This page lists the IAM roles and permissions for Cloud Security Compliance. To search through all roles and permissions, see the role and permission index .
Cloud Security Compliance roles
Compliance Manager Admin Beta
( roles/  
)
Full access to Compliance Manager resources.
  cloudsecuritycompliance.* 
 
-  cloudsecuritycompliance.auditReports. generate 
-  cloudsecuritycompliance.auditReports. get 
-  cloudsecuritycompliance.auditReports. list 
-  cloudsecuritycompliance.auditScopeReports. generate 
-  cloudsecuritycompliance.billingSettings. get 
-  cloudsecuritycompliance.cloudControlDeployments. create 
-  cloudsecuritycompliance.cloudControlDeployments. delete 
-  cloudsecuritycompliance.cloudControlDeployments. get 
-  cloudsecuritycompliance.cloudControlDeployments. list 
-  cloudsecuritycompliance.cloudControlDeployments. update 
-  cloudsecuritycompliance.cloudControlPredictions. create 
-  cloudsecuritycompliance.cloudControlPredictions. get 
-  cloudsecuritycompliance.cloudControlPredictions. list 
-  cloudsecuritycompliance.cloudControls. create 
-  cloudsecuritycompliance.cloudControls. delete 
-  cloudsecuritycompliance.cloudControls. get 
-  cloudsecuritycompliance.cloudControls. list 
-  cloudsecuritycompliance.cloudControls. update 
-  cloudsecuritycompliance.controlComplianceSummaries. list 
-  cloudsecuritycompliance.controlReports. get 
-  cloudsecuritycompliance.controls. get 
-  cloudsecuritycompliance.controls. list 
-  cloudsecuritycompliance.findingSummaries. list 
-  cloudsecuritycompliance.findings. list 
-  cloudsecuritycompliance.frameworkComplianceReports. aggregate 
-  cloudsecuritycompliance.frameworkComplianceReports. get 
-  cloudsecuritycompliance.frameworkComplianceSummaries. list 
-  cloudsecuritycompliance.frameworkDeployments. create 
-  cloudsecuritycompliance.frameworkDeployments. delete 
-  cloudsecuritycompliance.frameworkDeployments. get 
-  cloudsecuritycompliance.frameworkDeployments. list 
-  cloudsecuritycompliance.frameworkDeployments. update 
-  cloudsecuritycompliance.frameworks. create 
-  cloudsecuritycompliance.frameworks. delete 
-  cloudsecuritycompliance.frameworks. get 
-  cloudsecuritycompliance.frameworks. list 
-  cloudsecuritycompliance.frameworks. update 
-  cloudsecuritycompliance.locations. enrollResource 
-  cloudsecuritycompliance.locations. get 
-  cloudsecuritycompliance.locations. list 
-  cloudsecuritycompliance.operations. cancel 
-  cloudsecuritycompliance.operations. delete 
-  cloudsecuritycompliance.operations. get 
-  cloudsecuritycompliance.operations. list 
-  cloudsecuritycompliance.resourceEnrollmentStatuses. get 
-  cloudsecuritycompliance.resourceEnrollmentStatuses. list 
 resourcemanager.projects.get 
 resourcemanager.projects.list 
Cloud Security Compliance Service Agent
( roles/  
)
Gives CSC Service Account access to consumer resources.
 accessapproval.settings.get 
 aiplatform.customJobs.get 
 aiplatform.customJobs.list 
 aiplatform.datasets.get 
 aiplatform.datasets.list 
 aiplatform.endpoints.get 
 aiplatform.endpoints.list 
 aiplatform.featurestores.get 
 aiplatform.featurestores.list 
 aiplatform.  
 aiplatform.  
 aiplatform.metadataStores.get 
 aiplatform.metadataStores.list 
 aiplatform.models.get 
 aiplatform.models.list 
 aiplatform.  
 aiplatform.  
 aiplatform.tensorboards.get 
 aiplatform.tensorboards.list 
 aiplatform.  
 aiplatform.  
 artifactregistry.  
 artifactregistry.  
 axt.labels.get 
 bigquery.datasets.get 
 certificatemanager.certs.list 
 certificatemanager.  
 cloudasset.  
 cloudasset.assets.analyzeMove 
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.assets.exportIapWeb 
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.assets.listIamRoles 
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.assets.listIapWeb 
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.assets.listResource 
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.assets.listTpuNodes 
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudasset.feeds.create 
 cloudasset.feeds.delete 
 cloudasset.feeds.get 
 cloudasset.  
 cloudasset.  
 cloudasset.  
 cloudkms.cryptoKeys.get 
 cloudkms.cryptoKeys.list 
 cloudkms.keyRings.list 
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecurityscanner.scans.get 
 cloudsecurityscanner.  
 cloudsql.instances.get 
 cloudsql.instances.list 
 compute.autoscalers.list 
 compute.backendServices.list 
 compute.disks.list 
 compute.firewallPolicies.list 
 compute.firewalls.list 
 compute.forwardingRules.list 
 compute.  
 compute.  
 compute.instanceGroups.list 
 compute.instances.get 
 compute.instances.list 
 compute.regionSslPolicies.list 
 compute.  
 compute.regionUrlMaps.list 
 compute.routers.list 
 compute.securityPolicies.list 
 compute.sslCertificates.list 
 compute.sslPolicies.list 
 compute.subnetworks.list 
 compute.targetHttpProxies.list 
 compute.targetSslProxies.list 
 compute.urlMaps.list 
 compute.vpnGateways.list 
 compute.zones.list 
 container.clusters.get 
 container.clusters.list 
 dlp.inspectTemplates.list 
 dlp.jobTriggers.list 
 dns.managedZones.list 
 iam.serviceAccounts.get 
 iam.  
 logging.buckets.list 
 logging.settings.update 
 monitoring.alertPolicies.list 
 monitoring.timeSeries.list 
 notebooks.instances.get 
 notebooks.instances.list 
 orgpolicy.constraints.list 
 orgpolicy.policy.get 
 privateca.certificates.list 
 recommender.  
 recommender.  
  recommender.locations.* 
 
-  recommender.locations.get
-  recommender.locations.list
 resourcemanager.folders.get 
 resourcemanager.  
 resourcemanager.folders.list 
 resourcemanager.  
 resourcemanager.  
 resourcemanager.  
 resourcemanager.  
 resourcemanager.projects.get 
 resourcemanager.  
 resourcemanager.projects.list 
 resourcemanager.tagHolds.list 
 resourcemanager.tagKeys.get 
 resourcemanager.tagKeys.list 
 resourcemanager.tagValues.get 
 resourcemanager.tagValues.list 
 securitycentermanagement.  
 securitycentermanagement.  
 serviceusage.operations.get 
 serviceusage.quotas.get 
 serviceusage.services.get 
 serviceusage.services.list 
 storage.buckets.get 
 storage.buckets.getIamPolicy 
 storage.buckets.list 
Compliance Manager Viewer Beta
( roles/  
)
Readonly access to Compliance Manager resources.
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
  cloudsecuritycompliance.  
 
-  cloudsecuritycompliance.controls. get 
-  cloudsecuritycompliance.controls. list 
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
  cloudsecuritycompliance.  
 
-  cloudsecuritycompliance.frameworkComplianceReports. aggregate 
-  cloudsecuritycompliance.frameworkComplianceReports. get 
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
 cloudsecuritycompliance.  
  cloudsecuritycompliance.  
 
-  cloudsecuritycompliance.resourceEnrollmentStatuses. get 
-  cloudsecuritycompliance.resourceEnrollmentStatuses. list 
 resourcemanager.projects.get 
 resourcemanager.projects.list 
Cloud Security Compliance permissions
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Security Center Admin 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Auditor 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Security Center Admin 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Auditor 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Security Center Admin 
( roles/  
)
Service agent roles
-  DSPM Service Agent 
( roles/)dspm.serviceAgent 
-  Cloud Security Compliance Service Agent 
( roles/)cloudsecuritycompliance.serviceAgent 
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Security Center Admin 
( roles/  
)
Service agent roles
-  DSPM Service Agent 
( roles/)dspm.serviceAgent 
-  Cloud Security Compliance Service Agent 
( roles/)cloudsecuritycompliance.serviceAgent 
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Auditor 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
Service agent roles
-  DSPM Service Agent 
( roles/)dspm.serviceAgent 
-  Cloud Security Compliance Service Agent 
( roles/)cloudsecuritycompliance.serviceAgent 
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
Service agent roles
-  DSPM Service Agent 
( roles/)dspm.serviceAgent 
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Security Center Admin 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Security Center Admin 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Auditor 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Security Center Admin 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Security Center Admin 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Auditor 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
Service agent roles
-  DSPM Service Agent 
( roles/)dspm.serviceAgent 
-  Cloud Security Compliance Service Agent 
( roles/)cloudsecuritycompliance.serviceAgent 
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
Service agent roles
-  DSPM Service Agent 
( roles/)dspm.serviceAgent 
-  Cloud Security Compliance Service Agent 
( roles/)cloudsecuritycompliance.serviceAgent 
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Security Center Admin 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Auditor 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Auditor 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Auditor 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Auditor 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Security Center Admin 
( roles/  
)
Service agent roles
-  DSPM Service Agent 
( roles/)dspm.serviceAgent 
-  Cloud Security Compliance Service Agent 
( roles/)cloudsecuritycompliance.serviceAgent 
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Security Center Admin 
( roles/  
)
Service agent roles
-  DSPM Service Agent 
( roles/)dspm.serviceAgent 
-  Cloud Security Compliance Service Agent 
( roles/)cloudsecuritycompliance.serviceAgent 
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Auditor 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
Service agent roles
-  DSPM Service Agent 
( roles/)dspm.serviceAgent 
-  Cloud Security Compliance Service Agent 
( roles/)cloudsecuritycompliance.serviceAgent 
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
Service agent roles
-  DSPM Service Agent 
( roles/)dspm.serviceAgent 
-  Cloud Security Compliance Service Agent 
( roles/)cloudsecuritycompliance.serviceAgent 
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Security Center Admin 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Security Center Admin 
( roles/  
)
Service agent roles
-  Cloud Security Compliance Service Agent 
( roles/)cloudsecuritycompliance.serviceAgent 
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Security Center Admin 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Auditor 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
Service agent roles
-  DSPM Service Agent 
( roles/)dspm.serviceAgent 
-  Cloud Security Compliance Service Agent 
( roles/)cloudsecuritycompliance.serviceAgent 
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
Service agent roles
-  Cloud Security Compliance Service Agent 
( roles/)cloudsecuritycompliance.serviceAgent 
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Security Center Admin 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Security Center Admin 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Auditor 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Security Center Admin 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Security Center Admin 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Auditor 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
Service agent roles
-  Cloud Security Compliance Service Agent 
( roles/)cloudsecuritycompliance.serviceAgent 
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Auditor 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)
 cloudsecuritycompliance.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Compliance Manager Admin 
( roles/  
)
 Compliance Manager Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Security Center Admin 
( roles/  
)
 Security Center Admin Editor 
( roles/  
)
 Security Center Admin Viewer 
( roles/  
)

