roles/connectors.listener
Full Access to listen events by connections.
Connector Event Listener
['connectors.connections.listenEvent']
Copy Permissions
GA
roles/connectors.serviceAgent
Grants Connectors Platform service account to manage customer resources
Connectors Platform Service Agent
['connectors.actions.list', 'connectors.connections.get', 'connectors.connections.getConnectionSchemaMetadata', 'connectors.connections.list', 'connectors.connectors.get', 'connectors.connectors.list', 'connectors.customConnectorVersions.get', 'connectors.customConnectorVersions.list', 'connectors.customConnectors.get', 'connectors.customConnectors.list', 'connectors.endpointAttachments.get', 'connectors.endpointAttachments.list', 'connectors.entities.get', 'connectors.entityTypes.list', 'connectors.eventSubscriptions.get', 'connectors.eventSubscriptions.list', 'connectors.eventtypes.get', 'connectors.eventtypes.list', 'connectors.locations.get', 'connectors.locations.list', 'connectors.managedZones.get', 'connectors.managedZones.list', 'connectors.providers.get', 'connectors.providers.list', 'connectors.runtimeconfig.get', 'iam.serviceAccounts.getAccessToken', 'iam.serviceAccounts.getOpenIdToken', 'iam.serviceAccounts.implicitDelegation', 'monitoring.metricDescriptors.create', 'monitoring.metricDescriptors.get', 'monitoring.metricDescriptors.list', 'monitoring.monitoredResourceDescriptors.get', 'monitoring.monitoredResourceDescriptors.list', 'monitoring.timeSeries.create']
Copy Permissions
GA
roles/connectors.viewer
Read-only access to Connectors all resources.
Connectors Viewer
['connectors.connections.generateOpenAPISpec', 'connectors.connections.get', 'connectors.connections.getConnectionSchemaMetadata', 'connectors.connections.getIamPolicy', 'connectors.connections.getRuntimeActionSchema', 'connectors.connections.getRuntimeEntitySchema', 'connectors.connections.list', 'connectors.connectors.get', 'connectors.connectors.list', 'connectors.customConnectorVersions.get', 'connectors.customConnectorVersions.getIamPolicy', 'connectors.customConnectorVersions.list', 'connectors.customConnectors.get', 'connectors.customConnectors.getIamPolicy', 'connectors.customConnectors.list', 'connectors.endpointAttachments.get', 'connectors.endpointAttachments.getIamPolicy', 'connectors.endpointAttachments.list', 'connectors.eventSubscriptions.get', 'connectors.eventSubscriptions.list', 'connectors.eventtypes.get', 'connectors.eventtypes.list', 'connectors.locations.get', 'connectors.locations.list', 'connectors.managedZones.get', 'connectors.managedZones.getIamPolicy', 'connectors.managedZones.list', 'connectors.operations.get', 'connectors.operations.list', 'connectors.providers.get', 'connectors.providers.list', 'connectors.regionalSettings.get', 'connectors.runtimeconfig.get', 'connectors.settings.get', 'connectors.versions.get', 'connectors.versions.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/connectors.customConnectorViewer
Custom Connector is a global resource which creates custom connector within the given target project. This role grants Read-only access to Custom Connector & Custom Connector Version resources.
Custom Connector Viewer
['connectors.customConnectorVersions.get', 'connectors.customConnectorVersions.getIamPolicy', 'connectors.customConnectorVersions.list', 'connectors.customConnectors.get', 'connectors.customConnectors.getIamPolicy', 'connectors.customConnectors.list', 'connectors.locations.get', 'connectors.locations.list']
Copy Permissions
GA
roles/connectors.customConnectorAdmin
Custom Connector is a global resource which creates custom connector within the given target project. This role grants Admin access to Custom Connector resources
Custom Connectors Admin
['connectors.customConnectorVersions.create', 'connectors.customConnectorVersions.delete', 'connectors.customConnectorVersions.get', 'connectors.customConnectorVersions.getIamPolicy', 'connectors.customConnectorVersions.list', 'connectors.customConnectorVersions.setIamPolicy', 'connectors.customConnectorVersions.update', 'connectors.customConnectors.create', 'connectors.customConnectors.delete', 'connectors.customConnectors.get', 'connectors.customConnectors.getIamPolicy', 'connectors.customConnectors.list', 'connectors.customConnectors.setIamPolicy', 'connectors.customConnectors.update', 'connectors.locations.get', 'connectors.locations.list']
Copy Permissions
GA
roles/connectors.invoker
Full Access to invoke all operations on Connections.
Connector Invoker
['connectors.actions.execute', 'connectors.actions.list', 'connectors.connections.executeSqlQuery', 'connectors.entities.create', 'connectors.entities.delete', 'connectors.entities.deleteEntitiesWithConditions', 'connectors.entities.get', 'connectors.entities.list', 'connectors.entities.update', 'connectors.entities.updateEntitiesWithConditions', 'connectors.entityTypes.list']
Copy Permissions
GA
roles/connectors.endpointAttachmentViewer
Endpoint Attachment is a regional resource which creates PSC connection endpoint for the given PSC Service Attachment. This role grants Read-only access to Connectors Endpoint Attachment resources
Connectors Endpoint Attachment Viewer
['connectors.endpointAttachments.get', 'connectors.endpointAttachments.getIamPolicy', 'connectors.endpointAttachments.list', 'connectors.locations.get', 'connectors.locations.list']
Copy Permissions
GA
roles/connectors.managedZoneViewer
Managed Zone is a global resource which creates Cloud DNS Peering Zone with the given target project. This role grants Read-only access to Connectors Managed Zone resources.
Connectors Managed Zone Viewer
['connectors.locations.get', 'connectors.locations.list', 'connectors.managedZones.get', 'connectors.managedZones.getIamPolicy', 'connectors.managedZones.list']
Copy Permissions
GA
roles/connectors.eventSubscriptionViewer
Event Subscription is a regional resource which creates subscriptions on events for a given connection within the given target project. This role grants Read-only access to Event Subscription resources.
Connectors Event Subscriptions Viewer
['connectors.eventSubscriptions.get', 'connectors.eventSubscriptions.list']
Copy Permissions
GA
roles/connectors.eventSubscriptionAdmin
Event Subscription is a regional resource which creates subscriptions on events for a given connection within the given target project. This role grants Admin access to Connectors Subscription resources
Connectors Event Subscriptions Admin
['connectors.eventSubscriptions.create', 'connectors.eventSubscriptions.delete', 'connectors.eventSubscriptions.get', 'connectors.eventSubscriptions.list', 'connectors.eventSubscriptions.update']
Copy Permissions
GA
roles/connectors.admin
Full access to all resources of Connectors Service.
Connector Admin
['connectors.actions.execute', 'connectors.actions.list', 'connectors.connections.create', 'connectors.connections.delete', 'connectors.connections.executeSqlQuery', 'connectors.connections.generateOpenAPISpec', 'connectors.connections.get', 'connectors.connections.getConnectionSchemaMetadata', 'connectors.connections.getIamPolicy', 'connectors.connections.getRuntimeActionSchema', 'connectors.connections.getRuntimeEntitySchema', 'connectors.connections.list', 'connectors.connections.setIamPolicy', 'connectors.connections.update', 'connectors.connectors.get', 'connectors.connectors.list', 'connectors.customConnectorVersions.create', 'connectors.customConnectorVersions.delete', 'connectors.customConnectorVersions.get', 'connectors.customConnectorVersions.getIamPolicy', 'connectors.customConnectorVersions.list', 'connectors.customConnectorVersions.setIamPolicy', 'connectors.customConnectorVersions.update', 'connectors.customConnectors.create', 'connectors.customConnectors.delete', 'connectors.customConnectors.get', 'connectors.customConnectors.getIamPolicy', 'connectors.customConnectors.list', 'connectors.customConnectors.setIamPolicy', 'connectors.customConnectors.update', 'connectors.endpointAttachments.create', 'connectors.endpointAttachments.delete', 'connectors.endpointAttachments.get', 'connectors.endpointAttachments.getIamPolicy', 'connectors.endpointAttachments.list', 'connectors.endpointAttachments.setIamPolicy', 'connectors.endpointAttachments.update', 'connectors.entities.create', 'connectors.entities.delete', 'connectors.entities.deleteEntitiesWithConditions', 'connectors.entities.get', 'connectors.entities.list', 'connectors.entities.update', 'connectors.entities.updateEntitiesWithConditions', 'connectors.entityTypes.list', 'connectors.eventSubscriptions.create', 'connectors.eventSubscriptions.delete', 'connectors.eventSubscriptions.get', 'connectors.eventSubscriptions.list', 'connectors.eventSubscriptions.update', 'connectors.eventtypes.get', 'connectors.eventtypes.list', 'connectors.locations.get', 'connectors.locations.list', 'connectors.managedZones.create', 'connectors.managedZones.delete', 'connectors.managedZones.get', 'connectors.managedZones.getIamPolicy', 'connectors.managedZones.list', 'connectors.managedZones.setIamPolicy', 'connectors.managedZones.update', 'connectors.operations.cancel', 'connectors.operations.delete', 'connectors.operations.get', 'connectors.operations.list', 'connectors.providers.get', 'connectors.providers.list', 'connectors.regionalSettings.get', 'connectors.regionalSettings.update', 'connectors.runtimeconfig.get', 'connectors.schemaMetadata.refresh', 'connectors.settings.get', 'connectors.settings.update', 'connectors.versions.get', 'connectors.versions.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'secretmanager.secrets.getIamPolicy']
Copy Permissions
GA
roles/connectors.managedZoneAdmin
Managed Zone is a global resource which creates Cloud DNS Peering Zone with the given target project. This role grants Admin access to Connectors Managed Zone resources
Connectors Managed Zone Admin
['connectors.locations.get', 'connectors.locations.list', 'connectors.managedZones.create', 'connectors.managedZones.delete', 'connectors.managedZones.get', 'connectors.managedZones.getIamPolicy', 'connectors.managedZones.list', 'connectors.managedZones.setIamPolicy', 'connectors.managedZones.update']
Copy Permissions
GA
roles/connectors.endpointAttachmentAdmin
Endpoint Attachment is a regional resource which creates PSC connection endpoint for the given PSC Service Attachment. This role grants Admin access to Connectors Endpoint Attachment resources.
Connectors Endpoint Attachment Admin
['connectors.endpointAttachments.create', 'connectors.endpointAttachments.delete', 'connectors.endpointAttachments.get', 'connectors.endpointAttachments.getIamPolicy', 'connectors.endpointAttachments.list', 'connectors.endpointAttachments.setIamPolicy', 'connectors.endpointAttachments.update', 'connectors.locations.get', 'connectors.locations.list']
Copy Permissions
GA