Remote Build Execution roles and permissions

This page lists the IAM roles and permissions for Remote Build Execution. To search through all roles and permissions, see the role and permission index.

Remote Build Execution roles

Role	Permissions
Remote Build Execution Action Cache Writer ^Beta (roles/remotebuildexecution.actionCacheWriter) Remote Build Execution Action Cache Writer	remotebuildexecution.actions.set remotebuildexecution.blobs.create
Remote Build Execution Artifact Admin ^Beta (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Artifact Admin	remotebuildexecution.actions.create remotebuildexecution.actions.delete remotebuildexecution.actions.get remotebuildexecution.blobs.* remotebuildexecution.blobs.create remotebuildexecution.blobs.get remotebuildexecution.logstreams.* remotebuildexecution.logstreams.create remotebuildexecution.logstreams.get remotebuildexecution.logstreams.update
Remote Build Execution Artifact Creator ^Beta (roles/remotebuildexecution.artifactCreator) Remote Build Execution Artifact Creator	remotebuildexecution.actions.create remotebuildexecution.actions.get remotebuildexecution.blobs.* remotebuildexecution.blobs.create remotebuildexecution.blobs.get remotebuildexecution.logstreams.* remotebuildexecution.logstreams.create remotebuildexecution.logstreams.get remotebuildexecution.logstreams.update
Remote Build Execution Artifact Viewer ^Beta (roles/remotebuildexecution.artifactViewer) Remote Build Execution Artifact Viewer	remotebuildexecution.actions.get remotebuildexecution.blobs.get remotebuildexecution.logstreams.get
Remote Build Execution Configuration Admin ^Beta (roles/remotebuildexecution.configurationAdmin) Remote Build Execution Configuration Admin	remotebuildexecution.instances.* remotebuildexecution.instances.create remotebuildexecution.instances.delete remotebuildexecution.instances.get remotebuildexecution.instances.list remotebuildexecution.instances.update remotebuildexecution.workerpools.* remotebuildexecution.workerpools.create remotebuildexecution.workerpools.delete remotebuildexecution.workerpools.get remotebuildexecution.workerpools.list remotebuildexecution.workerpools.update
Remote Build Execution Configuration Viewer ^Beta (roles/remotebuildexecution.configurationViewer) Remote Build Execution Configuration Viewer	remotebuildexecution.instances.get remotebuildexecution.instances.list remotebuildexecution.workerpools.get remotebuildexecution.workerpools.list
Remote Build Execution Logstream Writer ^Beta (roles/remotebuildexecution.logstreamWriter) Remote Build Execution Logstream Writer	remotebuildexecution.logstreams.create remotebuildexecution.logstreams.update
Remote Build Execution Reservation Admin ^Beta (roles/remotebuildexecution.reservationAdmin) Remote Build Execution Reservation Admin	remotebuildexecution.actions.create remotebuildexecution.actions.delete remotebuildexecution.actions.get
Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent) Gives Remote Build Execution service account access to managed resources. Warning: Do not grant service agent roles to any principals except service agents.	remotebuildexecution.actions.update remotebuildexecution.blobs.* remotebuildexecution.blobs.create remotebuildexecution.blobs.get remotebuildexecution.botsessions.* remotebuildexecution.botsessions.create remotebuildexecution.botsessions.update remotebuildexecution.logstreams.create remotebuildexecution.logstreams.update
Remote Build Execution Worker ^Beta (roles/remotebuildexecution.worker) Remote Build Execution Worker	remotebuildexecution.actions.update remotebuildexecution.blobs.* remotebuildexecution.blobs.create remotebuildexecution.blobs.get remotebuildexecution.botsessions.* remotebuildexecution.botsessions.create remotebuildexecution.botsessions.update remotebuildexecution.logstreams.create remotebuildexecution.logstreams.update

Remote Build Execution permissions

Permission	Included in roles
remotebuildexecution.actions.create	Owner (roles/owner) Editor (roles/editor) Remote Build Execution Artifact Admin (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Artifact Creator (roles/remotebuildexecution.artifactCreator) Remote Build Execution Reservation Admin (roles/remotebuildexecution.reservationAdmin)
remotebuildexecution.actions.delete	Owner (roles/owner) Editor (roles/editor) Remote Build Execution Artifact Admin (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Reservation Admin (roles/remotebuildexecution.reservationAdmin)
remotebuildexecution.actions.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Support User (roles/iam.supportUser) Remote Build Execution Artifact Admin (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Artifact Creator (roles/remotebuildexecution.artifactCreator) Remote Build Execution Artifact Viewer (roles/remotebuildexecution.artifactViewer) Remote Build Execution Reservation Admin (roles/remotebuildexecution.reservationAdmin)
remotebuildexecution.actions.set	Remote Build Execution Action Cache Writer (roles/remotebuildexecution.actionCacheWriter)
remotebuildexecution.actions.update	Owner (roles/owner) Editor (roles/editor) Remote Build Execution Worker (roles/remotebuildexecution.worker) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent)
remotebuildexecution.blobs.create	Owner (roles/owner) Editor (roles/editor) Remote Build Execution Action Cache Writer (roles/remotebuildexecution.actionCacheWriter) Remote Build Execution Artifact Admin (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Artifact Creator (roles/remotebuildexecution.artifactCreator) Remote Build Execution Worker (roles/remotebuildexecution.worker) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent)
remotebuildexecution.blobs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud Build Approver (roles/cloudbuild.builds.approver) Cloud Build Service Account (roles/cloudbuild.builds.builder) Cloud Build Editor (roles/cloudbuild.builds.editor) Cloud Build Viewer (roles/cloudbuild.builds.viewer) Cloud Functions Admin (roles/cloudfunctions.admin) Cloud Functions Developer (roles/cloudfunctions.developer) Cloud Functions Viewer (roles/cloudfunctions.viewer) Composer Worker (roles/composer.worker) Dataflow Admin (roles/dataflow.admin) Dataflow Developer (roles/dataflow.developer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Viewer (roles/firebase.viewer) Data Scientist (roles/iam.dataScientist) Dev Ops (roles/iam.devOps) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Remote Build Execution Artifact Admin (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Artifact Creator (roles/remotebuildexecution.artifactCreator) Remote Build Execution Artifact Viewer (roles/remotebuildexecution.artifactViewer) Remote Build Execution Worker (roles/remotebuildexecution.worker) Cloud Run Source Developer (roles/run.sourceDeveloper) Cloud Run Source Viewer (roles/run.sourceViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent) Datapipelines Service Agent (roles/datapipelines.serviceAgent) Dataprep Service Agent (roles/dataprep.serviceAgent) DesignCenter Service Agent (roles/designcenter.serviceAgent) Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent) Cloud Build Service Agent (roles/cloudbuild.serviceAgent)
remotebuildexecution.botsessions.create	Owner (roles/owner) Editor (roles/editor) Remote Build Execution Worker (roles/remotebuildexecution.worker) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent)
remotebuildexecution.botsessions.update	Owner (roles/owner) Editor (roles/editor) Remote Build Execution Worker (roles/remotebuildexecution.worker) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent)
remotebuildexecution.instances.create	Owner (roles/owner) Editor (roles/editor) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin)
remotebuildexecution.instances.delete	Owner (roles/owner) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin)
remotebuildexecution.instances.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Support User (roles/iam.supportUser) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin) Remote Build Execution Configuration Viewer (roles/remotebuildexecution.configurationViewer)
remotebuildexecution.instances.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin) Remote Build Execution Configuration Viewer (roles/remotebuildexecution.configurationViewer)
remotebuildexecution.instances.update	Owner (roles/owner) Editor (roles/editor) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin)
remotebuildexecution.logstreams.create	Owner (roles/owner) Editor (roles/editor) Remote Build Execution Artifact Admin (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Artifact Creator (roles/remotebuildexecution.artifactCreator) Remote Build Execution Logstream Writer (roles/remotebuildexecution.logstreamWriter) Remote Build Execution Worker (roles/remotebuildexecution.worker) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent)
remotebuildexecution.logstreams.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Support User (roles/iam.supportUser) Remote Build Execution Artifact Admin (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Artifact Creator (roles/remotebuildexecution.artifactCreator) Remote Build Execution Artifact Viewer (roles/remotebuildexecution.artifactViewer)
remotebuildexecution.logstreams.update	Owner (roles/owner) Editor (roles/editor) Remote Build Execution Artifact Admin (roles/remotebuildexecution.artifactAdmin) Remote Build Execution Artifact Creator (roles/remotebuildexecution.artifactCreator) Remote Build Execution Logstream Writer (roles/remotebuildexecution.logstreamWriter) Remote Build Execution Worker (roles/remotebuildexecution.worker) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent)
remotebuildexecution.workerpools.create	Owner (roles/owner) Editor (roles/editor) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin)
remotebuildexecution.workerpools.delete	Owner (roles/owner) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin)
remotebuildexecution.workerpools.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Support User (roles/iam.supportUser) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin) Remote Build Execution Configuration Viewer (roles/remotebuildexecution.configurationViewer)
remotebuildexecution.workerpools.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin) Remote Build Execution Configuration Viewer (roles/remotebuildexecution.configurationViewer)
remotebuildexecution.workerpools.update	Owner (roles/owner) Editor (roles/editor) Remote Build Execution Configuration Admin (roles/remotebuildexecution.configurationAdmin)