This page lists the IAM roles and permissions for Multi-Cluster Service Discovery. To search through all roles and permissions, see the role and permission index .
Multi-Cluster Service Discovery roles
Multi-Cluster Service Discovery Service Agent
( roles/
)
Gives the Multi-Cluster Service Discovery service access to Cloud Platform resources.
compute.backendServices.*
-
compute.backendServices. addSignedUrlKey -
compute.backendServices.create -
compute.backendServices. createTagBinding -
compute.backendServices.delete -
compute.backendServices. deleteSignedUrlKey -
compute.backendServices. deleteTagBinding -
compute.backendServices.get -
compute.backendServices. getIamPolicy -
compute.backendServices.list -
compute.backendServices. listEffectiveTags -
compute.backendServices. listTagBindings -
compute.backendServices. setIamPolicy -
compute.backendServices. setSecurityPolicy -
compute.backendServices.update -
compute.backendServices.use
compute.firewalls.*
-
compute.firewalls.create -
compute.firewalls. createTagBinding -
compute.firewalls.delete -
compute.firewalls. deleteTagBinding -
compute.firewalls.get -
compute.firewalls.list -
compute.firewalls. listEffectiveTags -
compute.firewalls. listTagBindings -
compute.firewalls.update
compute.forwardingRules.*
-
compute.forwardingRules.create -
compute.forwardingRules. createTagBinding -
compute.forwardingRules.delete -
compute.forwardingRules. deleteTagBinding -
compute.forwardingRules.get -
compute.forwardingRules.list -
compute.forwardingRules. listEffectiveTags -
compute.forwardingRules. listTagBindings -
compute.forwardingRules. pscCreate -
compute.forwardingRules. pscDelete -
compute.forwardingRules. pscSetLabels -
compute.forwardingRules. pscUpdate -
compute.forwardingRules. setLabels -
compute.forwardingRules. setTarget -
compute.forwardingRules.update -
compute.forwardingRules.use
compute.
-
compute.globalForwardingRules. create -
compute.globalForwardingRules. createTagBinding -
compute.globalForwardingRules. delete -
compute.globalForwardingRules. deleteTagBinding -
compute.globalForwardingRules. get -
compute.globalForwardingRules. list -
compute.globalForwardingRules. listEffectiveTags -
compute.globalForwardingRules. listTagBindings -
compute.globalForwardingRules. pscCreate -
compute.globalForwardingRules. pscDelete -
compute.globalForwardingRules. pscSetLabels -
compute.globalForwardingRules. pscUpdate -
compute.globalForwardingRules. setLabels -
compute.globalForwardingRules. setTarget -
compute.globalForwardingRules. update
compute.globalOperations.get
compute.healthChecks.*
-
compute.healthChecks.create -
compute.healthChecks. createTagBinding -
compute.healthChecks.delete -
compute.healthChecks. deleteTagBinding -
compute.healthChecks.get -
compute.healthChecks.list -
compute.healthChecks. listEffectiveTags -
compute.healthChecks. listTagBindings -
compute.healthChecks.update -
compute.healthChecks.use -
compute.healthChecks. useReadOnly
compute.httpHealthChecks.*
-
compute.httpHealthChecks. create -
compute.httpHealthChecks. createTagBinding -
compute.httpHealthChecks. delete -
compute.httpHealthChecks. deleteTagBinding -
compute.httpHealthChecks.get -
compute.httpHealthChecks.list -
compute.httpHealthChecks. listEffectiveTags -
compute.httpHealthChecks. listTagBindings -
compute.httpHealthChecks. update -
compute.httpHealthChecks.use -
compute.httpHealthChecks. useReadOnly
compute.httpsHealthChecks.*
-
compute.httpsHealthChecks. create -
compute.httpsHealthChecks. createTagBinding -
compute.httpsHealthChecks. delete -
compute.httpsHealthChecks. deleteTagBinding -
compute.httpsHealthChecks.get -
compute.httpsHealthChecks.list -
compute.httpsHealthChecks. listEffectiveTags -
compute.httpsHealthChecks. listTagBindings -
compute.httpsHealthChecks. update -
compute.httpsHealthChecks.use -
compute.httpsHealthChecks. useReadOnly
compute.
compute.networks.get
compute.networks.list
compute.networks.updatePolicy
compute.networks.use
compute.
-
compute.regionTargetTcpProxies. create -
compute.regionTargetTcpProxies. createTagBinding -
compute.regionTargetTcpProxies. delete -
compute.regionTargetTcpProxies. deleteTagBinding -
compute.regionTargetTcpProxies. get -
compute.regionTargetTcpProxies. list -
compute.regionTargetTcpProxies. listEffectiveTags -
compute.regionTargetTcpProxies. listTagBindings -
compute.regionTargetTcpProxies. use
compute.regions.*
-
compute.regions.get -
compute.regions.list
compute.targetHttpProxies.*
-
compute.targetHttpProxies. create -
compute.targetHttpProxies. createTagBinding -
compute.targetHttpProxies. delete -
compute.targetHttpProxies. deleteTagBinding -
compute.targetHttpProxies.get -
compute.targetHttpProxies.list -
compute.targetHttpProxies. listEffectiveTags -
compute.targetHttpProxies. listTagBindings -
compute.targetHttpProxies. setUrlMap -
compute.targetHttpProxies. update -
compute.targetHttpProxies.use
compute.targetHttpsProxies.*
-
compute.targetHttpsProxies. create -
compute.targetHttpsProxies. createTagBinding -
compute.targetHttpsProxies. delete -
compute.targetHttpsProxies. deleteTagBinding -
compute.targetHttpsProxies.get -
compute.targetHttpsProxies. list -
compute.targetHttpsProxies. listEffectiveTags -
compute.targetHttpsProxies. listTagBindings -
compute.targetHttpsProxies. setCertificateMap -
compute.targetHttpsProxies. setQuicOverride -
compute.targetHttpsProxies. setSslCertificates -
compute.targetHttpsProxies. setSslPolicy -
compute.targetHttpsProxies. setUrlMap -
compute.targetHttpsProxies. update -
compute.targetHttpsProxies.use
compute.targetTcpProxies.*
-
compute.targetTcpProxies. create -
compute.targetTcpProxies. createTagBinding -
compute.targetTcpProxies. delete -
compute.targetTcpProxies. deleteTagBinding -
compute.targetTcpProxies.get -
compute.targetTcpProxies.list -
compute.targetTcpProxies. listEffectiveTags -
compute.targetTcpProxies. listTagBindings -
compute.targetTcpProxies. update -
compute.targetTcpProxies.use
compute.urlMaps.*
-
compute.urlMaps.create -
compute.urlMaps. createTagBinding -
compute.urlMaps.delete -
compute.urlMaps. deleteTagBinding -
compute.urlMaps.get -
compute.urlMaps. invalidateCache -
compute.urlMaps.list -
compute.urlMaps. listEffectiveTags -
compute.urlMaps. listTagBindings -
compute.urlMaps.update -
compute.urlMaps.use -
compute.urlMaps.validate
container.clusters.get
container.clusters.list
container.
container.
dns.changes.*
-
dns.changes.create -
dns.changes.get -
dns.changes.list
dns.dnsKeys.*
-
dns.dnsKeys.get -
dns.dnsKeys.list
dns.gkeClusters.*
-
dns.gkeClusters. bindDNSResponsePolicy -
dns.gkeClusters. bindPrivateDNSZone
dns.managedZoneOperations.*
-
dns.managedZoneOperations.get -
dns.managedZoneOperations.list
dns.managedZones.create
dns.managedZones.delete
dns.managedZones.get
dns.managedZones.getIamPolicy
dns.managedZones.list
dns.managedZones.update
dns.networks.*
-
dns.networks. bindDNSResponsePolicy -
dns.networks. bindPrivateDNSPolicy -
dns.networks. bindPrivateDNSZone -
dns.networks. targetWithPeeringZone -
dns.networks.useHealthSignals
dns.policies.create
dns.policies.delete
dns.policies.get
dns.policies.list
dns.policies.listEffectiveTags
dns.policies.listTagBindings
dns.policies.update
dns.projects.get
dns.resourceRecordSets.*
-
dns.resourceRecordSets.create -
dns.resourceRecordSets.delete -
dns.resourceRecordSets.get -
dns.resourceRecordSets.list -
dns.resourceRecordSets.update
dns.responsePolicies.*
-
dns.responsePolicies.create -
dns.responsePolicies.delete -
dns.responsePolicies.get -
dns.responsePolicies.list -
dns.responsePolicies.update
dns.responsePolicyRules.*
-
dns.responsePolicyRules.create -
dns.responsePolicyRules.delete -
dns.responsePolicyRules.get -
dns.responsePolicyRules.list -
dns.responsePolicyRules.update
gkehub.features.get
gkehub.gateway.delete
gkehub.
gkehub.gateway.get
gkehub.gateway.patch
gkehub.gateway.post
gkehub.gateway.put
gkehub.locations.*
-
gkehub.locations.get -
gkehub.locations.list
gkehub.memberships.get
gkehub.memberships.list
resourcemanager.projects.get
resourcemanager.projects.list
Multi-Cluster Service Discovery permissions
There are no IAM permissions for this service.

