Supported service method restrictions

This page provides a reference table of service methods and permissions that can be restricted using Ingress and Egress rules.

Service Name Action Type Action
bigquery.googleapis.com METHOD TableDataService.List
METHOD RoutineService.ListRoutines
METHOD DatasetService.ListDatasets
METHOD IAMPolicy.GetIamPolicy
METHOD JobService.GetQueryResults
METHOD ProjectService.GetServiceAccount
METHOD DatasetService.GetDataset
METHOD TableService.UpdateTable
METHOD TableDataService.InsertAll
METHOD JobService.ListJobs
METHOD RoutineService.GetRoutine
METHOD ModelService.ListModels
METHOD JobService.CancelJob
METHOD ModelService.GetModel
METHOD IAMPolicy.TestIamPermissions
METHOD Locations.GetLocation
METHOD DatasetService.PatchDataset
METHOD JobService.GetJob
METHOD TableService.GetTable
METHOD TableService.PatchTable
METHOD RoutineService.InsertRoutine
METHOD TableService.InsertTable
METHOD RoutineService.DeleteRoutine
METHOD DatasetService.InsertDataset
METHOD IAMPolicy.SetIamPolicy
METHOD Locations.ListLocations
METHOD ModelService.DeleteModel
METHOD ProjectService.ListProjects
METHOD DatasetService.DeleteDataset
METHOD TableService.DeleteTable
METHOD DatasetService.UpdateDataset
METHOD JobService.InsertJob
METHOD ModelService.PatchModel
METHOD RoutineService.UpdateRoutine
METHOD TableService.ListTables
METHOD Discovery.GetDiscoveryRest
METHOD JobService.Query
METHOD SavedQueryService.CreateSavedQuery
METHOD SavedQueryService.UpdateSavedQuery
METHOD SavedQueryService.ListSavedQueries
METHOD SavedQueryService.DeleteSavedQuery
METHOD SavedQueryService.DeleteSavedQuery
METHOD BigQueryRead.SplitReadStream
METHOD BigQueryRead.ReadRows
METHOD BigQueryWrite.GetWriteStream
METHOD BigQueryStorage.ReadRows
METHOD BigQueryRead.CreateReadSession
METHOD BigQueryWrite.BatchCommitWriteStreams
METHOD BigQueryStorage.FinalizeStream
METHOD BigQueryWrite.AppendRows
METHOD BigQueryWrite.FinalizeWriteStream
METHOD BigQueryRead.SplitReadStream
METHOD BigQueryStorage.SplitReadStream
METHOD BigQueryRead.ReadRows
METHOD BigQueryStorage.BatchCreateReadSessionStreams
METHOD BigQueryWrite.CreateWriteStream
METHOD BigQueryRead.CreateReadSession
METHOD BigQueryStorage.CreateReadSession
PERMISSION bigquery.jobs.update
PERMISSION bigquery.datasets.create
PERMISSION bigquery.routines.delete
PERMISSION bigquery.tables.getData
PERMISSION bigquery.routines.create
PERMISSION bigquery.models.create
PERMISSION bigquery.routines.list
PERMISSION bigquery.routines.get
PERMISSION bigquery.models.updateMetadata
PERMISSION bigquery.models.list
PERMISSION bigquery.tables.create
PERMISSION bigquery.jobs.list
PERMISSION bigquery.datasets.delete
PERMISSION bigquery.connections.create
PERMISSION bigquery.connections.get
PERMISSION bigquery.jobs.get
PERMISSION bigquery.tables.setIamPolicy
PERMISSION bigquery.reservationAssignments.list
PERMISSION bigquery.connections.getIamPolicy
PERMISSION bigquery.datasets.update
PERMISSION bigquery.capacityCommitments.list
PERMISSION bigquery.connections.update
PERMISSION bigquery.connections.update
PERMISSION bigquery.tables.updateTag
PERMISSION bigquery.routines.update
PERMISSION bigquery.dataQnaIndexes.get
PERMISSION bigquery.connections.setIamPolicy
PERMISSION bigquery.connections.delete
PERMISSION bigquery.reservations.list
PERMISSION bigquery.tables.commitWriteStream
PERMISSION bigquery.dataQnaReports.get
PERMISSION bigquery.datasets.get
PERMISSION bigquery.models.delete
PERMISSION bigquery.tables.export
PERMISSION datacatalog.taxonomies.get
PERMISSION bigquery.connections.list
PERMISSION bigquery.models.getData
PERMISSION bigquery.jobs.create
PERMISSION bigquery.tables.list
PERMISSION bigquery.connections.use
PERMISSION bigquery.dataQnaIndexes.updateData
PERMISSION bigquery.tables.updateData
PERMISSION bigquery.tables.delete
PERMISSION bigquery.tables.getIamPolicy
PERMISSION bigquery.dataQnaQuestions.create
PERMISSION bigquery.tables.update
PERMISSION bigquery.tables.get
PERMISSION bigquery.jobs.listAll
PERMISSION dataQnaReports.list
PERMISSION datacatalog.categories.fineGrainedGet
pubsub.googleapis.com METHOD Publisher.ListTopicSnapshots
METHOD Publisher.GetTopic
METHOD Publisher.CreateTopic
METHOD Subscriber.CreateSubscription
METHOD Subscriber.UpdateSnapshot
METHOD Publisher.UpdateTopic
METHOD Subscriber.DeleteSubscription
METHOD Subscriber.GetSubscription
METHOD Subscriber.ModifyAckDeadline
METHOD Subscriber.ModifyPushConfig
METHOD Subscriber.DeleteSnapshot
METHOD Publisher.ListTopics
METHOD Subscriber.Acknowledge
METHOD Publisher.Publish
METHOD Subscriber.StreamingPull
METHOD Subscriber.CreateSubscription
METHOD PushEndpoint.ProcessPushMessage
METHOD Publisher.GetTopic
METHOD Subscriber.DeleteSubscription
METHOD Subscriber.CreateSnapshot
METHOD Subscriber.ListSnapshots
METHOD Subscriber.UpdateSubscription
METHOD Subscriber.ListSubscriptions
METHOD Subscriber.Pull
METHOD Publisher.ListTopicSubscriptions
METHOD Publisher.ListTopics
METHOD Subscriber.ListSubscriptions
METHOD Subscriber.ModifyAckDeadline
METHOD Publisher.CreateTopic
METHOD Subscriber.Pull
METHOD Subscriber.GetSnapshot
METHOD Subscriber.GetSubscription
METHOD Subscriber.Seek
METHOD Publisher.Publish
METHOD Publisher.DeleteTopic
METHOD PublisherService.CreateTopic
METHOD PublisherService.Publish
METHOD PublisherService.PublishBatch
METHOD PublisherService.GetTopic
METHOD PublisherService.ListTopics
METHOD PublisherService.DeleteTopic
METHOD SubscriberService.CreateSubscription
METHOD SubscriberService.GetSubscription
METHOD SubscriberService.ListSubscriptions
METHOD SubscriberService.DeleteSubscription
METHOD SubscriberService.ModifyPushConfig
METHOD SubscriberService.Pull
METHOD SubscriberService.PullBatch
METHOD SubscriberService.ModifyAckDeadline
METHOD SubscriberService.Acknowledge
storage.googleapis.com METHOD google.storage.objects.getIamPolicy
METHOD google.storage.buckets.update
METHOD google.storage.hmac.listKey
METHOD google.storage.hmac.deleteKey
METHOD google.storage.hmac.getKey
METHOD google.storage.objects.list
METHOD google.storage.objects.setIamPolicy
METHOD google.storage.buckets.create
METHOD google.storage.projects.serviceAccounts.getOrCreate
METHOD google.storage.buckets.delete
METHOD google.storage.Write
METHOD google.storage.hmac.createKey
METHOD google.storage.hmac.updateKey
METHOD google.storage.buckets.testIamPermissions
METHOD google.storage.projects.checkVpcPolicy
METHOD google.storage.objects.get
METHOD google.storage.objects.delete
METHOD google.storage.buckets.list
METHOD google.storage.objects.update
METHOD google.storage.buckets.get
METHOD google.storage.objects.create
METHOD google.storage.buckets.setIamPolicy
METHOD google.storage.buckets.getIamPolicy
logging.googleapis.com METHOD LoggingServiceV2.ListMonitoredResourceDescriptors
METHOD LoggingServiceV2.ReadLogEntriesLegacy
METHOD ConfigServiceV2.ListExclusions
METHOD ConfigServiceV2.DeleteExclusion
METHOD ConfigServiceV2.DeleteBucket
METHOD ConfigServiceV2.UpdateSink
METHOD ConfigServiceV2.UpdateExclusion
METHOD ConfigServiceV2.UpdateBucket
METHOD LoggingServiceV2.ListLogViews
METHOD ConfigServiceV2.ListBuckets
METHOD ConfigServiceV2.CreateBucket
METHOD LoggingServiceV2.AggregateLogs
METHOD BillingService.GetUsageByResourceType
METHOD MetricsServiceV2.GetLogMetric
METHOD ConfigServiceV2.DeleteSink
METHOD LoggingServiceV2.DeleteLog
METHOD ConfigServiceV2.CreateSink
METHOD ConfigServiceV2.GetCmekSettings
METHOD ConfigServiceV2.CreateExclusion
METHOD MetricsServiceV2.DeleteLogMetric
METHOD ConfigServiceV2.ListSinks
METHOD ConfigServiceV2.GetSink
METHOD ConfigServiceV2.GetBucket
METHOD LoggingServiceV2.ListLogEntries
METHOD LoggingServiceV2.ListLogs
METHOD MetricsServiceV2.ListLogMetrics
METHOD MetricsServiceV2.UpdateLogMetric
METHOD LoggingServiceV2.ListResourceKeys
METHOD LoggingServiceV2.ListResourceValues
METHOD MetricsServiceV2.CreateLogMetric
METHOD ConfigServiceV2.GetExclusion
METHOD LoggingServiceV2.WriteLogEntries
METHOD LoggingServiceV2.ListLogEntries/NonQuotaCheck
METHOD LoggingServiceV2.WriteLogEntries/NonQuotaCheck
METHOD LoggingService.WriteLogEntries
containerregistry.googleapis.com METHOD containers.registry.read
METHOD containers.registry.write
artifactregistry.googleapis.com METHOD ArtifactRegistry.DeleteRepository
METHOD ArtifactRegistry.ListFiles
METHOD ArtifactRegistry.ListVersions
METHOD ArtifactRegistry.ListPackages
METHOD ArtifactRegistry.DeleteTag
METHOD ArtifactRegistry.TestIamPermissions
METHOD ArtifactRegistry.SetIamPolicy
METHOD ArtifactRegistry.UpdateRepository
METHOD ArtifactRegistry.GetVersion
METHOD ArtifactRegistry.UpdateTag
METHOD ArtifactRegistry.CreateTag
METHOD ArtifactRegistry.CreateRepository
METHOD ArtifactRegistry.GetRepository
METHOD ArtifactRegistry.ListRepositories
METHOD artifactregistry.googleapis.com/NPMRead
METHOD artifactregistry.googleapis.com/MavenRead
METHOD artifactregistry.googleapis.com/ScottyAgentWrite
METHOD artifactregistry.googleapis.com/DockerWrite
METHOD artifactregistry.googleapis.com/DockerRead
METHOD artifactregistry.googleapis.com/ScottyAgentRead
METHOD artifactregistry.googleapis.com/DockerDelete
METHOD artifactregistry.googleapis.com/MavenWrite
METHOD artifactregistry.googleapis.com/NPMWrite
compute.googleapis.com METHOD ImagesService.TestPermissions
METHOD MachineImagesService.Insert
METHOD ImagesService.SetPolicy
METHOD ImagesService.Get
METHOD ImagesService.SetLabels
METHOD MachineImagesService.List
METHOD MachineImagesService.Get
METHOD ImagesService.SetLabels
METHOD ImagesService.SetPolicy
METHOD ImagesService.Insert
METHOD ImagesService.Deprecate
METHOD MachineImagesService.Insert
METHOD MachineImagesService.Get
METHOD ImagesService.Deprecate
METHOD ImagesService.SetLabels
METHOD ImagesService.GetPolicy
METHOD ImagesService.GetFromFamily
METHOD ImagesService.Delete
METHOD ImagesService.Deprecate
METHOD ImagesService.GetFromFamily
METHOD ImagesService.TestPermissions
METHOD DiskTypesService.Get
METHOD RegionDiskTypesService.Get
METHOD RegionDisksService.AddResourcePolicies
METHOD ProjectsService.MoveDisk
METHOD DisksService.SetLabels
METHOD InstancesService.SetDiskAutoDelete
METHOD DisksService.Resize
METHOD InstancesService.DetachDisk
METHOD RegionDiskTypesService.List
METHOD RegionDisksService.Delete
METHOD RegionDisksService.Resize
METHOD DisksService.SetPolicy
METHOD DiskTypesService.AggregatedList
METHOD DisksService.Insert
METHOD DisksService.Get
METHOD DisksService.GetPolicy
METHOD RegionDisksService.CreateSnapshot
METHOD RegionDisksService.TestPermissions
METHOD RegionDisksService.List
METHOD InstancesService.AttachDisk
METHOD DiskTypesService.List
METHOD DisksService.AddResourcePolicies
METHOD DisksService.CreateSnapshot
METHOD DisksService.SetPolicy
METHOD DisksService.AggregatedList
METHOD DisksService.RemoveResourcePolicies
METHOD compute.alpha.RegionDiskTypesService.List
METHOD compute.alpha.DisksService.Get
METHOD DisksService.TestPermissions
METHOD DisksService.Delete
METHOD RegionDisksService.SetLabels
METHOD RegionDisksService.Get
METHOD RegionDisksService.Insert
METHOD DisksService.List