Container Security roles and permissions

This page lists the IAM roles and permissions for Container Security. To search through all roles and permissions, see the role and permission index .

Container Security roles

Role

Permissions

Containersecurity Admin ^Beta

( roles/ containersecurity.admin )

Admin role for containersecurity

container.clusters.list

containersecurity.*

containersecurity. clusterSummaries. list
containersecurity. findings. list
containersecurity. locations. get
containersecurity. locations. list

resourcemanager.projects.get

resourcemanager.projects.list

GKE Security Posture Viewer ^Beta

( roles/ containersecurity.viewer )

Read-only access to GKE Security Posture resources.

container.clusters.list

containersecurity.*

containersecurity. clusterSummaries. list
containersecurity. findings. list
containersecurity. locations. get
containersecurity. locations. list

resourcemanager.projects.get

resourcemanager.projects.list

Container Security permissions

Permission	Included in roles
`containersecurity. clusterSummaries. list`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Containersecurity Admin ( `roles/ containersecurity.admin` ) GKE Security Posture Viewer ( `roles/ containersecurity.viewer` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Security Auditor ( `roles/ iam.securityAuditor` )
`containersecurity. findings. list`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Containersecurity Admin ( `roles/ containersecurity.admin` ) GKE Security Posture Viewer ( `roles/ containersecurity.viewer` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Security Auditor ( `roles/ iam.securityAuditor` )
`containersecurity. locations. get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Containersecurity Admin ( `roles/ containersecurity.admin` ) GKE Security Posture Viewer ( `roles/ containersecurity.viewer` ) Support User ( `roles/ iam.supportUser` )
`containersecurity. locations. list`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Containersecurity Admin ( `roles/ containersecurity.admin` ) GKE Security Posture Viewer ( `roles/ containersecurity.viewer` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Security Auditor ( `roles/ iam.securityAuditor` ) Support User ( `roles/ iam.supportUser` )

Container Security roles and permissions