On-Demand Scanning API roles and permissions

This page lists the IAM roles and permissions for On-Demand Scanning API. To search through all roles and permissions, see the role and permission index.

On-Demand Scanning API roles

Role Permissions

Role	Permissions
On-Demand Scanning Admin ^Beta (`roles/ondemandscanning.admin`) All permissions for On-Demand Scanning	`ondemandscanning.*` `ondemandscanning.operations.cancel` `ondemandscanning.operations.delete` `ondemandscanning.operations.get` `ondemandscanning.operations.list` `ondemandscanning.operations.wait` `ondemandscanning.scans.analyzePackages` `ondemandscanning.scans.listVulnerabilities` `ondemandscanning.scans.scan`
On-Demand Scanning Viewer ^Beta (`roles/ondemandscanning.viewer`) Viewer role for On-Demand Scanning	`ondemandscanning.operations.get` `ondemandscanning.operations.list` `ondemandscanning.operations.wait` `ondemandscanning.scans.listVulnerabilities` `resourcemanager.projects.get` `resourcemanager.projects.list`

On-Demand Scanning Admin ^Beta

(roles/ondemandscanning.admin)

All permissions for On-Demand Scanning

ondemandscanning.*

ondemandscanning.operations.cancel
ondemandscanning.operations.delete
ondemandscanning.operations.get
ondemandscanning.operations.list
ondemandscanning.operations.wait
ondemandscanning.scans.analyzePackages
ondemandscanning.scans.listVulnerabilities
ondemandscanning.scans.scan

On-Demand Scanning Viewer ^Beta

(roles/ondemandscanning.viewer)

Viewer role for On-Demand Scanning

ondemandscanning.operations.get

ondemandscanning.operations.list

ondemandscanning.operations.wait

ondemandscanning.scans.listVulnerabilities

resourcemanager.projects.get

resourcemanager.projects.list

On-Demand Scanning API permissions

Permission	Included in roles
`ondemandscanning.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) On-Demand Scanning Admin (`roles/ondemandscanning.admin`)
`ondemandscanning.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) On-Demand Scanning Admin (`roles/ondemandscanning.admin`)
`ondemandscanning.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) On-Demand Scanning Admin (`roles/ondemandscanning.admin`) On-Demand Scanning Viewer (`roles/ondemandscanning.viewer`) Support User (`roles/iam.supportUser`)
`ondemandscanning.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) On-Demand Scanning Admin (`roles/ondemandscanning.admin`) On-Demand Scanning Viewer (`roles/ondemandscanning.viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`ondemandscanning.operations.wait`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) On-Demand Scanning Admin (`roles/ondemandscanning.admin`) On-Demand Scanning Viewer (`roles/ondemandscanning.viewer`) Support User (`roles/iam.supportUser`)
`ondemandscanning.scans.analyzePackages`	Owner (`roles/owner`) Editor (`roles/editor`) On-Demand Scanning Admin (`roles/ondemandscanning.admin`)
`ondemandscanning.scans.listVulnerabilities`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) On-Demand Scanning Admin (`roles/ondemandscanning.admin`) On-Demand Scanning Viewer (`roles/ondemandscanning.viewer`) Support User (`roles/iam.supportUser`)
`ondemandscanning.scans.scan`	Owner (`roles/owner`) Editor (`roles/editor`) On-Demand Scanning Admin (`roles/ondemandscanning.admin`)

On-Demand Scanning API roles and permissions