SaaS Service Management roles and permissions

This page lists the IAM roles and permissions for SaaS Service Management. To search through all roles and permissions, see the role and permission index.

SaaS Service Management roles

Role Permissions

Role	Permissions
SaaS Service Management Admin ^Beta (`roles/saasservicemgmt.admin`) Provide full access to all SaaS Service Management resources.	`resourcemanager.projects.get` `resourcemanager.projects.list` `saasservicemgmt.*` `saasservicemgmt.locations.get` `saasservicemgmt.locations.list` `saasservicemgmt.operations.cancel` `saasservicemgmt.operations.delete` `saasservicemgmt.operations.get` `saasservicemgmt.operations.list` `saasservicemgmt.releases.create` `saasservicemgmt.releases.delete` `saasservicemgmt.releases.get` `saasservicemgmt.releases.list` `saasservicemgmt.releases.update` `saasservicemgmt.rolloutKinds.create` `saasservicemgmt.rolloutKinds.delete` `saasservicemgmt.rolloutKinds.get` `saasservicemgmt.rolloutKinds.list` `saasservicemgmt.rolloutKinds.update` `saasservicemgmt.rollouts.create` `saasservicemgmt.rollouts.delete` `saasservicemgmt.rollouts.get` `saasservicemgmt.rollouts.list` `saasservicemgmt.rollouts.update` `saasservicemgmt.saas.create` `saasservicemgmt.saas.delete` `saasservicemgmt.saas.get` `saasservicemgmt.saas.list` `saasservicemgmt.saas.update` `saasservicemgmt.tenants.create` `saasservicemgmt.tenants.delete` `saasservicemgmt.tenants.get` `saasservicemgmt.tenants.list` `saasservicemgmt.tenants.update` `saasservicemgmt.unitKinds.create` `saasservicemgmt.unitKinds.delete` `saasservicemgmt.unitKinds.get` `saasservicemgmt.unitKinds.list` `saasservicemgmt.unitKinds.update` `saasservicemgmt.unitOperations.create` `saasservicemgmt.unitOperations.delete` `saasservicemgmt.unitOperations.get` `saasservicemgmt.unitOperations.list` `saasservicemgmt.unitOperations.update` `saasservicemgmt.units.create` `saasservicemgmt.units.delete` `saasservicemgmt.units.get` `saasservicemgmt.units.list` `saasservicemgmt.units.update`
SaaS Service Management Viewer ^Beta (`roles/saasservicemgmt.viewer`) Provides read-only access to SaaS Service Management resources.	`resourcemanager.projects.get` `resourcemanager.projects.list` `saasservicemgmt.locations.*` `saasservicemgmt.locations.get` `saasservicemgmt.locations.list` `saasservicemgmt.operations.get` `saasservicemgmt.operations.list` `saasservicemgmt.releases.get` `saasservicemgmt.releases.list` `saasservicemgmt.rolloutKinds.get` `saasservicemgmt.rolloutKinds.list` `saasservicemgmt.rollouts.get` `saasservicemgmt.rollouts.list` `saasservicemgmt.saas.get` `saasservicemgmt.saas.list` `saasservicemgmt.tenants.get` `saasservicemgmt.tenants.list` `saasservicemgmt.unitKinds.get` `saasservicemgmt.unitKinds.list` `saasservicemgmt.unitOperations.get` `saasservicemgmt.unitOperations.list` `saasservicemgmt.units.get` `saasservicemgmt.units.list`

SaaS Service Management Admin ^Beta

(roles/saasservicemgmt.admin)

Provide full access to all SaaS Service Management resources.

resourcemanager.projects.get

resourcemanager.projects.list

saasservicemgmt.*

saasservicemgmt.locations.get
saasservicemgmt.locations.list
saasservicemgmt.operations.cancel
saasservicemgmt.operations.delete
saasservicemgmt.operations.get
saasservicemgmt.operations.list
saasservicemgmt.releases.create
saasservicemgmt.releases.delete
saasservicemgmt.releases.get
saasservicemgmt.releases.list
saasservicemgmt.releases.update
saasservicemgmt.rolloutKinds.create
saasservicemgmt.rolloutKinds.delete
saasservicemgmt.rolloutKinds.get
saasservicemgmt.rolloutKinds.list
saasservicemgmt.rolloutKinds.update
saasservicemgmt.rollouts.create
saasservicemgmt.rollouts.delete
saasservicemgmt.rollouts.get
saasservicemgmt.rollouts.list
saasservicemgmt.rollouts.update
saasservicemgmt.saas.create
saasservicemgmt.saas.delete
saasservicemgmt.saas.get
saasservicemgmt.saas.list
saasservicemgmt.saas.update
saasservicemgmt.tenants.create
saasservicemgmt.tenants.delete
saasservicemgmt.tenants.get
saasservicemgmt.tenants.list
saasservicemgmt.tenants.update
saasservicemgmt.unitKinds.create
saasservicemgmt.unitKinds.delete
saasservicemgmt.unitKinds.get
saasservicemgmt.unitKinds.list
saasservicemgmt.unitKinds.update
saasservicemgmt.unitOperations.create
saasservicemgmt.unitOperations.delete
saasservicemgmt.unitOperations.get
saasservicemgmt.unitOperations.list
saasservicemgmt.unitOperations.update
saasservicemgmt.units.create
saasservicemgmt.units.delete
saasservicemgmt.units.get
saasservicemgmt.units.list
saasservicemgmt.units.update

SaaS Service Management Viewer ^Beta

(roles/saasservicemgmt.viewer)

Provides read-only access to SaaS Service Management resources.

resourcemanager.projects.get

resourcemanager.projects.list

saasservicemgmt.locations.*

saasservicemgmt.locations.get
saasservicemgmt.locations.list

saasservicemgmt.operations.get

saasservicemgmt.operations.list

saasservicemgmt.releases.get

saasservicemgmt.releases.list

saasservicemgmt.rolloutKinds.get

saasservicemgmt.rolloutKinds.list

saasservicemgmt.rollouts.get

saasservicemgmt.rollouts.list

saasservicemgmt.saas.get

saasservicemgmt.saas.list

saasservicemgmt.tenants.get

saasservicemgmt.tenants.list

saasservicemgmt.unitKinds.get

saasservicemgmt.unitKinds.list

saasservicemgmt.unitOperations.get

saasservicemgmt.unitOperations.list

saasservicemgmt.units.get

saasservicemgmt.units.list

Service agent roles

Service agent roles should only be granted to service agents.

Role Permissions

Role	Permissions
SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`) Service Agent used by SaaS Service Management. Warning: Do not grant service agent roles to any principals except service agents.	`apphub.applications.create` `apphub.applications.get` `apphub.discoveredServices.list` `apphub.discoveredServices.register` `apphub.discoveredWorkloads.list` `apphub.discoveredWorkloads.register` `apphub.operations.get` `apphub.services.create` `apphub.workloads.create` `artifactregistry.repositories.create` `artifactregistry.repositories.downloadArtifacts` `artifactregistry.repositories.get` `artifactregistry.repositories.uploadArtifacts` `config.deployments.create` `config.deployments.delete` `config.deployments.get` `config.deployments.getState` `config.deployments.update` `config.operations.get` `config.revisions.get` `designcenter.applicationTemplateRevisions.get` `designcenter.applicationTemplates.get` `designcenter.applicationTemplates.update` `designcenter.locations.get` `designcenter.operations.get` `monitoring.metricDescriptors.create` `monitoring.timeSeries.create` `saasservicemgmt.locations.` `saasservicemgmt.locations.get` `saasservicemgmt.locations.list` `saasservicemgmt.operations.get` `saasservicemgmt.operations.list` `saasservicemgmt.releases.create` `saasservicemgmt.releases.get` `saasservicemgmt.releases.list` `saasservicemgmt.releases.update` `saasservicemgmt.rolloutKinds.` `saasservicemgmt.rolloutKinds.create` `saasservicemgmt.rolloutKinds.delete` `saasservicemgmt.rolloutKinds.get` `saasservicemgmt.rolloutKinds.list` `saasservicemgmt.rolloutKinds.update` `saasservicemgmt.rollouts.` `saasservicemgmt.rollouts.create` `saasservicemgmt.rollouts.delete` `saasservicemgmt.rollouts.get` `saasservicemgmt.rollouts.list` `saasservicemgmt.rollouts.update` `saasservicemgmt.saas.create` `saasservicemgmt.saas.get` `saasservicemgmt.saas.list` `saasservicemgmt.saas.update` `saasservicemgmt.tenants.` `saasservicemgmt.tenants.create` `saasservicemgmt.tenants.delete` `saasservicemgmt.tenants.get` `saasservicemgmt.tenants.list` `saasservicemgmt.tenants.update` `saasservicemgmt.unitKinds.create` `saasservicemgmt.unitKinds.get` `saasservicemgmt.unitKinds.list` `saasservicemgmt.unitKinds.update` `saasservicemgmt.unitOperations.` `saasservicemgmt.unitOperations.create` `saasservicemgmt.unitOperations.delete` `saasservicemgmt.unitOperations.get` `saasservicemgmt.unitOperations.list` `saasservicemgmt.unitOperations.update` `saasservicemgmt.units.` `saasservicemgmt.units.create` `saasservicemgmt.units.delete` `saasservicemgmt.units.get` `saasservicemgmt.units.list` `saasservicemgmt.units.update` `storage.buckets.create` `storage.buckets.delete` `storage.buckets.get` `storage.buckets.getIamPolicy` `storage.buckets.setIamPolicy` `storage.objects.create` `storage.objects.delete` `storage.objects.get` `storage.objects.list`

SaaS Service Management Service Agent

(roles/saasservicemgmt.serviceAgent)

Service Agent used by SaaS Service Management.

apphub.applications.create

apphub.applications.get

apphub.discoveredServices.list

apphub.discoveredServices.register

apphub.discoveredWorkloads.list

apphub.discoveredWorkloads.register

apphub.operations.get

apphub.services.create

apphub.workloads.create

artifactregistry.repositories.create

artifactregistry.repositories.downloadArtifacts

artifactregistry.repositories.get

artifactregistry.repositories.uploadArtifacts

config.deployments.create

config.deployments.delete

config.deployments.get

config.deployments.getState

config.deployments.update

config.operations.get

config.revisions.get

designcenter.applicationTemplateRevisions.get

designcenter.applicationTemplates.get

designcenter.applicationTemplates.update

designcenter.locations.get

designcenter.operations.get

monitoring.metricDescriptors.create

monitoring.timeSeries.create

saasservicemgmt.locations.*

saasservicemgmt.locations.get
saasservicemgmt.locations.list

saasservicemgmt.operations.get

saasservicemgmt.operations.list

saasservicemgmt.releases.create

saasservicemgmt.releases.get

saasservicemgmt.releases.list

saasservicemgmt.releases.update

saasservicemgmt.rolloutKinds.*

saasservicemgmt.rolloutKinds.create
saasservicemgmt.rolloutKinds.delete
saasservicemgmt.rolloutKinds.get
saasservicemgmt.rolloutKinds.list
saasservicemgmt.rolloutKinds.update

saasservicemgmt.rollouts.*

saasservicemgmt.rollouts.create
saasservicemgmt.rollouts.delete
saasservicemgmt.rollouts.get
saasservicemgmt.rollouts.list
saasservicemgmt.rollouts.update

saasservicemgmt.saas.create

saasservicemgmt.saas.get

saasservicemgmt.saas.list

saasservicemgmt.saas.update

saasservicemgmt.tenants.*

saasservicemgmt.tenants.create
saasservicemgmt.tenants.delete
saasservicemgmt.tenants.get
saasservicemgmt.tenants.list
saasservicemgmt.tenants.update

saasservicemgmt.unitKinds.create

saasservicemgmt.unitKinds.get

saasservicemgmt.unitKinds.list

saasservicemgmt.unitKinds.update

saasservicemgmt.unitOperations.*

saasservicemgmt.unitOperations.create
saasservicemgmt.unitOperations.delete
saasservicemgmt.unitOperations.get
saasservicemgmt.unitOperations.list
saasservicemgmt.unitOperations.update

saasservicemgmt.units.*

saasservicemgmt.units.create
saasservicemgmt.units.delete
saasservicemgmt.units.get
saasservicemgmt.units.list
saasservicemgmt.units.update

storage.buckets.create

storage.buckets.delete

storage.buckets.get

storage.buckets.getIamPolicy

storage.buckets.setIamPolicy

storage.objects.create

storage.objects.delete

storage.objects.get

storage.objects.list

SaaS Service Management permissions

Permission	Included in roles
`saasservicemgmt.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`)
`saasservicemgmt.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`)
`saasservicemgmt.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.releases.create`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.releases.delete`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`)
`saasservicemgmt.releases.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.releases.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.releases.update`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rolloutKinds.create`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rolloutKinds.delete`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rolloutKinds.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rolloutKinds.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rolloutKinds.update`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rollouts.create`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rollouts.delete`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rollouts.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rollouts.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rollouts.update`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.saas.create`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.saas.delete`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`)
`saasservicemgmt.saas.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.saas.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.saas.update`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.tenants.create`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.tenants.delete`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.tenants.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.tenants.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.tenants.update`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitKinds.create`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitKinds.delete`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`)
`saasservicemgmt.unitKinds.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitKinds.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitKinds.update`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitOperations.create`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitOperations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitOperations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitOperations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitOperations.update`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.units.create`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.units.delete`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.units.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.units.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.units.update`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)

SaaS Service Management roles and permissions Stay organized with collections Save and categorize content based on your preferences.