Cloud Deploy roles and permissions

This page lists the IAM roles and permissions for Cloud Deploy. To search through all roles and permissions, see the role and permission index .

Cloud Deploy roles

Role

Permissions

Cloud Deploy Admin

( roles/ clouddeploy.admin )

Full control of Cloud Deploy resources.

clouddeploy.*

clouddeploy. automationRuns. cancel
clouddeploy.automationRuns.get
clouddeploy. automationRuns. list
clouddeploy.automations.create
clouddeploy.automations.delete
clouddeploy.automations.get
clouddeploy.automations.list
clouddeploy.automations.update
clouddeploy.config.get
clouddeploy. customTargetTypes. create
clouddeploy. customTargetTypes. delete
clouddeploy. customTargetTypes. get
clouddeploy. customTargetTypes. getIamPolicy
clouddeploy. customTargetTypes. list
clouddeploy. customTargetTypes. setIamPolicy
clouddeploy. customTargetTypes. update
clouddeploy. deliveryPipelines. create
clouddeploy. deliveryPipelines. createTagBinding
clouddeploy. deliveryPipelines. delete
clouddeploy. deliveryPipelines. deleteTagBinding
clouddeploy. deliveryPipelines. get
clouddeploy. deliveryPipelines. getIamPolicy
clouddeploy. deliveryPipelines. list
clouddeploy. deliveryPipelines. listEffectiveTags
clouddeploy. deliveryPipelines. listTagBindings
clouddeploy. deliveryPipelines. setIamPolicy
clouddeploy. deliveryPipelines. update
clouddeploy. deployPolicies. create
clouddeploy. deployPolicies. delete
clouddeploy.deployPolicies.get
clouddeploy. deployPolicies. getIamPolicy
clouddeploy. deployPolicies. list
clouddeploy. deployPolicies. override
clouddeploy. deployPolicies. setIamPolicy
clouddeploy. deployPolicies. update
clouddeploy.jobRuns.get
clouddeploy.jobRuns.list
clouddeploy.jobRuns.terminate
clouddeploy.locations.get
clouddeploy.locations.list
clouddeploy.operations.cancel
clouddeploy.operations.delete
clouddeploy.operations.get
clouddeploy.operations.list
clouddeploy.releases.abandon
clouddeploy.releases.create
clouddeploy.releases.get
clouddeploy.releases.list
clouddeploy.rollouts.advance
clouddeploy.rollouts.approve
clouddeploy.rollouts.cancel
clouddeploy.rollouts.create
clouddeploy.rollouts.get
clouddeploy.rollouts.ignoreJob
clouddeploy.rollouts.list
clouddeploy.rollouts.retryJob
clouddeploy.rollouts.rollback
clouddeploy.targets.create
clouddeploy. targets. createTagBinding
clouddeploy.targets.delete
clouddeploy. targets. deleteTagBinding
clouddeploy.targets.get
clouddeploy. targets. getIamPolicy
clouddeploy.targets.list
clouddeploy. targets. listEffectiveTags
clouddeploy. targets. listTagBindings
clouddeploy. targets. setIamPolicy
clouddeploy.targets.update

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Deploy Approver

( roles/ clouddeploy.approver )

Permission to approve or reject rollouts.

clouddeploy.config.get

clouddeploy.jobRuns.get

clouddeploy.jobRuns.list

clouddeploy.locations.*

clouddeploy.locations.get
clouddeploy.locations.list

clouddeploy.operations.*

clouddeploy.operations.cancel
clouddeploy.operations.delete
clouddeploy.operations.get
clouddeploy.operations.list

clouddeploy.rollouts.approve

clouddeploy.rollouts.get

clouddeploy.rollouts.list

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Deploy Custom Target Type Admin

( roles/ clouddeploy.customTargetTypeAdmin )

Permission to manage CustomTargetType resources

clouddeploy.config.get

clouddeploy. customTargetTypes.*

clouddeploy. customTargetTypes. create
clouddeploy. customTargetTypes. delete
clouddeploy. customTargetTypes. get
clouddeploy. customTargetTypes. getIamPolicy
clouddeploy. customTargetTypes. list
clouddeploy. customTargetTypes. setIamPolicy
clouddeploy. customTargetTypes. update

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Deploy Developer

( roles/ clouddeploy.developer )

Permission to manage deployment configuration without permission to access operational resources, such as targets.

clouddeploy.automationRuns.get

clouddeploy. automationRuns. list

clouddeploy.automations.get

clouddeploy.automations.list

clouddeploy.config.get

clouddeploy. deliveryPipelines. create

clouddeploy. deliveryPipelines. createTagBinding

clouddeploy. deliveryPipelines. delete

clouddeploy. deliveryPipelines. deleteTagBinding

clouddeploy. deliveryPipelines. get

clouddeploy. deliveryPipelines. getIamPolicy

clouddeploy. deliveryPipelines. list

clouddeploy. deliveryPipelines. listEffectiveTags

clouddeploy. deliveryPipelines. listTagBindings

clouddeploy. deliveryPipelines. update

clouddeploy.deployPolicies.get

clouddeploy. deployPolicies. list

clouddeploy.jobRuns.get

clouddeploy.jobRuns.list

clouddeploy.locations.*

clouddeploy.locations.get
clouddeploy.locations.list

clouddeploy.operations.*

clouddeploy.operations.cancel
clouddeploy.operations.delete
clouddeploy.operations.get
clouddeploy.operations.list

clouddeploy.releases.*

clouddeploy.releases.abandon
clouddeploy.releases.create
clouddeploy.releases.get
clouddeploy.releases.list

clouddeploy.rollouts.get

clouddeploy.rollouts.list

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Deploy Runner

( roles/ clouddeploy.jobRunner )

Permission to execute Cloud Deploy work without permission to deliver to a target.

clouddeploy.config.get

logging.logEntries.create

storage.objects.create

storage.objects.get

storage.objects.list

Cloud Deploy Operator

( roles/ clouddeploy.operator )

Permission to manage deployment configuration.

clouddeploy.automationRuns.*

clouddeploy. automationRuns. cancel
clouddeploy.automationRuns.get
clouddeploy. automationRuns. list

clouddeploy.automations.*

clouddeploy.automations.create
clouddeploy.automations.delete
clouddeploy.automations.get
clouddeploy.automations.list
clouddeploy.automations.update

clouddeploy.config.get

clouddeploy. customTargetTypes. get

clouddeploy. customTargetTypes. getIamPolicy

clouddeploy. customTargetTypes. list

clouddeploy. deliveryPipelines. create

clouddeploy. deliveryPipelines. createTagBinding

clouddeploy. deliveryPipelines. delete

clouddeploy. deliveryPipelines. deleteTagBinding

clouddeploy. deliveryPipelines. get

clouddeploy. deliveryPipelines. getIamPolicy

clouddeploy. deliveryPipelines. list

clouddeploy. deliveryPipelines. listEffectiveTags

clouddeploy. deliveryPipelines. listTagBindings

clouddeploy. deliveryPipelines. update

clouddeploy.deployPolicies.get

clouddeploy. deployPolicies. getIamPolicy

clouddeploy. deployPolicies. list

clouddeploy.jobRuns.*

clouddeploy.jobRuns.get
clouddeploy.jobRuns.list
clouddeploy.jobRuns.terminate

clouddeploy.locations.*

clouddeploy.locations.get
clouddeploy.locations.list

clouddeploy.operations.*

clouddeploy.operations.cancel
clouddeploy.operations.delete
clouddeploy.operations.get
clouddeploy.operations.list

clouddeploy.releases.*

clouddeploy.releases.abandon
clouddeploy.releases.create
clouddeploy.releases.get
clouddeploy.releases.list

clouddeploy.rollouts.advance

clouddeploy.rollouts.cancel

clouddeploy.rollouts.create

clouddeploy.rollouts.get

clouddeploy.rollouts.ignoreJob

clouddeploy.rollouts.list

clouddeploy.rollouts.retryJob

clouddeploy.rollouts.rollback

clouddeploy.targets.create

clouddeploy. targets. createTagBinding

clouddeploy.targets.delete

clouddeploy. targets. deleteTagBinding

clouddeploy.targets.get

clouddeploy. targets. getIamPolicy

clouddeploy.targets.list

clouddeploy. targets. listEffectiveTags

clouddeploy. targets. listTagBindings

clouddeploy.targets.update

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Deploy Policy Admin

( roles/ clouddeploy.policyAdmin )

Permission to manage Deploy Policies.

clouddeploy.deployPolicies.*

clouddeploy. deployPolicies. create
clouddeploy. deployPolicies. delete
clouddeploy.deployPolicies.get
clouddeploy. deployPolicies. getIamPolicy
clouddeploy. deployPolicies. list
clouddeploy. deployPolicies. override
clouddeploy. deployPolicies. setIamPolicy
clouddeploy. deployPolicies. update

clouddeploy.locations.*

clouddeploy.locations.get
clouddeploy.locations.list

clouddeploy.operations.*

clouddeploy.operations.cancel
clouddeploy.operations.delete
clouddeploy.operations.get
clouddeploy.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Deploy Policy Overrider

( roles/ clouddeploy.policyOverrider )

Permission to override Deploy Policies.

clouddeploy.deployPolicies.get

clouddeploy. deployPolicies. list

clouddeploy. deployPolicies. override

clouddeploy.locations.*

clouddeploy.locations.get
clouddeploy.locations.list

clouddeploy.operations.*

clouddeploy.operations.cancel
clouddeploy.operations.delete
clouddeploy.operations.get
clouddeploy.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Deploy Releaser

( roles/ clouddeploy.releaser )

Permission to create Cloud Deploy releases and rollouts.

clouddeploy.config.get

clouddeploy. customTargetTypes. get

clouddeploy. deliveryPipelines. get

clouddeploy.jobRuns.get

clouddeploy.jobRuns.list

clouddeploy.locations.*

clouddeploy.locations.get
clouddeploy.locations.list

clouddeploy.operations.*

clouddeploy.operations.cancel
clouddeploy.operations.delete
clouddeploy.operations.get
clouddeploy.operations.list

clouddeploy.releases.create

clouddeploy.releases.get

clouddeploy.releases.list

clouddeploy.rollouts.advance

clouddeploy.rollouts.cancel

clouddeploy.rollouts.create

clouddeploy.rollouts.get

clouddeploy.rollouts.list

clouddeploy.rollouts.rollback

clouddeploy.targets.get

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Deploy Service Agent

( roles/ clouddeploy.serviceAgent )

Gives Cloud Deploy Service Account access to managed resources.

cloudbuild.builds.create

cloudbuild.builds.get

cloudbuild.builds.list

cloudbuild.builds.update

cloudbuild.workerpools.use

iam.serviceAccounts.actAs

iam. serviceAccounts. getAccessToken

logging.logEntries.create

pubsub.topics.get

pubsub.topics.publish

servicemanagement. services. report

serviceusage.services.use

storage.buckets.create

storage.buckets.get

storage.objects.get

Cloud Deploy Viewer

( roles/ clouddeploy.viewer )

Can view Cloud Deploy resources.

clouddeploy.automationRuns.get

clouddeploy. automationRuns. list

clouddeploy.automations.get

clouddeploy.automations.list

clouddeploy.config.get

clouddeploy. customTargetTypes. get

clouddeploy. customTargetTypes. getIamPolicy

clouddeploy. customTargetTypes. list

clouddeploy. deliveryPipelines. get

clouddeploy. deliveryPipelines. getIamPolicy

clouddeploy. deliveryPipelines. list

clouddeploy. deliveryPipelines. listEffectiveTags

clouddeploy. deliveryPipelines. listTagBindings

clouddeploy.deployPolicies.get

clouddeploy. deployPolicies. getIamPolicy

clouddeploy. deployPolicies. list

clouddeploy.jobRuns.get

clouddeploy.jobRuns.list

clouddeploy.locations.*

clouddeploy.locations.get
clouddeploy.locations.list

clouddeploy.operations.get

clouddeploy.operations.list

clouddeploy.releases.get

clouddeploy.releases.list

clouddeploy.rollouts.get

clouddeploy.rollouts.list

clouddeploy.targets.get

clouddeploy. targets. getIamPolicy

clouddeploy.targets.list

clouddeploy. targets. listEffectiveTags

clouddeploy. targets. listTagBindings

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Deploy permissions

Permission	Included in roles
`clouddeploy. automationRuns. cancel`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` )
`clouddeploy.automationRuns.get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Dev Ops ( `roles/ iam.devOps` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy. automationRuns. list`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Dev Ops ( `roles/ iam.devOps` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Auditor ( `roles/ iam.securityAuditor` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy.automations.create`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` )
`clouddeploy.automations.delete`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` )
`clouddeploy.automations.get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Dev Ops ( `roles/ iam.devOps` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy.automations.list`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Dev Ops ( `roles/ iam.devOps` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Auditor ( `roles/ iam.securityAuditor` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy.automations.update`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` )
`clouddeploy.config.get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Approver ( `roles/ clouddeploy.approver` ) Cloud Deploy Custom Target Type Admin ( `roles/ clouddeploy.customTargetTypeAdmin` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Runner ( `roles/ clouddeploy.jobRunner` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Releaser ( `roles/ clouddeploy.releaser` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Dev Ops ( `roles/ iam.devOps` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy. customTargetTypes. create`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Custom Target Type Admin ( `roles/ clouddeploy.customTargetTypeAdmin` )
`clouddeploy. customTargetTypes. delete`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Custom Target Type Admin ( `roles/ clouddeploy.customTargetTypeAdmin` )
`clouddeploy. customTargetTypes. get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Custom Target Type Admin ( `roles/ clouddeploy.customTargetTypeAdmin` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Releaser ( `roles/ clouddeploy.releaser` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy. customTargetTypes. getIamPolicy`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Custom Target Type Admin ( `roles/ clouddeploy.customTargetTypeAdmin` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Auditor ( `roles/ iam.securityAuditor` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy. customTargetTypes. list`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Custom Target Type Admin ( `roles/ clouddeploy.customTargetTypeAdmin` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Auditor ( `roles/ iam.securityAuditor` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy. customTargetTypes. setIamPolicy`	Owner ( `roles/ owner` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Custom Target Type Admin ( `roles/ clouddeploy.customTargetTypeAdmin` ) Security Admin ( `roles/ iam.securityAdmin` )
`clouddeploy. customTargetTypes. update`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Custom Target Type Admin ( `roles/ clouddeploy.customTargetTypeAdmin` )
`clouddeploy. deliveryPipelines. create`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Dev Ops ( `roles/ iam.devOps` )
`clouddeploy. deliveryPipelines. createTagBinding`	Owner ( `roles/ owner` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) DLP Organization Data Profiles Driver ( `roles/ dlp.orgdriver` ) DLP Project Data Profiles Driver ( `roles/ dlp.projectdriver` ) Dev Ops ( `roles/ iam.devOps` ) Tag User ( `roles/ resourcemanager.tagUser` )
`clouddeploy. deliveryPipelines. delete`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Dev Ops ( `roles/ iam.devOps` )
`clouddeploy. deliveryPipelines. deleteTagBinding`	Owner ( `roles/ owner` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) DLP Organization Data Profiles Driver ( `roles/ dlp.orgdriver` ) DLP Project Data Profiles Driver ( `roles/ dlp.projectdriver` ) Dev Ops ( `roles/ iam.devOps` ) Tag User ( `roles/ resourcemanager.tagUser` )
`clouddeploy. deliveryPipelines. get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Releaser ( `roles/ clouddeploy.releaser` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Dev Ops ( `roles/ iam.devOps` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy. deliveryPipelines. getIamPolicy`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Dev Ops ( `roles/ iam.devOps` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Auditor ( `roles/ iam.securityAuditor` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy. deliveryPipelines. list`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Dev Ops ( `roles/ iam.devOps` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Auditor ( `roles/ iam.securityAuditor` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy. deliveryPipelines. listEffectiveTags`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) DLP Organization Data Profiles Driver ( `roles/ dlp.orgdriver` ) DLP Project Data Profiles Driver ( `roles/ dlp.projectdriver` ) Dev Ops ( `roles/ iam.devOps` ) Security Auditor ( `roles/ iam.securityAuditor` ) Support User ( `roles/ iam.supportUser` ) Tag User ( `roles/ resourcemanager.tagUser` ) Tag Viewer ( `roles/ resourcemanager.tagViewer` )
`clouddeploy. deliveryPipelines. listTagBindings`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) DLP Organization Data Profiles Driver ( `roles/ dlp.orgdriver` ) DLP Project Data Profiles Driver ( `roles/ dlp.projectdriver` ) Dev Ops ( `roles/ iam.devOps` ) Security Auditor ( `roles/ iam.securityAuditor` ) Support User ( `roles/ iam.supportUser` ) Tag User ( `roles/ resourcemanager.tagUser` ) Tag Viewer ( `roles/ resourcemanager.tagViewer` )
`clouddeploy. deliveryPipelines. setIamPolicy`	Owner ( `roles/ owner` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Security Admin ( `roles/ iam.securityAdmin` )
`clouddeploy. deliveryPipelines. update`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Dev Ops ( `roles/ iam.devOps` )
`clouddeploy. deployPolicies. create`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Policy Admin ( `roles/ clouddeploy.policyAdmin` )
`clouddeploy. deployPolicies. delete`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Policy Admin ( `roles/ clouddeploy.policyAdmin` )
`clouddeploy.deployPolicies.get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Policy Admin ( `roles/ clouddeploy.policyAdmin` ) Cloud Deploy Policy Overrider ( `roles/ clouddeploy.policyOverrider` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Dev Ops ( `roles/ iam.devOps` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy. deployPolicies. getIamPolicy`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Policy Admin ( `roles/ clouddeploy.policyAdmin` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Auditor ( `roles/ iam.securityAuditor` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy. deployPolicies. list`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Policy Admin ( `roles/ clouddeploy.policyAdmin` ) Cloud Deploy Policy Overrider ( `roles/ clouddeploy.policyOverrider` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Dev Ops ( `roles/ iam.devOps` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Auditor ( `roles/ iam.securityAuditor` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy. deployPolicies. override`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Policy Admin ( `roles/ clouddeploy.policyAdmin` ) Cloud Deploy Policy Overrider ( `roles/ clouddeploy.policyOverrider` )
`clouddeploy. deployPolicies. setIamPolicy`	Owner ( `roles/ owner` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Policy Admin ( `roles/ clouddeploy.policyAdmin` ) Security Admin ( `roles/ iam.securityAdmin` )
`clouddeploy. deployPolicies. update`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Policy Admin ( `roles/ clouddeploy.policyAdmin` )
`clouddeploy.jobRuns.get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Approver ( `roles/ clouddeploy.approver` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Releaser ( `roles/ clouddeploy.releaser` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Dev Ops ( `roles/ iam.devOps` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy.jobRuns.list`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Approver ( `roles/ clouddeploy.approver` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Releaser ( `roles/ clouddeploy.releaser` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Dev Ops ( `roles/ iam.devOps` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Auditor ( `roles/ iam.securityAuditor` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy.jobRuns.terminate`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` )
`clouddeploy.locations.get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Approver ( `roles/ clouddeploy.approver` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Policy Admin ( `roles/ clouddeploy.policyAdmin` ) Cloud Deploy Policy Overrider ( `roles/ clouddeploy.policyOverrider` ) Cloud Deploy Releaser ( `roles/ clouddeploy.releaser` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Dev Ops ( `roles/ iam.devOps` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy.locations.list`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Approver ( `roles/ clouddeploy.approver` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Policy Admin ( `roles/ clouddeploy.policyAdmin` ) Cloud Deploy Policy Overrider ( `roles/ clouddeploy.policyOverrider` ) Cloud Deploy Releaser ( `roles/ clouddeploy.releaser` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Dev Ops ( `roles/ iam.devOps` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Auditor ( `roles/ iam.securityAuditor` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy.operations.cancel`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Approver ( `roles/ clouddeploy.approver` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Policy Admin ( `roles/ clouddeploy.policyAdmin` ) Cloud Deploy Policy Overrider ( `roles/ clouddeploy.policyOverrider` ) Cloud Deploy Releaser ( `roles/ clouddeploy.releaser` ) Dev Ops ( `roles/ iam.devOps` )
`clouddeploy.operations.delete`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Approver ( `roles/ clouddeploy.approver` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Policy Admin ( `roles/ clouddeploy.policyAdmin` ) Cloud Deploy Policy Overrider ( `roles/ clouddeploy.policyOverrider` ) Cloud Deploy Releaser ( `roles/ clouddeploy.releaser` ) Dev Ops ( `roles/ iam.devOps` )
`clouddeploy.operations.get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Approver ( `roles/ clouddeploy.approver` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Policy Admin ( `roles/ clouddeploy.policyAdmin` ) Cloud Deploy Policy Overrider ( `roles/ clouddeploy.policyOverrider` ) Cloud Deploy Releaser ( `roles/ clouddeploy.releaser` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Dev Ops ( `roles/ iam.devOps` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy.operations.list`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Approver ( `roles/ clouddeploy.approver` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Policy Admin ( `roles/ clouddeploy.policyAdmin` ) Cloud Deploy Policy Overrider ( `roles/ clouddeploy.policyOverrider` ) Cloud Deploy Releaser ( `roles/ clouddeploy.releaser` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Dev Ops ( `roles/ iam.devOps` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Auditor ( `roles/ iam.securityAuditor` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy.releases.abandon`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Dev Ops ( `roles/ iam.devOps` )
`clouddeploy.releases.create`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Releaser ( `roles/ clouddeploy.releaser` ) Dev Ops ( `roles/ iam.devOps` )
`clouddeploy.releases.get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Releaser ( `roles/ clouddeploy.releaser` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Dev Ops ( `roles/ iam.devOps` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy.releases.list`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Releaser ( `roles/ clouddeploy.releaser` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Dev Ops ( `roles/ iam.devOps` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Auditor ( `roles/ iam.securityAuditor` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy.rollouts.advance`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Releaser ( `roles/ clouddeploy.releaser` )
`clouddeploy.rollouts.approve`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Approver ( `roles/ clouddeploy.approver` )
`clouddeploy.rollouts.cancel`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Releaser ( `roles/ clouddeploy.releaser` )
`clouddeploy.rollouts.create`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Releaser ( `roles/ clouddeploy.releaser` )
`clouddeploy.rollouts.get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Approver ( `roles/ clouddeploy.approver` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Releaser ( `roles/ clouddeploy.releaser` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Dev Ops ( `roles/ iam.devOps` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy.rollouts.ignoreJob`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` )
`clouddeploy.rollouts.list`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Approver ( `roles/ clouddeploy.approver` ) Cloud Deploy Developer ( `roles/ clouddeploy.developer` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Releaser ( `roles/ clouddeploy.releaser` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Dev Ops ( `roles/ iam.devOps` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Auditor ( `roles/ iam.securityAuditor` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy.rollouts.retryJob`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` )
`clouddeploy.rollouts.rollback`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Releaser ( `roles/ clouddeploy.releaser` )
`clouddeploy.targets.create`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` )
`clouddeploy. targets. createTagBinding`	Owner ( `roles/ owner` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) DLP Organization Data Profiles Driver ( `roles/ dlp.orgdriver` ) DLP Project Data Profiles Driver ( `roles/ dlp.projectdriver` ) Tag User ( `roles/ resourcemanager.tagUser` )
`clouddeploy.targets.delete`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` )
`clouddeploy. targets. deleteTagBinding`	Owner ( `roles/ owner` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) DLP Organization Data Profiles Driver ( `roles/ dlp.orgdriver` ) DLP Project Data Profiles Driver ( `roles/ dlp.projectdriver` ) Tag User ( `roles/ resourcemanager.tagUser` )
`clouddeploy.targets.get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Releaser ( `roles/ clouddeploy.releaser` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy. targets. getIamPolicy`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Auditor ( `roles/ iam.securityAuditor` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy.targets.list`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Auditor ( `roles/ iam.securityAuditor` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Support User ( `roles/ iam.supportUser` )
`clouddeploy. targets. listEffectiveTags`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) DLP Organization Data Profiles Driver ( `roles/ dlp.orgdriver` ) DLP Project Data Profiles Driver ( `roles/ dlp.projectdriver` ) Security Auditor ( `roles/ iam.securityAuditor` ) Support User ( `roles/ iam.supportUser` ) Tag User ( `roles/ resourcemanager.tagUser` ) Tag Viewer ( `roles/ resourcemanager.tagViewer` )
`clouddeploy. targets. listTagBindings`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` ) Cloud Deploy Viewer ( `roles/ clouddeploy.viewer` ) DLP Organization Data Profiles Driver ( `roles/ dlp.orgdriver` ) DLP Project Data Profiles Driver ( `roles/ dlp.projectdriver` ) Security Auditor ( `roles/ iam.securityAuditor` ) Support User ( `roles/ iam.supportUser` ) Tag User ( `roles/ resourcemanager.tagUser` ) Tag Viewer ( `roles/ resourcemanager.tagViewer` )
`clouddeploy. targets. setIamPolicy`	Owner ( `roles/ owner` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Security Admin ( `roles/ iam.securityAdmin` )
`clouddeploy.targets.update`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Cloud Deploy Admin ( `roles/ clouddeploy.admin` ) Cloud Deploy Operator ( `roles/ clouddeploy.operator` )

Cloud Deploy roles and permissions