Policy Analyzer roles and permissions

This page lists the IAM roles and permissions for Policy Analyzer. To search through all roles and permissions, see the role and permission index.

Policy Analyzer roles

Role Permissions

(roles/policyanalyzer.admin)

Admin role for policyanalyzer

policyanalyzer.*

  • policyanalyzer.resourceAuthorizationActivities.query
  • policyanalyzer.serviceAccountKeyLastAuthenticationActivities.query
  • policyanalyzer.serviceAccountLastAuthenticationActivities.query

resourcemanager.projects.get

resourcemanager.projects.list

(roles/policyanalyzer.viewer)

Viewer role for policyanalyzer

policyanalyzer.*

  • policyanalyzer.resourceAuthorizationActivities.query
  • policyanalyzer.serviceAccountKeyLastAuthenticationActivities.query
  • policyanalyzer.serviceAccountLastAuthenticationActivities.query

resourcemanager.projects.get

resourcemanager.projects.list

(roles/policyanalyzer.activityAnalysisViewer)

Viewer user that can read all activity analysis.

policyanalyzer.*

  • policyanalyzer.resourceAuthorizationActivities.query
  • policyanalyzer.serviceAccountKeyLastAuthenticationActivities.query
  • policyanalyzer.serviceAccountLastAuthenticationActivities.query

Policy Analyzer permissions

Permission Included in roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Policyanalyzer Admin (roles/policyanalyzer.admin)

Policyanalyzer Viewer (roles/policyanalyzer.viewer)

Deny Admin (roles/iam.denyAdmin)

Support User (roles/iam.supportUser)

Activity Analysis Viewer (roles/policyanalyzer.activityAnalysisViewer)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Policyanalyzer Admin (roles/policyanalyzer.admin)

Policyanalyzer Viewer (roles/policyanalyzer.viewer)

Support User (roles/iam.supportUser)

Activity Analysis Viewer (roles/policyanalyzer.activityAnalysisViewer)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Policyanalyzer Admin (roles/policyanalyzer.admin)

Policyanalyzer Viewer (roles/policyanalyzer.viewer)

Support User (roles/iam.supportUser)

Activity Analysis Viewer (roles/policyanalyzer.activityAnalysisViewer)