Some or all of the information on this page might not apply to Cloud de Confiance by S3NS. See Differences from Google Cloud for more details.

SaaS Config API roles and permissions

This page lists the IAM roles and permissions for SaaS Config API. To search through all roles and permissions, see the role and permission index.

SaaS Config API roles

Role Permissions

Role	Permissions
SaaS Config Viewer ^Beta (`roles/saasconfig.viewer`) Read access to SaaS Config resources.	`resourcemanager.projects.get` `resourcemanager.projects.list` `saasconfig.featureFlagsConfigs.get`

(roles/saasconfig.viewer)

Read access to SaaS Config resources.

resourcemanager.projects.get

resourcemanager.projects.list

saasconfig.featureFlagsConfigs.get

Permission Included in roles

Permission	Included in roles
`saasconfig.featureFlagsConfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) SaaS Config Viewer (`roles/saasconfig.viewer`) Support User (`roles/iam.supportUser`)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

SaaS Config Viewer (roles/saasconfig.viewer)

Support User (roles/iam.supportUser)

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-05-12 UTC.