This page lists the IAM roles and permissions for Google Cloud Managed Service for Apache Kafka. To search through all roles and permissions, see the role and permission index .
Google Cloud Managed Service for Apache Kafka roles
Managed Kafka ACL Editor
( roles/  
)
Read and write access to Managed Kafka ACL resources.
  managedkafka.acls.* 
 
-  managedkafka.acls.create
-  managedkafka.acls.delete
-  managedkafka.acls.get
-  managedkafka.acls.list
-  managedkafka.acls.update
-  managedkafka.acls. updateEntries 
Managed Kafka ACL Viewer
( roles/  
)
Readonly access to Managed Kafka ACL resources.
 managedkafka.acls.get 
 managedkafka.acls.list 
Managed Kafka Admin
( roles/  
)
Full access to Managed Kafka resources.
 cloudasset.  
  managedkafka.* 
 
-  managedkafka.acls.create
-  managedkafka.acls.delete
-  managedkafka.acls.get
-  managedkafka.acls.list
-  managedkafka.acls.update
-  managedkafka.acls. updateEntries 
-  managedkafka.clusters. attachConnectCluster 
-  managedkafka.clusters.connect
-  managedkafka.clusters.create
-  managedkafka.clusters.delete
-  managedkafka.clusters.get
-  managedkafka.clusters.list
-  managedkafka.clusters.update
-  managedkafka.config.delete
-  managedkafka.config.get
-  managedkafka.config.update
-  managedkafka.connectClusters. create 
-  managedkafka.connectClusters. delete 
-  managedkafka.connectClusters. get 
-  managedkafka.connectClusters. list 
-  managedkafka.connectClusters. update 
-  managedkafka.connectors.create
-  managedkafka.connectors.delete
-  managedkafka.connectors.get
-  managedkafka.connectors.list
-  managedkafka.connectors.pause
-  managedkafka.connectors. restart 
-  managedkafka.connectors.resume
-  managedkafka.connectors.stop
-  managedkafka.connectors.update
-  managedkafka.consumerGroups. delete 
-  managedkafka.consumerGroups. get 
-  managedkafka.consumerGroups. list 
-  managedkafka.consumerGroups. update 
-  managedkafka.contexts.get
-  managedkafka.contexts.list
-  managedkafka.locations.get
-  managedkafka.locations.list
-  managedkafka.mode.delete
-  managedkafka.mode.get
-  managedkafka.mode.update
-  managedkafka.operations.cancel
-  managedkafka.operations.delete
-  managedkafka.operations.get
-  managedkafka.operations.list
-  managedkafka.schemaRegistries. create 
-  managedkafka.schemaRegistries. delete 
-  managedkafka.schemaRegistries. get 
-  managedkafka.schemaRegistries. list 
-  managedkafka.schemas.get
-  managedkafka.schemas. listSubjects 
-  managedkafka.schemas.listTypes
-  managedkafka.schemas. listVersions 
-  managedkafka.subjects.delete
-  managedkafka.subjects.list
-  managedkafka.subjects.lookup
-  managedkafka.topics.create
-  managedkafka.topics.delete
-  managedkafka.topics.get
-  managedkafka.topics.list
-  managedkafka.topics.update
-  managedkafka.versions. checkCompatibility 
-  managedkafka.versions.create
-  managedkafka.versions.delete
-  managedkafka.versions.get
-  managedkafka.versions.list
-  managedkafka.versions. referencedby 
 resourcemanager.projects.get 
 resourcemanager.projects.list 
 serviceusage.quotas.get 
 serviceusage.services.get 
 serviceusage.services.list 
Managed Kafka Client
( roles/  
)
Provides access to connect to the Kafka servers in a cluster, i.e. provides Kafka data plane access. Intended for, e.g., producers and consumers.
 cloudasset.  
 managedkafka.acls.get 
 managedkafka.acls.list 
 managedkafka.  
 managedkafka.clusters.connect 
 managedkafka.clusters.get 
 managedkafka.clusters.list 
 managedkafka.config.get 
 managedkafka.  
 managedkafka.  
 managedkafka.connectors.get 
 managedkafka.connectors.list 
  managedkafka.consumerGroups.* 
 
-  managedkafka.consumerGroups. delete 
-  managedkafka.consumerGroups. get 
-  managedkafka.consumerGroups. list 
-  managedkafka.consumerGroups. update 
  managedkafka.contexts.* 
 
-  managedkafka.contexts.get
-  managedkafka.contexts.list
  managedkafka.locations.* 
 
-  managedkafka.locations.get
-  managedkafka.locations.list
 managedkafka.mode.get 
 managedkafka.operations.get 
 managedkafka.operations.list 
 managedkafka.  
 managedkafka.  
  managedkafka.schemas.* 
 
-  managedkafka.schemas.get
-  managedkafka.schemas. listSubjects 
-  managedkafka.schemas.listTypes
-  managedkafka.schemas. listVersions 
 managedkafka.subjects.list 
 managedkafka.subjects.lookup 
  managedkafka.topics.* 
 
-  managedkafka.topics.create
-  managedkafka.topics.delete
-  managedkafka.topics.get
-  managedkafka.topics.list
-  managedkafka.topics.update
 managedkafka.  
 managedkafka.versions.get 
 managedkafka.versions.list 
 managedkafka.  
 resourcemanager.projects.get 
 resourcemanager.projects.list 
 serviceusage.quotas.get 
 serviceusage.services.get 
 serviceusage.services.list 
Managed Kafka Cluster Editor
( roles/  
)
Provides read and write access to Kafka clusters. Intended for, e.g., IT Departments that provision Kafka clusters, but need not be able to read or modify topics or consumer groups.
 cloudasset.  
 managedkafka.acls.get 
 managedkafka.acls.list 
 managedkafka.clusters.create 
 managedkafka.clusters.delete 
 managedkafka.clusters.get 
 managedkafka.clusters.list 
 managedkafka.clusters.update 
 managedkafka.config.get 
 managedkafka.  
 managedkafka.  
 managedkafka.connectors.get 
 managedkafka.connectors.list 
 managedkafka.  
 managedkafka.  
  managedkafka.contexts.* 
 
-  managedkafka.contexts.get
-  managedkafka.contexts.list
  managedkafka.locations.* 
 
-  managedkafka.locations.get
-  managedkafka.locations.list
 managedkafka.mode.get 
 managedkafka.operations.get 
 managedkafka.operations.list 
 managedkafka.  
 managedkafka.  
  managedkafka.schemas.* 
 
-  managedkafka.schemas.get
-  managedkafka.schemas. listSubjects 
-  managedkafka.schemas.listTypes
-  managedkafka.schemas. listVersions 
 managedkafka.subjects.list 
 managedkafka.subjects.lookup 
 managedkafka.topics.get 
 managedkafka.topics.list 
 managedkafka.  
 managedkafka.versions.get 
 managedkafka.versions.list 
 managedkafka.  
 resourcemanager.projects.get 
 resourcemanager.projects.list 
 serviceusage.quotas.get 
 serviceusage.services.get 
 serviceusage.services.list 
Managed Kafka Connect Cluster Editor Beta
( roles/  
)
Provides read and write access to Kafka Connect clusters. Intended for, e.g., IT Departments that provision Kafka Connect clusters, but need not be able to read or modify connectors.
  managedkafka.connectClusters.* 
 
-  managedkafka.connectClusters. create 
-  managedkafka.connectClusters. delete 
-  managedkafka.connectClusters. get 
-  managedkafka.connectClusters. list 
-  managedkafka.connectClusters. update 
 managedkafka.connectors.get 
 managedkafka.connectors.list 
Managed Kafka Connector Editor Beta
( roles/  
)
Provides read and write access to connectors. Intended for, e.g., developers who configure and operate connectors.
 cloudasset.  
 managedkafka.acls.get 
 managedkafka.acls.list 
 managedkafka.clusters.get 
 managedkafka.clusters.list 
 managedkafka.config.get 
 managedkafka.  
 managedkafka.  
  managedkafka.connectors.* 
 
-  managedkafka.connectors.create
-  managedkafka.connectors.delete
-  managedkafka.connectors.get
-  managedkafka.connectors.list
-  managedkafka.connectors.pause
-  managedkafka.connectors. restart 
-  managedkafka.connectors.resume
-  managedkafka.connectors.stop
-  managedkafka.connectors.update
 managedkafka.  
 managedkafka.  
  managedkafka.contexts.* 
 
-  managedkafka.contexts.get
-  managedkafka.contexts.list
  managedkafka.locations.* 
 
-  managedkafka.locations.get
-  managedkafka.locations.list
 managedkafka.mode.get 
 managedkafka.operations.get 
 managedkafka.operations.list 
 managedkafka.  
 managedkafka.  
  managedkafka.schemas.* 
 
-  managedkafka.schemas.get
-  managedkafka.schemas. listSubjects 
-  managedkafka.schemas.listTypes
-  managedkafka.schemas. listVersions 
 managedkafka.subjects.list 
 managedkafka.subjects.lookup 
 managedkafka.topics.get 
 managedkafka.topics.list 
 managedkafka.  
 managedkafka.versions.get 
 managedkafka.versions.list 
 managedkafka.  
 resourcemanager.projects.get 
 resourcemanager.projects.list 
 serviceusage.quotas.get 
 serviceusage.services.get 
 serviceusage.services.list 
Managed Kafka Consumer Group Editor
( roles/  
)
Provides read and write access to consumer group metadata. Intended for, e.g., developers who configure consumer groups.
 cloudasset.  
 managedkafka.acls.get 
 managedkafka.acls.list 
 managedkafka.clusters.get 
 managedkafka.clusters.list 
 managedkafka.config.get 
 managedkafka.  
 managedkafka.  
 managedkafka.connectors.get 
 managedkafka.connectors.list 
  managedkafka.consumerGroups.* 
 
-  managedkafka.consumerGroups. delete 
-  managedkafka.consumerGroups. get 
-  managedkafka.consumerGroups. list 
-  managedkafka.consumerGroups. update 
  managedkafka.contexts.* 
 
-  managedkafka.contexts.get
-  managedkafka.contexts.list
  managedkafka.locations.* 
 
-  managedkafka.locations.get
-  managedkafka.locations.list
 managedkafka.mode.get 
 managedkafka.operations.get 
 managedkafka.operations.list 
 managedkafka.  
 managedkafka.  
  managedkafka.schemas.* 
 
-  managedkafka.schemas.get
-  managedkafka.schemas. listSubjects 
-  managedkafka.schemas.listTypes
-  managedkafka.schemas. listVersions 
 managedkafka.subjects.list 
 managedkafka.subjects.lookup 
 managedkafka.topics.get 
 managedkafka.topics.list 
 managedkafka.  
 managedkafka.versions.get 
 managedkafka.versions.list 
 managedkafka.  
 resourcemanager.projects.get 
 resourcemanager.projects.list 
 serviceusage.quotas.get 
 serviceusage.services.get 
 serviceusage.services.list 
Schema Registry Admin Beta
( roles/  
)
Full access to schemas, schema versions and configs
  managedkafka.config.* 
 
-  managedkafka.config.delete
-  managedkafka.config.get
-  managedkafka.config.update
  managedkafka.contexts.* 
 
-  managedkafka.contexts.get
-  managedkafka.contexts.list
  managedkafka.mode.* 
 
-  managedkafka.mode.delete
-  managedkafka.mode.get
-  managedkafka.mode.update
  managedkafka.  
 
-  managedkafka.schemaRegistries. create 
-  managedkafka.schemaRegistries. delete 
-  managedkafka.schemaRegistries. get 
-  managedkafka.schemaRegistries. list 
  managedkafka.schemas.* 
 
-  managedkafka.schemas.get
-  managedkafka.schemas. listSubjects 
-  managedkafka.schemas.listTypes
-  managedkafka.schemas. listVersions 
  managedkafka.subjects.* 
 
-  managedkafka.subjects.delete
-  managedkafka.subjects.list
-  managedkafka.subjects.lookup
  managedkafka.versions.* 
 
-  managedkafka.versions. checkCompatibility 
-  managedkafka.versions.create
-  managedkafka.versions.delete
-  managedkafka.versions.get
-  managedkafka.versions.list
-  managedkafka.versions. referencedby 
Schema Registry Editor Beta
( roles/  
)
View and edit schemas and schema versions
 managedkafka.config.get 
  managedkafka.contexts.* 
 
-  managedkafka.contexts.get
-  managedkafka.contexts.list
 managedkafka.mode.get 
  managedkafka.  
 
-  managedkafka.schemaRegistries. create 
-  managedkafka.schemaRegistries. delete 
-  managedkafka.schemaRegistries. get 
-  managedkafka.schemaRegistries. list 
  managedkafka.schemas.* 
 
-  managedkafka.schemas.get
-  managedkafka.schemas. listSubjects 
-  managedkafka.schemas.listTypes
-  managedkafka.schemas. listVersions 
  managedkafka.subjects.* 
 
-  managedkafka.subjects.delete
-  managedkafka.subjects.list
-  managedkafka.subjects.lookup
  managedkafka.versions.* 
 
-  managedkafka.versions. checkCompatibility 
-  managedkafka.versions.create
-  managedkafka.versions.delete
-  managedkafka.versions.get
-  managedkafka.versions.list
-  managedkafka.versions. referencedby 
Schema Registry Viewer Beta
( roles/  
)
View schemas and schema versions
 managedkafka.config.get 
  managedkafka.contexts.* 
 
-  managedkafka.contexts.get
-  managedkafka.contexts.list
 managedkafka.mode.get 
 managedkafka.  
 managedkafka.  
  managedkafka.schemas.* 
 
-  managedkafka.schemas.get
-  managedkafka.schemas. listSubjects 
-  managedkafka.schemas.listTypes
-  managedkafka.schemas. listVersions 
 managedkafka.subjects.list 
 managedkafka.subjects.lookup 
 managedkafka.  
 managedkafka.versions.get 
 managedkafka.versions.list 
 managedkafka.  
Managed Kafka Service Agent
( roles/  
)
Gives Managed Kafka Service Agent access to Cloud Platform resources.
 compute.addresses.create 
 compute.  
 compute.addresses.delete 
 compute.  
 compute.addresses.list 
 compute.addresses.use 
 compute.addresses.useInternal 
 compute.forwardingRules.create 
 compute.forwardingRules.delete 
 compute.forwardingRules.list 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.networkAttachments.get 
 compute.  
 compute.networks.get 
 compute.networks.use 
 compute.regionOperations.get 
 compute.subnetworks.get 
 compute.subnetworks.use 
 dns.changes.create 
 dns.managedZones.create 
 dns.managedZones.delete 
 dns.managedZones.list 
 dns.  
 dns.  
 dns.resourceRecordSets.create 
 dns.resourceRecordSets.delete 
 dns.resourceRecordSets.list 
 dns.resourceRecordSets.update 
 managedkafka.clusters.connect 
 privateca.caPools.get 
 servicedirectory.  
 servicedirectory.  
 servicedirectory.  
Managed Kafka Topic Editor
( roles/  
)
Provides read and write access to topic metadata. Intended for, e.g., developers who configure topics.
 cloudasset.  
 managedkafka.acls.get 
 managedkafka.acls.list 
 managedkafka.clusters.get 
 managedkafka.clusters.list 
 managedkafka.config.get 
 managedkafka.  
 managedkafka.  
 managedkafka.connectors.get 
 managedkafka.connectors.list 
 managedkafka.  
 managedkafka.  
  managedkafka.contexts.* 
 
-  managedkafka.contexts.get
-  managedkafka.contexts.list
  managedkafka.locations.* 
 
-  managedkafka.locations.get
-  managedkafka.locations.list
 managedkafka.mode.get 
 managedkafka.operations.get 
 managedkafka.operations.list 
 managedkafka.  
 managedkafka.  
  managedkafka.schemas.* 
 
-  managedkafka.schemas.get
-  managedkafka.schemas. listSubjects 
-  managedkafka.schemas.listTypes
-  managedkafka.schemas. listVersions 
 managedkafka.subjects.list 
 managedkafka.subjects.lookup 
  managedkafka.topics.* 
 
-  managedkafka.topics.create
-  managedkafka.topics.delete
-  managedkafka.topics.get
-  managedkafka.topics.list
-  managedkafka.topics.update
 managedkafka.  
 managedkafka.versions.get 
 managedkafka.versions.list 
 managedkafka.  
 resourcemanager.projects.get 
 resourcemanager.projects.list 
 serviceusage.quotas.get 
 serviceusage.services.get 
 serviceusage.services.list 
Managed Kafka Viewer
( roles/  
)
Readonly access to Managed Kafka resources.
 cloudasset.  
 managedkafka.acls.get 
 managedkafka.acls.list 
 managedkafka.clusters.get 
 managedkafka.clusters.list 
 managedkafka.config.get 
 managedkafka.  
 managedkafka.  
 managedkafka.connectors.get 
 managedkafka.connectors.list 
 managedkafka.  
 managedkafka.  
  managedkafka.contexts.* 
 
-  managedkafka.contexts.get
-  managedkafka.contexts.list
  managedkafka.locations.* 
 
-  managedkafka.locations.get
-  managedkafka.locations.list
 managedkafka.mode.get 
 managedkafka.operations.get 
 managedkafka.operations.list 
 managedkafka.  
 managedkafka.  
  managedkafka.schemas.* 
 
-  managedkafka.schemas.get
-  managedkafka.schemas. listSubjects 
-  managedkafka.schemas.listTypes
-  managedkafka.schemas. listVersions 
 managedkafka.subjects.list 
 managedkafka.subjects.lookup 
 managedkafka.topics.get 
 managedkafka.topics.list 
 managedkafka.  
 managedkafka.versions.get 
 managedkafka.versions.list 
 managedkafka.  
 resourcemanager.projects.get 
 resourcemanager.projects.list 
 serviceusage.quotas.get 
 serviceusage.services.get 
 serviceusage.services.list 
Google Cloud Managed Service for Apache Kafka permissions
 managedkafka.acls.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka ACL Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 managedkafka.acls.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka ACL Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 managedkafka.acls.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka ACL Editor 
( roles/  
)
 Managed Kafka ACL Viewer 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.acls.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka ACL Editor 
( roles/  
)
 Managed Kafka ACL Viewer 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.acls.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka ACL Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 managedkafka.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka ACL Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 managedkafka.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 managedkafka.clusters.connect 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
Service agent roles
-  Managed Kafka Service Agent 
( roles/)managedkafka.serviceAgent 
 managedkafka.clusters.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 managedkafka.clusters.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 managedkafka.clusters.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
Service agent roles
-  Managed Flink Service Agent 
( roles/)managedflink.serviceAgent 
 managedkafka.clusters.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
Service agent roles
-  Managed Flink Service Agent 
( roles/)managedflink.serviceAgent 
 managedkafka.clusters.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
Service agent roles
-  Managed Flink Service Agent 
( roles/)managedflink.serviceAgent 
 managedkafka.config.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Schema Registry Admin 
( roles/  
)
 managedkafka.config.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Schema Registry Admin 
( roles/  
)
 Schema Registry Editor 
( roles/  
)
 Schema Registry Viewer 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.config.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Schema Registry Admin 
( roles/  
)
 managedkafka.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Connect Cluster Editor 
( roles/  
)
 managedkafka.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Connect Cluster Editor 
( roles/  
)
 managedkafka.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connect Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connect Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Connect Cluster Editor 
( roles/  
)
 managedkafka.connectors.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 managedkafka.connectors.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 managedkafka.connectors.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connect Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.connectors.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connect Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.connectors.pause 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 managedkafka.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 managedkafka.connectors.resume 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 managedkafka.connectors.stop 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 managedkafka.connectors.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 managedkafka.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 managedkafka.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 managedkafka.contexts.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Schema Registry Admin 
( roles/  
)
 Schema Registry Editor 
( roles/  
)
 Schema Registry Viewer 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.contexts.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Schema Registry Admin 
( roles/  
)
 Schema Registry Editor 
( roles/  
)
 Schema Registry Viewer 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.locations.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.locations.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.mode.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Schema Registry Admin 
( roles/  
)
 managedkafka.mode.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Schema Registry Admin 
( roles/  
)
 Schema Registry Editor 
( roles/  
)
 Schema Registry Viewer 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.mode.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Schema Registry Admin 
( roles/  
)
 managedkafka.operations.cancel 
 
 managedkafka.operations.delete 
 
 managedkafka.operations.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.operations.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Schema Registry Admin 
( roles/  
)
 Schema Registry Editor 
( roles/  
)
 managedkafka.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Schema Registry Admin 
( roles/  
)
 Schema Registry Editor 
( roles/  
)
 managedkafka.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Schema Registry Admin 
( roles/  
)
 Schema Registry Editor 
( roles/  
)
 Schema Registry Viewer 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Schema Registry Admin 
( roles/  
)
 Schema Registry Editor 
( roles/  
)
 Schema Registry Viewer 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.schemas.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Schema Registry Admin 
( roles/  
)
 Schema Registry Editor 
( roles/  
)
 Schema Registry Viewer 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Schema Registry Admin 
( roles/  
)
 Schema Registry Editor 
( roles/  
)
 Schema Registry Viewer 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.schemas.listTypes 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Schema Registry Admin 
( roles/  
)
 Schema Registry Editor 
( roles/  
)
 Schema Registry Viewer 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Schema Registry Admin 
( roles/  
)
 Schema Registry Editor 
( roles/  
)
 Schema Registry Viewer 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.subjects.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Schema Registry Admin 
( roles/  
)
 Schema Registry Editor 
( roles/  
)
 managedkafka.subjects.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Schema Registry Admin 
( roles/  
)
 Schema Registry Editor 
( roles/  
)
 Schema Registry Viewer 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.subjects.lookup 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Schema Registry Admin 
( roles/  
)
 Schema Registry Editor 
( roles/  
)
 Schema Registry Viewer 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.topics.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 managedkafka.topics.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 managedkafka.topics.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.topics.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.topics.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 managedkafka.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Schema Registry Admin 
( roles/  
)
 Schema Registry Editor 
( roles/  
)
 Schema Registry Viewer 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.versions.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Schema Registry Admin 
( roles/  
)
 Schema Registry Editor 
( roles/  
)
 managedkafka.versions.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Schema Registry Admin 
( roles/  
)
 Schema Registry Editor 
( roles/  
)
 managedkafka.versions.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Schema Registry Admin 
( roles/  
)
 Schema Registry Editor 
( roles/  
)
 Schema Registry Viewer 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.versions.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Schema Registry Admin 
( roles/  
)
 Schema Registry Editor 
( roles/  
)
 Schema Registry Viewer 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)
 managedkafka.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Support User 
( roles/  
)
 Managed Kafka Admin 
( roles/  
)
 Managed Kafka Client 
( roles/  
)
 Managed Kafka Cluster Editor 
( roles/  
)
 Managed Kafka Connector Editor 
( roles/  
)
 Managed Kafka Consumer Group Editor 
( roles/  
)
 Schema Registry Admin 
( roles/  
)
 Schema Registry Editor 
( roles/  
)
 Schema Registry Viewer 
( roles/  
)
 Managed Kafka Topic Editor 
( roles/  
)
 Managed Kafka Viewer 
( roles/  
)

