This page lists the IAM roles and permissions for App Engine flexible environment. To search through all roles and permissions, see the role and permission index .
App Engine flexible environment roles
App Engine flexible environment Service Agent
( roles/
)
Can edit and manage App Engine Flexible Environment apps. Includes access to service accounts.
artifactregistry.
artifactregistry.
artifactregistry.
artifactregistry.
artifactregistry.
billing.accounts.get
cloudbuild.builds.create
cloudbuild.builds.get
compute.addresses.create
compute.addresses.delete
compute.addresses.get
compute.addresses.list
compute.addresses.use
compute.autoscalers.create
compute.autoscalers.delete
compute.autoscalers.get
compute.autoscalers.update
compute.backendServices.create
compute.backendServices.delete
compute.backendServices.get
compute.backendServices.list
compute.backendServices.update
compute.backendServices.use
compute.disks.create
compute.disks.list
compute.firewalls.create
compute.firewalls.delete
compute.firewalls.get
compute.firewalls.list
compute.firewalls.update
compute.forwardingRules.create
compute.forwardingRules.delete
compute.forwardingRules.get
compute.globalAddresses.create
compute.globalAddresses.delete
compute.globalAddresses.get
compute.globalAddresses.use
compute.
compute.
compute.
compute.globalOperations.get
compute.healthChecks.create
compute.healthChecks.delete
compute.healthChecks.get
compute.healthChecks.update
compute.
compute.
compute.
compute.httpHealthChecks.get
compute.httpHealthChecks.use
compute.
compute.
compute.
compute.httpsHealthChecks.get
compute.
compute.httpsHealthChecks.use
compute.
compute.images.get
compute.images.useReadOnly
compute.
compute.
compute.
compute.
compute.
compute.instanceGroups.create
compute.instanceGroups.delete
compute.instanceGroups.get
compute.instanceGroups.update
compute.instanceGroups.use
compute.
compute.
compute.instanceTemplates.get
compute.
compute.instances.attachDisk
compute.instances.create
compute.instances.delete
compute.instances.detachDisk
compute.instances.get
compute.
compute.
compute.instances.list
compute.instances.reset
compute.instances.setLabels
compute.instances.setMetadata
compute.instances.setTags
compute.instances.start
compute.instances.stop
compute.instances.use
compute.machineTypes.get
compute.networks.create
compute.networks.delete
compute.networks.get
compute.networks.updatePolicy
compute.networks.use
compute.networks.useExternalIp
compute.projects.get
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.regionOperations.get
compute.regions.get
compute.routes.create
compute.routes.delete
compute.routes.get
compute.routes.list
compute.subnetworks.delete
compute.subnetworks.get
compute.subnetworks.use
compute.
compute.
compute.
compute.targetHttpProxies.get
compute.targetHttpProxies.use
compute.
compute.
compute.targetHttpsProxies.get
compute.
compute.targetHttpsProxies.use
compute.urlMaps.create
compute.urlMaps.delete
compute.urlMaps.get
compute.urlMaps.update
compute.urlMaps.use
compute.zoneOperations.get
compute.zoneOperations.list
compute.zones.*
-
compute.zones.get
-
compute.zones.list
deploymentmanager.
deploymentmanager.
deploymentmanager.
deploymentmanager.
deploymentmanager.
deploymentmanager.
deploymentmanager.manifests.*
-
deploymentmanager.
manifests. get -
deploymentmanager.
manifests. list
deploymentmanager.operations.*
-
deploymentmanager.
operations. get -
deploymentmanager.
operations. list
deploymentmanager.
deploymentmanager.
iam.serviceAccounts.actAs
iam.serviceAccounts.get
iam.
iam.serviceAccounts.signBlob
iam.serviceAccounts.signJwt
logging.logEntries.create
logging.logMetrics.create
logging.logMetrics.delete
logging.logMetrics.get
logging.logMetrics.update
resourcemanager.
resourcemanager.projects.get
resourcemanager.
resourcemanager.
serviceusage.services.enable
storage.buckets.create
storage.buckets.delete
storage.buckets.get
storage.buckets.getIamPolicy
storage.buckets.setIamPolicy
storage.buckets.update
storage.objects.create
storage.objects.delete
storage.objects.get
storage.objects.getIamPolicy
storage.objects.list
App Engine flexible environment permissions
There are no IAM permissions for this service.