| roles/servicenetworking.networksAdmin |
Full control of service networking with projects. |
Service Networking Admin |
['servicenetworking.operations.cancel', 'servicenetworking.operations.delete', 'servicenetworking.operations.get', 'servicenetworking.operations.list', 'servicenetworking.services.addDnsRecordSet', 'servicenetworking.services.addDnsZone', 'servicenetworking.services.addPeering', 'servicenetworking.services.addSubnetwork', 'servicenetworking.services.createPeeredDnsDomain', 'servicenetworking.services.deleteConnection', 'servicenetworking.services.deletePeeredDnsDomain', 'servicenetworking.services.disableVpcServiceControls', 'servicenetworking.services.enableVpcServiceControls', 'servicenetworking.services.get', 'servicenetworking.services.getConsumerConfig', 'servicenetworking.services.listPeeredDnsDomains', 'servicenetworking.services.removeDnsRecordSet', 'servicenetworking.services.removeDnsZone', 'servicenetworking.services.updateConsumerConfig', 'servicenetworking.services.updateDnsRecordSet', 'servicenetworking.services.use'] |
|
BETA |
| roles/servicenetworking.serviceAgent |
Gives permission to manage network configuration, such as establishing network peering, necessary for service producers |
Service Networking Service Agent |
['compute.globalAddresses.get', 'compute.globalAddresses.list', 'compute.globalOperations.get', 'compute.networks.addPeering', 'compute.networks.create', 'compute.networks.delete', 'compute.networks.get', 'compute.networks.list', 'compute.networks.listPeeringRoutes', 'compute.networks.removePeering', 'compute.networks.update', 'compute.networks.updatePeering', 'compute.networks.updatePolicy', 'compute.projects.get', 'compute.regionOperations.get', 'compute.routers.get', 'compute.routers.list', 'compute.routes.list', 'compute.subnetworks.create', 'compute.subnetworks.delete', 'compute.subnetworks.get', 'compute.subnetworks.list', 'dns.changes.create', 'dns.changes.get', 'dns.changes.list', 'dns.dnsKeys.get', 'dns.dnsKeys.list', 'dns.gkeClusters.bindDNSResponsePolicy', 'dns.gkeClusters.bindPrivateDNSZone', 'dns.managedZoneOperations.get', 'dns.managedZoneOperations.list', 'dns.managedZones.create', 'dns.managedZones.delete', 'dns.managedZones.get', 'dns.managedZones.getIamPolicy', 'dns.managedZones.list', 'dns.managedZones.update', 'dns.networks.bindDNSResponsePolicy', 'dns.networks.bindPrivateDNSPolicy', 'dns.networks.bindPrivateDNSZone', 'dns.networks.targetWithPeeringZone', 'dns.networks.useHealthSignals', 'dns.policies.create', 'dns.policies.delete', 'dns.policies.get', 'dns.policies.getIamPolicy', 'dns.policies.list', 'dns.policies.update', 'dns.projects.get', 'dns.resourceRecordSets.create', 'dns.resourceRecordSets.delete', 'dns.resourceRecordSets.get', 'dns.resourceRecordSets.list', 'dns.resourceRecordSets.update', 'dns.responsePolicies.create', 'dns.responsePolicies.delete', 'dns.responsePolicies.get', 'dns.responsePolicies.list', 'dns.responsePolicies.update', 'dns.responsePolicyRules.create', 'dns.responsePolicyRules.delete', 'dns.responsePolicyRules.get', 'dns.responsePolicyRules.list', 'dns.responsePolicyRules.update', 'networkconnectivity.internalRanges.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |