This page lists the IAM roles and permissions for GKE Identity Service. To
search through all roles and permissions, see the role and
permission index.
GKE Identity Service roles
GKE Identity Service offers the following service agent roles.
Service agent roles should only be granted to service agents.
Role
Permissions
Anthos Identity Service Agent
(roles/anthosidentityservice.serviceAgent)
Gives the Anthos Identity service agent access to Google Cloud resources.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2026-04-24 UTC."],[],[]]