FleetEngine roles and permissions

This page lists the IAM roles and permissions for FleetEngine. To search through all roles and permissions, see the role and permission index.

FleetEngine roles

Role	Permissions
Fleet Engine Consumer SDK User (roles/fleetengine.consumerSdkUser) Limited read access to Fleet Engine resources	fleetengine.trips.get fleetengine.vehicles.get fleetengine.vehicles.search fleetengine.vehicles.searchFuzzed
Fleet Engine Delivery Admin (roles/fleetengine.deliveryAdmin) Full access to Fleet Engine Delivery resources.	fleetengine.deliveryvehicles.* fleetengine.deliveryvehicles.allowAllActions fleetengine.deliveryvehicles.create fleetengine.deliveryvehicles.delete fleetengine.deliveryvehicles.get fleetengine.deliveryvehicles.list fleetengine.deliveryvehicles.update fleetengine.deliveryvehicles.updateLocation fleetengine.deliveryvehicles.updateVehicleStops fleetengine.tasks.* fleetengine.tasks.allowAllActions fleetengine.tasks.create fleetengine.tasks.delete fleetengine.tasks.get fleetengine.tasks.list fleetengine.tasks.searchWithTrackingId fleetengine.tasks.update fleetengine.tasktrackinginfo.* fleetengine.tasktrackinginfo.allowAllActions fleetengine.tasktrackinginfo.get resourcemanager.projects.get resourcemanager.projects.list serviceusage.services.use
Fleet Engine Delivery Consumer User (roles/fleetengine.deliveryConsumer) Limited read access to Fleet Engine Delivery resources	fleetengine.tasks.searchWithTrackingId fleetengine.tasktrackinginfo.get
Fleet Engine Delivery Fleet Reader User (roles/fleetengine.deliveryFleetReader) Grants read access to all Fleet Engine Delivery resources	fleetengine.deliveryvehicles.get fleetengine.deliveryvehicles.list fleetengine.tasks.get fleetengine.tasks.list fleetengine.tasks.searchWithTrackingId fleetengine.tasktrackinginfo.get
Fleet Engine Delivery Super User (roles/fleetengine.deliverySuperUser) Full access to Fleet Engine DeliveryVehicles and Tasks resources.	fleetengine.deliveryvehicles.create fleetengine.deliveryvehicles.delete fleetengine.deliveryvehicles.get fleetengine.deliveryvehicles.list fleetengine.deliveryvehicles.update fleetengine.deliveryvehicles.updateLocation fleetengine.deliveryvehicles.updateVehicleStops fleetengine.tasks.create fleetengine.tasks.delete fleetengine.tasks.get fleetengine.tasks.list fleetengine.tasks.searchWithTrackingId fleetengine.tasks.update fleetengine.tasktrackinginfo.get resourcemanager.projects.get resourcemanager.projects.list
Fleet Engine Delivery Trusted Driver User (roles/fleetengine.deliveryTrustedDriver) Read and write access to Fleet Engine Delivery resources	fleetengine.deliveryvehicles.create fleetengine.deliveryvehicles.get fleetengine.deliveryvehicles.update fleetengine.deliveryvehicles.updateLocation fleetengine.deliveryvehicles.updateVehicleStops fleetengine.tasks.create fleetengine.tasks.update
Fleet Engine Delivery Untrusted Driver User (roles/fleetengine.deliveryUntrustedDriver) Limited write access to Fleet Engine Delivery Vehicle resources	fleetengine.deliveryvehicles.get fleetengine.deliveryvehicles.updateLocation
Fleet Engine Driver SDK User (roles/fleetengine.driverSdkUser) Read and limited update access to Fleet Engine resources	fleetengine.trips.get fleetengine.trips.search fleetengine.trips.update fleetengine.vehicles.get fleetengine.vehicles.updateLocation
Fleet Engine On-Demand Admin (roles/fleetengine.ondemandAdmin) Full access to Vehicle and Trip resources.	fleetengine.trips.* fleetengine.trips.allowAllActions fleetengine.trips.create fleetengine.trips.delete fleetengine.trips.get fleetengine.trips.search fleetengine.trips.update fleetengine.trips.updateState fleetengine.vehicles.* fleetengine.vehicles.allowAllActions fleetengine.vehicles.create fleetengine.vehicles.delete fleetengine.vehicles.get fleetengine.vehicles.list fleetengine.vehicles.search fleetengine.vehicles.searchFuzzed fleetengine.vehicles.update fleetengine.vehicles.updateLocation resourcemanager.projects.get resourcemanager.projects.list serviceusage.services.use
FleetEngine Service Agent (roles/fleetengine.serviceAgent) Grants the FleetEngine Service Account access to manage resources. Warning: Do not grant service agent roles to any principals except service agents.	bigquery.config.get bigquery.datasets.create bigquery.datasets.get bigquery.jobs.create bigquery.tables.getData dataform.locations.* dataform.locations.get dataform.locations.list dataform.repositories.create dataform.repositories.list resourcemanager.projects.get resourcemanager.projects.list serviceusage.services.enable
Fleet Engine Service Super User (roles/fleetengine.serviceSuperUser) Full access to all Fleet Engine resources.	fleetengine.trips.create fleetengine.trips.delete fleetengine.trips.get fleetengine.trips.search fleetengine.trips.update fleetengine.trips.updateState fleetengine.vehicles.create fleetengine.vehicles.delete fleetengine.vehicles.get fleetengine.vehicles.list fleetengine.vehicles.search fleetengine.vehicles.searchFuzzed fleetengine.vehicles.update fleetengine.vehicles.updateLocation resourcemanager.projects.get resourcemanager.projects.list

FleetEngine permissions

Permission	Included in roles
fleetengine.deliveryvehicles.allowAllActions	Owner (roles/owner) Editor (roles/editor) Fleet Engine Delivery Admin (roles/fleetengine.deliveryAdmin)
fleetengine.deliveryvehicles.create	Owner (roles/owner) Editor (roles/editor) Fleet Engine Delivery Admin (roles/fleetengine.deliveryAdmin) Fleet Engine Delivery Super User (roles/fleetengine.deliverySuperUser) Fleet Engine Delivery Trusted Driver User (roles/fleetengine.deliveryTrustedDriver)
fleetengine.deliveryvehicles.delete	Owner (roles/owner) Editor (roles/editor) Fleet Engine Delivery Admin (roles/fleetengine.deliveryAdmin) Fleet Engine Delivery Super User (roles/fleetengine.deliverySuperUser)
fleetengine.deliveryvehicles.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Fleet Engine Delivery Admin (roles/fleetengine.deliveryAdmin) Fleet Engine Delivery Fleet Reader User (roles/fleetengine.deliveryFleetReader) Fleet Engine Delivery Super User (roles/fleetengine.deliverySuperUser) Fleet Engine Delivery Trusted Driver User (roles/fleetengine.deliveryTrustedDriver) Fleet Engine Delivery Untrusted Driver User (roles/fleetengine.deliveryUntrustedDriver) Support User (roles/iam.supportUser)
fleetengine.deliveryvehicles.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Fleet Engine Delivery Admin (roles/fleetengine.deliveryAdmin) Fleet Engine Delivery Fleet Reader User (roles/fleetengine.deliveryFleetReader) Fleet Engine Delivery Super User (roles/fleetengine.deliverySuperUser) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
fleetengine.deliveryvehicles.update	Owner (roles/owner) Editor (roles/editor) Fleet Engine Delivery Admin (roles/fleetengine.deliveryAdmin) Fleet Engine Delivery Super User (roles/fleetengine.deliverySuperUser) Fleet Engine Delivery Trusted Driver User (roles/fleetengine.deliveryTrustedDriver)
fleetengine.deliveryvehicles.updateLocation	Owner (roles/owner) Editor (roles/editor) Fleet Engine Delivery Admin (roles/fleetengine.deliveryAdmin) Fleet Engine Delivery Super User (roles/fleetengine.deliverySuperUser) Fleet Engine Delivery Trusted Driver User (roles/fleetengine.deliveryTrustedDriver) Fleet Engine Delivery Untrusted Driver User (roles/fleetengine.deliveryUntrustedDriver)
fleetengine.deliveryvehicles.updateVehicleStops	Owner (roles/owner) Editor (roles/editor) Fleet Engine Delivery Admin (roles/fleetengine.deliveryAdmin) Fleet Engine Delivery Super User (roles/fleetengine.deliverySuperUser) Fleet Engine Delivery Trusted Driver User (roles/fleetengine.deliveryTrustedDriver)
fleetengine.tasks.allowAllActions	Owner (roles/owner) Editor (roles/editor) Fleet Engine Delivery Admin (roles/fleetengine.deliveryAdmin)
fleetengine.tasks.create	Owner (roles/owner) Editor (roles/editor) Fleet Engine Delivery Admin (roles/fleetengine.deliveryAdmin) Fleet Engine Delivery Super User (roles/fleetengine.deliverySuperUser) Fleet Engine Delivery Trusted Driver User (roles/fleetengine.deliveryTrustedDriver)
fleetengine.tasks.delete	Owner (roles/owner) Editor (roles/editor) Fleet Engine Delivery Admin (roles/fleetengine.deliveryAdmin) Fleet Engine Delivery Super User (roles/fleetengine.deliverySuperUser)
fleetengine.tasks.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Fleet Engine Delivery Admin (roles/fleetengine.deliveryAdmin) Fleet Engine Delivery Fleet Reader User (roles/fleetengine.deliveryFleetReader) Fleet Engine Delivery Super User (roles/fleetengine.deliverySuperUser) Support User (roles/iam.supportUser)
fleetengine.tasks.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Fleet Engine Delivery Admin (roles/fleetengine.deliveryAdmin) Fleet Engine Delivery Fleet Reader User (roles/fleetengine.deliveryFleetReader) Fleet Engine Delivery Super User (roles/fleetengine.deliverySuperUser) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
fleetengine.tasks.searchWithTrackingId	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Fleet Engine Delivery Admin (roles/fleetengine.deliveryAdmin) Fleet Engine Delivery Consumer User (roles/fleetengine.deliveryConsumer) Fleet Engine Delivery Fleet Reader User (roles/fleetengine.deliveryFleetReader) Fleet Engine Delivery Super User (roles/fleetengine.deliverySuperUser) Support User (roles/iam.supportUser)
fleetengine.tasks.update	Owner (roles/owner) Editor (roles/editor) Fleet Engine Delivery Admin (roles/fleetengine.deliveryAdmin) Fleet Engine Delivery Super User (roles/fleetengine.deliverySuperUser) Fleet Engine Delivery Trusted Driver User (roles/fleetengine.deliveryTrustedDriver)
fleetengine.tasktrackinginfo.allowAllActions	Owner (roles/owner) Editor (roles/editor) Fleet Engine Delivery Admin (roles/fleetengine.deliveryAdmin)
fleetengine.tasktrackinginfo.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Fleet Engine Delivery Admin (roles/fleetengine.deliveryAdmin) Fleet Engine Delivery Consumer User (roles/fleetengine.deliveryConsumer) Fleet Engine Delivery Fleet Reader User (roles/fleetengine.deliveryFleetReader) Fleet Engine Delivery Super User (roles/fleetengine.deliverySuperUser) Support User (roles/iam.supportUser)
fleetengine.trips.allowAllActions	Owner (roles/owner) Editor (roles/editor) Fleet Engine On-Demand Admin (roles/fleetengine.ondemandAdmin)
fleetengine.trips.create	Owner (roles/owner) Editor (roles/editor) Fleet Engine On-Demand Admin (roles/fleetengine.ondemandAdmin) Fleet Engine Service Super User (roles/fleetengine.serviceSuperUser)
fleetengine.trips.delete	Owner (roles/owner) Editor (roles/editor) Fleet Engine On-Demand Admin (roles/fleetengine.ondemandAdmin) Fleet Engine Service Super User (roles/fleetengine.serviceSuperUser)
fleetengine.trips.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Fleet Engine Consumer SDK User (roles/fleetengine.consumerSdkUser) Fleet Engine Driver SDK User (roles/fleetengine.driverSdkUser) Fleet Engine On-Demand Admin (roles/fleetengine.ondemandAdmin) Fleet Engine Service Super User (roles/fleetengine.serviceSuperUser) Support User (roles/iam.supportUser)
fleetengine.trips.search	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Fleet Engine Driver SDK User (roles/fleetengine.driverSdkUser) Fleet Engine On-Demand Admin (roles/fleetengine.ondemandAdmin) Fleet Engine Service Super User (roles/fleetengine.serviceSuperUser) Support User (roles/iam.supportUser)
fleetengine.trips.update	Owner (roles/owner) Editor (roles/editor) Fleet Engine Driver SDK User (roles/fleetengine.driverSdkUser) Fleet Engine On-Demand Admin (roles/fleetengine.ondemandAdmin) Fleet Engine Service Super User (roles/fleetengine.serviceSuperUser)
fleetengine.trips.updateState	Owner (roles/owner) Editor (roles/editor) Fleet Engine On-Demand Admin (roles/fleetengine.ondemandAdmin) Fleet Engine Service Super User (roles/fleetengine.serviceSuperUser)
fleetengine.vehicles.allowAllActions	Owner (roles/owner) Editor (roles/editor) Fleet Engine On-Demand Admin (roles/fleetengine.ondemandAdmin)
fleetengine.vehicles.create	Owner (roles/owner) Editor (roles/editor) Fleet Engine On-Demand Admin (roles/fleetengine.ondemandAdmin) Fleet Engine Service Super User (roles/fleetengine.serviceSuperUser)
fleetengine.vehicles.delete	Owner (roles/owner) Editor (roles/editor) Fleet Engine On-Demand Admin (roles/fleetengine.ondemandAdmin) Fleet Engine Service Super User (roles/fleetengine.serviceSuperUser)
fleetengine.vehicles.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Fleet Engine Consumer SDK User (roles/fleetengine.consumerSdkUser) Fleet Engine Driver SDK User (roles/fleetengine.driverSdkUser) Fleet Engine On-Demand Admin (roles/fleetengine.ondemandAdmin) Fleet Engine Service Super User (roles/fleetengine.serviceSuperUser) Support User (roles/iam.supportUser)
fleetengine.vehicles.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Fleet Engine On-Demand Admin (roles/fleetengine.ondemandAdmin) Fleet Engine Service Super User (roles/fleetengine.serviceSuperUser) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
fleetengine.vehicles.search	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Fleet Engine Consumer SDK User (roles/fleetengine.consumerSdkUser) Fleet Engine On-Demand Admin (roles/fleetengine.ondemandAdmin) Fleet Engine Service Super User (roles/fleetengine.serviceSuperUser) Support User (roles/iam.supportUser)
fleetengine.vehicles.searchFuzzed	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Fleet Engine Consumer SDK User (roles/fleetengine.consumerSdkUser) Fleet Engine On-Demand Admin (roles/fleetengine.ondemandAdmin) Fleet Engine Service Super User (roles/fleetengine.serviceSuperUser) Support User (roles/iam.supportUser)
fleetengine.vehicles.update	Owner (roles/owner) Editor (roles/editor) Fleet Engine On-Demand Admin (roles/fleetengine.ondemandAdmin) Fleet Engine Service Super User (roles/fleetengine.serviceSuperUser)
fleetengine.vehicles.updateLocation	Owner (roles/owner) Editor (roles/editor) Fleet Engine Driver SDK User (roles/fleetengine.driverSdkUser) Fleet Engine On-Demand Admin (roles/fleetengine.ondemandAdmin) Fleet Engine Service Super User (roles/fleetengine.serviceSuperUser)