[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-28 UTC."],[],[],null,["This page lists the IAM roles and permissions for GKE Enterprise. To\nsearch through all roles and permissions, see the [role and\npermission index](/iam/docs/roles-permissions).\n\nGKE Enterprise roles\n\n| Role | Permissions |\n|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| Anthos Service Agent (`roles/``anthos.serviceAgent`) Gives the Anthos service agent access to Google Cloud resources. | **Warning:** Do not grant service agent roles to any principals except [service agents](/iam/docs/service-agents). | `gkehub.features.get` `gkehub.locations.*` - `gkehub.locations.get` - `gkehub.locations.list` `gkehub.memberships.get` `gkehub.memberships.list` `serviceusage.services.get` `serviceusage.services.list` |\n\nGKE Enterprise permissions\n\nThere are no IAM permissions for this service."]]