Serverless Integrations roles and permissions

This page lists the IAM roles and permissions for Serverless Integrations. To search through all roles and permissions, see the role and permission index.

Serverless Integrations roles

Role Permissions

Role	Permissions
Serverless Integrations Viewer ^Beta (`roles/runapps.viewer`) Read-only access to Serverless Integrations resources.	`resourcemanager.projects.get` `resourcemanager.projects.list` `runapps.applications.get` `runapps.applications.getStatus` `runapps.applications.list` `runapps.deployments.get` `runapps.deployments.list` `runapps.locations.*` `runapps.locations.get` `runapps.locations.list` `runapps.operations.get` `runapps.operations.list`
Serverless Integrations Developer ^Beta (`roles/runapps.developer`) Access to create and change Serverless Integrations and their configuration.	`resourcemanager.projects.get` `resourcemanager.projects.list` `runapps.applications.` `runapps.applications.create` `runapps.applications.delete` `runapps.applications.get` `runapps.applications.getStatus` `runapps.applications.list` `runapps.applications.update` `runapps.deployments.get` `runapps.deployments.list` `runapps.locations.` `runapps.locations.get` `runapps.locations.list` `runapps.operations.*` `runapps.operations.cancel` `runapps.operations.delete` `runapps.operations.get` `runapps.operations.list`
Serverless Integrations Operator ^Beta (`roles/runapps.operator`) Access to deploy Serverless Integrations.	`resourcemanager.projects.get` `resourcemanager.projects.list` `runapps.applications.get` `runapps.applications.getStatus` `runapps.applications.list` `runapps.deployments.` `runapps.deployments.create` `runapps.deployments.get` `runapps.deployments.list` `runapps.locations.` `runapps.locations.get` `runapps.locations.list` `runapps.operations.*` `runapps.operations.cancel` `runapps.operations.delete` `runapps.operations.get` `runapps.operations.list`

Serverless Integrations Viewer ^Beta

(roles/runapps.viewer)

Read-only access to Serverless Integrations resources.

resourcemanager.projects.get

resourcemanager.projects.list

runapps.applications.get

runapps.applications.getStatus

runapps.applications.list

runapps.deployments.get

runapps.deployments.list

runapps.locations.*

runapps.locations.get
runapps.locations.list

runapps.operations.get

runapps.operations.list

Serverless Integrations Developer ^Beta

(roles/runapps.developer)

Access to create and change Serverless Integrations and their configuration.

resourcemanager.projects.get

resourcemanager.projects.list

runapps.applications.*

runapps.applications.create
runapps.applications.delete
runapps.applications.get
runapps.applications.getStatus
runapps.applications.list
runapps.applications.update

runapps.deployments.get

runapps.deployments.list

runapps.locations.*

runapps.locations.get
runapps.locations.list

runapps.operations.*

runapps.operations.cancel
runapps.operations.delete
runapps.operations.get
runapps.operations.list

Serverless Integrations Operator ^Beta

(roles/runapps.operator)

Access to deploy Serverless Integrations.

resourcemanager.projects.get

resourcemanager.projects.list

runapps.applications.get

runapps.applications.getStatus

runapps.applications.list

runapps.deployments.*

runapps.deployments.create
runapps.deployments.get
runapps.deployments.list

runapps.locations.*

runapps.locations.get
runapps.locations.list

runapps.operations.*

runapps.operations.cancel
runapps.operations.delete
runapps.operations.get
runapps.operations.list

Service agent roles

Service agent roles should only be granted to service agents.

Role Permissions

Role	Permissions
Serverless Integrations Service Agent (`roles/runapps.serviceAgent`) Gives Serverless Integrations Service Account access to customer project resources. Warning: Do not grant service agent roles to any principals except service agents.	`cloudbuild.builds.create` `cloudbuild.builds.get` `cloudsql.databases.get` `cloudsql.instances.get` `cloudsql.users.get` `compute.backendServices.get` `compute.backendServices.list` `compute.globalAddresses.get` `compute.globalAddresses.list` `compute.globalForwardingRules.get` `compute.globalForwardingRules.list` `compute.networks.get` `compute.networks.list` `compute.regionNetworkEndpointGroups.get` `compute.regionNetworkEndpointGroups.list` `compute.sslCertificates.get` `compute.sslCertificates.list` `compute.targetHttpProxies.get` `compute.targetHttpProxies.list` `compute.targetHttpsProxies.get` `compute.targetHttpsProxies.list` `compute.urlMaps.get` `compute.urlMaps.list` `firebasehosting.sites.get` `iam.serviceAccounts.actAs` `redis.instances.get` `redis.instances.list` `run.jobs.get` `run.jobs.list` `run.services.get` `run.services.list` `serviceusage.services.use` `storage.buckets.create` `storage.buckets.delete` `storage.buckets.get` `storage.objects.create` `storage.objects.delete` `storage.objects.get` `storage.objects.list` `vpcaccess.connectors.get` `vpcaccess.connectors.list`

Serverless Integrations Service Agent

(roles/runapps.serviceAgent)

Gives Serverless Integrations Service Account access to customer project resources.

cloudbuild.builds.create

cloudbuild.builds.get

cloudsql.databases.get

cloudsql.instances.get

cloudsql.users.get

compute.backendServices.get

compute.backendServices.list

compute.globalAddresses.get

compute.globalAddresses.list

compute.globalForwardingRules.get

compute.globalForwardingRules.list

compute.networks.get

compute.networks.list

compute.regionNetworkEndpointGroups.get

compute.regionNetworkEndpointGroups.list

compute.sslCertificates.get

compute.sslCertificates.list

compute.targetHttpProxies.get

compute.targetHttpProxies.list

compute.targetHttpsProxies.get

compute.targetHttpsProxies.list

compute.urlMaps.get

compute.urlMaps.list

firebasehosting.sites.get

iam.serviceAccounts.actAs

redis.instances.get

redis.instances.list

run.jobs.get

run.jobs.list

run.services.get

run.services.list

serviceusage.services.use

storage.buckets.create

storage.buckets.delete

storage.buckets.get

storage.objects.create

storage.objects.delete

storage.objects.get

storage.objects.list

vpcaccess.connectors.get

vpcaccess.connectors.list

Serverless Integrations permissions

Permission	Included in roles
`runapps.applications.create`	Owner (`roles/owner`) Editor (`roles/editor`) Serverless Integrations Developer (`roles/runapps.developer`)
`runapps.applications.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Serverless Integrations Developer (`roles/runapps.developer`)
`runapps.applications.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Serverless Integrations Viewer (`roles/runapps.viewer`) Support User (`roles/iam.supportUser`) Serverless Integrations Developer (`roles/runapps.developer`) Serverless Integrations Operator (`roles/runapps.operator`)
`runapps.applications.getStatus`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Serverless Integrations Viewer (`roles/runapps.viewer`) Support User (`roles/iam.supportUser`) Serverless Integrations Developer (`roles/runapps.developer`) Serverless Integrations Operator (`roles/runapps.operator`)
`runapps.applications.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Serverless Integrations Viewer (`roles/runapps.viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Serverless Integrations Developer (`roles/runapps.developer`) Serverless Integrations Operator (`roles/runapps.operator`)
`runapps.applications.update`	Owner (`roles/owner`) Editor (`roles/editor`) Serverless Integrations Developer (`roles/runapps.developer`)
`runapps.deployments.create`	Owner (`roles/owner`) Editor (`roles/editor`) Serverless Integrations Operator (`roles/runapps.operator`)
`runapps.deployments.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Serverless Integrations Viewer (`roles/runapps.viewer`) Support User (`roles/iam.supportUser`) Serverless Integrations Developer (`roles/runapps.developer`) Serverless Integrations Operator (`roles/runapps.operator`)
`runapps.deployments.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Serverless Integrations Viewer (`roles/runapps.viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Serverless Integrations Developer (`roles/runapps.developer`) Serverless Integrations Operator (`roles/runapps.operator`)
`runapps.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Serverless Integrations Viewer (`roles/runapps.viewer`) Support User (`roles/iam.supportUser`) Serverless Integrations Developer (`roles/runapps.developer`) Serverless Integrations Operator (`roles/runapps.operator`)
`runapps.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Serverless Integrations Viewer (`roles/runapps.viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Serverless Integrations Developer (`roles/runapps.developer`) Serverless Integrations Operator (`roles/runapps.operator`)
`runapps.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Serverless Integrations Developer (`roles/runapps.developer`) Serverless Integrations Operator (`roles/runapps.operator`)
`runapps.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Serverless Integrations Developer (`roles/runapps.developer`) Serverless Integrations Operator (`roles/runapps.operator`)
`runapps.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Serverless Integrations Viewer (`roles/runapps.viewer`) Support User (`roles/iam.supportUser`) Serverless Integrations Developer (`roles/runapps.developer`) Serverless Integrations Operator (`roles/runapps.operator`)
`runapps.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Serverless Integrations Viewer (`roles/runapps.viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Serverless Integrations Developer (`roles/runapps.developer`) Serverless Integrations Operator (`roles/runapps.operator`)

Serverless Integrations roles and permissions