Cloud Optimization roles and permissions

This page lists the IAM roles and permissions for Cloud Optimization. To search through all roles and permissions, see the role and permission index.

Role Permissions

Cloud Optimization AI Admin

(roles/cloudoptimization.admin)

Administrator of Cloud Optimization AI resources

cloudoptimization.*

  • cloudoptimization.operations.create
  • cloudoptimization.operations.get

Cloud Optimization AI Editor

(roles/cloudoptimization.editor)

Editor of Cloud Optimization AI resources

cloudoptimization.*

  • cloudoptimization.operations.create
  • cloudoptimization.operations.get

Cloud Optimization Service Agent

(roles/cloudoptimization.serviceAgent)

Grants Cloud Optimization Service Account access to read and write data in the user project.

storage.buckets.get

storage.objects.create

storage.objects.delete

storage.objects.get

storage.objects.list

storage.objects.update

Cloud Optimization AI Viewer

(roles/cloudoptimization.viewer)

Viewer of Cloud Optimization AI resources

cloudoptimization.operations.get

Cloud Optimization permissions

Permission Included in roles

cloudoptimization.operations.create

Owner (roles/owner)

Editor (roles/editor)

Cloud Optimization AI Admin (roles/cloudoptimization.admin)

Cloud Optimization AI Editor (roles/cloudoptimization.editor)

cloudoptimization.operations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud Optimization AI Admin (roles/cloudoptimization.admin)

Cloud Optimization AI Editor (roles/cloudoptimization.editor)

Cloud Optimization AI Viewer (roles/cloudoptimization.viewer)

Support User (roles/iam.supportUser)

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-02-19 UTC.