Some or all of the information on this page might not apply to Cloud de Confiance by S3NS. See Differences from Google Cloud for more details.

Device Run roles and permissions

This page lists the IAM roles and permissions for Device Run. To search through all roles and permissions, see the role and permission index.

Device Run roles

Role Permissions

Role	Permissions
Device Run Admin ^Beta (`roles/devicerun.admin`) Full access to Device Run resources.	`cloudtestservice.environmentcatalog.get` `devicerun.` `devicerun.devices.get` `devicerun.devices.list` `devicerun.locations.get` `devicerun.locations.list` `devicerun.operations.cancel` `devicerun.operations.delete` `devicerun.operations.get` `devicerun.operations.list` `devicerun.sessions.create` `devicerun.sessions.delete` `devicerun.sessions.get` `devicerun.sessions.list` `devicestreaming.` `devicestreaming.deviceSessions.cancel` `devicestreaming.deviceSessions.create` `devicestreaming.deviceSessions.get` `devicestreaming.deviceSessions.list` `devicestreaming.deviceSessions.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Device Run Viewer ^Beta (`roles/devicerun.viewer`) Readonly access to Device Run resources.	`cloudtestservice.environmentcatalog.get` `devicerun.devices.` `devicerun.devices.get` `devicerun.devices.list` `devicerun.locations.` `devicerun.locations.get` `devicerun.locations.list` `devicerun.operations.get` `devicerun.operations.list` `devicerun.sessions.get` `devicerun.sessions.list` `devicestreaming.deviceSessions.get` `devicestreaming.deviceSessions.list` `resourcemanager.projects.get` `resourcemanager.projects.list`

Device Run Admin ^Beta

(roles/devicerun.admin)

Full access to Device Run resources.

cloudtestservice.environmentcatalog.get

devicerun.*

devicerun.devices.get
devicerun.devices.list
devicerun.locations.get
devicerun.locations.list
devicerun.operations.cancel
devicerun.operations.delete
devicerun.operations.get
devicerun.operations.list
devicerun.sessions.create
devicerun.sessions.delete
devicerun.sessions.get
devicerun.sessions.list

devicestreaming.*

devicestreaming.deviceSessions.cancel
devicestreaming.deviceSessions.create
devicestreaming.deviceSessions.get
devicestreaming.deviceSessions.list
devicestreaming.deviceSessions.update

resourcemanager.projects.get

resourcemanager.projects.list

Device Run Viewer ^Beta

(roles/devicerun.viewer)

Readonly access to Device Run resources.

cloudtestservice.environmentcatalog.get

devicerun.devices.*

devicerun.devices.get
devicerun.devices.list

devicerun.locations.*

devicerun.locations.get
devicerun.locations.list

devicerun.operations.get

devicerun.operations.list

devicerun.sessions.get

devicerun.sessions.list

devicestreaming.deviceSessions.get

devicestreaming.deviceSessions.list

resourcemanager.projects.get

resourcemanager.projects.list

Device Run permissions

Permission	Included in roles
`devicerun.devices.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Device Run Admin (`roles/devicerun.admin`) Device Run Viewer (`roles/devicerun.viewer`) Support User (`roles/iam.supportUser`)
`devicerun.devices.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Device Run Admin (`roles/devicerun.admin`) Device Run Viewer (`roles/devicerun.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`devicerun.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Device Run Admin (`roles/devicerun.admin`) Device Run Viewer (`roles/devicerun.viewer`) Support User (`roles/iam.supportUser`)
`devicerun.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Device Run Admin (`roles/devicerun.admin`) Device Run Viewer (`roles/devicerun.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`devicerun.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Device Run Admin (`roles/devicerun.admin`)
`devicerun.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Device Run Admin (`roles/devicerun.admin`)
`devicerun.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Device Run Admin (`roles/devicerun.admin`) Device Run Viewer (`roles/devicerun.viewer`) Support User (`roles/iam.supportUser`)
`devicerun.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Device Run Admin (`roles/devicerun.admin`) Device Run Viewer (`roles/devicerun.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`devicerun.sessions.create`	Owner (`roles/owner`) Editor (`roles/editor`) Device Run Admin (`roles/devicerun.admin`)
`devicerun.sessions.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Device Run Admin (`roles/devicerun.admin`)
`devicerun.sessions.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Device Run Admin (`roles/devicerun.admin`) Device Run Viewer (`roles/devicerun.viewer`) Support User (`roles/iam.supportUser`)
`devicerun.sessions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Device Run Admin (`roles/devicerun.admin`) Device Run Viewer (`roles/devicerun.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)

Device Run roles and permissions

Device Run roles

Device Run Admin ^Beta

Device Run Viewer ^Beta

Device Run permissions

`devicerun.devices.get`

`devicerun.devices.list`

`devicerun.locations.get`

`devicerun.locations.list`

`devicerun.operations.cancel`

`devicerun.operations.delete`

`devicerun.operations.get`

`devicerun.operations.list`

`devicerun.sessions.create`

`devicerun.sessions.delete`

`devicerun.sessions.get`

`devicerun.sessions.list`

Device Run roles and permissions

Device Run roles

Device Run Admin Beta

Device Run Viewer Beta

Device Run permissions

devicerun.devices.get

devicerun.devices.list

devicerun.locations.get

devicerun.locations.list

devicerun.operations.cancel

devicerun.operations.delete

devicerun.operations.get

devicerun.operations.list

devicerun.sessions.create

devicerun.sessions.delete

devicerun.sessions.get

devicerun.sessions.list

Device Run Admin ^Beta

Device Run Viewer ^Beta

`devicerun.devices.get`

`devicerun.devices.list`

`devicerun.locations.get`

`devicerun.locations.list`

`devicerun.operations.cancel`

`devicerun.operations.delete`

`devicerun.operations.get`

`devicerun.operations.list`

`devicerun.sessions.create`

`devicerun.sessions.delete`

`devicerun.sessions.get`

`devicerun.sessions.list`