This page lists the IAM roles and permissions for API Hub. To search through all roles and permissions, see the role and permission index .
API Hub roles
Cloud API Hub Admin Beta
( roles/  
)
Full access to all API hub resources.
 apigee.  
  apihub.* 
 
-  apihub.apiHubInstances.create
-  apihub.apiHubInstances.delete
-  apihub.apiHubInstances.get
-  apihub.apiHubInstances.list
-  apihub.apiHubInstances.update
-  apihub.apiOperations.create
-  apihub.apiOperations.delete
-  apihub.apiOperations.get
-  apihub.apiOperations.list
-  apihub.apiOperations.update
-  apihub.apis.create
-  apihub.apis.createTagBinding
-  apihub.apis.delete
-  apihub.apis.deleteTagBinding
-  apihub.apis.get
-  apihub.apis.list
-  apihub.apis.listEffectiveTags
-  apihub.apis.listTagBindings
-  apihub.apis.update
-  apihub.attributes.create
-  apihub.attributes.delete
-  apihub.attributes.get
-  apihub.attributes.list
-  apihub.attributes.update
-  apihub.curations.create
-  apihub.curations.delete
-  apihub.curations.get
-  apihub.curations.list
-  apihub.curations.update
-  apihub.definitions.get
-  apihub.definitions.list
-  apihub.definitions.update
-  apihub.dependencies.create
-  apihub.dependencies.delete
-  apihub.dependencies.get
-  apihub.dependencies.list
-  apihub.dependencies.update
-  apihub.deployments.create
-  apihub.deployments. createTagBinding 
-  apihub.deployments.delete
-  apihub.deployments. deleteTagBinding 
-  apihub.deployments.get
-  apihub.deployments.list
-  apihub.deployments. listEffectiveTags 
-  apihub.deployments. listTagBindings 
-  apihub.deployments.update
-  apihub.discoveredApiObservations. get 
-  apihub.discoveredApiObservations. list 
-  apihub.discoveredApiOperations. get 
-  apihub.discoveredApiOperations. list 
-  apihub.externalApis.create
-  apihub.externalApis.delete
-  apihub.externalApis.get
-  apihub.externalApis.list
-  apihub.externalApis.update
-  apihub.hostProjectRegistrations. create 
-  apihub.hostProjectRegistrations. delete 
-  apihub.hostProjectRegistrations. get 
-  apihub.hostProjectRegistrations. list 
-  apihub.hostProjectRegistrations. register 
-  apihub.llmEnablements. deregister 
-  apihub.llmEnablements.get
-  apihub.llmEnablements.list
-  apihub.llmEnablements.register
-  apihub.locations. collectApiData 
-  apihub.locations. getApiInsights 
-  apihub.locations. searchResources 
-  apihub.locations2. searchResources 
-  apihub.operations.cancel
-  apihub.operations.delete
-  apihub.operations.get
-  apihub.operations.list
-  apihub.plugininstances. applyConfig 
-  apihub.plugininstances.create
-  apihub.plugininstances.delete
-  apihub.plugininstances.disable
-  apihub.plugininstances.enable
-  apihub.plugininstances.execute
-  apihub.plugininstances.get
-  apihub.plugininstances.list
-  apihub.plugininstances. managePluginInstanceSourceData 
-  apihub.plugininstances.update
-  apihub.plugins.create
-  apihub.plugins.delete
-  apihub.plugins.disable
-  apihub.plugins.enable
-  apihub.plugins.get
-  apihub.plugins.list
-  apihub.runTimeProjectAttachments. attach 
-  apihub.runTimeProjectAttachments. create 
-  apihub.runTimeProjectAttachments. delete 
-  apihub.runTimeProjectAttachments. get 
-  apihub.runTimeProjectAttachments. list 
-  apihub.runTimeProjectAttachments. lookup 
-  apihub.specs.create
-  apihub.specs.delete
-  apihub.specs.get
-  apihub.specs.lint
-  apihub.specs.list
-  apihub.specs.update
-  apihub.styleGuides.get
-  apihub.styleGuides.update
-  apihub.versions.create
-  apihub.versions.delete
-  apihub.versions.get
-  apihub.versions.list
-  apihub.versions.update
 monitoring.dashboards.get 
 monitoring.dashboards.list 
 monitoring.  
 monitoring.  
  monitoring.  
 
-  monitoring.monitoredResourceDescriptors. get 
-  monitoring.monitoredResourceDescriptors. list 
 resourcemanager.projects.get 
 resourcemanager.projects.list 
Cloud API hub Insights Viewer Beta
( roles/  
)
View API hub insights dashboards.
 apigee.  
 apihub.apiHubInstances.get 
 apihub.apiHubInstances.list 
 apihub.apis.get 
 apihub.apis.list 
 apihub.deployments.get 
 apihub.deployments.list 
 apihub.  
 apihub.plugininstances.get 
 apihub.plugininstances.list 
 monitoring.dashboards.get 
 monitoring.dashboards.list 
 monitoring.  
 monitoring.  
  monitoring.  
 
-  monitoring.monitoredResourceDescriptors. get 
-  monitoring.monitoredResourceDescriptors. list 
Cloud API hub Attributes Admin Beta
( roles/  
)
Full access to all Cloud API hub attribute's resources.
  apihub.attributes.* 
 
-  apihub.attributes.create
-  apihub.attributes.delete
-  apihub.attributes.get
-  apihub.attributes.list
-  apihub.attributes.update
 resourcemanager.projects.get 
 resourcemanager.projects.list 
Cloud API Hub Editor Beta
( roles/  
)
Edit access to most of Cloud API Hub resources.
 apihub.apiHubInstances.get 
 apihub.apiHubInstances.list 
  apihub.apiOperations.* 
 
-  apihub.apiOperations.create
-  apihub.apiOperations.delete
-  apihub.apiOperations.get
-  apihub.apiOperations.list
-  apihub.apiOperations.update
  apihub.apis.* 
 
-  apihub.apis.create
-  apihub.apis.createTagBinding
-  apihub.apis.delete
-  apihub.apis.deleteTagBinding
-  apihub.apis.get
-  apihub.apis.list
-  apihub.apis.listEffectiveTags
-  apihub.apis.listTagBindings
-  apihub.apis.update
 apihub.attributes.get 
 apihub.attributes.list 
 apihub.curations.get 
 apihub.curations.list 
  apihub.definitions.* 
 
-  apihub.definitions.get
-  apihub.definitions.list
-  apihub.definitions.update
  apihub.dependencies.* 
 
-  apihub.dependencies.create
-  apihub.dependencies.delete
-  apihub.dependencies.get
-  apihub.dependencies.list
-  apihub.dependencies.update
  apihub.deployments.* 
 
-  apihub.deployments.create
-  apihub.deployments. createTagBinding 
-  apihub.deployments.delete
-  apihub.deployments. deleteTagBinding 
-  apihub.deployments.get
-  apihub.deployments.list
-  apihub.deployments. listEffectiveTags 
-  apihub.deployments. listTagBindings 
-  apihub.deployments.update
  apihub.  
 
-  apihub.discoveredApiObservations. get 
-  apihub.discoveredApiObservations. list 
  apihub.  
 
-  apihub.discoveredApiOperations. get 
-  apihub.discoveredApiOperations. list 
  apihub.externalApis.* 
 
-  apihub.externalApis.create
-  apihub.externalApis.delete
-  apihub.externalApis.get
-  apihub.externalApis.list
-  apihub.externalApis.update
 apihub.  
 apihub.  
  apihub.llmEnablements.* 
 
-  apihub.llmEnablements. deregister 
-  apihub.llmEnablements.get
-  apihub.llmEnablements.list
-  apihub.llmEnablements.register
 apihub.  
 apihub.  
 apihub.operations.get 
 apihub.operations.list 
 apihub.plugininstances.get 
 apihub.plugininstances.list 
 apihub.plugins.get 
 apihub.plugins.list 
 apihub.  
 apihub.  
  apihub.specs.* 
 
-  apihub.specs.create
-  apihub.specs.delete
-  apihub.specs.get
-  apihub.specs.lint
-  apihub.specs.list
-  apihub.specs.update
 apihub.styleGuides.get 
  apihub.versions.* 
 
-  apihub.versions.create
-  apihub.versions.delete
-  apihub.versions.get
-  apihub.versions.list
-  apihub.versions.update
 resourcemanager.projects.get 
 resourcemanager.projects.list 
Cloud API hub Plugins Admin Beta
( roles/  
)
Full access to all Cloud API hub plugin's resources.
  apihub.curations.* 
 
-  apihub.curations.create
-  apihub.curations.delete
-  apihub.curations.get
-  apihub.curations.list
-  apihub.curations.update
 apihub.  
  apihub.operations.* 
 
-  apihub.operations.cancel
-  apihub.operations.delete
-  apihub.operations.get
-  apihub.operations.list
  apihub.plugininstances.* 
 
-  apihub.plugininstances. applyConfig 
-  apihub.plugininstances.create
-  apihub.plugininstances.delete
-  apihub.plugininstances.disable
-  apihub.plugininstances.enable
-  apihub.plugininstances.execute
-  apihub.plugininstances.get
-  apihub.plugininstances.list
-  apihub.plugininstances. managePluginInstanceSourceData 
-  apihub.plugininstances.update
  apihub.plugins.* 
 
-  apihub.plugins.create
-  apihub.plugins.delete
-  apihub.plugins.disable
-  apihub.plugins.enable
-  apihub.plugins.get
-  apihub.plugins.list
 apihub.specs.lint 
  apihub.styleGuides.* 
 
-  apihub.styleGuides.get
-  apihub.styleGuides.update
 resourcemanager.projects.get 
 resourcemanager.projects.list 
Cloud API hub Provisioning Admin Beta
( roles/  
)
Full access to Cloud API hub provisioning related resources.
  apihub.apiHubInstances.* 
 
-  apihub.apiHubInstances.create
-  apihub.apiHubInstances.delete
-  apihub.apiHubInstances.get
-  apihub.apiHubInstances.list
-  apihub.apiHubInstances.update
  apihub.  
 
-  apihub.hostProjectRegistrations. create 
-  apihub.hostProjectRegistrations. delete 
-  apihub.hostProjectRegistrations. get 
-  apihub.hostProjectRegistrations. list 
-  apihub.hostProjectRegistrations. register 
  apihub.operations.* 
 
-  apihub.operations.cancel
-  apihub.operations.delete
-  apihub.operations.get
-  apihub.operations.list
  apihub.  
 
-  apihub.runTimeProjectAttachments. attach 
-  apihub.runTimeProjectAttachments. create 
-  apihub.runTimeProjectAttachments. delete 
-  apihub.runTimeProjectAttachments. get 
-  apihub.runTimeProjectAttachments. list 
-  apihub.runTimeProjectAttachments. lookup 
 resourcemanager.projects.get 
 resourcemanager.projects.list 
Cloud API hub Runtime Project Attachment Editor Beta
( roles/  
)
Access to add/delete project as a runtime project attachment to API hub host project.
 apihub.  
API-Hub Runtime Project Service Agent
( roles/  
)
Gives API-Hub Service Account access to runtime project resources.
 apigee.deployments.list 
 apigee.  
 apigee.envgroups.list 
 apigee.environments.get 
 apigee.organizations.create 
 apigee.organizations.delete 
 apigee.organizations.get 
 apigee.organizations.update 
 apigee.proxies.get 
 apigee.proxyrevisions.get 
 apihub.apiOperations.delete 
 apihub.apiOperations.list 
 apihub.apis.create 
 apihub.apis.delete 
 apihub.apis.list 
 apihub.apis.update 
 apihub.attributes.create 
 apihub.attributes.list 
 apihub.attributes.update 
 apihub.curations.list 
 apihub.definitions.list 
 apihub.dependencies.delete 
 apihub.dependencies.list 
 apihub.deployments.create 
 apihub.deployments.delete 
 apihub.deployments.list 
 apihub.deployments.update 
 apihub.externalApis.list 
 apihub.  
 apihub.operations.get 
 apihub.operations.list 
 apihub.plugininstances.create 
 apihub.plugininstances.delete 
 apihub.plugininstances.list 
 apihub.plugins.create 
 apihub.plugins.delete 
 apihub.plugins.list 
 apihub.  
 apihub.specs.create 
 apihub.specs.delete 
 apihub.specs.list 
 apihub.specs.update 
 apihub.versions.create 
 apihub.versions.delete 
 apihub.versions.list 
 apihub.versions.update 
Cloud API hub Viewer Beta
( roles/  
)
View access to all Cloud API hub resources.
 apihub.apiHubInstances.get 
 apihub.apiHubInstances.list 
 apihub.apiOperations.get 
 apihub.apiOperations.list 
 apihub.apis.get 
 apihub.apis.list 
 apihub.apis.listEffectiveTags 
 apihub.apis.listTagBindings 
 apihub.attributes.get 
 apihub.attributes.list 
 apihub.curations.get 
 apihub.curations.list 
 apihub.definitions.get 
 apihub.definitions.list 
 apihub.dependencies.get 
 apihub.dependencies.list 
 apihub.deployments.get 
 apihub.deployments.list 
 apihub.  
 apihub.  
  apihub.  
 
-  apihub.discoveredApiObservations. get 
-  apihub.discoveredApiObservations. list 
  apihub.  
 
-  apihub.discoveredApiOperations. get 
-  apihub.discoveredApiOperations. list 
 apihub.externalApis.get 
 apihub.externalApis.list 
 apihub.  
 apihub.  
 apihub.llmEnablements.get 
 apihub.llmEnablements.list 
 apihub.  
 apihub.operations.get 
 apihub.operations.list 
 apihub.plugininstances.get 
 apihub.plugininstances.list 
 apihub.plugins.get 
 apihub.plugins.list 
 apihub.  
 apihub.  
 apihub.specs.get 
 apihub.specs.list 
 apihub.styleGuides.get 
 apihub.versions.get 
 apihub.versions.list 
 resourcemanager.projects.get 
 resourcemanager.projects.list 
API Hub permissions
 apihub.apiHubInstances.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Provisioning Admin 
( roles/  
)
Service agent roles
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.apiHubInstances.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Provisioning Admin 
( roles/  
)
Service agent roles
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.apiHubInstances.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Insights Viewer 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Provisioning Admin 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.apiHubInstances.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Insights Viewer 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Provisioning Admin 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.apiHubInstances.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Provisioning Admin 
( roles/  
)
 apihub.apiOperations.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 apihub.apiOperations.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
 apihub.apiOperations.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Support User 
( roles/  
)
 apihub.apiOperations.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
 apihub.apiOperations.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 apihub.apis.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
 apihub.apis.createTagBinding 
 
 Owner 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 DLP Organization Data Profiles Driver 
( roles/  
)
 DLP Project Data Profiles Driver 
( roles/  
)
 Tag User 
( roles/  
)
 apihub.apis.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
 apihub.apis.deleteTagBinding 
 
 Owner 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 DLP Organization Data Profiles Driver 
( roles/  
)
 DLP Project Data Profiles Driver 
( roles/  
)
 Tag User 
( roles/  
)
 apihub.apis.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Insights Viewer 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Support User 
( roles/  
)
 apihub.apis.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Insights Viewer 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
 apihub.apis.listEffectiveTags 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 DLP Organization Data Profiles Driver 
( roles/  
)
 DLP Project Data Profiles Driver 
( roles/  
)
 Security Auditor 
( roles/  
)
 Support User 
( roles/  
)
 Tag User 
( roles/  
)
 Tag Viewer 
( roles/  
)
 apihub.apis.listTagBindings 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 DLP Organization Data Profiles Driver 
( roles/  
)
 DLP Project Data Profiles Driver 
( roles/  
)
 Security Auditor 
( roles/  
)
 Support User 
( roles/  
)
 Tag User 
( roles/  
)
 Tag Viewer 
( roles/  
)
 apihub.apis.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
 apihub.attributes.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Attributes Admin 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
 apihub.attributes.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Attributes Admin 
( roles/  
)
 apihub.attributes.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Attributes Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Support User 
( roles/  
)
 apihub.attributes.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Attributes Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
 apihub.attributes.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Attributes Admin 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
 apihub.curations.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
 apihub.curations.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
 apihub.curations.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Support User 
( roles/  
)
 apihub.curations.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
 apihub.curations.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
 apihub.definitions.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Support User 
( roles/  
)
 apihub.definitions.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
 apihub.definitions.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 apihub.dependencies.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 apihub.dependencies.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
 apihub.dependencies.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Support User 
( roles/  
)
 apihub.dependencies.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
 apihub.dependencies.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 apihub.deployments.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
 apihub.  
 
 Owner 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 DLP Organization Data Profiles Driver 
( roles/  
)
 DLP Project Data Profiles Driver 
( roles/  
)
 Tag User 
( roles/  
)
 apihub.deployments.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
 apihub.  
 
 Owner 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 DLP Organization Data Profiles Driver 
( roles/  
)
 DLP Project Data Profiles Driver 
( roles/  
)
 Tag User 
( roles/  
)
 apihub.deployments.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Insights Viewer 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Support User 
( roles/  
)
 apihub.deployments.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Insights Viewer 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
 apihub.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 DLP Organization Data Profiles Driver 
( roles/  
)
 DLP Project Data Profiles Driver 
( roles/  
)
 Security Auditor 
( roles/  
)
 Support User 
( roles/  
)
 Tag User 
( roles/  
)
 Tag Viewer 
( roles/  
)
 apihub.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 DLP Organization Data Profiles Driver 
( roles/  
)
 DLP Project Data Profiles Driver 
( roles/  
)
 Security Auditor 
( roles/  
)
 Support User 
( roles/  
)
 Tag User 
( roles/  
)
 Tag Viewer 
( roles/  
)
 apihub.deployments.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
 apihub.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Support User 
( roles/  
)
 apihub.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 apihub.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Support User 
( roles/  
)
 apihub.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 apihub.externalApis.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 apihub.externalApis.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 apihub.externalApis.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Support User 
( roles/  
)
 apihub.externalApis.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
 apihub.externalApis.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 apihub.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Provisioning Admin 
( roles/  
)
Service agent roles
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Provisioning Admin 
( roles/  
)
Service agent roles
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Provisioning Admin 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Provisioning Admin 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Provisioning Admin 
( roles/  
)
Service agent roles
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 apihub.llmEnablements.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Support User 
( roles/  
)
 apihub.llmEnablements.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 apihub.llmEnablements.register 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 apihub.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
 apihub.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Insights Viewer 
( roles/  
)
 Support User 
( roles/  
)
 apihub.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Support User 
( roles/  
)
 apihub.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Support User 
( roles/  
)
 apihub.operations.cancel 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
 Cloud API hub Provisioning Admin 
( roles/  
)
Service agent roles
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.operations.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
 Cloud API hub Provisioning Admin 
( roles/  
)
Service agent roles
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.operations.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
 Cloud API hub Provisioning Admin 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.operations.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
 Cloud API hub Provisioning Admin 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
Service agent roles
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.plugininstances.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.plugininstances.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.plugininstances.disable 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
Service agent roles
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.plugininstances.enable 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
Service agent roles
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.plugininstances.execute 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
Service agent roles
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.plugininstances.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Insights Viewer 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.plugininstances.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Insights Viewer 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
 apihub.plugininstances.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
Service agent roles
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.plugins.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.plugins.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.plugins.disable 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
Service agent roles
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.plugins.enable 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
Service agent roles
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.plugins.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.plugins.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Provisioning Admin 
( roles/  
)
 Cloud API hub Runtime Project Attachment Editor 
( roles/  
)
Service agent roles
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Provisioning Admin 
( roles/  
)
Service agent roles
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Provisioning Admin 
( roles/  
)
Service agent roles
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Provisioning Admin 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Provisioning Admin 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Provisioning Admin 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Apigee Service Agent 
( roles/)apigee.serviceAgent 
 apihub.specs.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
 apihub.specs.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
 apihub.specs.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Support User 
( roles/  
)
 apihub.specs.lint 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
 apihub.specs.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
 apihub.specs.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
 apihub.styleGuides.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Support User 
( roles/  
)
 apihub.styleGuides.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API hub Plugins Admin 
( roles/  
)
 apihub.versions.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
 apihub.versions.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
 apihub.versions.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Support User 
( roles/  
)
 apihub.versions.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Apigee API Admin 
( roles/  
)
 Apigee API Reader 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
 Cloud API hub Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 
 apihub.versions.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Apigee Organization Admin 
( roles/  
)
 Cloud API Hub Admin 
( roles/  
)
 Cloud API Hub Editor 
( roles/  
)
Service agent roles
-  API-Hub Runtime Project Service Agent 
( roles/)apihub.runtimeProjectServiceAgent 

