Console
    Start free

    SaaS Service Management roles and permissions

    This page lists the IAM roles and permissions for SaaS Service Management. To search through all roles and permissions, see the role and permission index .

    SaaS Service Management roles

    Role
    Permissions

    ( roles/ saasservicemgmt.admin )

    Provide full access to all SaaS Service Management resources.

    resourcemanager.projects.get

    resourcemanager.projects.list

    saasservicemgmt.*

    • saasservicemgmt.locations.get
    • saasservicemgmt.locations.list
    • saasservicemgmt. operations. cancel
    • saasservicemgmt. operations. delete
    • saasservicemgmt.operations.get
    • saasservicemgmt. operations. list
    • saasservicemgmt. releases. create
    • saasservicemgmt. releases. delete
    • saasservicemgmt.releases.get
    • saasservicemgmt.releases.list
    • saasservicemgmt. releases. update
    • saasservicemgmt. rolloutKinds. create
    • saasservicemgmt. rolloutKinds. delete
    • saasservicemgmt. rolloutKinds. get
    • saasservicemgmt. rolloutKinds. list
    • saasservicemgmt. rolloutKinds. update
    • saasservicemgmt. rollouts. create
    • saasservicemgmt. rollouts. delete
    • saasservicemgmt.rollouts.get
    • saasservicemgmt.rollouts.list
    • saasservicemgmt. rollouts. update
    • saasservicemgmt.saas.create
    • saasservicemgmt.saas.delete
    • saasservicemgmt.saas.get
    • saasservicemgmt.saas.list
    • saasservicemgmt.saas.update
    • saasservicemgmt.tenants.create
    • saasservicemgmt.tenants.delete
    • saasservicemgmt.tenants.get
    • saasservicemgmt.tenants.list
    • saasservicemgmt.tenants.update
    • saasservicemgmt. unitKinds. create
    • saasservicemgmt. unitKinds. delete
    • saasservicemgmt.unitKinds.get
    • saasservicemgmt.unitKinds.list
    • saasservicemgmt. unitKinds. update
    • saasservicemgmt. unitOperations. create
    • saasservicemgmt. unitOperations. delete
    • saasservicemgmt. unitOperations. get
    • saasservicemgmt. unitOperations. list
    • saasservicemgmt. unitOperations. update
    • saasservicemgmt.units.create
    • saasservicemgmt.units.delete
    • saasservicemgmt.units.get
    • saasservicemgmt.units.list
    • saasservicemgmt.units.update

    ( roles/ saasservicemgmt.serviceAgent )

    Service Agent used by SaaS Service Management.

    apphub.applications.create

    apphub.applications.get

    apphub.discoveredServices.list

    apphub. discoveredServices. register

    apphub. discoveredWorkloads. list

    apphub. discoveredWorkloads. register

    apphub.operations.get

    apphub.services.create

    apphub.workloads.create

    artifactregistry. repositories. create

    artifactregistry. repositories. downloadArtifacts

    artifactregistry. repositories. get

    artifactregistry. repositories. uploadArtifacts

    config.deployments.create

    config.deployments.delete

    config.deployments.get

    config.deployments.getState

    config.deployments.update

    config.operations.get

    config.revisions.get

    designcenter. applicationTemplateRevisions. get

    designcenter. applicationTemplates. get

    designcenter. applicationTemplates. update

    designcenter.locations.get

    designcenter.operations.get

    monitoring. metricDescriptors. create

    monitoring.timeSeries.create

    saasservicemgmt.locations.*

    • saasservicemgmt.locations.get
    • saasservicemgmt.locations.list

    saasservicemgmt.operations.get

    saasservicemgmt. operations. list

    saasservicemgmt. releases. create

    saasservicemgmt.releases.get

    saasservicemgmt.releases.list

    saasservicemgmt. releases. update

    saasservicemgmt.rolloutKinds.*

    • saasservicemgmt. rolloutKinds. create
    • saasservicemgmt. rolloutKinds. delete
    • saasservicemgmt. rolloutKinds. get
    • saasservicemgmt. rolloutKinds. list
    • saasservicemgmt. rolloutKinds. update

    saasservicemgmt.rollouts.*

    • saasservicemgmt. rollouts. create
    • saasservicemgmt. rollouts. delete
    • saasservicemgmt.rollouts.get
    • saasservicemgmt.rollouts.list
    • saasservicemgmt. rollouts. update

    saasservicemgmt.saas.create

    saasservicemgmt.saas.get

    saasservicemgmt.saas.list

    saasservicemgmt.saas.update

    saasservicemgmt.tenants.*

    • saasservicemgmt.tenants.create
    • saasservicemgmt.tenants.delete
    • saasservicemgmt.tenants.get
    • saasservicemgmt.tenants.list
    • saasservicemgmt.tenants.update

    saasservicemgmt. unitKinds. create

    saasservicemgmt.unitKinds.get

    saasservicemgmt.unitKinds.list

    saasservicemgmt. unitKinds. update

    saasservicemgmt. unitOperations.*

    • saasservicemgmt. unitOperations. create
    • saasservicemgmt. unitOperations. delete
    • saasservicemgmt. unitOperations. get
    • saasservicemgmt. unitOperations. list
    • saasservicemgmt. unitOperations. update

    saasservicemgmt.units.*

    • saasservicemgmt.units.create
    • saasservicemgmt.units.delete
    • saasservicemgmt.units.get
    • saasservicemgmt.units.list
    • saasservicemgmt.units.update

    storage.buckets.create

    storage.buckets.delete

    storage.buckets.get

    storage.buckets.getIamPolicy

    storage.buckets.setIamPolicy

    storage.objects.create

    storage.objects.delete

    storage.objects.get

    storage.objects.list

    ( roles/ saasservicemgmt.viewer )

    Provides read-only access to SaaS Service Management resources.

    resourcemanager.projects.get

    resourcemanager.projects.list

    saasservicemgmt.locations.*

    • saasservicemgmt.locations.get
    • saasservicemgmt.locations.list

    saasservicemgmt.operations.get

    saasservicemgmt. operations. list

    saasservicemgmt.releases.get

    saasservicemgmt.releases.list

    saasservicemgmt. rolloutKinds. get

    saasservicemgmt. rolloutKinds. list

    saasservicemgmt.rollouts.get

    saasservicemgmt.rollouts.list

    saasservicemgmt.saas.get

    saasservicemgmt.saas.list

    saasservicemgmt.tenants.get

    saasservicemgmt.tenants.list

    saasservicemgmt.unitKinds.get

    saasservicemgmt.unitKinds.list

    saasservicemgmt. unitOperations. get

    saasservicemgmt. unitOperations. list

    saasservicemgmt.units.get

    saasservicemgmt.units.list

    SaaS Service Management permissions

    Permission
    Included in roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Support User ( roles/ iam.supportUser )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    SaaS Service Management Viewer ( roles/ saasservicemgmt.viewer )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Security Admin ( roles/ iam.securityAdmin )

    Security Auditor ( roles/ iam.securityAuditor )

    Security Reviewer ( roles/ iam.securityReviewer )

    Support User ( roles/ iam.supportUser )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    SaaS Service Management Viewer ( roles/ saasservicemgmt.viewer )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Support User ( roles/ iam.supportUser )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    SaaS Service Management Viewer ( roles/ saasservicemgmt.viewer )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Security Admin ( roles/ iam.securityAdmin )

    Security Auditor ( roles/ iam.securityAuditor )

    Security Reviewer ( roles/ iam.securityReviewer )

    Support User ( roles/ iam.supportUser )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    SaaS Service Management Viewer ( roles/ saasservicemgmt.viewer )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Support User ( roles/ iam.supportUser )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    SaaS Service Management Viewer ( roles/ saasservicemgmt.viewer )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Security Admin ( roles/ iam.securityAdmin )

    Security Auditor ( roles/ iam.securityAuditor )

    Security Reviewer ( roles/ iam.securityReviewer )

    Support User ( roles/ iam.supportUser )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    SaaS Service Management Viewer ( roles/ saasservicemgmt.viewer )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Support User ( roles/ iam.supportUser )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    SaaS Service Management Viewer ( roles/ saasservicemgmt.viewer )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Security Admin ( roles/ iam.securityAdmin )

    Security Auditor ( roles/ iam.securityAuditor )

    Security Reviewer ( roles/ iam.securityReviewer )

    Support User ( roles/ iam.supportUser )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    SaaS Service Management Viewer ( roles/ saasservicemgmt.viewer )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Support User ( roles/ iam.supportUser )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    SaaS Service Management Viewer ( roles/ saasservicemgmt.viewer )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Security Admin ( roles/ iam.securityAdmin )

    Security Auditor ( roles/ iam.securityAuditor )

    Security Reviewer ( roles/ iam.securityReviewer )

    Support User ( roles/ iam.supportUser )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    SaaS Service Management Viewer ( roles/ saasservicemgmt.viewer )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Support User ( roles/ iam.supportUser )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    SaaS Service Management Viewer ( roles/ saasservicemgmt.viewer )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Security Admin ( roles/ iam.securityAdmin )

    Security Auditor ( roles/ iam.securityAuditor )

    Security Reviewer ( roles/ iam.securityReviewer )

    Support User ( roles/ iam.supportUser )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    SaaS Service Management Viewer ( roles/ saasservicemgmt.viewer )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Support User ( roles/ iam.supportUser )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    SaaS Service Management Viewer ( roles/ saasservicemgmt.viewer )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Security Admin ( roles/ iam.securityAdmin )

    Security Auditor ( roles/ iam.securityAuditor )

    Security Reviewer ( roles/ iam.securityReviewer )

    Support User ( roles/ iam.supportUser )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    SaaS Service Management Viewer ( roles/ saasservicemgmt.viewer )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Support User ( roles/ iam.supportUser )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    SaaS Service Management Viewer ( roles/ saasservicemgmt.viewer )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Security Admin ( roles/ iam.securityAdmin )

    Security Auditor ( roles/ iam.securityAuditor )

    Security Reviewer ( roles/ iam.securityReviewer )

    Support User ( roles/ iam.supportUser )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    SaaS Service Management Viewer ( roles/ saasservicemgmt.viewer )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Support User ( roles/ iam.supportUser )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    SaaS Service Management Viewer ( roles/ saasservicemgmt.viewer )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Security Admin ( roles/ iam.securityAdmin )

    Security Auditor ( roles/ iam.securityAuditor )

    Security Reviewer ( roles/ iam.securityReviewer )

    Support User ( roles/ iam.supportUser )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    SaaS Service Management Viewer ( roles/ saasservicemgmt.viewer )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Support User ( roles/ iam.supportUser )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    SaaS Service Management Viewer ( roles/ saasservicemgmt.viewer )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Security Admin ( roles/ iam.securityAdmin )

    Security Auditor ( roles/ iam.securityAuditor )

    Security Reviewer ( roles/ iam.securityReviewer )

    Support User ( roles/ iam.supportUser )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    SaaS Service Management Viewer ( roles/ saasservicemgmt.viewer )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    SaaS Service Management Admin ( roles/ saasservicemgmt.admin )

    Service agent roles

    Create a Mobile Website
    View Site in Mobile | Classic
    Share by: