The following table describes the roles that are required to install Anthos Service Mesh.
| Role name | Role ID | Description |
|---|---|---|
| Project Editor | roles/editor | Permissions for actions that modify state, such as changing existing resources. |
| Compute Admin | roles/compute.admin | Full control of all Compute Engine resources. |
| Kubernetes Engine Admin | roles/container.admin | Provides access to full management of Container Clusters and their Kubernetes API objects. |
| Project IAM Admin | roles/resourcemanager.projectIamAdmin | Provides permissions to administer IAM policies on projects. |
| Service Account Admin | roles/iam.serviceAccountAdmin | Create and manage service accounts. |
| Service Account Key Admin | roles/iam.serviceAccountKeyAdmin | Create and manage (and rotate) service account keys. |
| GKE Hub Admin (Beta) | roles/gkehub.admin | Full access to GKE Hubs and related resources. |
For a list of the specific permissions in each role, copy the role and search for it on Understanding roles.