| roles/workloadmanager.admin |
Full access to Workload Manager all resources. |
Workload Manager Admin |
['compute.acceleratorTypes.list', 'compute.diskTypes.list', 'compute.machineTypes.list', 'compute.networks.list', 'compute.projects.get', 'compute.regions.list', 'compute.subnetworks.list', 'compute.zones.list', 'dns.managedZones.list', 'iam.serviceAccounts.list', 'monitoring.timeSeries.list', 'orgpolicy.policy.get', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list', 'serviceusage.quotas.get', 'serviceusage.services.get', 'storage.buckets.list', 'storage.objects.list', 'workloadmanager.actuations.create', 'workloadmanager.actuations.delete', 'workloadmanager.actuations.get', 'workloadmanager.actuations.list', 'workloadmanager.deployments.create', 'workloadmanager.deployments.delete', 'workloadmanager.deployments.get', 'workloadmanager.deployments.list', 'workloadmanager.discoveredprofiles.get', 'workloadmanager.discoveredprofiles.getHealth', 'workloadmanager.discoveredprofiles.list', 'workloadmanager.evaluations.create', 'workloadmanager.evaluations.delete', 'workloadmanager.evaluations.get', 'workloadmanager.evaluations.list', 'workloadmanager.evaluations.run', 'workloadmanager.evaluations.update', 'workloadmanager.executions.delete', 'workloadmanager.executions.get', 'workloadmanager.executions.list', 'workloadmanager.insights.export', 'workloadmanager.insights.listSapSystems', 'workloadmanager.insights.write', 'workloadmanager.locations.get', 'workloadmanager.locations.list', 'workloadmanager.operations.cancel', 'workloadmanager.operations.delete', 'workloadmanager.operations.get', 'workloadmanager.operations.list', 'workloadmanager.results.list', 'workloadmanager.rules.list'] |
|
BETA |
| roles/workloadmanager.evaluationAdmin |
Full access to Workload Manager evaluation resources. |
Workload Manager Evaluation Admin |
['orgpolicy.policy.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'workloadmanager.evaluations.create', 'workloadmanager.evaluations.delete', 'workloadmanager.evaluations.get', 'workloadmanager.evaluations.list', 'workloadmanager.evaluations.run', 'workloadmanager.evaluations.update', 'workloadmanager.executions.delete', 'workloadmanager.executions.get', 'workloadmanager.executions.list', 'workloadmanager.locations.get', 'workloadmanager.locations.list', 'workloadmanager.operations.cancel', 'workloadmanager.operations.delete', 'workloadmanager.operations.get', 'workloadmanager.operations.list', 'workloadmanager.results.list', 'workloadmanager.rules.list'] |
|
BETA |
| roles/workloadmanager.evaluationWorker |
The role used by Workload Manager application runners to read and update workloads. |
Workload Manager Evaluation Worker |
['workloadmanager.evaluations.create', 'workloadmanager.evaluations.delete', 'workloadmanager.evaluations.get', 'workloadmanager.evaluations.list', 'workloadmanager.evaluations.run', 'workloadmanager.evaluations.update', 'workloadmanager.executions.delete', 'workloadmanager.executions.get', 'workloadmanager.executions.list'] |
|
BETA |
| roles/workloadmanager.serviceAgent |
Gives Workload Manager Service Agent access to CAI export functions and Cloud Monitoring. |
Workload Manager Service Agent |
['cloudasset.assets.exportAccessPolicy', 'cloudasset.assets.exportIamPolicy', 'cloudasset.assets.exportOSInventories', 'cloudasset.assets.exportOrgPolicy', 'cloudasset.assets.exportResource', 'cloudasset.assets.listAccessPolicy', 'cloudasset.assets.listIamPolicy', 'cloudasset.assets.listOSInventories', 'cloudasset.assets.listOrgPolicy', 'cloudasset.assets.listResource', 'cloudasset.assets.searchAllResources', 'config.deployments.create', 'config.deployments.delete', 'config.deployments.get', 'config.deployments.list', 'config.deployments.update', 'config.locations.get', 'config.locations.list', 'config.operations.cancel', 'config.operations.delete', 'config.operations.get', 'config.operations.list', 'config.resources.list', 'config.revisions.get', 'config.revisions.list', 'monitoring.metricDescriptors.get', 'monitoring.metricDescriptors.list', 'monitoring.monitoredResourceDescriptors.get', 'monitoring.monitoredResourceDescriptors.list', 'monitoring.timeSeries.list', 'serviceusage.services.use', 'workloadmanager.insights.export', 'workloadmanager.insights.listSapSystems'] |
|
GA |
| roles/workloadmanager.workloadViewer |
The role used to view the workload related data. |
Workload Manager Workload Viewer |
['resourcemanager.projects.get', 'resourcemanager.projects.list', 'workloadmanager.discoveredprofiles.get', 'workloadmanager.discoveredprofiles.getHealth', 'workloadmanager.discoveredprofiles.list'] |
|
BETA |
| roles/workloadmanager.deploymentViewer |
Read-only access to Workload Manager deployment resources. |
Workload Manager Deployment Viewer |
['resourcemanager.projects.get', 'resourcemanager.projects.list', 'workloadmanager.actuations.get', 'workloadmanager.actuations.list', 'workloadmanager.deployments.get', 'workloadmanager.deployments.list'] |
|
BETA |
| roles/workloadmanager.worker |
The role used by Workload Manager application runners to read and update workloads. |
Workload Manager Worker |
['orgpolicy.policy.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'workloadmanager.actuations.create', 'workloadmanager.actuations.delete', 'workloadmanager.actuations.get', 'workloadmanager.actuations.list', 'workloadmanager.deployments.create', 'workloadmanager.deployments.delete', 'workloadmanager.deployments.get', 'workloadmanager.deployments.list', 'workloadmanager.discoveredprofiles.get', 'workloadmanager.discoveredprofiles.getHealth', 'workloadmanager.discoveredprofiles.list', 'workloadmanager.evaluations.create', 'workloadmanager.evaluations.delete', 'workloadmanager.evaluations.get', 'workloadmanager.evaluations.list', 'workloadmanager.evaluations.run', 'workloadmanager.evaluations.update', 'workloadmanager.executions.delete', 'workloadmanager.executions.get', 'workloadmanager.executions.list', 'workloadmanager.insights.write', 'workloadmanager.results.list', 'workloadmanager.rules.list'] |
|
BETA |
| roles/workloadmanager.evaluationViewer |
Read-only access to Workload Manager evaluation resources. |
Workload Manager Evaluation Viewer |
['orgpolicy.policy.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'workloadmanager.evaluations.get', 'workloadmanager.evaluations.list', 'workloadmanager.executions.get', 'workloadmanager.executions.list', 'workloadmanager.results.list', 'workloadmanager.rules.list'] |
|
BETA |
| roles/workloadmanager.insightWriter |
The role used to write data to WLM data warehouse. |
Workload Manager Insights Writer |
['workloadmanager.insights.write'] |
|
BETA |
| roles/workloadmanager.deploymentAdmin |
Full access to Workload Manager deployment resources. |
Workload Manager Deployment Admin |
['compute.acceleratorTypes.list', 'compute.diskTypes.list', 'compute.machineTypes.list', 'compute.networks.list', 'compute.projects.get', 'compute.regions.list', 'compute.subnetworks.list', 'compute.zones.list', 'dns.managedZones.list', 'iam.serviceAccounts.list', 'monitoring.timeSeries.list', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list', 'serviceusage.quotas.get', 'serviceusage.services.get', 'storage.buckets.list', 'storage.objects.list', 'workloadmanager.actuations.create', 'workloadmanager.actuations.delete', 'workloadmanager.actuations.get', 'workloadmanager.actuations.list', 'workloadmanager.deployments.create', 'workloadmanager.deployments.delete', 'workloadmanager.deployments.get', 'workloadmanager.deployments.list', 'workloadmanager.locations.get', 'workloadmanager.locations.list', 'workloadmanager.operations.cancel', 'workloadmanager.operations.delete', 'workloadmanager.operations.get', 'workloadmanager.operations.list'] |
|
BETA |
| roles/workloadmanager.viewer |
Read-only access to Workload Manager all resources. |
Workload Manager Viewer |
['orgpolicy.policy.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'workloadmanager.actuations.get', 'workloadmanager.actuations.list', 'workloadmanager.deployments.get', 'workloadmanager.deployments.list', 'workloadmanager.discoveredprofiles.get', 'workloadmanager.discoveredprofiles.getHealth', 'workloadmanager.discoveredprofiles.list', 'workloadmanager.evaluations.get', 'workloadmanager.evaluations.list', 'workloadmanager.executions.get', 'workloadmanager.executions.list', 'workloadmanager.results.list', 'workloadmanager.rules.list'] |
|
BETA |