roles/configdelivery.configDeliveryViewer
Grants read access to all Config Delivery resources. Lets users view existing fleet packages and resource bundles, but they will not be able to make any changes.
ConfigDelivery Viewer
['configdelivery.fleetPackages.get', 'configdelivery.fleetPackages.list', 'configdelivery.locations.get', 'configdelivery.locations.list', 'configdelivery.operations.get', 'configdelivery.operations.list', 'configdelivery.releases.get', 'configdelivery.releases.list', 'configdelivery.resourceBundles.get', 'configdelivery.resourceBundles.list', 'configdelivery.rollouts.get', 'configdelivery.rollouts.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/configdelivery.resourceBundlePublisher
Grants read and write permissions to Config Delivery ResourceBundles and Releases.
Config Delivery Resource Bundle Publisher
['configdelivery.locations.get', 'configdelivery.locations.list', 'configdelivery.operations.get', 'configdelivery.operations.list', 'configdelivery.releases.create', 'configdelivery.releases.get', 'configdelivery.releases.list', 'configdelivery.releases.update', 'configdelivery.resourceBundles.create', 'configdelivery.resourceBundles.get', 'configdelivery.resourceBundles.list', 'configdelivery.resourceBundles.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/configdelivery.serviceAgent
Gives the Config Delivery service account permission to manage resources
Config Delivery Service Agent
['artifactregistry.dockerimages.get', 'artifactregistry.dockerimages.list', 'artifactregistry.projectsettings.get', 'artifactregistry.repositories.create', 'artifactregistry.repositories.downloadArtifacts', 'artifactregistry.repositories.get', 'artifactregistry.repositories.getIamPolicy', 'artifactregistry.repositories.list', 'artifactregistry.repositories.listEffectiveTags', 'artifactregistry.repositories.listTagBindings', 'artifactregistry.repositories.setIamPolicy', 'artifactregistry.repositories.uploadArtifacts', 'artifactregistry.tags.create', 'artifactregistry.tags.delete', 'artifactregistry.tags.get', 'artifactregistry.tags.list', 'artifactregistry.tags.update', 'artifactregistry.versions.delete', 'artifactregistry.versions.get', 'artifactregistry.versions.list', 'cloudbuild.builds.create', 'cloudbuild.builds.get', 'cloudbuild.builds.list', 'cloudbuild.builds.update', 'cloudbuild.repositories.get', 'container.customResourceDefinitions.get', 'container.customResourceDefinitions.list', 'container.serviceAccounts.get', 'container.serviceAccounts.list', 'container.thirdPartyObjects.create', 'container.thirdPartyObjects.delete', 'container.thirdPartyObjects.get', 'container.thirdPartyObjects.list', 'container.thirdPartyObjects.update', 'gkehub.gateway.delete', 'gkehub.gateway.generateCredentials', 'gkehub.gateway.get', 'gkehub.gateway.patch', 'gkehub.gateway.post', 'gkehub.gateway.put', 'gkehub.memberships.get', 'iam.serviceAccounts.actAs']
Copy Permissions
GA
roles/configdelivery.configDeliveryAdmin
Grants full access to all Config Delivery resources. Lets users create, remove and manage fleet packages and resource bundles.
ConfigDelivery Admin
['configdelivery.fleetPackages.create', 'configdelivery.fleetPackages.delete', 'configdelivery.fleetPackages.get', 'configdelivery.fleetPackages.list', 'configdelivery.fleetPackages.update', 'configdelivery.locations.get', 'configdelivery.locations.list', 'configdelivery.operations.cancel', 'configdelivery.operations.delete', 'configdelivery.operations.get', 'configdelivery.operations.list', 'configdelivery.releases.create', 'configdelivery.releases.delete', 'configdelivery.releases.get', 'configdelivery.releases.list', 'configdelivery.releases.update', 'configdelivery.resourceBundles.create', 'configdelivery.resourceBundles.delete', 'configdelivery.resourceBundles.get', 'configdelivery.resourceBundles.list', 'configdelivery.resourceBundles.update', 'configdelivery.rollouts.abort', 'configdelivery.rollouts.get', 'configdelivery.rollouts.list', 'configdelivery.rollouts.resume', 'configdelivery.rollouts.suspend', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA