Binary Authorization roles and permissions

`binaryauthorization.attestors.create`

Owner (roles/owner)

Editor (roles/editor)

Binary Authorization Attestor Admin (roles/binaryauthorization.attestorsAdmin)

Binary Authorization Attestor Editor (roles/binaryauthorization.attestorsEditor)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)

`binaryauthorization.attestors.delete`

Owner (roles/owner)

Editor (roles/editor)

Binary Authorization Attestor Admin (roles/binaryauthorization.attestorsAdmin)

Binary Authorization Attestor Editor (roles/binaryauthorization.attestorsEditor)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)

`binaryauthorization.attestors.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Binary Authorization Attestor Admin (roles/binaryauthorization.attestorsAdmin)

Binary Authorization Attestor Editor (roles/binaryauthorization.attestorsEditor)

Binary Authorization Attestor Image Verifier (roles/binaryauthorization.attestorsVerifier)

Binary Authorization Attestor Viewer (roles/binaryauthorization.attestorsViewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Binary Authorization Service Agent (roles/binaryauthorization.serviceAgent)

`binaryauthorization.attestors.getIamPolicy`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Binary Authorization Attestor Admin (roles/binaryauthorization.attestorsAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

`binaryauthorization.attestors.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Binary Authorization Attestor Admin (roles/binaryauthorization.attestorsAdmin)

Binary Authorization Attestor Editor (roles/binaryauthorization.attestorsEditor)

Binary Authorization Attestor Image Verifier (roles/binaryauthorization.attestorsVerifier)

Binary Authorization Attestor Viewer (roles/binaryauthorization.attestorsViewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Binary Authorization Service Agent (roles/binaryauthorization.serviceAgent)

`binaryauthorization.attestors.setIamPolicy`

Owner (roles/owner)

Binary Authorization Attestor Admin (roles/binaryauthorization.attestorsAdmin)

Security Admin (roles/iam.securityAdmin)

`binaryauthorization.attestors.update`

Owner (roles/owner)

Editor (roles/editor)

Binary Authorization Attestor Admin (roles/binaryauthorization.attestorsAdmin)

Binary Authorization Attestor Editor (roles/binaryauthorization.attestorsEditor)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)

`binaryauthorization.attestors.verifyImageAttested`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Binary Authorization Attestor Admin (roles/binaryauthorization.attestorsAdmin)

Binary Authorization Attestor Editor (roles/binaryauthorization.attestorsEditor)

Binary Authorization Attestor Image Verifier (roles/binaryauthorization.attestorsVerifier)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
Binary Authorization Service Agent (roles/binaryauthorization.serviceAgent)

`binaryauthorization.continuousValidationConfig.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Binary Authorization Policy Administrator (roles/binaryauthorization.policyAdmin)

Binary Authorization Policy Editor (roles/binaryauthorization.policyEditor)

Binary Authorization Policy Viewer (roles/binaryauthorization.policyViewer)

Dev Ops (roles/iam.devOps)

Support User (roles/iam.supportUser)

`binaryauthorization.continuousValidationConfig.getIamPolicy`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Binary Authorization Policy Administrator (roles/binaryauthorization.policyAdmin)

Dev Ops (roles/iam.devOps)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

`binaryauthorization.continuousValidationConfig.setIamPolicy`

Owner (roles/owner)

Binary Authorization Policy Administrator (roles/binaryauthorization.policyAdmin)

Dev Ops (roles/iam.devOps)

Security Admin (roles/iam.securityAdmin)

`binaryauthorization.continuousValidationConfig.update`

Owner (roles/owner)

Editor (roles/editor)

Binary Authorization Policy Administrator (roles/binaryauthorization.policyAdmin)

Binary Authorization Policy Editor (roles/binaryauthorization.policyEditor)

Dev Ops (roles/iam.devOps)

`binaryauthorization.platformPolicies.create`

Owner (roles/owner)

Editor (roles/editor)

Binary Authorization Policy Administrator (roles/binaryauthorization.policyAdmin)

Binary Authorization Policy Editor (roles/binaryauthorization.policyEditor)

Dev Ops (roles/iam.devOps)

`binaryauthorization.platformPolicies.delete`

Owner (roles/owner)

Editor (roles/editor)

Binary Authorization Policy Administrator (roles/binaryauthorization.policyAdmin)

Binary Authorization Policy Editor (roles/binaryauthorization.policyEditor)

Dev Ops (roles/iam.devOps)

`binaryauthorization.platformPolicies.evaluatePolicy`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Binary Authorization Policy Administrator (roles/binaryauthorization.policyAdmin)

Binary Authorization Policy Editor (roles/binaryauthorization.policyEditor)

Binary Authorization Policy Evaluator (roles/binaryauthorization.policyEvaluator)

Dev Ops (roles/iam.devOps)

Support User (roles/iam.supportUser)

Service agent roles

Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Binary Authorization Service Agent (roles/binaryauthorization.serviceAgent)

`binaryauthorization.platformPolicies.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Binary Authorization Policy Administrator (roles/binaryauthorization.policyAdmin)

Binary Authorization Policy Editor (roles/binaryauthorization.policyEditor)

Binary Authorization Policy Evaluator (roles/binaryauthorization.policyEvaluator)

Binary Authorization Policy Viewer (roles/binaryauthorization.policyViewer)

Dev Ops (roles/iam.devOps)

Support User (roles/iam.supportUser)

Service agent roles

Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)

`binaryauthorization.platformPolicies.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Binary Authorization Policy Administrator (roles/binaryauthorization.policyAdmin)

Binary Authorization Policy Editor (roles/binaryauthorization.policyEditor)

Binary Authorization Policy Evaluator (roles/binaryauthorization.policyEvaluator)

Binary Authorization Policy Viewer (roles/binaryauthorization.policyViewer)

Dev Ops (roles/iam.devOps)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)

`binaryauthorization.platformPolicies.replace`

Owner (roles/owner)

Editor (roles/editor)

Binary Authorization Policy Administrator (roles/binaryauthorization.policyAdmin)

Binary Authorization Policy Editor (roles/binaryauthorization.policyEditor)

Dev Ops (roles/iam.devOps)

`binaryauthorization.policy.evaluatePolicy`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Binary Authorization Policy Administrator (roles/binaryauthorization.policyAdmin)

Binary Authorization Policy Editor (roles/binaryauthorization.policyEditor)

Binary Authorization Policy Evaluator (roles/binaryauthorization.policyEvaluator)

Dev Ops (roles/iam.devOps)

Support User (roles/iam.supportUser)

Service agent roles

Binary Authorization Service Agent (roles/binaryauthorization.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
Cloud Run Service Agent (roles/run.serviceAgent)
Vertex AI Service Agent (roles/aiplatform.serviceAgent)

`binaryauthorization.policy.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Binary Authorization Policy Administrator (roles/binaryauthorization.policyAdmin)

Binary Authorization Policy Editor (roles/binaryauthorization.policyEditor)

Binary Authorization Policy Evaluator (roles/binaryauthorization.policyEvaluator)

Binary Authorization Policy Viewer (roles/binaryauthorization.policyViewer)

Dev Ops (roles/iam.devOps)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent)
Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent)
Security Center Control Service Agent (roles/securitycenter.controlServiceAgent)
Security Health Analytics Service Agent (roles/securitycenter.securityHealthAnalyticsServiceAgent)
Security Center Service Agent (roles/securitycenter.serviceAgent)
Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent)

`binaryauthorization.policy.getIamPolicy`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Binary Authorization Policy Administrator (roles/binaryauthorization.policyAdmin)

Dev Ops (roles/iam.devOps)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

`binaryauthorization.policy.setIamPolicy`

Owner (roles/owner)

Binary Authorization Policy Administrator (roles/binaryauthorization.policyAdmin)

Dev Ops (roles/iam.devOps)

Security Admin (roles/iam.securityAdmin)

`binaryauthorization.policy.update`

Owner (roles/owner)

Editor (roles/editor)

Binary Authorization Policy Administrator (roles/binaryauthorization.policyAdmin)

Binary Authorization Policy Editor (roles/binaryauthorization.policyEditor)

Dev Ops (roles/iam.devOps)