| Name | Description | Title | Included Permissions | Copy | Stage |
|---|---|---|---|---|---|
| roles/confidentialcomputing.workloadUser | Grants the ability to generate an attestation token and run a workload in a VM. Intended for service accounts that run on Confidential Space VMs. | Confidential Space Workload User | ['confidentialcomputing.challenges.create', 'confidentialcomputing.challenges.verify', 'confidentialcomputing.locations.get', 'confidentialcomputing.locations.list', 'logging.logEntries.create'] | GA |