This page lists the IAM roles and permissions for Multi-Cluster Service Discovery. To search through all roles and permissions, see the role and permission index .
Multi-Cluster Service Discovery roles
Multi-Cluster Service Discovery Service Agent
( roles/
)
Gives the Multi-Cluster Service Discovery service access to Cloud Platform resources.
compute.backendServices.*
-
compute.
backendServices. addSignedUrlKey -
compute.backendServices.create
-
compute.
backendServices. createTagBinding -
compute.backendServices.delete
-
compute.
backendServices. deleteSignedUrlKey -
compute.
backendServices. deleteTagBinding -
compute.backendServices.get
-
compute.
backendServices. getIamPolicy -
compute.backendServices.list
-
compute.
backendServices. listEffectiveTags -
compute.
backendServices. listTagBindings -
compute.
backendServices. setIamPolicy -
compute.
backendServices. setSecurityPolicy -
compute.backendServices.update
-
compute.backendServices.use
compute.firewalls.*
-
compute.firewalls.create
-
compute.
firewalls. createTagBinding -
compute.firewalls.delete
-
compute.
firewalls. deleteTagBinding -
compute.firewalls.get
-
compute.firewalls.list
-
compute.
firewalls. listEffectiveTags -
compute.
firewalls. listTagBindings -
compute.firewalls.update
compute.forwardingRules.*
-
compute.forwardingRules.create
-
compute.
forwardingRules. createTagBinding -
compute.forwardingRules.delete
-
compute.
forwardingRules. deleteTagBinding -
compute.forwardingRules.get
-
compute.forwardingRules.list
-
compute.
forwardingRules. listEffectiveTags -
compute.
forwardingRules. listTagBindings -
compute.
forwardingRules. pscCreate -
compute.
forwardingRules. pscDelete -
compute.
forwardingRules. pscSetLabels -
compute.
forwardingRules. pscUpdate -
compute.
forwardingRules. setLabels -
compute.
forwardingRules. setTarget -
compute.forwardingRules.update
-
compute.forwardingRules.use
compute.
-
compute.
globalForwardingRules. create -
compute.
globalForwardingRules. createTagBinding -
compute.
globalForwardingRules. delete -
compute.
globalForwardingRules. deleteTagBinding -
compute.
globalForwardingRules. get -
compute.
globalForwardingRules. list -
compute.
globalForwardingRules. listEffectiveTags -
compute.
globalForwardingRules. listTagBindings -
compute.
globalForwardingRules. pscCreate -
compute.
globalForwardingRules. pscDelete -
compute.
globalForwardingRules. pscSetLabels -
compute.
globalForwardingRules. pscUpdate -
compute.
globalForwardingRules. setLabels -
compute.
globalForwardingRules. setTarget -
compute.
globalForwardingRules. update
compute.globalOperations.get
compute.healthChecks.*
-
compute.healthChecks.create
-
compute.
healthChecks. createTagBinding -
compute.healthChecks.delete
-
compute.
healthChecks. deleteTagBinding -
compute.healthChecks.get
-
compute.healthChecks.list
-
compute.
healthChecks. listEffectiveTags -
compute.
healthChecks. listTagBindings -
compute.healthChecks.update
-
compute.healthChecks.use
-
compute.
healthChecks. useReadOnly
compute.httpHealthChecks.*
-
compute.
httpHealthChecks. create -
compute.
httpHealthChecks. createTagBinding -
compute.
httpHealthChecks. delete -
compute.
httpHealthChecks. deleteTagBinding -
compute.httpHealthChecks.get
-
compute.httpHealthChecks.list
-
compute.
httpHealthChecks. listEffectiveTags -
compute.
httpHealthChecks. listTagBindings -
compute.
httpHealthChecks. update -
compute.httpHealthChecks.use
-
compute.
httpHealthChecks. useReadOnly
compute.httpsHealthChecks.*
-
compute.
httpsHealthChecks. create -
compute.
httpsHealthChecks. createTagBinding -
compute.
httpsHealthChecks. delete -
compute.
httpsHealthChecks. deleteTagBinding -
compute.httpsHealthChecks.get
-
compute.httpsHealthChecks.list
-
compute.
httpsHealthChecks. listEffectiveTags -
compute.
httpsHealthChecks. listTagBindings -
compute.
httpsHealthChecks. update -
compute.httpsHealthChecks.use
-
compute.
httpsHealthChecks. useReadOnly
compute.
compute.networks.get
compute.networks.list
compute.networks.updatePolicy
compute.networks.use
compute.
-
compute.
regionTargetTcpProxies. create -
compute.
regionTargetTcpProxies. createTagBinding -
compute.
regionTargetTcpProxies. delete -
compute.
regionTargetTcpProxies. deleteTagBinding -
compute.
regionTargetTcpProxies. get -
compute.
regionTargetTcpProxies. list -
compute.
regionTargetTcpProxies. listEffectiveTags -
compute.
regionTargetTcpProxies. listTagBindings -
compute.
regionTargetTcpProxies. use
compute.regions.*
-
compute.regions.get
-
compute.regions.list
compute.targetHttpProxies.*
-
compute.
targetHttpProxies. create -
compute.
targetHttpProxies. createTagBinding -
compute.
targetHttpProxies. delete -
compute.
targetHttpProxies. deleteTagBinding -
compute.targetHttpProxies.get
-
compute.targetHttpProxies.list
-
compute.
targetHttpProxies. listEffectiveTags -
compute.
targetHttpProxies. listTagBindings -
compute.
targetHttpProxies. setUrlMap -
compute.
targetHttpProxies. update -
compute.targetHttpProxies.use
compute.targetHttpsProxies.*
-
compute.
targetHttpsProxies. create -
compute.
targetHttpsProxies. createTagBinding -
compute.
targetHttpsProxies. delete -
compute.
targetHttpsProxies. deleteTagBinding -
compute.targetHttpsProxies.get
-
compute.
targetHttpsProxies. list -
compute.
targetHttpsProxies. listEffectiveTags -
compute.
targetHttpsProxies. listTagBindings -
compute.
targetHttpsProxies. setCertificateMap -
compute.
targetHttpsProxies. setQuicOverride -
compute.
targetHttpsProxies. setSslCertificates -
compute.
targetHttpsProxies. setSslPolicy -
compute.
targetHttpsProxies. setUrlMap -
compute.
targetHttpsProxies. update -
compute.targetHttpsProxies.use
compute.targetTcpProxies.*
-
compute.
targetTcpProxies. create -
compute.
targetTcpProxies. createTagBinding -
compute.
targetTcpProxies. delete -
compute.
targetTcpProxies. deleteTagBinding -
compute.targetTcpProxies.get
-
compute.targetTcpProxies.list
-
compute.
targetTcpProxies. listEffectiveTags -
compute.
targetTcpProxies. listTagBindings -
compute.
targetTcpProxies. update -
compute.targetTcpProxies.use
compute.urlMaps.*
-
compute.urlMaps.create
-
compute.
urlMaps. createTagBinding -
compute.urlMaps.delete
-
compute.
urlMaps. deleteTagBinding -
compute.urlMaps.get
-
compute.
urlMaps. invalidateCache -
compute.urlMaps.list
-
compute.
urlMaps. listEffectiveTags -
compute.
urlMaps. listTagBindings -
compute.urlMaps.update
-
compute.urlMaps.use
-
compute.urlMaps.validate
container.clusters.get
container.clusters.list
container.
container.
dns.changes.*
-
dns.changes.create
-
dns.changes.get
-
dns.changes.list
dns.dnsKeys.*
-
dns.dnsKeys.get
-
dns.dnsKeys.list
dns.gkeClusters.*
-
dns.
gkeClusters. bindDNSResponsePolicy -
dns.
gkeClusters. bindPrivateDNSZone
dns.managedZoneOperations.*
-
dns.managedZoneOperations.get
-
dns.managedZoneOperations.list
dns.managedZones.create
dns.managedZones.delete
dns.managedZones.get
dns.managedZones.getIamPolicy
dns.managedZones.list
dns.managedZones.update
dns.networks.*
-
dns.
networks. bindDNSResponsePolicy -
dns.
networks. bindPrivateDNSPolicy -
dns.
networks. bindPrivateDNSZone -
dns.
networks. targetWithPeeringZone -
dns.networks.useHealthSignals
dns.policies.*
-
dns.policies.create
-
dns.policies.delete
-
dns.policies.get
-
dns.policies.list
-
dns.policies.update
dns.projects.get
dns.resourceRecordSets.*
-
dns.resourceRecordSets.create
-
dns.resourceRecordSets.delete
-
dns.resourceRecordSets.get
-
dns.resourceRecordSets.list
-
dns.resourceRecordSets.update
dns.responsePolicies.*
-
dns.responsePolicies.create
-
dns.responsePolicies.delete
-
dns.responsePolicies.get
-
dns.responsePolicies.list
-
dns.responsePolicies.update
dns.responsePolicyRules.*
-
dns.responsePolicyRules.create
-
dns.responsePolicyRules.delete
-
dns.responsePolicyRules.get
-
dns.responsePolicyRules.list
-
dns.responsePolicyRules.update
gkehub.features.get
gkehub.gateway.delete
gkehub.
gkehub.gateway.get
gkehub.gateway.patch
gkehub.gateway.post
gkehub.gateway.put
gkehub.locations.*
-
gkehub.locations.get
-
gkehub.locations.list
gkehub.memberships.get
gkehub.memberships.list
resourcemanager.projects.get
resourcemanager.projects.list
Multi-Cluster Service Discovery permissions
There are no IAM permissions for this service.