| roles/apigateway.serviceAgent |
Gives Cloud API Gateway service account access to Service Management check and reports as well as impersonation on user-specified service accounts. |
Cloud API Gateway Service Agent |
['iam.serviceAccounts.getAccessToken', 'iam.serviceAccounts.getOpenIdToken', 'servicemanagement.services.check', 'servicemanagement.services.quota', 'servicemanagement.services.report'] |
|
GA |
| roles/apigateway.admin |
Full access to ApiGateway and related resources. |
ApiGateway Admin |
['apigateway.apiconfigs.create', 'apigateway.apiconfigs.delete', 'apigateway.apiconfigs.get', 'apigateway.apiconfigs.getIamPolicy', 'apigateway.apiconfigs.list', 'apigateway.apiconfigs.setIamPolicy', 'apigateway.apiconfigs.update', 'apigateway.apis.create', 'apigateway.apis.delete', 'apigateway.apis.get', 'apigateway.apis.getIamPolicy', 'apigateway.apis.list', 'apigateway.apis.setIamPolicy', 'apigateway.apis.update', 'apigateway.gateways.create', 'apigateway.gateways.delete', 'apigateway.gateways.get', 'apigateway.gateways.getIamPolicy', 'apigateway.gateways.list', 'apigateway.gateways.setIamPolicy', 'apigateway.gateways.update', 'apigateway.locations.get', 'apigateway.locations.list', 'apigateway.operations.cancel', 'apigateway.operations.delete', 'apigateway.operations.get', 'apigateway.operations.list', 'monitoring.metricDescriptors.list', 'monitoring.monitoredResourceDescriptors.get', 'monitoring.timeSeries.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'servicemanagement.services.get', 'serviceusage.services.get', 'serviceusage.services.list'] |
|
GA |
| roles/apigateway.viewer |
Read-only access to ApiGateway and related resources. |
ApiGateway Viewer |
['apigateway.apiconfigs.get', 'apigateway.apiconfigs.getIamPolicy', 'apigateway.apiconfigs.list', 'apigateway.apis.get', 'apigateway.apis.getIamPolicy', 'apigateway.apis.list', 'apigateway.gateways.get', 'apigateway.gateways.getIamPolicy', 'apigateway.gateways.list', 'apigateway.locations.get', 'apigateway.locations.list', 'apigateway.operations.get', 'apigateway.operations.list', 'monitoring.metricDescriptors.list', 'monitoring.monitoredResourceDescriptors.get', 'monitoring.timeSeries.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'servicemanagement.services.get', 'serviceusage.services.get', 'serviceusage.services.list'] |
|
GA |
| roles/apigateway_management.serviceAgent |
Gives Cloud API Gateway service account access to retrieve aService configuration. |
Cloud API Gateway Management Service Agent |
['iam.serviceAccounts.get', 'servicemanagement.services.create', 'servicemanagement.services.delete', 'servicemanagement.services.get', 'servicemanagement.services.list', 'servicemanagement.services.update', 'serviceusage.services.get'] |
|
GA |