To get the permissions that you need to fully access Unified Maintenance logs in Cloud Logging, ask your administrator to grant you the following IAM roles on your project:
- Monitoring AlertPolicy Editor
(
roles/monitoring.alertPolicyEditor) - Logs Configuration Writer
(
roles/logging.configWriter) - Monitoring NotificationChannel Viewer
(
roles/monitoring.notificationChannelViewer) - Logs Viewer
(
roles/logging.viewer)
For more information about granting roles, see Manage access to projects, folders, and organizations .
These predefined roles contain the permissions required to fully access Unified Maintenance logs in Cloud Logging. To see the exact permissions that are required, expand the Required permissionssection:
Required permissions
The following permissions are required to fully access Unified Maintenance logs in Cloud Logging:
- To view logs:
Logs Viewer (roles/logging.viewer) - To view alerting policies:
Monitoring AlertPolicy Viewer (roles/monitoring.alertPolicyViewer) - To create alerting policies:
-
Logs Configuration Writer (roles/logging.configWriter) -
Monitoring AlertPolicy Editor (roles/monitoring.alertPolicyEditor)
-
- To edit alerting policies:
Monitoring AlertPolicy Editor (roles/monitoring.alertPolicyEditor) - To create an alerting policy with a notification:
Monitoring NotificationChannel Viewer (roles/monitoring.notificationChannelViewer)
You might also be able to get these permissions with custom roles or other predefined roles .

