This page lists the IAM roles and permissions for Developer Connect. To search through all roles and permissions, see the role and permission index .
Developer Connect roles
Developer Connect Admin Beta
( roles/  
)
Full access to Developer Connect resources.
  developerconnect.connections.* 
 
-  developerconnect.connections. constructGitHubAppManifest 
-  developerconnect.connections. create 
-  developerconnect.connections. delete 
-  developerconnect.connections. fetchGitHubInstallations 
-  developerconnect.connections. fetchLinkableGitRepositories 
-  developerconnect.connections. generateGitHubStateToken 
-  developerconnect.connections. get 
-  developerconnect.connections. list 
-  developerconnect.connections. processGitHubAppCreationCallback 
-  developerconnect.connections. processGitHubOAuthCallback 
-  developerconnect.connections. update 
 developerconnect.  
 developerconnect.  
 developerconnect.  
 developerconnect.  
 developerconnect.  
 developerconnect.  
 developerconnect.  
  developerconnect.locations.* 
 
-  developerconnect.locations.get
-  developerconnect.locations. list 
  developerconnect.operations.* 
 
-  developerconnect.operations. cancel 
-  developerconnect.operations. delete 
-  developerconnect.operations. get 
-  developerconnect.operations. list 
 resourcemanager.projects.get 
 resourcemanager.projects.list 
Developer Connect Git Proxy Reader Beta
( roles/  
)
Grants read-only access to repositories through the Git Proxy.
 developerconnect.  
Developer Connect Git Proxy User Beta
( roles/  
)
Grants read and write access to repositories through the Git Proxy.
 developerconnect.  
 developerconnect.  
Developer Connect Insights Admin Beta
( roles/  
)
Admin access to Developer Connect Insights resources.
  developerconnect.locations.* 
 
-  developerconnect.locations.get
-  developerconnect.locations. list 
 developerconnect.  
 developerconnect.  
 resourcemanager.projects.get 
 resourcemanager.projects.list 
Developer Connect Insights Config Agent Beta
( roles/  
)
Allow Developer Connect to access SDLC information.
 cloudasset.  
 cloudasset.assets.listResource 
 cloudasset.  
 cloudasset.feeds.create 
 cloudasset.feeds.get 
 cloudasset.feeds.update 
 containeranalysis.  
 containeranalysis.  
 logging.logEntries.create 
Developer Connect Insights Viewer Beta
( roles/  
)
Read-only access to Developer Connect Insights resources.
  developerconnect.locations.* 
 
-  developerconnect.locations.get
-  developerconnect.locations. list 
 developerconnect.  
 developerconnect.  
 resourcemanager.projects.get 
 resourcemanager.projects.list 
Developer Connect OAuth Admin Beta
( roles/  
)
Grants read and write access to AccountConnector resources.
  developerconnect.  
 
-  developerconnect.accountConnectors. create 
-  developerconnect.accountConnectors. delete 
-  developerconnect.accountConnectors. get 
-  developerconnect.accountConnectors. list 
-  developerconnect.accountConnectors. update 
  developerconnect.locations.* 
 
-  developerconnect.locations.get
-  developerconnect.locations. list 
 developerconnect.  
 developerconnect.  
 developerconnect.  
  developerconnect.users.* 
 
-  developerconnect.users.delete
-  developerconnect.users. deleteSelf 
-  developerconnect.users. fetchAccessToken 
-  developerconnect.users. finishOAuth 
-  developerconnect.users.getSelf
-  developerconnect.users.list
-  developerconnect.users. startOAuth 
 resourcemanager.projects.get 
 resourcemanager.projects.list 
Developer Connect OAuth User Beta
( roles/  
)
Grants read and write access to User resources, and read access to AccountConnectors.
 developerconnect.  
 developerconnect.  
  developerconnect.locations.* 
 
-  developerconnect.locations.get
-  developerconnect.locations. list 
 developerconnect.  
 developerconnect.  
 developerconnect.  
 developerconnect.  
 developerconnect.  
 developerconnect.users.getSelf 
 developerconnect.  
 resourcemanager.projects.get 
 resourcemanager.projects.list 
Developer Connect Read Token Accessor Beta
( roles/  
)
Grants access to Read-Only tokens (both PAT and short-lived). Also grants access to view the git repository link.
 developerconnect.  
 developerconnect.  
 developerconnect.  
Developer Connect Service Agent
( roles/  
)
Gives the Developer Connect API Service Account access to necessary GCP resources.
 apphub.applications.get 
 apphub.services.get 
 apphub.services.list 
 apphub.workloads.get 
 apphub.workloads.list 
Developer Connect Token Accessor Beta
( roles/  
)
Grants access to Read/Write and Read-Only tokens (both PAT and short-lived). Also grants access to view the git repository link.
 developerconnect.  
 developerconnect.  
 developerconnect.  
 developerconnect.  
Developer Connect User Beta
( roles/  
)
Grants access to view the connection and to the features that interact with the actual repository such as reading content from the repository
 developerconnect.  
 developerconnect.  
 developerconnect.  
 developerconnect.  
 developerconnect.  
 developerconnect.  
 developerconnect.  
  developerconnect.locations.* 
 
-  developerconnect.locations.get
-  developerconnect.locations. list 
 developerconnect.  
 developerconnect.  
 resourcemanager.projects.get 
 resourcemanager.projects.list 
Developer Connect Viewer Beta
( roles/  
)
Read-only access to Developer Connect resources.
 developerconnect.  
 developerconnect.  
 developerconnect.  
 developerconnect.  
  developerconnect.locations.* 
 
-  developerconnect.locations.get
-  developerconnect.locations. list 
 developerconnect.  
 developerconnect.  
 resourcemanager.projects.get 
 resourcemanager.projects.list 
Developer Connect permissions
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Gemini Code Assist Tools Admin 
( roles/  
)
 Developer Connect OAuth Admin 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Gemini Code Assist Tools Admin 
( roles/  
)
 Developer Connect OAuth Admin 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Gemini Code Assist Tools Admin 
( roles/  
)
 Gemini Code Assist Tools User 
( roles/  
)
 Developer Connect OAuth Admin 
( roles/  
)
 Developer Connect OAuth User 
( roles/  
)
 Support User 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Gemini Code Assist Tools Admin 
( roles/  
)
 Gemini Code Assist Tools User 
( roles/  
)
 Developer Connect OAuth Admin 
( roles/  
)
 Developer Connect OAuth User 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Gemini Code Assist Tools Admin 
( roles/  
)
 Developer Connect OAuth Admin 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Developer Connect Admin 
( roles/  
)
 Dev Ops 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Developer Connect Admin 
( roles/  
)
 Dev Ops 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Developer Connect Admin 
( roles/  
)
 Dev Ops 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Developer Connect Admin 
( roles/  
)
 Developer Connect User 
( roles/  
)
 Dev Ops 
( roles/  
)
 Support User 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Developer Connect Admin 
( roles/  
)
 Developer Connect User 
( roles/  
)
 Dev Ops 
( roles/  
)
 Support User 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Developer Connect Admin 
( roles/  
)
 Dev Ops 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Developer Connect Admin 
( roles/  
)
 Developer Connect Read Token Accessor 
( roles/  
)
 Developer Connect Token Accessor 
( roles/  
)
 Developer Connect User 
( roles/  
)
 Developer Connect Viewer 
( roles/  
)
 Firebase App Hosting Compute Runner 
( roles/  
)
 Dev Ops 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Build Service Agent 
( roles/)cloudbuild.serviceAgent 
-  Firebase App Hosting Service Agent 
( roles/)firebaseapphosting.serviceAgent 
-  Gemini Code Assist Management Service Agent 
( roles/)geminicodeassistmanagement.serviceAgent 
-  Gemini for Google Cloud Service Agent 
( roles/)cloudaicompanion.serviceAgent 
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Developer Connect Admin 
( roles/  
)
 Developer Connect User 
( roles/  
)
 Developer Connect Viewer 
( roles/  
)
 Dev Ops 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Developer Connect Admin 
( roles/  
)
 Dev Ops 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Developer Connect Admin 
( roles/  
)
 Dev Ops 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Developer Connect Admin 
( roles/  
)
 Dev Ops 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Developer Connect Admin 
( roles/  
)
 Dev Ops 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Developer Connect Admin 
( roles/  
)
 Dev Ops 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Developer Connect Admin 
( roles/  
)
 Developer Connect User 
( roles/  
)
 Dev Ops 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Gemini for Google Cloud Service Agent 
( roles/)cloudaicompanion.serviceAgent 
 developerconnect.  
 
 Owner 
( roles/  
)
 Developer Connect Read Token Accessor 
( roles/  
)
 Developer Connect Token Accessor 
( roles/  
)
 Firebase App Hosting Compute Runner 
( roles/  
)
Service agent roles
-  Cloud Build Service Agent 
( roles/)cloudbuild.serviceAgent 
-  Firebase App Hosting Service Agent 
( roles/)firebaseapphosting.serviceAgent 
-  Gemini for Google Cloud Service Agent 
( roles/)cloudaicompanion.serviceAgent 
 developerconnect.  
 
 Owner 
( roles/  
)
 Developer Connect Token Accessor 
( roles/  
)
Service agent roles
-  Firebase App Hosting Service Agent 
( roles/)firebaseapphosting.serviceAgent 
-  Cloud Build Service Agent 
( roles/)cloudbuild.serviceAgent 
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Developer Connect Admin 
( roles/  
)
 Developer Connect Read Token Accessor 
( roles/  
)
 Developer Connect Token Accessor 
( roles/  
)
 Developer Connect User 
( roles/  
)
 Developer Connect Viewer 
( roles/  
)
 Firebase App Hosting Compute Runner 
( roles/  
)
 Dev Ops 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Build Service Agent 
( roles/)cloudbuild.serviceAgent 
-  DesignCenter Service Agent 
( roles/)designcenter.serviceAgent 
-  Firebase App Hosting Service Agent 
( roles/)firebaseapphosting.serviceAgent 
-  Gemini Code Assist Management Service Agent 
( roles/)geminicodeassistmanagement.serviceAgent 
-  Gemini for Google Cloud Service Agent 
( roles/)cloudaicompanion.serviceAgent 
 developerconnect.  
 
 Owner 
( roles/  
)
 Developer Connect Admin 
( roles/  
)
 Developer Connect Git Proxy Reader 
( roles/  
)
 Developer Connect Git Proxy User 
( roles/  
)
 Dev Ops 
( roles/  
)
Service agent roles
-  DesignCenter Service Agent 
( roles/)designcenter.serviceAgent 
-  Gemini for Google Cloud Service Agent 
( roles/)cloudaicompanion.serviceAgent 
 developerconnect.  
 
 Owner 
( roles/  
)
 Developer Connect Admin 
( roles/  
)
 Developer Connect Git Proxy User 
( roles/  
)
 Dev Ops 
( roles/  
)
Service agent roles
-  DesignCenter Service Agent 
( roles/)designcenter.serviceAgent 
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Developer Connect Admin 
( roles/  
)
 Developer Connect User 
( roles/  
)
 Developer Connect Viewer 
( roles/  
)
 Dev Ops 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Gemini for Google Cloud Service Agent 
( roles/)cloudaicompanion.serviceAgent 
 developerconnect.locations.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 App Management Viewer 
( roles/  
)
 Gemini Code Assist Tools Admin 
( roles/  
)
 Gemini Code Assist Tools User 
( roles/  
)
 Cloud Hub Operator 
( roles/  
)
 Developer Connect Admin 
( roles/  
)
 Developer Connect Insights Admin 
( roles/  
)
 Developer Connect Insights Viewer 
( roles/  
)
 Developer Connect OAuth Admin 
( roles/  
)
 Developer Connect OAuth User 
( roles/  
)
 Developer Connect User 
( roles/  
)
 Developer Connect Viewer 
( roles/  
)
 Dev Ops 
( roles/  
)
 Support User 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 App Management Viewer 
( roles/  
)
 Gemini Code Assist Tools Admin 
( roles/  
)
 Gemini Code Assist Tools User 
( roles/  
)
 Cloud Hub Operator 
( roles/  
)
 Developer Connect Admin 
( roles/  
)
 Developer Connect Insights Admin 
( roles/  
)
 Developer Connect Insights Viewer 
( roles/  
)
 Developer Connect OAuth Admin 
( roles/  
)
 Developer Connect OAuth User 
( roles/  
)
 Developer Connect User 
( roles/  
)
 Developer Connect Viewer 
( roles/  
)
 Dev Ops 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Developer Connect Admin 
( roles/  
)
 Dev Ops 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Developer Connect Admin 
( roles/  
)
 Dev Ops 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 App Management Viewer 
( roles/  
)
 Gemini Code Assist Tools Admin 
( roles/  
)
 Gemini Code Assist Tools User 
( roles/  
)
 Cloud Hub Operator 
( roles/  
)
 Developer Connect Admin 
( roles/  
)
 Developer Connect Insights Admin 
( roles/  
)
 Developer Connect Insights Viewer 
( roles/  
)
 Developer Connect OAuth Admin 
( roles/  
)
 Developer Connect OAuth User 
( roles/  
)
 Developer Connect User 
( roles/  
)
 Developer Connect Viewer 
( roles/  
)
 Dev Ops 
( roles/  
)
 Support User 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 App Management Viewer 
( roles/  
)
 Gemini Code Assist Tools Admin 
( roles/  
)
 Gemini Code Assist Tools User 
( roles/  
)
 Cloud Hub Operator 
( roles/  
)
 Developer Connect Admin 
( roles/  
)
 Developer Connect Insights Admin 
( roles/  
)
 Developer Connect Insights Viewer 
( roles/  
)
 Developer Connect OAuth Admin 
( roles/  
)
 Developer Connect OAuth User 
( roles/  
)
 Developer Connect User 
( roles/  
)
 Developer Connect Viewer 
( roles/  
)
 Dev Ops 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Gemini Code Assist Tools Admin 
( roles/  
)
 Developer Connect OAuth Admin 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 developerconnect.users.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Gemini Code Assist Tools Admin 
( roles/  
)
 Developer Connect OAuth Admin 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Gemini Code Assist Tools Admin 
( roles/  
)
 Gemini Code Assist Tools User 
( roles/  
)
 Developer Connect OAuth Admin 
( roles/  
)
 Developer Connect OAuth User 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Gemini Code Assist Tools Admin 
( roles/  
)
 Gemini Code Assist Tools User 
( roles/  
)
 Developer Connect OAuth Admin 
( roles/  
)
 Developer Connect OAuth User 
( roles/  
)
 Support User 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Gemini Code Assist Tools Admin 
( roles/  
)
 Gemini Code Assist Tools User 
( roles/  
)
 Developer Connect OAuth Admin 
( roles/  
)
 Developer Connect OAuth User 
( roles/  
)
 developerconnect.users.getSelf 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Gemini Code Assist Tools Admin 
( roles/  
)
 Gemini Code Assist Tools User 
( roles/  
)
 Developer Connect OAuth Admin 
( roles/  
)
 Developer Connect OAuth User 
( roles/  
)
 Support User 
( roles/  
)
 developerconnect.users.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Gemini Code Assist Tools Admin 
( roles/  
)
 Developer Connect OAuth Admin 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 developerconnect.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Gemini Code Assist Tools Admin 
( roles/  
)
 Gemini Code Assist Tools User 
( roles/  
)
 Developer Connect OAuth Admin 
( roles/  
)
 Developer Connect OAuth User 
( roles/  
)

