This page lists the IAM roles and permissions for Cloud Commerce Consumer Procurement. To search through all roles and permissions, see the role and permission index .
Cloud Commerce Consumer Procurement roles
Consumer Procurement Entitlement Manager
( roles/
)
Allows managing entitlements and enabling, disabling, and inspecting service states for a consumer project.
commerceoffercatalog.
consumerprocurement.
consumerprocurement.
consumerprocurement.
consumerprocurement.
consumerprocurement.
-
consumerprocurement.entitlements. get -
consumerprocurement.entitlements. list
consumerprocurement.
-
consumerprocurement.freeTrials. create -
consumerprocurement.freeTrials. get -
consumerprocurement.freeTrials. list
orgpolicy.policy.get
resourcemanager.projects.get
resourcemanager.projects.list
serviceusage.consumerpolicy.*
-
serviceusage.consumerpolicy. analyze -
serviceusage.consumerpolicy. get -
serviceusage.consumerpolicy. update
serviceusage.
serviceusage.groups.*
-
serviceusage.groups.list -
serviceusage.groups. listExpandedMembers -
serviceusage.groups. listMembers
serviceusage.operations.get
serviceusage.services.disable
serviceusage.services.enable
serviceusage.services.get
serviceusage.services.list
serviceusage.values.test
Consumer Procurement Entitlement Viewer
( roles/
)
Allows inspecting entitlements and service states for a consumer project.
commerceoffercatalog.
consumerprocurement.
consumerprocurement.
consumerprocurement.
-
consumerprocurement.entitlements. get -
consumerprocurement.entitlements. list
consumerprocurement.
consumerprocurement.
orgpolicy.policy.get
resourcemanager.projects.get
resourcemanager.projects.list
serviceusage.
serviceusage.
serviceusage.
serviceusage.groups.*
-
serviceusage.groups.list -
serviceusage.groups. listExpandedMembers -
serviceusage.groups. listMembers
serviceusage.services.get
serviceusage.services.list
serviceusage.values.test
Consumer Procurement Events Viewer
( roles/
)
Allows viewing key events for an offer
consumerprocurement.events.*
-
consumerprocurement.events.get -
consumerprocurement.events. list
Consumer Procurement License Pool Editor
( roles/
)
Allows managing license pools and license assignments.
consumerprocurement.
-
consumerprocurement.licensePools. assign -
consumerprocurement.licensePools. enumerateLicensedUsers -
consumerprocurement.licensePools. get -
consumerprocurement.licensePools. unassign -
consumerprocurement.licensePools. update
Consumer Procurement License Pool Viewer
( roles/
)
Allows viewing license pools and license assignments.
consumerprocurement.
consumerprocurement.
Consumer Procurement Order Administrator
( roles/
)
Allows managing purchases.
billing.accounts.get
billing.accounts.getIamPolicy
billing.accounts.list
billing.
billing.credits.list
billing.
commerceoffercatalog.*
-
commerceoffercatalog.agreements. get -
commerceoffercatalog.agreements. list -
commerceoffercatalog.documents. get -
commerceoffercatalog.documents. list -
commerceoffercatalog.offers. get
consumerprocurement.accounts.*
-
consumerprocurement.accounts. create -
consumerprocurement.accounts. delete -
consumerprocurement.accounts. get -
consumerprocurement.accounts. list
consumerprocurement.
consumerprocurement.
consumerprocurement.
consumerprocurement.
consumerprocurement.events.*
-
consumerprocurement.events.get -
consumerprocurement.events. list
consumerprocurement.
-
consumerprocurement.licensePools. assign -
consumerprocurement.licensePools. enumerateLicensedUsers -
consumerprocurement.licensePools. get -
consumerprocurement.licensePools. unassign -
consumerprocurement.licensePools. update
consumerprocurement.
-
consumerprocurement.orderAttributions. get -
consumerprocurement.orderAttributions. list -
consumerprocurement.orderAttributions. update
consumerprocurement.orders.*
-
consumerprocurement.orders. cancel -
consumerprocurement.orders.get -
consumerprocurement.orders. list -
consumerprocurement.orders. modify -
consumerprocurement.orders. place
discoveryengine.
-
discoveryengine.billingAccountLicenseConfigs. distribute -
discoveryengine.billingAccountLicenseConfigs. get -
discoveryengine.billingAccountLicenseConfigs. list -
discoveryengine.billingAccountLicenseConfigs. retract
Consumer Procurement Order Viewer
( roles/
)
Allows inspecting purchases.
billing.accounts.get
billing.accounts.getIamPolicy
billing.accounts.list
billing.credits.list
commerceoffercatalog.*
-
commerceoffercatalog.agreements. get -
commerceoffercatalog.agreements. list -
commerceoffercatalog.documents. get -
commerceoffercatalog.documents. list -
commerceoffercatalog.offers. get
consumerprocurement.
consumerprocurement.
consumerprocurement.
consumerprocurement.
consumerprocurement.
consumerprocurement.
consumerprocurement.
consumerprocurement.
consumerprocurement.orders.get
consumerprocurement.
discoveryengine.
discoveryengine.
Consumer Procurement Administrator
( roles/
)
Allows managing purchases, consents at both billing account and project level.
billing.accounts.get
billing.accounts.getIamPolicy
billing.accounts.list
billing.
billing.credits.list
billing.
commerceoffercatalog.*
-
commerceoffercatalog.agreements. get -
commerceoffercatalog.agreements. list -
commerceoffercatalog.documents. get -
commerceoffercatalog.documents. list -
commerceoffercatalog.offers. get
consumerprocurement.*
-
consumerprocurement.accounts. create -
consumerprocurement.accounts. delete -
consumerprocurement.accounts. get -
consumerprocurement.accounts. list -
consumerprocurement.consents. allowProjectGrant -
consumerprocurement.consents. check -
consumerprocurement.consents. grant -
consumerprocurement.consents. list -
consumerprocurement.consents. revoke -
consumerprocurement.entitlements. get -
consumerprocurement.entitlements. list -
consumerprocurement.events.get -
consumerprocurement.events. list -
consumerprocurement.freeTrials. create -
consumerprocurement.freeTrials. get -
consumerprocurement.freeTrials. list -
consumerprocurement.licensePools. assign -
consumerprocurement.licensePools. enumerateLicensedUsers -
consumerprocurement.licensePools. get -
consumerprocurement.licensePools. unassign -
consumerprocurement.licensePools. update -
consumerprocurement.orderAttributions. get -
consumerprocurement.orderAttributions. list -
consumerprocurement.orderAttributions. update -
consumerprocurement.orders. cancel -
consumerprocurement.orders.get -
consumerprocurement.orders. list -
consumerprocurement.orders. modify -
consumerprocurement.orders. place
discoveryengine.
-
discoveryengine.billingAccountLicenseConfigs. distribute -
discoveryengine.billingAccountLicenseConfigs. get -
discoveryengine.billingAccountLicenseConfigs. list -
discoveryengine.billingAccountLicenseConfigs. retract
orgpolicy.policy.get
resourcemanager.projects.get
resourcemanager.projects.list
serviceusage.consumerpolicy.*
-
serviceusage.consumerpolicy. analyze -
serviceusage.consumerpolicy. get -
serviceusage.consumerpolicy. update
serviceusage.
serviceusage.groups.*
-
serviceusage.groups.list -
serviceusage.groups. listExpandedMembers -
serviceusage.groups. listMembers
serviceusage.operations.get
serviceusage.services.disable
serviceusage.services.enable
serviceusage.services.get
serviceusage.services.list
serviceusage.values.test
Consumer Procurement Viewer
( roles/
)
Allows inspecting purchases, consents and entitlements and service states for a consumer project.
billing.accounts.get
billing.accounts.getIamPolicy
billing.accounts.list
billing.credits.list
commerceoffercatalog.*
-
commerceoffercatalog.agreements. get -
commerceoffercatalog.agreements. list -
commerceoffercatalog.documents. get -
commerceoffercatalog.documents. list -
commerceoffercatalog.offers. get
consumerprocurement.
consumerprocurement.
consumerprocurement.
consumerprocurement.
consumerprocurement.
-
consumerprocurement.entitlements. get -
consumerprocurement.entitlements. list
consumerprocurement.
consumerprocurement.
consumerprocurement.
consumerprocurement.
consumerprocurement.
consumerprocurement.
consumerprocurement.orders.get
consumerprocurement.
discoveryengine.
discoveryengine.
orgpolicy.policy.get
resourcemanager.projects.get
resourcemanager.projects.list
serviceusage.
serviceusage.
serviceusage.
serviceusage.groups.*
-
serviceusage.groups.list -
serviceusage.groups. listExpandedMembers -
serviceusage.groups. listMembers
serviceusage.services.get
serviceusage.services.list
serviceusage.values.test
Cloud Commerce Consumer Procurement permissions
consumerprocurement.
Owner
( roles/
)
Editor
( roles/
)
Billing Account Administrator
( roles/
)
Consumer Procurement Order Administrator
( roles/
)
Consumer Procurement Administrator
( roles/
)
consumerprocurement.
Owner
( roles/
)
Editor
( roles/
)
Billing Account Administrator
( roles/
)
Consumer Procurement Order Administrator
( roles/
)
Consumer Procurement Administrator
( roles/
)
consumerprocurement.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Billing Account Administrator
( roles/
)
Account Hierarchy Manager
( roles/
)
Billing Account Viewer
( roles/
)
Consumer Procurement Order Administrator
( roles/
)
Consumer Procurement Order Viewer
( roles/
)
Consumer Procurement Administrator
( roles/
)
Consumer Procurement Viewer
( roles/
)
Support User
( roles/
)
consumerprocurement.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Billing Account Administrator
( roles/
)
Account Hierarchy Manager
( roles/
)
Billing Account Viewer
( roles/
)
Consumer Procurement Order Administrator
( roles/
)
Consumer Procurement Order Viewer
( roles/
)
Consumer Procurement Administrator
( roles/
)
Consumer Procurement Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
consumerprocurement.
Owner
( roles/
)
Consumer Procurement Administrator
( roles/
)
consumerprocurement.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Billing Account Administrator
( roles/
)
Account Hierarchy Manager
( roles/
)
Billing Account Viewer
( roles/
)
Consumer Procurement Entitlement Manager
( roles/
)
Consumer Procurement Entitlement Viewer
( roles/
)
Consumer Procurement Order Administrator
( roles/
)
Consumer Procurement Order Viewer
( roles/
)
Consumer Procurement Administrator
( roles/
)
Consumer Procurement Viewer
( roles/
)
Support User
( roles/
)
consumerprocurement.
Owner
( roles/
)
Editor
( roles/
)
Billing Account Administrator
( roles/
)
Consumer Procurement Entitlement Manager
( roles/
)
Consumer Procurement Order Administrator
( roles/
)
Consumer Procurement Administrator
( roles/
)
consumerprocurement.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Billing Account Administrator
( roles/
)
Account Hierarchy Manager
( roles/
)
Billing Account Viewer
( roles/
)
Consumer Procurement Entitlement Manager
( roles/
)
Consumer Procurement Entitlement Viewer
( roles/
)
Consumer Procurement Order Administrator
( roles/
)
Consumer Procurement Order Viewer
( roles/
)
Consumer Procurement Administrator
( roles/
)
Consumer Procurement Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
consumerprocurement.
Owner
( roles/
)
Editor
( roles/
)
Billing Account Administrator
( roles/
)
Consumer Procurement Entitlement Manager
( roles/
)
Consumer Procurement Order Administrator
( roles/
)
Consumer Procurement Administrator
( roles/
)
consumerprocurement.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Commerce Organization Governance Admin
( roles/
)
Governed Marketplace User
( roles/
)
Commerce Organization Governance Viewer
( roles/
)
Consumer Procurement Entitlement Manager
( roles/
)
Consumer Procurement Entitlement Viewer
( roles/
)
Consumer Procurement Administrator
( roles/
)
Consumer Procurement Viewer
( roles/
)
Support User
( roles/
)
consumerprocurement.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Commerce Organization Governance Admin
( roles/
)
Governed Marketplace User
( roles/
)
Commerce Organization Governance Viewer
( roles/
)
Consumer Procurement Entitlement Manager
( roles/
)
Consumer Procurement Entitlement Viewer
( roles/
)
Consumer Procurement Administrator
( roles/
)
Consumer Procurement Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Discovery Engine Service Agent
(
roles/)discoveryengine.serviceAgent
consumerprocurement.events.get
Owner
( roles/
)
Billing Account Administrator
( roles/
)
Consumer Procurement Events Viewer
( roles/
)
Consumer Procurement Order Administrator
( roles/
)
Consumer Procurement Administrator
( roles/
)
consumerprocurement.
Owner
( roles/
)
Billing Account Administrator
( roles/
)
Consumer Procurement Events Viewer
( roles/
)
Consumer Procurement Order Administrator
( roles/
)
Consumer Procurement Administrator
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
consumerprocurement.
Owner
( roles/
)
Editor
( roles/
)
Consumer Procurement Entitlement Manager
( roles/
)
Consumer Procurement Administrator
( roles/
)
consumerprocurement.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Consumer Procurement Entitlement Manager
( roles/
)
Consumer Procurement Entitlement Viewer
( roles/
)
Consumer Procurement Administrator
( roles/
)
Consumer Procurement Viewer
( roles/
)
Support User
( roles/
)
consumerprocurement.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Consumer Procurement Entitlement Manager
( roles/
)
Consumer Procurement Entitlement Viewer
( roles/
)
Consumer Procurement Administrator
( roles/
)
Consumer Procurement Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
consumerprocurement.
Owner
( roles/
)
Editor
( roles/
)
Billing Account Administrator
( roles/
)
Consumer Procurement License Pool Editor
( roles/
)
Consumer Procurement Order Administrator
( roles/
)
Consumer Procurement Administrator
( roles/
)
consumerprocurement.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Billing Account Administrator
( roles/
)
Consumer Procurement License Pool Editor
( roles/
)
Consumer Procurement License Pool Viewer
( roles/
)
Consumer Procurement Order Administrator
( roles/
)
Consumer Procurement Order Viewer
( roles/
)
Consumer Procurement Administrator
( roles/
)
Consumer Procurement Viewer
( roles/
)
Support User
( roles/
)
consumerprocurement.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Billing Account Administrator
( roles/
)
Consumer Procurement License Pool Editor
( roles/
)
Consumer Procurement License Pool Viewer
( roles/
)
Consumer Procurement Order Administrator
( roles/
)
Consumer Procurement Order Viewer
( roles/
)
Consumer Procurement Administrator
( roles/
)
Consumer Procurement Viewer
( roles/
)
Support User
( roles/
)
consumerprocurement.
Owner
( roles/
)
Editor
( roles/
)
Billing Account Administrator
( roles/
)
Consumer Procurement License Pool Editor
( roles/
)
Consumer Procurement Order Administrator
( roles/
)
Consumer Procurement Administrator
( roles/
)
consumerprocurement.
Owner
( roles/
)
Editor
( roles/
)
Billing Account Administrator
( roles/
)
Consumer Procurement License Pool Editor
( roles/
)
Consumer Procurement Order Administrator
( roles/
)
Consumer Procurement Administrator
( roles/
)
consumerprocurement.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Billing Account Administrator
( roles/
)
Account Hierarchy Manager
( roles/
)
Billing Account Viewer
( roles/
)
Consumer Procurement Order Administrator
( roles/
)
Consumer Procurement Order Viewer
( roles/
)
Consumer Procurement Administrator
( roles/
)
Consumer Procurement Viewer
( roles/
)
Support User
( roles/
)
consumerprocurement.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Billing Account Administrator
( roles/
)
Account Hierarchy Manager
( roles/
)
Billing Account Viewer
( roles/
)
Consumer Procurement Order Administrator
( roles/
)
Consumer Procurement Order Viewer
( roles/
)
Consumer Procurement Administrator
( roles/
)
Consumer Procurement Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
consumerprocurement.
Owner
( roles/
)
Editor
( roles/
)
Billing Account Administrator
( roles/
)
Consumer Procurement Order Administrator
( roles/
)
Consumer Procurement Administrator
( roles/
)
consumerprocurement.
Owner
( roles/
)
Editor
( roles/
)
Billing Account Administrator
( roles/
)
Consumer Procurement Order Administrator
( roles/
)
Consumer Procurement Administrator
( roles/
)
consumerprocurement.orders.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Billing Account Administrator
( roles/
)
Account Hierarchy Manager
( roles/
)
Billing Account Viewer
( roles/
)
Consumer Procurement Order Administrator
( roles/
)
Consumer Procurement Order Viewer
( roles/
)
Consumer Procurement Administrator
( roles/
)
Consumer Procurement Viewer
( roles/
)
Support User
( roles/
)
consumerprocurement.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Billing Account Administrator
( roles/
)
Account Hierarchy Manager
( roles/
)
Billing Account Viewer
( roles/
)
Consumer Procurement Order Administrator
( roles/
)
Consumer Procurement Order Viewer
( roles/
)
Consumer Procurement Administrator
( roles/
)
Consumer Procurement Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
consumerprocurement.
Owner
( roles/
)
Editor
( roles/
)
Billing Account Administrator
( roles/
)
Consumer Procurement Order Administrator
( roles/
)
Consumer Procurement Administrator
( roles/
)
consumerprocurement.
Owner
( roles/
)
Editor
( roles/
)
Billing Account Administrator
( roles/
)
Consumer Procurement Order Administrator
( roles/
)
Consumer Procurement Administrator
( roles/
)
