Assured Open Source Software roles and permissions

This page lists the IAM roles and permissions for Assured Open Source Software. To search through all roles and permissions, see the role and permission index.

Assured Open Source Software roles

Role Permissions

(roles/assuredoss.admin)

Access to use Assured OSS and manage configuration.

artifactregistry.attachments.get

artifactregistry.attachments.list

artifactregistry.dockerimages.*

  • artifactregistry.dockerimages.get
  • artifactregistry.dockerimages.list

artifactregistry.files.download

artifactregistry.files.get

artifactregistry.files.list

artifactregistry.locations.*

  • artifactregistry.locations.get
  • artifactregistry.locations.list

artifactregistry.mavenartifacts.*

  • artifactregistry.mavenartifacts.get
  • artifactregistry.mavenartifacts.list

artifactregistry.npmpackages.*

  • artifactregistry.npmpackages.get
  • artifactregistry.npmpackages.list

artifactregistry.packages.get

artifactregistry.packages.list

artifactregistry.projectsettings.get

artifactregistry.pythonpackages.*

  • artifactregistry.pythonpackages.get
  • artifactregistry.pythonpackages.list

artifactregistry.repositories.create

artifactregistry.repositories.downloadArtifacts

artifactregistry.repositories.exportArtifacts

artifactregistry.repositories.get

artifactregistry.repositories.list

artifactregistry.repositories.listEffectiveTags

artifactregistry.repositories.listTagBindings

artifactregistry.repositories.readViaVirtualRepository

artifactregistry.rules.get

artifactregistry.rules.list

artifactregistry.tags.get

artifactregistry.tags.list

artifactregistry.versions.get

artifactregistry.versions.list

assuredoss.*

  • assuredoss.config.get
  • assuredoss.customers.create
  • assuredoss.locations.get
  • assuredoss.locations.list
  • assuredoss.metadata.get
  • assuredoss.metadata.list
  • assuredoss.operations.cancel
  • assuredoss.operations.delete
  • assuredoss.operations.get
  • assuredoss.operations.list

iam.serviceAccountKeys.create

iam.serviceAccounts.create

iam.serviceAccounts.get

pubsub.messageTransforms.validate

pubsub.schemas.get

pubsub.schemas.list

pubsub.schemas.listRevisions

pubsub.schemas.validate

pubsub.snapshots.get

pubsub.snapshots.list

pubsub.snapshots.listEffectiveTags

pubsub.snapshots.listTagBindings

pubsub.subscriptions.create

pubsub.subscriptions.get

pubsub.subscriptions.list

pubsub.subscriptions.listEffectiveTags

pubsub.subscriptions.listTagBindings

pubsub.subscriptions.update

pubsub.topics.get

pubsub.topics.list

pubsub.topics.listEffectiveTags

pubsub.topics.listTagBindings

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

  • serviceusage.groups.list
  • serviceusage.groups.listExpandedMembers
  • serviceusage.groups.listMembers

serviceusage.quotas.get

serviceusage.services.enable

serviceusage.services.get

serviceusage.services.list

serviceusage.values.test

(roles/assuredoss.editor)

Editor role for Assured OSS

assuredoss.config.get

assuredoss.locations.*

  • assuredoss.locations.get
  • assuredoss.locations.list

assuredoss.metadata.*

  • assuredoss.metadata.get
  • assuredoss.metadata.list

assuredoss.operations.get

assuredoss.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

(roles/assuredoss.viewer)

Viewer role for Assured OSS

assuredoss.config.get

assuredoss.locations.*

  • assuredoss.locations.get
  • assuredoss.locations.list

assuredoss.metadata.*

  • assuredoss.metadata.get
  • assuredoss.metadata.list

assuredoss.operations.get

assuredoss.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

(roles/assuredoss.projectAdmin)

Access to use Assured OSS and manage configuration.

artifactregistry.attachments.get

artifactregistry.attachments.list

artifactregistry.dockerimages.*

  • artifactregistry.dockerimages.get
  • artifactregistry.dockerimages.list

artifactregistry.files.download

artifactregistry.files.get

artifactregistry.files.list

artifactregistry.locations.*

  • artifactregistry.locations.get
  • artifactregistry.locations.list

artifactregistry.mavenartifacts.*

  • artifactregistry.mavenartifacts.get
  • artifactregistry.mavenartifacts.list

artifactregistry.npmpackages.*

  • artifactregistry.npmpackages.get
  • artifactregistry.npmpackages.list

artifactregistry.packages.get

artifactregistry.packages.list

artifactregistry.projectsettings.get

artifactregistry.pythonpackages.*

  • artifactregistry.pythonpackages.get
  • artifactregistry.pythonpackages.list

artifactregistry.repositories.create

artifactregistry.repositories.downloadArtifacts

artifactregistry.repositories.exportArtifacts

artifactregistry.repositories.get

artifactregistry.repositories.list

artifactregistry.repositories.listEffectiveTags

artifactregistry.repositories.listTagBindings

artifactregistry.repositories.readViaVirtualRepository

artifactregistry.rules.get

artifactregistry.rules.list

artifactregistry.tags.get

artifactregistry.tags.list

artifactregistry.versions.get

artifactregistry.versions.list

assuredoss.*

  • assuredoss.config.get
  • assuredoss.customers.create
  • assuredoss.locations.get
  • assuredoss.locations.list
  • assuredoss.metadata.get
  • assuredoss.metadata.list
  • assuredoss.operations.cancel
  • assuredoss.operations.delete
  • assuredoss.operations.get
  • assuredoss.operations.list

iam.serviceAccounts.create

iam.serviceAccounts.get

pubsub.messageTransforms.validate

pubsub.schemas.get

pubsub.schemas.list

pubsub.schemas.listRevisions

pubsub.schemas.validate

pubsub.snapshots.get

pubsub.snapshots.list

pubsub.snapshots.listEffectiveTags

pubsub.snapshots.listTagBindings

pubsub.subscriptions.get

pubsub.subscriptions.list

pubsub.subscriptions.listEffectiveTags

pubsub.subscriptions.listTagBindings

pubsub.topics.get

pubsub.topics.list

pubsub.topics.listEffectiveTags

pubsub.topics.listTagBindings

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

  • serviceusage.groups.list
  • serviceusage.groups.listExpandedMembers
  • serviceusage.groups.listMembers

serviceusage.quotas.get

serviceusage.services.enable

serviceusage.services.get

serviceusage.services.list

serviceusage.values.test

(roles/assuredoss.reader)

Access to use Assured OSS and view Assured OSS configuration.

artifactregistry.attachments.get

artifactregistry.attachments.list

artifactregistry.dockerimages.*

  • artifactregistry.dockerimages.get
  • artifactregistry.dockerimages.list

artifactregistry.files.download

artifactregistry.files.get

artifactregistry.files.list

artifactregistry.locations.*

  • artifactregistry.locations.get
  • artifactregistry.locations.list

artifactregistry.mavenartifacts.*

  • artifactregistry.mavenartifacts.get
  • artifactregistry.mavenartifacts.list

artifactregistry.npmpackages.*

  • artifactregistry.npmpackages.get
  • artifactregistry.npmpackages.list

artifactregistry.packages.get

artifactregistry.packages.list

artifactregistry.projectsettings.get

artifactregistry.pythonpackages.*

  • artifactregistry.pythonpackages.get
  • artifactregistry.pythonpackages.list

artifactregistry.repositories.downloadArtifacts

artifactregistry.repositories.exportArtifacts

artifactregistry.repositories.get

artifactregistry.repositories.list

artifactregistry.repositories.listEffectiveTags

artifactregistry.repositories.listTagBindings

artifactregistry.repositories.readViaVirtualRepository

artifactregistry.rules.get

artifactregistry.rules.list

artifactregistry.tags.get

artifactregistry.tags.list

artifactregistry.versions.get

artifactregistry.versions.list

assuredoss.config.get

assuredoss.locations.*

  • assuredoss.locations.get
  • assuredoss.locations.list

assuredoss.metadata.*

  • assuredoss.metadata.get
  • assuredoss.metadata.list

assuredoss.operations.get

assuredoss.operations.list

pubsub.messageTransforms.validate

pubsub.schemas.get

pubsub.schemas.list

pubsub.schemas.listRevisions

pubsub.schemas.validate

pubsub.snapshots.get

pubsub.snapshots.list

pubsub.snapshots.listEffectiveTags

pubsub.snapshots.listTagBindings

pubsub.subscriptions.get

pubsub.subscriptions.list

pubsub.subscriptions.listEffectiveTags

pubsub.subscriptions.listTagBindings

pubsub.topics.get

pubsub.topics.list

pubsub.topics.listEffectiveTags

pubsub.topics.listTagBindings

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

  • serviceusage.groups.list
  • serviceusage.groups.listExpandedMembers
  • serviceusage.groups.listMembers

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

serviceusage.values.test

(roles/assuredoss.user)

Access to use Assured OSS.

artifactregistry.attachments.get

artifactregistry.attachments.list

artifactregistry.dockerimages.*

  • artifactregistry.dockerimages.get
  • artifactregistry.dockerimages.list

artifactregistry.files.download

artifactregistry.files.get

artifactregistry.files.list

artifactregistry.locations.*

  • artifactregistry.locations.get
  • artifactregistry.locations.list

artifactregistry.mavenartifacts.*

  • artifactregistry.mavenartifacts.get
  • artifactregistry.mavenartifacts.list

artifactregistry.npmpackages.*

  • artifactregistry.npmpackages.get
  • artifactregistry.npmpackages.list

artifactregistry.packages.get

artifactregistry.packages.list

artifactregistry.projectsettings.get

artifactregistry.pythonpackages.*

  • artifactregistry.pythonpackages.get
  • artifactregistry.pythonpackages.list

artifactregistry.repositories.downloadArtifacts

artifactregistry.repositories.exportArtifacts

artifactregistry.repositories.get

artifactregistry.repositories.list

artifactregistry.repositories.listEffectiveTags

artifactregistry.repositories.listTagBindings

artifactregistry.repositories.readViaVirtualRepository

artifactregistry.rules.get

artifactregistry.rules.list

artifactregistry.tags.get

artifactregistry.tags.list

artifactregistry.versions.get

artifactregistry.versions.list

assuredoss.locations.*

  • assuredoss.locations.get
  • assuredoss.locations.list

assuredoss.metadata.*

  • assuredoss.metadata.get
  • assuredoss.metadata.list

assuredoss.operations.get

assuredoss.operations.list

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

Assured Open Source Software permissions

Permission Included in roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Editor (roles/assuredoss.editor)

Assured OSS Viewer (roles/assuredoss.viewer)

Security Center Admin (roles/securitycenter.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Owner (roles/owner)

Assured OSS Admin (roles/assuredoss.admin)

Security Center Admin (roles/securitycenter.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Editor (roles/assuredoss.editor)

Assured OSS Viewer (roles/assuredoss.viewer)

Security Center Admin (roles/securitycenter.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Editor (roles/assuredoss.editor)

Assured OSS Viewer (roles/assuredoss.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Security Center Admin (roles/securitycenter.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Editor (roles/assuredoss.editor)

Assured OSS Viewer (roles/assuredoss.viewer)

Security Center Admin (roles/securitycenter.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Editor (roles/assuredoss.editor)

Assured OSS Viewer (roles/assuredoss.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Security Center Admin (roles/securitycenter.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Owner (roles/owner)

Assured OSS Admin (roles/assuredoss.admin)

Security Center Admin (roles/securitycenter.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Owner (roles/owner)

Assured OSS Admin (roles/assuredoss.admin)

Security Center Admin (roles/securitycenter.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Editor (roles/assuredoss.editor)

Assured OSS Viewer (roles/assuredoss.viewer)

Security Center Admin (roles/securitycenter.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Assured OSS Admin (roles/assuredoss.admin)

Assured OSS Editor (roles/assuredoss.editor)

Assured OSS Viewer (roles/assuredoss.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Security Center Admin (roles/securitycenter.admin)

Assured OSS Project Admin (roles/assuredoss.projectAdmin)

Assured OSS Reader (roles/assuredoss.reader)

Assured OSS User (roles/assuredoss.user)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Security Center Admin Viewer (roles/securitycenter.adminViewer)