Roles Data

Name Description Title Included Permissions Copy Stage
roles/apigee.developerAdmin Developer admin of apigee resources Apigee Developer Admin ['apigee.apiproductattributes.get', 'apigee.apiproductattributes.list', 'apigee.apiproducts.get', 'apigee.apiproducts.list', 'apigee.appgroupapps.create', 'apigee.appgroupapps.delete', 'apigee.appgroupapps.get', 'apigee.appgroupapps.list', 'apigee.appgroupapps.manage', 'apigee.appgroups.create', 'apigee.appgroups.delete', 'apigee.appgroups.get', 'apigee.appgroups.list', 'apigee.appgroups.update', 'apigee.appkeys.create', 'apigee.appkeys.delete', 'apigee.appkeys.get', 'apigee.appkeys.manage', 'apigee.apps.get', 'apigee.apps.list', 'apigee.datacollectors.create', 'apigee.datacollectors.delete', 'apigee.datacollectors.get', 'apigee.datacollectors.list', 'apigee.datacollectors.update', 'apigee.developerappattributes.createOrUpdateAll', 'apigee.developerappattributes.delete', 'apigee.developerappattributes.get', 'apigee.developerappattributes.list', 'apigee.developerappattributes.update', 'apigee.developerapps.create', 'apigee.developerapps.delete', 'apigee.developerapps.get', 'apigee.developerapps.list', 'apigee.developerapps.manage', 'apigee.developerattributes.createOrUpdateAll', 'apigee.developerattributes.delete', 'apigee.developerattributes.get', 'apigee.developerattributes.list', 'apigee.developerattributes.update', 'apigee.developerbalances.adjust', 'apigee.developerbalances.get', 'apigee.developerbalances.update', 'apigee.developermonetizationconfigs.get', 'apigee.developermonetizationconfigs.update', 'apigee.developers.create', 'apigee.developers.delete', 'apigee.developers.get', 'apigee.developers.list', 'apigee.developers.update', 'apigee.developersubscriptions.create', 'apigee.developersubscriptions.get', 'apigee.developersubscriptions.list', 'apigee.developersubscriptions.update', 'apigee.entitlements.get', 'apigee.environments.get', 'apigee.environments.getStats', 'apigee.environments.list', 'apigee.hoststats.get', 'apigee.organizations.get', 'apigee.organizations.list', 'apigee.projectorganizations.get', 'apigee.rateplans.get', 'apigee.rateplans.list', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list'] GA
roles/apigeeregistry.worker The role used by Apigee Registry application workers to read and update Apigee Registry Artifacts. Cloud Apigee Registry Worker ['apigeeregistry.apis.get', 'apigeeregistry.apis.list', 'apigeeregistry.apis.update', 'apigeeregistry.artifacts.create', 'apigeeregistry.artifacts.delete', 'apigeeregistry.artifacts.get', 'apigeeregistry.artifacts.list', 'apigeeregistry.artifacts.update', 'apigeeregistry.deployments.get', 'apigeeregistry.deployments.list', 'apigeeregistry.deployments.update', 'apigeeregistry.specs.get', 'apigeeregistry.specs.list', 'apigeeregistry.specs.update', 'apigeeregistry.versions.get', 'apigeeregistry.versions.list', 'apigeeregistry.versions.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] BETA
roles/apigee.analyticsAgent Curated set of permissions for Apigee Universal Data Collection Agent to manage analytics for an Apigee Organization Apigee Analytics Agent ['apigee.datalocation.get', 'apigee.environments.getDataLocation', 'apigee.runtimeconfigs.get'] GA
roles/apigee.serviceAgent Service agent that grants access to Apigee resources - API Products, Developers, Developer Apps, and App Keys. Apigee Service Agent ['apigee.apiproducts.get', 'apigee.apiproducts.list', 'apigee.appkeys.create', 'apigee.appkeys.delete', 'apigee.appkeys.manage', 'apigee.apps.get', 'apigee.canaryevaluations.create', 'apigee.canaryevaluations.get', 'apigee.developerapps.create', 'apigee.developerapps.delete', 'apigee.developerapps.get', 'apigee.developerapps.list', 'apigee.developerapps.manage', 'apigee.developers.create', 'apigee.developers.delete', 'apigee.developers.get', 'apigee.environments.get', 'apigee.environments.getDataLocation', 'apigee.environments.manageRuntime', 'apigee.ingressconfigs.get', 'apigee.instances.reportStatus', 'apigee.operations.get', 'apigee.operations.list', 'apigee.organizations.get', 'apigee.proxyrevisions.get', 'apigee.runtimeconfigs.get', 'cloudtrace.traces.patch', 'iam.serviceAccounts.getAccessToken', 'iam.serviceAccounts.getOpenIdToken', 'logging.buckets.create', 'logging.buckets.get', 'logging.buckets.list', 'logging.views.create', 'logging.views.get', 'logging.views.list', 'monitoring.metricDescriptors.create', 'monitoring.metricDescriptors.get', 'monitoring.metricDescriptors.list', 'monitoring.monitoredResourceDescriptors.get', 'monitoring.monitoredResourceDescriptors.list', 'monitoring.timeSeries.create'] GA
roles/apigee.securityAdmin Security admin for an Apigee Organization Apigee Security Admin ['apigee.addonsconfig.get', 'apigee.entitlements.get', 'apigee.envgroupattachments.get', 'apigee.envgroupattachments.list', 'apigee.envgroups.get', 'apigee.envgroups.list', 'apigee.environments.get', 'apigee.environments.list', 'apigee.hostsecurityreports.create', 'apigee.hostsecurityreports.get', 'apigee.hostsecurityreports.list', 'apigee.organizations.get', 'apigee.organizations.list', 'apigee.projectorganizations.get', 'apigee.securityActions.create', 'apigee.securityActions.get', 'apigee.securityActions.list', 'apigee.securityActions.update', 'apigee.securityActionsConfig.get', 'apigee.securityActionsConfig.update', 'apigee.securityAssessmentResults.compute', 'apigee.securityFeedback.create', 'apigee.securityFeedback.delete', 'apigee.securityFeedback.get', 'apigee.securityFeedback.list', 'apigee.securityIncidents.get', 'apigee.securityIncidents.list', 'apigee.securityIncidents.update', 'apigee.securityProfileEnvironments.computeScore', 'apigee.securityProfileEnvironments.create', 'apigee.securityProfileEnvironments.delete', 'apigee.securityProfiles.create', 'apigee.securityProfiles.delete', 'apigee.securityProfiles.get', 'apigee.securityProfiles.list', 'apigee.securityProfiles.update', 'apigee.securityProfilesV2.create', 'apigee.securityProfilesV2.delete', 'apigee.securityProfilesV2.get', 'apigee.securityProfilesV2.list', 'apigee.securityProfilesV2.update', 'apigee.securitySettings.get', 'apigee.securitySettings.update', 'apigee.securityStats.queryTabularStats', 'apigee.securityStats.queryTimeSeriesStats', 'apigee.securityreports.create', 'apigee.securityreports.get', 'apigee.securityreports.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] GA
roles/apigee.securityViewer Security viewer for an Apigee Organization Apigee Security Viewer ['apigee.addonsconfig.get', 'apigee.entitlements.get', 'apigee.envgroupattachments.get', 'apigee.envgroupattachments.list', 'apigee.envgroups.get', 'apigee.envgroups.list', 'apigee.environments.get', 'apigee.environments.list', 'apigee.hostsecurityreports.get', 'apigee.hostsecurityreports.list', 'apigee.organizations.get', 'apigee.organizations.list', 'apigee.projectorganizations.get', 'apigee.securityActions.get', 'apigee.securityActions.list', 'apigee.securityActionsConfig.get', 'apigee.securityAssessmentResults.compute', 'apigee.securityFeedback.get', 'apigee.securityFeedback.list', 'apigee.securityIncidents.get', 'apigee.securityIncidents.list', 'apigee.securityProfileEnvironments.computeScore', 'apigee.securityProfiles.get', 'apigee.securityProfiles.list', 'apigee.securityProfilesV2.get', 'apigee.securityProfilesV2.list', 'apigee.securitySettings.get', 'apigee.securityStats.queryTabularStats', 'apigee.securityStats.queryTimeSeriesStats', 'apigee.securityreports.get', 'apigee.securityreports.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] GA
roles/apigeeregistry.editor Edit access to Cloud Apigee Registry Registry resources. Cloud Apigee Registry Editor ['apigeeregistry.apis.create', 'apigeeregistry.apis.delete', 'apigeeregistry.apis.get', 'apigeeregistry.apis.getIamPolicy', 'apigeeregistry.apis.list', 'apigeeregistry.apis.update', 'apigeeregistry.artifacts.create', 'apigeeregistry.artifacts.delete', 'apigeeregistry.artifacts.get', 'apigeeregistry.artifacts.getIamPolicy', 'apigeeregistry.artifacts.list', 'apigeeregistry.artifacts.update', 'apigeeregistry.deployments.create', 'apigeeregistry.deployments.delete', 'apigeeregistry.deployments.get', 'apigeeregistry.deployments.list', 'apigeeregistry.deployments.update', 'apigeeregistry.specs.create', 'apigeeregistry.specs.delete', 'apigeeregistry.specs.get', 'apigeeregistry.specs.getIamPolicy', 'apigeeregistry.specs.list', 'apigeeregistry.specs.update', 'apigeeregistry.versions.create', 'apigeeregistry.versions.delete', 'apigeeregistry.versions.get', 'apigeeregistry.versions.getIamPolicy', 'apigeeregistry.versions.list', 'apigeeregistry.versions.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] BETA
roles/apigee.runtimeAgent Curated set of permissions for a runtime agent to access Apigee Organization resources Apigee Runtime Agent ['apigee.canaryevaluations.create', 'apigee.canaryevaluations.get', 'apigee.entitlements.get', 'apigee.ingressconfigs.get', 'apigee.instances.reportStatus', 'apigee.operations.get', 'apigee.operations.list', 'apigee.organizations.get', 'apigee.projectorganizations.get', 'apigee.runtimeconfigs.get'] GA
roles/apigee.admin Full access to all apigee resource features Apigee Organization Admin ['apigee.addonsconfig.get', 'apigee.addonsconfig.update', 'apigee.apiproductattributes.createOrUpdateAll', 'apigee.apiproductattributes.delete', 'apigee.apiproductattributes.get', 'apigee.apiproductattributes.list', 'apigee.apiproductattributes.update', 'apigee.apiproducts.create', 'apigee.apiproducts.delete', 'apigee.apiproducts.get', 'apigee.apiproducts.list', 'apigee.apiproducts.update', 'apigee.appgroupapps.create', 'apigee.appgroupapps.delete', 'apigee.appgroupapps.get', 'apigee.appgroupapps.list', 'apigee.appgroupapps.manage', 'apigee.appgroups.create', 'apigee.appgroups.delete', 'apigee.appgroups.get', 'apigee.appgroups.list', 'apigee.appgroups.update', 'apigee.appkeys.create', 'apigee.appkeys.delete', 'apigee.appkeys.get', 'apigee.appkeys.manage', 'apigee.apps.get', 'apigee.apps.list', 'apigee.archivedeployments.create', 'apigee.archivedeployments.delete', 'apigee.archivedeployments.download', 'apigee.archivedeployments.get', 'apigee.archivedeployments.list', 'apigee.archivedeployments.update', 'apigee.archivedeployments.upload', 'apigee.caches.delete', 'apigee.caches.list', 'apigee.canaryevaluations.create', 'apigee.canaryevaluations.get', 'apigee.datacollectors.create', 'apigee.datacollectors.delete', 'apigee.datacollectors.get', 'apigee.datacollectors.list', 'apigee.datacollectors.update', 'apigee.datalocation.get', 'apigee.datastores.create', 'apigee.datastores.delete', 'apigee.datastores.get', 'apigee.datastores.list', 'apigee.datastores.update', 'apigee.deployments.create', 'apigee.deployments.delete', 'apigee.deployments.get', 'apigee.deployments.getIamPolicy', 'apigee.deployments.invoke', 'apigee.deployments.list', 'apigee.deployments.setIamPolicy', 'apigee.deployments.update', 'apigee.developerappattributes.createOrUpdateAll', 'apigee.developerappattributes.delete', 'apigee.developerappattributes.get', 'apigee.developerappattributes.list', 'apigee.developerappattributes.update', 'apigee.developerapps.create', 'apigee.developerapps.delete', 'apigee.developerapps.get', 'apigee.developerapps.list', 'apigee.developerapps.manage', 'apigee.developerattributes.createOrUpdateAll', 'apigee.developerattributes.delete', 'apigee.developerattributes.get', 'apigee.developerattributes.list', 'apigee.developerattributes.update', 'apigee.developerbalances.adjust', 'apigee.developerbalances.get', 'apigee.developerbalances.update', 'apigee.developermonetizationconfigs.get', 'apigee.developermonetizationconfigs.update', 'apigee.developers.create', 'apigee.developers.delete', 'apigee.developers.get', 'apigee.developers.list', 'apigee.developers.update', 'apigee.developersubscriptions.create', 'apigee.developersubscriptions.get', 'apigee.developersubscriptions.list', 'apigee.developersubscriptions.update', 'apigee.endpointattachments.create', 'apigee.endpointattachments.delete', 'apigee.endpointattachments.get', 'apigee.endpointattachments.list', 'apigee.entitlements.get', 'apigee.envgroupattachments.create', 'apigee.envgroupattachments.delete', 'apigee.envgroupattachments.get', 'apigee.envgroupattachments.list', 'apigee.envgroups.create', 'apigee.envgroups.delete', 'apigee.envgroups.get', 'apigee.envgroups.list', 'apigee.envgroups.update', 'apigee.environments.create', 'apigee.environments.delete', 'apigee.environments.get', 'apigee.environments.getDataLocation', 'apigee.environments.getIamPolicy', 'apigee.environments.getStats', 'apigee.environments.list', 'apigee.environments.manageRuntime', 'apigee.environments.setIamPolicy', 'apigee.environments.update', 'apigee.exports.create', 'apigee.exports.get', 'apigee.exports.list', 'apigee.flowhooks.attachSharedFlow', 'apigee.flowhooks.detachSharedFlow', 'apigee.flowhooks.getSharedFlow', 'apigee.flowhooks.list', 'apigee.hostqueries.create', 'apigee.hostqueries.get', 'apigee.hostqueries.list', 'apigee.hostsecurityreports.create', 'apigee.hostsecurityreports.get', 'apigee.hostsecurityreports.list', 'apigee.hoststats.get', 'apigee.ingressconfigs.get', 'apigee.instanceattachments.create', 'apigee.instanceattachments.delete', 'apigee.instanceattachments.get', 'apigee.instanceattachments.list', 'apigee.instances.create', 'apigee.instances.delete', 'apigee.instances.get', 'apigee.instances.list', 'apigee.instances.reportStatus', 'apigee.instances.update', 'apigee.keystorealiases.create', 'apigee.keystorealiases.delete', 'apigee.keystorealiases.exportCertificate', 'apigee.keystorealiases.generateCSR', 'apigee.keystorealiases.get', 'apigee.keystorealiases.list', 'apigee.keystorealiases.update', 'apigee.keystores.create', 'apigee.keystores.delete', 'apigee.keystores.export', 'apigee.keystores.get', 'apigee.keystores.list', 'apigee.keyvaluemapentries.create', 'apigee.keyvaluemapentries.delete', 'apigee.keyvaluemapentries.get', 'apigee.keyvaluemapentries.list', 'apigee.keyvaluemapentries.update', 'apigee.keyvaluemaps.create', 'apigee.keyvaluemaps.delete', 'apigee.keyvaluemaps.list', 'apigee.maskconfigs.get', 'apigee.maskconfigs.update', 'apigee.nataddresses.activate', 'apigee.nataddresses.create', 'apigee.nataddresses.delete', 'apigee.nataddresses.get', 'apigee.nataddresses.list', 'apigee.operations.get', 'apigee.operations.list', 'apigee.organizations.create', 'apigee.organizations.delete', 'apigee.organizations.get', 'apigee.organizations.list', 'apigee.organizations.update', 'apigee.portals.create', 'apigee.portals.delete', 'apigee.portals.get', 'apigee.portals.list', 'apigee.portals.update', 'apigee.projectorganizations.get', 'apigee.projects.migrate', 'apigee.projects.previewMigration', 'apigee.projects.update', 'apigee.proxies.create', 'apigee.proxies.delete', 'apigee.proxies.get', 'apigee.proxies.list', 'apigee.proxies.update', 'apigee.proxyrevisions.delete', 'apigee.proxyrevisions.deploy', 'apigee.proxyrevisions.get', 'apigee.proxyrevisions.list', 'apigee.proxyrevisions.undeploy', 'apigee.proxyrevisions.update', 'apigee.queries.create', 'apigee.queries.get', 'apigee.queries.list', 'apigee.rateplans.create', 'apigee.rateplans.delete', 'apigee.rateplans.get', 'apigee.rateplans.list', 'apigee.rateplans.update', 'apigee.references.create', 'apigee.references.delete', 'apigee.references.get', 'apigee.references.list', 'apigee.references.update', 'apigee.reports.create', 'apigee.reports.delete', 'apigee.reports.get', 'apigee.reports.list', 'apigee.reports.update', 'apigee.resourcefiles.create', 'apigee.resourcefiles.delete', 'apigee.resourcefiles.get', 'apigee.resourcefiles.list', 'apigee.resourcefiles.update', 'apigee.runtimeconfigs.get', 'apigee.securityActions.create', 'apigee.securityActions.get', 'apigee.securityActions.list', 'apigee.securityActions.update', 'apigee.securityActionsConfig.get', 'apigee.securityActionsConfig.update', 'apigee.securityAssessmentResults.compute', 'apigee.securityFeedback.create', 'apigee.securityFeedback.delete', 'apigee.securityFeedback.get', 'apigee.securityFeedback.list', 'apigee.securityIncidents.get', 'apigee.securityIncidents.list', 'apigee.securityIncidents.update', 'apigee.securityProfileEnvironments.computeScore', 'apigee.securityProfileEnvironments.create', 'apigee.securityProfileEnvironments.delete', 'apigee.securityProfiles.create', 'apigee.securityProfiles.delete', 'apigee.securityProfiles.get', 'apigee.securityProfiles.list', 'apigee.securityProfiles.update', 'apigee.securityProfilesV2.create', 'apigee.securityProfilesV2.delete', 'apigee.securityProfilesV2.get', 'apigee.securityProfilesV2.list', 'apigee.securityProfilesV2.update', 'apigee.securitySettings.get', 'apigee.securitySettings.update', 'apigee.securityStats.queryTabularStats', 'apigee.securityStats.queryTimeSeriesStats', 'apigee.securityreports.create', 'apigee.securityreports.get', 'apigee.securityreports.list', 'apigee.setupcontexts.get', 'apigee.setupcontexts.update', 'apigee.sharedflowrevisions.delete', 'apigee.sharedflowrevisions.deploy', 'apigee.sharedflowrevisions.get', 'apigee.sharedflowrevisions.list', 'apigee.sharedflowrevisions.undeploy', 'apigee.sharedflowrevisions.update', 'apigee.sharedflows.create', 'apigee.sharedflows.delete', 'apigee.sharedflows.get', 'apigee.sharedflows.list', 'apigee.targetservers.create', 'apigee.targetservers.delete', 'apigee.targetservers.get', 'apigee.targetservers.list', 'apigee.targetservers.update', 'apigee.traceconfig.get', 'apigee.traceconfig.update', 'apigee.traceconfigoverrides.create', 'apigee.traceconfigoverrides.delete', 'apigee.traceconfigoverrides.get', 'apigee.traceconfigoverrides.list', 'apigee.traceconfigoverrides.update', 'apigee.tracesessions.create', 'apigee.tracesessions.delete', 'apigee.tracesessions.get', 'apigee.tracesessions.list', 'monitoring.timeSeries.list', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list'] GA
roles/apigee.synchronizerManager Curated set of permissions for a Synchronizer to manage environments in an Apigee Organization Apigee Synchronizer Manager ['apigee.environments.get', 'apigee.environments.manageRuntime', 'apigee.ingressconfigs.get'] GA
roles/apigee.readOnlyAdmin Viewer of all apigee resources Apigee Read-only Admin ['apigee.addonsconfig.get', 'apigee.apiproductattributes.get', 'apigee.apiproductattributes.list', 'apigee.apiproducts.get', 'apigee.apiproducts.list', 'apigee.appgroupapps.get', 'apigee.appgroupapps.list', 'apigee.appgroups.get', 'apigee.appgroups.list', 'apigee.appkeys.get', 'apigee.apps.get', 'apigee.apps.list', 'apigee.archivedeployments.download', 'apigee.archivedeployments.get', 'apigee.archivedeployments.list', 'apigee.caches.list', 'apigee.canaryevaluations.get', 'apigee.datacollectors.get', 'apigee.datacollectors.list', 'apigee.datalocation.get', 'apigee.datastores.get', 'apigee.datastores.list', 'apigee.deployments.get', 'apigee.deployments.list', 'apigee.developerappattributes.get', 'apigee.developerappattributes.list', 'apigee.developerapps.get', 'apigee.developerapps.list', 'apigee.developerattributes.get', 'apigee.developerattributes.list', 'apigee.developerbalances.get', 'apigee.developermonetizationconfigs.get', 'apigee.developers.get', 'apigee.developers.list', 'apigee.developersubscriptions.get', 'apigee.developersubscriptions.list', 'apigee.endpointattachments.get', 'apigee.endpointattachments.list', 'apigee.entitlements.get', 'apigee.envgroupattachments.get', 'apigee.envgroupattachments.list', 'apigee.envgroups.get', 'apigee.envgroups.list', 'apigee.environments.get', 'apigee.environments.getDataLocation', 'apigee.environments.getIamPolicy', 'apigee.environments.getStats', 'apigee.environments.list', 'apigee.exports.get', 'apigee.exports.list', 'apigee.flowhooks.getSharedFlow', 'apigee.flowhooks.list', 'apigee.hostqueries.get', 'apigee.hostqueries.list', 'apigee.hostsecurityreports.get', 'apigee.hostsecurityreports.list', 'apigee.hoststats.get', 'apigee.ingressconfigs.get', 'apigee.instanceattachments.get', 'apigee.instanceattachments.list', 'apigee.instances.get', 'apigee.instances.list', 'apigee.keystorealiases.get', 'apigee.keystorealiases.list', 'apigee.keystores.get', 'apigee.keystores.list', 'apigee.keyvaluemapentries.get', 'apigee.keyvaluemapentries.list', 'apigee.keyvaluemaps.list', 'apigee.maskconfigs.get', 'apigee.nataddresses.get', 'apigee.nataddresses.list', 'apigee.operations.get', 'apigee.operations.list', 'apigee.organizations.get', 'apigee.organizations.list', 'apigee.portals.get', 'apigee.portals.list', 'apigee.projectorganizations.get', 'apigee.proxies.get', 'apigee.proxies.list', 'apigee.proxyrevisions.get', 'apigee.proxyrevisions.list', 'apigee.queries.get', 'apigee.queries.list', 'apigee.rateplans.get', 'apigee.rateplans.list', 'apigee.references.get', 'apigee.references.list', 'apigee.reports.get', 'apigee.reports.list', 'apigee.resourcefiles.get', 'apigee.resourcefiles.list', 'apigee.runtimeconfigs.get', 'apigee.securityActions.get', 'apigee.securityActions.list', 'apigee.securityActionsConfig.get', 'apigee.securityAssessmentResults.compute', 'apigee.securityFeedback.get', 'apigee.securityFeedback.list', 'apigee.securityIncidents.get', 'apigee.securityIncidents.list', 'apigee.securityProfileEnvironments.computeScore', 'apigee.securityProfiles.get', 'apigee.securityProfiles.list', 'apigee.securityProfilesV2.get', 'apigee.securityProfilesV2.list', 'apigee.securitySettings.get', 'apigee.securityStats.queryTabularStats', 'apigee.securityStats.queryTimeSeriesStats', 'apigee.securityreports.get', 'apigee.securityreports.list', 'apigee.setupcontexts.get', 'apigee.sharedflowrevisions.get', 'apigee.sharedflowrevisions.list', 'apigee.sharedflows.get', 'apigee.sharedflows.list', 'apigee.targetservers.get', 'apigee.targetservers.list', 'apigee.traceconfig.get', 'apigee.traceconfigoverrides.get', 'apigee.traceconfigoverrides.list', 'apigee.tracesessions.get', 'apigee.tracesessions.list', 'monitoring.timeSeries.list', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list'] GA
roles/apigee.apiReaderV2 Reader of apigee resources Apigee API Reader ['apigee.apiproductattributes.get', 'apigee.apiproductattributes.list', 'apigee.apiproducts.get', 'apigee.apiproducts.list', 'apigee.entitlements.get', 'apigee.envgroupattachments.get', 'apigee.envgroupattachments.list', 'apigee.envgroups.get', 'apigee.envgroups.list', 'apigee.environments.get', 'apigee.environments.getStats', 'apigee.environments.list', 'apigee.keyvaluemapentries.get', 'apigee.keyvaluemapentries.list', 'apigee.keyvaluemaps.list', 'apigee.organizations.get', 'apigee.organizations.list', 'apigee.projectorganizations.get', 'apigee.proxies.get', 'apigee.proxies.list', 'apigee.proxyrevisions.deploy', 'apigee.proxyrevisions.get', 'apigee.proxyrevisions.list', 'apigee.proxyrevisions.undeploy', 'apigee.sharedflowrevisions.deploy', 'apigee.sharedflowrevisions.get', 'apigee.sharedflowrevisions.list', 'apigee.sharedflowrevisions.undeploy', 'apigee.sharedflows.get', 'apigee.sharedflows.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] GA
roles/apigeeconnect.Agent Ability to set up Apigee Connect agent between external clusters and Google. Apigee Connect Agent ['apigeeconnect.endpoints.connect'] GA
roles/apigee.portalAdmin Portal admin for an Apigee Organization Apigee Portal Admin ['apigee.entitlements.get', 'apigee.organizations.get', 'apigee.organizations.list', 'apigee.portals.create', 'apigee.portals.delete', 'apigee.portals.get', 'apigee.portals.list', 'apigee.portals.update', 'apigee.projectorganizations.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] GA
roles/apigee.deploymentInvoker Invoker of deployments in the apigee runtime Apigee Deployment Invoker ['apigee.deployments.invoke'] GA
roles/apigee.apiAdminV2 Full read/write access to all apigee API resources Apigee API Admin ['apigee.apiproductattributes.createOrUpdateAll', 'apigee.apiproductattributes.delete', 'apigee.apiproductattributes.get', 'apigee.apiproductattributes.list', 'apigee.apiproductattributes.update', 'apigee.apiproducts.create', 'apigee.apiproducts.delete', 'apigee.apiproducts.get', 'apigee.apiproducts.list', 'apigee.apiproducts.update', 'apigee.deployments.list', 'apigee.entitlements.get', 'apigee.envgroupattachments.get', 'apigee.envgroupattachments.list', 'apigee.envgroups.get', 'apigee.envgroups.list', 'apigee.environments.get', 'apigee.environments.getStats', 'apigee.environments.list', 'apigee.keyvaluemapentries.create', 'apigee.keyvaluemapentries.delete', 'apigee.keyvaluemapentries.get', 'apigee.keyvaluemapentries.list', 'apigee.keyvaluemapentries.update', 'apigee.keyvaluemaps.create', 'apigee.keyvaluemaps.delete', 'apigee.keyvaluemaps.list', 'apigee.organizations.get', 'apigee.organizations.list', 'apigee.projectorganizations.get', 'apigee.proxies.create', 'apigee.proxies.delete', 'apigee.proxies.get', 'apigee.proxies.list', 'apigee.proxies.update', 'apigee.proxyrevisions.delete', 'apigee.proxyrevisions.deploy', 'apigee.proxyrevisions.get', 'apigee.proxyrevisions.list', 'apigee.proxyrevisions.undeploy', 'apigee.proxyrevisions.update', 'apigee.sharedflowrevisions.delete', 'apigee.sharedflowrevisions.deploy', 'apigee.sharedflowrevisions.get', 'apigee.sharedflowrevisions.list', 'apigee.sharedflowrevisions.undeploy', 'apigee.sharedflowrevisions.update', 'apigee.sharedflows.create', 'apigee.sharedflows.delete', 'apigee.sharedflows.get', 'apigee.sharedflows.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] GA
roles/apigeeregistry.viewer Read-only access to Cloud Apigee Registry Registry resources. Cloud Apigee Registry Viewer ['apigeeregistry.apis.get', 'apigeeregistry.apis.list', 'apigeeregistry.artifacts.get', 'apigeeregistry.artifacts.list', 'apigeeregistry.deployments.get', 'apigeeregistry.deployments.list', 'apigeeregistry.specs.get', 'apigeeregistry.specs.list', 'apigeeregistry.versions.get', 'apigeeregistry.versions.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] BETA
roles/apigee.monetizationAdmin All permissions related to monetization Apigee Monetization Admin ['apigee.apiproducts.get', 'apigee.apiproducts.list', 'apigee.developerbalances.adjust', 'apigee.developerbalances.get', 'apigee.developerbalances.update', 'apigee.developermonetizationconfigs.get', 'apigee.developermonetizationconfigs.update', 'apigee.developersubscriptions.create', 'apigee.developersubscriptions.get', 'apigee.developersubscriptions.list', 'apigee.developersubscriptions.update', 'apigee.entitlements.get', 'apigee.organizations.get', 'apigee.organizations.list', 'apigee.projectorganizations.get', 'apigee.rateplans.create', 'apigee.rateplans.delete', 'apigee.rateplans.get', 'apigee.rateplans.list', 'apigee.rateplans.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] GA
roles/apigee.analyticsEditor Analytics editor for an Apigee Organization Apigee Analytics Editor ['apigee.datacollectors.create', 'apigee.datacollectors.delete', 'apigee.datacollectors.get', 'apigee.datacollectors.list', 'apigee.datacollectors.update', 'apigee.datastores.create', 'apigee.datastores.delete', 'apigee.datastores.get', 'apigee.datastores.list', 'apigee.datastores.update', 'apigee.entitlements.get', 'apigee.envgroupattachments.get', 'apigee.envgroupattachments.list', 'apigee.envgroups.get', 'apigee.envgroups.list', 'apigee.environments.get', 'apigee.environments.getStats', 'apigee.environments.list', 'apigee.exports.create', 'apigee.exports.get', 'apigee.exports.list', 'apigee.hostqueries.create', 'apigee.hostqueries.get', 'apigee.hostqueries.list', 'apigee.hoststats.get', 'apigee.organizations.get', 'apigee.organizations.list', 'apigee.projectorganizations.get', 'apigee.queries.create', 'apigee.queries.get', 'apigee.queries.list', 'apigee.reports.create', 'apigee.reports.delete', 'apigee.reports.get', 'apigee.reports.list', 'apigee.reports.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] GA
roles/apigeeconnect.Admin Admin of Apigee Connect Apigee Connect Admin ['apigeeconnect.connections.list'] GA
roles/apigee.analyticsViewer Analytics viewer for an Apigee Organization Apigee Analytics Viewer ['apigee.datacollectors.get', 'apigee.datacollectors.list', 'apigee.datastores.get', 'apigee.datastores.list', 'apigee.entitlements.get', 'apigee.envgroupattachments.get', 'apigee.envgroupattachments.list', 'apigee.envgroups.get', 'apigee.envgroups.list', 'apigee.environments.get', 'apigee.environments.getStats', 'apigee.environments.list', 'apigee.exports.get', 'apigee.exports.list', 'apigee.hostqueries.get', 'apigee.hostqueries.list', 'apigee.hoststats.get', 'apigee.organizations.get', 'apigee.organizations.list', 'apigee.projectorganizations.get', 'apigee.queries.get', 'apigee.queries.list', 'apigee.reports.get', 'apigee.reports.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] GA
roles/apigee.environmentAdmin Full read/write access to apigee environment resources, including deployments. Apigee Environment Admin ['apigee.addonsconfig.get', 'apigee.addonsconfig.update', 'apigee.archivedeployments.create', 'apigee.archivedeployments.delete', 'apigee.archivedeployments.download', 'apigee.archivedeployments.get', 'apigee.archivedeployments.list', 'apigee.archivedeployments.update', 'apigee.archivedeployments.upload', 'apigee.datacollectors.get', 'apigee.datacollectors.list', 'apigee.deployments.create', 'apigee.deployments.delete', 'apigee.deployments.get', 'apigee.deployments.getIamPolicy', 'apigee.deployments.invoke', 'apigee.deployments.list', 'apigee.deployments.setIamPolicy', 'apigee.deployments.update', 'apigee.entitlements.get', 'apigee.envgroupattachments.get', 'apigee.envgroupattachments.list', 'apigee.envgroups.get', 'apigee.envgroups.list', 'apigee.environments.get', 'apigee.environments.getIamPolicy', 'apigee.environments.getStats', 'apigee.environments.list', 'apigee.environments.setIamPolicy', 'apigee.environments.update', 'apigee.flowhooks.attachSharedFlow', 'apigee.flowhooks.detachSharedFlow', 'apigee.flowhooks.getSharedFlow', 'apigee.flowhooks.list', 'apigee.ingressconfigs.get', 'apigee.keystorealiases.create', 'apigee.keystorealiases.delete', 'apigee.keystorealiases.exportCertificate', 'apigee.keystorealiases.generateCSR', 'apigee.keystorealiases.get', 'apigee.keystorealiases.list', 'apigee.keystorealiases.update', 'apigee.keystores.create', 'apigee.keystores.delete', 'apigee.keystores.export', 'apigee.keystores.get', 'apigee.keystores.list', 'apigee.keyvaluemapentries.create', 'apigee.keyvaluemapentries.delete', 'apigee.keyvaluemapentries.get', 'apigee.keyvaluemapentries.list', 'apigee.keyvaluemapentries.update', 'apigee.keyvaluemaps.create', 'apigee.keyvaluemaps.delete', 'apigee.keyvaluemaps.list', 'apigee.maskconfigs.get', 'apigee.maskconfigs.update', 'apigee.organizations.get', 'apigee.organizations.list', 'apigee.projectorganizations.get', 'apigee.proxies.get', 'apigee.proxies.list', 'apigee.proxyrevisions.deploy', 'apigee.proxyrevisions.get', 'apigee.proxyrevisions.list', 'apigee.proxyrevisions.undeploy', 'apigee.references.create', 'apigee.references.delete', 'apigee.references.get', 'apigee.references.list', 'apigee.references.update', 'apigee.resourcefiles.create', 'apigee.resourcefiles.delete', 'apigee.resourcefiles.get', 'apigee.resourcefiles.list', 'apigee.resourcefiles.update', 'apigee.sharedflowrevisions.deploy', 'apigee.sharedflowrevisions.get', 'apigee.sharedflowrevisions.list', 'apigee.sharedflowrevisions.undeploy', 'apigee.sharedflows.get', 'apigee.sharedflows.list', 'apigee.targetservers.create', 'apigee.targetservers.delete', 'apigee.targetservers.get', 'apigee.targetservers.list', 'apigee.targetservers.update', 'apigee.traceconfig.get', 'apigee.traceconfig.update', 'apigee.traceconfigoverrides.create', 'apigee.traceconfigoverrides.delete', 'apigee.traceconfigoverrides.get', 'apigee.traceconfigoverrides.list', 'apigee.traceconfigoverrides.update', 'apigee.tracesessions.create', 'apigee.tracesessions.delete', 'apigee.tracesessions.get', 'apigee.tracesessions.list', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list'] GA
roles/apigeeregistry.admin Full access to Cloud Apigee Registry Registry and Runtime resources. Cloud Apigee Registry Admin ['apigeeregistry.apis.create', 'apigeeregistry.apis.delete', 'apigeeregistry.apis.get', 'apigeeregistry.apis.getIamPolicy', 'apigeeregistry.apis.list', 'apigeeregistry.apis.setIamPolicy', 'apigeeregistry.apis.update', 'apigeeregistry.artifacts.create', 'apigeeregistry.artifacts.delete', 'apigeeregistry.artifacts.get', 'apigeeregistry.artifacts.getIamPolicy', 'apigeeregistry.artifacts.list', 'apigeeregistry.artifacts.setIamPolicy', 'apigeeregistry.artifacts.update', 'apigeeregistry.deployments.create', 'apigeeregistry.deployments.delete', 'apigeeregistry.deployments.get', 'apigeeregistry.deployments.list', 'apigeeregistry.deployments.update', 'apigeeregistry.instances.get', 'apigeeregistry.instances.update', 'apigeeregistry.locations.get', 'apigeeregistry.locations.list', 'apigeeregistry.operations.cancel', 'apigeeregistry.operations.delete', 'apigeeregistry.operations.get', 'apigeeregistry.operations.list', 'apigeeregistry.specs.create', 'apigeeregistry.specs.delete', 'apigeeregistry.specs.get', 'apigeeregistry.specs.getIamPolicy', 'apigeeregistry.specs.list', 'apigeeregistry.specs.setIamPolicy', 'apigeeregistry.specs.update', 'apigeeregistry.versions.create', 'apigeeregistry.versions.delete', 'apigeeregistry.versions.get', 'apigeeregistry.versions.getIamPolicy', 'apigeeregistry.versions.list', 'apigeeregistry.versions.setIamPolicy', 'apigeeregistry.versions.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] BETA