Network Security roles and permissions

This page lists the IAM roles and permissions for Network Security. To search through all roles and permissions, see the role and permission index.

Network Security roles

Role	Permissions
Network Security Authz Service Agent (roles/networksecurity.authzServiceAgent) Allows the Network Security service to access dependent resources Warning: Do not grant service agent roles to any principals except service agents.	compute.forwardingRules.list compute.forwardingRules.update compute.globalForwardingRules.list compute.globalForwardingRules.update networkservices.authzExtensions.list networkservices.authzExtensions.use
DNS Threat Detector Admin ^Beta (roles/networksecurity.dnsThreatDetectorAdmin) Enables full access to DNS Threat Detector resources.	networksecurity.dnsThreatDetectors.* networksecurity.dnsThreatDetectors.create networksecurity.dnsThreatDetectors.delete networksecurity.dnsThreatDetectors.get networksecurity.dnsThreatDetectors.list networksecurity.dnsThreatDetectors.update resourcemanager.projects.get resourcemanager.projects.list
DNS Threat Detector Viewer ^Beta (roles/networksecurity.dnsThreatDetectorViewer) Enables view access to DNS Threat Detector resources.	networksecurity.dnsThreatDetectors.get networksecurity.dnsThreatDetectors.list resourcemanager.projects.get resourcemanager.projects.list
Firewall Endpoint Admin ^Beta (roles/networksecurity.firewallEndpointAdmin) Enables full access to firewall endpoint and firewall endpoint association resources.	networksecurity.firewallEndpointAssociations.* networksecurity.firewallEndpointAssociations.create networksecurity.firewallEndpointAssociations.delete networksecurity.firewallEndpointAssociations.get networksecurity.firewallEndpointAssociations.list networksecurity.firewallEndpointAssociations.update networksecurity.firewallEndpoints.* networksecurity.firewallEndpoints.create networksecurity.firewallEndpoints.delete networksecurity.firewallEndpoints.get networksecurity.firewallEndpoints.list networksecurity.firewallEndpoints.update networksecurity.firewallEndpoints.use networksecurity.operations.get networksecurity.operations.list resourcemanager.projects.get resourcemanager.projects.list
Intercept Deployment Admin ^Beta (roles/networksecurity.interceptDeploymentAdmin) Enables full access to intercept resources on the Producer's side.	networksecurity.interceptDeploymentGroups.* networksecurity.interceptDeploymentGroups.create networksecurity.interceptDeploymentGroups.delete networksecurity.interceptDeploymentGroups.get networksecurity.interceptDeploymentGroups.list networksecurity.interceptDeploymentGroups.update networksecurity.interceptDeploymentGroups.use networksecurity.interceptDeployments.* networksecurity.interceptDeployments.create networksecurity.interceptDeployments.delete networksecurity.interceptDeployments.get networksecurity.interceptDeployments.list networksecurity.interceptDeployments.update resourcemanager.projects.get resourcemanager.projects.list
Intercept Deployment External User ^Beta (roles/networksecurity.interceptDeploymentExternalUser) Allows an external consumer to connect to a producer's interceptDeploymentGroup.	networksecurity.interceptDeploymentGroups.use
Intercept Deployment User ^Beta (roles/networksecurity.interceptDeploymentUser) Allows a consumer to view and connect to a producer's interceptDeploymentGroup.	networksecurity.interceptDeploymentGroups.get networksecurity.interceptDeploymentGroups.list networksecurity.interceptDeploymentGroups.use
Intercept Deployment Viewer ^Beta (roles/networksecurity.interceptDeploymentViewer) Enables read-only access to intercept resources on the Producer's side.	networksecurity.interceptDeploymentGroups.get networksecurity.interceptDeploymentGroups.list networksecurity.interceptDeployments.get networksecurity.interceptDeployments.list resourcemanager.projects.get resourcemanager.projects.list
Intercept Endpoint Admin ^Beta (roles/networksecurity.interceptEndpointAdmin) Enables full access to intercept resources on the consumer's side.	networksecurity.interceptEndpointGroupAssociations.* networksecurity.interceptEndpointGroupAssociations.create networksecurity.interceptEndpointGroupAssociations.delete networksecurity.interceptEndpointGroupAssociations.get networksecurity.interceptEndpointGroupAssociations.list networksecurity.interceptEndpointGroupAssociations.update networksecurity.interceptEndpointGroups.* networksecurity.interceptEndpointGroups.create networksecurity.interceptEndpointGroups.delete networksecurity.interceptEndpointGroups.get networksecurity.interceptEndpointGroups.list networksecurity.interceptEndpointGroups.update networksecurity.interceptEndpointGroups.use resourcemanager.projects.get resourcemanager.projects.list
Intercept Endpoint User ^Beta (roles/networksecurity.interceptEndpointUser) Allows a consumer to connect their networks to a interceptEndpointGroup.	networksecurity.interceptEndpointGroups.get networksecurity.interceptEndpointGroups.list networksecurity.interceptEndpointGroups.use
Intercept Endpoint Viewer ^Beta (roles/networksecurity.interceptEndpointViewer) Enables read-only access to intercept resources on the Consumer's side.	networksecurity.interceptEndpointGroupAssociations.get networksecurity.interceptEndpointGroupAssociations.list networksecurity.interceptEndpointGroups.get networksecurity.interceptEndpointGroups.list resourcemanager.projects.get resourcemanager.projects.list
Mirroring Deployment Admin ^Beta (roles/networksecurity.mirroringDeploymentAdmin) Enables full access to mirroring resources on the Producer's side.	networksecurity.mirroringDeploymentGroups.* networksecurity.mirroringDeploymentGroups.create networksecurity.mirroringDeploymentGroups.delete networksecurity.mirroringDeploymentGroups.get networksecurity.mirroringDeploymentGroups.list networksecurity.mirroringDeploymentGroups.update networksecurity.mirroringDeploymentGroups.use networksecurity.mirroringDeployments.* networksecurity.mirroringDeployments.create networksecurity.mirroringDeployments.delete networksecurity.mirroringDeployments.get networksecurity.mirroringDeployments.list networksecurity.mirroringDeployments.update resourcemanager.projects.get resourcemanager.projects.list
Mirroring Deployment External User ^Beta (roles/networksecurity.mirroringDeploymentExternalUser) Allows an external consumer to a producer's mirroringDeploymentGroup.	networksecurity.mirroringDeploymentGroups.use
Mirroring Deployment User ^Beta (roles/networksecurity.mirroringDeploymentUser) Allows a consumer to view and connect to a Producer's mirroringDeploymentGroup.	networksecurity.mirroringDeploymentGroups.get networksecurity.mirroringDeploymentGroups.list networksecurity.mirroringDeploymentGroups.use
Mirroring Deployment Viewer ^Beta (roles/networksecurity.mirroringDeploymentViewer) Enables read-only access to mirroring resources on the Producer's side.	networksecurity.mirroringDeploymentGroups.get networksecurity.mirroringDeploymentGroups.list networksecurity.mirroringDeployments.get networksecurity.mirroringDeployments.list resourcemanager.projects.get resourcemanager.projects.list
Mirroring Endpoint Admin ^Beta (roles/networksecurity.mirroringEndpointAdmin) Enables full access to mirroring resources on the consumer's side.	networksecurity.mirroringEndpointGroupAssociations.* networksecurity.mirroringEndpointGroupAssociations.create networksecurity.mirroringEndpointGroupAssociations.delete networksecurity.mirroringEndpointGroupAssociations.get networksecurity.mirroringEndpointGroupAssociations.list networksecurity.mirroringEndpointGroupAssociations.update networksecurity.mirroringEndpointGroups.* networksecurity.mirroringEndpointGroups.create networksecurity.mirroringEndpointGroups.delete networksecurity.mirroringEndpointGroups.get networksecurity.mirroringEndpointGroups.list networksecurity.mirroringEndpointGroups.update networksecurity.mirroringEndpointGroups.use resourcemanager.projects.get resourcemanager.projects.list
Mirroring Endpoint User ^Beta (roles/networksecurity.mirroringEndpointUser) Allows a consumer to connect their networks to a mirroringEndpointGroup.	networksecurity.mirroringEndpointGroups.get networksecurity.mirroringEndpointGroups.list networksecurity.mirroringEndpointGroups.use
Mirroring Endpoint Viewer ^Beta (roles/networksecurity.mirroringEndpointViewer) Enables read-only access to mirroring resources on the Consumer's side.	networksecurity.mirroringEndpointGroupAssociations.get networksecurity.mirroringEndpointGroupAssociations.list networksecurity.mirroringEndpointGroups.get networksecurity.mirroringEndpointGroups.list resourcemanager.projects.get resourcemanager.projects.list
Security Profile Admin ^Beta (roles/networksecurity.securityProfileAdmin) Enables full access to security profile and security profile group resources.	networksecurity.operations.get networksecurity.operations.list networksecurity.securityProfileGroups.* networksecurity.securityProfileGroups.create networksecurity.securityProfileGroups.delete networksecurity.securityProfileGroups.get networksecurity.securityProfileGroups.list networksecurity.securityProfileGroups.update networksecurity.securityProfileGroups.use networksecurity.securityProfiles.* networksecurity.securityProfiles.create networksecurity.securityProfiles.delete networksecurity.securityProfiles.get networksecurity.securityProfiles.list networksecurity.securityProfiles.update networksecurity.securityProfiles.use resourcemanager.projects.get resourcemanager.projects.list

Network Security permissions

Permission	Included in roles
networksecurity.addressGroups.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.addressGroups.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.addressGroups.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.addressGroups.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.addressGroups.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.addressGroups.setIamPolicy	Owner (roles/owner) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.addressGroups.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.addressGroups.use	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.authorizationPolicies.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
networksecurity.authorizationPolicies.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
networksecurity.authorizationPolicies.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
networksecurity.authorizationPolicies.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.authorizationPolicies.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
networksecurity.authorizationPolicies.setIamPolicy	Owner (roles/owner) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.authorizationPolicies.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
networksecurity.authorizationPolicies.use	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
networksecurity.authzPolicies.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.authzPolicies.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.authzPolicies.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.authzPolicies.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.authzPolicies.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.authzPolicies.setIamPolicy	Owner (roles/owner) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.authzPolicies.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.backendAuthenticationConfigs.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.backendAuthenticationConfigs.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.backendAuthenticationConfigs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.backendAuthenticationConfigs.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.backendAuthenticationConfigs.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.backendAuthenticationConfigs.use	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.clientTlsPolicies.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Mesh Config Service Agent (roles/meshconfig.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
networksecurity.clientTlsPolicies.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Mesh Config Service Agent (roles/meshconfig.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
networksecurity.clientTlsPolicies.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Load Balancer Admin (roles/compute.loadBalancerAdmin) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Mesh Config Service Agent (roles/meshconfig.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
networksecurity.clientTlsPolicies.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.clientTlsPolicies.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Load Balancer Admin (roles/compute.loadBalancerAdmin) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Mesh Config Service Agent (roles/meshconfig.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
networksecurity.clientTlsPolicies.setIamPolicy	Owner (roles/owner) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.clientTlsPolicies.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Mesh Config Service Agent (roles/meshconfig.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
networksecurity.clientTlsPolicies.use	Owner (roles/owner) Editor (roles/editor) Compute Load Balancer Admin (roles/compute.loadBalancerAdmin) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
networksecurity.dnsThreatDetectors.create	Owner (roles/owner) Editor (roles/editor) DNS Threat Detector Admin (roles/networksecurity.dnsThreatDetectorAdmin)
networksecurity.dnsThreatDetectors.delete	Owner (roles/owner) Editor (roles/editor) DNS Threat Detector Admin (roles/networksecurity.dnsThreatDetectorAdmin)
networksecurity.dnsThreatDetectors.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Support User (roles/iam.supportUser) DNS Threat Detector Admin (roles/networksecurity.dnsThreatDetectorAdmin) DNS Threat Detector Viewer (roles/networksecurity.dnsThreatDetectorViewer)
networksecurity.dnsThreatDetectors.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) DNS Threat Detector Admin (roles/networksecurity.dnsThreatDetectorAdmin) DNS Threat Detector Viewer (roles/networksecurity.dnsThreatDetectorViewer)
networksecurity.dnsThreatDetectors.update	Owner (roles/owner) Editor (roles/editor) DNS Threat Detector Admin (roles/networksecurity.dnsThreatDetectorAdmin)
networksecurity.firewallEndpointAssociations.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.firewallEndpointAssociations.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.firewallEndpointAssociations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.firewallEndpointAssociations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.firewallEndpointAssociations.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.firewallEndpoints.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.firewallEndpoints.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.firewallEndpoints.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.firewallEndpoints.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.firewallEndpoints.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.firewallEndpoints.use	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.gatewaySecurityPolicies.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.gatewaySecurityPolicies.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.gatewaySecurityPolicies.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.gatewaySecurityPolicies.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.gatewaySecurityPolicies.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.gatewaySecurityPolicies.use	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.gatewaySecurityPolicyRules.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.gatewaySecurityPolicyRules.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.gatewaySecurityPolicyRules.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.gatewaySecurityPolicyRules.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.gatewaySecurityPolicyRules.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.gatewaySecurityPolicyRules.use	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.interceptDeploymentGroups.create	Owner (roles/owner) Editor (roles/editor) Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin)
networksecurity.interceptDeploymentGroups.delete	Owner (roles/owner) Editor (roles/editor) Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin)
networksecurity.interceptDeploymentGroups.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Support User (roles/iam.supportUser) Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin) Intercept Deployment User (roles/networksecurity.interceptDeploymentUser) Intercept Deployment Viewer (roles/networksecurity.interceptDeploymentViewer)
networksecurity.interceptDeploymentGroups.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin) Intercept Deployment User (roles/networksecurity.interceptDeploymentUser) Intercept Deployment Viewer (roles/networksecurity.interceptDeploymentViewer)
networksecurity.interceptDeploymentGroups.update	Owner (roles/owner) Editor (roles/editor) Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin)
networksecurity.interceptDeploymentGroups.use	Owner (roles/owner) Editor (roles/editor) Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin) Intercept Deployment External User (roles/networksecurity.interceptDeploymentExternalUser) Intercept Deployment User (roles/networksecurity.interceptDeploymentUser)
networksecurity.interceptDeployments.create	Owner (roles/owner) Editor (roles/editor) Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin)
networksecurity.interceptDeployments.delete	Owner (roles/owner) Editor (roles/editor) Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin)
networksecurity.interceptDeployments.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Support User (roles/iam.supportUser) Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin) Intercept Deployment Viewer (roles/networksecurity.interceptDeploymentViewer)
networksecurity.interceptDeployments.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin) Intercept Deployment Viewer (roles/networksecurity.interceptDeploymentViewer)
networksecurity.interceptDeployments.update	Owner (roles/owner) Editor (roles/editor) Intercept Deployment Admin (roles/networksecurity.interceptDeploymentAdmin)
networksecurity.interceptEndpointGroupAssociations.create	Owner (roles/owner) Editor (roles/editor) Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin)
networksecurity.interceptEndpointGroupAssociations.delete	Owner (roles/owner) Editor (roles/editor) Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin)
networksecurity.interceptEndpointGroupAssociations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Support User (roles/iam.supportUser) Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin) Intercept Endpoint Viewer (roles/networksecurity.interceptEndpointViewer)
networksecurity.interceptEndpointGroupAssociations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin) Intercept Endpoint Viewer (roles/networksecurity.interceptEndpointViewer)
networksecurity.interceptEndpointGroupAssociations.update	Owner (roles/owner) Editor (roles/editor) Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin)
networksecurity.interceptEndpointGroups.create	Owner (roles/owner) Editor (roles/editor) Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin)
networksecurity.interceptEndpointGroups.delete	Owner (roles/owner) Editor (roles/editor) Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin)
networksecurity.interceptEndpointGroups.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Support User (roles/iam.supportUser) Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin) Intercept Endpoint User (roles/networksecurity.interceptEndpointUser) Intercept Endpoint Viewer (roles/networksecurity.interceptEndpointViewer)
networksecurity.interceptEndpointGroups.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin) Intercept Endpoint User (roles/networksecurity.interceptEndpointUser) Intercept Endpoint Viewer (roles/networksecurity.interceptEndpointViewer)
networksecurity.interceptEndpointGroups.update	Owner (roles/owner) Editor (roles/editor) Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin)
networksecurity.interceptEndpointGroups.use	Owner (roles/owner) Editor (roles/editor) Intercept Endpoint Admin (roles/networksecurity.interceptEndpointAdmin) Intercept Endpoint User (roles/networksecurity.interceptEndpointUser)
networksecurity.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.mirroringDeploymentGroups.create	Owner (roles/owner) Editor (roles/editor) Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin)
networksecurity.mirroringDeploymentGroups.delete	Owner (roles/owner) Editor (roles/editor) Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin)
networksecurity.mirroringDeploymentGroups.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Support User (roles/iam.supportUser) Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin) Mirroring Deployment User (roles/networksecurity.mirroringDeploymentUser) Mirroring Deployment Viewer (roles/networksecurity.mirroringDeploymentViewer)
networksecurity.mirroringDeploymentGroups.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin) Mirroring Deployment User (roles/networksecurity.mirroringDeploymentUser) Mirroring Deployment Viewer (roles/networksecurity.mirroringDeploymentViewer)
networksecurity.mirroringDeploymentGroups.update	Owner (roles/owner) Editor (roles/editor) Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin)
networksecurity.mirroringDeploymentGroups.use	Owner (roles/owner) Editor (roles/editor) Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin) Mirroring Deployment External User (roles/networksecurity.mirroringDeploymentExternalUser) Mirroring Deployment User (roles/networksecurity.mirroringDeploymentUser)
networksecurity.mirroringDeployments.create	Owner (roles/owner) Editor (roles/editor) Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin)
networksecurity.mirroringDeployments.delete	Owner (roles/owner) Editor (roles/editor) Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin)
networksecurity.mirroringDeployments.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Support User (roles/iam.supportUser) Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin) Mirroring Deployment Viewer (roles/networksecurity.mirroringDeploymentViewer)
networksecurity.mirroringDeployments.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin) Mirroring Deployment Viewer (roles/networksecurity.mirroringDeploymentViewer)
networksecurity.mirroringDeployments.update	Owner (roles/owner) Editor (roles/editor) Mirroring Deployment Admin (roles/networksecurity.mirroringDeploymentAdmin)
networksecurity.mirroringEndpointGroupAssociations.create	Owner (roles/owner) Editor (roles/editor) Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin)
networksecurity.mirroringEndpointGroupAssociations.delete	Owner (roles/owner) Editor (roles/editor) Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin)
networksecurity.mirroringEndpointGroupAssociations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Support User (roles/iam.supportUser) Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin) Mirroring Endpoint Viewer (roles/networksecurity.mirroringEndpointViewer)
networksecurity.mirroringEndpointGroupAssociations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin) Mirroring Endpoint Viewer (roles/networksecurity.mirroringEndpointViewer)
networksecurity.mirroringEndpointGroupAssociations.update	Owner (roles/owner) Editor (roles/editor) Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin)
networksecurity.mirroringEndpointGroups.create	Owner (roles/owner) Editor (roles/editor) Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin)
networksecurity.mirroringEndpointGroups.delete	Owner (roles/owner) Editor (roles/editor) Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin)
networksecurity.mirroringEndpointGroups.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Support User (roles/iam.supportUser) Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin) Mirroring Endpoint User (roles/networksecurity.mirroringEndpointUser) Mirroring Endpoint Viewer (roles/networksecurity.mirroringEndpointViewer)
networksecurity.mirroringEndpointGroups.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin) Mirroring Endpoint User (roles/networksecurity.mirroringEndpointUser) Mirroring Endpoint Viewer (roles/networksecurity.mirroringEndpointViewer)
networksecurity.mirroringEndpointGroups.update	Owner (roles/owner) Editor (roles/editor) Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin)
networksecurity.mirroringEndpointGroups.use	Owner (roles/owner) Editor (roles/editor) Mirroring Endpoint Admin (roles/networksecurity.mirroringEndpointAdmin) Mirroring Endpoint User (roles/networksecurity.mirroringEndpointUser)
networksecurity.operations.cancel	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
networksecurity.operations.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
networksecurity.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
networksecurity.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Firewall Endpoint Admin (roles/networksecurity.firewallEndpointAdmin) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
networksecurity.sacAttachments.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.sacAttachments.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.sacAttachments.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.sacAttachments.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.sacRealms.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.sacRealms.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.sacRealms.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.sacRealms.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.securityProfileGroups.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.securityProfileGroups.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.securityProfileGroups.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.securityProfileGroups.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.securityProfileGroups.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.securityProfileGroups.use	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.securityProfiles.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.securityProfiles.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.securityProfiles.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.securityProfiles.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.securityProfiles.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.securityProfiles.use	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Profile Admin (roles/networksecurity.securityProfileAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.serverTlsPolicies.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Mesh Config Service Agent (roles/meshconfig.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
networksecurity.serverTlsPolicies.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Mesh Config Service Agent (roles/meshconfig.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
networksecurity.serverTlsPolicies.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Load Balancer Admin (roles/compute.loadBalancerAdmin) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Mesh Config Service Agent (roles/meshconfig.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
networksecurity.serverTlsPolicies.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.serverTlsPolicies.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Load Balancer Admin (roles/compute.loadBalancerAdmin) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Mesh Config Service Agent (roles/meshconfig.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
networksecurity.serverTlsPolicies.setIamPolicy	Owner (roles/owner) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.serverTlsPolicies.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Mesh Config Service Agent (roles/meshconfig.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
networksecurity.serverTlsPolicies.use	Owner (roles/owner) Editor (roles/editor) Compute Load Balancer Admin (roles/compute.loadBalancerAdmin) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent)
networksecurity.tlsInspectionPolicies.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.tlsInspectionPolicies.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.tlsInspectionPolicies.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.tlsInspectionPolicies.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.tlsInspectionPolicies.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.tlsInspectionPolicies.use	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.urlLists.create	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.urlLists.delete	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.urlLists.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.urlLists.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Compute Network Viewer (roles/compute.networkViewer) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.urlLists.update	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)
networksecurity.urlLists.use	Owner (roles/owner) Editor (roles/editor) Compute Network Admin (roles/compute.networkAdmin) Compute Network User (roles/compute.networkUser) Infrastructure Administrator (roles/iam.infrastructureAdmin) Network Administrator (roles/iam.networkAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Kubernetes Engine Service Agent (roles/container.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent)