This page describes Developer Connect roles and permissions.
Access control in Developer Connect is controlled using
Identity and Access Management (IAM). IAM lets you create and
manage permissions for Google Cloud resources. Developer Connect provides a
specific set of
predefined IAM roles
where each role contains a set of permissions suited to a particular type of
access or action. We recommend that you adopt the
security principle of least privilege,
and grant only the necessary access to your resources.
Predefined Developer Connect roles
You assign permissions to accounts through the use of roles. The following table
lists the roles available for Developer Connect and the permissions that
they include:
Role
Permissions
Name: developerconnect.admin
Title: Developer Connect Admin
Grants full access to Developer Connect resources.
Grants access to view the connection and access to the features that
interact with the Git repository, such as reading content from the Git
repository, or linking to the Git repository.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-03-25 UTC."],[[["Developer Connect uses Identity and Access Management (IAM) to control access to its resources, allowing for the creation and management of permissions."],["There are several predefined IAM roles for Developer Connect, each with a specific set of permissions tailored to different levels of access and actions, encouraging the use of the least privilege security principle."],["Roles such as Developer Connect Admin, Read Token Accessor, Token Accessor, User, Viewer, Git Proxy Reader, and Git Proxy User offer varying levels of permissions, from full access to read-only or Git proxy specific abilities."],["A service account, identified by `service-\u003cvar translate=\"no\"\u003ePROJECT_NUMBER\u003c/var\u003e@gcp-sa-devconnect.iam.gserviceaccount.com`, is used by Developer Connect to carry out tasks when interacting with other services and can be granted or modified with specific IAM roles and permissions."],["You can utilize IAM to manage roles, following instructions detailed in the documentation for granting, changing, and revoking access to resources."]]],[]]
