Cloud OS Config roles and permissions

`osconfig.guestPolicies.create`

Owner (roles/owner)

Editor (roles/editor)

OS Config Admin (roles/osconfig.admin)

GuestPolicy Admin (roles/osconfig.guestPolicyAdmin)

`osconfig.guestPolicies.delete`

Owner (roles/owner)

Editor (roles/editor)

OS Config Admin (roles/osconfig.admin)

GuestPolicy Admin (roles/osconfig.guestPolicyAdmin)

`osconfig.guestPolicies.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

GuestPolicy Admin (roles/osconfig.guestPolicyAdmin)

GuestPolicy Editor (roles/osconfig.guestPolicyEditor)

GuestPolicy Viewer (roles/osconfig.guestPolicyViewer)

OS Config Viewer (roles/osconfig.viewer)

`osconfig.guestPolicies.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

GuestPolicy Admin (roles/osconfig.guestPolicyAdmin)

GuestPolicy Editor (roles/osconfig.guestPolicyEditor)

GuestPolicy Viewer (roles/osconfig.guestPolicyViewer)

OS Config Viewer (roles/osconfig.viewer)

`osconfig.guestPolicies.update`

Owner (roles/owner)

Editor (roles/editor)

OS Config Admin (roles/osconfig.admin)

GuestPolicy Admin (roles/osconfig.guestPolicyAdmin)

GuestPolicy Editor (roles/osconfig.guestPolicyEditor)

`osconfig.instanceOSPoliciesCompliances.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

InstanceOSPoliciesCompliance Viewer (roles/osconfig.instanceOSPoliciesComplianceViewer)

OS Config Viewer (roles/osconfig.viewer)

`osconfig.instanceOSPoliciesCompliances.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

InstanceOSPoliciesCompliance Viewer (roles/osconfig.instanceOSPoliciesComplianceViewer)

OS Config Viewer (roles/osconfig.viewer)

`osconfig.inventories.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

OS Inventory Viewer (roles/osconfig.inventoryViewer)

OS Config Viewer (roles/osconfig.viewer)

`osconfig.inventories.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

OS Inventory Viewer (roles/osconfig.inventoryViewer)

OS Config Viewer (roles/osconfig.viewer)

`osconfig.locations.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

PolicyOrchestrator Admin (roles/osconfig.policyOrchestratorAdmin)

PolicyOrchestrator Viewer (roles/osconfig.policyOrchestratorViewer)

OS Config Viewer (roles/osconfig.viewer)

`osconfig.locations.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

PolicyOrchestrator Admin (roles/osconfig.policyOrchestratorAdmin)

PolicyOrchestrator Viewer (roles/osconfig.policyOrchestratorViewer)

OS Config Viewer (roles/osconfig.viewer)

`osconfig.operations.cancel`

Owner (roles/owner)

Editor (roles/editor)

OS Config Admin (roles/osconfig.admin)

`osconfig.operations.delete`

Owner (roles/owner)

Editor (roles/editor)

OS Config Admin (roles/osconfig.admin)

`osconfig.operations.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

PolicyOrchestrator Admin (roles/osconfig.policyOrchestratorAdmin)

PolicyOrchestrator Viewer (roles/osconfig.policyOrchestratorViewer)

OS Config Viewer (roles/osconfig.viewer)

Service agent roles

Cloud OS Config Rollout Service Agent (roles/osconfig.rolloutServiceAgent)

`osconfig.operations.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

OS Config Viewer (roles/osconfig.viewer)

`osconfig.osPolicyAssignmentReports.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

OSPolicyAssignmentReport Viewer (roles/osconfig.osPolicyAssignmentReportViewer)

OS Config Viewer (roles/osconfig.viewer)

`osconfig.osPolicyAssignmentReports.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

OSPolicyAssignmentReport Viewer (roles/osconfig.osPolicyAssignmentReportViewer)

OS Config Viewer (roles/osconfig.viewer)

`osconfig.osPolicyAssignmentReports.searchSummaries`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

OSPolicyAssignmentReport Viewer (roles/osconfig.osPolicyAssignmentReportViewer)

OS Config Viewer (roles/osconfig.viewer)

`osconfig.osPolicyAssignments.create`

Owner (roles/owner)

Editor (roles/editor)

OS Config Admin (roles/osconfig.admin)

OSPolicyAssignment Admin (roles/osconfig.osPolicyAssignmentAdmin)

`osconfig.osPolicyAssignments.delete`

Owner (roles/owner)

Editor (roles/editor)

OS Config Admin (roles/osconfig.admin)

OSPolicyAssignment Admin (roles/osconfig.osPolicyAssignmentAdmin)

Service agent roles

Cloud OS Config Rollout Service Agent (roles/osconfig.rolloutServiceAgent)

`osconfig.osPolicyAssignments.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

OSPolicyAssignment Admin (roles/osconfig.osPolicyAssignmentAdmin)

OSPolicyAssignment Editor (roles/osconfig.osPolicyAssignmentEditor)

OSPolicyAssignment Viewer (roles/osconfig.osPolicyAssignmentViewer)

OS Config Viewer (roles/osconfig.viewer)

Service agent roles

Cloud OS Config Rollout Service Agent (roles/osconfig.rolloutServiceAgent)

`osconfig.osPolicyAssignments.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

OSPolicyAssignment Admin (roles/osconfig.osPolicyAssignmentAdmin)

OSPolicyAssignment Editor (roles/osconfig.osPolicyAssignmentEditor)

OSPolicyAssignment Viewer (roles/osconfig.osPolicyAssignmentViewer)

OS Config Viewer (roles/osconfig.viewer)

`osconfig.osPolicyAssignments.searchPolicies`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

OSPolicyAssignment Admin (roles/osconfig.osPolicyAssignmentAdmin)

OSPolicyAssignment Editor (roles/osconfig.osPolicyAssignmentEditor)

OSPolicyAssignment Viewer (roles/osconfig.osPolicyAssignmentViewer)

OS Config Viewer (roles/osconfig.viewer)

`osconfig.osPolicyAssignments.update`

Owner (roles/owner)

Editor (roles/editor)

OS Config Admin (roles/osconfig.admin)

OSPolicyAssignment Admin (roles/osconfig.osPolicyAssignmentAdmin)

OSPolicyAssignment Editor (roles/osconfig.osPolicyAssignmentEditor)

Service agent roles

Cloud OS Config Rollout Service Agent (roles/osconfig.rolloutServiceAgent)

`osconfig.patchDeployments.create`

Owner (roles/owner)

Editor (roles/editor)

OS Config Admin (roles/osconfig.admin)

PatchDeployment Admin (roles/osconfig.patchDeploymentAdmin)

`osconfig.patchDeployments.delete`

Owner (roles/owner)

Editor (roles/editor)

OS Config Admin (roles/osconfig.admin)

PatchDeployment Admin (roles/osconfig.patchDeploymentAdmin)

`osconfig.patchDeployments.execute`

Owner (roles/owner)

Editor (roles/editor)

OS Config Admin (roles/osconfig.admin)

PatchDeployment Admin (roles/osconfig.patchDeploymentAdmin)

`osconfig.patchDeployments.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

PatchDeployment Admin (roles/osconfig.patchDeploymentAdmin)

PatchDeployment Viewer (roles/osconfig.patchDeploymentViewer)

OS Config Viewer (roles/osconfig.viewer)

`osconfig.patchDeployments.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

PatchDeployment Admin (roles/osconfig.patchDeploymentAdmin)

PatchDeployment Viewer (roles/osconfig.patchDeploymentViewer)

OS Config Viewer (roles/osconfig.viewer)

`osconfig.patchDeployments.pause`

Owner (roles/owner)

Editor (roles/editor)

OS Config Admin (roles/osconfig.admin)

PatchDeployment Admin (roles/osconfig.patchDeploymentAdmin)

`osconfig.patchDeployments.resume`

Owner (roles/owner)

Editor (roles/editor)

OS Config Admin (roles/osconfig.admin)

PatchDeployment Admin (roles/osconfig.patchDeploymentAdmin)

`osconfig.patchDeployments.update`

Owner (roles/owner)

Editor (roles/editor)

OS Config Admin (roles/osconfig.admin)

PatchDeployment Admin (roles/osconfig.patchDeploymentAdmin)

`osconfig.patchJobs.exec`

Owner (roles/owner)

Editor (roles/editor)

OS Config Admin (roles/osconfig.admin)

Patch Job Executor (roles/osconfig.patchJobExecutor)

`osconfig.patchJobs.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

Patch Job Executor (roles/osconfig.patchJobExecutor)

Patch Job Viewer (roles/osconfig.patchJobViewer)

OS Config Viewer (roles/osconfig.viewer)

`osconfig.patchJobs.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

Patch Job Executor (roles/osconfig.patchJobExecutor)

Patch Job Viewer (roles/osconfig.patchJobViewer)

OS Config Viewer (roles/osconfig.viewer)

`osconfig.policyOrchestrators.create`

Owner (roles/owner)

Editor (roles/editor)

OS Config Admin (roles/osconfig.admin)

PolicyOrchestrator Admin (roles/osconfig.policyOrchestratorAdmin)

`osconfig.policyOrchestrators.delete`

Owner (roles/owner)

Editor (roles/editor)

OS Config Admin (roles/osconfig.admin)

PolicyOrchestrator Admin (roles/osconfig.policyOrchestratorAdmin)

`osconfig.policyOrchestrators.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

PolicyOrchestrator Admin (roles/osconfig.policyOrchestratorAdmin)

PolicyOrchestrator Viewer (roles/osconfig.policyOrchestratorViewer)

OS Config Viewer (roles/osconfig.viewer)

`osconfig.policyOrchestrators.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

PolicyOrchestrator Admin (roles/osconfig.policyOrchestratorAdmin)

PolicyOrchestrator Viewer (roles/osconfig.policyOrchestratorViewer)

OS Config Viewer (roles/osconfig.viewer)

`osconfig.policyOrchestrators.update`

Owner (roles/owner)

Editor (roles/editor)

OS Config Admin (roles/osconfig.admin)

PolicyOrchestrator Admin (roles/osconfig.policyOrchestratorAdmin)

`osconfig.projectFeatureSettings.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

Project Feature Settings Editor (roles/osconfig.projectFeatureSettingsEditor)

Project Feature Settings Viewer (roles/osconfig.projectFeatureSettingsViewer)

OS Config Viewer (roles/osconfig.viewer)

Service agent roles

Cloud OS Config Service Agent (roles/osconfig.serviceAgent)

`osconfig.projectFeatureSettings.update`

Owner (roles/owner)

Editor (roles/editor)

OS Config Admin (roles/osconfig.admin)

Project Feature Settings Editor (roles/osconfig.projectFeatureSettingsEditor)

Service agent roles

Cloud OS Config Service Agent (roles/osconfig.serviceAgent)

`osconfig.upgradeReports.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

Upgrade Report Viewer (roles/osconfig.upgradeReportViewer)

OS Config Viewer (roles/osconfig.viewer)

`osconfig.upgradeReports.getSummary`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

Upgrade Report Viewer (roles/osconfig.upgradeReportViewer)

OS Config Viewer (roles/osconfig.viewer)

`osconfig.upgradeReports.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

Upgrade Report Viewer (roles/osconfig.upgradeReportViewer)

OS Config Viewer (roles/osconfig.viewer)

`osconfig.upgradeReports.searchSummaries`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

Upgrade Report Viewer (roles/osconfig.upgradeReportViewer)

OS Config Viewer (roles/osconfig.viewer)

`osconfig.vulnerabilityReports.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

OS Config Viewer (roles/osconfig.viewer)

OS VulnerabilityReport Viewer (roles/osconfig.vulnerabilityReportViewer)

`osconfig.vulnerabilityReports.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

OS Config Admin (roles/osconfig.admin)

OS Config Viewer (roles/osconfig.viewer)

OS VulnerabilityReport Viewer (roles/osconfig.vulnerabilityReportViewer)