This page lists the IAM roles and permissions for Backup for GKE. To search through all roles and permissions, see the role and permission index .
Backup for GKE roles
Backup for GKE Admin
( roles/
)
Full access to all Backup for GKE resources.
gkebackup.*
-
gkebackup.
backupChannels. create -
gkebackup.
backupChannels. delete -
gkebackup.backupChannels.get
-
gkebackup.backupChannels.list
-
gkebackup.
backupChannels. update -
gkebackup.
backupPlanBindings. get -
gkebackup.
backupPlanBindings. list -
gkebackup.backupPlans.create
-
gkebackup.backupPlans.delete
-
gkebackup.backupPlans.get
-
gkebackup.
backupPlans. getIamPolicy -
gkebackup.backupPlans.list
-
gkebackup.
backupPlans. setIamPolicy -
gkebackup.backupPlans.update
-
gkebackup.backups.create
-
gkebackup.backups.delete
-
gkebackup.backups.get
-
gkebackup.
backups. getBackupIndex -
gkebackup.backups.list
-
gkebackup.backups.update
-
gkebackup.locations.get
-
gkebackup.locations.list
-
gkebackup.operations.cancel
-
gkebackup.operations.delete
-
gkebackup.operations.get
-
gkebackup.operations.list
-
gkebackup.
restoreChannels. create -
gkebackup.
restoreChannels. delete -
gkebackup.restoreChannels.get
-
gkebackup.restoreChannels.list
-
gkebackup.
restoreChannels. update -
gkebackup.
restorePlanBindings. get -
gkebackup.
restorePlanBindings. list -
gkebackup.restorePlans.create
-
gkebackup.restorePlans.delete
-
gkebackup.restorePlans.get
-
gkebackup.
restorePlans. getIamPolicy -
gkebackup.restorePlans.list
-
gkebackup.
restorePlans. setIamPolicy -
gkebackup.restorePlans.update
-
gkebackup.restores.create
-
gkebackup.restores.delete
-
gkebackup.restores.get
-
gkebackup.restores.list
-
gkebackup.restores.update
-
gkebackup.volumeBackups.get
-
gkebackup.volumeBackups.list
-
gkebackup.volumeRestores.get
-
gkebackup.volumeRestores.list
resourcemanager.projects.get
resourcemanager.projects.list
Backup for GKE Backup Admin
( roles/
)
Allows administrators to manage all BackupPlan and Backup resources.
gkebackup.backupChannels.get
gkebackup.backupChannels.list
gkebackup.backupPlanBindings.*
-
gkebackup.
backupPlanBindings. get -
gkebackup.
backupPlanBindings. list
gkebackup.backupPlans.*
-
gkebackup.backupPlans.create
-
gkebackup.backupPlans.delete
-
gkebackup.backupPlans.get
-
gkebackup.
backupPlans. getIamPolicy -
gkebackup.backupPlans.list
-
gkebackup.
backupPlans. setIamPolicy -
gkebackup.backupPlans.update
gkebackup.backups.*
-
gkebackup.backups.create
-
gkebackup.backups.delete
-
gkebackup.backups.get
-
gkebackup.
backups. getBackupIndex -
gkebackup.backups.list
-
gkebackup.backups.update
gkebackup.locations.*
-
gkebackup.locations.get
-
gkebackup.locations.list
gkebackup.operations.get
gkebackup.operations.list
gkebackup.restoreChannels.*
-
gkebackup.
restoreChannels. create -
gkebackup.
restoreChannels. delete -
gkebackup.restoreChannels.get
-
gkebackup.restoreChannels.list
-
gkebackup.
restoreChannels. update
gkebackup.
-
gkebackup.
restorePlanBindings. get -
gkebackup.
restorePlanBindings. list
gkebackup.volumeBackups.*
-
gkebackup.volumeBackups.get
-
gkebackup.volumeBackups.list
resourcemanager.projects.get
resourcemanager.projects.list
Backup for GKE Cross Project Service Agent
( roles/
)
Grants permissions to execute Backup for GKE resources across projects.
Backup for GKE Delegated Backup Admin
( roles/
)
Allows administrators to manage Backup resources for specific BackupPlans
gkebackup.backupChannels.get
gkebackup.backupChannels.list
gkebackup.backupPlanBindings.*
-
gkebackup.
backupPlanBindings. get -
gkebackup.
backupPlanBindings. list
gkebackup.backupPlans.get
gkebackup.backups.*
-
gkebackup.backups.create
-
gkebackup.backups.delete
-
gkebackup.backups.get
-
gkebackup.
backups. getBackupIndex -
gkebackup.backups.list
-
gkebackup.backups.update
gkebackup.volumeBackups.*
-
gkebackup.volumeBackups.get
-
gkebackup.volumeBackups.list
Backup for GKE Delegated Restore Admin
( roles/
)
Allows administrators to manage Restore resources for specific RestorePlans
gkebackup.restorePlans.get
gkebackup.restores.*
-
gkebackup.restores.create
-
gkebackup.restores.delete
-
gkebackup.restores.get
-
gkebackup.restores.list
-
gkebackup.restores.update
gkebackup.volumeRestores.*
-
gkebackup.volumeRestores.get
-
gkebackup.volumeRestores.list
Backup for GKE Restore Admin
( roles/
)
Allows administrators to manage all RestorePlan and Restore resources.
gkebackup.backupPlans.get
gkebackup.backupPlans.list
gkebackup.backups.get
gkebackup.
gkebackup.backups.list
gkebackup.locations.*
-
gkebackup.locations.get
-
gkebackup.locations.list
gkebackup.operations.get
gkebackup.operations.list
gkebackup.restoreChannels.get
gkebackup.restoreChannels.list
gkebackup.
-
gkebackup.
restorePlanBindings. get -
gkebackup.
restorePlanBindings. list
gkebackup.restorePlans.*
-
gkebackup.restorePlans.create
-
gkebackup.restorePlans.delete
-
gkebackup.restorePlans.get
-
gkebackup.
restorePlans. getIamPolicy -
gkebackup.restorePlans.list
-
gkebackup.
restorePlans. setIamPolicy -
gkebackup.restorePlans.update
gkebackup.restores.*
-
gkebackup.restores.create
-
gkebackup.restores.delete
-
gkebackup.restores.get
-
gkebackup.restores.list
-
gkebackup.restores.update
gkebackup.volumeBackups.*
-
gkebackup.volumeBackups.get
-
gkebackup.volumeBackups.list
gkebackup.volumeRestores.*
-
gkebackup.volumeRestores.get
-
gkebackup.volumeRestores.list
resourcemanager.projects.get
resourcemanager.projects.list
Backup for GKE Service Agent
( roles/
)
Grants the Backup for GKE Service Account access to managed resources.
compute.disks.create
compute.disks.createSnapshot
compute.disks.get
compute.disks.list
compute.disks.setLabels
compute.disks.useReadOnly
compute.globalOperations.get
compute.regionOperations.get
compute.snapshots.delete
compute.snapshots.get
compute.storagePools.use
compute.zoneOperations.get
container.apiServices.*
-
container.apiServices.create
-
container.apiServices.delete
-
container.apiServices.get
-
container.
apiServices. getStatus -
container.apiServices.list
-
container.apiServices.update
-
container.
apiServices. updateStatus
container.auditSinks.*
-
container.auditSinks.create
-
container.auditSinks.delete
-
container.auditSinks.get
-
container.auditSinks.list
-
container.auditSinks.update
container.backendConfigs.*
-
container.
backendConfigs. create -
container.
backendConfigs. delete -
container.backendConfigs.get
-
container.backendConfigs.list
-
container.
backendConfigs. update
container.bindings.*
-
container.bindings.create
-
container.bindings.delete
-
container.bindings.get
-
container.bindings.list
-
container.bindings.update
container.
container.
container.
container.
container.
container.
container.
container.
container.clusterRoles.get
container.clusterRoles.list
container.clusters.connect
container.clusters.get
container.clusters.list
container.clusters.update
container.componentStatuses.*
-
container.
componentStatuses. get -
container.
componentStatuses. list
container.configMaps.*
-
container.configMaps.create
-
container.configMaps.delete
-
container.configMaps.get
-
container.configMaps.list
-
container.configMaps.update
container.
container.
container.cronJobs.*
-
container.cronJobs.create
-
container.cronJobs.delete
-
container.cronJobs.get
-
container.cronJobs.getStatus
-
container.cronJobs.list
-
container.cronJobs.update
-
container.
cronJobs. updateStatus
container.csiDrivers.*
-
container.csiDrivers.create
-
container.csiDrivers.delete
-
container.csiDrivers.get
-
container.csiDrivers.list
-
container.csiDrivers.update
container.csiNodeInfos.*
-
container.csiNodeInfos.create
-
container.csiNodeInfos.delete
-
container.csiNodeInfos.get
-
container.csiNodeInfos.list
-
container.csiNodeInfos.update
container.csiNodes.*
-
container.csiNodes.create
-
container.csiNodes.delete
-
container.csiNodes.get
-
container.csiNodes.list
-
container.csiNodes.update
container.
-
container.
customResourceDefinitions. create -
container.
customResourceDefinitions. delete -
container.
customResourceDefinitions. get -
container.
customResourceDefinitions. getStatus -
container.
customResourceDefinitions. list -
container.
customResourceDefinitions. update -
container.
customResourceDefinitions. updateStatus
container.daemonSets.*
-
container.daemonSets.create
-
container.daemonSets.delete
-
container.daemonSets.get
-
container.daemonSets.getStatus
-
container.daemonSets.list
-
container.daemonSets.update
-
container.
daemonSets. updateStatus
container.deployments.*
-
container.deployments.create
-
container.deployments.delete
-
container.deployments.get
-
container.deployments.getScale
-
container.
deployments. getStatus -
container.deployments.list
-
container.deployments.rollback
-
container.deployments.update
-
container.
deployments. updateScale -
container.
deployments. updateStatus
container.endpointSlices.*
-
container.
endpointSlices. create -
container.
endpointSlices. delete -
container.endpointSlices.get
-
container.endpointSlices.list
-
container.
endpointSlices. update
container.endpoints.*
-
container.endpoints.create
-
container.endpoints.delete
-
container.endpoints.get
-
container.endpoints.list
-
container.endpoints.update
container.events.*
-
container.events.create
-
container.events.delete
-
container.events.get
-
container.events.list
-
container.events.update
container.frontendConfigs.*
-
container.
frontendConfigs. create -
container.
frontendConfigs. delete -
container.frontendConfigs.get
-
container.frontendConfigs.list
-
container.
frontendConfigs. update
container.
-
container.
horizontalPodAutoscalers. create -
container.
horizontalPodAutoscalers. delete -
container.
horizontalPodAutoscalers. get -
container.
horizontalPodAutoscalers. getStatus -
container.
horizontalPodAutoscalers. list -
container.
horizontalPodAutoscalers. update -
container.
horizontalPodAutoscalers. updateStatus
container.ingresses.*
-
container.ingresses.create
-
container.ingresses.delete
-
container.ingresses.get
-
container.ingresses.getStatus
-
container.ingresses.list
-
container.ingresses.update
-
container.
ingresses. updateStatus
container.
-
container.
initializerConfigurations. create -
container.
initializerConfigurations. delete -
container.
initializerConfigurations. get -
container.
initializerConfigurations. list -
container.
initializerConfigurations. update
container.jobs.*
-
container.jobs.create
-
container.jobs.delete
-
container.jobs.get
-
container.jobs.getStatus
-
container.jobs.list
-
container.jobs.update
-
container.jobs.updateStatus
container.leases.*
-
container.leases.create
-
container.leases.delete
-
container.leases.get
-
container.leases.list
-
container.leases.update
container.limitRanges.*
-
container.limitRanges.create
-
container.limitRanges.delete
-
container.limitRanges.get
-
container.limitRanges.list
-
container.limitRanges.update
container.
-
container.
localSubjectAccessReviews. create -
container.
localSubjectAccessReviews. list
container.
-
container.
managedCertificates. create -
container.
managedCertificates. delete -
container.
managedCertificates. get -
container.
managedCertificates. list -
container.
managedCertificates. update
container.
container.
container.namespaces.*
-
container.namespaces.create
-
container.namespaces.delete
-
container.namespaces.finalize
-
container.namespaces.get
-
container.namespaces.getStatus
-
container.namespaces.list
-
container.namespaces.update
-
container.
namespaces. updateStatus
container.networkPolicies.*
-
container.
networkPolicies. create -
container.
networkPolicies. delete -
container.networkPolicies.get
-
container.networkPolicies.list
-
container.
networkPolicies. update
container.nodes.*
-
container.nodes.create
-
container.nodes.delete
-
container.nodes.get
-
container.nodes.getStatus
-
container.nodes.list
-
container.nodes.proxy
-
container.nodes.update
-
container.nodes.updateStatus
container.operations.*
-
container.operations.get
-
container.operations.list
container.
-
container.
persistentVolumeClaims. create -
container.
persistentVolumeClaims. delete -
container.
persistentVolumeClaims. get -
container.
persistentVolumeClaims. getStatus -
container.
persistentVolumeClaims. list -
container.
persistentVolumeClaims. update -
container.
persistentVolumeClaims. updateStatus
container.persistentVolumes.*
-
container.
persistentVolumes. create -
container.
persistentVolumes. delete -
container.
persistentVolumes. get -
container.
persistentVolumes. getStatus -
container.
persistentVolumes. list -
container.
persistentVolumes. update -
container.
persistentVolumes. updateStatus
container.petSets.*
-
container.petSets.create
-
container.petSets.delete
-
container.petSets.get
-
container.petSets.list
-
container.petSets.update
-
container.petSets.updateStatus
container.
-
container.
podDisruptionBudgets. create -
container.
podDisruptionBudgets. delete -
container.
podDisruptionBudgets. get -
container.
podDisruptionBudgets. getStatus -
container.
podDisruptionBudgets. list -
container.
podDisruptionBudgets. update -
container.
podDisruptionBudgets. updateStatus
container.podPresets.*
-
container.podPresets.create
-
container.podPresets.delete
-
container.podPresets.get
-
container.podPresets.list
-
container.podPresets.update
container.
container.
container.podTemplates.*
-
container.podTemplates.create
-
container.podTemplates.delete
-
container.podTemplates.get
-
container.podTemplates.list
-
container.podTemplates.update
container.pods.*
-
container.pods.attach
-
container.pods.create
-
container.pods.delete
-
container.pods.evict
-
container.pods.exec
-
container.pods.get
-
container.pods.getLogs
-
container.pods.getStatus
-
container.pods.initialize
-
container.pods.list
-
container.pods.portForward
-
container.pods.proxy
-
container.pods.update
-
container.pods.updateStatus
container.priorityClasses.*
-
container.
priorityClasses. create -
container.
priorityClasses. delete -
container.priorityClasses.get
-
container.priorityClasses.list
-
container.
priorityClasses. update
container.replicaSets.*
-
container.replicaSets.create
-
container.replicaSets.delete
-
container.replicaSets.get
-
container.replicaSets.getScale
-
container.
replicaSets. getStatus -
container.replicaSets.list
-
container.replicaSets.update
-
container.
replicaSets. updateScale -
container.
replicaSets. updateStatus
container.
-
container.
replicationControllers. create -
container.
replicationControllers. delete -
container.
replicationControllers. get -
container.
replicationControllers. getScale -
container.
replicationControllers. getStatus -
container.
replicationControllers. list -
container.
replicationControllers. update -
container.
replicationControllers. updateScale -
container.
replicationControllers. updateStatus
container.resourceQuotas.*
-
container.
resourceQuotas. create -
container.
resourceQuotas. delete -
container.resourceQuotas.get
-
container.
resourceQuotas. getStatus -
container.resourceQuotas.list
-
container.
resourceQuotas. update -
container.
resourceQuotas. updateStatus
container.roleBindings.get
container.roleBindings.list
container.roles.get
container.roles.list
container.runtimeClasses.*
-
container.
runtimeClasses. create -
container.
runtimeClasses. delete -
container.runtimeClasses.get
-
container.runtimeClasses.list
-
container.
runtimeClasses. update
container.scheduledJobs.*
-
container.scheduledJobs.create
-
container.scheduledJobs.delete
-
container.scheduledJobs.get
-
container.scheduledJobs.list
-
container.scheduledJobs.update
-
container.
scheduledJobs. updateStatus
container.secrets.*
-
container.secrets.create
-
container.secrets.delete
-
container.secrets.get
-
container.secrets.list
-
container.secrets.update
container.
-
container.
selfSubjectAccessReviews. create -
container.
selfSubjectAccessReviews. list
container.
container.serviceAccounts.*
-
container.
serviceAccounts. create -
container.
serviceAccounts. createToken -
container.
serviceAccounts. delete -
container.serviceAccounts.get
-
container.serviceAccounts.list
-
container.
serviceAccounts. update
container.services.*
-
container.services.create
-
container.services.delete
-
container.services.get
-
container.services.getStatus
-
container.services.list
-
container.services.proxy
-
container.services.update
-
container.
services. updateStatus
container.statefulSets.*
-
container.statefulSets.create
-
container.statefulSets.delete
-
container.statefulSets.get
-
container.
statefulSets. getScale -
container.
statefulSets. getStatus -
container.statefulSets.list
-
container.statefulSets.update
-
container.
statefulSets. updateScale -
container.
statefulSets. updateStatus
container.storageClasses.*
-
container.
storageClasses. create -
container.
storageClasses. delete -
container.storageClasses.get
-
container.storageClasses.list
-
container.
storageClasses. update
container.storageStates.*
-
container.storageStates.create
-
container.storageStates.delete
-
container.storageStates.get
-
container.
storageStates. getStatus -
container.storageStates.list
-
container.storageStates.update
-
container.
storageStates. updateStatus
container.
-
container.
storageVersionMigrations. create -
container.
storageVersionMigrations. delete -
container.
storageVersionMigrations. get -
container.
storageVersionMigrations. getStatus -
container.
storageVersionMigrations. list -
container.
storageVersionMigrations. update -
container.
storageVersionMigrations. updateStatus
container.
-
container.
subjectAccessReviews. create -
container.
subjectAccessReviews. list
container.thirdPartyObjects.*
-
container.
thirdPartyObjects. create -
container.
thirdPartyObjects. delete -
container.
thirdPartyObjects. get -
container.
thirdPartyObjects. list -
container.
thirdPartyObjects. update
container.
-
container.
thirdPartyResources. create -
container.
thirdPartyResources. delete -
container.
thirdPartyResources. get -
container.
thirdPartyResources. list -
container.
thirdPartyResources. update
container.tokenReviews.create
container.updateInfos.*
-
container.updateInfos.create
-
container.updateInfos.delete
-
container.updateInfos.get
-
container.updateInfos.list
-
container.updateInfos.update
container.
container.
container.volumeAttachments.*
-
container.
volumeAttachments. create -
container.
volumeAttachments. delete -
container.
volumeAttachments. get -
container.
volumeAttachments. getStatus -
container.
volumeAttachments. list -
container.
volumeAttachments. update -
container.
volumeAttachments. updateStatus
container.
-
container.
volumeSnapshotClasses. create -
container.
volumeSnapshotClasses. delete -
container.
volumeSnapshotClasses. get -
container.
volumeSnapshotClasses. list -
container.
volumeSnapshotClasses. update
container.
-
container.
volumeSnapshotContents. create -
container.
volumeSnapshotContents. delete -
container.
volumeSnapshotContents. get -
container.
volumeSnapshotContents. getStatus -
container.
volumeSnapshotContents. list -
container.
volumeSnapshotContents. update -
container.
volumeSnapshotContents. updateStatus
container.volumeSnapshots.*
-
container.
volumeSnapshots. create -
container.
volumeSnapshots. delete -
container.volumeSnapshots.get
-
container.
volumeSnapshots. getStatus -
container.volumeSnapshots.list
-
container.
volumeSnapshots. update -
container.
volumeSnapshots. updateStatus
gkebackup.operations.get
recommender.
-
recommender.
containerDiagnosisInsights. get -
recommender.
containerDiagnosisInsights. list -
recommender.
containerDiagnosisInsights. update
recommender.
-
recommender.
containerDiagnosisRecommendations. get -
recommender.
containerDiagnosisRecommendations. list -
recommender.
containerDiagnosisRecommendations. update
recommender.locations.*
-
recommender.locations.get
-
recommender.locations.list
recommender.
-
recommender.
networkAnalyzerGkeConnectivityInsights. get -
recommender.
networkAnalyzerGkeConnectivityInsights. list -
recommender.
networkAnalyzerGkeConnectivityInsights. update
recommender.
-
recommender.
networkAnalyzerGkeIpAddressInsights. get -
recommender.
networkAnalyzerGkeIpAddressInsights. list -
recommender.
networkAnalyzerGkeIpAddressInsights. update
resourcemanager.projects.get
resourcemanager.projects.list
resourcemanager.
Backup for GKE Viewer
( roles/
)
Read-only access to all Backup for GKE resources.
gkebackup.backupChannels.get
gkebackup.backupChannels.list
gkebackup.backupPlanBindings.*
-
gkebackup.
backupPlanBindings. get -
gkebackup.
backupPlanBindings. list
gkebackup.backupPlans.get
gkebackup.
gkebackup.backupPlans.list
gkebackup.backups.get
gkebackup.
gkebackup.backups.list
gkebackup.locations.*
-
gkebackup.locations.get
-
gkebackup.locations.list
gkebackup.operations.get
gkebackup.operations.list
gkebackup.restoreChannels.get
gkebackup.restoreChannels.list
gkebackup.
-
gkebackup.
restorePlanBindings. get -
gkebackup.
restorePlanBindings. list
gkebackup.restorePlans.get
gkebackup.
gkebackup.restorePlans.list
gkebackup.restores.get
gkebackup.restores.list
gkebackup.volumeBackups.*
-
gkebackup.volumeBackups.get
-
gkebackup.volumeBackups.list
gkebackup.volumeRestores.*
-
gkebackup.volumeRestores.get
-
gkebackup.volumeRestores.list
resourcemanager.projects.get
resourcemanager.projects.list
Backup for GKE permissions
gkebackup.
backupChannels.
create
gkebackup.
backupChannels.
delete
gkebackup.backupChannels.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
Backup for GKE Delegated Backup Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Support User
( roles/
)
gkebackup.backupChannels.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
Backup for GKE Delegated Backup Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
gkebackup.
backupChannels.
update
gkebackup.
backupPlanBindings.
get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
Backup for GKE Delegated Backup Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Support User
( roles/
)
gkebackup.
backupPlanBindings.
list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
Backup for GKE Delegated Backup Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
gkebackup.backupPlans.create
Owner
( roles/
)
Editor
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
gkebackup.backupPlans.delete
Owner
( roles/
)
Editor
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
gkebackup.backupPlans.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
Backup for GKE Delegated Backup Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Support User
( roles/
)
gkebackup.
backupPlans.
getIamPolicy
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
gkebackup.backupPlans.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
gkebackup.
backupPlans.
setIamPolicy
Owner
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
Security Admin
( roles/
)
gkebackup.backupPlans.update
Owner
( roles/
)
Editor
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
gkebackup.backups.create
Owner
( roles/
)
Editor
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
Backup for GKE Delegated Backup Admin
( roles/
)
gkebackup.backups.delete
Owner
( roles/
)
Editor
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
Backup for GKE Delegated Backup Admin
( roles/
)
gkebackup.backups.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
Backup for GKE Delegated Backup Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Support User
( roles/
)
gkebackup.
backups.
getBackupIndex
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
Backup for GKE Delegated Backup Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Support User
( roles/
)
gkebackup.backups.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
Backup for GKE Delegated Backup Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
gkebackup.backups.update
Owner
( roles/
)
Editor
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
Backup for GKE Delegated Backup Admin
( roles/
)
gkebackup.locations.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Support User
( roles/
)
gkebackup.locations.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
gkebackup.operations.cancel
gkebackup.operations.delete
gkebackup.operations.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Backup for GKE Service Agent
(
roles/
)gkebackup.serviceAgent
gkebackup.operations.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
gkebackup.
restoreChannels.
create
Owner
( roles/
)
Editor
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
gkebackup.
restoreChannels.
delete
Owner
( roles/
)
Editor
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
gkebackup.restoreChannels.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Support User
( roles/
)
gkebackup.restoreChannels.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
gkebackup.
restoreChannels.
update
Owner
( roles/
)
Editor
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
gkebackup.
restorePlanBindings.
get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Support User
( roles/
)
gkebackup.
restorePlanBindings.
list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
gkebackup.restorePlans.create
Owner
( roles/
)
Editor
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
gkebackup.restorePlans.delete
Owner
( roles/
)
Editor
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
gkebackup.restorePlans.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Delegated Restore Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Support User
( roles/
)
gkebackup.
restorePlans.
getIamPolicy
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
gkebackup.restorePlans.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
gkebackup.
restorePlans.
setIamPolicy
Owner
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
Security Admin
( roles/
)
gkebackup.restorePlans.update
Owner
( roles/
)
Editor
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
gkebackup.restores.create
Owner
( roles/
)
Editor
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Delegated Restore Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
gkebackup.restores.delete
Owner
( roles/
)
Editor
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Delegated Restore Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
gkebackup.restores.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Delegated Restore Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Support User
( roles/
)
gkebackup.restores.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Delegated Restore Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
gkebackup.restores.update
Owner
( roles/
)
Editor
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Delegated Restore Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
gkebackup.volumeBackups.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
Backup for GKE Delegated Backup Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Support User
( roles/
)
gkebackup.volumeBackups.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Backup Admin
( roles/
)
Backup for GKE Delegated Backup Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
gkebackup.volumeRestores.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Delegated Restore Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Support User
( roles/
)
gkebackup.volumeRestores.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Backup for GKE Admin
( roles/
)
Backup for GKE Delegated Restore Admin
( roles/
)
Backup for GKE Restore Admin
( roles/
)
Backup for GKE Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)