Identity and Access Management roles and permissions

This page lists the IAM roles and permissions for Identity and Access Management. To search through all roles and permissions, see the role and permission index.

Identity and Access Management roles

Role	Permissions
Deny Admin (roles/iam.denyAdmin) Deny admin role, with permissions to read and modify deny policies Lowest-level resources where you can grant this role: Organization	cloudasset.assets.listResource iam.denypolicies.* iam.denypolicies.create iam.denypolicies.delete iam.denypolicies.get iam.denypolicies.list iam.denypolicies.update policyanalyzer.resourceAuthorizationActivities.query policysimulator.accessPolicySimulationResults.list policysimulator.accessPolicySimulations.* policysimulator.accessPolicySimulations.create policysimulator.accessPolicySimulations.get policysimulator.accessPolicySimulations.list
Deny Reviewer (roles/iam.denyReviewer) Deny Reviewer role, with permissions to read deny policies Lowest-level resources where you can grant this role: Organization	iam.denypolicies.get iam.denypolicies.list
IAM OAuth Client Admin (roles/iam.oauthClientAdmin) Full rights to create and manage OAuth clients.	iam.oauthClientCredentials.* iam.googleapis.com/oauthClientCredentials.create iam.googleapis.com/oauthClientCredentials.delete iam.googleapis.com/oauthClientCredentials.get iam.googleapis.com/oauthClientCredentials.list iam.googleapis.com/oauthClientCredentials.update iam.oauthClients.* iam.googleapis.com/oauthClients.create iam.googleapis.com/oauthClients.delete iam.googleapis.com/oauthClients.get iam.googleapis.com/oauthClients.list iam.googleapis.com/oauthClients.undelete iam.googleapis.com/oauthClients.update resourcemanager.projects.get resourcemanager.projects.list
IAM OAuth Client Viewer (roles/iam.oauthClientViewer) Read access to a particular instance of an OAuth client.	iam.googleapis.com/oauthClientCredentials.get iam.googleapis.com/oauthClientCredentials.list iam.googleapis.com/oauthClients.get iam.googleapis.com/oauthClients.list resourcemanager.projects.get resourcemanager.projects.list
IAM Operation Viewer ^Beta (roles/iam.operationViewer) Operation user role, with permissions to view and list operations in IAM v3	iam.operations.get
Organization Role Administrator (roles/iam.organizationRoleAdmin) Provides access to administer all custom roles in the organization and the projects below it. Lowest-level resources where you can grant this role: Organization	iam.roles.* iam.roles.create iam.roles.delete iam.roles.get iam.roles.list iam.roles.undelete iam.roles.update resourcemanager.organizations.get resourcemanager.organizations.getIamPolicy resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list
Organization Role Viewer (roles/iam.organizationRoleViewer) Provides read access to all custom roles in the organization and the projects below it. Lowest-level resources where you can grant this role: Organization	iam.roles.get iam.roles.list resourcemanager.organizations.get resourcemanager.organizations.getIamPolicy resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list
Principal Access Boundary Policy Admin ^Beta (roles/iam.principalAccessBoundaryAdmin) Principal Access Boundary admin role, with permissions to read and modify principal access boundary policies, and to bind and unbind principal access boundary policies to targets. Also includes permissions to read principal authorization activities analysis and permissions to list assets from Cloud Asset Inventory	cloudasset.assets.listResource cloudasset.assets.searchAllResources iam.principalaccessboundarypolicies.* iam.principalaccessboundarypolicies.bind iam.principalaccessboundarypolicies.create iam.principalaccessboundarypolicies.delete iam.principalaccessboundarypolicies.get iam.principalaccessboundarypolicies.list iam.principalaccessboundarypolicies.searchPolicyBindings iam.principalaccessboundarypolicies.unbind iam.principalaccessboundarypolicies.update
Principal Access Boundary Policy User ^Beta (roles/iam.principalAccessBoundaryUser) Principal Access Boundary Policies user role, with permissions to view principal access boundary policies, and to bind and unbind principal access boundary policies to targets	iam.principalaccessboundarypolicies.bind iam.principalaccessboundarypolicies.get iam.principalaccessboundarypolicies.list iam.principalaccessboundarypolicies.unbind
Principal Access Boundary Policy Viewer ^Beta (roles/iam.principalAccessBoundaryViewer) Principal Access Boundary Reviewer role, with permissions to read principal access boundary policies and view associated policy bindings	iam.principalaccessboundarypolicies.get iam.principalaccessboundarypolicies.list iam.principalaccessboundarypolicies.searchPolicyBindings
Role Administrator (roles/iam.roleAdmin) Provides access to all custom roles in the project. Lowest-level resources where you can grant this role: Project	iam.roles.* iam.roles.create iam.roles.delete iam.roles.get iam.roles.list iam.roles.undelete iam.roles.update resourcemanager.projects.get resourcemanager.projects.getIamPolicy
Role Viewer (roles/iam.roleViewer) Provides read access to all custom roles in the project. Lowest-level resources where you can grant this role: Project	iam.roles.get iam.roles.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy
Security Admin (roles/iam.securityAdmin) Security admin role, with permissions to get and set any IAM policy.	accessapproval.requests.list accesscontextmanager.accessLevels.list accesscontextmanager.authorizedOrgsDescs.list accesscontextmanager.gcpUserAccessBindings.list accesscontextmanager.policies.getIamPolicy accesscontextmanager.policies.list accesscontextmanager.policies.setIamPolicy accesscontextmanager.servicePerimeters.list actions.agentVersions.list advisorynotifications.notifications.* advisorynotifications.notifications.get advisorynotifications.notifications.list aiplatform.agentExamples.list aiplatform.agents.list aiplatform.annotationSpecs.list aiplatform.annotations.list aiplatform.apps.list aiplatform.artifacts.list aiplatform.batchPredictionJobs.list aiplatform.cachedContents.list aiplatform.contexts.list aiplatform.customJobs.list aiplatform.dataItems.list aiplatform.dataLabelingJobs.list aiplatform.datasetVersions.list aiplatform.datasets.list aiplatform.deploymentResourcePools.list aiplatform.edgeDeploymentJobs.list aiplatform.edgeDevices.list aiplatform.endpoints.getIamPolicy aiplatform.endpoints.list aiplatform.endpoints.setIamPolicy aiplatform.entityTypes.getIamPolicy aiplatform.entityTypes.list aiplatform.entityTypes.setIamPolicy aiplatform.exampleStores.list aiplatform.executions.list aiplatform.extensions.list aiplatform.featureGroups.getIamPolicy aiplatform.featureGroups.list aiplatform.featureGroups.setIamPolicy aiplatform.featureOnlineStores.getIamPolicy aiplatform.featureOnlineStores.list aiplatform.featureOnlineStores.setIamPolicy aiplatform.featureViewSyncs.list aiplatform.featureViews.getIamPolicy aiplatform.featureViews.list aiplatform.featureViews.setIamPolicy aiplatform.features.list aiplatform.featurestores.getIamPolicy aiplatform.featurestores.list aiplatform.featurestores.setIamPolicy aiplatform.humanInTheLoops.list aiplatform.hyperparameterTuningJobs.list aiplatform.indexEndpoints.list aiplatform.indexes.list aiplatform.locations.list aiplatform.metadataSchemas.list aiplatform.metadataStores.list aiplatform.modelDeploymentMonitoringJobs.list aiplatform.modelEvaluationSlices.list aiplatform.modelEvaluations.list aiplatform.modelMonitoringJobs.list aiplatform.modelMonitors.list aiplatform.models.list aiplatform.nasJobs.list aiplatform.nasTrialDetails.list aiplatform.notebookExecutionJobs.list aiplatform.notebookRuntimeTemplates.getIamPolicy aiplatform.notebookRuntimeTemplates.list aiplatform.notebookRuntimeTemplates.setIamPolicy aiplatform.notebookRuntimes.list aiplatform.operations.list aiplatform.persistentResources.list aiplatform.pipelineJobs.list aiplatform.provisionedThroughputRevisions.list aiplatform.provisionedThroughputs.list aiplatform.ragCorpora.list aiplatform.ragFiles.list aiplatform.reasoningEngines.list aiplatform.schedules.list aiplatform.sessionEvents.list aiplatform.sessions.list aiplatform.specialistPools.list aiplatform.studies.list aiplatform.tensorboardExperiments.list aiplatform.tensorboardRuns.list aiplatform.tensorboardTimeSeries.list aiplatform.tensorboards.list aiplatform.trainingPipelines.list aiplatform.trials.list aiplatform.tuningJobs.list alloydb.backups.list alloydb.clusters.list alloydb.databases.list alloydb.instances.list alloydb.locations.list alloydb.operations.list alloydb.supportedDatabaseFlags.list alloydb.users.list analyticshub.dataExchanges.getIamPolicy analyticshub.dataExchanges.list analyticshub.dataExchanges.setIamPolicy analyticshub.listings.getIamPolicy analyticshub.listings.list analyticshub.listings.setIamPolicy analyticshub.subscriptions.list apigateway.apiconfigs.getIamPolicy apigateway.apiconfigs.list apigateway.apiconfigs.setIamPolicy apigateway.apis.getIamPolicy apigateway.apis.list apigateway.apis.setIamPolicy apigateway.gateways.getIamPolicy apigateway.gateways.list apigateway.gateways.setIamPolicy apigateway.locations.list apigateway.operations.list apigee.apiproductattributes.list apigee.apiproducts.list apigee.appgroupapps.list apigee.appgroups.list apigee.apps.list apigee.archivedeployments.list apigee.caches.list apigee.datacollectors.list apigee.datastores.list apigee.deployments.getIamPolicy apigee.deployments.list apigee.deployments.setIamPolicy apigee.developerappattributes.list apigee.developerapps.list apigee.developerattributes.list apigee.developers.list apigee.developersubscriptions.list apigee.dnsZones.list apigee.endpointattachments.list apigee.envgroupattachments.list apigee.envgroups.list apigee.environments.getIamPolicy apigee.environments.list apigee.environments.setIamPolicy apigee.exports.list apigee.flowhooks.list apigee.hostqueries.list apigee.hostsecurityreports.list apigee.instanceattachments.list apigee.instances.list apigee.keystorealiases.list apigee.keystores.list apigee.keyvaluemapentries.list apigee.keyvaluemaps.list apigee.nataddresses.list apigee.operations.list apigee.organizations.list apigee.portals.list apigee.proxies.list apigee.proxyrevisions.list apigee.queries.list apigee.rateplans.list apigee.references.list apigee.reports.list apigee.resourcefiles.list apigee.securityActions.list apigee.securityFeedback.list apigee.securityIncidents.list apigee.securityMonitoringConditions.list apigee.securityProfiles.list apigee.securityProfilesV2.list apigee.securityreports.list apigee.sharedflowrevisions.list apigee.sharedflows.list apigee.spaces.getIamPolicy apigee.spaces.list apigee.spaces.setIamPolicy apigee.targetservers.list apigee.traceconfigoverrides.list apigee.tracesessions.list apigeeconnect.connections.list apigeeregistry.apis.getIamPolicy apigeeregistry.apis.list apigeeregistry.apis.setIamPolicy apigeeregistry.artifacts.getIamPolicy apigeeregistry.artifacts.list apigeeregistry.artifacts.setIamPolicy apigeeregistry.deployments.list apigeeregistry.locations.list apigeeregistry.operations.list apigeeregistry.specs.getIamPolicy apigeeregistry.specs.list apigeeregistry.specs.setIamPolicy apigeeregistry.versions.getIamPolicy apigeeregistry.versions.list apigeeregistry.versions.setIamPolicy apihub.apiHubInstances.list apihub.apiOperations.list apihub.apis.list apihub.attributes.list apihub.curations.list apihub.definitions.list apihub.dependencies.list apihub.deployments.list apihub.externalApis.list apihub.hostProjectRegistrations.list apihub.llmEnablements.list apihub.operations.list apihub.plugininstances.list apihub.plugins.list apihub.runTimeProjectAttachments.list apihub.specs.list apihub.versions.list apikeys.keys.list apim.apiObservations.list apim.apiOperations.list apim.locations.list apim.observationJobs.list apim.observationSources.list apim.operations.list appengine.instances.list appengine.memcache.list appengine.operations.list appengine.services.list appengine.versions.list apphub.applications.getIamPolicy apphub.applications.list apphub.applications.setIamPolicy apphub.discoveredServices.list apphub.discoveredWorkloads.list apphub.locations.list apphub.operations.list apphub.serviceProjectAttachments.list apphub.services.list apphub.workloads.list applianceactivation.rttCommands.list artifactregistry.attachments.list artifactregistry.dockerimages.list artifactregistry.files.list artifactregistry.locations.list artifactregistry.mavenartifacts.list artifactregistry.npmpackages.list artifactregistry.packages.list artifactregistry.pythonpackages.list artifactregistry.repositories.getIamPolicy artifactregistry.repositories.list artifactregistry.repositories.setIamPolicy artifactregistry.rules.list artifactregistry.tags.list artifactregistry.versions.list assuredoss.locations.list assuredoss.metadata.list assuredoss.operations.list assuredworkloads.operations.list assuredworkloads.updates.list assuredworkloads.violations.list assuredworkloads.workload.list auditmanager.auditReports.list auditmanager.controlReports.list auditmanager.controls.list auditmanager.customComplianceFrameworks.list auditmanager.findings.list auditmanager.locations.list auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.list automl.annotationSpecs.list automl.annotations.list automl.columnSpecs.list automl.datasets.getIamPolicy automl.datasets.list automl.datasets.setIamPolicy automl.examples.list automl.files.list automl.humanAnnotationTasks.list automl.locations.getIamPolicy automl.locations.list automl.locations.setIamPolicy automl.modelEvaluations.list automl.models.getIamPolicy automl.models.list automl.models.setIamPolicy automl.operations.list automl.tableSpecs.list automlrecommendations.apiKeys.list automlrecommendations.catalogItems.list automlrecommendations.catalogs.list automlrecommendations.eventStores.list automlrecommendations.events.list automlrecommendations.placements.list automlrecommendations.recommendations.list autoscaling.sites.getIamPolicy autoscaling.sites.setIamPolicy backupdr.backupPlanAssociations.list backupdr.backupPlanRevisions.list backupdr.backupPlans.list backupdr.backupVaults.list backupdr.bvbackups.list backupdr.bvdataSources.list backupdr.locations.list backupdr.managementServers.getIamPolicy backupdr.managementServers.list backupdr.managementServers.setIamPolicy backupdr.operations.list backupdr.resourceBackupConfigs.list baremetalsolution.instancequotas.list baremetalsolution.instances.list baremetalsolution.luns.list baremetalsolution.maintenanceevents.list baremetalsolution.networkquotas.list baremetalsolution.networks.list baremetalsolution.nfsshares.list baremetalsolution.osimages.list baremetalsolution.pods.list baremetalsolution.procurements.list baremetalsolution.skus.list baremetalsolution.snapshotschedulepolicies.list baremetalsolution.sshKeys.list baremetalsolution.storageaggregatepools.list baremetalsolution.volumequotas.list baremetalsolution.volumes.list baremetalsolution.volumesnapshots.list batch.jobs.list batch.locations.list batch.operations.list batch.resourceAllowances.list batch.tasks.list beyondcorp.appConnections.getIamPolicy beyondcorp.appConnections.list beyondcorp.appConnections.setIamPolicy beyondcorp.appConnectors.getIamPolicy beyondcorp.appConnectors.list beyondcorp.appConnectors.setIamPolicy beyondcorp.appGateways.getIamPolicy beyondcorp.appGateways.list beyondcorp.appGateways.setIamPolicy beyondcorp.clientConnectorServices.getIamPolicy beyondcorp.clientConnectorServices.list beyondcorp.clientConnectorServices.setIamPolicy beyondcorp.clientGateways.getIamPolicy beyondcorp.clientGateways.list beyondcorp.clientGateways.setIamPolicy beyondcorp.locations.list beyondcorp.operations.list beyondcorp.partnerTenants.list beyondcorp.proxyConfigs.list beyondcorp.securityGateways.getIamPolicy beyondcorp.securityGateways.list beyondcorp.securityGateways.setIamPolicy beyondcorp.sgApplications.getIamPolicy beyondcorp.sgApplications.list beyondcorp.sgApplications.setIamPolicy beyondcorp.subscriptions.list biglake.catalogs.list biglake.databases.list biglake.locks.list biglake.tables.list bigquery.capacityCommitments.list bigquery.connections.getIamPolicy bigquery.connections.list bigquery.connections.setIamPolicy bigquery.dataPolicies.getIamPolicy bigquery.dataPolicies.list bigquery.dataPolicies.setIamPolicy bigquery.datasets.getIamPolicy bigquery.datasets.setIamPolicy bigquery.jobs.list bigquery.models.list bigquery.reservationAssignments.list bigquery.reservations.list bigquery.routines.list bigquery.rowAccessPolicies.getIamPolicy bigquery.rowAccessPolicies.list bigquery.rowAccessPolicies.setIamPolicy bigquery.savedqueries.list bigquery.tables.getIamPolicy bigquery.tables.list bigquery.tables.setIamPolicy bigquerymigration.subtasks.list bigquerymigration.workflows.list bigtable.appProfiles.list bigtable.authorizedViews.getIamPolicy bigtable.authorizedViews.list bigtable.authorizedViews.setIamPolicy bigtable.backups.getIamPolicy bigtable.backups.list bigtable.backups.setIamPolicy bigtable.clusters.list bigtable.hotTablets.list bigtable.instances.getIamPolicy bigtable.instances.list bigtable.instances.setIamPolicy bigtable.keyvisualizer.list bigtable.locations.list bigtable.logicalViews.getIamPolicy bigtable.logicalViews.list bigtable.logicalViews.setIamPolicy bigtable.materializedViews.getIamPolicy bigtable.materializedViews.list bigtable.materializedViews.setIamPolicy bigtable.tables.getIamPolicy bigtable.tables.list bigtable.tables.setIamPolicy billing.accounts.getIamPolicy billing.accounts.list billing.accounts.setIamPolicy billing.anomalies.list billing.billingAccountPrices.list billing.billingAccountServices.list billing.billingAccountSkuGroupSkus.list billing.billingAccountSkuGroups.list billing.billingAccountSkus.list billing.budgets.list billing.credits.list billing.resourceAssociations.list billing.subscriptions.list binaryauthorization.attestors.getIamPolicy binaryauthorization.attestors.list binaryauthorization.attestors.setIamPolicy binaryauthorization.continuousValidationConfig.getIamPolicy binaryauthorization.continuousValidationConfig.setIamPolicy binaryauthorization.platformPolicies.list binaryauthorization.policy.getIamPolicy binaryauthorization.policy.setIamPolicy blockchainnodeengine.blockchainNodes.list blockchainnodeengine.locations.list blockchainnodeengine.operations.list blockchainvalidatormanager.blockchainValidatorConfigs.list blockchainvalidatormanager.locations.list blockchainvalidatormanager.operations.list capacityplanner.forecasts.list capacityplanner.usageHistories.list carestudio.patients.list certificatemanager.certissuanceconfigs.list certificatemanager.certmapentries.list certificatemanager.certmaps.list certificatemanager.certs.list certificatemanager.dnsauthorizations.list certificatemanager.locations.list certificatemanager.operations.list certificatemanager.trustconfigs.list chronicle.analyticValues.list chronicle.analytics.list chronicle.collectors.list chronicle.conversations.list chronicle.curatedRuleSetCategories.list chronicle.curatedRuleSetDeployments.list chronicle.curatedRuleSets.list chronicle.curatedRules.list chronicle.dashboardCharts.list chronicle.dashboardQueries.list chronicle.dashboards.list chronicle.dataAccessLabels.list chronicle.dataAccessScopes.list chronicle.dataTableRows.list chronicle.dataTables.list chronicle.dataTaps.list chronicle.enrichmentControls.list chronicle.entities.list chronicle.errorNotificationConfigs.list chronicle.extensionValidationReports.list chronicle.federationGroups.list chronicle.feedSourceTypeSchemas.list chronicle.feeds.list chronicle.findingsRefinementDeployments.list chronicle.findingsRefinements.list chronicle.forwarders.list chronicle.ingestionLogLabels.list chronicle.ingestionLogNamespaces.list chronicle.iocMatches.list chronicle.logTypeSchemas.list chronicle.logTypes.list chronicle.logs.list chronicle.messages.list chronicle.nativeDashboards.list chronicle.operations.list chronicle.parserExtensions.list chronicle.parsers.list chronicle.parsingErrors.list chronicle.referenceLists.list chronicle.retrohunts.list chronicle.ruleDeployments.list chronicle.ruleExecutionErrors.list chronicle.rules.list chronicle.searchQueries.list chronicle.threatCollections.list chronicle.validationErrors.list chronicle.watchlists.list chroniclesm.gcpAssociations.list clientauthconfig.brands.list clientauthconfig.clients.list cloud.locations.list cloudaicompanion.codeRepositoryIndexes.list cloudaicompanion.codeToolsSettings.list cloudaicompanion.dataSharingWithGoogleSettings.list cloudaicompanion.geminiGcpEnablementSettings.list cloudaicompanion.loggingSettings.list cloudaicompanion.operations.list cloudaicompanion.releaseChannelSettings.list cloudaicompanion.repositoryGroups.getIamPolicy cloudaicompanion.repositoryGroups.list cloudaicompanion.repositoryGroups.setIamPolicy cloudaicompanion.topics.getIamPolicy cloudaicompanion.topics.setIamPolicy cloudasset.assets.searchAllResources cloudasset.feeds.list cloudasset.othercloudconnections.list cloudasset.savedqueries.list cloudbuild.builds.list cloudbuild.connections.getIamPolicy cloudbuild.connections.list cloudbuild.connections.setIamPolicy cloudbuild.integrations.list cloudbuild.locations.list cloudbuild.operations.list cloudbuild.repositories.list cloudbuild.workerpools.list cloudcontrolspartner.accessapprovalrequests.list cloudcontrolspartner.customers.list cloudcontrolspartner.violations.list cloudcontrolspartner.workloads.list clouddebugger.breakpoints.list clouddebugger.debuggees.list clouddeploy.automationRuns.list clouddeploy.automations.list clouddeploy.customTargetTypes.getIamPolicy clouddeploy.customTargetTypes.list clouddeploy.customTargetTypes.setIamPolicy clouddeploy.deliveryPipelines.getIamPolicy clouddeploy.deliveryPipelines.list clouddeploy.deliveryPipelines.setIamPolicy clouddeploy.deployPolicies.getIamPolicy clouddeploy.deployPolicies.list clouddeploy.deployPolicies.setIamPolicy clouddeploy.jobRuns.list clouddeploy.locations.list clouddeploy.operations.list clouddeploy.releases.list clouddeploy.rollouts.list clouddeploy.targets.getIamPolicy clouddeploy.targets.list clouddeploy.targets.setIamPolicy cloudfunctions.functions.getIamPolicy cloudfunctions.functions.list cloudfunctions.functions.setIamPolicy cloudfunctions.locations.list cloudfunctions.operations.list cloudjobdiscovery.companies.list cloudkms.cryptoKeyVersions.list cloudkms.cryptoKeys.getIamPolicy cloudkms.cryptoKeys.list cloudkms.cryptoKeys.setIamPolicy cloudkms.ekmConfigs.getIamPolicy cloudkms.ekmConfigs.setIamPolicy cloudkms.ekmConnections.getIamPolicy cloudkms.ekmConnections.list cloudkms.ekmConnections.setIamPolicy cloudkms.importJobs.getIamPolicy cloudkms.importJobs.list cloudkms.importJobs.setIamPolicy cloudkms.keyHandles.list cloudkms.keyRings.getIamPolicy cloudkms.keyRings.list cloudkms.keyRings.setIamPolicy cloudkms.locations.list cloudlocationfinder.cloudLocations.list cloudlocationfinder.locations.list cloudnotifications.activities.list cloudonefs.isiloncloud.com/clusters.list cloudonefs.isiloncloud.com/fileshares.list cloudprivatecatalogproducer.associations.list cloudprivatecatalogproducer.catalogAssociations.list cloudprivatecatalogproducer.catalogs.getIamPolicy cloudprivatecatalogproducer.catalogs.list cloudprivatecatalogproducer.catalogs.setIamPolicy cloudprivatecatalogproducer.producerCatalogs.getIamPolicy cloudprivatecatalogproducer.producerCatalogs.list cloudprivatecatalogproducer.producerCatalogs.setIamPolicy cloudprivatecatalogproducer.products.getIamPolicy cloudprivatecatalogproducer.products.list cloudprivatecatalogproducer.products.setIamPolicy cloudprofiler.profiles.list cloudscheduler.jobs.list cloudscheduler.locations.list cloudsecurityscanner.crawledurls.list cloudsecurityscanner.results.list cloudsecurityscanner.scanruns.list cloudsecurityscanner.scans.list cloudsql.backupRuns.list cloudsql.databases.list cloudsql.instances.list cloudsql.sslCerts.list cloudsql.users.list cloudsupport.accounts.getIamPolicy cloudsupport.accounts.list cloudsupport.accounts.setIamPolicy cloudsupport.techCases.list cloudtasks.locations.list cloudtasks.queues.getIamPolicy cloudtasks.queues.list cloudtasks.queues.setIamPolicy cloudtasks.tasks.list cloudtestservice.devicesession.list cloudtoolresults.executions.list cloudtoolresults.histories.list cloudtoolresults.steps.list cloudtrace.insights.list cloudtrace.tasks.list cloudtrace.traceScopes.list cloudtrace.traces.list cloudtranslate.adaptiveMtDatasets.list cloudtranslate.adaptiveMtFiles.list cloudtranslate.adaptiveMtSentences.list cloudtranslate.customModels.list cloudtranslate.datasets.list cloudtranslate.glossaries.list cloudtranslate.glossaryentries.list cloudtranslate.locations.list cloudtranslate.operations.list cloudvolumesgcp-api.netapp.com/activeDirectories.list cloudvolumesgcp-api.netapp.com/ipRanges.list cloudvolumesgcp-api.netapp.com/jobs.list cloudvolumesgcp-api.netapp.com/regions.list cloudvolumesgcp-api.netapp.com/serviceLevels.list cloudvolumesgcp-api.netapp.com/snapshots.list cloudvolumesgcp-api.netapp.com/volumereplication.list cloudvolumesgcp-api.netapp.com/volumes.list commerceagreementpublishing.agreements.list commerceagreementpublishing.documents.list commercebusinessenablement.operations.list commercebusinessenablement.partnerAccounts.list commercebusinessenablement.refunds.list commercebusinessenablement.resellerDiscountOffers.list commercebusinessenablement.resellerPrivateOfferPlans.list commercebusinessenablement.resellerRestrictions.list commerceoffercatalog.agreements.list commerceoffercatalog.documents.list commerceorggovernance.collectionRequestApprovals.list commerceorggovernance.collections.list commerceorggovernance.populateCollectionJobs.list commerceorggovernance.services.list commerceprice.events.list commerceprice.privateoffers.list composer.dags.list composer.environments.list composer.imageversions.list composer.operations.list composer.userworkloadsconfigmaps.list composer.userworkloadssecrets.list compute.acceleratorTypes.list compute.addresses.list compute.autoscalers.list compute.backendBuckets.getIamPolicy compute.backendBuckets.list compute.backendBuckets.setIamPolicy compute.backendServices.getIamPolicy compute.backendServices.list compute.backendServices.setIamPolicy compute.commitments.list compute.crossSiteNetworks.list compute.diskTypes.list compute.disks.getIamPolicy compute.disks.list compute.disks.setIamPolicy compute.externalVpnGateways.list compute.firewallPolicies.getIamPolicy compute.firewallPolicies.list compute.firewallPolicies.setIamPolicy compute.firewalls.list compute.forwardingRules.list compute.futureReservations.getIamPolicy compute.futureReservations.list compute.futureReservations.setIamPolicy compute.globalAddresses.list compute.globalForwardingRules.list compute.globalNetworkEndpointGroups.list compute.globalOperations.getIamPolicy compute.globalOperations.list compute.globalOperations.setIamPolicy compute.globalPublicDelegatedPrefixes.list compute.healthChecks.list compute.httpHealthChecks.list compute.httpsHealthChecks.list compute.images.getIamPolicy compute.images.list compute.images.setIamPolicy compute.instanceGroupManagers.list compute.instanceGroups.list compute.instanceTemplates.getIamPolicy compute.instanceTemplates.list compute.instanceTemplates.setIamPolicy compute.instances.getIamPolicy compute.instances.list compute.instances.setIamPolicy compute.instantSnapshots.getIamPolicy compute.instantSnapshots.list compute.instantSnapshots.setIamPolicy compute.interconnectAttachmentGroups.list compute.interconnectAttachments.list compute.interconnectGroups.list compute.interconnectLocations.list compute.interconnectRemoteLocations.list compute.interconnects.list compute.licenseCodes.getIamPolicy compute.licenseCodes.list compute.licenseCodes.setIamPolicy compute.licenses.getIamPolicy compute.licenses.list compute.licenses.setIamPolicy compute.machineImages.getIamPolicy compute.machineImages.list compute.machineImages.setIamPolicy compute.machineTypes.list compute.multiMig.list compute.networkAttachments.getIamPolicy compute.networkAttachments.list compute.networkAttachments.setIamPolicy compute.networkEdgeSecurityServices.list compute.networkEndpointGroups.list compute.networkProfiles.list compute.networks.list compute.nodeGroups.getIamPolicy compute.nodeGroups.list compute.nodeGroups.setIamPolicy compute.nodeTemplates.getIamPolicy compute.nodeTemplates.list compute.nodeTemplates.setIamPolicy compute.nodeTypes.list compute.packetMirrorings.list compute.previewFeatures.list compute.publicAdvertisedPrefixes.list compute.publicDelegatedPrefixes.list compute.regionBackendServices.getIamPolicy compute.regionBackendServices.list compute.regionBackendServices.setIamPolicy compute.regionFirewallPolicies.getIamPolicy compute.regionFirewallPolicies.list compute.regionFirewallPolicies.setIamPolicy compute.regionHealthCheckServices.list compute.regionHealthChecks.list compute.regionNetworkEndpointGroups.list compute.regionNotificationEndpoints.list compute.regionOperations.getIamPolicy compute.regionOperations.list compute.regionOperations.setIamPolicy compute.regionSecurityPolicies.list compute.regionSslCertificates.list compute.regionSslPolicies.list compute.regionTargetHttpProxies.list compute.regionTargetHttpsProxies.list compute.regionTargetTcpProxies.list compute.regionUrlMaps.list compute.regions.list compute.reservationBlocks.list compute.reservations.list compute.resourcePolicies.getIamPolicy compute.resourcePolicies.list compute.resourcePolicies.setIamPolicy compute.routers.list compute.routes.list compute.securityPolicies.list compute.serviceAttachments.getIamPolicy compute.serviceAttachments.list compute.serviceAttachments.setIamPolicy compute.snapshots.getIamPolicy compute.snapshots.list compute.snapshots.setIamPolicy compute.sslCertificates.list compute.sslPolicies.list compute.storagePools.getIamPolicy compute.storagePools.list compute.storagePools.setIamPolicy compute.subnetworks.getIamPolicy compute.subnetworks.list compute.subnetworks.setIamPolicy compute.targetGrpcProxies.list compute.targetHttpProxies.list compute.targetHttpsProxies.list compute.targetInstances.list compute.targetPools.list compute.targetSslProxies.list compute.targetTcpProxies.list compute.targetVpnGateways.list compute.urlMaps.list compute.vpnGateways.list compute.vpnTunnels.list compute.wireGroups.list compute.zoneOperations.getIamPolicy compute.zoneOperations.list compute.zoneOperations.setIamPolicy compute.zones.list confidentialcomputing.locations.list config.deployments.getIamPolicy config.deployments.list config.deployments.setIamPolicy config.locations.list config.operations.list config.previews.list config.resourcechanges.list config.resourcedrifts.list config.resources.list config.revisions.list config.terraformversions.list configdelivery.fleetPackages.list configdelivery.locations.list configdelivery.operations.list configdelivery.releases.list configdelivery.resourceBundles.list configdelivery.rollouts.list connectors.actions.list connectors.connections.getIamPolicy connectors.connections.list connectors.connections.setIamPolicy connectors.connectors.list connectors.customConnectorVersions.getIamPolicy connectors.customConnectorVersions.list connectors.customConnectorVersions.setIamPolicy connectors.customConnectors.getIamPolicy connectors.customConnectors.list connectors.customConnectors.setIamPolicy connectors.endpointAttachments.getIamPolicy connectors.endpointAttachments.list connectors.endpointAttachments.setIamPolicy connectors.entities.list connectors.entityTypes.list connectors.eventSubscriptions.list connectors.eventtypes.list connectors.locations.list connectors.managedZones.getIamPolicy connectors.managedZones.list connectors.managedZones.setIamPolicy connectors.operations.list connectors.providers.list connectors.versions.list consumerprocurement.accounts.list consumerprocurement.consents.list consumerprocurement.entitlements.list consumerprocurement.events.list consumerprocurement.freeTrials.list consumerprocurement.orderAttributions.list consumerprocurement.orders.list contactcenteraiplatform.contactCenters.list contactcenteraiplatform.locations.list contactcenteraiplatform.operations.list contactcenterinsights.analyses.list contactcenterinsights.analysisRules.list contactcenterinsights.assessmentRules.list contactcenterinsights.assessments.list contactcenterinsights.authorizedAnalyses.list contactcenterinsights.authorizedConversations.list contactcenterinsights.authorizedFeedbackLabels.list contactcenterinsights.authorizedOperations.list contactcenterinsights.authorizedViewSets.list contactcenterinsights.authorizedViews.getIamPolicy contactcenterinsights.authorizedViews.list contactcenterinsights.authorizedViews.setIamPolicy contactcenterinsights.conversations.list contactcenterinsights.datasets.list contactcenterinsights.faqEntries.list contactcenterinsights.faqModels.list contactcenterinsights.feedbackLabels.list contactcenterinsights.issueModels.list contactcenterinsights.issues.list contactcenterinsights.notes.list contactcenterinsights.operations.list contactcenterinsights.phraseMatchers.list contactcenterinsights.qaQuestionTags.list contactcenterinsights.qaQuestions.list contactcenterinsights.qaScorecardRevisions.list contactcenterinsights.qaScorecards.list contactcenterinsights.views.list contactcenterinsights.visibilityLabels.list container.apiServices.list container.auditSinks.list container.backendConfigs.list container.bindings.list container.certificateSigningRequests.list container.clusterRoleBindings.list container.clusterRoles.list container.clusters.list container.componentStatuses.list container.configMaps.list container.controllerRevisions.list container.cronJobs.list container.csiDrivers.list container.csiNodeInfos.list container.csiNodes.list container.customResourceDefinitions.list container.daemonSets.list container.deployments.list container.endpointSlices.list container.endpoints.list container.events.list container.frontendConfigs.list container.horizontalPodAutoscalers.list container.ingresses.list container.initializerConfigurations.list container.jobs.list container.leases.list container.limitRanges.list container.localSubjectAccessReviews.list container.managedCertificates.list container.mutatingWebhookConfigurations.list container.namespaces.list container.networkPolicies.list container.nodes.list container.operations.list container.persistentVolumeClaims.list container.persistentVolumes.list container.petSets.list container.podDisruptionBudgets.list container.podPresets.list container.podSecurityPolicies.list container.podTemplates.list container.pods.list container.priorityClasses.list container.replicaSets.list container.replicationControllers.list container.resourceQuotas.list container.roleBindings.list container.roles.list container.runtimeClasses.list container.scheduledJobs.list container.selfSubjectAccessReviews.list container.serviceAccounts.list container.services.list container.statefulSets.list container.storageClasses.list container.storageStates.list container.storageVersionMigrations.list container.subjectAccessReviews.list container.thirdPartyObjects.list container.thirdPartyResources.list container.updateInfos.list container.validatingWebhookConfigurations.list container.volumeAttachments.list container.volumeSnapshotClasses.list container.volumeSnapshotContents.list container.volumeSnapshots.list containeranalysis.notes.getIamPolicy containeranalysis.notes.list containeranalysis.notes.setIamPolicy containeranalysis.occurrences.getIamPolicy containeranalysis.occurrences.list containeranalysis.occurrences.setIamPolicy containersecurity.clusterSummaries.list containersecurity.findings.list containersecurity.locations.list contentwarehouse.corpora.list contentwarehouse.documentSchemas.list contentwarehouse.documents.getIamPolicy contentwarehouse.documents.list contentwarehouse.documents.setIamPolicy contentwarehouse.ruleSets.list contentwarehouse.synonymSets.list databasecenter.* databasecenter.databaseGroups.list databasecenter.fleetHealthStats.list databasecenter.fleetStats.list databasecenter.locations.list databasecenter.products.list databasecenter.userLabels.list databasecenter.userTags.list databaseinsights.locations.list databasesconsole.locations.list databasesconsole.operations.list databasesconsole.studioQueries.list datacatalog.categories.getIamPolicy datacatalog.categories.setIamPolicy datacatalog.entries.getIamPolicy datacatalog.entries.list datacatalog.entries.setIamPolicy datacatalog.entryGroups.getIamPolicy datacatalog.entryGroups.list datacatalog.entryGroups.setIamPolicy datacatalog.operations.list datacatalog.relationships.list datacatalog.tagTemplates.getIamPolicy datacatalog.tagTemplates.setIamPolicy datacatalog.taxonomies.getIamPolicy datacatalog.taxonomies.list datacatalog.taxonomies.setIamPolicy dataconnectors.connectors.getIamPolicy dataconnectors.connectors.list dataconnectors.connectors.setIamPolicy dataconnectors.locations.list dataconnectors.operations.list dataflow.jobs.list dataflow.messages.list dataflow.snapshots.list dataform.commentThreads.list dataform.comments.list dataform.compilationResults.list dataform.locations.list dataform.releaseConfigs.list dataform.repositories.getIamPolicy dataform.repositories.list dataform.repositories.setIamPolicy dataform.workflowConfigs.list dataform.workflowInvocations.list dataform.workspaces.getIamPolicy dataform.workspaces.list dataform.workspaces.setIamPolicy datafusion.artifacts.list datafusion.instances.getIamPolicy datafusion.instances.list datafusion.instances.setIamPolicy datafusion.locations.list datafusion.namespaces.getIamPolicy datafusion.namespaces.list datafusion.namespaces.setIamPolicy datafusion.operations.list datafusion.pipelineConnections.list datafusion.pipelines.list datafusion.profiles.list datafusion.secureKeys.list datalabeling.annotateddatasets.list datalabeling.annotationspecsets.list datalabeling.dataitems.list datalabeling.datasets.list datalabeling.examples.list datalabeling.instructions.list datalabeling.operations.list datalineage.events.list datalineage.processes.list datalineage.runs.list datamigration.connectionprofiles.getIamPolicy datamigration.connectionprofiles.list datamigration.connectionprofiles.setIamPolicy datamigration.conversionworkspaces.getIamPolicy datamigration.conversionworkspaces.list datamigration.conversionworkspaces.setIamPolicy datamigration.locations.list datamigration.mappingrules.getIamPolicy datamigration.mappingrules.setIamPolicy datamigration.migrationjobs.getIamPolicy datamigration.migrationjobs.list datamigration.migrationjobs.setIamPolicy datamigration.objects.list datamigration.operations.list datamigration.privateconnections.getIamPolicy datamigration.privateconnections.list datamigration.privateconnections.setIamPolicy datapipelines.jobs.list datapipelines.pipelines.list dataplex.aspectTypes.getIamPolicy dataplex.aspectTypes.list dataplex.aspectTypes.setIamPolicy dataplex.assetActions.list dataplex.assets.getIamPolicy dataplex.assets.list dataplex.assets.setIamPolicy dataplex.content.getIamPolicy dataplex.content.list dataplex.content.setIamPolicy dataplex.dataAttributeBindings.getIamPolicy dataplex.dataAttributeBindings.list dataplex.dataAttributeBindings.setIamPolicy dataplex.dataAttributes.getIamPolicy dataplex.dataAttributes.list dataplex.dataAttributes.setIamPolicy dataplex.dataTaxonomies.getIamPolicy dataplex.dataTaxonomies.list dataplex.dataTaxonomies.setIamPolicy dataplex.datascans.getIamPolicy dataplex.datascans.list dataplex.datascans.setIamPolicy dataplex.encryptionConfig.list dataplex.entities.list dataplex.entries.list dataplex.entryGroups.getIamPolicy dataplex.entryGroups.list dataplex.entryGroups.setIamPolicy dataplex.entryTypes.getIamPolicy dataplex.entryTypes.list dataplex.entryTypes.setIamPolicy dataplex.environments.getIamPolicy dataplex.environments.list dataplex.environments.setIamPolicy dataplex.glossaries.getIamPolicy dataplex.glossaries.list dataplex.glossaries.setIamPolicy dataplex.glossaryCategories.list dataplex.glossaryTerms.list dataplex.lakeActions.list dataplex.lakes.getIamPolicy dataplex.lakes.list dataplex.lakes.setIamPolicy dataplex.locations.list dataplex.metadataJobs.list dataplex.operations.list dataplex.partitions.list dataplex.tasks.getIamPolicy dataplex.tasks.list dataplex.tasks.setIamPolicy dataplex.zoneActions.list dataplex.zones.getIamPolicy dataplex.zones.list dataplex.zones.setIamPolicy dataproc.agents.list dataproc.autoscalingPolicies.getIamPolicy dataproc.autoscalingPolicies.list dataproc.autoscalingPolicies.setIamPolicy dataproc.batches.list dataproc.clusters.getIamPolicy dataproc.clusters.list dataproc.clusters.setIamPolicy dataproc.jobs.getIamPolicy dataproc.jobs.list dataproc.jobs.setIamPolicy dataproc.operations.getIamPolicy dataproc.operations.list dataproc.operations.setIamPolicy dataproc.sessionTemplates.list dataproc.sessions.list dataproc.workflowTemplates.getIamPolicy dataproc.workflowTemplates.list dataproc.workflowTemplates.setIamPolicy dataprocessing.datasources.list dataprocessing.featurecontrols.list dataprocessing.groupcontrols.list dataprocrm.locations.list dataprocrm.nodePools.list dataprocrm.nodes.list dataprocrm.operations.list dataprocrm.workloads.list datastore.backupSchedules.list datastore.backups.list datastore.databases.list datastore.entities.list datastore.indexes.list datastore.keyVisualizerScans.list datastore.locations.list datastore.namespaces.list datastore.operations.list datastore.statistics.list datastore.userCreds.list datastream.connectionProfiles.getIamPolicy datastream.connectionProfiles.list datastream.connectionProfiles.setIamPolicy datastream.locations.list datastream.objects.list datastream.operations.list datastream.privateConnections.getIamPolicy datastream.privateConnections.list datastream.privateConnections.setIamPolicy datastream.routes.getIamPolicy datastream.routes.list datastream.routes.setIamPolicy datastream.streams.getIamPolicy datastream.streams.list datastream.streams.setIamPolicy datastudio.datasources.getIamPolicy datastudio.datasources.setIamPolicy datastudio.reports.getIamPolicy datastudio.reports.setIamPolicy datastudio.workspaces.getIamPolicy datastudio.workspaces.setIamPolicy deploymentmanager.compositeTypes.list deploymentmanager.deployments.getIamPolicy deploymentmanager.deployments.list deploymentmanager.deployments.setIamPolicy deploymentmanager.manifests.list deploymentmanager.operations.list deploymentmanager.resources.list deploymentmanager.typeProviders.list deploymentmanager.types.list designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.list designcenter.applications.list designcenter.catalogTemplateRevisions.list designcenter.catalogTemplates.list designcenter.catalogs.list designcenter.components.list designcenter.connections.list designcenter.locations.list designcenter.operations.list designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.list designcenter.shares.list designcenter.spaces.getIamPolicy designcenter.spaces.list designcenter.spaces.setIamPolicy developerconnect.accountConnectors.list developerconnect.connections.list developerconnect.gitRepositoryLinks.list developerconnect.locations.list developerconnect.operations.list developerconnect.providers.list developerconnect.users.list devicestreaming.deviceSessions.list dialogflow.agents.list dialogflow.answerrecords.list dialogflow.callMatchers.list dialogflow.changelogs.list dialogflow.contexts.list dialogflow.conversationDatasets.list dialogflow.conversationModels.list dialogflow.conversationProfiles.list dialogflow.conversations.list dialogflow.deployments.list dialogflow.documents.list dialogflow.entityTypes.list dialogflow.environments.list dialogflow.examples.list dialogflow.experiments.list dialogflow.flows.list dialogflow.generators.list dialogflow.integrations.list dialogflow.intents.list dialogflow.knowledgeBases.list dialogflow.messages.list dialogflow.modelEvaluations.list dialogflow.pages.list dialogflow.participants.list dialogflow.phoneNumberOrders.list dialogflow.phoneNumbers.list dialogflow.playbooks.list dialogflow.securitySettings.list dialogflow.sessionEntityTypes.list dialogflow.smartMessagingEntries.list dialogflow.testcases.list dialogflow.tools.list dialogflow.transitionRouteGroups.list dialogflow.versions.list dialogflow.webhooks.list discoveryengine.agents.list discoveryengine.assistants.list discoveryengine.branches.list discoveryengine.cmekConfigs.list discoveryengine.collections.list discoveryengine.connectorRuns.list discoveryengine.controls.list discoveryengine.conversations.list discoveryengine.dataStores.list discoveryengine.documents.list discoveryengine.engines.list discoveryengine.evaluations.list discoveryengine.identityMappingStores.list discoveryengine.models.list discoveryengine.notebooks.getIamPolicy discoveryengine.notebooks.list discoveryengine.notebooks.setIamPolicy discoveryengine.operations.list discoveryengine.sampleQueries.list discoveryengine.sampleQuerySets.list discoveryengine.schemas.list discoveryengine.servingConfigs.list discoveryengine.sessions.list discoveryengine.targetSites.list dlp.analyzeRiskTemplates.list dlp.columnDataProfiles.list dlp.connections.list dlp.deidentifyTemplates.list dlp.estimates.list dlp.fileStoreProfiles.list dlp.inspectFindings.list dlp.inspectTemplates.list dlp.jobTriggers.list dlp.jobs.list dlp.locations.list dlp.projectDataProfiles.list dlp.storedInfoTypes.list dlp.subscriptions.list dlp.tableDataProfiles.list dns.changes.list dns.dnsKeys.list dns.managedZoneOperations.list dns.managedZones.getIamPolicy dns.managedZones.list dns.managedZones.setIamPolicy dns.policies.list dns.resourceRecordSets.list dns.responsePolicies.list dns.responsePolicyRules.list documentai.dataLabelingJobs.list documentai.evaluations.list documentai.labelerPools.list documentai.locations.list documentai.processorTypes.list documentai.processorVersions.list documentai.processors.list domains.locations.list domains.operations.list domains.registrations.getIamPolicy domains.registrations.list domains.registrations.setIamPolicy earthengine.assets.getIamPolicy earthengine.assets.list earthengine.assets.setIamPolicy earthengine.operations.list edgecontainer.clusters.getIamPolicy edgecontainer.clusters.list edgecontainer.clusters.setIamPolicy edgecontainer.locations.list edgecontainer.machines.getIamPolicy edgecontainer.machines.list edgecontainer.machines.setIamPolicy edgecontainer.nodePools.getIamPolicy edgecontainer.nodePools.list edgecontainer.nodePools.setIamPolicy edgecontainer.operations.list edgecontainer.vpnConnections.getIamPolicy edgecontainer.vpnConnections.list edgecontainer.vpnConnections.setIamPolicy edgenetwork.interconnectAttachments.getIamPolicy edgenetwork.interconnectAttachments.list edgenetwork.interconnectAttachments.setIamPolicy edgenetwork.interconnects.getIamPolicy edgenetwork.interconnects.list edgenetwork.interconnects.setIamPolicy edgenetwork.locations.list edgenetwork.networks.getIamPolicy edgenetwork.networks.list edgenetwork.networks.setIamPolicy edgenetwork.operations.list edgenetwork.routers.getIamPolicy edgenetwork.routers.list edgenetwork.routers.setIamPolicy edgenetwork.routes.list edgenetwork.subnetworks.getIamPolicy edgenetwork.subnetworks.list edgenetwork.subnetworks.setIamPolicy edgenetwork.zones.list enterpriseknowledgegraph.entityReconciliationJobs.list enterprisepurchasing.gcveCuds.list enterprisepurchasing.gcveNodePricingInfo.list enterprisepurchasing.locations.list enterprisepurchasing.operations.list errorreporting.applications.list errorreporting.errorEvents.list errorreporting.groups.list essentialcontacts.contacts.list eventarc.channelConnections.getIamPolicy eventarc.channelConnections.list eventarc.channelConnections.setIamPolicy eventarc.channels.getIamPolicy eventarc.channels.list eventarc.channels.setIamPolicy eventarc.enrollments.getIamPolicy eventarc.enrollments.list eventarc.enrollments.setIamPolicy eventarc.googleApiSources.getIamPolicy eventarc.googleApiSources.list eventarc.googleApiSources.setIamPolicy eventarc.kafkaSources.getIamPolicy eventarc.kafkaSources.list eventarc.kafkaSources.setIamPolicy eventarc.locations.list eventarc.messageBuses.getIamPolicy eventarc.messageBuses.list eventarc.messageBuses.setIamPolicy eventarc.operations.list eventarc.pipelines.getIamPolicy eventarc.pipelines.list eventarc.pipelines.setIamPolicy eventarc.providers.list eventarc.triggers.getIamPolicy eventarc.triggers.list eventarc.triggers.setIamPolicy fcmdata.deliverydata.list file.backups.list file.instances.list file.locations.list file.operations.list financialservices.locations.list financialservices.operations.list financialservices.v1backtests.list financialservices.v1datasets.list financialservices.v1engineconfigs.list financialservices.v1engineversions.list financialservices.v1instances.list financialservices.v1models.list financialservices.v1predictions.list firebase.clients.list firebase.links.list firebase.playLinks.list firebaseabt.experiments.list firebaseappdistro.groups.list firebaseappdistro.releases.list firebaseappdistro.testers.list firebasecrashlytics.issues.list firebasedatabase.instances.list firebasedataconnect.connectorRevisions.list firebasedataconnect.connectors.list firebasedataconnect.locations.list firebasedataconnect.operations.list firebasedataconnect.schemaRevisions.list firebasedataconnect.schemas.list firebasedataconnect.services.list firebasedynamiclinks.destinations.list firebasedynamiclinks.domains.list firebasedynamiclinks.links.list firebaseextensions.configs.list firebaseextensionspublisher.extensions.list firebasehosting.sites.list firebaseinappmessaging.campaigns.list firebasemessagingcampaigns.campaigns.list firebaseml.models.list firebaseml.modelversions.list firebasenotifications.messages.list firebaserules.releases.list firebaserules.rulesets.list firebasestorage.buckets.list fleetengine.deliveryvehicles.list fleetengine.tasks.list fleetengine.vehicles.list gcp.redisenterprise.com/databases.list gcp.redisenterprise.com/subscriptions.list gdchardwaremanagement.changeLogEntries.list gdchardwaremanagement.comments.list gdchardwaremanagement.hardware.list gdchardwaremanagement.hardwareGroups.list gdchardwaremanagement.locations.list gdchardwaremanagement.operations.list gdchardwaremanagement.orders.list gdchardwaremanagement.sites.list gdchardwaremanagement.skus.list gdchardwaremanagement.zones.list geminicloudassist.investigationRevisions.list geminicloudassist.investigations.getIamPolicy geminicloudassist.investigations.list geminicloudassist.investigations.setIamPolicy geminicloudassist.locations.list geminicloudassist.operations.list genomics.datasets.getIamPolicy genomics.datasets.list genomics.datasets.setIamPolicy genomics.operations.list gkebackup.backupChannels.list gkebackup.backupPlanBindings.list gkebackup.backupPlans.getIamPolicy gkebackup.backupPlans.list gkebackup.backupPlans.setIamPolicy gkebackup.backups.list gkebackup.locations.list gkebackup.operations.list gkebackup.restoreChannels.list gkebackup.restorePlanBindings.list gkebackup.restorePlans.getIamPolicy gkebackup.restorePlans.list gkebackup.restorePlans.setIamPolicy gkebackup.restores.list gkebackup.volumeBackups.list gkebackup.volumeRestores.list gkehub.features.getIamPolicy gkehub.features.list gkehub.features.setIamPolicy gkehub.locations.list gkehub.membershipbindings.list gkehub.membershipfeatures.list gkehub.memberships.getIamPolicy gkehub.memberships.list gkehub.memberships.setIamPolicy gkehub.namespaces.list gkehub.operations.list gkehub.rbacrolebindings.list gkehub.scopes.getIamPolicy gkehub.scopes.list gkehub.scopes.setIamPolicy gkemulticloud.attachedClusters.list gkemulticloud.awsClusters.list gkemulticloud.awsNodePools.list gkemulticloud.azureClients.list gkemulticloud.azureClusters.list gkemulticloud.azureNodePools.list gkemulticloud.operations.list gkeonprem.bareMetalAdminClusters.getIamPolicy gkeonprem.bareMetalAdminClusters.list gkeonprem.bareMetalAdminClusters.setIamPolicy gkeonprem.bareMetalClusters.getIamPolicy gkeonprem.bareMetalClusters.list gkeonprem.bareMetalClusters.setIamPolicy gkeonprem.bareMetalNodePools.getIamPolicy gkeonprem.bareMetalNodePools.list gkeonprem.bareMetalNodePools.setIamPolicy gkeonprem.locations.list gkeonprem.operations.list gkeonprem.vmwareAdminClusters.getIamPolicy gkeonprem.vmwareAdminClusters.list gkeonprem.vmwareAdminClusters.setIamPolicy gkeonprem.vmwareClusters.getIamPolicy gkeonprem.vmwareClusters.list gkeonprem.vmwareClusters.setIamPolicy gkeonprem.vmwareNodePools.getIamPolicy gkeonprem.vmwareNodePools.list gkeonprem.vmwareNodePools.setIamPolicy gsuiteaddons.deployments.list healthcare.annotationStores.getIamPolicy healthcare.annotationStores.list healthcare.annotationStores.setIamPolicy healthcare.annotations.list healthcare.attributeDefinitions.list healthcare.consentArtifacts.list healthcare.consentStores.getIamPolicy healthcare.consentStores.list healthcare.consentStores.setIamPolicy healthcare.consents.list healthcare.datasets.getIamPolicy healthcare.datasets.list healthcare.datasets.setIamPolicy healthcare.dicomStores.getIamPolicy healthcare.dicomStores.list healthcare.dicomStores.setIamPolicy healthcare.fhirStores.getIamPolicy healthcare.fhirStores.list healthcare.fhirStores.setIamPolicy healthcare.hl7V2Messages.list healthcare.hl7V2Stores.getIamPolicy healthcare.hl7V2Stores.list healthcare.hl7V2Stores.setIamPolicy healthcare.locations.list healthcare.operations.list healthcare.userDataMappings.list iam.denypolicies.list iam.googleapis.com/oauthClientCredentials.list iam.googleapis.com/oauthClients.list iam.googleapis.com/workforcePoolProviderKeys.list iam.googleapis.com/workforcePoolProviders.list iam.googleapis.com/workforcePools.getIamPolicy iam.googleapis.com/workforcePools.list iam.googleapis.com/workforcePools.setIamPolicy iam.googleapis.com/workloadIdentityPoolProviderKeys.list iam.googleapis.com/workloadIdentityPoolProviders.list iam.googleapis.com/workloadIdentityPools.list iam.policybindings.list iam.principalaccessboundarypolicies.list iam.roles.get iam.roles.list iam.serviceAccountKeys.list iam.serviceAccounts.get iam.serviceAccounts.getIamPolicy iam.serviceAccounts.list iam.serviceAccounts.setIamPolicy iap.tunnel.* iap.tunnel.getIamPolicy iap.tunnel.setIamPolicy iap.tunnelDestGroups.getIamPolicy iap.tunnelDestGroups.list iap.tunnelDestGroups.setIamPolicy iap.tunnelInstances.getIamPolicy iap.tunnelInstances.setIamPolicy iap.tunnelLocations.* iap.tunnelLocations.getIamPolicy iap.tunnelLocations.setIamPolicy iap.tunnelZones.* iap.tunnelZones.getIamPolicy iap.tunnelZones.setIamPolicy iap.web.getIamPolicy iap.web.setIamPolicy iap.webServiceVersions.getIamPolicy iap.webServiceVersions.setIamPolicy iap.webServices.getIamPolicy iap.webServices.setIamPolicy iap.webTypes.getIamPolicy iap.webTypes.setIamPolicy identitytoolkit.tenants.getIamPolicy identitytoolkit.tenants.list identitytoolkit.tenants.setIamPolicy ids.endpoints.getIamPolicy ids.endpoints.list ids.endpoints.setIamPolicy ids.locations.list ids.operations.list integrations.apigeeAuthConfigs.list integrations.apigeeCertificates.list integrations.apigeeExecutions.list integrations.apigeeIntegrationVers.list integrations.apigeeIntegrations.list integrations.apigeeSfdcChannels.list integrations.apigeeSfdcInstances.list integrations.apigeeSuspensions.list integrations.authConfigs.list integrations.certificates.list integrations.executions.list integrations.integrationVersions.list integrations.integrations.list integrations.securityAuthConfigs.list integrations.securityExecutions.list integrations.securityIntegTempVers.list integrations.securityIntegrationVers.list integrations.securityIntegrations.list integrations.sfdcChannels.list integrations.sfdcInstances.list integrations.suspensions.list integrations.testCases.list issuerswitch.accountManagerTransactions.list issuerswitch.complaintTransactions.list issuerswitch.financialTransactions.list issuerswitch.mandateTransactions.list issuerswitch.metadataTransactions.list issuerswitch.operations.list issuerswitch.ruleMetadata.list issuerswitch.ruleMetadataValues.list issuerswitch.rules.list krmapihosting.krmApiHosts.getIamPolicy krmapihosting.krmApiHosts.list krmapihosting.krmApiHosts.setIamPolicy krmapihosting.locations.list krmapihosting.operations.list licensemanager.configurations.list licensemanager.instances.list licensemanager.locations.list licensemanager.operations.list licensemanager.products.list lifesciences.operations.list livestream.assets.list livestream.channels.list livestream.clips.list livestream.dvrSessions.list livestream.events.list livestream.inputs.list livestream.locations.list livestream.operations.list logging.buckets.list logging.exclusions.list logging.links.list logging.locations.list logging.logEntries.list logging.logMetrics.list logging.logScopes.list logging.logServiceIndexes.list logging.logServices.list logging.logs.list logging.notificationRules.list logging.operations.list logging.privateLogEntries.list logging.queries.usePrivate logging.sinks.list logging.views.getIamPolicy logging.views.list logging.views.setIamPolicy looker.backups.list looker.instances.list looker.locations.list looker.operations.list lustre.instances.list lustre.locations.list lustre.operations.list maintenance.locations.list maintenance.resourceMaintenances.list managedflink.deployments.list managedflink.jobs.list managedflink.locations.list managedflink.operations.list managedflink.sessions.list managedidentities.backups.getIamPolicy managedidentities.backups.list managedidentities.backups.setIamPolicy managedidentities.domains.getIamPolicy managedidentities.domains.list managedidentities.domains.setIamPolicy managedidentities.locations.list managedidentities.operations.list managedidentities.peerings.getIamPolicy managedidentities.peerings.list managedidentities.peerings.setIamPolicy managedidentities.sqlintegrations.list managedkafka.clusters.list managedkafka.connectClusters.list managedkafka.connectors.list managedkafka.consumerGroups.list managedkafka.contexts.list managedkafka.locations.list managedkafka.operations.list managedkafka.schemaRegistries.list managedkafka.subjects.list managedkafka.topics.list managedkafka.versions.list mapsadmin.clientMaps.list mapsadmin.clientStyleSheetSnapshots.list mapsadmin.clientStyles.list mapsadmin.mapViews.list mapsadmin.styleSnapshots.list mapsanalytics.metricMetadata.list mapsplatformdatasets.datasets.list marketplacesolutions.locations.list marketplacesolutions.operations.list marketplacesolutions.powerImages.list marketplacesolutions.powerInstances.list marketplacesolutions.powerNetworks.list marketplacesolutions.powerSshKeys.list marketplacesolutions.powerVolumes.list memcache.instances.list memcache.locations.list memcache.operations.list memorystore.backupCollections.list memorystore.backups.list memorystore.instances.list memorystore.locations.list memorystore.operations.list metastore.backups.getIamPolicy metastore.backups.list metastore.backups.setIamPolicy metastore.databases.getIamPolicy metastore.databases.list metastore.databases.setIamPolicy metastore.federations.getIamPolicy metastore.federations.list metastore.federations.setIamPolicy metastore.imports.list metastore.locations.list metastore.migrations.list metastore.operations.list metastore.services.getIamPolicy metastore.services.list metastore.services.setIamPolicy metastore.tables.getIamPolicy metastore.tables.list metastore.tables.setIamPolicy migrationcenter.assets.list migrationcenter.assetsExportJobs.list migrationcenter.discoveryClients.list migrationcenter.errorFrames.list migrationcenter.groups.list migrationcenter.importDataFiles.list migrationcenter.importJobs.list migrationcenter.locations.list migrationcenter.operations.list migrationcenter.preferenceSets.list migrationcenter.relations.list migrationcenter.reportConfigs.list migrationcenter.reports.list migrationcenter.sources.list ml.jobs.getIamPolicy ml.jobs.list ml.jobs.setIamPolicy ml.locations.list ml.models.getIamPolicy ml.models.list ml.models.setIamPolicy ml.operations.list ml.studies.getIamPolicy ml.studies.list ml.studies.setIamPolicy ml.trials.list ml.versions.list modelarmor.locations.list modelarmor.templates.list monitoring.alertPolicies.list monitoring.dashboards.list monitoring.groups.list monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.list monitoring.notificationChannelDescriptors.list monitoring.notificationChannels.list monitoring.services.list monitoring.slos.list monitoring.snoozes.list monitoring.timeSeries.list monitoring.uptimeCheckConfigs.list netapp.activeDirectories.list netapp.backupPolicies.list netapp.backupVaults.list netapp.backups.list netapp.kmsConfigs.list netapp.locations.list netapp.operations.list netapp.quotaRules.list netapp.replications.list netapp.snapshots.list netapp.storagePools.list netapp.volumes.list networkconnectivity.gatewayAdvertisedRoutes.list networkconnectivity.groups.getIamPolicy networkconnectivity.groups.list networkconnectivity.groups.setIamPolicy networkconnectivity.hubRouteTables.getIamPolicy networkconnectivity.hubRouteTables.list networkconnectivity.hubRouteTables.setIamPolicy networkconnectivity.hubRoutes.getIamPolicy networkconnectivity.hubRoutes.list networkconnectivity.hubRoutes.setIamPolicy networkconnectivity.hubs.getIamPolicy networkconnectivity.hubs.list networkconnectivity.hubs.setIamPolicy networkconnectivity.internalRanges.getIamPolicy networkconnectivity.internalRanges.list networkconnectivity.internalRanges.setIamPolicy networkconnectivity.locations.list networkconnectivity.operations.list networkconnectivity.policyBasedRoutes.getIamPolicy networkconnectivity.policyBasedRoutes.list networkconnectivity.policyBasedRoutes.setIamPolicy networkconnectivity.regionalEndpoints.list networkconnectivity.serviceClasses.list networkconnectivity.serviceConnectionMaps.list networkconnectivity.serviceConnectionPolicies.list networkconnectivity.spokes.getIamPolicy networkconnectivity.spokes.list networkconnectivity.spokes.setIamPolicy networkmanagement.connectivitytests.getIamPolicy networkmanagement.connectivitytests.list networkmanagement.connectivitytests.setIamPolicy networkmanagement.locations.list networkmanagement.operations.list networkmanagement.vpcflowlogsconfigs.list networksecurity.addressGroups.getIamPolicy networksecurity.addressGroups.list networksecurity.addressGroups.setIamPolicy networksecurity.authorizationPolicies.getIamPolicy networksecurity.authorizationPolicies.list networksecurity.authorizationPolicies.setIamPolicy networksecurity.authzPolicies.getIamPolicy networksecurity.authzPolicies.list networksecurity.authzPolicies.setIamPolicy networksecurity.backendAuthenticationConfigs.list networksecurity.clientTlsPolicies.getIamPolicy networksecurity.clientTlsPolicies.list networksecurity.clientTlsPolicies.setIamPolicy networksecurity.firewallEndpointAssociations.list networksecurity.firewallEndpoints.list networksecurity.gatewaySecurityPolicies.list networksecurity.gatewaySecurityPolicyRules.list networksecurity.interceptDeploymentGroups.list networksecurity.interceptDeployments.list networksecurity.interceptEndpointGroupAssociations.list networksecurity.interceptEndpointGroups.list networksecurity.locations.list networksecurity.mirroringDeploymentGroups.list networksecurity.mirroringDeployments.list networksecurity.mirroringEndpointGroupAssociations.list networksecurity.mirroringEndpointGroups.list networksecurity.operations.list networksecurity.partnerSSEGateways.list networksecurity.partnerSSERealms.list networksecurity.sacAttachments.list networksecurity.sacRealms.list networksecurity.securityProfileGroups.list networksecurity.securityProfiles.list networksecurity.serverTlsPolicies.getIamPolicy networksecurity.serverTlsPolicies.list networksecurity.serverTlsPolicies.setIamPolicy networksecurity.sseGatewayReferences.list networksecurity.tlsInspectionPolicies.list networksecurity.urlLists.list networkservices.authzExtensions.list networkservices.endpointPolicies.list networkservices.gateways.list networkservices.grpcRoutes.list networkservices.httpFilters.list networkservices.httpRoutes.list networkservices.httpfilters.getIamPolicy networkservices.httpfilters.list networkservices.httpfilters.setIamPolicy networkservices.lbEdgeExtensions.list networkservices.lbRouteExtensions.list networkservices.lbTrafficExtensions.list networkservices.locations.list networkservices.meshes.list networkservices.operations.list networkservices.route_views.list networkservices.serviceBindings.list networkservices.serviceLbPolicies.list networkservices.tcpRoutes.list networkservices.tlsRoutes.list networkservices.wasmPlugins.list notebooks.environments.getIamPolicy notebooks.environments.list notebooks.environments.setIamPolicy notebooks.executions.getIamPolicy notebooks.executions.list notebooks.executions.setIamPolicy notebooks.instances.getIamPolicy notebooks.instances.list notebooks.instances.setIamPolicy notebooks.locations.list notebooks.operations.list notebooks.runtimes.getIamPolicy notebooks.runtimes.list notebooks.runtimes.setIamPolicy notebooks.schedules.getIamPolicy notebooks.schedules.list notebooks.schedules.setIamPolicy observability.analyticsViews.list ondemandscanning.operations.list opsconfigmonitoring.resourceMetadata.list oracledatabase.autonomousDatabaseBackups.list oracledatabase.autonomousDatabaseCharacterSets.list oracledatabase.autonomousDatabases.list oracledatabase.autonomousDbVersions.list oracledatabase.cloudExadataInfrastructures.list oracledatabase.cloudVmClusters.list oracledatabase.dbNodes.list oracledatabase.dbServers.list oracledatabase.dbSystemShapes.list oracledatabase.entitlements.list oracledatabase.giVersions.list oracledatabase.locations.list oracledatabase.operations.list oracledatabase.systemVersions.list orgpolicy.constraints.list orgpolicy.customConstraints.list orgpolicy.policies.list osconfig.guestPolicies.list osconfig.instanceOSPoliciesCompliances.list osconfig.inventories.list osconfig.locations.list osconfig.operations.list osconfig.osPolicyAssignmentReports.list osconfig.osPolicyAssignments.list osconfig.patchDeployments.list osconfig.patchJobs.list osconfig.policyOrchestrators.list osconfig.upgradeReports.list osconfig.vulnerabilityReports.list parallelstore.instances.list parallelstore.locations.list parallelstore.operations.list parametermanager.locations.list parametermanager.parameterVersions.list parametermanager.parameters.list paymentsresellersubscription.products.list paymentsresellersubscription.promotions.list policyremediatormanager.locations.list policyremediatormanager.operations.list policysimulator.accessPolicySimulationResults.list policysimulator.accessPolicySimulations.list policysimulator.orgPolicyViolations.list policysimulator.orgPolicyViolationsPreviews.list policysimulator.replayResults.list policysimulator.replays.* policysimulator.replays.create policysimulator.replays.get policysimulator.replays.list policysimulator.replays.run privateca.caPools.getIamPolicy privateca.caPools.list privateca.caPools.setIamPolicy privateca.certificateAuthorities.getIamPolicy privateca.certificateAuthorities.list privateca.certificateAuthorities.setIamPolicy privateca.certificateRevocationLists.getIamPolicy privateca.certificateRevocationLists.list privateca.certificateRevocationLists.setIamPolicy privateca.certificateTemplates.getIamPolicy privateca.certificateTemplates.list privateca.certificateTemplates.setIamPolicy privateca.certificates.getIamPolicy privateca.certificates.list privateca.certificates.setIamPolicy privateca.locations.list privateca.operations.list privateca.reusableConfigs.getIamPolicy privateca.reusableConfigs.list privateca.reusableConfigs.setIamPolicy privilegedaccessmanager.entitlements.list privilegedaccessmanager.entitlements.setIamPolicy privilegedaccessmanager.grants.list privilegedaccessmanager.locations.list privilegedaccessmanager.operations.list proximitybeacon.attachments.list proximitybeacon.beacons.getIamPolicy proximitybeacon.beacons.list proximitybeacon.beacons.setIamPolicy proximitybeacon.namespaces.getIamPolicy proximitybeacon.namespaces.list proximitybeacon.namespaces.setIamPolicy pubsub.schemas.getIamPolicy pubsub.schemas.list pubsub.schemas.setIamPolicy pubsub.snapshots.getIamPolicy pubsub.snapshots.list pubsub.snapshots.setIamPolicy pubsub.subscriptions.getIamPolicy pubsub.subscriptions.list pubsub.subscriptions.setIamPolicy pubsub.topics.getIamPolicy pubsub.topics.list pubsub.topics.setIamPolicy pubsublite.operations.list pubsublite.reservations.list pubsublite.subscriptions.list pubsublite.topics.list recaptchaenterprise.firewallpolicies.list recaptchaenterprise.keys.list recaptchaenterprise.relatedaccountgroupmemberships.list recaptchaenterprise.relatedaccountgroups.list recommender.alloydbClusterPerformanceInsights.list recommender.alloydbClusterPerformanceRecommendations.list recommender.alloydbClusterReliabilityInsights.list recommender.alloydbClusterReliabilityRecommendations.list recommender.alloydbInstanceSecurityInsights.list recommender.alloydbInstanceSecurityRecommendations.list recommender.bigqueryCapacityCommitmentsInsights.list recommender.bigqueryCapacityCommitmentsRecommendations.list recommender.bigqueryMaterializedViewInsights.list recommender.bigqueryMaterializedViewRecommendations.list recommender.bigqueryPartitionClusterRecommendations.list recommender.bigqueryTableStatsInsights.list recommender.bigtableClusterPerformanceInsights.list recommender.bigtableClusterPerformanceRecommendations.list recommender.cloudAssetInsights.list recommender.cloudCostGeneralInsights.list recommender.cloudCostGeneralRecommendations.list recommender.cloudDeprecationGeneralInsights.list recommender.cloudDeprecationGeneralRecommendations.list recommender.cloudFunctionsPerformanceInsights.list recommender.cloudFunctionsPerformanceRecommendations.list recommender.cloudManageabilityGeneralInsights.list recommender.cloudManageabilityGeneralRecommendations.list recommender.cloudPerformanceGeneralInsights.list recommender.cloudPerformanceGeneralRecommendations.list recommender.cloudRecentChangeInsights.list recommender.cloudRecentChangeRecommendations.list recommender.cloudReliabilityGeneralInsights.list recommender.cloudReliabilityGeneralRecommendations.list recommender.cloudSecurityGeneralInsights.list recommender.cloudSecurityGeneralRecommendations.list recommender.cloudsqlIdleInstanceRecommendations.list recommender.cloudsqlInstanceActivityInsights.list recommender.cloudsqlInstanceCpuUsageInsights.list recommender.cloudsqlInstanceDiskUsageTrendInsights.list recommender.cloudsqlInstanceMemoryUsageInsights.list recommender.cloudsqlInstanceOomProbabilityInsights.list recommender.cloudsqlInstanceOutOfDiskRecommendations.list recommender.cloudsqlInstancePerformanceInsights.list recommender.cloudsqlInstancePerformanceRecommendations.list recommender.cloudsqlInstanceReliabilityInsights.list recommender.cloudsqlInstanceReliabilityRecommendations.list recommender.cloudsqlInstanceSecurityInsights.list recommender.cloudsqlInstanceSecurityRecommendations.list recommender.cloudsqlInstanceUnderprovisionedCpuUsageInsights.list recommender.cloudsqlInstanceUnderprovisionedMemoryUsageInsights.list recommender.cloudsqlOverprovisionedInstanceRecommendations.list recommender.cloudsqlUnderProvisionedInstanceRecommendations.list recommender.commitmentUtilizationInsights.list recommender.computeAddressIdleResourceInsights.list recommender.computeAddressIdleResourceRecommendations.list recommender.computeDiskIdleResourceInsights.list recommender.computeDiskIdleResourceRecommendations.list recommender.computeFirewallInsights.list recommender.computeImageIdleResourceInsights.list recommender.computeImageIdleResourceRecommendations.list recommender.computeInstanceCpuUsageInsights.list recommender.computeInstanceCpuUsagePredictionInsights.list recommender.computeInstanceCpuUsageTrendInsights.list recommender.computeInstanceGroupManagerCpuUsageInsights.list recommender.computeInstanceGroupManagerCpuUsagePredictionInsights.list recommender.computeInstanceGroupManagerCpuUsageTrendInsights.list recommender.computeInstanceGroupManagerMachineTypeRecommendations.list recommender.computeInstanceGroupManagerMemoryUsageInsights.list recommender.computeInstanceGroupManagerMemoryUsagePredictionInsights.list recommender.computeInstanceIdleResourceRecommendations.list recommender.computeInstanceMachineTypeRecommendations.list recommender.computeInstanceMemoryUsageInsights.list recommender.computeInstanceMemoryUsagePredictionInsights.list recommender.computeInstanceNetworkThroughputInsights.list recommender.containerDiagnosisInsights.list recommender.containerDiagnosisRecommendations.list recommender.costInsights.list recommender.dataflowDiagnosticsInsights.list recommender.errorReportingInsights.list recommender.errorReportingRecommendations.list recommender.firestoreDatabaseFirebaseRulesInsights.list recommender.firestoreDatabaseFirebaseRulesRecommendations.list recommender.firestoreDatabaseReliabilityInsights.list recommender.firestoreDatabaseReliabilityRecommendations.list recommender.gmpGuidedExperienceInsights.list recommender.gmpGuidedExperienceRecommendations.list recommender.gmpProjectManagementInsights.list recommender.gmpProjectManagementRecommendations.list recommender.gmpProjectProductSuggestionsInsights.list recommender.gmpProjectProductSuggestionsRecommendations.list recommender.iamPolicyChangeRiskInsights.list recommender.iamPolicyChangeRiskRecommendations.list recommender.iamPolicyInsights.list recommender.iamPolicyLateralMovementInsights.list recommender.iamPolicyRecommendations.list recommender.iamServiceAccountChangeRiskInsights.list recommender.iamServiceAccountChangeRiskRecommendations.list recommender.iamServiceAccountInsights.list recommender.locations.list recommender.loggingProductSuggestionContainerInsights.list recommender.loggingProductSuggestionContainerRecommendations.list recommender.memorystoreManageabilityInsights.list recommender.memorystoreManageabilityRecommendations.list recommender.memorystorePerformanceInsights.list recommender.memorystorePerformanceRecommendations.list recommender.memorystoreReliabilityInsights.list recommender.memorystoreReliabilityRecommendations.list recommender.memorystoreUtilizationInsights.list recommender.monitoringProductSuggestionComputeInsights.list recommender.monitoringProductSuggestionComputeRecommendations.list recommender.networkAnalyzerCloudSqlInsights.list recommender.networkAnalyzerDynamicRouteInsights.list recommender.networkAnalyzerGkeConnectivityInsights.list recommender.networkAnalyzerGkeIpAddressInsights.list recommender.networkAnalyzerGkeServiceAccountInsights.list recommender.networkAnalyzerIpAddressInsights.list recommender.networkAnalyzerLoadBalancerInsights.list recommender.networkAnalyzerVpcConnectivityInsights.list recommender.orgPolicyInsights.list recommender.orgPolicyRecommendations.list recommender.resourcemanagerProjectChangeRiskInsights.list recommender.resourcemanagerProjectChangeRiskRecommendations.list recommender.resourcemanagerProjectUtilizationInsights.list recommender.resourcemanagerProjectUtilizationRecommendations.list recommender.resourcemanagerServiceLimitInsights.list recommender.resourcemanagerServiceLimitRecommendations.list recommender.runServiceCostInsights.list recommender.runServiceCostRecommendations.list recommender.runServiceIdentityInsights.list recommender.runServiceIdentityRecommendations.list recommender.runServicePerformanceInsights.list recommender.runServicePerformanceRecommendations.list recommender.runServiceSecurityInsights.list recommender.runServiceSecurityRecommendations.list recommender.spannerDatabaseSecurityInsights.list recommender.spannerDatabaseSecurityRecommendations.list recommender.spannerProjectReliabilityInsights.list recommender.spannerProjectReliabilityRecommendations.list recommender.spendBasedCommitmentInsights.list recommender.spendBasedCommitmentRecommendations.list recommender.storageBucketSoftDeleteInsights.list recommender.storageBucketSoftDeleteRecommendations.list recommender.usageCommitmentRecommendations.list redis.backupCollections.list redis.backups.list redis.clusters.list redis.instances.list redis.locations.list redis.operations.list remotebuildexecution.instances.list remotebuildexecution.workerpools.list resourcemanager.folders.getIamPolicy resourcemanager.folders.list resourcemanager.folders.setIamPolicy resourcemanager.hierarchyNodes.listTagBindings resourcemanager.organizations.getIamPolicy resourcemanager.organizations.setIamPolicy resourcemanager.projects.getIamPolicy resourcemanager.projects.list resourcemanager.projects.setIamPolicy resourcemanager.tagHolds.list resourcemanager.tagKeys.getIamPolicy resourcemanager.tagKeys.list resourcemanager.tagKeys.setIamPolicy resourcemanager.tagValues.getIamPolicy resourcemanager.tagValues.list resourcemanager.tagValues.setIamPolicy resourcesettings.settings.list retail.branches.list retail.catalogs.list retail.controls.list retail.experiments.list retail.models.list retail.operations.list retail.products.list retail.servingConfigs.list riskmanager.controlScoreBreakdowns.list riskmanager.operations.list riskmanager.policies.list riskmanager.reports.list rma.collectors.list rma.locations.list rma.operations.list run.configurations.list run.executions.list run.jobs.getIamPolicy run.jobs.list run.jobs.setIamPolicy run.locations.list run.operations.list run.revisions.list run.routes.list run.services.getIamPolicy run.services.list run.services.setIamPolicy run.tasks.list runapps.applications.list runapps.deployments.list runapps.locations.list runapps.operations.list runtimeconfig.configs.getIamPolicy runtimeconfig.configs.list runtimeconfig.configs.setIamPolicy runtimeconfig.operations.list runtimeconfig.variables.getIamPolicy runtimeconfig.variables.list runtimeconfig.variables.setIamPolicy runtimeconfig.waiters.getIamPolicy runtimeconfig.waiters.list runtimeconfig.waiters.setIamPolicy saasservicemgmt.locations.list saasservicemgmt.operations.list saasservicemgmt.releases.list saasservicemgmt.rolloutKinds.list saasservicemgmt.rollouts.list saasservicemgmt.saas.list saasservicemgmt.unitKinds.list saasservicemgmt.unitOperations.list saasservicemgmt.units.list secretmanager.locations.list secretmanager.secrets.getIamPolicy secretmanager.secrets.list secretmanager.secrets.setIamPolicy secretmanager.versions.list securedlandingzone.overwatches.list securesourcemanager.branchRules.list securesourcemanager.instances.getIamPolicy securesourcemanager.instances.list securesourcemanager.instances.setIamPolicy securesourcemanager.locations.list securesourcemanager.operations.list securesourcemanager.repositories.getIamPolicy securesourcemanager.repositories.list securesourcemanager.repositories.setIamPolicy securesourcemanager.sshkeys.list securitycenter.assets.list securitycenter.attackpaths.list securitycenter.bigQueryExports.list securitycenter.compliancesnapshots.list securitycenter.effectivesecurityhealthanalyticscustommodules.list securitycenter.findings.list securitycenter.issues.list securitycenter.muteconfigs.list securitycenter.notificationconfig.list securitycenter.resourcevalueconfigs.list securitycenter.securityhealthanalyticscustommodules.list securitycenter.sources.getIamPolicy securitycenter.sources.list securitycenter.sources.setIamPolicy securitycenter.valuedresources.list securitycenter.vulnerabilitysnapshots.list securitycentermanagement.effectiveEventThreatDetectionCustomModules.list securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list securitycentermanagement.eventThreatDetectionCustomModules.list securitycentermanagement.locations.list securitycentermanagement.securityCenterServices.list securitycentermanagement.securityHealthAnalyticsCustomModules.list securityposture.locations.list securityposture.operations.list securityposture.postureDeployments.list securityposture.postureTemplates.list securityposture.postures.list securityposture.reports.list servicebroker.bindingoperations.list servicebroker.bindings.getIamPolicy servicebroker.bindings.list servicebroker.bindings.setIamPolicy servicebroker.catalogs.getIamPolicy servicebroker.catalogs.list servicebroker.catalogs.setIamPolicy servicebroker.instanceoperations.list servicebroker.instances.getIamPolicy servicebroker.instances.list servicebroker.instances.setIamPolicy serviceconsumermanagement.tenancyu.list servicedirectory.endpoints.getIamPolicy servicedirectory.endpoints.list servicedirectory.endpoints.setIamPolicy servicedirectory.locations.list servicedirectory.namespaces.getIamPolicy servicedirectory.namespaces.list servicedirectory.namespaces.setIamPolicy servicedirectory.services.getIamPolicy servicedirectory.services.list servicedirectory.services.setIamPolicy servicehealth.events.list servicehealth.locations.list servicehealth.organizationEvents.list servicehealth.organizationImpacts.list servicemanagement.services.getIamPolicy servicemanagement.services.list servicemanagement.services.setIamPolicy servicenetworking.operations.list servicesecurityinsights.clusterSecurityInfo.list servicesecurityinsights.securityInfo.list servicesecurityinsights.workloadPolicies.list serviceusage.services.list source.repos.getIamPolicy source.repos.list source.repos.setIamPolicy spanner.backupOperations.list spanner.backupSchedules.getIamPolicy spanner.backupSchedules.list spanner.backupSchedules.setIamPolicy spanner.backups.getIamPolicy spanner.backups.list spanner.backups.setIamPolicy spanner.databaseOperations.list spanner.databaseRoles.list spanner.databases.getIamPolicy spanner.databases.list spanner.databases.setIamPolicy spanner.instanceConfigOperations.list spanner.instanceConfigs.list spanner.instanceOperations.list spanner.instancePartitionOperations.list spanner.instancePartitions.list spanner.instances.getIamPolicy spanner.instances.list spanner.instances.setIamPolicy spanner.sessions.list speakerid.phrases.list speakerid.speakers.list speech.customClasses.list speech.locations.list speech.operations.list speech.phraseSets.list speech.recognizers.list stackdriver.resourceMetadata.list storage.anywhereCaches.list storage.bucketOperations.list storage.buckets.getIamPolicy storage.buckets.list storage.buckets.setIamPolicy storage.folders.list storage.hmacKeys.list storage.managedFolders.getIamPolicy storage.managedFolders.list storage.managedFolders.setIamPolicy storage.multipartUploads.list storage.objects.getIamPolicy storage.objects.list storage.objects.setIamPolicy storageinsights.datasetConfigs.list storageinsights.locations.list storageinsights.operations.list storageinsights.reportConfigs.list storageinsights.reportDetails.list storagetransfer.agentpools.list storagetransfer.jobs.list storagetransfer.operations.list stream.locations.list stream.operations.list stream.streamContents.list stream.streamInstances.list telcoautomation.blueprints.list telcoautomation.deployments.list telcoautomation.edgeSlms.list telcoautomation.hydratedDeployments.list telcoautomation.locations.list telcoautomation.operations.list telcoautomation.orchestrationClusters.list telcoautomation.publicBlueprints.list timeseriesinsights.datasets.list timeseriesinsights.locations.list tpu.acceleratortypes.list tpu.locations.list tpu.nodes.list tpu.operations.list tpu.runtimeversions.list tpu.tensorflowversions.list transcoder.jobTemplates.list transcoder.jobs.list transferappliance.appliances.list transferappliance.locations.list transferappliance.operations.list transferappliance.orders.list transferappliance.savedAddresses.list translationhub.portals.list videostitcher.cdnKeys.list videostitcher.liveAdTagDetails.list videostitcher.liveConfigs.list videostitcher.operations.list videostitcher.slates.list videostitcher.vodAdTagDetails.list videostitcher.vodConfigs.list videostitcher.vodStitchDetails.list visionai.analyses.getIamPolicy visionai.analyses.list visionai.analyses.setIamPolicy visionai.annotations.list visionai.applications.list visionai.assets.list visionai.clusters.getIamPolicy visionai.clusters.list visionai.clusters.setIamPolicy visionai.corpora.list visionai.dataSchemas.list visionai.drafts.list visionai.events.getIamPolicy visionai.events.list visionai.events.setIamPolicy visionai.indexEndpoints.list visionai.indexes.list visionai.instances.list visionai.locations.list visionai.operations.list visionai.operators.getIamPolicy visionai.operators.list visionai.operators.setIamPolicy visionai.processors.list visionai.searchConfigs.list visionai.series.getIamPolicy visionai.series.list visionai.series.setIamPolicy visionai.streams.getIamPolicy visionai.streams.list visionai.streams.setIamPolicy visionai.uistreams.list visualinspection.annotationSets.list visualinspection.annotationSpecs.list visualinspection.annotations.list visualinspection.datasets.list visualinspection.images.list visualinspection.locations.list visualinspection.modelEvaluations.list visualinspection.models.list visualinspection.modules.list visualinspection.operations.list visualinspection.solutionArtifacts.list visualinspection.solutions.list vmmigration.cloneJobs.list vmmigration.cutoverJobs.list vmmigration.datacenterConnectors.list vmmigration.deployments.list vmmigration.groups.list vmmigration.locations.list vmmigration.migratingVms.list vmmigration.operations.list vmmigration.replicationCycles.list vmmigration.sources.list vmmigration.targets.list vmmigration.utilizationReports.list vmwareengine.clusters.getIamPolicy vmwareengine.clusters.list vmwareengine.clusters.setIamPolicy vmwareengine.externalAccessRules.list vmwareengine.externalAddresses.list vmwareengine.hcxActivationKeys.getIamPolicy vmwareengine.hcxActivationKeys.list vmwareengine.hcxActivationKeys.setIamPolicy vmwareengine.locations.list vmwareengine.loggingServers.list vmwareengine.managementDnsZoneBindings.list vmwareengine.networkPeerings.list vmwareengine.networkPolicies.list vmwareengine.nodeTypes.list vmwareengine.nodes.list vmwareengine.operations.list vmwareengine.privateClouds.getIamPolicy vmwareengine.privateClouds.list vmwareengine.privateClouds.setIamPolicy vmwareengine.privateConnections.list vmwareengine.subnets.list vmwareengine.vmwareEngineNetworks.list vpcaccess.connectors.list vpcaccess.locations.list vpcaccess.operations.list workflows.callbacks.list workflows.executions.list workflows.locations.list workflows.operations.list workflows.stepEntries.list workflows.workflows.list workloadcertificate.locations.list workloadcertificate.operations.list workloadcertificate.workloadRegistrations.list workloadmanager.actuations.list workloadmanager.deployments.list workloadmanager.discoveredprofiles.list workloadmanager.evaluations.list workloadmanager.executions.list workloadmanager.locations.list workloadmanager.operations.list workloadmanager.results.list workloadmanager.rules.list workstations.workstationClusters.list workstations.workstationConfigs.getIamPolicy workstations.workstationConfigs.list workstations.workstationConfigs.setIamPolicy workstations.workstations.getIamPolicy workstations.workstations.list workstations.workstations.setIamPolicy
Security Reviewer (roles/iam.securityReviewer) Provides permissions to list all resources and allow policies on them.	accessapproval.requests.list accesscontextmanager.accessLevels.list accesscontextmanager.authorizedOrgsDescs.list accesscontextmanager.gcpUserAccessBindings.list accesscontextmanager.policies.getIamPolicy accesscontextmanager.policies.list accesscontextmanager.servicePerimeters.list actions.agentVersions.list advisorynotifications.notifications.* advisorynotifications.notifications.get advisorynotifications.notifications.list aiplatform.agentExamples.list aiplatform.agents.list aiplatform.annotationSpecs.list aiplatform.annotations.list aiplatform.apps.list aiplatform.artifacts.list aiplatform.batchPredictionJobs.list aiplatform.cachedContents.list aiplatform.contexts.list aiplatform.customJobs.list aiplatform.dataItems.list aiplatform.dataLabelingJobs.list aiplatform.datasetVersions.list aiplatform.datasets.list aiplatform.deploymentResourcePools.list aiplatform.edgeDeploymentJobs.list aiplatform.edgeDevices.list aiplatform.endpoints.getIamPolicy aiplatform.endpoints.list aiplatform.entityTypes.getIamPolicy aiplatform.entityTypes.list aiplatform.exampleStores.list aiplatform.executions.list aiplatform.extensions.list aiplatform.featureGroups.getIamPolicy aiplatform.featureGroups.list aiplatform.featureOnlineStores.getIamPolicy aiplatform.featureOnlineStores.list aiplatform.featureViewSyncs.list aiplatform.featureViews.getIamPolicy aiplatform.featureViews.list aiplatform.features.list aiplatform.featurestores.getIamPolicy aiplatform.featurestores.list aiplatform.humanInTheLoops.list aiplatform.hyperparameterTuningJobs.list aiplatform.indexEndpoints.list aiplatform.indexes.list aiplatform.locations.list aiplatform.metadataSchemas.list aiplatform.metadataStores.list aiplatform.modelDeploymentMonitoringJobs.list aiplatform.modelEvaluationSlices.list aiplatform.modelEvaluations.list aiplatform.modelMonitoringJobs.list aiplatform.modelMonitors.list aiplatform.models.list aiplatform.nasJobs.list aiplatform.nasTrialDetails.list aiplatform.notebookExecutionJobs.list aiplatform.notebookRuntimeTemplates.getIamPolicy aiplatform.notebookRuntimeTemplates.list aiplatform.notebookRuntimes.list aiplatform.operations.list aiplatform.persistentResources.list aiplatform.pipelineJobs.list aiplatform.provisionedThroughputRevisions.list aiplatform.provisionedThroughputs.list aiplatform.ragCorpora.list aiplatform.ragFiles.list aiplatform.reasoningEngines.list aiplatform.schedules.list aiplatform.sessionEvents.list aiplatform.sessions.list aiplatform.specialistPools.list aiplatform.studies.list aiplatform.tensorboardExperiments.list aiplatform.tensorboardRuns.list aiplatform.tensorboardTimeSeries.list aiplatform.tensorboards.list aiplatform.trainingPipelines.list aiplatform.trials.list aiplatform.tuningJobs.list alloydb.backups.list alloydb.clusters.list alloydb.databases.list alloydb.instances.list alloydb.locations.list alloydb.operations.list alloydb.supportedDatabaseFlags.list alloydb.users.list analyticshub.dataExchanges.getIamPolicy analyticshub.dataExchanges.list analyticshub.listings.getIamPolicy analyticshub.listings.list analyticshub.subscriptions.list apigateway.apiconfigs.getIamPolicy apigateway.apiconfigs.list apigateway.apis.getIamPolicy apigateway.apis.list apigateway.gateways.getIamPolicy apigateway.gateways.list apigateway.locations.list apigateway.operations.list apigee.apiproductattributes.list apigee.apiproducts.list apigee.appgroupapps.list apigee.appgroups.list apigee.apps.list apigee.archivedeployments.list apigee.caches.list apigee.datacollectors.list apigee.datastores.list apigee.deployments.getIamPolicy apigee.deployments.list apigee.developerappattributes.list apigee.developerapps.list apigee.developerattributes.list apigee.developers.list apigee.developersubscriptions.list apigee.dnsZones.list apigee.endpointattachments.list apigee.envgroupattachments.list apigee.envgroups.list apigee.environments.getIamPolicy apigee.environments.list apigee.exports.list apigee.flowhooks.list apigee.hostqueries.list apigee.hostsecurityreports.list apigee.instanceattachments.list apigee.instances.list apigee.keystorealiases.list apigee.keystores.list apigee.keyvaluemapentries.list apigee.keyvaluemaps.list apigee.nataddresses.list apigee.operations.list apigee.organizations.list apigee.portals.list apigee.proxies.list apigee.proxyrevisions.list apigee.queries.list apigee.rateplans.list apigee.references.list apigee.reports.list apigee.resourcefiles.list apigee.securityActions.list apigee.securityFeedback.list apigee.securityIncidents.list apigee.securityMonitoringConditions.list apigee.securityProfiles.list apigee.securityProfilesV2.list apigee.securityreports.list apigee.sharedflowrevisions.list apigee.sharedflows.list apigee.spaces.getIamPolicy apigee.spaces.list apigee.targetservers.list apigee.traceconfigoverrides.list apigee.tracesessions.list apigeeconnect.connections.list apigeeregistry.apis.getIamPolicy apigeeregistry.apis.list apigeeregistry.artifacts.getIamPolicy apigeeregistry.artifacts.list apigeeregistry.deployments.list apigeeregistry.locations.list apigeeregistry.operations.list apigeeregistry.specs.getIamPolicy apigeeregistry.specs.list apigeeregistry.versions.getIamPolicy apigeeregistry.versions.list apihub.apiHubInstances.list apihub.apiOperations.list apihub.apis.list apihub.attributes.list apihub.curations.list apihub.definitions.list apihub.dependencies.list apihub.deployments.list apihub.externalApis.list apihub.hostProjectRegistrations.list apihub.llmEnablements.list apihub.operations.list apihub.plugininstances.list apihub.plugins.list apihub.runTimeProjectAttachments.list apihub.specs.list apihub.versions.list apikeys.keys.list apim.apiObservations.list apim.apiOperations.list apim.locations.list apim.observationJobs.list apim.observationSources.list apim.operations.list appengine.instances.list appengine.memcache.list appengine.operations.list appengine.services.list appengine.versions.list apphub.applications.getIamPolicy apphub.applications.list apphub.discoveredServices.list apphub.discoveredWorkloads.list apphub.locations.list apphub.operations.list apphub.serviceProjectAttachments.list apphub.services.list apphub.workloads.list applianceactivation.rttCommands.list artifactregistry.attachments.list artifactregistry.dockerimages.list artifactregistry.files.list artifactregistry.locations.list artifactregistry.mavenartifacts.list artifactregistry.npmpackages.list artifactregistry.packages.list artifactregistry.pythonpackages.list artifactregistry.repositories.getIamPolicy artifactregistry.repositories.list artifactregistry.rules.list artifactregistry.tags.list artifactregistry.versions.list assuredoss.locations.list assuredoss.metadata.list assuredoss.operations.list assuredworkloads.operations.list assuredworkloads.updates.list assuredworkloads.violations.list assuredworkloads.workload.list auditmanager.auditReports.list auditmanager.controlReports.list auditmanager.controls.list auditmanager.customComplianceFrameworks.list auditmanager.findings.list auditmanager.locations.list auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.list automl.annotationSpecs.list automl.annotations.list automl.columnSpecs.list automl.datasets.getIamPolicy automl.datasets.list automl.examples.list automl.files.list automl.humanAnnotationTasks.list automl.locations.getIamPolicy automl.locations.list automl.modelEvaluations.list automl.models.getIamPolicy automl.models.list automl.operations.list automl.tableSpecs.list automlrecommendations.apiKeys.list automlrecommendations.catalogItems.list automlrecommendations.catalogs.list automlrecommendations.eventStores.list automlrecommendations.events.list automlrecommendations.placements.list automlrecommendations.recommendations.list autoscaling.sites.getIamPolicy backupdr.backupPlanAssociations.list backupdr.backupPlanRevisions.list backupdr.backupPlans.list backupdr.backupVaults.list backupdr.bvbackups.list backupdr.bvdataSources.list backupdr.locations.list backupdr.managementServers.getIamPolicy backupdr.managementServers.list backupdr.operations.list backupdr.resourceBackupConfigs.list baremetalsolution.instancequotas.list baremetalsolution.instances.list baremetalsolution.luns.list baremetalsolution.maintenanceevents.list baremetalsolution.networkquotas.list baremetalsolution.networks.list baremetalsolution.nfsshares.list baremetalsolution.osimages.list baremetalsolution.pods.list baremetalsolution.procurements.list baremetalsolution.skus.list baremetalsolution.snapshotschedulepolicies.list baremetalsolution.sshKeys.list baremetalsolution.storageaggregatepools.list baremetalsolution.volumequotas.list baremetalsolution.volumes.list baremetalsolution.volumesnapshots.list batch.jobs.list batch.locations.list batch.operations.list batch.resourceAllowances.list batch.tasks.list beyondcorp.appConnections.getIamPolicy beyondcorp.appConnections.list beyondcorp.appConnectors.getIamPolicy beyondcorp.appConnectors.list beyondcorp.appGateways.getIamPolicy beyondcorp.appGateways.list beyondcorp.clientConnectorServices.getIamPolicy beyondcorp.clientConnectorServices.list beyondcorp.clientGateways.getIamPolicy beyondcorp.clientGateways.list beyondcorp.locations.list beyondcorp.operations.list beyondcorp.partnerTenants.list beyondcorp.proxyConfigs.list beyondcorp.securityGateways.getIamPolicy beyondcorp.securityGateways.list beyondcorp.sgApplications.getIamPolicy beyondcorp.sgApplications.list beyondcorp.subscriptions.list biglake.catalogs.list biglake.databases.list biglake.locks.list biglake.tables.list bigquery.capacityCommitments.list bigquery.connections.getIamPolicy bigquery.connections.list bigquery.dataPolicies.getIamPolicy bigquery.dataPolicies.list bigquery.datasets.getIamPolicy bigquery.jobs.list bigquery.models.list bigquery.reservationAssignments.list bigquery.reservations.list bigquery.routines.list bigquery.rowAccessPolicies.getIamPolicy bigquery.rowAccessPolicies.list bigquery.savedqueries.list bigquery.tables.getIamPolicy bigquery.tables.list bigquerymigration.subtasks.list bigquerymigration.workflows.list bigtable.appProfiles.list bigtable.authorizedViews.getIamPolicy bigtable.authorizedViews.list bigtable.backups.getIamPolicy bigtable.backups.list bigtable.clusters.list bigtable.hotTablets.list bigtable.instances.getIamPolicy bigtable.instances.list bigtable.keyvisualizer.list bigtable.locations.list bigtable.logicalViews.getIamPolicy bigtable.logicalViews.list bigtable.materializedViews.getIamPolicy bigtable.materializedViews.list bigtable.tables.getIamPolicy bigtable.tables.list billing.accounts.getIamPolicy billing.accounts.list billing.anomalies.list billing.billingAccountPrices.list billing.billingAccountServices.list billing.billingAccountSkuGroupSkus.list billing.billingAccountSkuGroups.list billing.billingAccountSkus.list billing.budgets.list billing.credits.list billing.resourceAssociations.list billing.subscriptions.list binaryauthorization.attestors.getIamPolicy binaryauthorization.attestors.list binaryauthorization.continuousValidationConfig.getIamPolicy binaryauthorization.platformPolicies.list binaryauthorization.policy.getIamPolicy blockchainnodeengine.blockchainNodes.list blockchainnodeengine.locations.list blockchainnodeengine.operations.list blockchainvalidatormanager.blockchainValidatorConfigs.list blockchainvalidatormanager.locations.list blockchainvalidatormanager.operations.list capacityplanner.forecasts.list capacityplanner.usageHistories.list carestudio.patients.list certificatemanager.certissuanceconfigs.list certificatemanager.certmapentries.list certificatemanager.certmaps.list certificatemanager.certs.list certificatemanager.dnsauthorizations.list certificatemanager.locations.list certificatemanager.operations.list certificatemanager.trustconfigs.list chronicle.analyticValues.list chronicle.analytics.list chronicle.collectors.list chronicle.conversations.list chronicle.curatedRuleSetCategories.list chronicle.curatedRuleSetDeployments.list chronicle.curatedRuleSets.list chronicle.curatedRules.list chronicle.dashboardCharts.list chronicle.dashboardQueries.list chronicle.dashboards.list chronicle.dataAccessLabels.list chronicle.dataAccessScopes.list chronicle.dataTableRows.list chronicle.dataTables.list chronicle.dataTaps.list chronicle.enrichmentControls.list chronicle.entities.list chronicle.errorNotificationConfigs.list chronicle.extensionValidationReports.list chronicle.federationGroups.list chronicle.feedSourceTypeSchemas.list chronicle.feeds.list chronicle.findingsRefinementDeployments.list chronicle.findingsRefinements.list chronicle.forwarders.list chronicle.ingestionLogLabels.list chronicle.ingestionLogNamespaces.list chronicle.iocMatches.list chronicle.logTypeSchemas.list chronicle.logTypes.list chronicle.logs.list chronicle.messages.list chronicle.nativeDashboards.list chronicle.operations.list chronicle.parserExtensions.list chronicle.parsers.list chronicle.parsingErrors.list chronicle.referenceLists.list chronicle.retrohunts.list chronicle.ruleDeployments.list chronicle.ruleExecutionErrors.list chronicle.rules.list chronicle.searchQueries.list chronicle.threatCollections.list chronicle.validationErrors.list chronicle.watchlists.list chroniclesm.gcpAssociations.list clientauthconfig.brands.list clientauthconfig.clients.list cloud.locations.list cloudaicompanion.codeRepositoryIndexes.list cloudaicompanion.codeToolsSettings.list cloudaicompanion.dataSharingWithGoogleSettings.list cloudaicompanion.geminiGcpEnablementSettings.list cloudaicompanion.loggingSettings.list cloudaicompanion.operations.list cloudaicompanion.releaseChannelSettings.list cloudaicompanion.repositoryGroups.getIamPolicy cloudaicompanion.repositoryGroups.list cloudaicompanion.topics.getIamPolicy cloudasset.feeds.list cloudasset.othercloudconnections.list cloudasset.savedqueries.list cloudbuild.builds.list cloudbuild.connections.getIamPolicy cloudbuild.connections.list cloudbuild.integrations.list cloudbuild.locations.list cloudbuild.operations.list cloudbuild.repositories.list cloudbuild.workerpools.list cloudcontrolspartner.accessapprovalrequests.list cloudcontrolspartner.customers.list cloudcontrolspartner.violations.list cloudcontrolspartner.workloads.list clouddebugger.breakpoints.list clouddebugger.debuggees.list clouddeploy.automationRuns.list clouddeploy.automations.list clouddeploy.customTargetTypes.getIamPolicy clouddeploy.customTargetTypes.list clouddeploy.deliveryPipelines.getIamPolicy clouddeploy.deliveryPipelines.list clouddeploy.deployPolicies.getIamPolicy clouddeploy.deployPolicies.list clouddeploy.jobRuns.list clouddeploy.locations.list clouddeploy.operations.list clouddeploy.releases.list clouddeploy.rollouts.list clouddeploy.targets.getIamPolicy clouddeploy.targets.list cloudfunctions.functions.getIamPolicy cloudfunctions.functions.list cloudfunctions.locations.list cloudfunctions.operations.list cloudjobdiscovery.companies.list cloudkms.cryptoKeyVersions.list cloudkms.cryptoKeys.getIamPolicy cloudkms.cryptoKeys.list cloudkms.ekmConfigs.getIamPolicy cloudkms.ekmConnections.getIamPolicy cloudkms.ekmConnections.list cloudkms.importJobs.getIamPolicy cloudkms.importJobs.list cloudkms.keyHandles.list cloudkms.keyRings.getIamPolicy cloudkms.keyRings.list cloudkms.locations.list cloudlocationfinder.cloudLocations.list cloudlocationfinder.locations.list cloudnotifications.activities.list cloudonefs.isiloncloud.com/clusters.list cloudonefs.isiloncloud.com/fileshares.list cloudprivatecatalogproducer.associations.list cloudprivatecatalogproducer.catalogAssociations.list cloudprivatecatalogproducer.catalogs.getIamPolicy cloudprivatecatalogproducer.catalogs.list cloudprivatecatalogproducer.producerCatalogs.getIamPolicy cloudprivatecatalogproducer.producerCatalogs.list cloudprivatecatalogproducer.products.getIamPolicy cloudprivatecatalogproducer.products.list cloudprofiler.profiles.list cloudscheduler.jobs.list cloudscheduler.locations.list cloudsecurityscanner.crawledurls.list cloudsecurityscanner.results.list cloudsecurityscanner.scanruns.list cloudsecurityscanner.scans.list cloudsql.backupRuns.list cloudsql.databases.list cloudsql.instances.list cloudsql.sslCerts.list cloudsql.users.list cloudsupport.accounts.getIamPolicy cloudsupport.accounts.list cloudsupport.techCases.list cloudtasks.locations.list cloudtasks.queues.getIamPolicy cloudtasks.queues.list cloudtasks.tasks.list cloudtestservice.devicesession.list cloudtoolresults.executions.list cloudtoolresults.histories.list cloudtoolresults.steps.list cloudtrace.insights.list cloudtrace.tasks.list cloudtrace.traceScopes.list cloudtrace.traces.list cloudtranslate.adaptiveMtDatasets.list cloudtranslate.adaptiveMtFiles.list cloudtranslate.adaptiveMtSentences.list cloudtranslate.customModels.list cloudtranslate.datasets.list cloudtranslate.glossaries.list cloudtranslate.glossaryentries.list cloudtranslate.locations.list cloudtranslate.operations.list cloudvolumesgcp-api.netapp.com/activeDirectories.list cloudvolumesgcp-api.netapp.com/ipRanges.list cloudvolumesgcp-api.netapp.com/jobs.list cloudvolumesgcp-api.netapp.com/regions.list cloudvolumesgcp-api.netapp.com/serviceLevels.list cloudvolumesgcp-api.netapp.com/snapshots.list cloudvolumesgcp-api.netapp.com/volumereplication.list cloudvolumesgcp-api.netapp.com/volumes.list commerceagreementpublishing.agreements.list commerceagreementpublishing.documents.list commercebusinessenablement.operations.list commercebusinessenablement.partnerAccounts.list commercebusinessenablement.refunds.list commercebusinessenablement.resellerDiscountOffers.list commercebusinessenablement.resellerPrivateOfferPlans.list commercebusinessenablement.resellerRestrictions.list commerceoffercatalog.agreements.list commerceoffercatalog.documents.list commerceorggovernance.collectionRequestApprovals.list commerceorggovernance.collections.list commerceorggovernance.populateCollectionJobs.list commerceorggovernance.services.list commerceprice.events.list commerceprice.privateoffers.list composer.dags.list composer.environments.list composer.imageversions.list composer.operations.list composer.userworkloadsconfigmaps.list composer.userworkloadssecrets.list compute.acceleratorTypes.list compute.addresses.list compute.autoscalers.list compute.backendBuckets.getIamPolicy compute.backendBuckets.list compute.backendServices.getIamPolicy compute.backendServices.list compute.commitments.list compute.crossSiteNetworks.list compute.diskTypes.list compute.disks.getIamPolicy compute.disks.list compute.externalVpnGateways.list compute.firewallPolicies.getIamPolicy compute.firewallPolicies.list compute.firewalls.list compute.forwardingRules.list compute.futureReservations.getIamPolicy compute.futureReservations.list compute.globalAddresses.list compute.globalForwardingRules.list compute.globalNetworkEndpointGroups.list compute.globalOperations.getIamPolicy compute.globalOperations.list compute.globalPublicDelegatedPrefixes.list compute.healthChecks.list compute.httpHealthChecks.list compute.httpsHealthChecks.list compute.images.getIamPolicy compute.images.list compute.instanceGroupManagers.list compute.instanceGroups.list compute.instanceTemplates.getIamPolicy compute.instanceTemplates.list compute.instances.getIamPolicy compute.instances.list compute.instantSnapshots.getIamPolicy compute.instantSnapshots.list compute.interconnectAttachmentGroups.list compute.interconnectAttachments.list compute.interconnectGroups.list compute.interconnectLocations.list compute.interconnectRemoteLocations.list compute.interconnects.list compute.licenseCodes.getIamPolicy compute.licenseCodes.list compute.licenses.getIamPolicy compute.licenses.list compute.machineImages.getIamPolicy compute.machineImages.list compute.machineTypes.list compute.multiMig.list compute.networkAttachments.getIamPolicy compute.networkAttachments.list compute.networkEdgeSecurityServices.list compute.networkEndpointGroups.list compute.networkProfiles.list compute.networks.list compute.nodeGroups.getIamPolicy compute.nodeGroups.list compute.nodeTemplates.getIamPolicy compute.nodeTemplates.list compute.nodeTypes.list compute.packetMirrorings.list compute.previewFeatures.list compute.publicAdvertisedPrefixes.list compute.publicDelegatedPrefixes.list compute.regionBackendServices.getIamPolicy compute.regionBackendServices.list compute.regionFirewallPolicies.getIamPolicy compute.regionFirewallPolicies.list compute.regionHealthCheckServices.list compute.regionHealthChecks.list compute.regionNetworkEndpointGroups.list compute.regionNotificationEndpoints.list compute.regionOperations.getIamPolicy compute.regionOperations.list compute.regionSecurityPolicies.list compute.regionSslCertificates.list compute.regionSslPolicies.list compute.regionTargetHttpProxies.list compute.regionTargetHttpsProxies.list compute.regionTargetTcpProxies.list compute.regionUrlMaps.list compute.regions.list compute.reservationBlocks.list compute.reservations.list compute.resourcePolicies.getIamPolicy compute.resourcePolicies.list compute.routers.list compute.routes.list compute.securityPolicies.list compute.serviceAttachments.getIamPolicy compute.serviceAttachments.list compute.snapshots.getIamPolicy compute.snapshots.list compute.sslCertificates.list compute.sslPolicies.list compute.storagePools.getIamPolicy compute.storagePools.list compute.subnetworks.getIamPolicy compute.subnetworks.list compute.targetGrpcProxies.list compute.targetHttpProxies.list compute.targetHttpsProxies.list compute.targetInstances.list compute.targetPools.list compute.targetSslProxies.list compute.targetTcpProxies.list compute.targetVpnGateways.list compute.urlMaps.list compute.vpnGateways.list compute.vpnTunnels.list compute.wireGroups.list compute.zoneOperations.getIamPolicy compute.zoneOperations.list compute.zones.list confidentialcomputing.locations.list config.deployments.getIamPolicy config.deployments.list config.locations.list config.operations.list config.previews.list config.resourcechanges.list config.resourcedrifts.list config.resources.list config.revisions.list config.terraformversions.list configdelivery.fleetPackages.list configdelivery.locations.list configdelivery.operations.list configdelivery.releases.list configdelivery.resourceBundles.list configdelivery.rollouts.list connectors.actions.list connectors.connections.getIamPolicy connectors.connections.list connectors.connectors.list connectors.customConnectorVersions.getIamPolicy connectors.customConnectorVersions.list connectors.customConnectors.getIamPolicy connectors.customConnectors.list connectors.endpointAttachments.getIamPolicy connectors.endpointAttachments.list connectors.entities.list connectors.entityTypes.list connectors.eventSubscriptions.list connectors.eventtypes.list connectors.locations.list connectors.managedZones.getIamPolicy connectors.managedZones.list connectors.operations.list connectors.providers.list connectors.versions.list consumerprocurement.accounts.list consumerprocurement.consents.list consumerprocurement.entitlements.list consumerprocurement.events.list consumerprocurement.freeTrials.list consumerprocurement.orderAttributions.list consumerprocurement.orders.list contactcenteraiplatform.contactCenters.list contactcenteraiplatform.locations.list contactcenteraiplatform.operations.list contactcenterinsights.analyses.list contactcenterinsights.analysisRules.list contactcenterinsights.assessmentRules.list contactcenterinsights.assessments.list contactcenterinsights.authorizedAnalyses.list contactcenterinsights.authorizedConversations.list contactcenterinsights.authorizedFeedbackLabels.list contactcenterinsights.authorizedOperations.list contactcenterinsights.authorizedViewSets.list contactcenterinsights.authorizedViews.getIamPolicy contactcenterinsights.authorizedViews.list contactcenterinsights.conversations.list contactcenterinsights.datasets.list contactcenterinsights.faqEntries.list contactcenterinsights.faqModels.list contactcenterinsights.feedbackLabels.list contactcenterinsights.issueModels.list contactcenterinsights.issues.list contactcenterinsights.notes.list contactcenterinsights.operations.list contactcenterinsights.phraseMatchers.list contactcenterinsights.qaQuestionTags.list contactcenterinsights.qaQuestions.list contactcenterinsights.qaScorecardRevisions.list contactcenterinsights.qaScorecards.list contactcenterinsights.views.list contactcenterinsights.visibilityLabels.list container.apiServices.list container.auditSinks.list container.backendConfigs.list container.bindings.list container.certificateSigningRequests.list container.clusterRoleBindings.list container.clusterRoles.list container.clusters.list container.componentStatuses.list container.configMaps.list container.controllerRevisions.list container.cronJobs.list container.csiDrivers.list container.csiNodeInfos.list container.csiNodes.list container.customResourceDefinitions.list container.daemonSets.list container.deployments.list container.endpointSlices.list container.endpoints.list container.events.list container.frontendConfigs.list container.horizontalPodAutoscalers.list container.ingresses.list container.initializerConfigurations.list container.jobs.list container.leases.list container.limitRanges.list container.localSubjectAccessReviews.list container.managedCertificates.list container.mutatingWebhookConfigurations.list container.namespaces.list container.networkPolicies.list container.nodes.list container.operations.list container.persistentVolumeClaims.list container.persistentVolumes.list container.petSets.list container.podDisruptionBudgets.list container.podPresets.list container.podSecurityPolicies.list container.podTemplates.list container.pods.list container.priorityClasses.list container.replicaSets.list container.replicationControllers.list container.resourceQuotas.list container.roleBindings.list container.roles.list container.runtimeClasses.list container.scheduledJobs.list container.selfSubjectAccessReviews.list container.serviceAccounts.list container.services.list container.statefulSets.list container.storageClasses.list container.storageStates.list container.storageVersionMigrations.list container.subjectAccessReviews.list container.thirdPartyObjects.list container.thirdPartyResources.list container.updateInfos.list container.validatingWebhookConfigurations.list container.volumeAttachments.list container.volumeSnapshotClasses.list container.volumeSnapshotContents.list container.volumeSnapshots.list containeranalysis.notes.getIamPolicy containeranalysis.notes.list containeranalysis.occurrences.getIamPolicy containeranalysis.occurrences.list containersecurity.clusterSummaries.list containersecurity.findings.list containersecurity.locations.list contentwarehouse.corpora.list contentwarehouse.documentSchemas.list contentwarehouse.documents.getIamPolicy contentwarehouse.documents.list contentwarehouse.ruleSets.list contentwarehouse.synonymSets.list databasecenter.* databasecenter.databaseGroups.list databasecenter.fleetHealthStats.list databasecenter.fleetStats.list databasecenter.locations.list databasecenter.products.list databasecenter.userLabels.list databasecenter.userTags.list databaseinsights.locations.list databasesconsole.locations.list databasesconsole.operations.list databasesconsole.studioQueries.list datacatalog.categories.getIamPolicy datacatalog.entries.getIamPolicy datacatalog.entries.list datacatalog.entryGroups.getIamPolicy datacatalog.entryGroups.list datacatalog.operations.list datacatalog.relationships.list datacatalog.tagTemplates.getIamPolicy datacatalog.taxonomies.getIamPolicy datacatalog.taxonomies.list dataconnectors.connectors.getIamPolicy dataconnectors.connectors.list dataconnectors.locations.list dataconnectors.operations.list dataflow.jobs.list dataflow.messages.list dataflow.snapshots.list dataform.commentThreads.list dataform.comments.list dataform.compilationResults.list dataform.locations.list dataform.releaseConfigs.list dataform.repositories.getIamPolicy dataform.repositories.list dataform.workflowConfigs.list dataform.workflowInvocations.list dataform.workspaces.getIamPolicy dataform.workspaces.list datafusion.artifacts.list datafusion.instances.getIamPolicy datafusion.instances.list datafusion.locations.list datafusion.namespaces.getIamPolicy datafusion.namespaces.list datafusion.operations.list datafusion.pipelineConnections.list datafusion.pipelines.list datafusion.profiles.list datafusion.secureKeys.list datalabeling.annotateddatasets.list datalabeling.annotationspecsets.list datalabeling.dataitems.list datalabeling.datasets.list datalabeling.examples.list datalabeling.instructions.list datalabeling.operations.list datalineage.events.list datalineage.processes.list datalineage.runs.list datamigration.connectionprofiles.getIamPolicy datamigration.connectionprofiles.list datamigration.conversionworkspaces.getIamPolicy datamigration.conversionworkspaces.list datamigration.locations.list datamigration.mappingrules.getIamPolicy datamigration.migrationjobs.getIamPolicy datamigration.migrationjobs.list datamigration.objects.list datamigration.operations.list datamigration.privateconnections.getIamPolicy datamigration.privateconnections.list datapipelines.jobs.list datapipelines.pipelines.list dataplex.aspectTypes.getIamPolicy dataplex.aspectTypes.list dataplex.assetActions.list dataplex.assets.getIamPolicy dataplex.assets.list dataplex.content.getIamPolicy dataplex.content.list dataplex.dataAttributeBindings.getIamPolicy dataplex.dataAttributeBindings.list dataplex.dataAttributes.getIamPolicy dataplex.dataAttributes.list dataplex.dataTaxonomies.getIamPolicy dataplex.dataTaxonomies.list dataplex.datascans.getIamPolicy dataplex.datascans.list dataplex.encryptionConfig.list dataplex.entities.list dataplex.entries.list dataplex.entryGroups.getIamPolicy dataplex.entryGroups.list dataplex.entryTypes.getIamPolicy dataplex.entryTypes.list dataplex.environments.getIamPolicy dataplex.environments.list dataplex.glossaries.getIamPolicy dataplex.glossaries.list dataplex.glossaryCategories.list dataplex.glossaryTerms.list dataplex.lakeActions.list dataplex.lakes.getIamPolicy dataplex.lakes.list dataplex.locations.list dataplex.metadataJobs.list dataplex.operations.list dataplex.partitions.list dataplex.tasks.getIamPolicy dataplex.tasks.list dataplex.zoneActions.list dataplex.zones.getIamPolicy dataplex.zones.list dataproc.agents.list dataproc.autoscalingPolicies.getIamPolicy dataproc.autoscalingPolicies.list dataproc.batches.list dataproc.clusters.getIamPolicy dataproc.clusters.list dataproc.jobs.getIamPolicy dataproc.jobs.list dataproc.operations.getIamPolicy dataproc.operations.list dataproc.sessionTemplates.list dataproc.sessions.list dataproc.workflowTemplates.getIamPolicy dataproc.workflowTemplates.list dataprocessing.datasources.list dataprocessing.featurecontrols.list dataprocessing.groupcontrols.list dataprocrm.locations.list dataprocrm.nodePools.list dataprocrm.nodes.list dataprocrm.operations.list dataprocrm.workloads.list datastore.backupSchedules.list datastore.backups.list datastore.databases.list datastore.entities.list datastore.indexes.list datastore.keyVisualizerScans.list datastore.locations.list datastore.namespaces.list datastore.operations.list datastore.statistics.list datastore.userCreds.list datastream.connectionProfiles.getIamPolicy datastream.connectionProfiles.list datastream.locations.list datastream.objects.list datastream.operations.list datastream.privateConnections.getIamPolicy datastream.privateConnections.list datastream.routes.getIamPolicy datastream.routes.list datastream.streams.getIamPolicy datastream.streams.list datastudio.datasources.getIamPolicy datastudio.reports.getIamPolicy datastudio.workspaces.getIamPolicy deploymentmanager.compositeTypes.list deploymentmanager.deployments.getIamPolicy deploymentmanager.deployments.list deploymentmanager.manifests.list deploymentmanager.operations.list deploymentmanager.resources.list deploymentmanager.typeProviders.list deploymentmanager.types.list designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.list designcenter.applications.list designcenter.catalogTemplateRevisions.list designcenter.catalogTemplates.list designcenter.catalogs.list designcenter.components.list designcenter.connections.list designcenter.locations.list designcenter.operations.list designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.list designcenter.shares.list designcenter.spaces.getIamPolicy designcenter.spaces.list developerconnect.accountConnectors.list developerconnect.connections.list developerconnect.gitRepositoryLinks.list developerconnect.locations.list developerconnect.operations.list developerconnect.providers.list developerconnect.users.list devicestreaming.deviceSessions.list dialogflow.agents.list dialogflow.answerrecords.list dialogflow.callMatchers.list dialogflow.changelogs.list dialogflow.contexts.list dialogflow.conversationDatasets.list dialogflow.conversationModels.list dialogflow.conversationProfiles.list dialogflow.conversations.list dialogflow.deployments.list dialogflow.documents.list dialogflow.entityTypes.list dialogflow.environments.list dialogflow.examples.list dialogflow.experiments.list dialogflow.flows.list dialogflow.generators.list dialogflow.integrations.list dialogflow.intents.list dialogflow.knowledgeBases.list dialogflow.messages.list dialogflow.modelEvaluations.list dialogflow.pages.list dialogflow.participants.list dialogflow.phoneNumberOrders.list dialogflow.phoneNumbers.list dialogflow.playbooks.list dialogflow.securitySettings.list dialogflow.sessionEntityTypes.list dialogflow.smartMessagingEntries.list dialogflow.testcases.list dialogflow.tools.list dialogflow.transitionRouteGroups.list dialogflow.versions.list dialogflow.webhooks.list discoveryengine.agents.list discoveryengine.assistants.list discoveryengine.branches.list discoveryengine.cmekConfigs.list discoveryengine.collections.list discoveryengine.connectorRuns.list discoveryengine.controls.list discoveryengine.conversations.list discoveryengine.dataStores.list discoveryengine.documents.list discoveryengine.engines.list discoveryengine.evaluations.list discoveryengine.identityMappingStores.list discoveryengine.models.list discoveryengine.notebooks.getIamPolicy discoveryengine.notebooks.list discoveryengine.operations.list discoveryengine.sampleQueries.list discoveryengine.sampleQuerySets.list discoveryengine.schemas.list discoveryengine.servingConfigs.list discoveryengine.sessions.list discoveryengine.targetSites.list dlp.analyzeRiskTemplates.list dlp.columnDataProfiles.list dlp.connections.list dlp.deidentifyTemplates.list dlp.estimates.list dlp.fileStoreProfiles.list dlp.inspectFindings.list dlp.inspectTemplates.list dlp.jobTriggers.list dlp.jobs.list dlp.locations.list dlp.projectDataProfiles.list dlp.storedInfoTypes.list dlp.subscriptions.list dlp.tableDataProfiles.list dns.changes.list dns.dnsKeys.list dns.managedZoneOperations.list dns.managedZones.getIamPolicy dns.managedZones.list dns.policies.list dns.resourceRecordSets.list dns.responsePolicies.list dns.responsePolicyRules.list documentai.dataLabelingJobs.list documentai.evaluations.list documentai.labelerPools.list documentai.locations.list documentai.processorTypes.list documentai.processorVersions.list documentai.processors.list domains.locations.list domains.operations.list domains.registrations.getIamPolicy domains.registrations.list earthengine.assets.getIamPolicy earthengine.assets.list earthengine.operations.list edgecontainer.clusters.getIamPolicy edgecontainer.clusters.list edgecontainer.locations.list edgecontainer.machines.getIamPolicy edgecontainer.machines.list edgecontainer.nodePools.getIamPolicy edgecontainer.nodePools.list edgecontainer.operations.list edgecontainer.vpnConnections.getIamPolicy edgecontainer.vpnConnections.list edgenetwork.interconnectAttachments.getIamPolicy edgenetwork.interconnectAttachments.list edgenetwork.interconnects.getIamPolicy edgenetwork.interconnects.list edgenetwork.locations.list edgenetwork.networks.getIamPolicy edgenetwork.networks.list edgenetwork.operations.list edgenetwork.routers.getIamPolicy edgenetwork.routers.list edgenetwork.routes.list edgenetwork.subnetworks.getIamPolicy edgenetwork.subnetworks.list edgenetwork.zones.list enterpriseknowledgegraph.entityReconciliationJobs.list enterprisepurchasing.gcveCuds.list enterprisepurchasing.gcveNodePricingInfo.list enterprisepurchasing.locations.list enterprisepurchasing.operations.list errorreporting.applications.list errorreporting.errorEvents.list errorreporting.groups.list essentialcontacts.contacts.list eventarc.channelConnections.getIamPolicy eventarc.channelConnections.list eventarc.channels.getIamPolicy eventarc.channels.list eventarc.enrollments.getIamPolicy eventarc.enrollments.list eventarc.googleApiSources.getIamPolicy eventarc.googleApiSources.list eventarc.kafkaSources.getIamPolicy eventarc.kafkaSources.list eventarc.locations.list eventarc.messageBuses.getIamPolicy eventarc.messageBuses.list eventarc.operations.list eventarc.pipelines.getIamPolicy eventarc.pipelines.list eventarc.providers.list eventarc.triggers.getIamPolicy eventarc.triggers.list fcmdata.deliverydata.list file.backups.list file.instances.list file.locations.list file.operations.list financialservices.locations.list financialservices.operations.list financialservices.v1backtests.list financialservices.v1datasets.list financialservices.v1engineconfigs.list financialservices.v1engineversions.list financialservices.v1instances.list financialservices.v1models.list financialservices.v1predictions.list firebase.clients.list firebase.links.list firebase.playLinks.list firebaseabt.experiments.list firebaseappdistro.groups.list firebaseappdistro.releases.list firebaseappdistro.testers.list firebasecrashlytics.issues.list firebasedatabase.instances.list firebasedataconnect.connectorRevisions.list firebasedataconnect.connectors.list firebasedataconnect.locations.list firebasedataconnect.operations.list firebasedataconnect.schemaRevisions.list firebasedataconnect.schemas.list firebasedataconnect.services.list firebasedynamiclinks.destinations.list firebasedynamiclinks.domains.list firebasedynamiclinks.links.list firebaseextensions.configs.list firebaseextensionspublisher.extensions.list firebasehosting.sites.list firebaseinappmessaging.campaigns.list firebasemessagingcampaigns.campaigns.list firebaseml.models.list firebaseml.modelversions.list firebasenotifications.messages.list firebaserules.releases.list firebaserules.rulesets.list firebasestorage.buckets.list fleetengine.deliveryvehicles.list fleetengine.tasks.list fleetengine.vehicles.list gcp.redisenterprise.com/databases.list gcp.redisenterprise.com/subscriptions.list gdchardwaremanagement.changeLogEntries.list gdchardwaremanagement.comments.list gdchardwaremanagement.hardware.list gdchardwaremanagement.hardwareGroups.list gdchardwaremanagement.locations.list gdchardwaremanagement.operations.list gdchardwaremanagement.orders.list gdchardwaremanagement.sites.list gdchardwaremanagement.skus.list gdchardwaremanagement.zones.list geminicloudassist.investigationRevisions.list geminicloudassist.investigations.getIamPolicy geminicloudassist.investigations.list geminicloudassist.locations.list geminicloudassist.operations.list genomics.datasets.getIamPolicy genomics.datasets.list genomics.operations.list gkebackup.backupChannels.list gkebackup.backupPlanBindings.list gkebackup.backupPlans.getIamPolicy gkebackup.backupPlans.list gkebackup.backups.list gkebackup.locations.list gkebackup.operations.list gkebackup.restoreChannels.list gkebackup.restorePlanBindings.list gkebackup.restorePlans.getIamPolicy gkebackup.restorePlans.list gkebackup.restores.list gkebackup.volumeBackups.list gkebackup.volumeRestores.list gkehub.features.getIamPolicy gkehub.features.list gkehub.locations.list gkehub.membershipbindings.list gkehub.membershipfeatures.list gkehub.memberships.getIamPolicy gkehub.memberships.list gkehub.namespaces.list gkehub.operations.list gkehub.rbacrolebindings.list gkehub.scopes.getIamPolicy gkehub.scopes.list gkemulticloud.attachedClusters.list gkemulticloud.awsClusters.list gkemulticloud.awsNodePools.list gkemulticloud.azureClients.list gkemulticloud.azureClusters.list gkemulticloud.azureNodePools.list gkemulticloud.operations.list gkeonprem.bareMetalAdminClusters.getIamPolicy gkeonprem.bareMetalAdminClusters.list gkeonprem.bareMetalClusters.getIamPolicy gkeonprem.bareMetalClusters.list gkeonprem.bareMetalNodePools.getIamPolicy gkeonprem.bareMetalNodePools.list gkeonprem.locations.list gkeonprem.operations.list gkeonprem.vmwareAdminClusters.getIamPolicy gkeonprem.vmwareAdminClusters.list gkeonprem.vmwareClusters.getIamPolicy gkeonprem.vmwareClusters.list gkeonprem.vmwareNodePools.getIamPolicy gkeonprem.vmwareNodePools.list gsuiteaddons.deployments.list healthcare.annotationStores.getIamPolicy healthcare.annotationStores.list healthcare.annotations.list healthcare.attributeDefinitions.list healthcare.consentArtifacts.list healthcare.consentStores.getIamPolicy healthcare.consentStores.list healthcare.consents.list healthcare.datasets.getIamPolicy healthcare.datasets.list healthcare.dicomStores.getIamPolicy healthcare.dicomStores.list healthcare.fhirStores.getIamPolicy healthcare.fhirStores.list healthcare.hl7V2Messages.list healthcare.hl7V2Stores.getIamPolicy healthcare.hl7V2Stores.list healthcare.locations.list healthcare.operations.list healthcare.userDataMappings.list iam.denypolicies.list iam.googleapis.com/oauthClientCredentials.list iam.googleapis.com/oauthClients.list iam.googleapis.com/workforcePoolProviderKeys.list iam.googleapis.com/workforcePoolProviders.list iam.googleapis.com/workforcePools.getIamPolicy iam.googleapis.com/workforcePools.list iam.googleapis.com/workloadIdentityPoolProviderKeys.list iam.googleapis.com/workloadIdentityPoolProviders.list iam.googleapis.com/workloadIdentityPools.list iam.policybindings.list iam.principalaccessboundarypolicies.list iam.roles.get iam.roles.list iam.serviceAccountKeys.list iam.serviceAccounts.get iam.serviceAccounts.getIamPolicy iam.serviceAccounts.list iap.tunnel.getIamPolicy iap.tunnelDestGroups.getIamPolicy iap.tunnelDestGroups.list iap.tunnelInstances.getIamPolicy iap.tunnelLocations.getIamPolicy iap.tunnelZones.getIamPolicy iap.web.getIamPolicy iap.webServiceVersions.getIamPolicy iap.webServices.getIamPolicy iap.webTypes.getIamPolicy identitytoolkit.tenants.getIamPolicy identitytoolkit.tenants.list ids.endpoints.getIamPolicy ids.endpoints.list ids.locations.list ids.operations.list integrations.apigeeAuthConfigs.list integrations.apigeeCertificates.list integrations.apigeeExecutions.list integrations.apigeeIntegrationVers.list integrations.apigeeIntegrations.list integrations.apigeeSfdcChannels.list integrations.apigeeSfdcInstances.list integrations.apigeeSuspensions.list integrations.authConfigs.list integrations.certificates.list integrations.executions.list integrations.integrationVersions.list integrations.integrations.list integrations.securityAuthConfigs.list integrations.securityExecutions.list integrations.securityIntegTempVers.list integrations.securityIntegrationVers.list integrations.securityIntegrations.list integrations.sfdcChannels.list integrations.sfdcInstances.list integrations.suspensions.list integrations.testCases.list issuerswitch.accountManagerTransactions.list issuerswitch.complaintTransactions.list issuerswitch.financialTransactions.list issuerswitch.mandateTransactions.list issuerswitch.metadataTransactions.list issuerswitch.operations.list issuerswitch.ruleMetadata.list issuerswitch.ruleMetadataValues.list issuerswitch.rules.list krmapihosting.krmApiHosts.getIamPolicy krmapihosting.krmApiHosts.list krmapihosting.locations.list krmapihosting.operations.list licensemanager.configurations.list licensemanager.instances.list licensemanager.locations.list licensemanager.operations.list licensemanager.products.list lifesciences.operations.list livestream.assets.list livestream.channels.list livestream.clips.list livestream.dvrSessions.list livestream.events.list livestream.inputs.list livestream.locations.list livestream.operations.list logging.buckets.list logging.exclusions.list logging.links.list logging.locations.list logging.logEntries.list logging.logMetrics.list logging.logScopes.list logging.logServiceIndexes.list logging.logServices.list logging.logs.list logging.notificationRules.list logging.operations.list logging.privateLogEntries.list logging.queries.usePrivate logging.sinks.list logging.views.getIamPolicy logging.views.list looker.backups.list looker.instances.list looker.locations.list looker.operations.list lustre.instances.list lustre.locations.list lustre.operations.list maintenance.locations.list maintenance.resourceMaintenances.list managedflink.deployments.list managedflink.jobs.list managedflink.locations.list managedflink.operations.list managedflink.sessions.list managedidentities.backups.getIamPolicy managedidentities.backups.list managedidentities.domains.getIamPolicy managedidentities.domains.list managedidentities.locations.list managedidentities.operations.list managedidentities.peerings.getIamPolicy managedidentities.peerings.list managedidentities.sqlintegrations.list managedkafka.clusters.list managedkafka.connectClusters.list managedkafka.connectors.list managedkafka.consumerGroups.list managedkafka.contexts.list managedkafka.locations.list managedkafka.operations.list managedkafka.schemaRegistries.list managedkafka.subjects.list managedkafka.topics.list managedkafka.versions.list mapsadmin.clientMaps.list mapsadmin.clientStyleSheetSnapshots.list mapsadmin.clientStyles.list mapsadmin.mapViews.list mapsadmin.styleSnapshots.list mapsanalytics.metricMetadata.list mapsplatformdatasets.datasets.list marketplacesolutions.locations.list marketplacesolutions.operations.list marketplacesolutions.powerImages.list marketplacesolutions.powerInstances.list marketplacesolutions.powerNetworks.list marketplacesolutions.powerSshKeys.list marketplacesolutions.powerVolumes.list memcache.instances.list memcache.locations.list memcache.operations.list memorystore.backupCollections.list memorystore.backups.list memorystore.instances.list memorystore.locations.list memorystore.operations.list metastore.backups.getIamPolicy metastore.backups.list metastore.databases.getIamPolicy metastore.databases.list metastore.federations.getIamPolicy metastore.federations.list metastore.imports.list metastore.locations.list metastore.migrations.list metastore.operations.list metastore.services.getIamPolicy metastore.services.list metastore.tables.getIamPolicy metastore.tables.list migrationcenter.assets.list migrationcenter.assetsExportJobs.list migrationcenter.discoveryClients.list migrationcenter.errorFrames.list migrationcenter.groups.list migrationcenter.importDataFiles.list migrationcenter.importJobs.list migrationcenter.locations.list migrationcenter.operations.list migrationcenter.preferenceSets.list migrationcenter.relations.list migrationcenter.reportConfigs.list migrationcenter.reports.list migrationcenter.sources.list ml.jobs.getIamPolicy ml.jobs.list ml.locations.list ml.models.getIamPolicy ml.models.list ml.operations.list ml.studies.getIamPolicy ml.studies.list ml.trials.list ml.versions.list modelarmor.locations.list modelarmor.templates.list monitoring.alertPolicies.list monitoring.dashboards.list monitoring.groups.list monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.list monitoring.notificationChannelDescriptors.list monitoring.notificationChannels.list monitoring.services.list monitoring.slos.list monitoring.snoozes.list monitoring.timeSeries.list monitoring.uptimeCheckConfigs.list netapp.activeDirectories.list netapp.backupPolicies.list netapp.backupVaults.list netapp.backups.list netapp.kmsConfigs.list netapp.locations.list netapp.operations.list netapp.quotaRules.list netapp.replications.list netapp.snapshots.list netapp.storagePools.list netapp.volumes.list networkconnectivity.gatewayAdvertisedRoutes.list networkconnectivity.groups.getIamPolicy networkconnectivity.groups.list networkconnectivity.hubRouteTables.getIamPolicy networkconnectivity.hubRouteTables.list networkconnectivity.hubRoutes.getIamPolicy networkconnectivity.hubRoutes.list networkconnectivity.hubs.getIamPolicy networkconnectivity.hubs.list networkconnectivity.internalRanges.getIamPolicy networkconnectivity.internalRanges.list networkconnectivity.locations.list networkconnectivity.operations.list networkconnectivity.policyBasedRoutes.getIamPolicy networkconnectivity.policyBasedRoutes.list networkconnectivity.regionalEndpoints.list networkconnectivity.serviceClasses.list networkconnectivity.serviceConnectionMaps.list networkconnectivity.serviceConnectionPolicies.list networkconnectivity.spokes.getIamPolicy networkconnectivity.spokes.list networkmanagement.connectivitytests.getIamPolicy networkmanagement.connectivitytests.list networkmanagement.locations.list networkmanagement.operations.list networkmanagement.vpcflowlogsconfigs.list networksecurity.addressGroups.getIamPolicy networksecurity.addressGroups.list networksecurity.authorizationPolicies.getIamPolicy networksecurity.authorizationPolicies.list networksecurity.authzPolicies.getIamPolicy networksecurity.authzPolicies.list networksecurity.backendAuthenticationConfigs.list networksecurity.clientTlsPolicies.getIamPolicy networksecurity.clientTlsPolicies.list networksecurity.firewallEndpointAssociations.list networksecurity.firewallEndpoints.list networksecurity.gatewaySecurityPolicies.list networksecurity.gatewaySecurityPolicyRules.list networksecurity.interceptDeploymentGroups.list networksecurity.interceptDeployments.list networksecurity.interceptEndpointGroupAssociations.list networksecurity.interceptEndpointGroups.list networksecurity.locations.list networksecurity.mirroringDeploymentGroups.list networksecurity.mirroringDeployments.list networksecurity.mirroringEndpointGroupAssociations.list networksecurity.mirroringEndpointGroups.list networksecurity.operations.list networksecurity.partnerSSEGateways.list networksecurity.partnerSSERealms.list networksecurity.sacAttachments.list networksecurity.sacRealms.list networksecurity.securityProfileGroups.list networksecurity.securityProfiles.list networksecurity.serverTlsPolicies.getIamPolicy networksecurity.serverTlsPolicies.list networksecurity.sseGatewayReferences.list networksecurity.tlsInspectionPolicies.list networksecurity.urlLists.list networkservices.authzExtensions.list networkservices.endpointPolicies.list networkservices.gateways.list networkservices.grpcRoutes.list networkservices.httpFilters.list networkservices.httpRoutes.list networkservices.httpfilters.getIamPolicy networkservices.httpfilters.list networkservices.lbEdgeExtensions.list networkservices.lbRouteExtensions.list networkservices.lbTrafficExtensions.list networkservices.locations.list networkservices.meshes.list networkservices.operations.list networkservices.route_views.list networkservices.serviceBindings.list networkservices.serviceLbPolicies.list networkservices.tcpRoutes.list networkservices.tlsRoutes.list networkservices.wasmPlugins.list notebooks.environments.getIamPolicy notebooks.environments.list notebooks.executions.getIamPolicy notebooks.executions.list notebooks.instances.getIamPolicy notebooks.instances.list notebooks.locations.list notebooks.operations.list notebooks.runtimes.getIamPolicy notebooks.runtimes.list notebooks.schedules.getIamPolicy notebooks.schedules.list observability.analyticsViews.list ondemandscanning.operations.list opsconfigmonitoring.resourceMetadata.list oracledatabase.autonomousDatabaseBackups.list oracledatabase.autonomousDatabaseCharacterSets.list oracledatabase.autonomousDatabases.list oracledatabase.autonomousDbVersions.list oracledatabase.cloudExadataInfrastructures.list oracledatabase.cloudVmClusters.list oracledatabase.dbNodes.list oracledatabase.dbServers.list oracledatabase.dbSystemShapes.list oracledatabase.entitlements.list oracledatabase.giVersions.list oracledatabase.locations.list oracledatabase.operations.list oracledatabase.systemVersions.list orgpolicy.constraints.list orgpolicy.customConstraints.list orgpolicy.policies.list osconfig.guestPolicies.list osconfig.instanceOSPoliciesCompliances.list osconfig.inventories.list osconfig.locations.list osconfig.operations.list osconfig.osPolicyAssignmentReports.list osconfig.osPolicyAssignments.list osconfig.patchDeployments.list osconfig.patchJobs.list osconfig.policyOrchestrators.list osconfig.upgradeReports.list osconfig.vulnerabilityReports.list parallelstore.instances.list parallelstore.locations.list parallelstore.operations.list parametermanager.locations.list parametermanager.parameterVersions.list parametermanager.parameters.list paymentsresellersubscription.products.list paymentsresellersubscription.promotions.list policyremediatormanager.locations.list policyremediatormanager.operations.list policysimulator.accessPolicySimulationResults.list policysimulator.accessPolicySimulations.list policysimulator.orgPolicyViolations.list policysimulator.orgPolicyViolationsPreviews.list policysimulator.replayResults.list policysimulator.replays.list privateca.caPools.getIamPolicy privateca.caPools.list privateca.certificateAuthorities.getIamPolicy privateca.certificateAuthorities.list privateca.certificateRevocationLists.getIamPolicy privateca.certificateRevocationLists.list privateca.certificateTemplates.getIamPolicy privateca.certificateTemplates.list privateca.certificates.getIamPolicy privateca.certificates.list privateca.locations.list privateca.operations.list privateca.reusableConfigs.getIamPolicy privateca.reusableConfigs.list privilegedaccessmanager.entitlements.list privilegedaccessmanager.grants.list privilegedaccessmanager.locations.list privilegedaccessmanager.operations.list proximitybeacon.attachments.list proximitybeacon.beacons.getIamPolicy proximitybeacon.beacons.list proximitybeacon.namespaces.getIamPolicy proximitybeacon.namespaces.list pubsub.schemas.getIamPolicy pubsub.schemas.list pubsub.snapshots.getIamPolicy pubsub.snapshots.list pubsub.subscriptions.getIamPolicy pubsub.subscriptions.list pubsub.topics.getIamPolicy pubsub.topics.list pubsublite.operations.list pubsublite.reservations.list pubsublite.subscriptions.list pubsublite.topics.list recaptchaenterprise.firewallpolicies.list recaptchaenterprise.keys.list recaptchaenterprise.relatedaccountgroupmemberships.list recaptchaenterprise.relatedaccountgroups.list recommender.alloydbClusterPerformanceInsights.list recommender.alloydbClusterPerformanceRecommendations.list recommender.alloydbClusterReliabilityInsights.list recommender.alloydbClusterReliabilityRecommendations.list recommender.alloydbInstanceSecurityInsights.list recommender.alloydbInstanceSecurityRecommendations.list recommender.bigqueryCapacityCommitmentsInsights.list recommender.bigqueryCapacityCommitmentsRecommendations.list recommender.bigqueryMaterializedViewInsights.list recommender.bigqueryMaterializedViewRecommendations.list recommender.bigqueryPartitionClusterRecommendations.list recommender.bigqueryTableStatsInsights.list recommender.bigtableClusterPerformanceInsights.list recommender.bigtableClusterPerformanceRecommendations.list recommender.cloudAssetInsights.list recommender.cloudCostGeneralInsights.list recommender.cloudCostGeneralRecommendations.list recommender.cloudDeprecationGeneralInsights.list recommender.cloudDeprecationGeneralRecommendations.list recommender.cloudFunctionsPerformanceInsights.list recommender.cloudFunctionsPerformanceRecommendations.list recommender.cloudManageabilityGeneralInsights.list recommender.cloudManageabilityGeneralRecommendations.list recommender.cloudPerformanceGeneralInsights.list recommender.cloudPerformanceGeneralRecommendations.list recommender.cloudRecentChangeInsights.list recommender.cloudRecentChangeRecommendations.list recommender.cloudReliabilityGeneralInsights.list recommender.cloudReliabilityGeneralRecommendations.list recommender.cloudSecurityGeneralInsights.list recommender.cloudSecurityGeneralRecommendations.list recommender.cloudsqlIdleInstanceRecommendations.list recommender.cloudsqlInstanceActivityInsights.list recommender.cloudsqlInstanceCpuUsageInsights.list recommender.cloudsqlInstanceDiskUsageTrendInsights.list recommender.cloudsqlInstanceMemoryUsageInsights.list recommender.cloudsqlInstanceOomProbabilityInsights.list recommender.cloudsqlInstanceOutOfDiskRecommendations.list recommender.cloudsqlInstancePerformanceInsights.list recommender.cloudsqlInstancePerformanceRecommendations.list recommender.cloudsqlInstanceReliabilityInsights.list recommender.cloudsqlInstanceReliabilityRecommendations.list recommender.cloudsqlInstanceSecurityInsights.list recommender.cloudsqlInstanceSecurityRecommendations.list recommender.cloudsqlInstanceUnderprovisionedCpuUsageInsights.list recommender.cloudsqlInstanceUnderprovisionedMemoryUsageInsights.list recommender.cloudsqlOverprovisionedInstanceRecommendations.list recommender.cloudsqlUnderProvisionedInstanceRecommendations.list recommender.commitmentUtilizationInsights.list recommender.computeAddressIdleResourceInsights.list recommender.computeAddressIdleResourceRecommendations.list recommender.computeDiskIdleResourceInsights.list recommender.computeDiskIdleResourceRecommendations.list recommender.computeFirewallInsights.list recommender.computeImageIdleResourceInsights.list recommender.computeImageIdleResourceRecommendations.list recommender.computeInstanceCpuUsageInsights.list recommender.computeInstanceCpuUsagePredictionInsights.list recommender.computeInstanceCpuUsageTrendInsights.list recommender.computeInstanceGroupManagerCpuUsageInsights.list recommender.computeInstanceGroupManagerCpuUsagePredictionInsights.list recommender.computeInstanceGroupManagerCpuUsageTrendInsights.list recommender.computeInstanceGroupManagerMachineTypeRecommendations.list recommender.computeInstanceGroupManagerMemoryUsageInsights.list recommender.computeInstanceGroupManagerMemoryUsagePredictionInsights.list recommender.computeInstanceIdleResourceRecommendations.list recommender.computeInstanceMachineTypeRecommendations.list recommender.computeInstanceMemoryUsageInsights.list recommender.computeInstanceMemoryUsagePredictionInsights.list recommender.computeInstanceNetworkThroughputInsights.list recommender.containerDiagnosisInsights.list recommender.containerDiagnosisRecommendations.list recommender.costInsights.list recommender.dataflowDiagnosticsInsights.list recommender.errorReportingInsights.list recommender.errorReportingRecommendations.list recommender.firestoreDatabaseFirebaseRulesInsights.list recommender.firestoreDatabaseFirebaseRulesRecommendations.list recommender.firestoreDatabaseReliabilityInsights.list recommender.firestoreDatabaseReliabilityRecommendations.list recommender.gmpGuidedExperienceInsights.list recommender.gmpGuidedExperienceRecommendations.list recommender.gmpProjectManagementInsights.list recommender.gmpProjectManagementRecommendations.list recommender.gmpProjectProductSuggestionsInsights.list recommender.gmpProjectProductSuggestionsRecommendations.list recommender.iamPolicyChangeRiskInsights.list recommender.iamPolicyChangeRiskRecommendations.list recommender.iamPolicyInsights.list recommender.iamPolicyLateralMovementInsights.list recommender.iamPolicyRecommendations.list recommender.iamServiceAccountChangeRiskInsights.list recommender.iamServiceAccountChangeRiskRecommendations.list recommender.iamServiceAccountInsights.list recommender.locations.list recommender.loggingProductSuggestionContainerInsights.list recommender.loggingProductSuggestionContainerRecommendations.list recommender.memorystoreManageabilityInsights.list recommender.memorystoreManageabilityRecommendations.list recommender.memorystorePerformanceInsights.list recommender.memorystorePerformanceRecommendations.list recommender.memorystoreReliabilityInsights.list recommender.memorystoreReliabilityRecommendations.list recommender.memorystoreUtilizationInsights.list recommender.monitoringProductSuggestionComputeInsights.list recommender.monitoringProductSuggestionComputeRecommendations.list recommender.networkAnalyzerCloudSqlInsights.list recommender.networkAnalyzerDynamicRouteInsights.list recommender.networkAnalyzerGkeConnectivityInsights.list recommender.networkAnalyzerGkeIpAddressInsights.list recommender.networkAnalyzerGkeServiceAccountInsights.list recommender.networkAnalyzerIpAddressInsights.list recommender.networkAnalyzerLoadBalancerInsights.list recommender.networkAnalyzerVpcConnectivityInsights.list recommender.orgPolicyInsights.list recommender.orgPolicyRecommendations.list recommender.resourcemanagerProjectChangeRiskInsights.list recommender.resourcemanagerProjectChangeRiskRecommendations.list recommender.resourcemanagerProjectUtilizationInsights.list recommender.resourcemanagerProjectUtilizationRecommendations.list recommender.resourcemanagerServiceLimitInsights.list recommender.resourcemanagerServiceLimitRecommendations.list recommender.runServiceCostInsights.list recommender.runServiceCostRecommendations.list recommender.runServiceIdentityInsights.list recommender.runServiceIdentityRecommendations.list recommender.runServicePerformanceInsights.list recommender.runServicePerformanceRecommendations.list recommender.runServiceSecurityInsights.list recommender.runServiceSecurityRecommendations.list recommender.spannerDatabaseSecurityInsights.list recommender.spannerDatabaseSecurityRecommendations.list recommender.spannerProjectReliabilityInsights.list recommender.spannerProjectReliabilityRecommendations.list recommender.spendBasedCommitmentInsights.list recommender.spendBasedCommitmentRecommendations.list recommender.storageBucketSoftDeleteInsights.list recommender.storageBucketSoftDeleteRecommendations.list recommender.usageCommitmentRecommendations.list redis.backupCollections.list redis.backups.list redis.clusters.list redis.instances.list redis.locations.list redis.operations.list remotebuildexecution.instances.list remotebuildexecution.workerpools.list resourcemanager.folders.getIamPolicy resourcemanager.folders.list resourcemanager.hierarchyNodes.listTagBindings resourcemanager.organizations.getIamPolicy resourcemanager.projects.getIamPolicy resourcemanager.projects.list resourcemanager.tagHolds.list resourcemanager.tagKeys.getIamPolicy resourcemanager.tagKeys.list resourcemanager.tagValues.getIamPolicy resourcemanager.tagValues.list resourcesettings.settings.list retail.branches.list retail.catalogs.list retail.controls.list retail.experiments.list retail.models.list retail.operations.list retail.products.list retail.servingConfigs.list riskmanager.controlScoreBreakdowns.list riskmanager.operations.list riskmanager.policies.list riskmanager.reports.list rma.collectors.list rma.locations.list rma.operations.list run.configurations.list run.executions.list run.jobs.getIamPolicy run.jobs.list run.locations.list run.operations.list run.revisions.list run.routes.list run.services.getIamPolicy run.services.list run.tasks.list runapps.applications.list runapps.deployments.list runapps.locations.list runapps.operations.list runtimeconfig.configs.getIamPolicy runtimeconfig.configs.list runtimeconfig.operations.list runtimeconfig.variables.getIamPolicy runtimeconfig.variables.list runtimeconfig.waiters.getIamPolicy runtimeconfig.waiters.list saasservicemgmt.locations.list saasservicemgmt.operations.list saasservicemgmt.releases.list saasservicemgmt.rolloutKinds.list saasservicemgmt.rollouts.list saasservicemgmt.saas.list saasservicemgmt.unitKinds.list saasservicemgmt.unitOperations.list saasservicemgmt.units.list secretmanager.locations.list secretmanager.secrets.getIamPolicy secretmanager.secrets.list secretmanager.versions.list securedlandingzone.overwatches.list securesourcemanager.branchRules.list securesourcemanager.instances.getIamPolicy securesourcemanager.instances.list securesourcemanager.locations.list securesourcemanager.operations.list securesourcemanager.repositories.getIamPolicy securesourcemanager.repositories.list securesourcemanager.sshkeys.list securitycenter.assets.list securitycenter.attackpaths.list securitycenter.bigQueryExports.list securitycenter.compliancesnapshots.list securitycenter.effectivesecurityhealthanalyticscustommodules.list securitycenter.findings.list securitycenter.issues.list securitycenter.muteconfigs.list securitycenter.notificationconfig.list securitycenter.resourcevalueconfigs.list securitycenter.securityhealthanalyticscustommodules.list securitycenter.sources.getIamPolicy securitycenter.sources.list securitycenter.valuedresources.list securitycenter.vulnerabilitysnapshots.list securitycentermanagement.effectiveEventThreatDetectionCustomModules.list securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list securitycentermanagement.eventThreatDetectionCustomModules.list securitycentermanagement.locations.list securitycentermanagement.securityCenterServices.list securitycentermanagement.securityHealthAnalyticsCustomModules.list securityposture.locations.list securityposture.operations.list securityposture.postureDeployments.list securityposture.postureTemplates.list securityposture.postures.list securityposture.reports.list servicebroker.bindingoperations.list servicebroker.bindings.getIamPolicy servicebroker.bindings.list servicebroker.catalogs.getIamPolicy servicebroker.catalogs.list servicebroker.instanceoperations.list servicebroker.instances.getIamPolicy servicebroker.instances.list serviceconsumermanagement.tenancyu.list servicedirectory.endpoints.getIamPolicy servicedirectory.endpoints.list servicedirectory.locations.list servicedirectory.namespaces.getIamPolicy servicedirectory.namespaces.list servicedirectory.services.getIamPolicy servicedirectory.services.list servicehealth.events.list servicehealth.locations.list servicehealth.organizationEvents.list servicehealth.organizationImpacts.list servicemanagement.services.getIamPolicy servicemanagement.services.list servicenetworking.operations.list servicesecurityinsights.clusterSecurityInfo.list servicesecurityinsights.securityInfo.list servicesecurityinsights.workloadPolicies.list serviceusage.services.list source.repos.getIamPolicy source.repos.list spanner.backupOperations.list spanner.backupSchedules.getIamPolicy spanner.backupSchedules.list spanner.backups.getIamPolicy spanner.backups.list spanner.databaseOperations.list spanner.databaseRoles.list spanner.databases.getIamPolicy spanner.databases.list spanner.instanceConfigOperations.list spanner.instanceConfigs.list spanner.instanceOperations.list spanner.instancePartitionOperations.list spanner.instancePartitions.list spanner.instances.getIamPolicy spanner.instances.list spanner.sessions.list speakerid.phrases.list speakerid.speakers.list speech.customClasses.list speech.locations.list speech.operations.list speech.phraseSets.list speech.recognizers.list stackdriver.resourceMetadata.list storage.anywhereCaches.list storage.bucketOperations.list storage.buckets.getIamPolicy storage.buckets.list storage.folders.list storage.hmacKeys.list storage.managedFolders.getIamPolicy storage.managedFolders.list storage.multipartUploads.list storage.objects.getIamPolicy storage.objects.list storageinsights.datasetConfigs.list storageinsights.locations.list storageinsights.operations.list storageinsights.reportConfigs.list storageinsights.reportDetails.list storagetransfer.agentpools.list storagetransfer.jobs.list storagetransfer.operations.list stream.locations.list stream.operations.list stream.streamContents.list stream.streamInstances.list telcoautomation.blueprints.list telcoautomation.deployments.list telcoautomation.edgeSlms.list telcoautomation.hydratedDeployments.list telcoautomation.locations.list telcoautomation.operations.list telcoautomation.orchestrationClusters.list telcoautomation.publicBlueprints.list timeseriesinsights.datasets.list timeseriesinsights.locations.list tpu.acceleratortypes.list tpu.locations.list tpu.nodes.list tpu.operations.list tpu.runtimeversions.list tpu.tensorflowversions.list transcoder.jobTemplates.list transcoder.jobs.list transferappliance.appliances.list transferappliance.locations.list transferappliance.operations.list transferappliance.orders.list transferappliance.savedAddresses.list translationhub.portals.list videostitcher.cdnKeys.list videostitcher.liveAdTagDetails.list videostitcher.liveConfigs.list videostitcher.operations.list videostitcher.slates.list videostitcher.vodAdTagDetails.list videostitcher.vodConfigs.list videostitcher.vodStitchDetails.list visionai.analyses.getIamPolicy visionai.analyses.list visionai.annotations.list visionai.applications.list visionai.assets.list visionai.clusters.getIamPolicy visionai.clusters.list visionai.corpora.list visionai.dataSchemas.list visionai.drafts.list visionai.events.getIamPolicy visionai.events.list visionai.indexEndpoints.list visionai.indexes.list visionai.instances.list visionai.locations.list visionai.operations.list visionai.operators.getIamPolicy visionai.operators.list visionai.processors.list visionai.searchConfigs.list visionai.series.getIamPolicy visionai.series.list visionai.streams.getIamPolicy visionai.streams.list visionai.uistreams.list visualinspection.annotationSets.list visualinspection.annotationSpecs.list visualinspection.annotations.list visualinspection.datasets.list visualinspection.images.list visualinspection.locations.list visualinspection.modelEvaluations.list visualinspection.models.list visualinspection.modules.list visualinspection.operations.list visualinspection.solutionArtifacts.list visualinspection.solutions.list vmmigration.cloneJobs.list vmmigration.cutoverJobs.list vmmigration.datacenterConnectors.list vmmigration.deployments.list vmmigration.groups.list vmmigration.locations.list vmmigration.migratingVms.list vmmigration.operations.list vmmigration.replicationCycles.list vmmigration.sources.list vmmigration.targets.list vmmigration.utilizationReports.list vmwareengine.clusters.getIamPolicy vmwareengine.clusters.list vmwareengine.externalAccessRules.list vmwareengine.externalAddresses.list vmwareengine.hcxActivationKeys.getIamPolicy vmwareengine.hcxActivationKeys.list vmwareengine.locations.list vmwareengine.loggingServers.list vmwareengine.managementDnsZoneBindings.list vmwareengine.networkPeerings.list vmwareengine.networkPolicies.list vmwareengine.nodeTypes.list vmwareengine.nodes.list vmwareengine.operations.list vmwareengine.privateClouds.getIamPolicy vmwareengine.privateClouds.list vmwareengine.privateConnections.list vmwareengine.subnets.list vmwareengine.vmwareEngineNetworks.list vpcaccess.connectors.list vpcaccess.locations.list vpcaccess.operations.list workflows.callbacks.list workflows.executions.list workflows.locations.list workflows.operations.list workflows.stepEntries.list workflows.workflows.list workloadcertificate.locations.list workloadcertificate.operations.list workloadcertificate.workloadRegistrations.list workloadmanager.actuations.list workloadmanager.deployments.list workloadmanager.discoveredprofiles.list workloadmanager.evaluations.list workloadmanager.executions.list workloadmanager.locations.list workloadmanager.operations.list workloadmanager.results.list workloadmanager.rules.list workstations.workstationClusters.list workstations.workstationConfigs.getIamPolicy workstations.workstationConfigs.list workstations.workstations.getIamPolicy workstations.workstations.list
Service Account Admin (roles/iam.serviceAccountAdmin) Create and manage service accounts. Lowest-level resources where you can grant this role: Service Account	iam.serviceAccountApiKeyBindings.* iam.serviceAccountApiKeyBindings.create iam.serviceAccountApiKeyBindings.delete iam.serviceAccountApiKeyBindings.undelete iam.serviceAccounts.create iam.serviceAccounts.createTagBinding iam.serviceAccounts.delete iam.serviceAccounts.deleteTagBinding iam.serviceAccounts.disable iam.serviceAccounts.enable iam.serviceAccounts.get iam.serviceAccounts.getIamPolicy iam.serviceAccounts.list iam.serviceAccounts.listEffectiveTags iam.serviceAccounts.listTagBindings iam.serviceAccounts.setIamPolicy iam.serviceAccounts.undelete iam.serviceAccounts.update resourcemanager.projects.get resourcemanager.projects.list
Service Account API Key Binding Admin (roles/iam.serviceAccountApiKeyBindingAdmin) Create and delete service account API Key bindings	iam.serviceAccountApiKeyBindings.* iam.serviceAccountApiKeyBindings.create iam.serviceAccountApiKeyBindings.delete iam.serviceAccountApiKeyBindings.undelete
Create Service Accounts (roles/iam.serviceAccountCreator) Access to create service accounts.	iam.serviceAccounts.create iam.serviceAccounts.get iam.serviceAccounts.list resourcemanager.projects.get resourcemanager.projects.list
Delete Service Accounts (roles/iam.serviceAccountDeleter) Access to delete service accounts.	iam.serviceAccounts.delete iam.serviceAccounts.get iam.serviceAccounts.list resourcemanager.projects.get resourcemanager.projects.list
Service Account Key Admin (roles/iam.serviceAccountKeyAdmin) Create and manage (and rotate) service account keys. Lowest-level resources where you can grant this role: Service Account	iam.serviceAccountKeys.* iam.serviceAccountKeys.create iam.serviceAccountKeys.delete iam.serviceAccountKeys.disable iam.serviceAccountKeys.enable iam.serviceAccountKeys.get iam.serviceAccountKeys.list iam.serviceAccounts.get iam.serviceAccounts.list resourcemanager.projects.get resourcemanager.projects.list
Service Account OpenID Connect Identity Token Creator (roles/iam.serviceAccountOpenIdTokenCreator) Create OpenID Connect (OIDC) identity tokens	iam.serviceAccounts.getOpenIdToken
Service Account Token Creator (roles/iam.serviceAccountTokenCreator) Impersonate service accounts (create OAuth2 access tokens, sign blobs or JWTs, etc). Lowest-level resources where you can grant this role: Service Account	iam.serviceAccounts.get iam.serviceAccounts.getAccessToken iam.serviceAccounts.getOpenIdToken iam.serviceAccounts.implicitDelegation iam.serviceAccounts.list iam.serviceAccounts.signBlob iam.serviceAccounts.signJwt resourcemanager.projects.get resourcemanager.projects.list
Service Account User (roles/iam.serviceAccountUser) Run operations as the service account. Lowest-level resources where you can grant this role: Service Account	iam.serviceAccounts.actAs iam.serviceAccounts.get iam.serviceAccounts.list resourcemanager.projects.get resourcemanager.projects.list
View Service Accounts (roles/iam.serviceAccountViewer) Read access to service accounts, metadata, and keys.	iam.serviceAccountKeys.get iam.serviceAccountKeys.list iam.serviceAccounts.get iam.serviceAccounts.getIamPolicy iam.serviceAccounts.list iam.serviceAccounts.listEffectiveTags iam.serviceAccounts.listTagBindings resourcemanager.projects.get resourcemanager.projects.list
IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin) Full rights to create and manage all workforce pools in the org, along with the ability to delegate permissions to other admins.	iam.workforcePoolProviderKeys.* iam.googleapis.com/workforcePoolProviderKeys.create iam.googleapis.com/workforcePoolProviderKeys.delete iam.googleapis.com/workforcePoolProviderKeys.get iam.googleapis.com/workforcePoolProviderKeys.list iam.googleapis.com/workforcePoolProviderKeys.undelete iam.workforcePoolProviders.* iam.googleapis.com/workforcePoolProviders.create iam.googleapis.com/workforcePoolProviders.delete iam.googleapis.com/workforcePoolProviders.get iam.googleapis.com/workforcePoolProviders.list iam.googleapis.com/workforcePoolProviders.undelete iam.googleapis.com/workforcePoolProviders.update iam.workforcePoolSubjects.* iam.googleapis.com/workforcePoolSubjects.delete iam.googleapis.com/workforcePoolSubjects.undelete iam.workforcePools.* iam.googleapis.com/workforcePools.create iam.googleapis.com/workforcePools.createPolicyBinding iam.googleapis.com/workforcePools.delete iam.googleapis.com/workforcePools.deletePolicyBinding iam.googleapis.com/workforcePools.get iam.googleapis.com/workforcePools.getIamPolicy iam.googleapis.com/workforcePools.list iam.googleapis.com/workforcePools.searchPolicyBindings iam.googleapis.com/workforcePools.setIamPolicy iam.googleapis.com/workforcePools.undelete iam.googleapis.com/workforcePools.update iam.googleapis.com/workforcePools.updatePolicyBinding
IAM Workforce Pool Editor (roles/iam.workforcePoolEditor) Rights to edit a particular instance of a workforce pool.	iam.googleapis.com/workforcePoolProviderKeys.get iam.googleapis.com/workforcePoolProviderKeys.list iam.googleapis.com/workforcePools.get iam.googleapis.com/workforcePools.list iam.googleapis.com/workforcePools.update iam.workforcePoolProviders.* iam.googleapis.com/workforcePoolProviders.create iam.googleapis.com/workforcePoolProviders.delete iam.googleapis.com/workforcePoolProviders.get iam.googleapis.com/workforcePoolProviders.list iam.googleapis.com/workforcePoolProviders.undelete iam.googleapis.com/workforcePoolProviders.update
IAM Workforce Pool Viewer (roles/iam.workforcePoolViewer) Rights to read workforce pool.	iam.googleapis.com/workforcePoolProviderKeys.get iam.googleapis.com/workforcePoolProviderKeys.list iam.googleapis.com/workforcePoolProviders.get iam.googleapis.com/workforcePoolProviders.list iam.googleapis.com/workforcePools.get iam.googleapis.com/workforcePools.list
IAM Workload Identity Pool Admin ^Beta (roles/iam.workloadIdentityPoolAdmin) Full rights to create and manage workload identity pools.	iam.workloadIdentityPoolProviderKeys.* iam.googleapis.com/workloadIdentityPoolProviderKeys.create iam.googleapis.com/workloadIdentityPoolProviderKeys.delete iam.googleapis.com/workloadIdentityPoolProviderKeys.get iam.googleapis.com/workloadIdentityPoolProviderKeys.list iam.googleapis.com/workloadIdentityPoolProviderKeys.undelete iam.workloadIdentityPoolProviders.* iam.googleapis.com/workloadIdentityPoolProviders.create iam.googleapis.com/workloadIdentityPoolProviders.delete iam.googleapis.com/workloadIdentityPoolProviders.get iam.googleapis.com/workloadIdentityPoolProviders.list iam.googleapis.com/workloadIdentityPoolProviders.undelete iam.googleapis.com/workloadIdentityPoolProviders.update iam.workloadIdentityPools.* iam.googleapis.com/workloadIdentityPools.create iam.googleapis.com/workloadIdentityPools.delete iam.googleapis.com/workloadIdentityPools.get iam.googleapis.com/workloadIdentityPools.list iam.googleapis.com/workloadIdentityPools.undelete iam.googleapis.com/workloadIdentityPools.update iam.workloadIdentityPools.createPolicyBinding iam.workloadIdentityPools.deletePolicyBinding iam.workloadIdentityPools.searchPolicyBindings iam.workloadIdentityPools.updatePolicyBinding resourcemanager.projects.get resourcemanager.projects.list
IAM Workload Identity Pool Viewer ^Beta (roles/iam.workloadIdentityPoolViewer) Read access to workload identity pools.	iam.googleapis.com/workloadIdentityPoolProviderKeys.get iam.googleapis.com/workloadIdentityPoolProviderKeys.list iam.googleapis.com/workloadIdentityPoolProviders.get iam.googleapis.com/workloadIdentityPoolProviders.list iam.googleapis.com/workloadIdentityPools.get iam.googleapis.com/workloadIdentityPools.list resourcemanager.projects.get resourcemanager.projects.list
Workload Identity User (roles/iam.workloadIdentityUser) Impersonate service accounts from federated workloads.	iam.serviceAccounts.get iam.serviceAccounts.getAccessToken iam.serviceAccounts.getOpenIdToken iam.serviceAccounts.list
Workspace Pool IAM Admin ^Beta (roles/iam.workspacePoolAdmin) IAM workspace pool admin able to bind IAM policies to Dasher accounts.	iam.workspacePools.* iam.googleapis.com/workspacePools.createPolicyBinding iam.googleapis.com/workspacePools.deletePolicyBinding iam.googleapis.com/workspacePools.searchPolicyBindings iam.googleapis.com/workspacePools.updatePolicyBinding

Identity and Access Management permissions

Permission	Included in roles
iam.denypolicies.create	Deny Admin (roles/iam.denyAdmin)
iam.denypolicies.delete	Deny Admin (roles/iam.denyAdmin)
iam.denypolicies.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Deny Admin (roles/iam.denyAdmin) Deny Reviewer (roles/iam.denyReviewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Security Center Service Agent (roles/securitycenter.serviceAgent) Security Center Control Service Agent (roles/securitycenter.controlServiceAgent)
iam.denypolicies.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Deny Admin (roles/iam.denyAdmin) Deny Reviewer (roles/iam.denyReviewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Security Center Service Agent (roles/securitycenter.serviceAgent) Security Center Control Service Agent (roles/securitycenter.controlServiceAgent)
iam.denypolicies.update	Deny Admin (roles/iam.denyAdmin)
iam.googleapis.com/oauthClientCredentials.create	Owner (roles/owner) IAM OAuth Client Admin (roles/iam.oauthClientAdmin)
iam.googleapis.com/oauthClientCredentials.delete	Owner (roles/owner) IAM OAuth Client Admin (roles/iam.oauthClientAdmin)
iam.googleapis.com/oauthClientCredentials.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) IAM OAuth Client Admin (roles/iam.oauthClientAdmin) IAM OAuth Client Viewer (roles/iam.oauthClientViewer)
iam.googleapis.com/oauthClientCredentials.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) IAM OAuth Client Admin (roles/iam.oauthClientAdmin) IAM OAuth Client Viewer (roles/iam.oauthClientViewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer)
iam.googleapis.com/oauthClientCredentials.update	Owner (roles/owner) IAM OAuth Client Admin (roles/iam.oauthClientAdmin)
iam.googleapis.com/oauthClients.create	Owner (roles/owner) IAM OAuth Client Admin (roles/iam.oauthClientAdmin)
iam.googleapis.com/oauthClients.delete	Owner (roles/owner) IAM OAuth Client Admin (roles/iam.oauthClientAdmin)
iam.googleapis.com/oauthClients.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) IAM OAuth Client Admin (roles/iam.oauthClientAdmin) IAM OAuth Client Viewer (roles/iam.oauthClientViewer)
iam.googleapis.com/oauthClients.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) IAM OAuth Client Admin (roles/iam.oauthClientAdmin) IAM OAuth Client Viewer (roles/iam.oauthClientViewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer)
iam.googleapis.com/oauthClients.undelete	Owner (roles/owner) IAM OAuth Client Admin (roles/iam.oauthClientAdmin)
iam.googleapis.com/oauthClients.update	Owner (roles/owner) IAM OAuth Client Admin (roles/iam.oauthClientAdmin)
iam.googleapis.com/workforcePoolProviderKeys.create	Owner (roles/owner) IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin)
iam.googleapis.com/workforcePoolProviderKeys.delete	Owner (roles/owner) IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin)
iam.googleapis.com/workforcePoolProviderKeys.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin) IAM Workforce Pool Editor (roles/iam.workforcePoolEditor) IAM Workforce Pool Viewer (roles/iam.workforcePoolViewer)
iam.googleapis.com/workforcePoolProviderKeys.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin) IAM Workforce Pool Editor (roles/iam.workforcePoolEditor) IAM Workforce Pool Viewer (roles/iam.workforcePoolViewer)
iam.googleapis.com/workforcePoolProviderKeys.undelete	Owner (roles/owner) IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin)
iam.googleapis.com/workforcePoolProviders.create	Owner (roles/owner) IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin) IAM Workforce Pool Editor (roles/iam.workforcePoolEditor)
iam.googleapis.com/workforcePoolProviders.delete	Owner (roles/owner) IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin) IAM Workforce Pool Editor (roles/iam.workforcePoolEditor)
iam.googleapis.com/workforcePoolProviders.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin) IAM Workforce Pool Editor (roles/iam.workforcePoolEditor) IAM Workforce Pool Viewer (roles/iam.workforcePoolViewer)
iam.googleapis.com/workforcePoolProviders.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin) IAM Workforce Pool Editor (roles/iam.workforcePoolEditor) IAM Workforce Pool Viewer (roles/iam.workforcePoolViewer)
iam.googleapis.com/workforcePoolProviders.undelete	Owner (roles/owner) IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin) IAM Workforce Pool Editor (roles/iam.workforcePoolEditor)
iam.googleapis.com/workforcePoolProviders.update	Owner (roles/owner) IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin) IAM Workforce Pool Editor (roles/iam.workforcePoolEditor)
iam.googleapis.com/workforcePoolSubjects.delete	Owner (roles/owner) IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin)
iam.googleapis.com/workforcePoolSubjects.undelete	Owner (roles/owner) IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin)
iam.googleapis.com/workforcePools.create	Owner (roles/owner) IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin)
iam.googleapis.com/workforcePools.createPolicyBinding	Owner (roles/owner) IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin)
iam.googleapis.com/workforcePools.delete	Owner (roles/owner) IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin)
iam.googleapis.com/workforcePools.deletePolicyBinding	Owner (roles/owner) IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin)
iam.googleapis.com/workforcePools.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin) IAM Workforce Pool Editor (roles/iam.workforcePoolEditor) IAM Workforce Pool Viewer (roles/iam.workforcePoolViewer)
iam.googleapis.com/workforcePools.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin)
iam.googleapis.com/workforcePools.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin) IAM Workforce Pool Editor (roles/iam.workforcePoolEditor) IAM Workforce Pool Viewer (roles/iam.workforcePoolViewer)
iam.googleapis.com/workforcePools.searchPolicyBindings	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin)
iam.googleapis.com/workforcePools.setIamPolicy	Owner (roles/owner) Security Admin (roles/iam.securityAdmin) IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin)
iam.googleapis.com/workforcePools.undelete	Owner (roles/owner) IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin)
iam.googleapis.com/workforcePools.update	Owner (roles/owner) IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin) IAM Workforce Pool Editor (roles/iam.workforcePoolEditor)
iam.googleapis.com/workforcePools.updatePolicyBinding	Owner (roles/owner) IAM Workforce Pool Admin (roles/iam.workforcePoolAdmin)
iam.googleapis.com/workloadIdentityPoolProviderKeys.create	Owner (roles/owner) IAM Workload Identity Pool Admin (roles/iam.workloadIdentityPoolAdmin)
iam.googleapis.com/workloadIdentityPoolProviderKeys.delete	Owner (roles/owner) IAM Workload Identity Pool Admin (roles/iam.workloadIdentityPoolAdmin)
iam.googleapis.com/workloadIdentityPoolProviderKeys.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) IAM Workload Identity Pool Admin (roles/iam.workloadIdentityPoolAdmin) IAM Workload Identity Pool Viewer (roles/iam.workloadIdentityPoolViewer)
iam.googleapis.com/workloadIdentityPoolProviderKeys.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) IAM Workload Identity Pool Admin (roles/iam.workloadIdentityPoolAdmin) IAM Workload Identity Pool Viewer (roles/iam.workloadIdentityPoolViewer)
iam.googleapis.com/workloadIdentityPoolProviderKeys.undelete	Owner (roles/owner) IAM Workload Identity Pool Admin (roles/iam.workloadIdentityPoolAdmin)
iam.googleapis.com/workloadIdentityPoolProviders.create	Owner (roles/owner) IAM Workload Identity Pool Admin (roles/iam.workloadIdentityPoolAdmin)
iam.googleapis.com/workloadIdentityPoolProviders.delete	Owner (roles/owner) IAM Workload Identity Pool Admin (roles/iam.workloadIdentityPoolAdmin)
iam.googleapis.com/workloadIdentityPoolProviders.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) IAM Workload Identity Pool Admin (roles/iam.workloadIdentityPoolAdmin) IAM Workload Identity Pool Viewer (roles/iam.workloadIdentityPoolViewer)
iam.googleapis.com/workloadIdentityPoolProviders.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) IAM Workload Identity Pool Admin (roles/iam.workloadIdentityPoolAdmin) IAM Workload Identity Pool Viewer (roles/iam.workloadIdentityPoolViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Security Center Service Agent (roles/securitycenter.serviceAgent) Security Center Control Service Agent (roles/securitycenter.controlServiceAgent)
iam.googleapis.com/workloadIdentityPoolProviders.undelete	Owner (roles/owner) IAM Workload Identity Pool Admin (roles/iam.workloadIdentityPoolAdmin)
iam.googleapis.com/workloadIdentityPoolProviders.update	Owner (roles/owner) IAM Workload Identity Pool Admin (roles/iam.workloadIdentityPoolAdmin)
iam.googleapis.com/workloadIdentityPools.create	Owner (roles/owner) IAM Workload Identity Pool Admin (roles/iam.workloadIdentityPoolAdmin)
iam.googleapis.com/workloadIdentityPools.delete	Owner (roles/owner) IAM Workload Identity Pool Admin (roles/iam.workloadIdentityPoolAdmin)
iam.googleapis.com/workloadIdentityPools.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) IAM Workload Identity Pool Admin (roles/iam.workloadIdentityPoolAdmin) IAM Workload Identity Pool Viewer (roles/iam.workloadIdentityPoolViewer)
iam.googleapis.com/workloadIdentityPools.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) IAM Workload Identity Pool Admin (roles/iam.workloadIdentityPoolAdmin) IAM Workload Identity Pool Viewer (roles/iam.workloadIdentityPoolViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Security Center Service Agent (roles/securitycenter.serviceAgent) Security Center Control Service Agent (roles/securitycenter.controlServiceAgent)
iam.googleapis.com/workloadIdentityPools.undelete	Owner (roles/owner) IAM Workload Identity Pool Admin (roles/iam.workloadIdentityPoolAdmin)
iam.googleapis.com/workloadIdentityPools.update	Owner (roles/owner) IAM Workload Identity Pool Admin (roles/iam.workloadIdentityPoolAdmin)
iam.googleapis.com/workspacePools.createPolicyBinding	Owner (roles/owner) Workspace Pool IAM Admin (roles/iam.workspacePoolAdmin)
iam.googleapis.com/workspacePools.deletePolicyBinding	Owner (roles/owner) Workspace Pool IAM Admin (roles/iam.workspacePoolAdmin)
iam.googleapis.com/workspacePools.searchPolicyBindings	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Workspace Pool IAM Admin (roles/iam.workspacePoolAdmin)
iam.googleapis.com/workspacePools.updatePolicyBinding	Owner (roles/owner) Workspace Pool IAM Admin (roles/iam.workspacePoolAdmin)
iam.operations.get	Owner (roles/owner) IAM Operation Viewer (roles/iam.operationViewer)
iam.policybindings.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Folder Admin (roles/resourcemanager.folderAdmin) Folder IAM Admin (roles/resourcemanager.folderIamAdmin) Organization Administrator (roles/resourcemanager.organizationAdmin) Project IAM Admin (roles/resourcemanager.projectIamAdmin)
iam.policybindings.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Folder Admin (roles/resourcemanager.folderAdmin) Folder IAM Admin (roles/resourcemanager.folderIamAdmin) Organization Administrator (roles/resourcemanager.organizationAdmin) Project IAM Admin (roles/resourcemanager.projectIamAdmin)
iam.principalaccessboundarypolicies.bind	Principal Access Boundary Policy Admin (roles/iam.principalAccessBoundaryAdmin) Principal Access Boundary Policy User (roles/iam.principalAccessBoundaryUser)
iam.principalaccessboundarypolicies.create	Principal Access Boundary Policy Admin (roles/iam.principalAccessBoundaryAdmin)
iam.principalaccessboundarypolicies.delete	Principal Access Boundary Policy Admin (roles/iam.principalAccessBoundaryAdmin)
iam.principalaccessboundarypolicies.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Principal Access Boundary Policy Admin (roles/iam.principalAccessBoundaryAdmin) Principal Access Boundary Policy User (roles/iam.principalAccessBoundaryUser) Principal Access Boundary Policy Viewer (roles/iam.principalAccessBoundaryViewer)
iam.principalaccessboundarypolicies.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Principal Access Boundary Policy Admin (roles/iam.principalAccessBoundaryAdmin) Principal Access Boundary Policy User (roles/iam.principalAccessBoundaryUser) Principal Access Boundary Policy Viewer (roles/iam.principalAccessBoundaryViewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer)
iam.principalaccessboundarypolicies.searchPolicyBindings	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Principal Access Boundary Policy Admin (roles/iam.principalAccessBoundaryAdmin) Principal Access Boundary Policy Viewer (roles/iam.principalAccessBoundaryViewer)
iam.principalaccessboundarypolicies.unbind	Principal Access Boundary Policy Admin (roles/iam.principalAccessBoundaryAdmin) Principal Access Boundary Policy User (roles/iam.principalAccessBoundaryUser)
iam.principalaccessboundarypolicies.update	Principal Access Boundary Policy Admin (roles/iam.principalAccessBoundaryAdmin)
iam.roles.create	Owner (roles/owner) Organization Role Administrator (roles/iam.organizationRoleAdmin) Role Administrator (roles/iam.roleAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
iam.roles.delete	Owner (roles/owner) Organization Role Administrator (roles/iam.organizationRoleAdmin) Role Administrator (roles/iam.roleAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
iam.roles.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Container Registry -> Artifact Registry Migration Admin (roles/artifactregistry.containerRegistryMigrationAdmin) Organization Role Administrator (roles/iam.organizationRoleAdmin) Organization Role Viewer (roles/iam.organizationRoleViewer) Role Administrator (roles/iam.roleAdmin) Role Viewer (roles/iam.roleViewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
iam.roles.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Organization Role Administrator (roles/iam.organizationRoleAdmin) Organization Role Viewer (roles/iam.organizationRoleViewer) Role Administrator (roles/iam.roleAdmin) Role Viewer (roles/iam.roleViewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
iam.roles.undelete	Owner (roles/owner) Organization Role Administrator (roles/iam.organizationRoleAdmin) Role Administrator (roles/iam.roleAdmin)
iam.roles.update	Owner (roles/owner) Organization Role Administrator (roles/iam.organizationRoleAdmin) Role Administrator (roles/iam.roleAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
iam.serviceAccountApiKeyBindings.create	Owner (roles/owner) Editor (roles/editor) Service Account Admin (roles/iam.serviceAccountAdmin) Service Account API Key Binding Admin (roles/iam.serviceAccountApiKeyBindingAdmin)
iam.serviceAccountApiKeyBindings.delete	Owner (roles/owner) Editor (roles/editor) Service Account Admin (roles/iam.serviceAccountAdmin) Service Account API Key Binding Admin (roles/iam.serviceAccountApiKeyBindingAdmin)
iam.serviceAccountApiKeyBindings.undelete	Owner (roles/owner) Editor (roles/editor) Service Account Admin (roles/iam.serviceAccountAdmin) Service Account API Key Binding Admin (roles/iam.serviceAccountApiKeyBindingAdmin)
iam.serviceAccountKeys.create	Owner (roles/owner) Editor (roles/editor) Assured OSS Admin (roles/assuredoss.admin) Service Account Key Admin (roles/iam.serviceAccountKeyAdmin) Security Center Admin (roles/securitycenter.admin)
iam.serviceAccountKeys.delete	Owner (roles/owner) Editor (roles/editor) Service Account Key Admin (roles/iam.serviceAccountKeyAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
iam.serviceAccountKeys.disable	Owner (roles/owner) Editor (roles/editor) Service Account Key Admin (roles/iam.serviceAccountKeyAdmin)
iam.serviceAccountKeys.enable	Owner (roles/owner) Editor (roles/editor) Service Account Key Admin (roles/iam.serviceAccountKeyAdmin)
iam.serviceAccountKeys.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Service Account Key Admin (roles/iam.serviceAccountKeyAdmin) View Service Accounts (roles/iam.serviceAccountViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
iam.serviceAccountKeys.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Service Account Key Admin (roles/iam.serviceAccountKeyAdmin) View Service Accounts (roles/iam.serviceAccountViewer)
iam.serviceAccounts.actAs	Owner (roles/owner) Editor (roles/editor) Backup and DR Compute Engine Operator (roles/backupdr.computeEngineOperator) Dataproc Hub Agent (roles/dataproc.hubAgent) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) Service Account User (roles/iam.serviceAccountUser) Cloud Run Service Agent (roles/serverless.serviceAgent) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (roles/aiplatform.serviceAgent) App Engine flexible environment Service Agent (roles/appengineflex.serviceAgent) Backup and DR Service Agent (roles/backupdr.serviceAgent) Google Batch Service Agent (roles/batch.serviceAgent) Infrastructure Manager Service Agent (roles/cloudconfig.serviceAgent) Cloud Deploy Service Agent (roles/clouddeploy.serviceAgent) Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent) Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Instance Group Manager Service Agent (roles/compute.instanceGroupManagerServiceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Config Delivery Service Agent (roles/configdelivery.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Datapipelines Service Agent (roles/datapipelines.serviceAgent) Cloud Dataplex Service Agent (roles/dataplex.serviceAgent) Dataprep Service Agent (roles/dataprep.serviceAgent) Dataproc Service Agent (roles/dataproc.serviceAgent) Eventarc Service Agent (roles/eventarc.serviceAgent) Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent) Game Services Service Agent (roles/gameservices.serviceAgent) Genomics Service Agent (roles/genomics.serviceAgent) KRM API Hosting AnthosApiEndpoint Service Agent (roles/krmapihosting.anthosApiEndpointServiceAgent) KRM API Hosting Service Agent (roles/krmapihosting.serviceAgent) Cloud Life Sciences Service Agent (roles/lifesciences.serviceAgent) AI Platform Notebooks Service Agent (roles/notebooks.serviceAgent) Cloud OS Config Service Agent (roles/osconfig.serviceAgent) Cloud Run Service Agent (roles/run.serviceAgent) Serverless Integrations Service Agent (roles/runapps.serviceAgent) Google Cloud Security Response Service Agent (roles/securitycenter.securityResponseServiceAgent) Workstations Service Agent (roles/workstations.serviceAgent) Vertex AI Colab Service Agent (roles/aiplatform.colabServiceAgent)
iam.serviceAccounts.create	Owner (roles/owner) Editor (roles/editor) Assured OSS Admin (roles/assuredoss.admin) Assured OSS Project Admin (roles/assuredoss.projectAdmin) Earth Engine Apps Publisher (roles/earthengine.appsPublisher) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) Service Account Admin (roles/iam.serviceAccountAdmin) Create Service Accounts (roles/iam.serviceAccountCreator) Security Center Admin (roles/securitycenter.admin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
iam.serviceAccounts.createTagBinding	Owner (roles/owner) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Service Account Admin (roles/iam.serviceAccountAdmin) Tag User (roles/resourcemanager.tagUser)
iam.serviceAccounts.delete	Owner (roles/owner) Editor (roles/editor) Service Account Admin (roles/iam.serviceAccountAdmin) Delete Service Accounts (roles/iam.serviceAccountDeleter) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
iam.serviceAccounts.deleteTagBinding	Owner (roles/owner) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Service Account Admin (roles/iam.serviceAccountAdmin) Tag User (roles/resourcemanager.tagUser)
iam.serviceAccounts.disable	Owner (roles/owner) Editor (roles/editor) Earth Engine Apps Publisher (roles/earthengine.appsPublisher) Service Account Admin (roles/iam.serviceAccountAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Chronicle SOAR Service Agent (roles/chronicle.soarServiceAgent)
iam.serviceAccounts.enable	Owner (roles/owner) Editor (roles/editor) Earth Engine Apps Publisher (roles/earthengine.appsPublisher) Service Account Admin (roles/iam.serviceAccountAdmin)
iam.serviceAccounts.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Assured OSS Admin (roles/assuredoss.admin) Assured OSS Project Admin (roles/assuredoss.projectAdmin) Backup and DR Compute Engine Operator (roles/backupdr.computeEngineOperator) Velostrata Manager (roles/cloudmigration.inframanager) Dataproc Hub Agent (roles/dataproc.hubAgent) Earth Engine Apps Publisher (roles/earthengine.appsPublisher) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Service Account Admin (roles/iam.serviceAccountAdmin) Create Service Accounts (roles/iam.serviceAccountCreator) Delete Service Accounts (roles/iam.serviceAccountDeleter) Service Account Key Admin (roles/iam.serviceAccountKeyAdmin) Service Account Token Creator (roles/iam.serviceAccountTokenCreator) Service Account User (roles/iam.serviceAccountUser) View Service Accounts (roles/iam.serviceAccountViewer) Workload Identity User (roles/iam.workloadIdentityUser) Security Center Admin (roles/securitycenter.admin) Cloud Workstations Admin (roles/workstations.admin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud API Gateway Management Service Agent (roles/apigateway_management.serviceAgent) App Engine flexible environment Service Agent (roles/appengineflex.serviceAgent) Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent) Backup and DR Service Agent (roles/backupdr.serviceAgent) Cloud Build Service Agent (roles/cloudbuild.serviceAgent) Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent) Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Datapipelines Service Agent (roles/datapipelines.serviceAgent) Dataprep Service Agent (roles/dataprep.serviceAgent) Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) AI Platform Service Agent (roles/ml.serviceAgent) AI Platform Notebooks Service Agent (roles/notebooks.serviceAgent) Cloud Pub/Sub Service Agent (roles/pubsub.serviceAgent) Cloud Workflows Service Agent (roles/workflows.serviceAgent) Workstations Service Agent (roles/workstations.serviceAgent) Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
iam.serviceAccounts.getAccessToken	Service Account Token Creator (roles/iam.serviceAccountTokenCreator) Workload Identity User (roles/iam.workloadIdentityUser) Cloud Run Service Agent (roles/serverless.serviceAgent) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Extension Service Agent (roles/aiplatform.extensionServiceAgent) Vertex AI Service Agent (roles/aiplatform.serviceAgent) Cloud API Gateway Service Agent (roles/apigateway.serviceAgent) Apigee Service Agent (roles/apigee.serviceAgent) App Engine Standard Environment Service Agent (roles/appengine.serviceAgent) App Engine flexible environment Service Agent (roles/appengineflex.serviceAgent) BigQuery Continuous Query Service Agent (roles/bigquerycontinuousquery.serviceAgent) BigQuery Data Transfer Service Agent (roles/bigquerydatatransfer.serviceAgent) BigQuery Spark Service Agent (roles/bigqueryspark.serviceAgent) Cloud Build Service Agent (roles/cloudbuild.serviceAgent) Infrastructure Manager Service Agent (roles/cloudconfig.serviceAgent) Cloud Deploy Service Agent (roles/clouddeploy.serviceAgent) Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent) Cloud Scheduler Service Agent (roles/cloudscheduler.serviceAgent) Cloud Tasks Service Agent (roles/cloudtasks.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Connectors Platform Service Agent (roles/connectors.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Dataproc Service Agent (roles/dataproc.serviceAgent) Eventarc Service Agent (roles/eventarc.serviceAgent) Application Integration Service Agent (roles/integrations.serviceAgent) AI Platform Service Agent (roles/ml.serviceAgent) AI Platform Notebooks Service Agent (roles/notebooks.serviceAgent) Cloud Pub/Sub Service Agent (roles/pubsub.serviceAgent) Cloud Run Service Agent (roles/run.serviceAgent) Cloud Source Repositories Service Agent (roles/sourcerepo.serviceAgent) Cloud Workflows Service Agent (roles/workflows.serviceAgent) Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
iam.serviceAccounts.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud Composer v2 API Service Agent Extension (roles/composer.ServiceAgentV2Ext) Earth Engine Apps Publisher (roles/earthengine.appsPublisher) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Service Account Admin (roles/iam.serviceAccountAdmin) View Service Accounts (roles/iam.serviceAccountViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent) Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent)
iam.serviceAccounts.getOpenIdToken	Service Account OpenID Connect Identity Token Creator (roles/iam.serviceAccountOpenIdTokenCreator) Service Account Token Creator (roles/iam.serviceAccountTokenCreator) Workload Identity User (roles/iam.workloadIdentityUser) Cloud Run Service Agent (roles/serverless.serviceAgent) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Extension Service Agent (roles/aiplatform.extensionServiceAgent) Vertex AI Service Agent (roles/aiplatform.serviceAgent) Cloud API Gateway Service Agent (roles/apigateway.serviceAgent) Apigee Service Agent (roles/apigee.serviceAgent) App Engine Standard Environment Service Agent (roles/appengine.serviceAgent) Cloud Build Service Agent (roles/cloudbuild.serviceAgent) Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent) Cloud Scheduler Service Agent (roles/cloudscheduler.serviceAgent) Cloud Tasks Service Agent (roles/cloudtasks.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Connectors Platform Service Agent (roles/connectors.serviceAgent) Eventarc Service Agent (roles/eventarc.serviceAgent) Application Integration Service Agent (roles/integrations.serviceAgent) AI Platform Service Agent (roles/ml.serviceAgent) Cloud Pub/Sub Service Agent (roles/pubsub.serviceAgent) Cloud Run Service Agent (roles/run.serviceAgent) Cloud Workflows Service Agent (roles/workflows.serviceAgent) Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
iam.serviceAccounts.implicitDelegation	Service Account Token Creator (roles/iam.serviceAccountTokenCreator) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Compute Engine Service Agent (roles/compute.serviceAgent) Connectors Platform Service Agent (roles/connectors.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) AI Platform Service Agent (roles/ml.serviceAgent) Cloud Pub/Sub Service Agent (roles/pubsub.serviceAgent) Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
iam.serviceAccounts.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Backup and DR Compute Engine Operator (roles/backupdr.computeEngineOperator) Cloud Talent Solution Admin (roles/cloudjobdiscovery.admin) Velostrata Manager (roles/cloudmigration.inframanager) Dataproc Hub Agent (roles/dataproc.hubAgent) Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Service Account Admin (roles/iam.serviceAccountAdmin) Create Service Accounts (roles/iam.serviceAccountCreator) Delete Service Accounts (roles/iam.serviceAccountDeleter) Service Account Key Admin (roles/iam.serviceAccountKeyAdmin) Service Account Token Creator (roles/iam.serviceAccountTokenCreator) Service Account User (roles/iam.serviceAccountUser) View Service Accounts (roles/iam.serviceAccountViewer) Workload Identity User (roles/iam.workloadIdentityUser) Workload Manager Admin (roles/workloadmanager.admin) Workload Manager Deployment Admin (roles/workloadmanager.deploymentAdmin) Cloud Workstations Admin (roles/workstations.admin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Backup and DR Service Agent (roles/backupdr.serviceAgent) Chronicle SOAR Service Agent (roles/chronicle.soarServiceAgent) Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Datapipelines Service Agent (roles/datapipelines.serviceAgent) Dataprep Service Agent (roles/dataprep.serviceAgent) Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) AI Platform Service Agent (roles/ml.serviceAgent) AI Platform Notebooks Service Agent (roles/notebooks.serviceAgent) Cloud Pub/Sub Service Agent (roles/pubsub.serviceAgent) Workstations Service Agent (roles/workstations.serviceAgent) Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
iam.serviceAccounts.listEffectiveTags	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Service Account Admin (roles/iam.serviceAccountAdmin) View Service Accounts (roles/iam.serviceAccountViewer) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer)
iam.serviceAccounts.listTagBindings	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Service Account Admin (roles/iam.serviceAccountAdmin) View Service Accounts (roles/iam.serviceAccountViewer) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer)
iam.serviceAccounts.setIamPolicy	Owner (roles/owner) Cloud Composer v2 API Service Agent Extension (roles/composer.ServiceAgentV2Ext) Earth Engine Apps Publisher (roles/earthengine.appsPublisher) Security Admin (roles/iam.securityAdmin) Service Account Admin (roles/iam.serviceAccountAdmin)
iam.serviceAccounts.signBlob	Service Account Token Creator (roles/iam.serviceAccountTokenCreator) Cloud Run Service Agent (roles/serverless.serviceAgent) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. App Engine Standard Environment Service Agent (roles/appengine.serviceAgent) App Engine flexible environment Service Agent (roles/appengineflex.serviceAgent) Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) AI Platform Service Agent (roles/ml.serviceAgent) Cloud Pub/Sub Service Agent (roles/pubsub.serviceAgent) Cloud Run Service Agent (roles/run.serviceAgent) Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
iam.serviceAccounts.signJwt	Service Account Token Creator (roles/iam.serviceAccountTokenCreator) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. App Engine flexible environment Service Agent (roles/appengineflex.serviceAgent) Compute Engine Service Agent (roles/compute.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) AI Platform Service Agent (roles/ml.serviceAgent) Cloud Pub/Sub Service Agent (roles/pubsub.serviceAgent) Secure Source Manager Service Agent (roles/securesourcemanager.serviceAgent) Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
iam.serviceAccounts.undelete	Owner (roles/owner) Service Account Admin (roles/iam.serviceAccountAdmin)
iam.serviceAccounts.update	Owner (roles/owner) Editor (roles/editor) Service Account Admin (roles/iam.serviceAccountAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
iam.workloadIdentityPools.createPolicyBinding	Owner (roles/owner) IAM Workload Identity Pool Admin (roles/iam.workloadIdentityPoolAdmin)
iam.workloadIdentityPools.deletePolicyBinding	Owner (roles/owner) IAM Workload Identity Pool Admin (roles/iam.workloadIdentityPoolAdmin)
iam.workloadIdentityPools.searchPolicyBindings	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) IAM Workload Identity Pool Admin (roles/iam.workloadIdentityPoolAdmin)
iam.workloadIdentityPools.updatePolicyBinding	Owner (roles/owner) IAM Workload Identity Pool Admin (roles/iam.workloadIdentityPoolAdmin)