Roles and permissions

This page lists the permissions required by the Immersive Stream for XR API and the Identity and Access Management (IAM) roles that encapsulate them.

Roles

The following table lists the Immersive Stream for XR API roles and the permissions that they encapsulate.

Role	Resources	Description	Permissions
Stream Admin stream.admin	StreamContents, StreamInstances	Full access to all StreamContent resources and StreamInstance resources.	stream.streamContents.get stream.streamContents.list stream.streamContents.create stream.streamContents.update stream.streamContents.delete stream.streamContents.build stream.streamInstances.get stream.streamInstances.list stream.streamInstances.create stream.streamInstances.update stream.streamInstances.delete
Stream Viewer stream.viewer	StreamContents, StreamInstances	Read-only access to Stream all resources.	stream.streamContents.get stream.streamContents.list stream.streamInstances.get stream.streamInstances.list
Stream Content Admin stream.contentAdmin	StreamContents	Full access to all StreamContent resources.	stream.streamContents.get stream.streamContents.list stream.streamContents.create stream.streamContents.update stream.streamContents.delete stream.streamContents.build
Stream Content Builder stream.contentBuilder	StreamContents	Read and build access to StreamContent resources.	stream.streamContents.get stream.streamContents.list stream.streamContents.build
Stream Instance Admin stream.instanceAdmin	StreamContents, StreamInstances	Full access to all StreamContent resources and Read access to all StreamInstance resources.	stream.streamContents.get stream.streamContents.list stream.streamInstances.get stream.streamInstances.list stream.streamInstances.create stream.streamInstances.update stream.streamInstances.delete
Stream Service Agent stream.serviceAgent		Give Immersive Stream for XR access to the required resources.	resourcemanager.projects.get resourcemanager.projects.list storage.objects.get storage.objects.list storage.objects.create storage.buckets.get storage.buckets.create

Permissions

The following table lists the permissions required to perform specific operations on StreamContent and StreamInstance resources.

Operation and method	Resource	Permission
Create a Stream Content streamContents.create	StreamContents	stream.streamContents.create on the target Project.
Get information about a Stream Content streamContents.get	StreamContents	stream.streamContents.get on the target Project.
List Stream Contents in the Project streamContents.list	StreamContents	stream.streamContents.get on the target Project.
Update a Stream Content streamContents.update	StreamContents	stream.streamContents.update on the target Project.
Delete a Stream Content streamContents.delete	StreamContents	stream.streamContents.delete on the target Project.
Build a Stream Content streamContents.build	StreamContents	stream.streamContents.build on the target Project.
Create a Stream Instance streamInstances.create	StreamInstances	stream.streamInstances.create on the target Project.
Get information about a Stream Instance streamInstances.get	StreamInstances	stream.streamInstances.get on the target Project.
List Stream Instances in the Project streamInstances.list	StreamInstances	stream.streamInstances.get on the target Project.
Update a Stream Instance streamInstances.update	StreamInstances	stream.streamInstances.update on the target Project.
Delete a Stream Instance streamInstances.delete	StreamInstances	stream.streamInstances.delete on the target Project.