This page lists the IAM roles and permissions for Developer Connect. To search through all roles and permissions, see the role and permission index .
Developer Connect roles
Developer Connect Admin Beta
( roles/
)
Full access to Developer Connect resources.
developerconnect.connections.*
-
developerconnect.
connections. constructGitHubAppManifest -
developerconnect.
connections. create -
developerconnect.
connections. delete -
developerconnect.
connections. fetchGitHubInstallations -
developerconnect.
connections. fetchLinkableGitRepositories -
developerconnect.
connections. generateGitHubStateToken -
developerconnect.
connections. get -
developerconnect.
connections. list -
developerconnect.
connections. processGitHubAppCreationCallback -
developerconnect.
connections. processGitHubOAuthCallback -
developerconnect.
connections. update
developerconnect.
developerconnect.
developerconnect.
developerconnect.
developerconnect.
developerconnect.
developerconnect.
developerconnect.locations.*
-
developerconnect.locations.get
-
developerconnect.
locations. list
developerconnect.operations.*
-
developerconnect.
operations. cancel -
developerconnect.
operations. delete -
developerconnect.
operations. get -
developerconnect.
operations. list
resourcemanager.projects.get
resourcemanager.projects.list
Developer Connect Git Proxy Reader Beta
( roles/
)
Grants read-only access to repositories through the Git Proxy.
developerconnect.
Developer Connect Git Proxy User Beta
( roles/
)
Grants read and write access to repositories through the Git Proxy.
developerconnect.
developerconnect.
Developer Connect Insights Admin Beta
( roles/
)
Admin access to Developer Connect Insights resources.
developerconnect.locations.*
-
developerconnect.locations.get
-
developerconnect.
locations. list
developerconnect.
developerconnect.
resourcemanager.projects.get
resourcemanager.projects.list
Developer Connect Insights Config Agent Beta
( roles/
)
Allow Developer Connect to access SDLC information.
cloudasset.
cloudasset.assets.listResource
cloudasset.
cloudasset.feeds.create
cloudasset.feeds.get
cloudasset.feeds.update
containeranalysis.
containeranalysis.
logging.logEntries.create
Developer Connect Insights Viewer Beta
( roles/
)
Read-only access to Developer Connect Insights resources.
developerconnect.locations.*
-
developerconnect.locations.get
-
developerconnect.
locations. list
developerconnect.
developerconnect.
resourcemanager.projects.get
resourcemanager.projects.list
Developer Connect OAuth Admin Beta
( roles/
)
Grants read and write access to AccountConnector resources.
developerconnect.
-
developerconnect.
accountConnectors. create -
developerconnect.
accountConnectors. delete -
developerconnect.
accountConnectors. get -
developerconnect.
accountConnectors. list -
developerconnect.
accountConnectors. update
developerconnect.locations.*
-
developerconnect.locations.get
-
developerconnect.
locations. list
developerconnect.
developerconnect.
developerconnect.
developerconnect.users.*
-
developerconnect.users.delete
-
developerconnect.
users. deleteSelf -
developerconnect.
users. fetchAccessToken -
developerconnect.
users. finishOAuth -
developerconnect.users.getSelf
-
developerconnect.users.list
-
developerconnect.
users. startOAuth
resourcemanager.projects.get
resourcemanager.projects.list
Developer Connect OAuth User Beta
( roles/
)
Grants read and write access to User resources, and read access to AccountConnectors.
developerconnect.
developerconnect.
developerconnect.locations.*
-
developerconnect.locations.get
-
developerconnect.
locations. list
developerconnect.
developerconnect.
developerconnect.
developerconnect.
developerconnect.
developerconnect.users.getSelf
developerconnect.
resourcemanager.projects.get
resourcemanager.projects.list
Developer Connect Read Token Accessor Beta
( roles/
)
Grants access to Read-Only tokens (both PAT and short-lived). Also grants access to view the git repository link.
developerconnect.
developerconnect.
developerconnect.
Developer Connect Service Agent
( roles/
)
Gives the Developer Connect API Service Account access to necessary GCP resources.
apphub.applications.get
apphub.workloads.get
apphub.workloads.list
Developer Connect Token Accessor Beta
( roles/
)
Grants access to Read/Write and Read-Only tokens (both PAT and short-lived). Also grants access to view the git repository link.
developerconnect.
developerconnect.
developerconnect.
developerconnect.
Developer Connect User Beta
( roles/
)
Grants access to view the connection and to the features that interact with the actual repository such as reading content from the repository
developerconnect.
developerconnect.
developerconnect.
developerconnect.
developerconnect.
developerconnect.
developerconnect.
developerconnect.locations.*
-
developerconnect.locations.get
-
developerconnect.
locations. list
developerconnect.
developerconnect.
resourcemanager.projects.get
resourcemanager.projects.list
Developer Connect Viewer Beta
( roles/
)
Read-only access to Developer Connect resources.
developerconnect.
developerconnect.
developerconnect.
developerconnect.
developerconnect.locations.*
-
developerconnect.locations.get
-
developerconnect.
locations. list
developerconnect.
developerconnect.
resourcemanager.projects.get
resourcemanager.projects.list
Developer Connect permissions
developerconnect.
accountConnectors.
create
Owner
( roles/
)
Editor
( roles/
)
Gemini Code Assist Tools Admin
( roles/
)
Developer Connect OAuth Admin
( roles/
)
developerconnect.
accountConnectors.
delete
Owner
( roles/
)
Editor
( roles/
)
Gemini Code Assist Tools Admin
( roles/
)
Developer Connect OAuth Admin
( roles/
)
developerconnect.
accountConnectors.
get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Gemini Code Assist Tools Admin
( roles/
)
Gemini Code Assist Tools User
( roles/
)
Developer Connect OAuth Admin
( roles/
)
Developer Connect OAuth User
( roles/
)
Support User
( roles/
)
developerconnect.
accountConnectors.
list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Gemini Code Assist Tools Admin
( roles/
)
Gemini Code Assist Tools User
( roles/
)
Developer Connect OAuth Admin
( roles/
)
Developer Connect OAuth User
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
developerconnect.
accountConnectors.
update
Owner
( roles/
)
Editor
( roles/
)
Gemini Code Assist Tools Admin
( roles/
)
Developer Connect OAuth Admin
( roles/
)
developerconnect.
connections.
constructGitHubAppManifest
Owner
( roles/
)
Editor
( roles/
)
Developer Connect Admin
( roles/
)
Dev Ops
( roles/
)
developerconnect.
connections.
create
Owner
( roles/
)
Editor
( roles/
)
Developer Connect Admin
( roles/
)
Dev Ops
( roles/
)
developerconnect.
connections.
delete
Owner
( roles/
)
Editor
( roles/
)
Developer Connect Admin
( roles/
)
Dev Ops
( roles/
)
developerconnect.
connections.
fetchGitHubInstallations
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Developer Connect Admin
( roles/
)
Developer Connect User
( roles/
)
Dev Ops
( roles/
)
Support User
( roles/
)
developerconnect.
connections.
fetchLinkableGitRepositories
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Developer Connect Admin
( roles/
)
Developer Connect User
( roles/
)
Dev Ops
( roles/
)
Support User
( roles/
)
developerconnect.
connections.
generateGitHubStateToken
Owner
( roles/
)
Editor
( roles/
)
Developer Connect Admin
( roles/
)
Dev Ops
( roles/
)
developerconnect.
connections.
get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Developer Connect Admin
( roles/
)
Developer Connect Read Token Accessor
( roles/
)
Developer Connect Token Accessor
( roles/
)
Developer Connect User
( roles/
)
Developer Connect Viewer
( roles/
)
Dev Ops
( roles/
)
Support User
( roles/
)
Service agent roles
- Cloud Build Service Agent
(
roles/
)cloudbuild.serviceAgent - Firebase App Hosting Service Agent
(
roles/
)firebaseapphosting.serviceAgent - Gemini for Google Cloud Service Agent
(
roles/
)cloudaicompanion.serviceAgent
developerconnect.
connections.
list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Developer Connect Admin
( roles/
)
Developer Connect User
( roles/
)
Developer Connect Viewer
( roles/
)
Dev Ops
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
developerconnect.
connections.
processGitHubAppCreationCallback
Owner
( roles/
)
Editor
( roles/
)
Developer Connect Admin
( roles/
)
Dev Ops
( roles/
)
developerconnect.
connections.
processGitHubOAuthCallback
Owner
( roles/
)
Editor
( roles/
)
Developer Connect Admin
( roles/
)
Dev Ops
( roles/
)
developerconnect.
connections.
update
Owner
( roles/
)
Editor
( roles/
)
Developer Connect Admin
( roles/
)
Dev Ops
( roles/
)
developerconnect.
gitRepositoryLinks.
create
Owner
( roles/
)
Editor
( roles/
)
Developer Connect Admin
( roles/
)
Dev Ops
( roles/
)
developerconnect.
gitRepositoryLinks.
delete
Owner
( roles/
)
Editor
( roles/
)
Developer Connect Admin
( roles/
)
Dev Ops
( roles/
)
developerconnect.
gitRepositoryLinks.
fetchGitRefs
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Developer Connect Admin
( roles/
)
Developer Connect User
( roles/
)
Dev Ops
( roles/
)
Support User
( roles/
)
Service agent roles
- Gemini for Google Cloud Service Agent
(
roles/
)cloudaicompanion.serviceAgent
developerconnect.
gitRepositoryLinks.
fetchReadToken
Owner
( roles/
)
Developer Connect Read Token Accessor
( roles/
)
Developer Connect Token Accessor
( roles/
)
Service agent roles
- Cloud Build Service Agent
(
roles/
)cloudbuild.serviceAgent - Firebase App Hosting Service Agent
(
roles/
)firebaseapphosting.serviceAgent - Gemini for Google Cloud Service Agent
(
roles/
)cloudaicompanion.serviceAgent
developerconnect.
gitRepositoryLinks.
fetchReadWriteToken
Owner
( roles/
)
Developer Connect Token Accessor
( roles/
)
Service agent roles
- Firebase App Hosting Service Agent
(
roles/
)firebaseapphosting.serviceAgent - Cloud Build Service Agent
(
roles/
)cloudbuild.serviceAgent
developerconnect.
gitRepositoryLinks.
get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Developer Connect Admin
( roles/
)
Developer Connect Read Token Accessor
( roles/
)
Developer Connect Token Accessor
( roles/
)
Developer Connect User
( roles/
)
Developer Connect Viewer
( roles/
)
Dev Ops
( roles/
)
Support User
( roles/
)
Service agent roles
- Cloud Build Service Agent
(
roles/
)cloudbuild.serviceAgent - DesignCenter Service Agent
(
roles/
)designcenter.serviceAgent - Firebase App Hosting Service Agent
(
roles/
)firebaseapphosting.serviceAgent - Gemini for Google Cloud Service Agent
(
roles/
)cloudaicompanion.serviceAgent
developerconnect.
gitRepositoryLinks.
gitProxyRead
Owner
( roles/
)
Developer Connect Admin
( roles/
)
Developer Connect Git Proxy Reader
( roles/
)
Developer Connect Git Proxy User
( roles/
)
Dev Ops
( roles/
)
Service agent roles
- DesignCenter Service Agent
(
roles/
)designcenter.serviceAgent - Gemini for Google Cloud Service Agent
(
roles/
)cloudaicompanion.serviceAgent
developerconnect.
gitRepositoryLinks.
gitProxyWrite
Owner
( roles/
)
Developer Connect Admin
( roles/
)
Developer Connect Git Proxy User
( roles/
)
Dev Ops
( roles/
)
Service agent roles
- DesignCenter Service Agent
(
roles/
)designcenter.serviceAgent
developerconnect.
gitRepositoryLinks.
list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Developer Connect Admin
( roles/
)
Developer Connect User
( roles/
)
Developer Connect Viewer
( roles/
)
Dev Ops
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Gemini for Google Cloud Service Agent
(
roles/
)cloudaicompanion.serviceAgent
developerconnect.locations.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
App Management Viewer
( roles/
)
Gemini Code Assist Tools Admin
( roles/
)
Gemini Code Assist Tools User
( roles/
)
Developer Connect Admin
( roles/
)
Developer Connect Insights Admin
( roles/
)
Developer Connect Insights Viewer
( roles/
)
Developer Connect OAuth Admin
( roles/
)
Developer Connect OAuth User
( roles/
)
Developer Connect User
( roles/
)
Developer Connect Viewer
( roles/
)
Dev Ops
( roles/
)
Support User
( roles/
)
developerconnect.
locations.
list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
App Management Viewer
( roles/
)
Gemini Code Assist Tools Admin
( roles/
)
Gemini Code Assist Tools User
( roles/
)
Developer Connect Admin
( roles/
)
Developer Connect Insights Admin
( roles/
)
Developer Connect Insights Viewer
( roles/
)
Developer Connect OAuth Admin
( roles/
)
Developer Connect OAuth User
( roles/
)
Developer Connect User
( roles/
)
Developer Connect Viewer
( roles/
)
Dev Ops
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
developerconnect.
operations.
cancel
Owner
( roles/
)
Editor
( roles/
)
Developer Connect Admin
( roles/
)
Dev Ops
( roles/
)
developerconnect.
operations.
delete
Owner
( roles/
)
Editor
( roles/
)
Developer Connect Admin
( roles/
)
Dev Ops
( roles/
)
developerconnect.
operations.
get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
App Management Viewer
( roles/
)
Gemini Code Assist Tools Admin
( roles/
)
Gemini Code Assist Tools User
( roles/
)
Developer Connect Admin
( roles/
)
Developer Connect Insights Admin
( roles/
)
Developer Connect Insights Viewer
( roles/
)
Developer Connect OAuth Admin
( roles/
)
Developer Connect OAuth User
( roles/
)
Developer Connect User
( roles/
)
Developer Connect Viewer
( roles/
)
Dev Ops
( roles/
)
Support User
( roles/
)
developerconnect.
operations.
list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
App Management Viewer
( roles/
)
Gemini Code Assist Tools Admin
( roles/
)
Gemini Code Assist Tools User
( roles/
)
Developer Connect Admin
( roles/
)
Developer Connect Insights Admin
( roles/
)
Developer Connect Insights Viewer
( roles/
)
Developer Connect OAuth Admin
( roles/
)
Developer Connect OAuth User
( roles/
)
Developer Connect User
( roles/
)
Developer Connect Viewer
( roles/
)
Dev Ops
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
developerconnect.
providers.
list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Gemini Code Assist Tools Admin
( roles/
)
Developer Connect OAuth Admin
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
developerconnect.users.delete
Owner
( roles/
)
Editor
( roles/
)
Gemini Code Assist Tools Admin
( roles/
)
Developer Connect OAuth Admin
( roles/
)
developerconnect.
users.
deleteSelf
Owner
( roles/
)
Editor
( roles/
)
Gemini Code Assist Tools Admin
( roles/
)
Gemini Code Assist Tools User
( roles/
)
Developer Connect OAuth Admin
( roles/
)
Developer Connect OAuth User
( roles/
)
developerconnect.
users.
fetchAccessToken
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Gemini Code Assist Tools Admin
( roles/
)
Gemini Code Assist Tools User
( roles/
)
Developer Connect OAuth Admin
( roles/
)
Developer Connect OAuth User
( roles/
)
Support User
( roles/
)
developerconnect.
users.
finishOAuth
Owner
( roles/
)
Editor
( roles/
)
Gemini Code Assist Tools Admin
( roles/
)
Gemini Code Assist Tools User
( roles/
)
Developer Connect OAuth Admin
( roles/
)
Developer Connect OAuth User
( roles/
)
developerconnect.users.getSelf
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Gemini Code Assist Tools Admin
( roles/
)
Gemini Code Assist Tools User
( roles/
)
Developer Connect OAuth Admin
( roles/
)
Developer Connect OAuth User
( roles/
)
Support User
( roles/
)
developerconnect.users.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Gemini Code Assist Tools Admin
( roles/
)
Developer Connect OAuth Admin
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
developerconnect.
users.
startOAuth
Owner
( roles/
)
Editor
( roles/
)
Gemini Code Assist Tools Admin
( roles/
)
Gemini Code Assist Tools User
( roles/
)
Developer Connect OAuth Admin
( roles/
)
Developer Connect OAuth User
( roles/
)