[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-28 UTC."],[],[],null,["This page lists the IAM roles and permissions for Config Management. To\nsearch through all roles and permissions, see the [role and\npermission index](/iam/docs/roles-permissions).\n\nConfig Management roles\n\n| Role | Permissions |\n|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| Anthos Config Management Service Agent (`roles/``anthosconfigmanagement.serviceAgent`) Gives the Anthos Config Management service agent access to Google Cloud resources. | **Warning:** Do not grant service agent roles to any principals except [service agents](/iam/docs/service-agents). | `container.clusters.get` `gkehub.features.get` `gkehub.gateway.delete` `gkehub.``gateway.``generateCredentials` `gkehub.gateway.get` `gkehub.gateway.patch` `gkehub.gateway.post` `gkehub.gateway.put` `gkehub.locations.*` - `gkehub.locations.get` - `gkehub.locations.list` `gkehub.memberships.get` `gkehub.memberships.list` |\n\nConfig Management permissions\n\nThere are no IAM permissions for this service."]]
