This page lists the IAM roles and permissions for Agent Registry. To search through all roles and permissions, see the role and permission index .
Agent Registry roles
Agent Registry API Admin Beta
( roles/
)
Full access to Agent Registry API resources.
agentregistry.*
-
agentregistry.agents.get -
agentregistry.agents.list -
agentregistry.endpoints.get -
agentregistry.endpoints.list -
agentregistry.locations.get -
agentregistry.locations.list -
agentregistry.mcpServers.get -
agentregistry.mcpServers.list -
agentregistry.operations. cancel -
agentregistry.operations. delete -
agentregistry.operations.get -
agentregistry.operations.list -
agentregistry.services.create -
agentregistry.services.delete -
agentregistry.services.get -
agentregistry.services.list -
agentregistry.services.update
Agent Registry API Editor Beta
( roles/
)
Edit access to Agent Registry API resources.
agentregistry.*
-
agentregistry.agents.get -
agentregistry.agents.list -
agentregistry.endpoints.get -
agentregistry.endpoints.list -
agentregistry.locations.get -
agentregistry.locations.list -
agentregistry.mcpServers.get -
agentregistry.mcpServers.list -
agentregistry.operations. cancel -
agentregistry.operations. delete -
agentregistry.operations.get -
agentregistry.operations.list -
agentregistry.services.create -
agentregistry.services.delete -
agentregistry.services.get -
agentregistry.services.list -
agentregistry.services.update
Agent Registry API Viewer Beta
( roles/
)
Readonly access to Agent Registry API resources.
agentregistry.agents.*
-
agentregistry.agents.get -
agentregistry.agents.list
agentregistry.endpoints.*
-
agentregistry.endpoints.get -
agentregistry.endpoints.list
agentregistry.locations.*
-
agentregistry.locations.get -
agentregistry.locations.list
agentregistry.mcpServers.*
-
agentregistry.mcpServers.get -
agentregistry.mcpServers.list
agentregistry.operations.get
agentregistry.operations.list
agentregistry.services.get
agentregistry.services.list
Agent Registry permissions
agentregistry.agents.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Agent Registry API Admin
( roles/
)
Agent Registry API Editor
( roles/
)
Agent Registry API Viewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Discovery Engine Service Agent
(
roles/)discoveryengine.serviceAgent
agentregistry.agents.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Agent Registry API Admin
( roles/
)
Agent Registry API Editor
( roles/
)
Agent Registry API Viewer
( roles/
)
Security Admin
( roles/
)
Security Reviewer
( roles/
)
Security Auditor
( roles/
)
Support User
( roles/
)
Service agent roles
- Discovery Engine Service Agent
(
roles/)discoveryengine.serviceAgent
agentregistry.endpoints.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Agent Registry API Admin
( roles/
)
Agent Registry API Editor
( roles/
)
Agent Registry API Viewer
( roles/
)
Support User
( roles/
)
agentregistry.endpoints.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Agent Registry API Admin
( roles/
)
Agent Registry API Editor
( roles/
)
Agent Registry API Viewer
( roles/
)
Security Admin
( roles/
)
Security Reviewer
( roles/
)
Security Auditor
( roles/
)
Support User
( roles/
)
agentregistry.locations.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Agent Registry API Admin
( roles/
)
Agent Registry API Editor
( roles/
)
Agent Registry API Viewer
( roles/
)
Support User
( roles/
)
agentregistry.locations.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Agent Registry API Admin
( roles/
)
Agent Registry API Editor
( roles/
)
Agent Registry API Viewer
( roles/
)
Security Admin
( roles/
)
Security Reviewer
( roles/
)
Security Auditor
( roles/
)
Support User
( roles/
)
agentregistry.mcpServers.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Agent Registry API Admin
( roles/
)
Agent Registry API Editor
( roles/
)
Agent Registry API Viewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Discovery Engine Service Agent
(
roles/)discoveryengine.serviceAgent
agentregistry.mcpServers.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Agent Registry API Admin
( roles/
)
Agent Registry API Editor
( roles/
)
Agent Registry API Viewer
( roles/
)
Security Admin
( roles/
)
Security Reviewer
( roles/
)
Security Auditor
( roles/
)
Support User
( roles/
)
Service agent roles
- Discovery Engine Service Agent
(
roles/)discoveryengine.serviceAgent
agentregistry.
Owner
( roles/
)
Editor
( roles/
)
Agent Registry API Admin
( roles/
)
Agent Registry API Editor
( roles/
)
agentregistry.
Owner
( roles/
)
Editor
( roles/
)
Agent Registry API Admin
( roles/
)
Agent Registry API Editor
( roles/
)
agentregistry.operations.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Agent Registry API Admin
( roles/
)
Agent Registry API Editor
( roles/
)
Agent Registry API Viewer
( roles/
)
Support User
( roles/
)
agentregistry.operations.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Agent Registry API Admin
( roles/
)
Agent Registry API Editor
( roles/
)
Agent Registry API Viewer
( roles/
)
Security Admin
( roles/
)
Security Reviewer
( roles/
)
Security Auditor
( roles/
)
Support User
( roles/
)
agentregistry.services.create
Owner
( roles/
)
Editor
( roles/
)
Agent Registry API Admin
( roles/
)
Agent Registry API Editor
( roles/
)
agentregistry.services.delete
Owner
( roles/
)
Editor
( roles/
)
Agent Registry API Admin
( roles/
)
Agent Registry API Editor
( roles/
)
agentregistry.services.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Agent Registry API Admin
( roles/
)
Agent Registry API Editor
( roles/
)
Agent Registry API Viewer
( roles/
)
Support User
( roles/
)
agentregistry.services.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Agent Registry API Admin
( roles/
)
Agent Registry API Editor
( roles/
)
Agent Registry API Viewer
( roles/
)
Security Admin
( roles/
)
Security Reviewer
( roles/
)
Security Auditor
( roles/
)
Support User
( roles/
)
agentregistry.services.update
Owner
( roles/
)
Editor
( roles/
)
Agent Registry API Admin
( roles/
)
Agent Registry API Editor
( roles/
)
