Network Security roles and permissions

`networksecurity.addressGroups.create`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.addressGroups.delete`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.addressGroups.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.addressGroups.getIamPolicy`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.addressGroups.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.addressGroups.setIamPolicy`

Owner (roles/owner)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.addressGroups.update`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.addressGroups.use`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.authorizationPolicies.create`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)

`networksecurity.authorizationPolicies.delete`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)

`networksecurity.authorizationPolicies.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Service agent roles

Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)

`networksecurity.authorizationPolicies.getIamPolicy`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.authorizationPolicies.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)

`networksecurity.authorizationPolicies.setIamPolicy`

Owner (roles/owner)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.authorizationPolicies.update`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)

`networksecurity.authorizationPolicies.use`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)

`networksecurity.authzPolicies.create`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.authzPolicies.delete`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.authzPolicies.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.authzPolicies.getIamPolicy`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.authzPolicies.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.authzPolicies.setIamPolicy`

Owner (roles/owner)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.authzPolicies.update`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.backendAuthenticationConfigs.create`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.backendAuthenticationConfigs.delete`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.backendAuthenticationConfigs.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.backendAuthenticationConfigs.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.backendAuthenticationConfigs.update`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.backendAuthenticationConfigs.use`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.clientTlsPolicies.create`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Mesh Config Service Agent (roles/meshconfig.serviceAgent)
Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)

`networksecurity.clientTlsPolicies.delete`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Mesh Config Service Agent (roles/meshconfig.serviceAgent)
Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)

`networksecurity.clientTlsPolicies.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Load Balancer Admin (roles/compute.loadBalancerAdmin)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Service agent roles

Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Mesh Config Service Agent (roles/meshconfig.serviceAgent)
Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)

`networksecurity.clientTlsPolicies.getIamPolicy`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.clientTlsPolicies.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Load Balancer Admin (roles/compute.loadBalancerAdmin)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Mesh Config Service Agent (roles/meshconfig.serviceAgent)
Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)

`networksecurity.clientTlsPolicies.setIamPolicy`

Owner (roles/owner)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.clientTlsPolicies.update`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Mesh Config Service Agent (roles/meshconfig.serviceAgent)
Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)

`networksecurity.clientTlsPolicies.use`

Owner (roles/owner)

Editor (roles/editor)

Compute Load Balancer Admin (roles/compute.loadBalancerAdmin)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)

`networksecurity.dnsThreatDetectors.create`

Owner (roles/owner)

Editor (roles/editor)

DNS Threat Detector Admin (roles/networksecurity.dnsThreatDetectorAdmin)

`networksecurity.dnsThreatDetectors.delete`

Owner (roles/owner)

Editor (roles/editor)

DNS Threat Detector Admin (roles/networksecurity.dnsThreatDetectorAdmin)

`networksecurity.dnsThreatDetectors.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

DNS Threat Detector Admin (roles/networksecurity.dnsThreatDetectorAdmin)

DNS Threat Detector Viewer (roles/networksecurity.dnsThreatDetectorViewer)

`networksecurity.dnsThreatDetectors.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

DNS Threat Detector Admin (roles/networksecurity.dnsThreatDetectorAdmin)

DNS Threat Detector Viewer (roles/networksecurity.dnsThreatDetectorViewer)

`networksecurity.dnsThreatDetectors.update`

Owner (roles/owner)

Editor (roles/editor)

DNS Threat Detector Admin (roles/networksecurity.dnsThreatDetectorAdmin)

`networksecurity.firewallEndpointAssociations.create`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.firewallEndpointAssociations.delete`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.firewallEndpointAssociations.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.firewallEndpointAssociations.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.firewallEndpointAssociations.update`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.firewallEndpoints.create`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.firewallEndpoints.delete`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.firewallEndpoints.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.firewallEndpoints.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.firewallEndpoints.update`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.firewallEndpoints.use`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.gatewaySecurityPolicies.create`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.gatewaySecurityPolicies.delete`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.gatewaySecurityPolicies.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.gatewaySecurityPolicies.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.gatewaySecurityPolicies.update`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.gatewaySecurityPolicies.use`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.gatewaySecurityPolicyRules.create`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.gatewaySecurityPolicyRules.delete`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.gatewaySecurityPolicyRules.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.gatewaySecurityPolicyRules.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.gatewaySecurityPolicyRules.update`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.gatewaySecurityPolicyRules.use`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.interceptDeploymentGroups.create`

Owner (roles/owner)

Editor (roles/editor)

Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin)

`networksecurity.interceptDeploymentGroups.delete`

Owner (roles/owner)

Editor (roles/editor)

Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin)

`networksecurity.interceptDeploymentGroups.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin)

Intercept Deployment User (roles/networksecurity.interceptDeploymentUser)

Intercept Deployment Viewer (roles/networksecurity.interceptDeploymentViewer)

`networksecurity.interceptDeploymentGroups.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin)

Intercept Deployment User (roles/networksecurity.interceptDeploymentUser)

Intercept Deployment Viewer (roles/networksecurity.interceptDeploymentViewer)

`networksecurity.interceptDeploymentGroups.update`

Owner (roles/owner)

Editor (roles/editor)

Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin)

`networksecurity.interceptDeploymentGroups.use`

Owner (roles/owner)

Editor (roles/editor)

Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin)

Intercept Deployment External User (roles/networksecurity.interceptDeploymentExternalUser)

Intercept Deployment User (roles/networksecurity.interceptDeploymentUser)

`networksecurity.interceptDeployments.create`

Owner (roles/owner)

Editor (roles/editor)

Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin)

`networksecurity.interceptDeployments.delete`

Owner (roles/owner)

Editor (roles/editor)

Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin)

`networksecurity.interceptDeployments.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin)

Intercept Deployment Viewer (roles/networksecurity.interceptDeploymentViewer)

`networksecurity.interceptDeployments.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin)

Intercept Deployment Viewer (roles/networksecurity.interceptDeploymentViewer)

`networksecurity.interceptDeployments.update`

Owner (roles/owner)

Editor (roles/editor)

Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin)

`networksecurity.interceptEndpointGroupAssociations.create`

Owner (roles/owner)

Editor (roles/editor)

Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin)

`networksecurity.interceptEndpointGroupAssociations.delete`

Owner (roles/owner)

Editor (roles/editor)

Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin)

`networksecurity.interceptEndpointGroupAssociations.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin)

Intercept Endpoint Viewer (roles/networksecurity.interceptEndpointViewer)

`networksecurity.interceptEndpointGroupAssociations.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin)

Intercept Endpoint Viewer (roles/networksecurity.interceptEndpointViewer)

`networksecurity.interceptEndpointGroupAssociations.update`

Owner (roles/owner)

Editor (roles/editor)

Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin)

`networksecurity.interceptEndpointGroups.create`

Owner (roles/owner)

Editor (roles/editor)

Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin)

`networksecurity.interceptEndpointGroups.delete`

Owner (roles/owner)

Editor (roles/editor)

Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin)

`networksecurity.interceptEndpointGroups.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin)

Intercept Endpoint User (roles/networksecurity.interceptEndpointUser)

Intercept Endpoint Viewer (roles/networksecurity.interceptEndpointViewer)

`networksecurity.interceptEndpointGroups.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin)

Intercept Endpoint User (roles/networksecurity.interceptEndpointUser)

Intercept Endpoint Viewer (roles/networksecurity.interceptEndpointViewer)

`networksecurity.interceptEndpointGroups.update`

Owner (roles/owner)

Editor (roles/editor)

Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin)

`networksecurity.interceptEndpointGroups.use`

Owner (roles/owner)

Editor (roles/editor)

Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin)

Intercept Endpoint User (roles/networksecurity.interceptEndpointUser)

`networksecurity.locations.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.locations.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.mirroringDeploymentGroups.create`

Owner (roles/owner)

Editor (roles/editor)

Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin)

`networksecurity.mirroringDeploymentGroups.delete`

Owner (roles/owner)

Editor (roles/editor)

Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin)

`networksecurity.mirroringDeploymentGroups.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin)

Mirroring Deployment User (roles/networksecurity.mirroringDeploymentUser)

Mirroring Deployment Viewer (roles/networksecurity.mirroringDeploymentViewer)

`networksecurity.mirroringDeploymentGroups.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin)

Mirroring Deployment User (roles/networksecurity.mirroringDeploymentUser)

Mirroring Deployment Viewer (roles/networksecurity.mirroringDeploymentViewer)

`networksecurity.mirroringDeploymentGroups.update`

Owner (roles/owner)

Editor (roles/editor)

Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin)

`networksecurity.mirroringDeploymentGroups.use`

Owner (roles/owner)

Editor (roles/editor)

Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin)

Mirroring Deployment External User (roles/networksecurity.mirroringDeploymentExternalUser)

Mirroring Deployment User (roles/networksecurity.mirroringDeploymentUser)

`networksecurity.mirroringDeployments.create`

Owner (roles/owner)

Editor (roles/editor)

Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin)

`networksecurity.mirroringDeployments.delete`

Owner (roles/owner)

Editor (roles/editor)

Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin)

`networksecurity.mirroringDeployments.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin)

Mirroring Deployment Viewer (roles/networksecurity.mirroringDeploymentViewer)

`networksecurity.mirroringDeployments.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin)

Mirroring Deployment Viewer (roles/networksecurity.mirroringDeploymentViewer)

`networksecurity.mirroringDeployments.update`

Owner (roles/owner)

Editor (roles/editor)

Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin)

`networksecurity.mirroringEndpointGroupAssociations.create`

Owner (roles/owner)

Editor (roles/editor)

Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin)

`networksecurity.mirroringEndpointGroupAssociations.delete`

Owner (roles/owner)

Editor (roles/editor)

Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin)

`networksecurity.mirroringEndpointGroupAssociations.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin)

Mirroring Endpoint Viewer (roles/networksecurity.mirroringEndpointViewer)

`networksecurity.mirroringEndpointGroupAssociations.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin)

Mirroring Endpoint Viewer (roles/networksecurity.mirroringEndpointViewer)

`networksecurity.mirroringEndpointGroupAssociations.update`

Owner (roles/owner)

Editor (roles/editor)

Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin)

`networksecurity.mirroringEndpointGroups.create`

Owner (roles/owner)

Editor (roles/editor)

Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin)

`networksecurity.mirroringEndpointGroups.delete`

Owner (roles/owner)

Editor (roles/editor)

Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin)

`networksecurity.mirroringEndpointGroups.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin)

Mirroring Endpoint User (roles/networksecurity.mirroringEndpointUser)

Mirroring Endpoint Viewer (roles/networksecurity.mirroringEndpointViewer)

`networksecurity.mirroringEndpointGroups.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin)

Mirroring Endpoint User (roles/networksecurity.mirroringEndpointUser)

Mirroring Endpoint Viewer (roles/networksecurity.mirroringEndpointViewer)

`networksecurity.mirroringEndpointGroups.update`

Owner (roles/owner)

Editor (roles/editor)

Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin)

`networksecurity.mirroringEndpointGroups.use`

Owner (roles/owner)

Editor (roles/editor)

Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin)

Mirroring Endpoint User (roles/networksecurity.mirroringEndpointUser)

`networksecurity.operations.cancel`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)

`networksecurity.operations.delete`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)

`networksecurity.operations.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin)

Security Profile Admin (roles/networksecurity.securityProfileAdmin)

Service agent roles

Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)

`networksecurity.operations.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin)

Security Profile Admin (roles/networksecurity.securityProfileAdmin)

Service agent roles

Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)

`networksecurity.sacAttachments.create`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.sacAttachments.delete`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.sacAttachments.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.sacAttachments.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.sacRealms.create`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.sacRealms.delete`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.sacRealms.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.sacRealms.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.securityProfileGroups.create`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Profile Admin (roles/networksecurity.securityProfileAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.securityProfileGroups.delete`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Profile Admin (roles/networksecurity.securityProfileAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.securityProfileGroups.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Security Profile Admin (roles/networksecurity.securityProfileAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.securityProfileGroups.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Security Profile Admin (roles/networksecurity.securityProfileAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.securityProfileGroups.update`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Profile Admin (roles/networksecurity.securityProfileAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.securityProfileGroups.use`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Profile Admin (roles/networksecurity.securityProfileAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.securityProfiles.create`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Profile Admin (roles/networksecurity.securityProfileAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.securityProfiles.delete`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Profile Admin (roles/networksecurity.securityProfileAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.securityProfiles.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Security Profile Admin (roles/networksecurity.securityProfileAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.securityProfiles.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Security Profile Admin (roles/networksecurity.securityProfileAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.securityProfiles.update`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Profile Admin (roles/networksecurity.securityProfileAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.securityProfiles.use`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Profile Admin (roles/networksecurity.securityProfileAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.serverTlsPolicies.create`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Mesh Config Service Agent (roles/meshconfig.serviceAgent)
Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)

`networksecurity.serverTlsPolicies.delete`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Mesh Config Service Agent (roles/meshconfig.serviceAgent)
Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)

`networksecurity.serverTlsPolicies.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Load Balancer Admin (roles/compute.loadBalancerAdmin)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Service agent roles

Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Mesh Config Service Agent (roles/meshconfig.serviceAgent)
Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)

`networksecurity.serverTlsPolicies.getIamPolicy`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.serverTlsPolicies.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Load Balancer Admin (roles/compute.loadBalancerAdmin)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Mesh Config Service Agent (roles/meshconfig.serviceAgent)
Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)

`networksecurity.serverTlsPolicies.setIamPolicy`

Owner (roles/owner)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.serverTlsPolicies.update`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Mesh Config Service Agent (roles/meshconfig.serviceAgent)
Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)

`networksecurity.serverTlsPolicies.use`

Owner (roles/owner)

Editor (roles/editor)

Compute Load Balancer Admin (roles/compute.loadBalancerAdmin)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)

`networksecurity.tlsInspectionPolicies.create`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.tlsInspectionPolicies.delete`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.tlsInspectionPolicies.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.tlsInspectionPolicies.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.tlsInspectionPolicies.update`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.tlsInspectionPolicies.use`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.urlLists.create`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.urlLists.delete`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.urlLists.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.urlLists.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Compute Network Viewer (roles/compute.networkViewer)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
External Exposure Service Agent (roles/externalexposure.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.urlLists.update`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)

`networksecurity.urlLists.use`

Owner (roles/owner)

Editor (roles/editor)

Compute Network Admin (roles/compute.networkAdmin)

Compute Network User (roles/compute.networkUser)

Infrastructure Administrator (roles/iam.infrastructureAdmin)

Network Administrator (roles/iam.networkAdmin)

Service agent roles

Cloud Composer API Service Agent (roles/composer.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)