| roles/monitoring.metricWriter |
Write-only access to metrics. This provides exactly the permissions needed by the Stackdriver agent and other systems that send metrics. |
Monitoring Metric Writer |
['monitoring.metricDescriptors.create', 'monitoring.metricDescriptors.get', 'monitoring.metricDescriptors.list', 'monitoring.monitoredResourceDescriptors.get', 'monitoring.monitoredResourceDescriptors.list', 'monitoring.timeSeries.create'] |
|
GA |
| roles/monitoring.notificationChannelViewer |
Read-only access to notification channels. |
Monitoring NotificationChannel Viewer |
['monitoring.notificationChannelDescriptors.get', 'monitoring.notificationChannelDescriptors.list', 'monitoring.notificationChannels.get', 'monitoring.notificationChannels.list'] |
|
BETA |
| roles/monitoring.servicesEditor |
Read/write access to services. |
Monitoring Services Editor |
['monitoring.services.create', 'monitoring.services.delete', 'monitoring.services.get', 'monitoring.services.list', 'monitoring.services.update', 'monitoring.slos.create', 'monitoring.slos.delete', 'monitoring.slos.get', 'monitoring.slos.list', 'monitoring.slos.update'] |
|
GA |
| roles/monitoring.uptimeCheckConfigEditor |
Read/write access to uptime check configurations. |
Monitoring Uptime Check Configuration Editor |
['monitoring.uptimeCheckConfigs.create', 'monitoring.uptimeCheckConfigs.delete', 'monitoring.uptimeCheckConfigs.get', 'monitoring.uptimeCheckConfigs.list', 'monitoring.uptimeCheckConfigs.update'] |
|
BETA |
| roles/monitoring.cloudConsoleIncidentViewer |
Read access to incidents from Cloud Console. |
Monitoring Cloud Console Incident Viewer |
|
|
BETA |
| roles/monitoring.admin |
All current and future monitoring permissions. |
Monitoring Admin |
['cloudnotifications.activities.list', 'monitoring.alertPolicies.create', 'monitoring.alertPolicies.delete', 'monitoring.alertPolicies.get', 'monitoring.alertPolicies.list', 'monitoring.alertPolicies.update', 'monitoring.dashboards.create', 'monitoring.dashboards.delete', 'monitoring.dashboards.get', 'monitoring.dashboards.list', 'monitoring.dashboards.update', 'monitoring.groups.create', 'monitoring.groups.delete', 'monitoring.groups.get', 'monitoring.groups.list', 'monitoring.groups.update', 'monitoring.metricDescriptors.create', 'monitoring.metricDescriptors.delete', 'monitoring.metricDescriptors.get', 'monitoring.metricDescriptors.list', 'monitoring.metricsScopes.link', 'monitoring.monitoredResourceDescriptors.get', 'monitoring.monitoredResourceDescriptors.list', 'monitoring.notificationChannelDescriptors.get', 'monitoring.notificationChannelDescriptors.list', 'monitoring.notificationChannels.create', 'monitoring.notificationChannels.delete', 'monitoring.notificationChannels.get', 'monitoring.notificationChannels.getVerificationCode', 'monitoring.notificationChannels.list', 'monitoring.notificationChannels.sendVerificationCode', 'monitoring.notificationChannels.update', 'monitoring.notificationChannels.verify', 'monitoring.services.create', 'monitoring.services.delete', 'monitoring.services.get', 'monitoring.services.list', 'monitoring.services.update', 'monitoring.slos.create', 'monitoring.slos.delete', 'monitoring.slos.get', 'monitoring.slos.list', 'monitoring.slos.update', 'monitoring.snoozes.create', 'monitoring.snoozes.get', 'monitoring.snoozes.list', 'monitoring.snoozes.update', 'monitoring.timeSeries.create', 'monitoring.timeSeries.list', 'monitoring.uptimeCheckConfigs.create', 'monitoring.uptimeCheckConfigs.delete', 'monitoring.uptimeCheckConfigs.get', 'monitoring.uptimeCheckConfigs.list', 'monitoring.uptimeCheckConfigs.update', 'opsconfigmonitoring.resourceMetadata.list', 'opsconfigmonitoring.resourceMetadata.write', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'serviceusage.services.enable', 'serviceusage.services.get', 'stackdriver.projects.edit', 'stackdriver.projects.get', 'stackdriver.resourceMetadata.list', 'stackdriver.resourceMetadata.write'] |
|
GA |
| roles/monitoring.snoozeEditor |
|
Monitoring Snooze Editor |
['monitoring.snoozes.create', 'monitoring.snoozes.get', 'monitoring.snoozes.list', 'monitoring.snoozes.update'] |
|
GA |
| roles/monitoring.metricsScopesAdmin |
Access to add and remove monitored projects from metrics scopes. |
Monitoring Metrics Scopes Admin |
['monitoring.metricsScopes.link', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/monitoring.dashboardEditor |
Read/write access to dashboard configurations. |
Monitoring Dashboard Configuration Editor |
['monitoring.dashboards.create', 'monitoring.dashboards.delete', 'monitoring.dashboards.get', 'monitoring.dashboards.list', 'monitoring.dashboards.update'] |
|
GA |
| roles/monitoring.alertPolicyEditor |
Read/write access to alerting policies. |
Monitoring AlertPolicy Editor |
['monitoring.alertPolicies.create', 'monitoring.alertPolicies.delete', 'monitoring.alertPolicies.get', 'monitoring.alertPolicies.list', 'monitoring.alertPolicies.update'] |
|
GA |
| roles/monitoring.snoozeViewer |
|
Monitoring Snooze Viewer |
['monitoring.snoozes.get', 'monitoring.snoozes.list'] |
|
GA |
| roles/monitoring.dashboardViewer |
Read-only access to dashboard configurations. |
Monitoring Dashboard Configuration Viewer |
['monitoring.dashboards.get', 'monitoring.dashboards.list'] |
|
GA |
| roles/monitoring.viewer |
Read-only access to get and list information about all monitoring data and configuration. |
Monitoring Viewer |
['cloudnotifications.activities.list', 'monitoring.alertPolicies.get', 'monitoring.alertPolicies.list', 'monitoring.dashboards.get', 'monitoring.dashboards.list', 'monitoring.groups.get', 'monitoring.groups.list', 'monitoring.metricDescriptors.get', 'monitoring.metricDescriptors.list', 'monitoring.monitoredResourceDescriptors.get', 'monitoring.monitoredResourceDescriptors.list', 'monitoring.notificationChannelDescriptors.get', 'monitoring.notificationChannelDescriptors.list', 'monitoring.notificationChannels.get', 'monitoring.notificationChannels.list', 'monitoring.services.get', 'monitoring.services.list', 'monitoring.slos.get', 'monitoring.slos.list', 'monitoring.snoozes.get', 'monitoring.snoozes.list', 'monitoring.timeSeries.list', 'monitoring.uptimeCheckConfigs.get', 'monitoring.uptimeCheckConfigs.list', 'opsconfigmonitoring.resourceMetadata.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'stackdriver.projects.get', 'stackdriver.resourceMetadata.list'] |
|
GA |
| roles/monitoring.notificationServiceAgent |
Grants Cloud Monitoring and Cloud Alerting permission to access consumer resources and track usage. |
Monitoring Service Agent |
['bigquery.jobs.create', 'cloudfunctions.functions.get', 'cloudtrace.traces.patch', 'logging.links.list', 'monitoring.metricDescriptors.get', 'monitoring.metricDescriptors.list', 'monitoring.monitoredResourceDescriptors.get', 'monitoring.monitoredResourceDescriptors.list', 'monitoring.timeSeries.list', 'run.routes.invoke', 'servicedirectory.networks.access', 'servicedirectory.services.resolve', 'serviceusage.services.use'] |
|
GA |
| roles/monitoring.editor |
Read/write access to all monitoring data and configuration. |
Monitoring Editor |
['cloudnotifications.activities.list', 'monitoring.alertPolicies.create', 'monitoring.alertPolicies.delete', 'monitoring.alertPolicies.get', 'monitoring.alertPolicies.list', 'monitoring.alertPolicies.update', 'monitoring.dashboards.create', 'monitoring.dashboards.delete', 'monitoring.dashboards.get', 'monitoring.dashboards.list', 'monitoring.dashboards.update', 'monitoring.groups.create', 'monitoring.groups.delete', 'monitoring.groups.get', 'monitoring.groups.list', 'monitoring.groups.update', 'monitoring.metricDescriptors.create', 'monitoring.metricDescriptors.delete', 'monitoring.metricDescriptors.get', 'monitoring.metricDescriptors.list', 'monitoring.monitoredResourceDescriptors.get', 'monitoring.monitoredResourceDescriptors.list', 'monitoring.notificationChannelDescriptors.get', 'monitoring.notificationChannelDescriptors.list', 'monitoring.notificationChannels.create', 'monitoring.notificationChannels.delete', 'monitoring.notificationChannels.get', 'monitoring.notificationChannels.list', 'monitoring.notificationChannels.sendVerificationCode', 'monitoring.notificationChannels.update', 'monitoring.notificationChannels.verify', 'monitoring.services.create', 'monitoring.services.delete', 'monitoring.services.get', 'monitoring.services.list', 'monitoring.services.update', 'monitoring.slos.create', 'monitoring.slos.delete', 'monitoring.slos.get', 'monitoring.slos.list', 'monitoring.slos.update', 'monitoring.snoozes.create', 'monitoring.snoozes.get', 'monitoring.snoozes.list', 'monitoring.snoozes.update', 'monitoring.timeSeries.create', 'monitoring.timeSeries.list', 'monitoring.uptimeCheckConfigs.create', 'monitoring.uptimeCheckConfigs.delete', 'monitoring.uptimeCheckConfigs.get', 'monitoring.uptimeCheckConfigs.list', 'monitoring.uptimeCheckConfigs.update', 'opsconfigmonitoring.resourceMetadata.list', 'opsconfigmonitoring.resourceMetadata.write', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'serviceusage.services.enable', 'serviceusage.services.get', 'stackdriver.projects.edit', 'stackdriver.projects.get', 'stackdriver.resourceMetadata.list', 'stackdriver.resourceMetadata.write'] |
|
GA |
| roles/monitoring.cloudConsoleIncidentEditor |
Read/write access to incidents from Cloud Console. |
Monitoring Cloud Console Incident Editor |
|
|
BETA |
| roles/monitoring.servicesViewer |
Read-only access to services. |
Monitoring Services Viewer |
['monitoring.services.get', 'monitoring.services.list', 'monitoring.slos.get', 'monitoring.slos.list'] |
|
GA |
| roles/monitoring.uptimeCheckConfigViewer |
Read-only access to uptime check configurations. |
Monitoring Uptime Check Configuration Viewer |
['monitoring.uptimeCheckConfigs.get', 'monitoring.uptimeCheckConfigs.list'] |
|
BETA |
| roles/monitoring.notificationChannelEditor |
Read/write access to notification channels. |
Monitoring NotificationChannel Editor |
['monitoring.notificationChannelDescriptors.get', 'monitoring.notificationChannelDescriptors.list', 'monitoring.notificationChannels.create', 'monitoring.notificationChannels.delete', 'monitoring.notificationChannels.get', 'monitoring.notificationChannels.list', 'monitoring.notificationChannels.sendVerificationCode', 'monitoring.notificationChannels.update', 'monitoring.notificationChannels.verify'] |
|
BETA |
| roles/monitoring.metricsScopesViewer |
Read-only access to metrics scopes and their monitored projects. |
Monitoring Metrics Scopes Viewer |
['resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/monitoring.alertPolicyViewer |
Read-only access to alerting policies. |
Monitoring AlertPolicy Viewer |
['monitoring.alertPolicies.get', 'monitoring.alertPolicies.list'] |
|
GA |