Agent Identity API roles and permissions

This page lists the IAM roles and permissions for Agent Identity API. To search through all roles and permissions, see the role and permission index.

Agent Identity API roles

Role Permissions

(roles/agentidentity.admin)

Grants access to manage auth providers, authorizations, and access summaries.

agentidentity.accessSummaries.*

  • agentidentity.accessSummaries.get
  • agentidentity.accessSummaries.list

agentidentity.authProviders.create

agentidentity.authProviders.delete

agentidentity.authProviders.get

agentidentity.authProviders.getIamPolicy

agentidentity.authProviders.list

agentidentity.authProviders.queryWorkloads

agentidentity.authProviders.revokeAuthorizations

agentidentity.authProviders.setIamPolicy

agentidentity.authProviders.undelete

agentidentity.authProviders.update

agentidentity.authorizations.*

  • agentidentity.authorizations.delete
  • agentidentity.authorizations.get
  • agentidentity.authorizations.list

agentidentity.locations.*

  • agentidentity.locations.get
  • agentidentity.locations.list

(roles/agentidentity.editor)

Grants access to edit auth providers, authorizations, and access summaries.

agentidentity.accessSummaries.*

  • agentidentity.accessSummaries.get
  • agentidentity.accessSummaries.list

agentidentity.authProviders.create

agentidentity.authProviders.delete

agentidentity.authProviders.get

agentidentity.authProviders.getIamPolicy

agentidentity.authProviders.list

agentidentity.authProviders.queryWorkloads

agentidentity.authProviders.revokeAuthorizations

agentidentity.authProviders.undelete

agentidentity.authProviders.update

agentidentity.authorizations.*

  • agentidentity.authorizations.delete
  • agentidentity.authorizations.get
  • agentidentity.authorizations.list

agentidentity.locations.*

  • agentidentity.locations.get
  • agentidentity.locations.list

(roles/agentidentity.viewer)

Grants access to view auth providers, authorizations, and access summaries.

agentidentity.accessSummaries.*

  • agentidentity.accessSummaries.get
  • agentidentity.accessSummaries.list

agentidentity.authProviders.get

agentidentity.authProviders.getIamPolicy

agentidentity.authProviders.list

agentidentity.authProviders.queryWorkloads

agentidentity.authorizations.get

agentidentity.authorizations.list

agentidentity.locations.*

  • agentidentity.locations.get
  • agentidentity.locations.list

(roles/agentidentity.user)

Grants access to retrieve credentials from auth providers.

agentidentity.authProviders.retrieveCredentials

Agent Identity API permissions

Permission Included in roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Auth Provider Admin (roles/agentidentity.admin)

Agent Identity Editor (roles/agentidentity.editor)

Agent Identity Viewer (roles/agentidentity.viewer)

Connector Admin (roles/iamconnectors.admin)

Connector Editor (roles/iamconnectors.editor)

Connector Viewer (roles/iamconnectors.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Auth Provider Admin (roles/agentidentity.admin)

Agent Identity Editor (roles/agentidentity.editor)

Agent Identity Viewer (roles/agentidentity.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Connector Admin (roles/iamconnectors.admin)

Connector Editor (roles/iamconnectors.editor)

Connector Viewer (roles/iamconnectors.viewer)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Auth Provider Admin (roles/agentidentity.admin)

Agent Identity Editor (roles/agentidentity.editor)

Connector Admin (roles/iamconnectors.admin)

Connector Editor (roles/iamconnectors.editor)

Owner (roles/owner)

Editor (roles/editor)

Auth Provider Admin (roles/agentidentity.admin)

Agent Identity Editor (roles/agentidentity.editor)

Connector Admin (roles/iamconnectors.admin)

Connector Editor (roles/iamconnectors.editor)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Auth Provider Admin (roles/agentidentity.admin)

Agent Identity Editor (roles/agentidentity.editor)

Agent Identity Viewer (roles/agentidentity.viewer)

Connector Admin (roles/iamconnectors.admin)

Connector Editor (roles/iamconnectors.editor)

Connector Viewer (roles/iamconnectors.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Auth Provider Admin (roles/agentidentity.admin)

Agent Identity Editor (roles/agentidentity.editor)

Agent Identity Viewer (roles/agentidentity.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Connector Admin (roles/iamconnectors.admin)

Connector Editor (roles/iamconnectors.editor)

Connector Viewer (roles/iamconnectors.viewer)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Auth Provider Admin (roles/agentidentity.admin)

Agent Identity Editor (roles/agentidentity.editor)

Agent Identity Viewer (roles/agentidentity.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Connector Admin (roles/iamconnectors.admin)

Connector Editor (roles/iamconnectors.editor)

Connector Viewer (roles/iamconnectors.viewer)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Auth Provider Admin (roles/agentidentity.admin)

Agent Identity Editor (roles/agentidentity.editor)

Agent Identity Viewer (roles/agentidentity.viewer)

Connector Admin (roles/iamconnectors.admin)

Connector Editor (roles/iamconnectors.editor)

Connector Viewer (roles/iamconnectors.viewer)

Support User (roles/iam.supportUser)

Auth Provider User (roles/agentidentity.user)

Connector User (roles/iamconnectors.user)

Owner (roles/owner)

Editor (roles/editor)

Auth Provider Admin (roles/agentidentity.admin)

Agent Identity Editor (roles/agentidentity.editor)

Connector Admin (roles/iamconnectors.admin)

Connector Editor (roles/iamconnectors.editor)

Owner (roles/owner)

Auth Provider Admin (roles/agentidentity.admin)

Security Admin (roles/iam.securityAdmin)

Connector Admin (roles/iamconnectors.admin)

Owner (roles/owner)

Editor (roles/editor)

Auth Provider Admin (roles/agentidentity.admin)

Agent Identity Editor (roles/agentidentity.editor)

Connector Admin (roles/iamconnectors.admin)

Connector Editor (roles/iamconnectors.editor)

Owner (roles/owner)

Editor (roles/editor)

Auth Provider Admin (roles/agentidentity.admin)

Agent Identity Editor (roles/agentidentity.editor)

Connector Admin (roles/iamconnectors.admin)

Connector Editor (roles/iamconnectors.editor)

Owner (roles/owner)

Editor (roles/editor)

Auth Provider Admin (roles/agentidentity.admin)

Agent Identity Editor (roles/agentidentity.editor)

Connector Admin (roles/iamconnectors.admin)

Connector Editor (roles/iamconnectors.editor)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Auth Provider Admin (roles/agentidentity.admin)

Agent Identity Editor (roles/agentidentity.editor)

Agent Identity Viewer (roles/agentidentity.viewer)

Connector Admin (roles/iamconnectors.admin)

Connector Editor (roles/iamconnectors.editor)

Connector Viewer (roles/iamconnectors.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Auth Provider Admin (roles/agentidentity.admin)

Agent Identity Editor (roles/agentidentity.editor)

Agent Identity Viewer (roles/agentidentity.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Connector Admin (roles/iamconnectors.admin)

Connector Editor (roles/iamconnectors.editor)

Connector Viewer (roles/iamconnectors.viewer)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Auth Provider Admin (roles/agentidentity.admin)

Agent Identity Editor (roles/agentidentity.editor)

Agent Identity Viewer (roles/agentidentity.viewer)

Connector Admin (roles/iamconnectors.admin)

Connector Editor (roles/iamconnectors.editor)

Connector Viewer (roles/iamconnectors.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Auth Provider Admin (roles/agentidentity.admin)

Agent Identity Editor (roles/agentidentity.editor)

Agent Identity Viewer (roles/agentidentity.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Connector Admin (roles/iamconnectors.admin)

Connector Editor (roles/iamconnectors.editor)

Connector Viewer (roles/iamconnectors.viewer)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)