Chrome Enterprise Premium roles and permissions

This page lists the IAM roles and permissions for Chrome Enterprise Premium. To search through all roles and permissions, see the role and permission index .

Chrome Enterprise Premium roles

Role

Permissions

Cloud BeyondCorp Admin ^Beta

( roles/ beyondcorp.admin )

Full access to all Cloud BeyondCorp resources.

beyondcorp.*

beyondcorp. appConnections. create
beyondcorp. appConnections. createTagBinding
beyondcorp. appConnections. delete
beyondcorp. appConnections. deleteTagBinding
beyondcorp.appConnections.get
beyondcorp. appConnections. getIamPolicy
beyondcorp.appConnections.list
beyondcorp. appConnections. listEffectiveTags
beyondcorp. appConnections. listTagBindings
beyondcorp. appConnections. setIamPolicy
beyondcorp. appConnections. update
beyondcorp. appConnectors. create
beyondcorp. appConnectors. createTagBinding
beyondcorp. appConnectors. delete
beyondcorp. appConnectors. deleteTagBinding
beyondcorp.appConnectors.get
beyondcorp. appConnectors. getIamPolicy
beyondcorp.appConnectors.list
beyondcorp. appConnectors. listEffectiveTags
beyondcorp. appConnectors. listTagBindings
beyondcorp. appConnectors. reportStatus
beyondcorp. appConnectors. setIamPolicy
beyondcorp. appConnectors. update
beyondcorp.appGateways.create
beyondcorp. appGateways. createTagBinding
beyondcorp.appGateways.delete
beyondcorp. appGateways. deleteTagBinding
beyondcorp.appGateways.get
beyondcorp. appGateways. getIamPolicy
beyondcorp.appGateways.list
beyondcorp. appGateways. listEffectiveTags
beyondcorp. appGateways. listTagBindings
beyondcorp. appGateways. setIamPolicy
beyondcorp.appGateways.update
beyondcorp.locations.get
beyondcorp.locations.list
beyondcorp.operations.cancel
beyondcorp.operations.delete
beyondcorp.operations.get
beyondcorp.operations.list
beyondcorp. securityGateways. create
beyondcorp. securityGateways. delete
beyondcorp. securityGateways. get
beyondcorp. securityGateways. getIamPolicy
beyondcorp. securityGateways. list
beyondcorp. securityGateways. setIamPolicy
beyondcorp. securityGateways. update
beyondcorp. sgApplications. create
beyondcorp. sgApplications. delete
beyondcorp.sgApplications.get
beyondcorp. sgApplications. getIamPolicy
beyondcorp.sgApplications.list
beyondcorp. sgApplications. setIamPolicy
beyondcorp. sgApplications. update
beyondcorp. subscriptions. create
beyondcorp.subscriptions.get
beyondcorp.subscriptions.list
beyondcorp. subscriptions. terminate
beyondcorp. subscriptions. update

resourcemanager.projects.get

resourcemanager.projects.list

Cloud BeyondCorp Editor ^Beta

( roles/ beyondcorp.editor )

Editor role for Cloud BeyondCorp

beyondcorp. appConnections. create

beyondcorp. appConnections. delete

beyondcorp.appConnections.get

beyondcorp. appConnections. getIamPolicy

beyondcorp.appConnections.list

beyondcorp. appConnections. listEffectiveTags

beyondcorp. appConnections. listTagBindings

beyondcorp. appConnections. update

beyondcorp. appConnectors. create

beyondcorp. appConnectors. delete

beyondcorp.appConnectors.get

beyondcorp. appConnectors. getIamPolicy

beyondcorp.appConnectors.list

beyondcorp. appConnectors. listEffectiveTags

beyondcorp. appConnectors. listTagBindings

beyondcorp. appConnectors. reportStatus

beyondcorp. appConnectors. update

beyondcorp.appGateways.create

beyondcorp.appGateways.delete

beyondcorp.appGateways.get

beyondcorp. appGateways. getIamPolicy

beyondcorp.appGateways.list

beyondcorp. appGateways. listEffectiveTags

beyondcorp. appGateways. listTagBindings

beyondcorp.appGateways.update

beyondcorp.locations.*

beyondcorp.locations.get
beyondcorp.locations.list

beyondcorp.operations.*

beyondcorp.operations.cancel
beyondcorp.operations.delete
beyondcorp.operations.get
beyondcorp.operations.list

beyondcorp. securityGateways. create

beyondcorp. securityGateways. delete

beyondcorp. securityGateways. get

beyondcorp. securityGateways. getIamPolicy

beyondcorp. securityGateways. list

beyondcorp. securityGateways. update

beyondcorp. sgApplications. create

beyondcorp. sgApplications. delete

beyondcorp.sgApplications.get

beyondcorp. sgApplications. getIamPolicy

beyondcorp.sgApplications.list

beyondcorp. sgApplications. update

beyondcorp.subscriptions.*

beyondcorp. subscriptions. create
beyondcorp.subscriptions.get
beyondcorp.subscriptions.list
beyondcorp. subscriptions. terminate
beyondcorp. subscriptions. update

resourcemanager. organizations. get

resourcemanager.projects.get

resourcemanager.projects.list

Cloud BeyondCorp Viewer ^Beta

( roles/ beyondcorp.viewer )

Read-only access to all Cloud BeyondCorp resources.

beyondcorp.appConnections.get

beyondcorp. appConnections. getIamPolicy

beyondcorp.appConnections.list

beyondcorp. appConnections. listEffectiveTags

beyondcorp. appConnections. listTagBindings

beyondcorp.appConnectors.get

beyondcorp. appConnectors. getIamPolicy

beyondcorp.appConnectors.list

beyondcorp. appConnectors. listEffectiveTags

beyondcorp. appConnectors. listTagBindings

beyondcorp.appGateways.get

beyondcorp. appGateways. getIamPolicy

beyondcorp.appGateways.list

beyondcorp. appGateways. listEffectiveTags

beyondcorp. appGateways. listTagBindings

beyondcorp.locations.*

beyondcorp.locations.get
beyondcorp.locations.list

beyondcorp.operations.get

beyondcorp.operations.list

beyondcorp. securityGateways. get

beyondcorp. securityGateways. getIamPolicy

beyondcorp. securityGateways. list

beyondcorp.sgApplications.get

beyondcorp. sgApplications. getIamPolicy

beyondcorp.sgApplications.list

beyondcorp.subscriptions.get

beyondcorp.subscriptions.list

resourcemanager. organizations. get

resourcemanager.projects.get

resourcemanager.projects.list

Cloud BeyondCorp Subscription Admin ^Beta

( roles/ beyondcorp.subscriptionAdmin )

Full access to all BeyondCorp Subscription resources.

beyondcorp.subscriptions.*

beyondcorp. subscriptions. create
beyondcorp.subscriptions.get
beyondcorp.subscriptions.list
beyondcorp. subscriptions. terminate
beyondcorp. subscriptions. update

resourcemanager. organizations. get

Cloud BeyondCorp Subscription Viewer ^Beta

( roles/ beyondcorp.subscriptionViewer )

Read-only access to all BeyondCorp Subscription resources.

beyondcorp.subscriptions.get

beyondcorp.subscriptions.list

resourcemanager. organizations. get

Chrome Enterprise Premium permissions

Permission	Included in roles
`beyondcorp. appConnections. create`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` )
`beyondcorp. appConnections. createTagBinding`	Owner ( `roles/ owner` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Tag User ( `roles/ resourcemanager.tagUser` ) DLP Organization Data Profiles Driver ( `roles/ dlp.orgdriver` ) DLP Project Data Profiles Driver ( `roles/ dlp.projectdriver` )
`beyondcorp. appConnections. delete`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` )
`beyondcorp. appConnections. deleteTagBinding`	Owner ( `roles/ owner` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Tag User ( `roles/ resourcemanager.tagUser` ) DLP Organization Data Profiles Driver ( `roles/ dlp.orgdriver` ) DLP Project Data Profiles Driver ( `roles/ dlp.projectdriver` )
`beyondcorp.appConnections.get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp. appConnections. getIamPolicy`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Security Auditor ( `roles/ iam.securityAuditor` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp.appConnections.list`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Security Auditor ( `roles/ iam.securityAuditor` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp. appConnections. listEffectiveTags`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Tag User ( `roles/ resourcemanager.tagUser` ) Tag Viewer ( `roles/ resourcemanager.tagViewer` ) DLP Organization Data Profiles Driver ( `roles/ dlp.orgdriver` ) DLP Project Data Profiles Driver ( `roles/ dlp.projectdriver` ) Security Auditor ( `roles/ iam.securityAuditor` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp. appConnections. listTagBindings`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Tag User ( `roles/ resourcemanager.tagUser` ) Tag Viewer ( `roles/ resourcemanager.tagViewer` ) DLP Organization Data Profiles Driver ( `roles/ dlp.orgdriver` ) DLP Project Data Profiles Driver ( `roles/ dlp.projectdriver` ) Security Auditor ( `roles/ iam.securityAuditor` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp. appConnections. setIamPolicy`	Owner ( `roles/ owner` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Security Admin ( `roles/ iam.securityAdmin` )
`beyondcorp. appConnections. update`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` )
`beyondcorp. appConnectors. create`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` )
`beyondcorp. appConnectors. createTagBinding`	Owner ( `roles/ owner` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Tag User ( `roles/ resourcemanager.tagUser` ) DLP Organization Data Profiles Driver ( `roles/ dlp.orgdriver` ) DLP Project Data Profiles Driver ( `roles/ dlp.projectdriver` )
`beyondcorp. appConnectors. delete`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` )
`beyondcorp. appConnectors. deleteTagBinding`	Owner ( `roles/ owner` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Tag User ( `roles/ resourcemanager.tagUser` ) DLP Organization Data Profiles Driver ( `roles/ dlp.orgdriver` ) DLP Project Data Profiles Driver ( `roles/ dlp.projectdriver` )
`beyondcorp.appConnectors.get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp. appConnectors. getIamPolicy`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Security Auditor ( `roles/ iam.securityAuditor` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp.appConnectors.list`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Security Auditor ( `roles/ iam.securityAuditor` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp. appConnectors. listEffectiveTags`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Tag User ( `roles/ resourcemanager.tagUser` ) Tag Viewer ( `roles/ resourcemanager.tagViewer` ) DLP Organization Data Profiles Driver ( `roles/ dlp.orgdriver` ) DLP Project Data Profiles Driver ( `roles/ dlp.projectdriver` ) Security Auditor ( `roles/ iam.securityAuditor` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp. appConnectors. listTagBindings`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Tag User ( `roles/ resourcemanager.tagUser` ) Tag Viewer ( `roles/ resourcemanager.tagViewer` ) DLP Organization Data Profiles Driver ( `roles/ dlp.orgdriver` ) DLP Project Data Profiles Driver ( `roles/ dlp.projectdriver` ) Security Auditor ( `roles/ iam.securityAuditor` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp. appConnectors. reportStatus`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` )
`beyondcorp. appConnectors. setIamPolicy`	Owner ( `roles/ owner` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Security Admin ( `roles/ iam.securityAdmin` )
`beyondcorp. appConnectors. update`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` )
`beyondcorp.appGateways.create`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` )
`beyondcorp. appGateways. createTagBinding`	Owner ( `roles/ owner` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Tag User ( `roles/ resourcemanager.tagUser` ) DLP Organization Data Profiles Driver ( `roles/ dlp.orgdriver` ) DLP Project Data Profiles Driver ( `roles/ dlp.projectdriver` )
`beyondcorp.appGateways.delete`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` )
`beyondcorp. appGateways. deleteTagBinding`	Owner ( `roles/ owner` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Tag User ( `roles/ resourcemanager.tagUser` ) DLP Organization Data Profiles Driver ( `roles/ dlp.orgdriver` ) DLP Project Data Profiles Driver ( `roles/ dlp.projectdriver` )
`beyondcorp.appGateways.get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp. appGateways. getIamPolicy`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Security Auditor ( `roles/ iam.securityAuditor` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp.appGateways.list`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Security Auditor ( `roles/ iam.securityAuditor` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp. appGateways. listEffectiveTags`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Tag User ( `roles/ resourcemanager.tagUser` ) Tag Viewer ( `roles/ resourcemanager.tagViewer` ) DLP Organization Data Profiles Driver ( `roles/ dlp.orgdriver` ) DLP Project Data Profiles Driver ( `roles/ dlp.projectdriver` ) Security Auditor ( `roles/ iam.securityAuditor` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp. appGateways. listTagBindings`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Tag User ( `roles/ resourcemanager.tagUser` ) Tag Viewer ( `roles/ resourcemanager.tagViewer` ) DLP Organization Data Profiles Driver ( `roles/ dlp.orgdriver` ) DLP Project Data Profiles Driver ( `roles/ dlp.projectdriver` ) Security Auditor ( `roles/ iam.securityAuditor` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp. appGateways. setIamPolicy`	Owner ( `roles/ owner` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Security Admin ( `roles/ iam.securityAdmin` )
`beyondcorp.appGateways.update`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` )
`beyondcorp.locations.get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp.locations.list`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Security Auditor ( `roles/ iam.securityAuditor` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp.operations.cancel`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` )
`beyondcorp.operations.delete`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` )
`beyondcorp.operations.get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp.operations.list`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Security Auditor ( `roles/ iam.securityAuditor` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp. securityGateways. create`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` )
`beyondcorp. securityGateways. delete`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` )
`beyondcorp. securityGateways. get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp. securityGateways. getIamPolicy`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Security Auditor ( `roles/ iam.securityAuditor` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp. securityGateways. list`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Security Auditor ( `roles/ iam.securityAuditor` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp. securityGateways. setIamPolicy`	Owner ( `roles/ owner` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Security Admin ( `roles/ iam.securityAdmin` )
`beyondcorp. securityGateways. update`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` )
`beyondcorp. sgApplications. create`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` )
`beyondcorp. sgApplications. delete`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` )
`beyondcorp.sgApplications.get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp. sgApplications. getIamPolicy`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Security Auditor ( `roles/ iam.securityAuditor` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp.sgApplications.list`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Security Auditor ( `roles/ iam.securityAuditor` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp. sgApplications. setIamPolicy`	Owner ( `roles/ owner` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Security Admin ( `roles/ iam.securityAdmin` )
`beyondcorp. sgApplications. update`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` )
`beyondcorp. subscriptions. create`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Subscription Admin ( `roles/ beyondcorp.subscriptionAdmin` )
`beyondcorp.subscriptions.get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Cloud BeyondCorp Subscription Admin ( `roles/ beyondcorp.subscriptionAdmin` ) Cloud BeyondCorp Subscription Viewer ( `roles/ beyondcorp.subscriptionViewer` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp.subscriptions.list`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Viewer ( `roles/ beyondcorp.viewer` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Cloud BeyondCorp Subscription Admin ( `roles/ beyondcorp.subscriptionAdmin` ) Cloud BeyondCorp Subscription Viewer ( `roles/ beyondcorp.subscriptionViewer` ) Security Auditor ( `roles/ iam.securityAuditor` ) Support User ( `roles/ iam.supportUser` )
`beyondcorp. subscriptions. terminate`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Subscription Admin ( `roles/ beyondcorp.subscriptionAdmin` )
`beyondcorp. subscriptions. update`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud BeyondCorp Admin ( `roles/ beyondcorp.admin` ) Cloud BeyondCorp Editor ( `roles/ beyondcorp.editor` ) Cloud BeyondCorp Subscription Admin ( `roles/ beyondcorp.subscriptionAdmin` )

Chrome Enterprise Premium roles and permissions Stay organized with collections Save and categorize content based on your preferences.