Console
    Start free

    Config Delivery roles and permissions

    This page lists the IAM roles and permissions for Config Delivery. To search through all roles and permissions, see the role and permission index .

    Config Delivery roles

    Role
    Permissions

    ( roles/ configdelivery.admin )

    Admin role for configdelivery

    configdelivery.*

    • configdelivery. fleetPackages. create
    • configdelivery. fleetPackages. delete
    • configdelivery. fleetPackages. get
    • configdelivery. fleetPackages. list
    • configdelivery. fleetPackages. update
    • configdelivery.locations.get
    • configdelivery.locations.list
    • configdelivery. operations. cancel
    • configdelivery. operations. delete
    • configdelivery.operations.get
    • configdelivery.operations.list
    • configdelivery.releases.create
    • configdelivery.releases.delete
    • configdelivery.releases.get
    • configdelivery.releases.list
    • configdelivery.releases.update
    • configdelivery. resourceBundles. create
    • configdelivery. resourceBundles. delete
    • configdelivery. resourceBundles. get
    • configdelivery. resourceBundles. list
    • configdelivery. resourceBundles. update
    • configdelivery.rollouts.abort
    • configdelivery.rollouts.get
    • configdelivery.rollouts.list
    • configdelivery.rollouts.resume
    • configdelivery. rollouts. suspend
    • configdelivery.variants.create
    • configdelivery.variants.delete
    • configdelivery.variants.get
    • configdelivery.variants.list
    • configdelivery.variants.update

    resourcemanager.projects.get

    resourcemanager.projects.list

    ( roles/ configdelivery.viewer )

    Viewer role for configdelivery

    configdelivery. fleetPackages. get

    configdelivery. fleetPackages. list

    configdelivery.locations.*

    • configdelivery.locations.get
    • configdelivery.locations.list

    configdelivery.operations.get

    configdelivery.operations.list

    configdelivery.releases.get

    configdelivery.releases.list

    configdelivery. resourceBundles. get

    configdelivery. resourceBundles. list

    configdelivery.rollouts.get

    configdelivery.rollouts.list

    configdelivery.variants.get

    configdelivery.variants.list

    resourcemanager.projects.get

    resourcemanager.projects.list

    ( roles/ configdelivery.configDeliveryAdmin )

    Grants full access to all Config Delivery resources. Lets users create, remove and manage fleet packages and resource bundles.

    configdelivery.*

    • configdelivery. fleetPackages. create
    • configdelivery. fleetPackages. delete
    • configdelivery. fleetPackages. get
    • configdelivery. fleetPackages. list
    • configdelivery. fleetPackages. update
    • configdelivery.locations.get
    • configdelivery.locations.list
    • configdelivery. operations. cancel
    • configdelivery. operations. delete
    • configdelivery.operations.get
    • configdelivery.operations.list
    • configdelivery.releases.create
    • configdelivery.releases.delete
    • configdelivery.releases.get
    • configdelivery.releases.list
    • configdelivery.releases.update
    • configdelivery. resourceBundles. create
    • configdelivery. resourceBundles. delete
    • configdelivery. resourceBundles. get
    • configdelivery. resourceBundles. list
    • configdelivery. resourceBundles. update
    • configdelivery.rollouts.abort
    • configdelivery.rollouts.get
    • configdelivery.rollouts.list
    • configdelivery.rollouts.resume
    • configdelivery. rollouts. suspend
    • configdelivery.variants.create
    • configdelivery.variants.delete
    • configdelivery.variants.get
    • configdelivery.variants.list
    • configdelivery.variants.update

    resourcemanager.projects.get

    resourcemanager.projects.list

    ( roles/ configdelivery.configDeliveryViewer )

    Grants read access to all Config Delivery resources. Lets users view existing fleet packages and resource bundles, but they will not be able to make any changes.

    configdelivery. fleetPackages. get

    configdelivery. fleetPackages. list

    configdelivery.locations.*

    • configdelivery.locations.get
    • configdelivery.locations.list

    configdelivery.operations.get

    configdelivery.operations.list

    configdelivery.releases.get

    configdelivery.releases.list

    configdelivery. resourceBundles. get

    configdelivery. resourceBundles. list

    configdelivery.rollouts.get

    configdelivery.rollouts.list

    configdelivery.variants.get

    configdelivery.variants.list

    resourcemanager.projects.get

    resourcemanager.projects.list

    ( roles/ configdelivery.resourceBundlePublisher )

    Grants read and write permissions to Config Delivery ResourceBundles and Releases.

    configdelivery.locations.*

    • configdelivery.locations.get
    • configdelivery.locations.list

    configdelivery.operations.get

    configdelivery.operations.list

    configdelivery.releases.create

    configdelivery.releases.get

    configdelivery.releases.list

    configdelivery.releases.update

    configdelivery. resourceBundles. create

    configdelivery. resourceBundles. get

    configdelivery. resourceBundles. list

    configdelivery. resourceBundles. update

    configdelivery.variants.create

    configdelivery.variants.get

    configdelivery.variants.list

    configdelivery.variants.update

    resourcemanager.projects.get

    resourcemanager.projects.list

    Service agent roles

    Service agent roles should only be granted to service agents .

    Role
    Permissions

    ( roles/ configdelivery.serviceAgent )

    Gives the Config Delivery service account permission to manage resources

    artifactregistry. dockerimages.*

    • artifactregistry. dockerimages. get
    • artifactregistry. dockerimages. list

    artifactregistry. projectsettings. get

    artifactregistry. repositories. create

    artifactregistry. repositories. downloadArtifacts

    artifactregistry. repositories. get

    artifactregistry. repositories. getIamPolicy

    artifactregistry. repositories. list

    artifactregistry. repositories. listEffectiveTags

    artifactregistry. repositories. listTagBindings

    artifactregistry. repositories. setIamPolicy

    artifactregistry. repositories. uploadArtifacts

    artifactregistry.tags.*

    • artifactregistry.tags.create
    • artifactregistry.tags.delete
    • artifactregistry.tags.get
    • artifactregistry.tags.list
    • artifactregistry.tags.update

    artifactregistry. versions. delete

    artifactregistry.versions.get

    artifactregistry.versions.list

    cloudbuild.builds.create

    cloudbuild.builds.get

    cloudbuild.builds.list

    cloudbuild.builds.update

    cloudbuild.repositories.get

    container. customResourceDefinitions. get

    container. customResourceDefinitions. list

    container.serviceAccounts.get

    container.serviceAccounts.list

    container.thirdPartyObjects.*

    • container. thirdPartyObjects. create
    • container. thirdPartyObjects. delete
    • container. thirdPartyObjects. get
    • container. thirdPartyObjects. list
    • container. thirdPartyObjects. update

    gkehub.gateway.delete

    gkehub. gateway. generateCredentials

    gkehub.gateway.get

    gkehub.gateway.patch

    gkehub.gateway.post

    gkehub.gateway.put

    gkehub.memberships.get

    iam.serviceAccounts.actAs

    Config Delivery permissions

    Permission Included in roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Configdelivery Admin ( roles/ configdelivery.admin )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Configdelivery Admin ( roles/ configdelivery.admin )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Configdelivery Admin ( roles/ configdelivery.admin )

    Configdelivery Viewer ( roles/ configdelivery.viewer )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    ConfigDelivery Viewer ( roles/ configdelivery.configDeliveryViewer )

    Support User ( roles/ iam.supportUser )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Configdelivery Admin ( roles/ configdelivery.admin )

    Configdelivery Viewer ( roles/ configdelivery.viewer )

    Security Admin ( roles/ iam.securityAdmin )

    Security Reviewer ( roles/ iam.securityReviewer )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    ConfigDelivery Viewer ( roles/ configdelivery.configDeliveryViewer )

    Security Auditor ( roles/ iam.securityAuditor )

    Support User ( roles/ iam.supportUser )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Configdelivery Admin ( roles/ configdelivery.admin )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Configdelivery Admin ( roles/ configdelivery.admin )

    Configdelivery Viewer ( roles/ configdelivery.viewer )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    ConfigDelivery Viewer ( roles/ configdelivery.configDeliveryViewer )

    Config Delivery Resource Bundle Publisher ( roles/ configdelivery.resourceBundlePublisher )

    Support User ( roles/ iam.supportUser )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Configdelivery Admin ( roles/ configdelivery.admin )

    Configdelivery Viewer ( roles/ configdelivery.viewer )

    Security Admin ( roles/ iam.securityAdmin )

    Security Reviewer ( roles/ iam.securityReviewer )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    ConfigDelivery Viewer ( roles/ configdelivery.configDeliveryViewer )

    Config Delivery Resource Bundle Publisher ( roles/ configdelivery.resourceBundlePublisher )

    Security Auditor ( roles/ iam.securityAuditor )

    Support User ( roles/ iam.supportUser )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Configdelivery Admin ( roles/ configdelivery.admin )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Configdelivery Admin ( roles/ configdelivery.admin )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Configdelivery Admin ( roles/ configdelivery.admin )

    Configdelivery Viewer ( roles/ configdelivery.viewer )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    ConfigDelivery Viewer ( roles/ configdelivery.configDeliveryViewer )

    Config Delivery Resource Bundle Publisher ( roles/ configdelivery.resourceBundlePublisher )

    Support User ( roles/ iam.supportUser )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Configdelivery Admin ( roles/ configdelivery.admin )

    Configdelivery Viewer ( roles/ configdelivery.viewer )

    Security Admin ( roles/ iam.securityAdmin )

    Security Reviewer ( roles/ iam.securityReviewer )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    ConfigDelivery Viewer ( roles/ configdelivery.configDeliveryViewer )

    Config Delivery Resource Bundle Publisher ( roles/ configdelivery.resourceBundlePublisher )

    Security Auditor ( roles/ iam.securityAuditor )

    Support User ( roles/ iam.supportUser )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Configdelivery Admin ( roles/ configdelivery.admin )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    Config Delivery Resource Bundle Publisher ( roles/ configdelivery.resourceBundlePublisher )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Configdelivery Admin ( roles/ configdelivery.admin )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Configdelivery Admin ( roles/ configdelivery.admin )

    Configdelivery Viewer ( roles/ configdelivery.viewer )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    ConfigDelivery Viewer ( roles/ configdelivery.configDeliveryViewer )

    Config Delivery Resource Bundle Publisher ( roles/ configdelivery.resourceBundlePublisher )

    Support User ( roles/ iam.supportUser )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Configdelivery Admin ( roles/ configdelivery.admin )

    Configdelivery Viewer ( roles/ configdelivery.viewer )

    Security Admin ( roles/ iam.securityAdmin )

    Security Reviewer ( roles/ iam.securityReviewer )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    ConfigDelivery Viewer ( roles/ configdelivery.configDeliveryViewer )

    Config Delivery Resource Bundle Publisher ( roles/ configdelivery.resourceBundlePublisher )

    Security Auditor ( roles/ iam.securityAuditor )

    Support User ( roles/ iam.supportUser )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Configdelivery Admin ( roles/ configdelivery.admin )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    Config Delivery Resource Bundle Publisher ( roles/ configdelivery.resourceBundlePublisher )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Configdelivery Admin ( roles/ configdelivery.admin )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    Config Delivery Resource Bundle Publisher ( roles/ configdelivery.resourceBundlePublisher )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Configdelivery Admin ( roles/ configdelivery.admin )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Configdelivery Admin ( roles/ configdelivery.admin )

    Configdelivery Viewer ( roles/ configdelivery.viewer )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    ConfigDelivery Viewer ( roles/ configdelivery.configDeliveryViewer )

    Config Delivery Resource Bundle Publisher ( roles/ configdelivery.resourceBundlePublisher )

    Support User ( roles/ iam.supportUser )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Configdelivery Admin ( roles/ configdelivery.admin )

    Configdelivery Viewer ( roles/ configdelivery.viewer )

    Security Admin ( roles/ iam.securityAdmin )

    Security Reviewer ( roles/ iam.securityReviewer )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    ConfigDelivery Viewer ( roles/ configdelivery.configDeliveryViewer )

    Config Delivery Resource Bundle Publisher ( roles/ configdelivery.resourceBundlePublisher )

    Security Auditor ( roles/ iam.securityAuditor )

    Support User ( roles/ iam.supportUser )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Configdelivery Admin ( roles/ configdelivery.admin )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    Config Delivery Resource Bundle Publisher ( roles/ configdelivery.resourceBundlePublisher )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Configdelivery Admin ( roles/ configdelivery.admin )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Configdelivery Admin ( roles/ configdelivery.admin )

    Configdelivery Viewer ( roles/ configdelivery.viewer )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    ConfigDelivery Viewer ( roles/ configdelivery.configDeliveryViewer )

    Support User ( roles/ iam.supportUser )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Configdelivery Admin ( roles/ configdelivery.admin )

    Configdelivery Viewer ( roles/ configdelivery.viewer )

    Security Admin ( roles/ iam.securityAdmin )

    Security Reviewer ( roles/ iam.securityReviewer )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    ConfigDelivery Viewer ( roles/ configdelivery.configDeliveryViewer )

    Security Auditor ( roles/ iam.securityAuditor )

    Support User ( roles/ iam.supportUser )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Configdelivery Admin ( roles/ configdelivery.admin )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Configdelivery Admin ( roles/ configdelivery.admin )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Configdelivery Admin ( roles/ configdelivery.admin )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    Config Delivery Resource Bundle Publisher ( roles/ configdelivery.resourceBundlePublisher )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Configdelivery Admin ( roles/ configdelivery.admin )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Configdelivery Admin ( roles/ configdelivery.admin )

    Configdelivery Viewer ( roles/ configdelivery.viewer )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    ConfigDelivery Viewer ( roles/ configdelivery.configDeliveryViewer )

    Config Delivery Resource Bundle Publisher ( roles/ configdelivery.resourceBundlePublisher )

    Support User ( roles/ iam.supportUser )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Configdelivery Admin ( roles/ configdelivery.admin )

    Configdelivery Viewer ( roles/ configdelivery.viewer )

    Security Admin ( roles/ iam.securityAdmin )

    Security Reviewer ( roles/ iam.securityReviewer )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    ConfigDelivery Viewer ( roles/ configdelivery.configDeliveryViewer )

    Config Delivery Resource Bundle Publisher ( roles/ configdelivery.resourceBundlePublisher )

    Security Auditor ( roles/ iam.securityAuditor )

    Support User ( roles/ iam.supportUser )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Configdelivery Admin ( roles/ configdelivery.admin )

    ConfigDelivery Admin ( roles/ configdelivery.configDeliveryAdmin )

    Config Delivery Resource Bundle Publisher ( roles/ configdelivery.resourceBundlePublisher )
    Create a Mobile Website
    View Site in Mobile | Classic
    Share by: