Connectors roles and permissions

This page lists the IAM roles and permissions for Connectors. To search through all roles and permissions, see the role and permission index .

Connectors roles

Role

Permissions

Connector Admin

( roles/ connectors.admin )

Full access to all resources of Connectors Service.

connectors.actions.*

connectors.actions.execute
connectors.actions.list

connectors.connections.create

connectors.connections.delete

connectors. connections. executeSqlQuery

connectors. connections. generateOpenAPISpec

connectors.connections.get

connectors. connections. getConnectionSchemaMetadata

connectors. connections. getIamPolicy

connectors. connections. getRuntimeActionSchema

connectors. connections. getRuntimeEntitySchema

connectors.connections.list

connectors. connections. setIamPolicy

connectors.connections.update

connectors.connectors.*

connectors.connectors.get
connectors.connectors.list

connectors. customConnectorVersions.*

connectors. customConnectorVersions. create
connectors. customConnectorVersions. delete
connectors. customConnectorVersions. get
connectors. customConnectorVersions. getIamPolicy
connectors. customConnectorVersions. list
connectors. customConnectorVersions. setIamPolicy
connectors. customConnectorVersions. update

connectors.customConnectors.*

connectors. customConnectors. create
connectors. customConnectors. delete
connectors. customConnectors. get
connectors. customConnectors. getIamPolicy
connectors. customConnectors. list
connectors. customConnectors. setIamPolicy
connectors. customConnectors. update

connectors. endpointAttachments.*

connectors. endpointAttachments. create
connectors. endpointAttachments. delete
connectors. endpointAttachments. get
connectors. endpointAttachments. getIamPolicy
connectors. endpointAttachments. list
connectors. endpointAttachments. setIamPolicy
connectors. endpointAttachments. update

connectors.entities.*

connectors.entities.create
connectors.entities.delete
connectors. entities. deleteEntitiesWithConditions
connectors.entities.get
connectors.entities.list
connectors.entities.update
connectors. entities. updateEntitiesWithConditions

connectors.entityTypes.list

connectors. eventSubscriptions.*

connectors. eventSubscriptions. create
connectors. eventSubscriptions. delete
connectors. eventSubscriptions. get
connectors. eventSubscriptions. list
connectors. eventSubscriptions. update

connectors.eventtypes.*

connectors.eventtypes.get
connectors.eventtypes.list

connectors.locations.*

connectors.locations.get
connectors.locations.list

connectors.managedZones.*

connectors.managedZones.create
connectors.managedZones.delete
connectors.managedZones.get
connectors. managedZones. getIamPolicy
connectors.managedZones.list
connectors. managedZones. setIamPolicy
connectors.managedZones.update

connectors.operations.*

connectors.operations.cancel
connectors.operations.delete
connectors.operations.get
connectors.operations.list

connectors.providers.*

connectors.providers.get
connectors.providers.list

connectors.regionalSettings.*

connectors. regionalSettings. get
connectors. regionalSettings. update

connectors.runtimeconfig.get

connectors. schemaMetadata. refresh

connectors.settings.*

connectors.settings.get
connectors.settings.update

connectors.versions.*

connectors.versions.get
connectors.versions.list

resourcemanager.projects.get

resourcemanager.projects.list

secretmanager. secrets. getIamPolicy

Custom Connectors Admin

( roles/ connectors.customConnectorAdmin )

Custom Connector is a global resource which creates custom connector within the given target project. This role grants Admin access to Custom Connector resources

connectors. customConnectorVersions.*

connectors. customConnectorVersions. create
connectors. customConnectorVersions. delete
connectors. customConnectorVersions. get
connectors. customConnectorVersions. getIamPolicy
connectors. customConnectorVersions. list
connectors. customConnectorVersions. setIamPolicy
connectors. customConnectorVersions. update

connectors.customConnectors.*

connectors. customConnectors. create
connectors. customConnectors. delete
connectors. customConnectors. get
connectors. customConnectors. getIamPolicy
connectors. customConnectors. list
connectors. customConnectors. setIamPolicy
connectors. customConnectors. update

connectors.locations.*

connectors.locations.get
connectors.locations.list

Custom Connector Viewer

( roles/ connectors.customConnectorViewer )

Custom Connector is a global resource which creates custom connector within the given target project. This role grants Read-only access to Custom Connector & Custom Connector Version resources.

connectors. customConnectorVersions. get

connectors. customConnectorVersions. getIamPolicy

connectors. customConnectorVersions. list

connectors. customConnectors. get

connectors. customConnectors. getIamPolicy

connectors. customConnectors. list

connectors.locations.*

connectors.locations.get
connectors.locations.list

Connectors Endpoint Attachment Admin

( roles/ connectors.endpointAttachmentAdmin )

Endpoint Attachment is a regional resource which creates PSC connection endpoint for the given PSC Service Attachment. This role grants Admin access to Connectors Endpoint Attachment resources.

connectors. endpointAttachments.*

connectors. endpointAttachments. create
connectors. endpointAttachments. delete
connectors. endpointAttachments. get
connectors. endpointAttachments. getIamPolicy
connectors. endpointAttachments. list
connectors. endpointAttachments. setIamPolicy
connectors. endpointAttachments. update

connectors.locations.*

connectors.locations.get
connectors.locations.list

Connectors Endpoint Attachment Viewer

( roles/ connectors.endpointAttachmentViewer )

Endpoint Attachment is a regional resource which creates PSC connection endpoint for the given PSC Service Attachment. This role grants Read-only access to Connectors Endpoint Attachment resources

connectors. endpointAttachments. get

connectors. endpointAttachments. getIamPolicy

connectors. endpointAttachments. list

connectors.locations.*

connectors.locations.get
connectors.locations.list

Connectors Event Subscriptions Admin

( roles/ connectors.eventSubscriptionAdmin )

Event Subscription is a regional resource which creates subscriptions on events for a given connection within the given target project. This role grants Admin access to Connectors Subscription resources

connectors. eventSubscriptions.*

connectors. eventSubscriptions. create
connectors. eventSubscriptions. delete
connectors. eventSubscriptions. get
connectors. eventSubscriptions. list
connectors. eventSubscriptions. update

Connectors Event Subscriptions Viewer

( roles/ connectors.eventSubscriptionViewer )

Event Subscription is a regional resource which creates subscriptions on events for a given connection within the given target project. This role grants Read-only access to Event Subscription resources.

connectors. eventSubscriptions. get

connectors. eventSubscriptions. list

Connector Invoker

( roles/ connectors.invoker )

Full Access to invoke all operations on Connections.

connectors.actions.*

connectors.actions.execute
connectors.actions.list

connectors. connections. executeSqlQuery

connectors.entities.*

connectors.entities.create
connectors.entities.delete
connectors. entities. deleteEntitiesWithConditions
connectors.entities.get
connectors.entities.list
connectors.entities.update
connectors. entities. updateEntitiesWithConditions

connectors.entityTypes.list

Connector Event Listener

( roles/ connectors.listener )

Full Access to listen events by connections.

connectors. connections. listenEvent

Connectors Managed Zone Admin

( roles/ connectors.managedZoneAdmin )

Managed Zone is a global resource which creates Cloud DNS Peering Zone with the given target project. This role grants Admin access to Connectors Managed Zone resources

connectors.locations.*

connectors.locations.get
connectors.locations.list

connectors.managedZones.*

connectors.managedZones.create
connectors.managedZones.delete
connectors.managedZones.get
connectors. managedZones. getIamPolicy
connectors.managedZones.list
connectors. managedZones. setIamPolicy
connectors.managedZones.update

Connectors Managed Zone Viewer

( roles/ connectors.managedZoneViewer )

Managed Zone is a global resource which creates Cloud DNS Peering Zone with the given target project. This role grants Read-only access to Connectors Managed Zone resources.

connectors.locations.*

connectors.locations.get
connectors.locations.list

connectors.managedZones.get

connectors. managedZones. getIamPolicy

connectors.managedZones.list

Connectors Platform Service Agent

( roles/ connectors.serviceAgent )

Grants Connectors Platform service account to manage customer resources

connectors.actions.*

connectors.actions.execute
connectors.actions.list

connectors.connections.get

connectors. connections. getConnectionSchemaMetadata

connectors.connections.list

connectors.connectors.*

connectors.connectors.get
connectors.connectors.list

connectors. customConnectorVersions. get

connectors. customConnectorVersions. list

connectors. customConnectors. get

connectors. customConnectors. list

connectors. endpointAttachments. get

connectors. endpointAttachments. list

connectors.entities.get

connectors.entityTypes.list

connectors. eventSubscriptions. get

connectors. eventSubscriptions. list

connectors.eventtypes.*

connectors.eventtypes.get
connectors.eventtypes.list

connectors.locations.*

connectors.locations.get
connectors.locations.list

connectors.managedZones.get

connectors.managedZones.list

connectors.providers.*

connectors.providers.get
connectors.providers.list

connectors.runtimeconfig.get

iam. serviceAccounts. getAccessToken

iam. serviceAccounts. getOpenIdToken

iam. serviceAccounts. implicitDelegation

monitoring. metricDescriptors. create

monitoring. metricDescriptors. get

monitoring. metricDescriptors. list

monitoring. monitoredResourceDescriptors.*

monitoring. monitoredResourceDescriptors. get
monitoring. monitoredResourceDescriptors. list

monitoring.timeSeries.create

Connectors Viewer

( roles/ connectors.viewer )

Read-only access to Connectors all resources.

connectors. connections. generateOpenAPISpec

connectors.connections.get

connectors. connections. getConnectionSchemaMetadata

connectors. connections. getIamPolicy

connectors. connections. getRuntimeActionSchema

connectors. connections. getRuntimeEntitySchema

connectors.connections.list

connectors.connectors.*

connectors.connectors.get
connectors.connectors.list

connectors. customConnectorVersions. get

connectors. customConnectorVersions. getIamPolicy

connectors. customConnectorVersions. list

connectors. customConnectors. get

connectors. customConnectors. getIamPolicy

connectors. customConnectors. list

connectors. endpointAttachments. get

connectors. endpointAttachments. getIamPolicy

connectors. endpointAttachments. list

connectors. eventSubscriptions. get

connectors. eventSubscriptions. list

connectors.eventtypes.*

connectors.eventtypes.get
connectors.eventtypes.list

connectors.locations.*

connectors.locations.get
connectors.locations.list

connectors.managedZones.get

connectors. managedZones. getIamPolicy

connectors.managedZones.list

connectors.operations.get

connectors.operations.list

connectors.providers.*

connectors.providers.get
connectors.providers.list

connectors. regionalSettings. get

connectors.runtimeconfig.get

connectors.settings.get

connectors.versions.*

connectors.versions.get
connectors.versions.list

resourcemanager.projects.get

resourcemanager.projects.list

Connectors permissions

Permission

Included in roles

`connectors.actions.execute`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

Connector Invoker ( roles/ connectors.invoker )

Apigee Integration Admin ( roles/ integrations.apigeeIntegrationAdminRole )

Apigee Integration Editor ( roles/ integrations.apigeeIntegrationEditorRole )

Apigee Integration Invoker ( roles/ integrations.apigeeIntegrationInvokerRole )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )
Dialogflow Service Agent ( roles/ dialogflow.serviceAgent )
Application Integration Service Agent ( roles/ integrations.serviceAgent )
Customer Engagement Suite Service Agent ( roles/ ces.serviceAgent )

`connectors.actions.list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connector Invoker ( roles/ connectors.invoker )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

Apigee Integration Admin ( roles/ integrations.apigeeIntegrationAdminRole )

Apigee Integration Editor ( roles/ integrations.apigeeIntegrationEditorRole )

Apigee Integration Invoker ( roles/ integrations.apigeeIntegrationInvokerRole )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )
Dialogflow Service Agent ( roles/ dialogflow.serviceAgent )
Application Integration Service Agent ( roles/ integrations.serviceAgent )
Customer Engagement Suite Service Agent ( roles/ ces.serviceAgent )

`connectors.connections.create`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

`connectors.connections.delete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

`connectors. connections. executeSqlQuery`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

Connector Invoker ( roles/ connectors.invoker )

Apigee Integration Admin ( roles/ integrations.apigeeIntegrationAdminRole )

Apigee Integration Editor ( roles/ integrations.apigeeIntegrationEditorRole )

Apigee Integration Invoker ( roles/ integrations.apigeeIntegrationInvokerRole )

Service agent roles

Dialogflow Service Agent ( roles/ dialogflow.serviceAgent )
Application Integration Service Agent ( roles/ integrations.serviceAgent )
Customer Engagement Suite Service Agent ( roles/ ces.serviceAgent )

`connectors. connections. generateOpenAPISpec`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Viewer ( roles/ connectors.viewer )

Support User ( roles/ iam.supportUser )

Service agent roles

Dialogflow Service Agent ( roles/ dialogflow.serviceAgent )
Customer Engagement Suite Service Agent ( roles/ ces.serviceAgent )

`connectors.connections.get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Viewer ( roles/ connectors.viewer )

Support User ( roles/ iam.supportUser )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )
Dialogflow Service Agent ( roles/ dialogflow.serviceAgent )
Application Integration Service Agent ( roles/ integrations.serviceAgent )
Customer Engagement Suite Service Agent ( roles/ ces.serviceAgent )

`connectors. connections. getConnectionSchemaMetadata`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Viewer ( roles/ connectors.viewer )

Support User ( roles/ iam.supportUser )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )

`connectors. connections. getIamPolicy`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Viewer ( roles/ connectors.viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

`connectors. connections. getRuntimeActionSchema`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Viewer ( roles/ connectors.viewer )

Support User ( roles/ iam.supportUser )

`connectors. connections. getRuntimeEntitySchema`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Viewer ( roles/ connectors.viewer )

Support User ( roles/ iam.supportUser )

`connectors.connections.list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Viewer ( roles/ connectors.viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )

`connectors. connections. listenEvent`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Event Listener ( roles/ connectors.listener )

`connectors. connections. setIamPolicy`

Owner ( roles/ owner )

Connector Admin ( roles/ connectors.admin )

Security Admin ( roles/ iam.securityAdmin )

`connectors.connections.update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

`connectors.connectors.get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Viewer ( roles/ connectors.viewer )

Support User ( roles/ iam.supportUser )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )

`connectors.connectors.list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Viewer ( roles/ connectors.viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )

`connectors. customConnectorVersions. create`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

Custom Connectors Admin ( roles/ connectors.customConnectorAdmin )

`connectors. customConnectorVersions. delete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

Custom Connectors Admin ( roles/ connectors.customConnectorAdmin )

`connectors. customConnectorVersions. get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Custom Connectors Admin ( roles/ connectors.customConnectorAdmin )

Custom Connector Viewer ( roles/ connectors.customConnectorViewer )

Connectors Viewer ( roles/ connectors.viewer )

Support User ( roles/ iam.supportUser )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )

`connectors. customConnectorVersions. getIamPolicy`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Custom Connectors Admin ( roles/ connectors.customConnectorAdmin )

Custom Connector Viewer ( roles/ connectors.customConnectorViewer )

Connectors Viewer ( roles/ connectors.viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

`connectors. customConnectorVersions. list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Custom Connectors Admin ( roles/ connectors.customConnectorAdmin )

Custom Connector Viewer ( roles/ connectors.customConnectorViewer )

Connectors Viewer ( roles/ connectors.viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )

`connectors. customConnectorVersions. setIamPolicy`

Owner ( roles/ owner )

Connector Admin ( roles/ connectors.admin )

Custom Connectors Admin ( roles/ connectors.customConnectorAdmin )

Security Admin ( roles/ iam.securityAdmin )

`connectors. customConnectorVersions. update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

Custom Connectors Admin ( roles/ connectors.customConnectorAdmin )

`connectors. customConnectors. create`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

Custom Connectors Admin ( roles/ connectors.customConnectorAdmin )

`connectors. customConnectors. delete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

Custom Connectors Admin ( roles/ connectors.customConnectorAdmin )

`connectors. customConnectors. get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Custom Connectors Admin ( roles/ connectors.customConnectorAdmin )

Custom Connector Viewer ( roles/ connectors.customConnectorViewer )

Connectors Viewer ( roles/ connectors.viewer )

Support User ( roles/ iam.supportUser )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )

`connectors. customConnectors. getIamPolicy`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Custom Connectors Admin ( roles/ connectors.customConnectorAdmin )

Custom Connector Viewer ( roles/ connectors.customConnectorViewer )

Connectors Viewer ( roles/ connectors.viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

`connectors. customConnectors. list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Custom Connectors Admin ( roles/ connectors.customConnectorAdmin )

Custom Connector Viewer ( roles/ connectors.customConnectorViewer )

Connectors Viewer ( roles/ connectors.viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )

`connectors. customConnectors. setIamPolicy`

Owner ( roles/ owner )

Connector Admin ( roles/ connectors.admin )

Custom Connectors Admin ( roles/ connectors.customConnectorAdmin )

Security Admin ( roles/ iam.securityAdmin )

`connectors. customConnectors. update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

Custom Connectors Admin ( roles/ connectors.customConnectorAdmin )

`connectors. endpointAttachments. create`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

Connectors Endpoint Attachment Admin ( roles/ connectors.endpointAttachmentAdmin )

`connectors. endpointAttachments. delete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

Connectors Endpoint Attachment Admin ( roles/ connectors.endpointAttachmentAdmin )

`connectors. endpointAttachments. get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Endpoint Attachment Admin ( roles/ connectors.endpointAttachmentAdmin )

Connectors Endpoint Attachment Viewer ( roles/ connectors.endpointAttachmentViewer )

Connectors Viewer ( roles/ connectors.viewer )

Support User ( roles/ iam.supportUser )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )

`connectors. endpointAttachments. getIamPolicy`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Endpoint Attachment Admin ( roles/ connectors.endpointAttachmentAdmin )

Connectors Endpoint Attachment Viewer ( roles/ connectors.endpointAttachmentViewer )

Connectors Viewer ( roles/ connectors.viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

`connectors. endpointAttachments. list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Endpoint Attachment Admin ( roles/ connectors.endpointAttachmentAdmin )

Connectors Endpoint Attachment Viewer ( roles/ connectors.endpointAttachmentViewer )

Connectors Viewer ( roles/ connectors.viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )

`connectors. endpointAttachments. setIamPolicy`

Owner ( roles/ owner )

Connector Admin ( roles/ connectors.admin )

Connectors Endpoint Attachment Admin ( roles/ connectors.endpointAttachmentAdmin )

Security Admin ( roles/ iam.securityAdmin )

`connectors. endpointAttachments. update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

Connectors Endpoint Attachment Admin ( roles/ connectors.endpointAttachmentAdmin )

`connectors.entities.create`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

Connector Invoker ( roles/ connectors.invoker )

Apigee Integration Admin ( roles/ integrations.apigeeIntegrationAdminRole )

Apigee Integration Editor ( roles/ integrations.apigeeIntegrationEditorRole )

Apigee Integration Invoker ( roles/ integrations.apigeeIntegrationInvokerRole )

Service agent roles

Dialogflow Service Agent ( roles/ dialogflow.serviceAgent )
Application Integration Service Agent ( roles/ integrations.serviceAgent )
Customer Engagement Suite Service Agent ( roles/ ces.serviceAgent )

`connectors.entities.delete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

Connector Invoker ( roles/ connectors.invoker )

Apigee Integration Admin ( roles/ integrations.apigeeIntegrationAdminRole )

Apigee Integration Editor ( roles/ integrations.apigeeIntegrationEditorRole )

Apigee Integration Invoker ( roles/ integrations.apigeeIntegrationInvokerRole )

Service agent roles

Dialogflow Service Agent ( roles/ dialogflow.serviceAgent )
Application Integration Service Agent ( roles/ integrations.serviceAgent )
Customer Engagement Suite Service Agent ( roles/ ces.serviceAgent )

`connectors. entities. deleteEntitiesWithConditions`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

Connector Invoker ( roles/ connectors.invoker )

Apigee Integration Admin ( roles/ integrations.apigeeIntegrationAdminRole )

Apigee Integration Editor ( roles/ integrations.apigeeIntegrationEditorRole )

Apigee Integration Invoker ( roles/ integrations.apigeeIntegrationInvokerRole )

Service agent roles

Dialogflow Service Agent ( roles/ dialogflow.serviceAgent )
Application Integration Service Agent ( roles/ integrations.serviceAgent )
Customer Engagement Suite Service Agent ( roles/ ces.serviceAgent )

`connectors.entities.get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connector Invoker ( roles/ connectors.invoker )

Support User ( roles/ iam.supportUser )

Apigee Integration Admin ( roles/ integrations.apigeeIntegrationAdminRole )

Apigee Integration Editor ( roles/ integrations.apigeeIntegrationEditorRole )

Apigee Integration Invoker ( roles/ integrations.apigeeIntegrationInvokerRole )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )
Dialogflow Service Agent ( roles/ dialogflow.serviceAgent )
Application Integration Service Agent ( roles/ integrations.serviceAgent )
Customer Engagement Suite Service Agent ( roles/ ces.serviceAgent )

`connectors.entities.list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connector Invoker ( roles/ connectors.invoker )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

Apigee Integration Admin ( roles/ integrations.apigeeIntegrationAdminRole )

Apigee Integration Editor ( roles/ integrations.apigeeIntegrationEditorRole )

Apigee Integration Invoker ( roles/ integrations.apigeeIntegrationInvokerRole )

Service agent roles

Dialogflow Service Agent ( roles/ dialogflow.serviceAgent )
Application Integration Service Agent ( roles/ integrations.serviceAgent )
Customer Engagement Suite Service Agent ( roles/ ces.serviceAgent )

`connectors.entities.update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

Connector Invoker ( roles/ connectors.invoker )

Apigee Integration Admin ( roles/ integrations.apigeeIntegrationAdminRole )

Apigee Integration Editor ( roles/ integrations.apigeeIntegrationEditorRole )

Apigee Integration Invoker ( roles/ integrations.apigeeIntegrationInvokerRole )

Service agent roles

Dialogflow Service Agent ( roles/ dialogflow.serviceAgent )
Application Integration Service Agent ( roles/ integrations.serviceAgent )
Customer Engagement Suite Service Agent ( roles/ ces.serviceAgent )

`connectors. entities. updateEntitiesWithConditions`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

Connector Invoker ( roles/ connectors.invoker )

Apigee Integration Admin ( roles/ integrations.apigeeIntegrationAdminRole )

Apigee Integration Editor ( roles/ integrations.apigeeIntegrationEditorRole )

Apigee Integration Invoker ( roles/ integrations.apigeeIntegrationInvokerRole )

Service agent roles

Dialogflow Service Agent ( roles/ dialogflow.serviceAgent )
Application Integration Service Agent ( roles/ integrations.serviceAgent )
Customer Engagement Suite Service Agent ( roles/ ces.serviceAgent )

`connectors.entityTypes.list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connector Invoker ( roles/ connectors.invoker )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

Apigee Integration Admin ( roles/ integrations.apigeeIntegrationAdminRole )

Apigee Integration Editor ( roles/ integrations.apigeeIntegrationEditorRole )

Apigee Integration Invoker ( roles/ integrations.apigeeIntegrationInvokerRole )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )
Dialogflow Service Agent ( roles/ dialogflow.serviceAgent )
Application Integration Service Agent ( roles/ integrations.serviceAgent )
Customer Engagement Suite Service Agent ( roles/ ces.serviceAgent )

`connectors. eventSubscriptions. create`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

Connectors Event Subscriptions Admin ( roles/ connectors.eventSubscriptionAdmin )

`connectors. eventSubscriptions. delete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

Connectors Event Subscriptions Admin ( roles/ connectors.eventSubscriptionAdmin )

`connectors. eventSubscriptions. get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Event Subscriptions Admin ( roles/ connectors.eventSubscriptionAdmin )

Connectors Event Subscriptions Viewer ( roles/ connectors.eventSubscriptionViewer )

Connectors Viewer ( roles/ connectors.viewer )

Support User ( roles/ iam.supportUser )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )

`connectors. eventSubscriptions. list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Event Subscriptions Admin ( roles/ connectors.eventSubscriptionAdmin )

Connectors Event Subscriptions Viewer ( roles/ connectors.eventSubscriptionViewer )

Connectors Viewer ( roles/ connectors.viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )

`connectors. eventSubscriptions. update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

Connectors Event Subscriptions Admin ( roles/ connectors.eventSubscriptionAdmin )

`connectors.eventtypes.get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Viewer ( roles/ connectors.viewer )

Support User ( roles/ iam.supportUser )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )

`connectors.eventtypes.list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Viewer ( roles/ connectors.viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )

`connectors.locations.get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Custom Connectors Admin ( roles/ connectors.customConnectorAdmin )

Custom Connector Viewer ( roles/ connectors.customConnectorViewer )

Connectors Endpoint Attachment Admin ( roles/ connectors.endpointAttachmentAdmin )

Connectors Endpoint Attachment Viewer ( roles/ connectors.endpointAttachmentViewer )

Connectors Managed Zone Admin ( roles/ connectors.managedZoneAdmin )

Connectors Managed Zone Viewer ( roles/ connectors.managedZoneViewer )

Connectors Viewer ( roles/ connectors.viewer )

Support User ( roles/ iam.supportUser )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )

`connectors.locations.list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Custom Connectors Admin ( roles/ connectors.customConnectorAdmin )

Custom Connector Viewer ( roles/ connectors.customConnectorViewer )

Connectors Endpoint Attachment Admin ( roles/ connectors.endpointAttachmentAdmin )

Connectors Endpoint Attachment Viewer ( roles/ connectors.endpointAttachmentViewer )

Connectors Managed Zone Admin ( roles/ connectors.managedZoneAdmin )

Connectors Managed Zone Viewer ( roles/ connectors.managedZoneViewer )

Connectors Viewer ( roles/ connectors.viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )

`connectors.managedZones.create`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

Connectors Managed Zone Admin ( roles/ connectors.managedZoneAdmin )

`connectors.managedZones.delete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

Connectors Managed Zone Admin ( roles/ connectors.managedZoneAdmin )

`connectors.managedZones.get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Managed Zone Admin ( roles/ connectors.managedZoneAdmin )

Connectors Managed Zone Viewer ( roles/ connectors.managedZoneViewer )

Connectors Viewer ( roles/ connectors.viewer )

Support User ( roles/ iam.supportUser )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )

`connectors. managedZones. getIamPolicy`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Managed Zone Admin ( roles/ connectors.managedZoneAdmin )

Connectors Managed Zone Viewer ( roles/ connectors.managedZoneViewer )

Connectors Viewer ( roles/ connectors.viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

`connectors.managedZones.list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Managed Zone Admin ( roles/ connectors.managedZoneAdmin )

Connectors Managed Zone Viewer ( roles/ connectors.managedZoneViewer )

Connectors Viewer ( roles/ connectors.viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )

`connectors. managedZones. setIamPolicy`

Owner ( roles/ owner )

Connector Admin ( roles/ connectors.admin )

Connectors Managed Zone Admin ( roles/ connectors.managedZoneAdmin )

Security Admin ( roles/ iam.securityAdmin )

`connectors.managedZones.update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

Connectors Managed Zone Admin ( roles/ connectors.managedZoneAdmin )

`connectors.operations.cancel`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

`connectors.operations.delete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

`connectors.operations.get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Viewer ( roles/ connectors.viewer )

Support User ( roles/ iam.supportUser )

Service agent roles

Dialogflow Service Agent ( roles/ dialogflow.serviceAgent )
Customer Engagement Suite Service Agent ( roles/ ces.serviceAgent )

`connectors.operations.list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Viewer ( roles/ connectors.viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

`connectors.providers.get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Viewer ( roles/ connectors.viewer )

Support User ( roles/ iam.supportUser )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )

`connectors.providers.list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Viewer ( roles/ connectors.viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )

`connectors. regionalSettings. get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Viewer ( roles/ connectors.viewer )

Support User ( roles/ iam.supportUser )

`connectors. regionalSettings. update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

`connectors.runtimeconfig.get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Viewer ( roles/ connectors.viewer )

Support User ( roles/ iam.supportUser )

Service agent roles

Connectors Platform Service Agent ( roles/ connectors.serviceAgent )

`connectors. schemaMetadata. refresh`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

`connectors.settings.get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Viewer ( roles/ connectors.viewer )

Support User ( roles/ iam.supportUser )

`connectors.settings.update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Connector Admin ( roles/ connectors.admin )

`connectors.versions.get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Viewer ( roles/ connectors.viewer )

Support User ( roles/ iam.supportUser )

Service agent roles

Dialogflow Service Agent ( roles/ dialogflow.serviceAgent )
Customer Engagement Suite Service Agent ( roles/ ces.serviceAgent )

`connectors.versions.list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Connector Admin ( roles/ connectors.admin )

Connectors Viewer ( roles/ connectors.viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )