Roles Data

Name Description Title Included Permissions Copy Stage
roles/dns.reader Read-only access to DNS resources. DNS Reader ['compute.networks.get', 'dns.changes.get', 'dns.changes.list', 'dns.dnsKeys.get', 'dns.dnsKeys.list', 'dns.managedZoneOperations.get', 'dns.managedZoneOperations.list', 'dns.managedZones.get', 'dns.managedZones.list', 'dns.policies.get', 'dns.policies.list', 'dns.projects.get', 'dns.resourceRecordSets.get', 'dns.resourceRecordSets.list', 'dns.responsePolicies.get', 'dns.responsePolicies.list', 'dns.responsePolicyRules.get', 'dns.responsePolicyRules.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] GA
roles/dns.admin Full read-write access to DNS resources. DNS Administrator ['compute.networks.get', 'compute.networks.list', 'dns.changes.create', 'dns.changes.get', 'dns.changes.list', 'dns.dnsKeys.get', 'dns.dnsKeys.list', 'dns.gkeClusters.bindDNSResponsePolicy', 'dns.gkeClusters.bindPrivateDNSZone', 'dns.managedZoneOperations.get', 'dns.managedZoneOperations.list', 'dns.managedZones.create', 'dns.managedZones.delete', 'dns.managedZones.get', 'dns.managedZones.getIamPolicy', 'dns.managedZones.list', 'dns.managedZones.update', 'dns.networks.bindDNSResponsePolicy', 'dns.networks.bindPrivateDNSPolicy', 'dns.networks.bindPrivateDNSZone', 'dns.networks.targetWithPeeringZone', 'dns.networks.useHealthSignals', 'dns.policies.create', 'dns.policies.delete', 'dns.policies.get', 'dns.policies.getIamPolicy', 'dns.policies.list', 'dns.policies.update', 'dns.projects.get', 'dns.resourceRecordSets.create', 'dns.resourceRecordSets.delete', 'dns.resourceRecordSets.get', 'dns.resourceRecordSets.list', 'dns.resourceRecordSets.update', 'dns.responsePolicies.create', 'dns.responsePolicies.delete', 'dns.responsePolicies.get', 'dns.responsePolicies.list', 'dns.responsePolicies.update', 'dns.responsePolicyRules.create', 'dns.responsePolicyRules.delete', 'dns.responsePolicyRules.get', 'dns.responsePolicyRules.list', 'dns.responsePolicyRules.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] GA
roles/dns.serviceAgent Gives Cloud DNS Service Agent access to Cloud Platform resources. Cloud DNS Service Agent ['compute.globalNetworkEndpointGroups.attachNetworkEndpoints', 'compute.globalNetworkEndpointGroups.create', 'compute.globalNetworkEndpointGroups.delete', 'compute.globalNetworkEndpointGroups.detachNetworkEndpoints', 'compute.globalNetworkEndpointGroups.get', 'compute.globalOperations.get', 'compute.healthChecks.get'] GA
roles/dns.peer Access to target networks with DNS peering zones DNS Peer ['dns.networks.targetWithPeeringZone'] GA