agent (roles/aiplatform.modelMonitoringServiceAgent)
• Vertex AI RAG Data Service Agent (roles/aiplatform.ragServiceAgent)
• Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent)
• Vertex AI Service Agent (roles/aiplatform.serviceAgent)
• Vertex AI Tuning Service Agent (roles/aiplatform.tuningServiceAgent)
• Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent)
• Chronicle SOAR Service Agent (roles/chronicle.soarServiceAgent)
• Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
• Infrastructure Manager Service Agent (roles/cloudconfig.serviceAgent)
• Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Content Warehouse Service Agent (roles/contentwarehouse.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DesignCenter Service Agent (roles/designcenter.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Security Center Control Service Agent (roles/securitycenter.controlServiceAgent)
• Security Center Service Agent (roles/securitycenter.serviceAgent)
• Cloud Spanner API Service Agent (roles/spanner.serviceAgent)
• Cloud Speech-to-Text Service Agent (roles/speech.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• AI Edge Portal Service Agent (roles/aiedgeportal.serviceAgent)

storage.buckets.listEffectiveTags

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

Storage Admin (roles/storage.admin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Service agent roles

• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• DSPM Service Agent (roles/dspm.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)

storage.buckets.listTagBindings

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

Storage Admin (roles/storage.admin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Service agent roles

• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• DSPM Service Agent (roles/dspm.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)

storage.buckets.relocate

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Storage Admin (roles/storage.admin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Service agent roles

• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)

storage.buckets.restore

Owner (roles/owner)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Storage Admin (roles/storage.admin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Service agent roles

• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)

storage.buckets.setIamPolicy

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Security Admin (roles/iam.securityAdmin)

SLZ BQDW Blueprint Project Level Remediator (roles/securedlandingzone.bqdwProjectRemediator)

Storage Admin (roles/storage.admin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Service agent roles

• Chronicle Service Agent (roles/chronicle.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• SaaS Service Management Service Agent (roles/saasservicemgmt.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• App Engine flexible environment Service Agent (roles/appengineflex.serviceAgent)

storage.buckets.setIpFilter

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Storage Admin (roles/storage.admin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Service agent roles

• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)

storage.buckets.update

Velostrata Manager (roles/cloudmigration.inframanager)

Firebase Test Lab Admin (roles/cloudtestservice.testAdmin)

Cloud Infrastructure Manager Agent (roles/config.agent)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

SLZ BQDW Blueprint Project Level Remediator (roles/securedlandingzone.bqdwProjectRemediator)

Storage Admin (roles/storage.admin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Service agent roles

• Vertex AI Model Monitoring Service Agent (roles/aiplatform.modelMonitoringServiceAgent)
• Vertex AI Tuning Service Agent (roles/aiplatform.tuningServiceAgent)
• App Engine flexible environment Service Agent (roles/appengineflex.serviceAgent)
• Chronicle SOAR Service Agent (roles/chronicle.soarServiceAgent)
• Infrastructure Manager Service Agent (roles/cloudconfig.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DesignCenter Service Agent (roles/designcenter.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Eventarc Service Agent (roles/eventarc.serviceAgent)
• Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• KubeRun Events Control Plane Service Agent (roles/kuberun.eventsControlPlaneServiceAgent)
• Dataproc Metastore Service Agent (roles/metastore.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Cloud Run Service Agent (roles/run.serviceAgent)
• Google Cloud Security Response Service Agent (roles/securitycenter.securityResponseServiceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)

storage.buckets.viewIntelligenceDetails

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Support User (roles/iam.supportUser)

Storage Admin (roles/storage.admin)

Service agent roles

• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)

storage.folders.create

Owner (roles/owner)

Editor (roles/editor)

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Composer Worker (roles/composer.worker)

Dataproc Worker (roles/dataproc.worker)

Application Design Center Admin (roles/designcenter.admin)

Application Design Center User (roles/designcenter.user)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Storage Admin (roles/storage.admin)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Storage Legacy Bucket Writer (roles/storage.legacyBucketWriter)

Storage Object Admin (roles/storage.objectAdmin)

Storage Object Creator (roles/storage.objectCreator)

Storage Object User (roles/storage.objectUser)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)

storage.folders.delete

Owner (roles/owner)

Editor (roles/editor)

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Composer Worker (roles/composer.worker)

Dataproc Worker (roles/dataproc.worker)

Application Design Center Admin (roles/designcenter.admin)

Application Design Center User (roles/designcenter.user)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Storage Admin (roles/storage.admin)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Storage Legacy Bucket Writer (roles/storage.legacyBucketWriter)

Storage Object Admin (roles/storage.objectAdmin)

Storage Object User (roles/storage.objectUser)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Database Migration Service Agent (roles/datamigration.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)

storage.folders.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Environment and Storage Object User (roles/composer.environmentAndStorageObjectUser)

Environment and Storage Object Viewer (roles/composer.environmentAndStorageObjectViewer)

Composer Worker (roles/composer.worker)

Dataproc Worker (roles/dataproc.worker)

Application Design Center Admin (roles/designcenter.admin)

Application Design Center User (roles/designcenter.user)

Application Design Center Viewer (roles/designcenter.viewer)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

Storage Admin (roles/storage.admin)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Storage Legacy Bucket Reader (roles/storage.legacyBucketReader)

Storage Legacy Bucket Writer (roles/storage.legacyBucketWriter)

Storage Object Admin (roles/storage.objectAdmin)

Storage Object User (roles/storage.objectUser)

Storage Object Viewer (roles/storage.objectViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Cloud Run Service Agent (roles/run.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)

storage.folders.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Environment and Storage Object User (roles/composer.environmentAndStorageObjectUser)

Environment and Storage Object Viewer (roles/composer.environmentAndStorageObjectViewer)

Composer Worker (roles/composer.worker)

Dataproc Worker (roles/dataproc.worker)

Application Design Center Admin (roles/designcenter.admin)

Application Design Center User (roles/designcenter.user)

Application Design Center Viewer (roles/designcenter.viewer)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

Storage Admin (roles/storage.admin)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Storage Legacy Bucket Reader (roles/storage.legacyBucketReader)

Storage Legacy Bucket Writer (roles/storage.legacyBucketWriter)

Storage Object Admin (roles/storage.objectAdmin)

Storage Object User (roles/storage.objectUser)

Storage Object Viewer (roles/storage.objectViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Cloud Run Service Agent (roles/run.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)

storage.folders.rename

Owner (roles/owner)

Editor (roles/editor)

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Composer Worker (roles/composer.worker)

Dataproc Worker (roles/dataproc.worker)

Application Design Center Admin (roles/designcenter.admin)

Application Design Center User (roles/designcenter.user)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Storage Admin (roles/storage.admin)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Storage Legacy Bucket Writer (roles/storage.legacyBucketWriter)

Storage Object Admin (roles/storage.objectAdmin)

Storage Object User (roles/storage.objectUser)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)

storage.hmacKeys.create

Owner (roles/owner)

Editor (roles/editor)

Storage HMAC Key Admin (roles/storage.hmacKeyAdmin)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

storage.hmacKeys.delete

Owner (roles/owner)

Editor (roles/editor)

Storage HMAC Key Admin (roles/storage.hmacKeyAdmin)

storage.hmacKeys.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Storage HMAC Key Admin (roles/storage.hmacKeyAdmin)

storage.hmacKeys.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Storage HMAC Key Admin (roles/storage.hmacKeyAdmin)

storage.hmacKeys.update

Owner (roles/owner)

Editor (roles/editor)

Storage HMAC Key Admin (roles/storage.hmacKeyAdmin)

storage.intelligenceConfigs.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Support User (roles/iam.supportUser)

Storage Admin (roles/storage.admin)

Service agent roles

• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)

storage.intelligenceConfigs.update

Owner (roles/owner)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Storage Admin (roles/storage.admin)

Service agent roles

• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)

storage.managedFolders.create

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Composer Worker (roles/composer.worker)

Dataproc Worker (roles/dataproc.worker)

Application Design Center Admin (roles/designcenter.admin)

Application Design Center User (roles/designcenter.user)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Storage Admin (roles/storage.admin)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Storage Legacy Bucket Writer (roles/storage.legacyBucketWriter)

Storage Object Admin (roles/storage.objectAdmin)

Storage Object Creator (roles/storage.objectCreator)

Storage Object User (roles/storage.objectUser)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DesignCenter Service Agent (roles/designcenter.serviceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)

storage.managedFolders.delete

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Composer Worker (roles/composer.worker)

Dataproc Worker (roles/dataproc.worker)

Application Design Center Admin (roles/designcenter.admin)

Application Design Center User (roles/designcenter.user)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Storage Admin (roles/storage.admin)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Storage Legacy Bucket Writer (roles/storage.legacyBucketWriter)

Storage Object Admin (roles/storage.objectAdmin)

Storage Object User (roles/storage.objectUser)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DesignCenter Service Agent (roles/designcenter.serviceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)

storage.managedFolders.get

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Environment and Storage Object User (roles/composer.environmentAndStorageObjectUser)

Environment and Storage Object Viewer (roles/composer.environmentAndStorageObjectViewer)

Composer Worker (roles/composer.worker)

Dataproc Worker (roles/dataproc.worker)

Application Design Center Admin (roles/designcenter.admin)

Application Design Center User (roles/designcenter.user)

Application Design Center Viewer (roles/designcenter.viewer)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

Storage Admin (roles/storage.admin)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Storage Legacy Bucket Reader (roles/storage.legacyBucketReader)

Storage Legacy Bucket Writer (roles/storage.legacyBucketWriter)

Storage Object Admin (roles/storage.objectAdmin)

Storage Object User (roles/storage.objectUser)

Storage Object Viewer (roles/storage.objectViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DesignCenter Service Agent (roles/designcenter.serviceAgent)
• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Cloud Run Service Agent (roles/run.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)

storage.managedFolders.getIamPolicy

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Storage Admin (roles/storage.admin)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Service agent roles

• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DesignCenter Service Agent (roles/designcenter.serviceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)

storage.managedFolders.list

App Management Viewer (roles/apphub.appManagementViewer)

Cloud Hub Operator (roles/cloudhub.operator)

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Environment and Storage Object User (roles/composer.environmentAndStorageObjectUser)

Environment and Storage Object Viewer (roles/composer.environmentAndStorageObjectViewer)

Composer Worker (roles/composer.worker)

Dataproc Worker (roles/dataproc.worker)

Application Design Center Admin (roles/designcenter.admin)

Application Design Center User (roles/designcenter.user)

Application Design Center Viewer (roles/designcenter.viewer)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

Storage Admin (roles/storage.admin)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Storage Legacy Bucket Reader (roles/storage.legacyBucketReader)

Storage Legacy Bucket Writer (roles/storage.legacyBucketWriter)

Storage Object Admin (roles/storage.objectAdmin)

Storage Object User (roles/storage.objectUser)

Storage Object Viewer (roles/storage.objectViewer)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DesignCenter Service Agent (roles/designcenter.serviceAgent)
• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Cloud Run Service Agent (roles/run.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)

storage.managedFolders.setIamPolicy

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Databases Admin (roles/iam.databasesAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Security Admin (roles/iam.securityAdmin)

Storage Admin (roles/storage.admin)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Service agent roles

• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)

storage.multipartUploads.abort

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Composer Worker (roles/composer.worker)

Dataproc Worker (roles/dataproc.worker)

Application Design Center Admin (roles/designcenter.admin)

Application Design Center User (roles/designcenter.user)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Storage Admin (roles/storage.admin)

Storage Express Mode User Access (roles/storage.expressModeUserAccess)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Storage Legacy Bucket Writer (roles/storage.legacyBucketWriter)

Storage Object Admin (roles/storage.objectAdmin)

Storage Object Creator (roles/storage.objectCreator)

Storage Object User (roles/storage.objectUser)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)

storage.multipartUploads.create

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Composer Worker (roles/composer.worker)

Dataproc Worker (roles/dataproc.worker)

Application Design Center Admin (roles/designcenter.admin)

Application Design Center User (roles/designcenter.user)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Storage Admin (roles/storage.admin)

Storage Express Mode User Access (roles/storage.expressModeUserAccess)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Storage Legacy Bucket Writer (roles/storage.legacyBucketWriter)

Storage Object Admin (roles/storage.objectAdmin)

Storage Object Creator (roles/storage.objectCreator)

Storage Object User (roles/storage.objectUser)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)

storage.multipartUploads.list

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Composer Worker (roles/composer.worker)

Dataproc Worker (roles/dataproc.worker)

Application Design Center Admin (roles/designcenter.admin)

Application Design Center User (roles/designcenter.user)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Storage Admin (roles/storage.admin)

Storage Express Mode User Access (roles/storage.expressModeUserAccess)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Storage Legacy Bucket Reader (roles/storage.legacyBucketReader)

Storage Legacy Bucket Writer (roles/storage.legacyBucketWriter)

Storage Object Admin (roles/storage.objectAdmin)

Storage Object User (roles/storage.objectUser)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)

storage.multipartUploads.listParts

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Composer Worker (roles/composer.worker)

Dataproc Worker (roles/dataproc.worker)

Application Design Center Admin (roles/designcenter.admin)

Application Design Center User (roles/designcenter.user)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Storage Admin (roles/storage.admin)

Storage Express Mode User Access (roles/storage.expressModeUserAccess)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Storage Legacy Bucket Writer (roles/storage.legacyBucketWriter)

Storage Object Admin (roles/storage.objectAdmin)

Storage Object Creator (roles/storage.objectCreator)

Storage Object User (roles/storage.objectUser)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)

storage.objects.create

Backup and DR Cloud Storage Operator (roles/backupdr.cloudStorageOperator)

Task Worker (roles/bigquerymigration.worker)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Deploy Runner (roles/clouddeploy.jobRunner)

Velostrata Storage Access (roles/cloudmigration.storageaccess)

Firebase Test Lab Admin (roles/cloudtestservice.testAdmin)

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Composer Worker (roles/composer.worker)

Cloud Infrastructure Manager Agent (roles/config.agent)

Dataflow Admin (roles/dataflow.admin)

Dataflow Worker (roles/dataflow.worker)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

Dataplex Storage Data Writer (roles/dataplex.storageDataWriter)

Dataproc Worker (roles/dataproc.worker)

Application Design Center Admin (roles/designcenter.admin)

Application Design Center User (roles/designcenter.user)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Firebase Rules System (roles/firebaserules.system)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Storage Admin (roles/storage.admin)

Storage Express Mode Service Input (roles/storage.expressModeServiceInput)

Storage Express Mode User Access (roles/storage.expressModeUserAccess)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Storage Legacy Bucket Writer (roles/storage.legacyBucketWriter)

Storage Object Admin (roles/storage.objectAdmin)

Storage Object Creator (roles/storage.objectCreator)

Storage Object User (roles/storage.objectUser)

Service agent roles

• Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)
• Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)
• Vertex AI Model Monitoring Service Agent (roles/aiplatform.modelMonitoringServiceAgent)
• Vertex AI Service Agent (roles/aiplatform.serviceAgent)
• Vertex AI Tuning Service Agent (roles/aiplatform.tuningServiceAgent)
• App Engine flexible environment Service Agent (roles/appengineflex.serviceAgent)
• AutoML Service Agent (roles/automl.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
• Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
• Chronicle Service Agent (roles/chronicle.serviceAgent)
• Cloud Asset Service Agent (roles/cloudasset.serviceAgent)
• Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
• Infrastructure Manager Service Agent (roles/cloudconfig.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
• Cloud Optimization Service Agent (roles/cloudoptimization.serviceAgent)
• Cloud Translation API Service Agent (roles/cloudtranslate.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Contact Center AI Insights Service Agent (roles/contactcenterinsights.serviceAgent)
• Content Warehouse Service Agent (roles/contentwarehouse.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Data Labeling Service Agent (roles/datalabeling.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• Datastream Service Agent (roles/datastream.serviceAgent)
• DesignCenter Service Agent (roles/designcenter.serviceAgent)
• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• DocumentAI Core Service Agent (roles/documentaicore.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Cloud Storage for Firebase Service Agent (roles/firebasestorage.serviceAgent)
• Firestore Service Agent (roles/firestore.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• Live Stream Service Agent (roles/livestream.serviceAgent)
• Media Asset Service Agent (roles/mediaasset.serviceAgent)
• Dataproc Metastore Service Agent (roles/metastore.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Route Optimization Service Agent (roles/routeoptimization.serviceAgent)
• Cloud Run Service Agent (roles/run.serviceAgent)
• Serverless Integrations Service Agent (roles/runapps.serviceAgent)
• SaaS Service Management Service Agent (roles/saasservicemgmt.serviceAgent)
• Cloud Spanner API Service Agent (roles/spanner.serviceAgent)
• Cloud Speech-to-Text Service Agent (roles/speech.serviceAgent)
• Stream Service Agent (roles/stream.serviceAgent)
• Transcoder Service Agent (roles/transcoder.serviceAgent)
• Vector Search Service Agent (roles/vectorsearch.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• AI Edge Portal Service Agent (roles/aiedgeportal.serviceAgent)

storage.objects.createContext

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Composer Worker (roles/composer.worker)

Dataproc Worker (roles/dataproc.worker)

Application Design Center Admin (roles/designcenter.admin)

Application Design Center User (roles/designcenter.user)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Storage Admin (roles/storage.admin)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Storage Legacy Bucket Writer (roles/storage.legacyBucketWriter)

Storage Legacy Object Owner (roles/storage.legacyObjectOwner)

Storage Object Admin (roles/storage.objectAdmin)

Storage Object Creator (roles/storage.objectCreator)

Storage Object User (roles/storage.objectUser)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)

storage.objects.delete

Backup and DR Cloud Storage Operator (roles/backupdr.cloudStorageOperator)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Velostrata Storage Access (roles/cloudmigration.storageaccess)

Firebase Test Lab Admin (roles/cloudtestservice.testAdmin)

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Composer Worker (roles/composer.worker)

Cloud Infrastructure Manager Agent (roles/config.agent)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

Dataplex Storage Data Writer (roles/dataplex.storageDataWriter)

Dataproc Worker (roles/dataproc.worker)

Application Design Center Admin (roles/designcenter.admin)

Application Design Center User (roles/designcenter.user)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Firebase Rules System (roles/firebaserules.system)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Storage Admin (roles/storage.admin)

Storage Express Mode Service Input (roles/storage.expressModeServiceInput)

Storage Express Mode Service Output (roles/storage.expressModeServiceOutput)

Storage Express Mode User Access (roles/storage.expressModeUserAccess)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Storage Legacy Bucket Writer (roles/storage.legacyBucketWriter)

Storage Object Admin (roles/storage.objectAdmin)

Storage Object User (roles/storage.objectUser)

Service agent roles

• Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)
• Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)
• Vertex AI Model Monitoring Service Agent (roles/aiplatform.modelMonitoringServiceAgent)
• Vertex AI Service Agent (roles/aiplatform.serviceAgent)
• Vertex AI Tuning Service Agent (roles/aiplatform.tuningServiceAgent)
• App Engine flexible environment Service Agent (roles/appengineflex.serviceAgent)
• AutoML Service Agent (roles/automl.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
• Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
• Chronicle Service Agent (roles/chronicle.serviceAgent)
• Cloud Asset Service Agent (roles/cloudasset.serviceAgent)
• Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
• Infrastructure Manager Service Agent (roles/cloudconfig.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
• Cloud Optimization Service Agent (roles/cloudoptimization.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Content Warehouse Service Agent (roles/contentwarehouse.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Data Labeling Service Agent (roles/datalabeling.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DesignCenter Service Agent (roles/designcenter.serviceAgent)
• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• DocumentAI Core Service Agent (roles/documentaicore.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Cloud Storage for Firebase Service Agent (roles/firebasestorage.serviceAgent)
• Firestore Service Agent (roles/firestore.serviceAgent)
• Live Stream Service Agent (roles/livestream.serviceAgent)
• Media Asset Service Agent (roles/mediaasset.serviceAgent)
• Dataproc Metastore Service Agent (roles/metastore.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Cloud Run Service Agent (roles/run.serviceAgent)
• Serverless Integrations Service Agent (roles/runapps.serviceAgent)
• SaaS Service Management Service Agent (roles/saasservicemgmt.serviceAgent)
• Cloud Spanner API Service Agent (roles/spanner.serviceAgent)
• Transcoder Service Agent (roles/transcoder.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• AI Edge Portal Service Agent (roles/aiedgeportal.serviceAgent)

storage.objects.deleteContext

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Composer Worker (roles/composer.worker)

Dataproc Worker (roles/dataproc.worker)

Application Design Center Admin (roles/designcenter.admin)

Application Design Center User (roles/designcenter.user)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Storage Admin (roles/storage.admin)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Storage Legacy Object Owner (roles/storage.legacyObjectOwner)

Storage Object Admin (roles/storage.objectAdmin)

Storage Object User (roles/storage.objectUser)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)

storage.objects.get

App Management Viewer (roles/apphub.appManagementViewer)

Container Registry -> Artifact Registry Migration Admin (roles/artifactregistry.containerRegistryMigrationAdmin)

Backup and DR Cloud Storage Operator (roles/backupdr.cloudStorageOperator)

Task Worker (roles/bigquerymigration.worker)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Deploy Runner (roles/clouddeploy.jobRunner)

Cloud Hub Operator (roles/cloudhub.operator)

Velostrata Storage Access (roles/cloudmigration.storageaccess)

Firebase Test Lab Admin (roles/cloudtestservice.testAdmin)

Firebase Test Lab Viewer (roles/cloudtestservice.testViewer)

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Environment and Storage Object User (roles/composer.environmentAndStorageObjectUser)

Environment and Storage Object Viewer (roles/composer.environmentAndStorageObjectViewer)

Composer Worker (roles/composer.worker)

Cloud Infrastructure Manager Agent (roles/config.agent)

Dataflow Admin (roles/dataflow.admin)

Dataflow Worker (roles/dataflow.worker)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

Dataplex Storage Data Reader (roles/dataplex.storageDataReader)

Dataproc Hub Agent (roles/dataproc.hubAgent)

Dataproc Worker (roles/dataproc.worker)

Application Design Center Admin (roles/designcenter.admin)

Application Design Center User (roles/designcenter.user)

Application Design Center Viewer (roles/designcenter.viewer)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Firebase Rules System (roles/firebaserules.system)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Support User (roles/iam.supportUser)

Cloud Run Builder (roles/run.builder)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

Storage Admin (roles/storage.admin)

Storage Express Mode Service Output (roles/storage.expressModeServiceOutput)

Storage Express Mode User Access (roles/storage.expressModeUserAccess)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Object Owner (roles/storage.legacyObjectOwner)

Storage Legacy Object Reader (roles/storage.legacyObjectReader)

Storage Object Admin (roles/storage.objectAdmin)

Storage Object User (roles/storage.objectUser)

Storage Object Viewer (roles/storage.objectViewer)

Service agent roles

• Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)
• Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)
• Vertex AI Extension Service Agent (roles/aiplatform.extensionServiceAgent)
• Vertex AI Model Monitoring Service Agent (roles/aiplatform.modelMonitoringServiceAgent)
• Vertex AI RAG Data Service Agent (roles/aiplatform.ragServiceAgent)
• Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent)
• Vertex AI Service Agent (roles/aiplatform.serviceAgent)
• Vertex AI Tuning Service Agent (roles/aiplatform.tuningServiceAgent)
• App Engine flexible environment Service Agent (roles/appengineflex.serviceAgent)
• AutoML Service Agent (roles/automl.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
• Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
• Chronicle Service Agent (roles/chronicle.serviceAgent)
• Cloud Asset Service Agent (roles/cloudasset.serviceAgent)
• Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
• Infrastructure Manager Service Agent (roles/cloudconfig.serviceAgent)
• Cloud Deploy Service Agent (roles/clouddeploy.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
• Cloud Optimization Service Agent (roles/cloudoptimization.serviceAgent)
• Cloud Translation API Service Agent (roles/cloudtranslate.serviceAgent)
• Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Contact Center AI Insights Service Agent (roles/contactcenterinsights.serviceAgent)
• [Deprecated] Kubernetes Engine Node Service Agent (roles/container.nodeServiceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Container Registry Service Agent (roles/containerregistry.ServiceAgent)
• Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
• Content Warehouse Service Agent (roles/contentwarehouse.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Data Labeling Service Agent (roles/datalabeling.serviceAgent)
• Database Migration Service Agent (roles/datamigration.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Dataplex Discovery Service Agent (roles/dataplex.discoveryServiceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• Datastream Service Agent (roles/datastream.serviceAgent)
• DesignCenter Service Agent (roles/designcenter.serviceAgent)
• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• DocumentAI Core Service Agent (roles/documentaicore.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Enterprise Knowledge Graph Service Agent (roles/enterpriseknowledgegraph.serviceAgent)
• Cloud Storage for Firebase Service Agent (roles/firebasestorage.serviceAgent)
• Firestore Service Agent (roles/firestore.serviceAgent)
• Generative Language Service Agent (roles/generativelanguage.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• Live Stream Service Agent (roles/livestream.serviceAgent)
• Managed Flink Service Agent (roles/managedflink.serviceAgent)
• Media Asset Service Agent (roles/mediaasset.serviceAgent)
• Dataproc Metastore Service Agent (roles/metastore.serviceAgent)
• Migration Center Service Agent (roles/migrationcenter.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Route Optimization Service Agent (roles/routeoptimization.serviceAgent)
• Cloud Run Service Agent (roles/run.serviceAgent)
• Serverless Integrations Service Agent (roles/runapps.serviceAgent)
• SaaS Service Management Service Agent (roles/saasservicemgmt.serviceAgent)
• Cloud Spanner API Service Agent (roles/spanner.serviceAgent)
• Cloud Speech-to-Text Service Agent (roles/speech.serviceAgent)
• Stream Service Agent (roles/stream.serviceAgent)
• Transcoder Service Agent (roles/transcoder.serviceAgent)
• Vector Search Service Agent (roles/vectorsearch.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• AI Edge Portal Service Agent (roles/aiedgeportal.serviceAgent)

storage.objects.getIamPolicy

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Composer Worker (roles/composer.worker)

Dataproc Worker (roles/dataproc.worker)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Storage Admin (roles/storage.admin)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Object Owner (roles/storage.legacyObjectOwner)

Storage Object Admin (roles/storage.objectAdmin)

Service agent roles

• Vertex AI Tuning Service Agent (roles/aiplatform.tuningServiceAgent)
• App Engine flexible environment Service Agent (roles/appengineflex.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Container Registry Service Agent (roles/containerregistry.ServiceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• Cloud Storage for Firebase Service Agent (roles/firebasestorage.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)

storage.objects.list

App Management Viewer (roles/apphub.appManagementViewer)

Container Registry -> Artifact Registry Migration Admin (roles/artifactregistry.containerRegistryMigrationAdmin)

Backup and DR Cloud Storage Operator (roles/backupdr.cloudStorageOperator)

Task Orchestrator (roles/bigquerymigration.orchestrator)

Task Worker (roles/bigquerymigration.worker)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Deploy Runner (roles/clouddeploy.jobRunner)

Cloud Hub Operator (roles/cloudhub.operator)

Velostrata Storage Access (roles/cloudmigration.storageaccess)

Firebase Test Lab Admin (roles/cloudtestservice.testAdmin)

Firebase Test Lab Viewer (roles/cloudtestservice.testViewer)

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Environment and Storage Object User (roles/composer.environmentAndStorageObjectUser)

Environment and Storage Object Viewer (roles/composer.environmentAndStorageObjectViewer)

Composer Worker (roles/composer.worker)

Cloud Infrastructure Manager Agent (roles/config.agent)

Dataflow Admin (roles/dataflow.admin)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

Dataplex Storage Data Reader (roles/dataplex.storageDataReader)

Dataproc Hub Agent (roles/dataproc.hubAgent)

Dataproc Worker (roles/dataproc.worker)

Application Design Center Admin (roles/designcenter.admin)

Application Design Center User (roles/designcenter.user)

Application Design Center Viewer (roles/designcenter.viewer)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Firebase Rules System (roles/firebaserules.system)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

Storage Admin (roles/storage.admin)

Storage Express Mode Service Input (roles/storage.expressModeServiceInput)

Storage Express Mode Service Output (roles/storage.expressModeServiceOutput)

Storage Express Mode User Access (roles/storage.expressModeUserAccess)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Storage Legacy Bucket Reader (roles/storage.legacyBucketReader)

Storage Legacy Bucket Writer (roles/storage.legacyBucketWriter)

Storage Object Admin (roles/storage.objectAdmin)

Storage Object User (roles/storage.objectUser)

Storage Object Viewer (roles/storage.objectViewer)

Workload Manager Admin (roles/workloadmanager.admin)

Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin)

Service agent roles

• Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)
• Vertex AI Model Monitoring Service Agent (roles/aiplatform.modelMonitoringServiceAgent)
• Vertex AI RAG Data Service Agent (roles/aiplatform.ragServiceAgent)
• Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent)
• Vertex AI Service Agent (roles/aiplatform.serviceAgent)
• Vertex AI Tuning Service Agent (roles/aiplatform.tuningServiceAgent)
• App Engine flexible environment Service Agent (roles/appengineflex.serviceAgent)
• AutoML Service Agent (roles/automl.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
• Binary Authorization Service Agent (roles/binaryauthorization.serviceAgent)
• Chronicle Service Agent (roles/chronicle.serviceAgent)
• Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
• Infrastructure Manager Service Agent (roles/cloudconfig.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
• Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
• Cloud Optimization Service Agent (roles/cloudoptimization.serviceAgent)
• Cloud Translation API Service Agent (roles/cloudtranslate.serviceAgent)
• Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Contact Center AI Insights Service Agent (roles/contactcenterinsights.serviceAgent)
• [Deprecated] Kubernetes Engine Node Service Agent (roles/container.nodeServiceAgent)
• Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
• Container Registry Service Agent (roles/containerregistry.ServiceAgent)
• Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
• Content Warehouse Service Agent (roles/contentwarehouse.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Data Labeling Service Agent (roles/datalabeling.serviceAgent)
• Database Migration Service Agent (roles/datamigration.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Dataplex Discovery Service Agent (roles/dataplex.discoveryServiceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• Datastream Service Agent (roles/datastream.serviceAgent)
• DesignCenter Service Agent (roles/designcenter.serviceAgent)
• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• DocumentAI Core Service Agent (roles/documentaicore.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Enterprise Knowledge Graph Service Agent (roles/enterpriseknowledgegraph.serviceAgent)
• Cloud Storage for Firebase Service Agent (roles/firebasestorage.serviceAgent)
• Firestore Service Agent (roles/firestore.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• Live Stream Service Agent (roles/livestream.serviceAgent)
• Dataproc Metastore Service Agent (roles/metastore.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Route Optimization Service Agent (roles/routeoptimization.serviceAgent)
• Cloud Run Service Agent (roles/run.serviceAgent)
• Serverless Integrations Service Agent (roles/runapps.serviceAgent)
• SaaS Service Management Service Agent (roles/saasservicemgmt.serviceAgent)
• Cloud Spanner API Service Agent (roles/spanner.serviceAgent)
• Cloud Speech-to-Text Service Agent (roles/speech.serviceAgent)
• Stream Service Agent (roles/stream.serviceAgent)
• Vector Search Service Agent (roles/vectorsearch.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)

storage.objects.move

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Composer Worker (roles/composer.worker)

Application Design Center Admin (roles/designcenter.admin)

Application Design Center User (roles/designcenter.user)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Storage Admin (roles/storage.admin)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Object Admin (roles/storage.objectAdmin)

Storage Object User (roles/storage.objectUser)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)

storage.objects.overrideUnlockedRetention

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Composer Worker (roles/composer.worker)

Dataproc Worker (roles/dataproc.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Storage Admin (roles/storage.admin)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Object Owner (roles/storage.legacyObjectOwner)

Storage Object Admin (roles/storage.objectAdmin)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)

storage.objects.restore

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Composer Worker (roles/composer.worker)

Dataproc Worker (roles/dataproc.worker)

Application Design Center Admin (roles/designcenter.admin)

Application Design Center User (roles/designcenter.user)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Storage Admin (roles/storage.admin)

Storage Express Mode User Access (roles/storage.expressModeUserAccess)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Storage Legacy Bucket Writer (roles/storage.legacyBucketWriter)

Storage Object Admin (roles/storage.objectAdmin)

Storage Object User (roles/storage.objectUser)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)

storage.objects.setIamPolicy

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Composer Worker (roles/composer.worker)

Dataproc Worker (roles/dataproc.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Admin (roles/iam.securityAdmin)

Storage Admin (roles/storage.admin)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Object Owner (roles/storage.legacyObjectOwner)

Storage Object Admin (roles/storage.objectAdmin)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)

storage.objects.setRetention

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Composer Worker (roles/composer.worker)

Dataproc Worker (roles/dataproc.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Storage Admin (roles/storage.admin)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Storage Legacy Bucket Writer (roles/storage.legacyBucketWriter)

Storage Legacy Object Owner (roles/storage.legacyObjectOwner)

Storage Object Admin (roles/storage.objectAdmin)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)

storage.objects.update

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Velostrata Storage Access (roles/cloudmigration.storageaccess)

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Composer Worker (roles/composer.worker)

Cloud Infrastructure Manager Agent (roles/config.agent)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

Dataplex Storage Data Writer (roles/dataplex.storageDataWriter)

Dataproc Worker (roles/dataproc.worker)

Application Design Center Admin (roles/designcenter.admin)

Application Design Center User (roles/designcenter.user)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Firebase Rules System (roles/firebaserules.system)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Storage Admin (roles/storage.admin)

Storage Express Mode Service Input (roles/storage.expressModeServiceInput)

Storage Express Mode User Access (roles/storage.expressModeUserAccess)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Object Owner (roles/storage.legacyObjectOwner)

Storage Object Admin (roles/storage.objectAdmin)

Storage Object User (roles/storage.objectUser)

Service agent roles

• Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)
• Vertex AI Model Monitoring Service Agent (roles/aiplatform.modelMonitoringServiceAgent)
• Vertex AI Service Agent (roles/aiplatform.serviceAgent)
• Vertex AI Tuning Service Agent (roles/aiplatform.tuningServiceAgent)
• AutoML Service Agent (roles/automl.serviceAgent)
• Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
• Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
• Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
• Infrastructure Manager Service Agent (roles/cloudconfig.serviceAgent)
• Cloud Optimization Service Agent (roles/cloudoptimization.serviceAgent)
• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Compute Engine Service Agent (roles/compute.serviceAgent)
• Contact Center AI Insights Service Agent (roles/contactcenterinsights.serviceAgent)
• Content Warehouse Service Agent (roles/contentwarehouse.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Data Labeling Service Agent (roles/datalabeling.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DesignCenter Service Agent (roles/designcenter.serviceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• DocumentAI Core Service Agent (roles/documentaicore.serviceAgent)
• Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
• Cloud Storage for Firebase Service Agent (roles/firebasestorage.serviceAgent)
• Application Integration Service Agent (roles/integrations.serviceAgent)
• Live Stream Service Agent (roles/livestream.serviceAgent)
• Dataproc Metastore Service Agent (roles/metastore.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Retail Service Agent (roles/retail.serviceAgent)
• Route Optimization Service Agent (roles/routeoptimization.serviceAgent)
• Cloud Run Service Agent (roles/run.serviceAgent)
• Cloud Speech-to-Text Service Agent (roles/speech.serviceAgent)
• Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)

storage.objects.updateContext

Environment and Storage Object Administrator (roles/composer.environmentAndStorageObjectAdmin)

Composer Worker (roles/composer.worker)

Dataproc Worker (roles/dataproc.worker)

Application Design Center Admin (roles/designcenter.admin)

Application Design Center User (roles/designcenter.user)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Dev Ops (roles/iam.devOps)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

ML Engineer (roles/iam.mlEngineer)

Storage Admin (roles/storage.admin)

Storage Folder Admin (roles/storage.folderAdmin)

Storage Legacy Bucket Owner (roles/storage.legacyBucketOwner)

Storage Legacy Object Owner (roles/storage.legacyObjectOwner)

Storage Object Admin (roles/storage.objectAdmin)

Storage Object User (roles/storage.objectUser)

Service agent roles

• Cloud Composer API Service Agent (roles/composer.serviceAgent)
• Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Datapipelines Service Agent (roles/datapipelines.serviceAgent)
• Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
• Dataprep Service Agent (roles/dataprep.serviceAgent)
• Dataproc Service Agent (roles/dataproc.serviceAgent)
• DLP API Service Agent (roles/dlp.serviceAgent)
• AI Platform Service Agent (roles/ml.serviceAgent)
• Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
• Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent)