Roles Data

Name Description Title Included Permissions Copy Stage
roles/iap.remediatorUser Remediate IAP resource IAP-secured Resource Remediator User ['iap.tunnelDestGroups.remediate', 'iap.tunnelinstances.remediate', 'iap.webServiceVersions.remediate'] BETA
roles/iap.tunnelDestGroupViewer View Tunnel Destination Group resources which use Identity-Aware Proxy IAP-secured Tunnel Destination Group Viewer ['iap.tunnelDestGroups.get', 'iap.tunnelDestGroups.list'] GA
roles/iap.tunnelDestGroupEditor Edit Tunnel Destination Group resources which use Identity-Aware Proxy IAP-secured Tunnel Destination Group Editor ['iap.tunnelDestGroups.create', 'iap.tunnelDestGroups.delete', 'iap.tunnelDestGroups.get', 'iap.tunnelDestGroups.list', 'iap.tunnelDestGroups.update'] GA
roles/iap.httpsResourceAccessor Access HTTPS resources which use Identity-Aware Proxy IAP-secured Web App User ['iap.webServiceVersions.accessViaIAP'] GA
roles/iap.tunnelResourceAccessor Access Tunnel resources which use Identity-Aware Proxy IAP-secured Tunnel User ['iap.tunnelDestGroups.accessViaIAP', 'iap.tunnelInstances.accessViaIAP'] GA
roles/iap.admin Administrator of IAP Permissions IAP Policy Admin ['iap.tunnel.getIamPolicy', 'iap.tunnel.setIamPolicy', 'iap.tunnelDestGroups.getIamPolicy', 'iap.tunnelDestGroups.setIamPolicy', 'iap.tunnelInstances.getIamPolicy', 'iap.tunnelInstances.setIamPolicy', 'iap.tunnelLocations.getIamPolicy', 'iap.tunnelLocations.setIamPolicy', 'iap.tunnelZones.getIamPolicy', 'iap.tunnelZones.setIamPolicy', 'iap.web.getIamPolicy', 'iap.web.setIamPolicy', 'iap.webServiceVersions.getIamPolicy', 'iap.webServiceVersions.setIamPolicy', 'iap.webServices.getIamPolicy', 'iap.webServices.setIamPolicy', 'iap.webTypes.getIamPolicy', 'iap.webTypes.setIamPolicy'] GA
roles/iap.settingsAdmin Administrator of IAP Settings. IAP Settings Admin ['iap.projects.getSettings', 'iap.projects.updateSettings', 'iap.web.getSettings', 'iap.web.updateSettings', 'iap.webServiceVersions.getSettings', 'iap.webServiceVersions.updateSettings', 'iap.webServices.getSettings', 'iap.webServices.updateSettings', 'iap.webTypes.getSettings', 'iap.webTypes.updateSettings'] GA