[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-28 UTC."],[],[],null,["This page lists the IAM roles and permissions for Service Extensions. To\nsearch through all roles and permissions, see the [role and\npermission index](/iam/docs/roles-permissions).\n\nService Extensions roles\n\n| Role | Permissions |\n|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|---------------------------------------------------------------------------------------------|\n| Network Actions Service Agent (`roles/``networkactions.serviceAgent`) Gives Network Actions service account access to read required resources. | **Warning:** Do not grant service agent roles to any principals except [service agents](/iam/docs/service-agents). | `artifactregistry.``files.``download` `artifactregistry.``repositories.``downloadArtifacts` |\n\nService Extensions permissions\n\nThere are no IAM permissions for this service."]]
