Artifact Registry roles and permissions

`artifactregistry.aptartifacts.create`

Owner (roles/owner)

Editor (roles/editor)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Composer Worker (roles/composer.worker)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Dev Ops (roles/iam.devOps)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)

`artifactregistry.attachments.create`

Owner (roles/owner)

Editor (roles/editor)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Attachment Writer (roles/artifactregistry.attachmentWriter)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Composer Worker (roles/composer.worker)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Dev Ops (roles/iam.devOps)

Service agent roles

Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Cloud Build Service Agent (roles/cloudbuild.serviceAgent)

`artifactregistry.attachments.delete`

Owner (roles/owner)

Editor (roles/editor)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Attachment Writer (roles/artifactregistry.attachmentWriter)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Composer Worker (roles/composer.worker)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Dev Ops (roles/iam.devOps)

Service agent roles

Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Cloud Build Service Agent (roles/cloudbuild.serviceAgent)

`artifactregistry.attachments.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Attachment Reader (roles/artifactregistry.attachmentReader)

Artifact Registry Attachment Writer (roles/artifactregistry.attachmentWriter)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Cloud Build Service Agent (roles/cloudbuild.serviceAgent)

`artifactregistry.attachments.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Attachment Reader (roles/artifactregistry.attachmentReader)

Artifact Registry Attachment Writer (roles/artifactregistry.attachmentWriter)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Cloud Build Service Agent (roles/cloudbuild.serviceAgent)

`artifactregistry.dockerimages.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Binary Authorization Service Agent (roles/binaryauthorization.serviceAgent)
Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Config Delivery Service Agent (roles/configdelivery.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)
Anthos Multi-Cloud Control Plane Machine Service Agent (roles/gkemulticloud.controlPlaneMachineServiceAgent)
Anthos Multi-Cloud Node Pool Machine Service Agent (roles/gkemulticloud.nodePoolMachineServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)

`artifactregistry.dockerimages.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Config Delivery Service Agent (roles/configdelivery.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)

`artifactregistry.files.delete`

Owner (roles/owner)

Editor (roles/editor)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Composer Worker (roles/composer.worker)

Service agent roles

Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)

`artifactregistry.files.download`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Attachment Reader (roles/artifactregistry.attachmentReader)

Artifact Registry Attachment Writer (roles/artifactregistry.attachmentWriter)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Network Actions Service Agent (roles/networkactions.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)

`artifactregistry.files.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)

`artifactregistry.files.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)

`artifactregistry.files.update`

Owner (roles/owner)

Editor (roles/editor)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Composer Worker (roles/composer.worker)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Dev Ops (roles/iam.devOps)

Service agent roles

Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Cloud Build Service Agent (roles/cloudbuild.serviceAgent)

`artifactregistry.files.upload`

Owner (roles/owner)

Editor (roles/editor)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Attachment Writer (roles/artifactregistry.attachmentWriter)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Composer Worker (roles/composer.worker)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Dev Ops (roles/iam.devOps)

Service agent roles

Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Cloud Build Service Agent (roles/cloudbuild.serviceAgent)

`artifactregistry.kfpartifacts.create`

Owner (roles/owner)

Editor (roles/editor)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Composer Worker (roles/composer.worker)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Dev Ops (roles/iam.devOps)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)

`artifactregistry.locations.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)

`artifactregistry.locations.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service Extensions Admin (roles/networkservices.serviceExtensionsAdmin)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)

`artifactregistry.mavenartifacts.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)

`artifactregistry.mavenartifacts.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)

`artifactregistry.npmpackages.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)

`artifactregistry.npmpackages.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)

`artifactregistry.packages.delete`

Owner (roles/owner)

Editor (roles/editor)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Composer Worker (roles/composer.worker)

Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent)

Service agent roles

Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)

`artifactregistry.packages.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)

`artifactregistry.packages.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service Extensions Admin (roles/networkservices.serviceExtensionsAdmin)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)

`artifactregistry.packages.update`

Owner (roles/owner)

Editor (roles/editor)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Composer Worker (roles/composer.worker)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Dev Ops (roles/iam.devOps)

Service agent roles

Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Cloud Build Service Agent (roles/cloudbuild.serviceAgent)

`artifactregistry.projectsettings.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Engine Admin (roles/appengine.appAdmin)

App Engine Viewer (roles/appengine.appViewer)

App Engine Code Viewer (roles/appengine.codeViewer)

App Engine Deployer (roles/appengine.deployer)

App Engine Service Admin (roles/appengine.serviceAdmin)

Artifact Registry Administrator (roles/artifactregistry.admin)

Container Registry -> Artifact Registry Migration Admin (roles/artifactregistry.containerRegistryMigrationAdmin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

App Engine flexible environment Service Agent (roles/appengineflex.serviceAgent)
Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Config Delivery Service Agent (roles/configdelivery.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)

`artifactregistry.projectsettings.update`

Owner (roles/owner)

Editor (roles/editor)

Artifact Registry Administrator (roles/artifactregistry.admin)

Container Registry -> Artifact Registry Migration Admin (roles/artifactregistry.containerRegistryMigrationAdmin)

Composer Worker (roles/composer.worker)

Service agent roles

Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)

`artifactregistry.pythonpackages.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)

`artifactregistry.pythonpackages.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)

`artifactregistry.repositories.create`

Owner (roles/owner)

Editor (roles/editor)

Artifact Registry Administrator (roles/artifactregistry.admin)

Container Registry -> Artifact Registry Migration Admin (roles/artifactregistry.containerRegistryMigrationAdmin)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Composer Worker (roles/composer.worker)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Service agent roles

App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)
App Engine flexible environment Service Agent (roles/appengineflex.serviceAgent)
Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Config Delivery Service Agent (roles/configdelivery.serviceAgent)
Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Vertex AI Service Agent (roles/aiplatform.serviceAgent)

`artifactregistry.repositories.createOnPush`

Owner (roles/owner)

Editor (roles/editor)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Composer Worker (roles/composer.worker)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)

`artifactregistry.repositories.createTagBinding`

Owner (roles/owner)

Artifact Registry Administrator (roles/artifactregistry.admin)

Composer Worker (roles/composer.worker)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Tag User (roles/resourcemanager.tagUser)

Service agent roles

Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)

`artifactregistry.repositories.delete`

Owner (roles/owner)

Editor (roles/editor)

Artifact Registry Administrator (roles/artifactregistry.admin)

Composer Worker (roles/composer.worker)

Service agent roles

Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

`artifactregistry.repositories.deleteArtifacts`

Owner (roles/owner)

Editor (roles/editor)

App Engine Admin (roles/appengine.appAdmin)

App Engine Deployer (roles/appengine.deployer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Composer Worker (roles/composer.worker)

Cloud Run Builder (roles/run.builder)

Service agent roles

Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Cloud Build Service Agent (roles/cloudbuild.serviceAgent)

`artifactregistry.repositories.deleteTagBinding`

Owner (roles/owner)

Artifact Registry Administrator (roles/artifactregistry.admin)

Composer Worker (roles/composer.worker)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Tag User (roles/resourcemanager.tagUser)

Service agent roles

Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)

`artifactregistry.repositories.downloadArtifacts`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

App Engine Admin (roles/appengine.appAdmin)

App Engine Deployer (roles/appengine.deployer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Container Registry -> Artifact Registry Migration Admin (roles/artifactregistry.containerRegistryMigrationAdmin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Cloud Run Builder (roles/run.builder)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Vertex AI Service Agent (roles/aiplatform.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)
App Engine flexible environment Service Agent (roles/appengineflex.serviceAgent)
Artifact Registry Service Agent (roles/artifactregistry.serviceAgent)
Binary Authorization Service Agent (roles/binaryauthorization.serviceAgent)
Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Config Delivery Service Agent (roles/configdelivery.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)
Anthos Multi-Cloud Control Plane Machine Service Agent (roles/gkemulticloud.controlPlaneMachineServiceAgent)
Anthos Multi-Cloud Node Pool Machine Service Agent (roles/gkemulticloud.nodePoolMachineServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Network Actions Service Agent (roles/networkactions.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
SaaS Service Management Service Agent (roles/saasservicemgmt.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)

`artifactregistry.repositories.exportArtifacts`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Cloud Build Service Agent (roles/cloudbuild.serviceAgent)

`artifactregistry.repositories.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Container Registry -> Artifact Registry Migration Admin (roles/artifactregistry.containerRegistryMigrationAdmin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Vertex AI Service Agent (roles/aiplatform.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)
App Engine flexible environment Service Agent (roles/appengineflex.serviceAgent)
Artifact Registry Service Agent (roles/artifactregistry.serviceAgent)
Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent)
Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Config Delivery Service Agent (roles/configdelivery.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)
Anthos Multi-Cloud Control Plane Machine Service Agent (roles/gkemulticloud.controlPlaneMachineServiceAgent)
Anthos Multi-Cloud Node Pool Machine Service Agent (roles/gkemulticloud.nodePoolMachineServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)

`artifactregistry.repositories.getIamPolicy`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Container Registry -> Artifact Registry Migration Admin (roles/artifactregistry.containerRegistryMigrationAdmin)

Composer Worker (roles/composer.worker)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Config Delivery Service Agent (roles/configdelivery.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)

`artifactregistry.repositories.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Container Registry -> Artifact Registry Migration Admin (roles/artifactregistry.containerRegistryMigrationAdmin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service Extensions Admin (roles/networkservices.serviceExtensionsAdmin)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Cloud Run Source Viewer (roles/run.sourceViewer)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Vertex AI Service Agent (roles/aiplatform.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)
Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent)
Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Config Delivery Service Agent (roles/configdelivery.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)

`artifactregistry.repositories.listEffectiveTags`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Config Delivery Service Agent (roles/configdelivery.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)

`artifactregistry.repositories.listTagBindings`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Config Delivery Service Agent (roles/configdelivery.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)

`artifactregistry.repositories.readViaVirtualRepository`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Artifact Registry Service Agent (roles/artifactregistry.serviceAgent)
Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)

`artifactregistry.repositories.setIamPolicy`

Owner (roles/owner)

Artifact Registry Administrator (roles/artifactregistry.admin)

Container Registry -> Artifact Registry Migration Admin (roles/artifactregistry.containerRegistryMigrationAdmin)

Composer Worker (roles/composer.worker)

Security Admin (roles/iam.securityAdmin)

Service agent roles

Config Delivery Service Agent (roles/configdelivery.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)

`artifactregistry.repositories.update`

Owner (roles/owner)

Editor (roles/editor)

Artifact Registry Administrator (roles/artifactregistry.admin)

Composer Worker (roles/composer.worker)

Service agent roles

Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

`artifactregistry.repositories.uploadArtifacts`

Owner (roles/owner)

Editor (roles/editor)

App Engine Admin (roles/appengine.appAdmin)

App Engine Deployer (roles/appengine.deployer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Container Registry -> Artifact Registry Migration Admin (roles/artifactregistry.containerRegistryMigrationAdmin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Composer Worker (roles/composer.worker)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Dev Ops (roles/iam.devOps)

Cloud Run Builder (roles/run.builder)

Service agent roles

App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)
App Engine flexible environment Service Agent (roles/appengineflex.serviceAgent)
Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Config Delivery Service Agent (roles/configdelivery.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Vertex AI Service Agent (roles/aiplatform.serviceAgent)

`artifactregistry.rules.create`

Owner (roles/owner)

Editor (roles/editor)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Composer Worker (roles/composer.worker)

Service agent roles

Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)

`artifactregistry.rules.delete`

Owner (roles/owner)

Editor (roles/editor)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Composer Worker (roles/composer.worker)

Service agent roles

Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)

`artifactregistry.rules.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Cloud Build Service Agent (roles/cloudbuild.serviceAgent)

`artifactregistry.rules.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Cloud Build Service Agent (roles/cloudbuild.serviceAgent)

`artifactregistry.rules.update`

Owner (roles/owner)

Editor (roles/editor)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Composer Worker (roles/composer.worker)

Service agent roles

Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)

`artifactregistry.tags.create`

Owner (roles/owner)

Editor (roles/editor)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Composer Worker (roles/composer.worker)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Dev Ops (roles/iam.devOps)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Config Delivery Service Agent (roles/configdelivery.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)

`artifactregistry.tags.delete`

Owner (roles/owner)

Editor (roles/editor)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Composer Worker (roles/composer.worker)

Service agent roles

Config Delivery Service Agent (roles/configdelivery.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)

`artifactregistry.tags.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Vertex AI Service Agent (roles/aiplatform.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)
Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Config Delivery Service Agent (roles/configdelivery.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)

`artifactregistry.tags.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Config Delivery Service Agent (roles/configdelivery.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)

`artifactregistry.tags.update`

Owner (roles/owner)

Editor (roles/editor)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Composer Worker (roles/composer.worker)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Dev Ops (roles/iam.devOps)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Config Delivery Service Agent (roles/configdelivery.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)

`artifactregistry.versions.delete`

Owner (roles/owner)

Editor (roles/editor)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Composer Worker (roles/composer.worker)

Service agent roles

Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Config Delivery Service Agent (roles/configdelivery.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Artifact Registry Service Agent (roles/artifactregistry.serviceAgent)

`artifactregistry.versions.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Vertex AI Service Agent (roles/aiplatform.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)
Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Config Delivery Service Agent (roles/configdelivery.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)

`artifactregistry.versions.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Reader (roles/artifactregistry.reader)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Cloud Functions Admin (roles/cloudfunctions.admin)

Cloud Functions Developer (roles/cloudfunctions.developer)

Composer Worker (roles/composer.worker)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Data Scientist (roles/iam.dataScientist)

Dev Ops (roles/iam.devOps)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service Extensions Admin (roles/networkservices.serviceExtensionsAdmin)

Cloud Run Source Developer (roles/run.sourceDeveloper)

Security Center Admin (roles/securitycenter.admin)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Compliance Scanning Service Agent (roles/compliancescanning.serviceAgent)
Config Delivery Service Agent (roles/configdelivery.serviceAgent)
Container Analysis Service Agent (roles/containeranalysis.ServiceAgent)
Container Scanner Service Agent (roles/containerscanning.ServiceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)

`artifactregistry.versions.update`

Owner (roles/owner)

Editor (roles/editor)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Composer Worker (roles/composer.worker)

Service agent roles

Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)

`artifactregistry.yumartifacts.create`

Owner (roles/owner)

Editor (roles/editor)

Artifact Registry Administrator (roles/artifactregistry.admin)

Artifact Registry Create-on-Push Repository Administrator (roles/artifactregistry.createOnPushRepoAdmin)

Artifact Registry Create-on-Push Writer (roles/artifactregistry.createOnPushWriter)

Artifact Registry Repository Administrator (roles/artifactregistry.repoAdmin)

Artifact Registry Writer (roles/artifactregistry.writer)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Composer Worker (roles/composer.worker)

Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner)

Dev Ops (roles/iam.devOps)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
App Engine Standard Environment Service Agent (roles/appengine.serviceAgent)