Send feedback
Service Management roles and permissions Stay organized with collections
Save and categorize content based on your preferences.
This page lists the IAM roles and permissions for Service Management. To
search through all roles and permissions, see the role and
permission index
.
Service Management roles
Service Management Administrator
( roles/ servicemanagement.admin )
Full control of Google Service Management resources.
monitoring.timeSeries.list
resourcemanager.folders.get
resourcemanager.folders.list
resourcemanager. organizations. get
resourcemanager.projects.get
resourcemanager.projects.list
serviceconsumermanagement.*
serviceconsumermanagement. consumers. get
serviceconsumermanagement. quota. get
serviceconsumermanagement. quota. update
serviceconsumermanagement. tenancyu. addResource
serviceconsumermanagement. tenancyu. create
serviceconsumermanagement. tenancyu. delete
serviceconsumermanagement. tenancyu. list
serviceconsumermanagement. tenancyu. removeResource
servicemanagement.*
servicemanagement. services. bind
servicemanagement. services. check
servicemanagement. services. create
servicemanagement. services. delete
servicemanagement.services.get
servicemanagement. services. getIamPolicy
servicemanagement. services. list
servicemanagement. services. quota
servicemanagement. services. report
servicemanagement. services. setIamPolicy
servicemanagement. services. update
serviceusage.quotas.get
serviceusage.services.get
Service Checker
( roles/ servicemanagement.checker )
Can check admission of a service during runtime.
servicemanagement. services. check
Service Config Editor
( roles/ servicemanagement.configEditor )
Access to update the service config and create rollouts.
servicemanagement.services.get
servicemanagement. services. update
Quota Administrator Beta
( roles/ servicemanagement.quotaAdmin )
Provides access to administer service quotas.
Lowest-level resources where you can grant this role:
cloudquotas.*
cloudquotas.quotas.get
cloudquotas.quotas.update
monitoring.alertPolicies.*
monitoring. alertPolicies. create
monitoring. alertPolicies. createTagBinding
monitoring. alertPolicies. delete
monitoring. alertPolicies. deleteTagBinding
monitoring.alertPolicies.get
monitoring.alertPolicies.list
monitoring. alertPolicies. listEffectiveTags
monitoring. alertPolicies. listTagBindings
monitoring. alertPolicies. update
monitoring.timeSeries.list
resourcemanager. organizations. get
resourcemanager.projects.get
resourcemanager.projects.list
serviceusage.quotas.*
serviceusage.quotas.get
serviceusage.quotas.update
serviceusage.services.disable
serviceusage.services.enable
serviceusage.services.get
serviceusage.services.list
Quota Viewer Beta
( roles/ servicemanagement.quotaViewer )
Provides access to view service quotas.
Lowest-level resources where you can grant this role:
cloudquotas.quotas.get
monitoring.timeSeries.list
serviceusage.quotas.get
serviceusage.services.get
serviceusage.services.list
Service Reporter
( roles/ servicemanagement.reporter )
Can report usage of a service during runtime.
servicemanagement. services. report
Service Consumer
( roles/ servicemanagement.serviceConsumer )
Can enable the service.
servicemanagement. services. bind
Service Controller
( roles/ servicemanagement.serviceController )
Can check preconditions and report usage of a service during runtime.
Lowest-level resources where you can grant this role:
servicemanagement. services. check
servicemanagement.services.get
servicemanagement. services. quota
servicemanagement. services. report
Service Management permissions
Permission
Included in roles
servicemanagement. services. bind
servicemanagement. services. check
servicemanagement. services. create
servicemanagement. services. delete
servicemanagement.services.get
servicemanagement. services. getIamPolicy
servicemanagement. services. list
servicemanagement. services. quota
servicemanagement. services. report
servicemanagement. services. setIamPolicy
servicemanagement. services. update
Send feedback
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License
, and code samples are licensed under the Apache 2.0 License
. For details, see the Google Developers Site Policies
. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-09-04 UTC.
Need to tell us more?
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[],[],null,["# Service Management roles and permissions\n\nThis page lists the IAM roles and permissions for Service Management. To\nsearch through all roles and permissions, see the [role and\npermission index](/iam/docs/roles-permissions).\n\nService Management roles\n------------------------\n\nService Management permissions\n------------------------------"]]
