Service Consumer Management roles and permissions

This page lists the IAM roles and permissions for Service Consumer Management. To search through all roles and permissions, see the role and permission index.

Service Consumer Management roles

Role Permissions

Role	Permissions
Serviceconsumermanagement Admin ^Beta (`roles/serviceconsumermanagement.admin`) Admin role for serviceconsumermanagement	`resourcemanager.projects.get` `resourcemanager.projects.list` `serviceconsumermanagement.*` `serviceconsumermanagement.consumers.get` `serviceconsumermanagement.quota.get` `serviceconsumermanagement.quota.update` `serviceconsumermanagement.tenancyu.addResource` `serviceconsumermanagement.tenancyu.create` `serviceconsumermanagement.tenancyu.delete` `serviceconsumermanagement.tenancyu.list` `serviceconsumermanagement.tenancyu.removeResource`
Serviceconsumermanagement Viewer ^Beta (`roles/serviceconsumermanagement.viewer`) Viewer role for serviceconsumermanagement	`resourcemanager.projects.get` `resourcemanager.projects.list` `serviceconsumermanagement.consumers.get` `serviceconsumermanagement.quota.get` `serviceconsumermanagement.tenancyu.list`
Admin of Tenancy Units ^Beta (`roles/serviceconsumermanagement.tenancyUnitsAdmin`) Administrate tenancy units	`serviceconsumermanagement.tenancyu.*` `serviceconsumermanagement.tenancyu.addResource` `serviceconsumermanagement.tenancyu.create` `serviceconsumermanagement.tenancyu.delete` `serviceconsumermanagement.tenancyu.list` `serviceconsumermanagement.tenancyu.removeResource`
Viewer of Tenancy Units ^Beta (`roles/serviceconsumermanagement.tenancyUnitsViewer`) View tenancy units	`serviceconsumermanagement.tenancyu.list`

Serviceconsumermanagement Admin ^Beta

(roles/serviceconsumermanagement.admin)

Admin role for serviceconsumermanagement

resourcemanager.projects.get

resourcemanager.projects.list

serviceconsumermanagement.*

serviceconsumermanagement.consumers.get
serviceconsumermanagement.quota.get
serviceconsumermanagement.quota.update
serviceconsumermanagement.tenancyu.addResource
serviceconsumermanagement.tenancyu.create
serviceconsumermanagement.tenancyu.delete
serviceconsumermanagement.tenancyu.list
serviceconsumermanagement.tenancyu.removeResource

Serviceconsumermanagement Viewer ^Beta

(roles/serviceconsumermanagement.viewer)

Viewer role for serviceconsumermanagement

resourcemanager.projects.get

resourcemanager.projects.list

serviceconsumermanagement.consumers.get

serviceconsumermanagement.quota.get

serviceconsumermanagement.tenancyu.list

Admin of Tenancy Units ^Beta

(roles/serviceconsumermanagement.tenancyUnitsAdmin)

Administrate tenancy units

serviceconsumermanagement.tenancyu.*

serviceconsumermanagement.tenancyu.addResource
serviceconsumermanagement.tenancyu.create
serviceconsumermanagement.tenancyu.delete
serviceconsumermanagement.tenancyu.list
serviceconsumermanagement.tenancyu.removeResource

Viewer of Tenancy Units ^Beta

(roles/serviceconsumermanagement.tenancyUnitsViewer)

View tenancy units

serviceconsumermanagement.tenancyu.list

Service Consumer Management permissions

Permission	Included in roles
`serviceconsumermanagement.consumers.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Serviceconsumermanagement Admin (`roles/serviceconsumermanagement.admin`) Serviceconsumermanagement Viewer (`roles/serviceconsumermanagement.viewer`) Service Management Administrator (`roles/servicemanagement.admin`) Support User (`roles/iam.supportUser`)
`serviceconsumermanagement.quota.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Serviceconsumermanagement Admin (`roles/serviceconsumermanagement.admin`) Serviceconsumermanagement Viewer (`roles/serviceconsumermanagement.viewer`) Service Management Administrator (`roles/servicemanagement.admin`) Support User (`roles/iam.supportUser`)
`serviceconsumermanagement.quota.update`	Owner (`roles/owner`) Editor (`roles/editor`) Serviceconsumermanagement Admin (`roles/serviceconsumermanagement.admin`) Service Management Administrator (`roles/servicemanagement.admin`)
`serviceconsumermanagement.tenancyu.addResource`	Owner (`roles/owner`) Editor (`roles/editor`) Serviceconsumermanagement Admin (`roles/serviceconsumermanagement.admin`) Service Management Administrator (`roles/servicemanagement.admin`) Admin of Tenancy Units (`roles/serviceconsumermanagement.tenancyUnitsAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Workload Certificate Service Agent (`roles/workloadcertificate.serviceAgent`)
`serviceconsumermanagement.tenancyu.create`	Owner (`roles/owner`) Editor (`roles/editor`) Serviceconsumermanagement Admin (`roles/serviceconsumermanagement.admin`) Service Management Administrator (`roles/servicemanagement.admin`) Admin of Tenancy Units (`roles/serviceconsumermanagement.tenancyUnitsAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Workload Certificate Service Agent (`roles/workloadcertificate.serviceAgent`)
`serviceconsumermanagement.tenancyu.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Serviceconsumermanagement Admin (`roles/serviceconsumermanagement.admin`) Service Management Administrator (`roles/servicemanagement.admin`) Admin of Tenancy Units (`roles/serviceconsumermanagement.tenancyUnitsAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Workload Certificate Service Agent (`roles/workloadcertificate.serviceAgent`)
`serviceconsumermanagement.tenancyu.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Serviceconsumermanagement Admin (`roles/serviceconsumermanagement.admin`) Serviceconsumermanagement Viewer (`roles/serviceconsumermanagement.viewer`) Service Management Administrator (`roles/servicemanagement.admin`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Admin of Tenancy Units (`roles/serviceconsumermanagement.tenancyUnitsAdmin`) Viewer of Tenancy Units (`roles/serviceconsumermanagement.tenancyUnitsViewer`)
`serviceconsumermanagement.tenancyu.removeResource`	Owner (`roles/owner`) Editor (`roles/editor`) Serviceconsumermanagement Admin (`roles/serviceconsumermanagement.admin`) Service Management Administrator (`roles/servicemanagement.admin`) Admin of Tenancy Units (`roles/serviceconsumermanagement.tenancyUnitsAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Workload Certificate Service Agent (`roles/workloadcertificate.serviceAgent`)

Service Consumer Management roles and permissions