Console
    Contact Us Start free

    Service Networking roles and permissions

    This page lists the IAM roles and permissions for Service Networking. To search through all roles and permissions, see the role and permission index .

    Service Networking roles

    Role
    Permissions

    ( roles/ servicenetworking.networksAdmin )

    Full control of service networking with projects.

    servicenetworking.*

    • servicenetworking. operations. cancel
    • servicenetworking. operations. delete
    • servicenetworking. operations. get
    • servicenetworking. operations. list
    • servicenetworking. services. addDnsRecordSet
    • servicenetworking. services. addDnsZone
    • servicenetworking. services. addPeering
    • servicenetworking. services. addSubnetwork
    • servicenetworking. services. createPeeredDnsDomain
    • servicenetworking. services. deleteConnection
    • servicenetworking. services. deletePeeredDnsDomain
    • servicenetworking. services. disableVpcServiceControls
    • servicenetworking. services. enableVpcServiceControls
    • servicenetworking.services.get
    • servicenetworking. services. getConsumerConfig
    • servicenetworking. services. listPeeredDnsDomains
    • servicenetworking. services. removeDnsRecordSet
    • servicenetworking. services. removeDnsZone
    • servicenetworking. services. updateConsumerConfig
    • servicenetworking. services. updateDnsRecordSet
    • servicenetworking.services.use

    ( roles/ servicenetworking.serviceAgent )

    Gives permission to manage network configuration, such as establishing network peering, necessary for service producers

    compute.globalAddresses.get

    compute.globalAddresses.list

    compute.globalOperations.get

    compute.networks.addPeering

    compute.networks.create

    compute.networks.delete

    compute.networks.get

    compute.networks.list

    compute. networks. listPeeringRoutes

    compute.networks.removePeering

    compute.networks.update

    compute.networks.updatePeering

    compute.networks.updatePolicy

    compute.projects.get

    compute.regionOperations.get

    compute.routers.get

    compute.routers.list

    compute.routes.list

    compute.subnetworks.create

    compute.subnetworks.delete

    compute.subnetworks.get

    compute.subnetworks.list

    dns.changes.*

    • dns.changes.create
    • dns.changes.get
    • dns.changes.list

    dns.dnsKeys.*

    • dns.dnsKeys.get
    • dns.dnsKeys.list

    dns.gkeClusters.*

    • dns. gkeClusters. bindDNSResponsePolicy
    • dns. gkeClusters. bindPrivateDNSZone

    dns.managedZoneOperations.*

    • dns.managedZoneOperations.get
    • dns.managedZoneOperations.list

    dns.managedZones.create

    dns.managedZones.delete

    dns.managedZones.get

    dns.managedZones.getIamPolicy

    dns.managedZones.list

    dns.managedZones.update

    dns.networks.*

    • dns. networks. bindDNSResponsePolicy
    • dns. networks. bindPrivateDNSPolicy
    • dns. networks. bindPrivateDNSZone
    • dns. networks. targetWithPeeringZone
    • dns.networks.useHealthSignals

    dns.policies.*

    • dns.policies.create
    • dns.policies.delete
    • dns.policies.get
    • dns.policies.list
    • dns.policies.update

    dns.projects.get

    dns.resourceRecordSets.*

    • dns.resourceRecordSets.create
    • dns.resourceRecordSets.delete
    • dns.resourceRecordSets.get
    • dns.resourceRecordSets.list
    • dns.resourceRecordSets.update

    dns.responsePolicies.*

    • dns.responsePolicies.create
    • dns.responsePolicies.delete
    • dns.responsePolicies.get
    • dns.responsePolicies.list
    • dns.responsePolicies.update

    dns.responsePolicyRules.*

    • dns.responsePolicyRules.create
    • dns.responsePolicyRules.delete
    • dns.responsePolicyRules.get
    • dns.responsePolicyRules.list
    • dns.responsePolicyRules.update

    networkconnectivity. internalRanges. list

    resourcemanager.projects.get

    resourcemanager.projects.list

    Service Networking permissions

    Permission
    Included in roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Service Networking Admin ( roles/ servicenetworking.networksAdmin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Service Networking Admin ( roles/ servicenetworking.networksAdmin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Compute Network Admin ( roles/ compute.networkAdmin )

    Infrastructure Administrator ( roles/ iam.infrastructureAdmin )

    Network Administrator ( roles/ iam.networkAdmin )

    Support User ( roles/ iam.supportUser )

    Service Networking Admin ( roles/ servicenetworking.networksAdmin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Security Admin ( roles/ iam.securityAdmin )

    Security Auditor ( roles/ iam.securityAuditor )

    Security Reviewer ( roles/ iam.securityReviewer )

    Support User ( roles/ iam.supportUser )

    Service Networking Admin ( roles/ servicenetworking.networksAdmin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Service Networking Admin ( roles/ servicenetworking.networksAdmin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Service Networking Admin ( roles/ servicenetworking.networksAdmin )

    Owner ( roles/ owner )

    Compute Network Admin ( roles/ compute.networkAdmin )

    Infrastructure Administrator ( roles/ iam.infrastructureAdmin )

    Network Administrator ( roles/ iam.networkAdmin )

    Service Networking Admin ( roles/ servicenetworking.networksAdmin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Service Networking Admin ( roles/ servicenetworking.networksAdmin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Compute Network Admin ( roles/ compute.networkAdmin )

    Infrastructure Administrator ( roles/ iam.infrastructureAdmin )

    Network Administrator ( roles/ iam.networkAdmin )

    Service Networking Admin ( roles/ servicenetworking.networksAdmin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Compute Network Admin ( roles/ compute.networkAdmin )

    Infrastructure Administrator ( roles/ iam.infrastructureAdmin )

    Network Administrator ( roles/ iam.networkAdmin )

    Service Networking Admin ( roles/ servicenetworking.networksAdmin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Compute Network Admin ( roles/ compute.networkAdmin )

    Infrastructure Administrator ( roles/ iam.infrastructureAdmin )

    Network Administrator ( roles/ iam.networkAdmin )

    Service Networking Admin ( roles/ servicenetworking.networksAdmin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Compute Network Admin ( roles/ compute.networkAdmin )

    Infrastructure Administrator ( roles/ iam.infrastructureAdmin )

    Network Administrator ( roles/ iam.networkAdmin )

    Service Networking Admin ( roles/ servicenetworking.networksAdmin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Compute Network Admin ( roles/ compute.networkAdmin )

    Infrastructure Administrator ( roles/ iam.infrastructureAdmin )

    Network Administrator ( roles/ iam.networkAdmin )

    Service Networking Admin ( roles/ servicenetworking.networksAdmin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Compute Network Admin ( roles/ compute.networkAdmin )

    Compute Network User ( roles/ compute.networkUser )

    Compute Network Viewer ( roles/ compute.networkViewer )

    Infrastructure Administrator ( roles/ iam.infrastructureAdmin )

    Network Administrator ( roles/ iam.networkAdmin )

    Security Auditor ( roles/ iam.securityAuditor )

    Support User ( roles/ iam.supportUser )

    Service Networking Admin ( roles/ servicenetworking.networksAdmin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Support User ( roles/ iam.supportUser )

    Service Networking Admin ( roles/ servicenetworking.networksAdmin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Compute Network Admin ( roles/ compute.networkAdmin )

    Infrastructure Administrator ( roles/ iam.infrastructureAdmin )

    Network Administrator ( roles/ iam.networkAdmin )

    Support User ( roles/ iam.supportUser )

    Service Networking Admin ( roles/ servicenetworking.networksAdmin )

    Service agent roles

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Service Networking Admin ( roles/ servicenetworking.networksAdmin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Service Networking Admin ( roles/ servicenetworking.networksAdmin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Service Networking Admin ( roles/ servicenetworking.networksAdmin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Service Networking Admin ( roles/ servicenetworking.networksAdmin )

    Owner ( roles/ owner )

    Editor ( roles/ editor )

    Viewer ( roles/ viewer )

    Support User ( roles/ iam.supportUser )

    Service Networking Admin ( roles/ servicenetworking.networksAdmin )
    Design a Mobile Site
    View Site in Mobile | Classic
    Share by: