| Name | Description | Title | Included Permissions | Copy | Stage |
|---|---|---|---|---|---|
| roles/cloudkmskacls.serviceAgent | Grants Cloud KMS KACLS Service Agent access to KMS resource permissions to perform DEK encryption/decryption. | Cloud KMS KACLS Service Agent | ['cloudkms.cryptoKeyVersions.useToDecrypt', 'cloudkms.cryptoKeyVersions.useToEncrypt', 'cloudkms.cryptoKeys.get'] | GA |