This page lists the IAM roles and permissions for App Engine flexible environment. To search through all roles and permissions, see the role and permission index .
App Engine flexible environment roles
App Engine flexible environment Service Agent
( roles/  
)
Can edit and manage App Engine Flexible Environment apps. Includes access to service accounts.
 artifactregistry.  
 artifactregistry.  
 artifactregistry.  
 artifactregistry.  
 artifactregistry.  
 billing.accounts.get 
 cloudbuild.builds.create 
 cloudbuild.builds.get 
 compute.addresses.create 
 compute.addresses.delete 
 compute.addresses.get 
 compute.addresses.list 
 compute.addresses.use 
 compute.autoscalers.create 
 compute.autoscalers.delete 
 compute.autoscalers.get 
 compute.autoscalers.update 
 compute.backendServices.create 
 compute.backendServices.delete 
 compute.backendServices.get 
 compute.backendServices.list 
 compute.backendServices.update 
 compute.backendServices.use 
 compute.disks.create 
 compute.disks.list 
 compute.firewalls.create 
 compute.firewalls.delete 
 compute.firewalls.get 
 compute.firewalls.list 
 compute.firewalls.update 
 compute.forwardingRules.create 
 compute.forwardingRules.delete 
 compute.forwardingRules.get 
 compute.globalAddresses.create 
 compute.globalAddresses.delete 
 compute.globalAddresses.get 
 compute.globalAddresses.use 
 compute.  
 compute.  
 compute.  
 compute.globalOperations.get 
 compute.healthChecks.create 
 compute.healthChecks.delete 
 compute.healthChecks.get 
 compute.healthChecks.update 
 compute.  
 compute.  
 compute.  
 compute.httpHealthChecks.get 
 compute.httpHealthChecks.use 
 compute.  
 compute.  
 compute.  
 compute.httpsHealthChecks.get 
 compute.  
 compute.httpsHealthChecks.use 
 compute.  
 compute.images.get 
 compute.images.useReadOnly 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.instanceGroups.create 
 compute.instanceGroups.delete 
 compute.instanceGroups.get 
 compute.instanceGroups.update 
 compute.instanceGroups.use 
 compute.  
 compute.  
 compute.instanceTemplates.get 
 compute.  
 compute.instances.attachDisk 
 compute.instances.create 
 compute.instances.delete 
 compute.instances.detachDisk 
 compute.instances.get 
 compute.  
 compute.  
 compute.instances.list 
 compute.instances.reset 
 compute.instances.setLabels 
 compute.instances.setMetadata 
 compute.instances.setTags 
 compute.instances.start 
 compute.instances.stop 
 compute.instances.use 
 compute.machineTypes.get 
 compute.networks.create 
 compute.networks.delete 
 compute.networks.get 
 compute.networks.updatePolicy 
 compute.networks.use 
 compute.networks.useExternalIp 
 compute.projects.get 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.regionOperations.get 
 compute.regions.get 
 compute.routes.create 
 compute.routes.delete 
 compute.routes.get 
 compute.routes.list 
 compute.subnetworks.delete 
 compute.subnetworks.get 
 compute.subnetworks.use 
 compute.  
 compute.  
 compute.  
 compute.targetHttpProxies.get 
 compute.targetHttpProxies.use 
 compute.  
 compute.  
 compute.targetHttpsProxies.get 
 compute.  
 compute.targetHttpsProxies.use 
 compute.urlMaps.create 
 compute.urlMaps.delete 
 compute.urlMaps.get 
 compute.urlMaps.update 
 compute.urlMaps.use 
 compute.zoneOperations.get 
 compute.zoneOperations.list 
  compute.zones.* 
 
-  compute.zones.get
-  compute.zones.list
 deploymentmanager.  
 deploymentmanager.  
 deploymentmanager.  
 deploymentmanager.  
 deploymentmanager.  
 deploymentmanager.  
  deploymentmanager.manifests.* 
 
-  deploymentmanager.manifests. get 
-  deploymentmanager.manifests. list 
  deploymentmanager.operations.* 
 
-  deploymentmanager.operations. get 
-  deploymentmanager.operations. list 
 deploymentmanager.  
 deploymentmanager.  
 iam.serviceAccounts.actAs 
 iam.serviceAccounts.get 
 iam.  
 iam.serviceAccounts.signBlob 
 iam.serviceAccounts.signJwt 
 logging.logEntries.create 
 logging.logMetrics.create 
 logging.logMetrics.delete 
 logging.logMetrics.get 
 logging.logMetrics.update 
 resourcemanager.  
 resourcemanager.projects.get 
 resourcemanager.  
 resourcemanager.  
 serviceusage.services.enable 
 storage.buckets.create 
 storage.buckets.delete 
 storage.buckets.get 
 storage.buckets.getIamPolicy 
 storage.buckets.setIamPolicy 
 storage.buckets.update 
 storage.objects.create 
 storage.objects.delete 
 storage.objects.get 
 storage.objects.getIamPolicy 
 storage.objects.list 
App Engine flexible environment permissions
There are no IAM permissions for this service.

