| roles/resourcemanager.folderEditor |
Edit, delete, and undelete a folder and all of its child resources. |
Folder Editor |
['essentialcontacts.contacts.get', 'essentialcontacts.contacts.list', 'orgpolicy.constraints.list', 'orgpolicy.policies.list', 'orgpolicy.policy.get', 'resourcemanager.folders.delete', 'resourcemanager.folders.get', 'resourcemanager.folders.getIamPolicy', 'resourcemanager.folders.list', 'resourcemanager.folders.searchPolicyBindings', 'resourcemanager.folders.undelete', 'resourcemanager.folders.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/resourcemanager.folderMover |
Move a folder and all of its child resources. |
Folder Mover |
['resourcemanager.folders.move', 'resourcemanager.projects.move'] |
|
GA |
| roles/resourcemanager.projectCreator |
Access to create new GCP projects. |
Project Creator |
['resourcemanager.organizations.get', 'resourcemanager.projects.create'] |
|
GA |
| roles/resourcemanager.tagViewer |
Access to list Tags and their associations with resources |
Tag Viewer |
['alloydb.backups.listEffectiveTags', 'alloydb.backups.listTagBindings', 'alloydb.clusters.listEffectiveTags', 'alloydb.clusters.listTagBindings', 'artifactregistry.repositories.listEffectiveTags', 'artifactregistry.repositories.listTagBindings', 'bigquery.datasets.listEffectiveTags', 'bigquery.datasets.listTagBindings', 'bigquery.tables.listEffectiveTags', 'bigquery.tables.listTagBindings', 'bigtable.authorizedViews.listEffectiveTags', 'bigtable.authorizedViews.listTagBindings', 'bigtable.instances.listEffectiveTags', 'bigtable.instances.listTagBindings', 'clouddeploy.deliveryPipelines.listEffectiveTags', 'clouddeploy.deliveryPipelines.listTagBindings', 'clouddeploy.targets.listEffectiveTags', 'clouddeploy.targets.listTagBindings', 'cloudkms.keyRings.listEffectiveTags', 'cloudkms.keyRings.listTagBindings', 'cloudsql.instances.listEffectiveTags', 'cloudsql.instances.listTagBindings', 'compute.addresses.listEffectiveTags', 'compute.addresses.listTagBindings', 'compute.backendBuckets.listEffectiveTags', 'compute.backendBuckets.listTagBindings', 'compute.backendServices.listEffectiveTags', 'compute.backendServices.listTagBindings', 'compute.disks.listEffectiveTags', 'compute.disks.listTagBindings', 'compute.externalVpnGateways.listEffectiveTags', 'compute.externalVpnGateways.listTagBindings', 'compute.firewallPolicies.listEffectiveTags', 'compute.firewallPolicies.listTagBindings', 'compute.firewalls.listEffectiveTags', 'compute.firewalls.listTagBindings', 'compute.forwardingRules.listEffectiveTags', 'compute.forwardingRules.listTagBindings', 'compute.globalAddresses.listEffectiveTags', 'compute.globalAddresses.listTagBindings', 'compute.globalForwardingRules.listEffectiveTags', 'compute.globalForwardingRules.listTagBindings', 'compute.globalNetworkEndpointGroups.listEffectiveTags', 'compute.globalNetworkEndpointGroups.listTagBindings', 'compute.healthChecks.listEffectiveTags', 'compute.healthChecks.listTagBindings', 'compute.httpHealthChecks.listEffectiveTags', 'compute.httpHealthChecks.listTagBindings', 'compute.httpsHealthChecks.listEffectiveTags', 'compute.httpsHealthChecks.listTagBindings', 'compute.images.listEffectiveTags', 'compute.images.listTagBindings', 'compute.instanceGroupManagers.listEffectiveTags', 'compute.instanceGroupManagers.listTagBindings', 'compute.instanceGroups.listEffectiveTags', 'compute.instanceGroups.listTagBindings', 'compute.instances.listEffectiveTags', 'compute.instances.listTagBindings', 'compute.interconnectAttachments.listEffectiveTags', 'compute.interconnectAttachments.listTagBindings', 'compute.interconnects.listEffectiveTags', 'compute.interconnects.listTagBindings', 'compute.networkAttachments.listEffectiveTags', 'compute.networkAttachments.listTagBindings', 'compute.networkEdgeSecurityServices.listEffectiveTags', 'compute.networkEdgeSecurityServices.listTagBindings', 'compute.networkEndpointGroups.listEffectiveTags', 'compute.networkEndpointGroups.listTagBindings', 'compute.networks.listEffectiveTags', 'compute.networks.listTagBindings', 'compute.packetMirrorings.listEffectiveTags', 'compute.packetMirrorings.listTagBindings', 'compute.publicDelegatedPrefixes.listEffectiveTags', 'compute.publicDelegatedPrefixes.listTagBindings', 'compute.regionBackendServices.listEffectiveTags', 'compute.regionBackendServices.listTagBindings', 'compute.regionFirewallPolicies.listEffectiveTags', 'compute.regionFirewallPolicies.listTagBindings', 'compute.regionHealthChecks.listEffectiveTags', 'compute.regionHealthChecks.listTagBindings', 'compute.regionNetworkEndpointGroups.listEffectiveTags', 'compute.regionNetworkEndpointGroups.listTagBindings', 'compute.regionSecurityPolicies.listEffectiveTags', 'compute.regionSecurityPolicies.listTagBindings', 'compute.regionSslCertificates.listEffectiveTags', 'compute.regionSslCertificates.listTagBindings', 'compute.regionSslPolicies.listEffectiveTags', 'compute.regionSslPolicies.listTagBindings', 'compute.regionTargetHttpProxies.listEffectiveTags', 'compute.regionTargetHttpProxies.listTagBindings', 'compute.regionTargetHttpsProxies.listEffectiveTags', 'compute.regionTargetHttpsProxies.listTagBindings', 'compute.regionTargetTcpProxies.listEffectiveTags', 'compute.regionTargetTcpProxies.listTagBindings', 'compute.regionUrlMaps.listEffectiveTags', 'compute.regionUrlMaps.listTagBindings', 'compute.routers.listEffectiveTags', 'compute.routers.listTagBindings', 'compute.routes.listEffectiveTags', 'compute.routes.listTagBindings', 'compute.securityPolicies.listEffectiveTags', 'compute.securityPolicies.listTagBindings', 'compute.serviceAttachments.listEffectiveTags', 'compute.serviceAttachments.listTagBindings', 'compute.snapshots.listEffectiveTags', 'compute.snapshots.listTagBindings', 'compute.sslCertificates.listEffectiveTags', 'compute.sslCertificates.listTagBindings', 'compute.sslPolicies.listEffectiveTags', 'compute.sslPolicies.listTagBindings', 'compute.subnetworks.listEffectiveTags', 'compute.subnetworks.listTagBindings', 'compute.targetGrpcProxies.listEffectiveTags', 'compute.targetGrpcProxies.listTagBindings', 'compute.targetHttpProxies.listEffectiveTags', 'compute.targetHttpProxies.listTagBindings', 'compute.targetHttpsProxies.listEffectiveTags', 'compute.targetHttpsProxies.listTagBindings', 'compute.targetInstances.listEffectiveTags', 'compute.targetInstances.listTagBindings', 'compute.targetPools.listEffectiveTags', 'compute.targetPools.listTagBindings', 'compute.targetSslProxies.listEffectiveTags', 'compute.targetSslProxies.listTagBindings', 'compute.targetTcpProxies.listEffectiveTags', 'compute.targetTcpProxies.listTagBindings', 'compute.targetVpnGateways.listEffectiveTags', 'compute.targetVpnGateways.listTagBindings', 'compute.urlMaps.listEffectiveTags', 'compute.urlMaps.listTagBindings', 'compute.vpnGateways.listEffectiveTags', 'compute.vpnGateways.listTagBindings', 'compute.vpnTunnels.listEffectiveTags', 'compute.vpnTunnels.listTagBindings', 'container.clusters.listEffectiveTags', 'container.clusters.listTagBindings', 'datafusion.instances.listEffectiveTags', 'datafusion.instances.listTagBindings', 'datastore.databases.listEffectiveTags', 'datastore.databases.listTagBindings', 'datastream.connectionProfiles.listEffectiveTags', 'datastream.connectionProfiles.listTagBindings', 'datastream.privateConnections.listEffectiveTags', 'datastream.privateConnections.listTagBindings', 'datastream.streams.listEffectiveTags', 'datastream.streams.listTagBindings', 'domains.registrations.listEffectiveTags', 'domains.registrations.listTagBindings', 'file.backups.listEffectiveTags', 'file.backups.listTagBindings', 'file.instances.listEffectiveTags', 'file.instances.listTagBindings', 'file.snapshots.listEffectiveTags', 'file.snapshots.listTagBindings', 'iam.serviceAccounts.listEffectiveTags', 'iam.serviceAccounts.listTagBindings', 'logging.buckets.listEffectiveTags', 'logging.buckets.listTagBindings', 'managedidentities.domains.listEffectiveTags', 'managedidentities.domains.listTagBindings', 'redis.instances.listEffectiveTags', 'redis.instances.listTagBindings', 'resourcemanager.hierarchyNodes.listEffectiveTags', 'resourcemanager.hierarchyNodes.listTagBindings', 'resourcemanager.tagHolds.list', 'resourcemanager.tagKeys.get', 'resourcemanager.tagKeys.list', 'resourcemanager.tagValues.get', 'resourcemanager.tagValues.list', 'run.jobs.listEffectiveTags', 'run.jobs.listTagBindings', 'run.services.listEffectiveTags', 'run.services.listTagBindings', 'secretmanager.secrets.listEffectiveTags', 'secretmanager.secrets.listTagBindings', 'spanner.instances.listEffectiveTags', 'spanner.instances.listTagBindings', 'storage.buckets.listEffectiveTags', 'storage.buckets.listTagBindings'] |
|
GA |
| roles/resourcemanager.projectMover |
Access to update and move a project |
Project Mover |
['resourcemanager.projects.get', 'resourcemanager.projects.move', 'resourcemanager.projects.update'] |
|
GA |
| roles/resourcemanager.organizationAdmin |
Access to manage IAM policies and view organization policies for organizations, folders, and projects. |
Organization Administrator |
['essentialcontacts.contacts.create', 'essentialcontacts.contacts.delete', 'essentialcontacts.contacts.get', 'essentialcontacts.contacts.list', 'essentialcontacts.contacts.send', 'essentialcontacts.contacts.update', 'iam.policybindings.get', 'iam.policybindings.list', 'orgpolicy.constraints.list', 'orgpolicy.policies.list', 'orgpolicy.policy.get', 'resourcemanager.folders.createPolicyBinding', 'resourcemanager.folders.deletePolicyBinding', 'resourcemanager.folders.get', 'resourcemanager.folders.getIamPolicy', 'resourcemanager.folders.list', 'resourcemanager.folders.searchPolicyBindings', 'resourcemanager.folders.setIamPolicy', 'resourcemanager.folders.updatePolicyBinding', 'resourcemanager.organizations.createPolicyBinding', 'resourcemanager.organizations.deletePolicyBinding', 'resourcemanager.organizations.get', 'resourcemanager.organizations.getIamPolicy', 'resourcemanager.organizations.searchPolicyBindings', 'resourcemanager.organizations.setIamPolicy', 'resourcemanager.organizations.updatePolicyBinding', 'resourcemanager.projects.createPolicyBinding', 'resourcemanager.projects.deletePolicyBinding', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list', 'resourcemanager.projects.searchPolicyBindings', 'resourcemanager.projects.setIamPolicy', 'resourcemanager.projects.updatePolicyBinding'] |
|
GA |
| roles/resourcemanager.projectDeleter |
Access to delete GCP projects. |
Project Deleter |
['resourcemanager.projects.delete'] |
|
GA |
| roles/resourcemanager.folderViewer |
Access to view a folder and all of its child resources. |
Folder Viewer |
['essentialcontacts.contacts.get', 'essentialcontacts.contacts.list', 'orgpolicy.constraints.list', 'orgpolicy.policies.list', 'orgpolicy.policy.get', 'resourcemanager.folders.get', 'resourcemanager.folders.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/resourcemanager.tagHoldAdmin |
Access to create, delete and list TagHolds under a TagValue |
Tag Hold Administrator |
['resourcemanager.tagHolds.create', 'resourcemanager.tagHolds.delete', 'resourcemanager.tagHolds.list'] |
|
GA |
| roles/resourcemanager.organizationViewer |
Access only to view an Organization. |
Organization Viewer |
['resourcemanager.organizations.get'] |
|
GA |
| roles/resourcemanager.folderIamAdmin |
Access and administer a folder IAM policies. |
Folder IAM Admin |
['iam.policybindings.get', 'iam.policybindings.list', 'resourcemanager.folders.createPolicyBinding', 'resourcemanager.folders.deletePolicyBinding', 'resourcemanager.folders.get', 'resourcemanager.folders.getIamPolicy', 'resourcemanager.folders.searchPolicyBindings', 'resourcemanager.folders.setIamPolicy', 'resourcemanager.folders.updatePolicyBinding'] |
|
GA |
| roles/resourcemanager.tagUser |
Access to list Tags and manage their associations with resources |
Tag User |
['alloydb.backups.createTagBinding', 'alloydb.backups.deleteTagBinding', 'alloydb.backups.listEffectiveTags', 'alloydb.backups.listTagBindings', 'alloydb.clusters.createTagBinding', 'alloydb.clusters.deleteTagBinding', 'alloydb.clusters.listEffectiveTags', 'alloydb.clusters.listTagBindings', 'artifactregistry.repositories.createTagBinding', 'artifactregistry.repositories.deleteTagBinding', 'artifactregistry.repositories.listEffectiveTags', 'artifactregistry.repositories.listTagBindings', 'bigquery.datasets.createTagBinding', 'bigquery.datasets.deleteTagBinding', 'bigquery.datasets.listEffectiveTags', 'bigquery.datasets.listTagBindings', 'bigquery.tables.createTagBinding', 'bigquery.tables.deleteTagBinding', 'bigquery.tables.listEffectiveTags', 'bigquery.tables.listTagBindings', 'bigtable.authorizedViews.createTagBinding', 'bigtable.authorizedViews.deleteTagBinding', 'bigtable.authorizedViews.listEffectiveTags', 'bigtable.authorizedViews.listTagBindings', 'bigtable.instances.createTagBinding', 'bigtable.instances.deleteTagBinding', 'bigtable.instances.listEffectiveTags', 'bigtable.instances.listTagBindings', 'clouddeploy.deliveryPipelines.createTagBinding', 'clouddeploy.deliveryPipelines.deleteTagBinding', 'clouddeploy.deliveryPipelines.listEffectiveTags', 'clouddeploy.deliveryPipelines.listTagBindings', 'clouddeploy.targets.createTagBinding', 'clouddeploy.targets.deleteTagBinding', 'clouddeploy.targets.listEffectiveTags', 'clouddeploy.targets.listTagBindings', 'cloudkms.keyRings.createTagBinding', 'cloudkms.keyRings.deleteTagBinding', 'cloudkms.keyRings.listEffectiveTags', 'cloudkms.keyRings.listTagBindings', 'cloudsql.instances.createTagBinding', 'cloudsql.instances.deleteTagBinding', 'cloudsql.instances.listEffectiveTags', 'cloudsql.instances.listTagBindings', 'compute.addresses.createTagBinding', 'compute.addresses.deleteTagBinding', 'compute.addresses.listEffectiveTags', 'compute.addresses.listTagBindings', 'compute.backendBuckets.createTagBinding', 'compute.backendBuckets.deleteTagBinding', 'compute.backendBuckets.listEffectiveTags', 'compute.backendBuckets.listTagBindings', 'compute.backendServices.createTagBinding', 'compute.backendServices.deleteTagBinding', 'compute.backendServices.listEffectiveTags', 'compute.backendServices.listTagBindings', 'compute.disks.createTagBinding', 'compute.disks.deleteTagBinding', 'compute.disks.listEffectiveTags', 'compute.disks.listTagBindings', 'compute.externalVpnGateways.createTagBinding', 'compute.externalVpnGateways.deleteTagBinding', 'compute.externalVpnGateways.listEffectiveTags', 'compute.externalVpnGateways.listTagBindings', 'compute.firewallPolicies.createTagBinding', 'compute.firewallPolicies.deleteTagBinding', 'compute.firewallPolicies.listEffectiveTags', 'compute.firewallPolicies.listTagBindings', 'compute.firewalls.createTagBinding', 'compute.firewalls.deleteTagBinding', 'compute.firewalls.listEffectiveTags', 'compute.firewalls.listTagBindings', 'compute.forwardingRules.createTagBinding', 'compute.forwardingRules.deleteTagBinding', 'compute.forwardingRules.listEffectiveTags', 'compute.forwardingRules.listTagBindings', 'compute.globalAddresses.createTagBinding', 'compute.globalAddresses.deleteTagBinding', 'compute.globalAddresses.listEffectiveTags', 'compute.globalAddresses.listTagBindings', 'compute.globalForwardingRules.createTagBinding', 'compute.globalForwardingRules.deleteTagBinding', 'compute.globalForwardingRules.listEffectiveTags', 'compute.globalForwardingRules.listTagBindings', 'compute.globalNetworkEndpointGroups.createTagBinding', 'compute.globalNetworkEndpointGroups.deleteTagBinding', 'compute.globalNetworkEndpointGroups.listEffectiveTags', 'compute.globalNetworkEndpointGroups.listTagBindings', 'compute.healthChecks.createTagBinding', 'compute.healthChecks.deleteTagBinding', 'compute.healthChecks.listEffectiveTags', 'compute.healthChecks.listTagBindings', 'compute.httpHealthChecks.createTagBinding', 'compute.httpHealthChecks.deleteTagBinding', 'compute.httpHealthChecks.listEffectiveTags', 'compute.httpHealthChecks.listTagBindings', 'compute.httpsHealthChecks.createTagBinding', 'compute.httpsHealthChecks.deleteTagBinding', 'compute.httpsHealthChecks.listEffectiveTags', 'compute.httpsHealthChecks.listTagBindings', 'compute.images.createTagBinding', 'compute.images.deleteTagBinding', 'compute.images.listEffectiveTags', 'compute.images.listTagBindings', 'compute.instanceGroupManagers.createTagBinding', 'compute.instanceGroupManagers.deleteTagBinding', 'compute.instanceGroupManagers.listEffectiveTags', 'compute.instanceGroupManagers.listTagBindings', 'compute.instanceGroups.createTagBinding', 'compute.instanceGroups.deleteTagBinding', 'compute.instanceGroups.listEffectiveTags', 'compute.instanceGroups.listTagBindings', 'compute.instances.createTagBinding', 'compute.instances.deleteTagBinding', 'compute.instances.listEffectiveTags', 'compute.instances.listTagBindings', 'compute.interconnectAttachments.createTagBinding', 'compute.interconnectAttachments.deleteTagBinding', 'compute.interconnectAttachments.listEffectiveTags', 'compute.interconnectAttachments.listTagBindings', 'compute.interconnects.createTagBinding', 'compute.interconnects.deleteTagBinding', 'compute.interconnects.listEffectiveTags', 'compute.interconnects.listTagBindings', 'compute.networkAttachments.createTagBinding', 'compute.networkAttachments.deleteTagBinding', 'compute.networkAttachments.listEffectiveTags', 'compute.networkAttachments.listTagBindings', 'compute.networkEdgeSecurityServices.createTagBinding', 'compute.networkEdgeSecurityServices.deleteTagBinding', 'compute.networkEdgeSecurityServices.listEffectiveTags', 'compute.networkEdgeSecurityServices.listTagBindings', 'compute.networkEndpointGroups.createTagBinding', 'compute.networkEndpointGroups.deleteTagBinding', 'compute.networkEndpointGroups.listEffectiveTags', 'compute.networkEndpointGroups.listTagBindings', 'compute.networks.createTagBinding', 'compute.networks.deleteTagBinding', 'compute.networks.listEffectiveTags', 'compute.networks.listTagBindings', 'compute.packetMirrorings.createTagBinding', 'compute.packetMirrorings.deleteTagBinding', 'compute.packetMirrorings.listEffectiveTags', 'compute.packetMirrorings.listTagBindings', 'compute.publicDelegatedPrefixes.createTagBinding', 'compute.publicDelegatedPrefixes.deleteTagBinding', 'compute.publicDelegatedPrefixes.listEffectiveTags', 'compute.publicDelegatedPrefixes.listTagBindings', 'compute.regionBackendServices.createTagBinding', 'compute.regionBackendServices.deleteTagBinding', 'compute.regionBackendServices.listEffectiveTags', 'compute.regionBackendServices.listTagBindings', 'compute.regionFirewallPolicies.createTagBinding', 'compute.regionFirewallPolicies.deleteTagBinding', 'compute.regionFirewallPolicies.listEffectiveTags', 'compute.regionFirewallPolicies.listTagBindings', 'compute.regionHealthChecks.createTagBinding', 'compute.regionHealthChecks.deleteTagBinding', 'compute.regionHealthChecks.listEffectiveTags', 'compute.regionHealthChecks.listTagBindings', 'compute.regionNetworkEndpointGroups.createTagBinding', 'compute.regionNetworkEndpointGroups.deleteTagBinding', 'compute.regionNetworkEndpointGroups.listEffectiveTags', 'compute.regionNetworkEndpointGroups.listTagBindings', 'compute.regionSecurityPolicies.createTagBinding', 'compute.regionSecurityPolicies.deleteTagBinding', 'compute.regionSecurityPolicies.listEffectiveTags', 'compute.regionSecurityPolicies.listTagBindings', 'compute.regionSslCertificates.createTagBinding', 'compute.regionSslCertificates.deleteTagBinding', 'compute.regionSslCertificates.listEffectiveTags', 'compute.regionSslCertificates.listTagBindings', 'compute.regionSslPolicies.createTagBinding', 'compute.regionSslPolicies.deleteTagBinding', 'compute.regionSslPolicies.listEffectiveTags', 'compute.regionSslPolicies.listTagBindings', 'compute.regionTargetHttpProxies.createTagBinding', 'compute.regionTargetHttpProxies.deleteTagBinding', 'compute.regionTargetHttpProxies.listEffectiveTags', 'compute.regionTargetHttpProxies.listTagBindings', 'compute.regionTargetHttpsProxies.createTagBinding', 'compute.regionTargetHttpsProxies.deleteTagBinding', 'compute.regionTargetHttpsProxies.listEffectiveTags', 'compute.regionTargetHttpsProxies.listTagBindings', 'compute.regionTargetTcpProxies.createTagBinding', 'compute.regionTargetTcpProxies.deleteTagBinding', 'compute.regionTargetTcpProxies.listEffectiveTags', 'compute.regionTargetTcpProxies.listTagBindings', 'compute.regionUrlMaps.createTagBinding', 'compute.regionUrlMaps.deleteTagBinding', 'compute.regionUrlMaps.listEffectiveTags', 'compute.regionUrlMaps.listTagBindings', 'compute.routers.createTagBinding', 'compute.routers.deleteTagBinding', 'compute.routers.listEffectiveTags', 'compute.routers.listTagBindings', 'compute.routes.createTagBinding', 'compute.routes.deleteTagBinding', 'compute.routes.listEffectiveTags', 'compute.routes.listTagBindings', 'compute.securityPolicies.createTagBinding', 'compute.securityPolicies.deleteTagBinding', 'compute.securityPolicies.listEffectiveTags', 'compute.securityPolicies.listTagBindings', 'compute.serviceAttachments.createTagBinding', 'compute.serviceAttachments.deleteTagBinding', 'compute.serviceAttachments.listEffectiveTags', 'compute.serviceAttachments.listTagBindings', 'compute.snapshots.createTagBinding', 'compute.snapshots.deleteTagBinding', 'compute.snapshots.listEffectiveTags', 'compute.snapshots.listTagBindings', 'compute.sslCertificates.createTagBinding', 'compute.sslCertificates.deleteTagBinding', 'compute.sslCertificates.listEffectiveTags', 'compute.sslCertificates.listTagBindings', 'compute.sslPolicies.createTagBinding', 'compute.sslPolicies.deleteTagBinding', 'compute.sslPolicies.listEffectiveTags', 'compute.sslPolicies.listTagBindings', 'compute.subnetworks.createTagBinding', 'compute.subnetworks.deleteTagBinding', 'compute.subnetworks.listEffectiveTags', 'compute.subnetworks.listTagBindings', 'compute.targetGrpcProxies.createTagBinding', 'compute.targetGrpcProxies.deleteTagBinding', 'compute.targetGrpcProxies.listEffectiveTags', 'compute.targetGrpcProxies.listTagBindings', 'compute.targetHttpProxies.createTagBinding', 'compute.targetHttpProxies.deleteTagBinding', 'compute.targetHttpProxies.listEffectiveTags', 'compute.targetHttpProxies.listTagBindings', 'compute.targetHttpsProxies.createTagBinding', 'compute.targetHttpsProxies.deleteTagBinding', 'compute.targetHttpsProxies.listEffectiveTags', 'compute.targetHttpsProxies.listTagBindings', 'compute.targetInstances.createTagBinding', 'compute.targetInstances.deleteTagBinding', 'compute.targetInstances.listEffectiveTags', 'compute.targetInstances.listTagBindings', 'compute.targetPools.createTagBinding', 'compute.targetPools.deleteTagBinding', 'compute.targetPools.listEffectiveTags', 'compute.targetPools.listTagBindings', 'compute.targetSslProxies.createTagBinding', 'compute.targetSslProxies.deleteTagBinding', 'compute.targetSslProxies.listEffectiveTags', 'compute.targetSslProxies.listTagBindings', 'compute.targetTcpProxies.createTagBinding', 'compute.targetTcpProxies.deleteTagBinding', 'compute.targetTcpProxies.listEffectiveTags', 'compute.targetTcpProxies.listTagBindings', 'compute.targetVpnGateways.createTagBinding', 'compute.targetVpnGateways.deleteTagBinding', 'compute.targetVpnGateways.listEffectiveTags', 'compute.targetVpnGateways.listTagBindings', 'compute.urlMaps.createTagBinding', 'compute.urlMaps.deleteTagBinding', 'compute.urlMaps.listEffectiveTags', 'compute.urlMaps.listTagBindings', 'compute.vpnGateways.createTagBinding', 'compute.vpnGateways.deleteTagBinding', 'compute.vpnGateways.listEffectiveTags', 'compute.vpnGateways.listTagBindings', 'compute.vpnTunnels.createTagBinding', 'compute.vpnTunnels.deleteTagBinding', 'compute.vpnTunnels.listEffectiveTags', 'compute.vpnTunnels.listTagBindings', 'container.clusters.createTagBinding', 'container.clusters.deleteTagBinding', 'container.clusters.listEffectiveTags', 'container.clusters.listTagBindings', 'datafusion.instances.createTagBinding', 'datafusion.instances.deleteTagBinding', 'datafusion.instances.listEffectiveTags', 'datafusion.instances.listTagBindings', 'datastore.databases.createTagBinding', 'datastore.databases.deleteTagBinding', 'datastore.databases.listEffectiveTags', 'datastore.databases.listTagBindings', 'datastream.connectionProfiles.createTagBinding', 'datastream.connectionProfiles.deleteTagBinding', 'datastream.connectionProfiles.listEffectiveTags', 'datastream.connectionProfiles.listTagBindings', 'datastream.privateConnections.createTagBinding', 'datastream.privateConnections.deleteTagBinding', 'datastream.privateConnections.listEffectiveTags', 'datastream.privateConnections.listTagBindings', 'datastream.streams.createTagBinding', 'datastream.streams.deleteTagBinding', 'datastream.streams.listEffectiveTags', 'datastream.streams.listTagBindings', 'domains.registrations.createTagBinding', 'domains.registrations.deleteTagBinding', 'domains.registrations.listEffectiveTags', 'domains.registrations.listTagBindings', 'file.backups.createTagBinding', 'file.backups.deleteTagBinding', 'file.backups.listEffectiveTags', 'file.backups.listTagBindings', 'file.instances.createTagBinding', 'file.instances.deleteTagBinding', 'file.instances.listEffectiveTags', 'file.instances.listTagBindings', 'file.snapshots.createTagBinding', 'file.snapshots.deleteTagBinding', 'file.snapshots.listEffectiveTags', 'file.snapshots.listTagBindings', 'iam.serviceAccounts.createTagBinding', 'iam.serviceAccounts.deleteTagBinding', 'iam.serviceAccounts.listEffectiveTags', 'iam.serviceAccounts.listTagBindings', 'logging.buckets.createTagBinding', 'logging.buckets.deleteTagBinding', 'logging.buckets.listEffectiveTags', 'logging.buckets.listTagBindings', 'managedidentities.domains.createTagBinding', 'managedidentities.domains.deleteTagBinding', 'managedidentities.domains.listEffectiveTags', 'managedidentities.domains.listTagBindings', 'redis.instances.createTagBinding', 'redis.instances.deleteTagBinding', 'redis.instances.listEffectiveTags', 'redis.instances.listTagBindings', 'resourcemanager.hierarchyNodes.createTagBinding', 'resourcemanager.hierarchyNodes.deleteTagBinding', 'resourcemanager.hierarchyNodes.listEffectiveTags', 'resourcemanager.hierarchyNodes.listTagBindings', 'resourcemanager.projects.get', 'resourcemanager.tagKeys.get', 'resourcemanager.tagKeys.list', 'resourcemanager.tagValueBindings.create', 'resourcemanager.tagValueBindings.delete', 'resourcemanager.tagValues.get', 'resourcemanager.tagValues.list', 'run.jobs.createTagBinding', 'run.jobs.deleteTagBinding', 'run.jobs.listEffectiveTags', 'run.jobs.listTagBindings', 'run.services.createTagBinding', 'run.services.deleteTagBinding', 'run.services.listEffectiveTags', 'run.services.listTagBindings', 'secretmanager.secrets.createTagBinding', 'secretmanager.secrets.deleteTagBinding', 'secretmanager.secrets.listEffectiveTags', 'secretmanager.secrets.listTagBindings', 'spanner.instances.createTagBinding', 'spanner.instances.deleteTagBinding', 'spanner.instances.listEffectiveTags', 'spanner.instances.listTagBindings', 'storage.buckets.createTagBinding', 'storage.buckets.deleteTagBinding', 'storage.buckets.listEffectiveTags', 'storage.buckets.listTagBindings'] |
|
GA |
| roles/resourcemanager.tagAdmin |
Access to create, delete, update, and manage access to Tags |
Tag Administrator |
['resourcemanager.tagHolds.create', 'resourcemanager.tagHolds.delete', 'resourcemanager.tagHolds.list', 'resourcemanager.tagKeys.create', 'resourcemanager.tagKeys.delete', 'resourcemanager.tagKeys.get', 'resourcemanager.tagKeys.getIamPolicy', 'resourcemanager.tagKeys.list', 'resourcemanager.tagKeys.setIamPolicy', 'resourcemanager.tagKeys.update', 'resourcemanager.tagValues.create', 'resourcemanager.tagValues.delete', 'resourcemanager.tagValues.get', 'resourcemanager.tagValues.getIamPolicy', 'resourcemanager.tagValues.list', 'resourcemanager.tagValues.setIamPolicy', 'resourcemanager.tagValues.update'] |
|
GA |
| roles/resourcemanager.folderAdmin |
Access and administer a folder and all of its sub-resources. |
Folder Admin |
['essentialcontacts.contacts.create', 'essentialcontacts.contacts.delete', 'essentialcontacts.contacts.get', 'essentialcontacts.contacts.list', 'essentialcontacts.contacts.send', 'essentialcontacts.contacts.update', 'iam.policybindings.get', 'iam.policybindings.list', 'orgpolicy.constraints.list', 'orgpolicy.policies.list', 'orgpolicy.policy.get', 'resourcemanager.folders.create', 'resourcemanager.folders.createPolicyBinding', 'resourcemanager.folders.delete', 'resourcemanager.folders.deletePolicyBinding', 'resourcemanager.folders.get', 'resourcemanager.folders.getIamPolicy', 'resourcemanager.folders.list', 'resourcemanager.folders.move', 'resourcemanager.folders.searchPolicyBindings', 'resourcemanager.folders.setIamPolicy', 'resourcemanager.folders.undelete', 'resourcemanager.folders.update', 'resourcemanager.folders.updatePolicyBinding', 'resourcemanager.hierarchyNodes.createTagBinding', 'resourcemanager.hierarchyNodes.deleteTagBinding', 'resourcemanager.hierarchyNodes.listEffectiveTags', 'resourcemanager.hierarchyNodes.listTagBindings', 'resourcemanager.projects.createPolicyBinding', 'resourcemanager.projects.deletePolicyBinding', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list', 'resourcemanager.projects.move', 'resourcemanager.projects.searchPolicyBindings', 'resourcemanager.projects.setIamPolicy', 'resourcemanager.projects.updatePolicyBinding'] |
|
GA |
| roles/resourcemanager.folderCreator |
Create folder and view all of its sub-resources. |
Folder Creator |
['essentialcontacts.contacts.get', 'essentialcontacts.contacts.list', 'orgpolicy.constraints.list', 'orgpolicy.policies.list', 'orgpolicy.policy.get', 'resourcemanager.folders.create', 'resourcemanager.folders.get', 'resourcemanager.folders.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/resourcemanager.lienModifier |
Access to modify Liens on projects. |
Project Lien Modifier |
['resourcemanager.projects.updateLiens'] |
|
GA |
| roles/resourcemanager.projectIamAdmin |
Access and administer a project IAM policies. |
Project IAM Admin |
['iam.policybindings.get', 'iam.policybindings.list', 'resourcemanager.projects.createPolicyBinding', 'resourcemanager.projects.deletePolicyBinding', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.searchPolicyBindings', 'resourcemanager.projects.setIamPolicy', 'resourcemanager.projects.updatePolicyBinding'] |
|
GA |