This page describes Application Design Center roles and permissions. To control access to App Design Center, use Identity and Access Management (IAM) to assign roles to users, groups, and service accounts.
Predefined Application Design Center roles
To grant access to specific Google Cloud resources and prevent unauthorized access to other resources, assign App Design Center's predefined roles on the app-enabled folder or management project.
Use the following IAM roles to manage spaces and author templates:
- Application Design Center Admin (
roles/designcenter.admin) - Application Design Center User (
roles/designcenter.user) - Application Design Center Viewer (
roles/designcenter.viewer)
Use the following IAM roles to create application configurations and manage deployment lifecycles:
- Application Admin (
roles/designcenter.applicationAdmin) - Application Editor (
roles/designcenter.applicationEditor) - Application Viewer (
roles/designcenter.applicationViewer)
The Application Design Center Admin role includes all permissions in the other Application Design Center roles.
Application Design Center role descriptions
The following table describes App Design Center roles and their typical responsibilities.
Role
Description
Purpose
Application Design Center Admin
Create and manage all App Design Center artifacts, and delegate application control to other users.
- To manage the full lifecycle of an application.
- For platform administrators, who have administrative permissions and full visibility of the end-to-end architecture.
Application Design Center User
Create and update application templates.
- To scale the ability to create, update, or delete application templates to reduce the workload of platform administrators.
- For platform engineers, who create and manage application templates.
Application Design Center Viewer
View spaces, catalogs, templates, applications, and their attributes.
- To view App Design Center spaces, catalogs, templates, applications, and their dependencies.
- For most personnel in the organization. Grant this role who only need to view spaces, catalogs, templates, and applications.
Application Admin
Create, manage, and deploy applications, and delegate application control to other application developers.
- To manage application drafts and deployments, and attach service projects required to store individual resources.
- For administrators and developers responsible for application creation.
Application Editor
Create, manage, and deploy applications.
- To manage drafts and deployments and reduce the workload of application administrators.
- For application operators who understand deployments.
Application Viewer
View applications.
- To view templates, applications, and their dependencies.
- For most personnel in the organization. Grant this role to users who only need to view templates and application.
Application Design Center permissions
The following table lists App Design Center IAM roles and their permissions.
Application Design Center Admin
( roles/
)
Full access to Application Design Center resources.
Application Design Center User
( roles/
)
Readonly access to Application Design Center resources.
Application Design Center Viewer
( roles/
)
Readonly access to Application Design Center resources.
Application Admin
( roles/
)
Admin access to Application.
Application Editor
( roles/
)
Read and Write access to Application.
Application Viewer
( roles/
)
Readonly access to Application.
What's next
- Manage access to your deployment resources by granting roles to your service account .
- Organize team spaces and access controls by managing and assigning spaces .
