Some or all of the information on this page might not apply to Trusted Cloud by S3NS. See Differences from Google Cloud for more details.

Media Asset roles and permissions

This page lists the IAM roles and permissions for Media Asset. To search through all roles and permissions, see the role and permission index.

Media Asset roles

Role Permissions

Role	Permissions
Media Asset Service Agent (`roles/mediaasset.serviceAgent`) Downloads and uploads media files from and to customer Cloud Storage buckets. Warning: Do not grant service agent roles to any principals except service agents.	`pubsub.topics.get` `pubsub.topics.publish` `storage.objects.create` `storage.objects.delete` `storage.objects.get` `transcoder.jobs.create` `transcoder.jobs.delete` `transcoder.jobs.get`

(roles/mediaasset.serviceAgent)

Downloads and uploads media files from and to customer Cloud Storage buckets.

pubsub.topics.get

pubsub.topics.publish

storage.objects.create

storage.objects.delete

storage.objects.get

transcoder.jobs.create

transcoder.jobs.delete

transcoder.jobs.get

There are no IAM permissions for this service.

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-08-28 UTC.