Pub/Sub Lite roles and permissions

This page lists the IAM roles and permissions for Pub/Sub Lite. To search through all roles and permissions, see the role and permission index .

Pub/Sub Lite roles

Role

Permissions

Pub/Sub Lite Admin

( roles/ pubsublite.admin )

Full access to topics, subscriptions and reservations.

pubsublite.*

pubsublite. locations. openKafkaStream
pubsublite.operations.get
pubsublite.operations.list
pubsublite. reservations. attachTopic
pubsublite.reservations.create
pubsublite.reservations.delete
pubsublite.reservations.get
pubsublite.reservations.list
pubsublite. reservations. listTopics
pubsublite.reservations.update
pubsublite. subscriptions. create
pubsublite. subscriptions. delete
pubsublite.subscriptions.get
pubsublite. subscriptions. getCursor
pubsublite.subscriptions.list
pubsublite.subscriptions.seek
pubsublite. subscriptions. setCursor
pubsublite. subscriptions. subscribe
pubsublite. subscriptions. update
pubsublite. topics. computeHeadCursor
pubsublite. topics. computeMessageStats
pubsublite. topics. computeTimeCursor
pubsublite.topics.create
pubsublite.topics.delete
pubsublite.topics.get
pubsublite. topics. getPartitions
pubsublite.topics.list
pubsublite. topics. listSubscriptions
pubsublite.topics.publish
pubsublite.topics.subscribe
pubsublite.topics.update

Pub/Sub Lite Editor

( roles/ pubsublite.editor )

Modify topics, subscriptions and reservations, publish and consume messages.

pubsublite.*

pubsublite. locations. openKafkaStream
pubsublite.operations.get
pubsublite.operations.list
pubsublite. reservations. attachTopic
pubsublite.reservations.create
pubsublite.reservations.delete
pubsublite.reservations.get
pubsublite.reservations.list
pubsublite. reservations. listTopics
pubsublite.reservations.update
pubsublite. subscriptions. create
pubsublite. subscriptions. delete
pubsublite.subscriptions.get
pubsublite. subscriptions. getCursor
pubsublite.subscriptions.list
pubsublite.subscriptions.seek
pubsublite. subscriptions. setCursor
pubsublite. subscriptions. subscribe
pubsublite. subscriptions. update
pubsublite. topics. computeHeadCursor
pubsublite. topics. computeMessageStats
pubsublite. topics. computeTimeCursor
pubsublite.topics.create
pubsublite.topics.delete
pubsublite.topics.get
pubsublite. topics. getPartitions
pubsublite.topics.list
pubsublite. topics. listSubscriptions
pubsublite.topics.publish
pubsublite.topics.subscribe
pubsublite.topics.update

Pub/Sub Lite Publisher

( roles/ pubsublite.publisher )

Publish messages to a topic.

pubsublite. locations. openKafkaStream

pubsublite. topics. getPartitions

pubsublite.topics.publish

Pub/Sub Lite Service Agent

( roles/ pubsublite.serviceAgent )

Grants Pub/Sub Lite Service Agent access to project resources.

pubsub.topics.publish

pubsublite.subscriptions.get

pubsublite. subscriptions. getCursor

pubsublite. subscriptions. setCursor

pubsublite. subscriptions. subscribe

pubsublite. topics. computeHeadCursor

pubsublite. topics. getPartitions

pubsublite.topics.publish

pubsublite.topics.subscribe

Pub/Sub Lite Subscriber

( roles/ pubsublite.subscriber )

Subscribe to and read messages from a topic.

pubsublite. locations. openKafkaStream

pubsublite.operations.get

pubsublite. subscriptions. getCursor

pubsublite.subscriptions.seek

pubsublite. subscriptions. setCursor

pubsublite. subscriptions. subscribe

pubsublite. topics. computeHeadCursor

pubsublite. topics. computeMessageStats

pubsublite. topics. computeTimeCursor

pubsublite. topics. getPartitions

pubsublite.topics.subscribe

Pub/Sub Lite Viewer

( roles/ pubsublite.viewer )

View topics, subscriptions and reservations.

pubsublite.operations.*

pubsublite.operations.get
pubsublite.operations.list

pubsublite.reservations.get

pubsublite.reservations.list

pubsublite. reservations. listTopics

pubsublite.subscriptions.get

pubsublite. subscriptions. getCursor

pubsublite.subscriptions.list

pubsublite.topics.get

pubsublite. topics. getPartitions

pubsublite.topics.list

pubsublite. topics. listSubscriptions

Pub/Sub Lite permissions

Permission

Included in roles

`pubsublite. locations. openKafkaStream`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Support User ( roles/ iam.supportUser )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

Pub/Sub Lite Publisher ( roles/ pubsublite.publisher )

Pub/Sub Lite Subscriber ( roles/ pubsublite.subscriber )

`pubsublite.operations.get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Support User ( roles/ iam.supportUser )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

Pub/Sub Lite Subscriber ( roles/ pubsublite.subscriber )

Pub/Sub Lite Viewer ( roles/ pubsublite.viewer )

`pubsublite.operations.list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

Pub/Sub Lite Viewer ( roles/ pubsublite.viewer )

`pubsublite. reservations. attachTopic`

Owner ( roles/ owner )

Editor ( roles/ editor )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

`pubsublite.reservations.create`

Owner ( roles/ owner )

Editor ( roles/ editor )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

`pubsublite.reservations.delete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

`pubsublite.reservations.get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Support User ( roles/ iam.supportUser )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

Pub/Sub Lite Viewer ( roles/ pubsublite.viewer )

`pubsublite.reservations.list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

Pub/Sub Lite Viewer ( roles/ pubsublite.viewer )

`pubsublite. reservations. listTopics`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Support User ( roles/ iam.supportUser )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

Pub/Sub Lite Viewer ( roles/ pubsublite.viewer )

`pubsublite.reservations.update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

`pubsublite. subscriptions. create`

Owner ( roles/ owner )

Editor ( roles/ editor )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

`pubsublite. subscriptions. delete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

`pubsublite.subscriptions.get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Support User ( roles/ iam.supportUser )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

Pub/Sub Lite Viewer ( roles/ pubsublite.viewer )

Service agent roles

Pub/Sub Lite Service Agent ( roles/ pubsublite.serviceAgent )

`pubsublite. subscriptions. getCursor`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Support User ( roles/ iam.supportUser )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

Pub/Sub Lite Subscriber ( roles/ pubsublite.subscriber )

Pub/Sub Lite Viewer ( roles/ pubsublite.viewer )

Service agent roles

Pub/Sub Lite Service Agent ( roles/ pubsublite.serviceAgent )

`pubsublite.subscriptions.list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

Pub/Sub Lite Viewer ( roles/ pubsublite.viewer )

`pubsublite.subscriptions.seek`

Owner ( roles/ owner )

Editor ( roles/ editor )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

Pub/Sub Lite Subscriber ( roles/ pubsublite.subscriber )

`pubsublite. subscriptions. setCursor`

Owner ( roles/ owner )

Editor ( roles/ editor )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

Pub/Sub Lite Subscriber ( roles/ pubsublite.subscriber )

Service agent roles

Pub/Sub Lite Service Agent ( roles/ pubsublite.serviceAgent )

`pubsublite. subscriptions. subscribe`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Support User ( roles/ iam.supportUser )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

Pub/Sub Lite Subscriber ( roles/ pubsublite.subscriber )

`pubsublite. subscriptions. update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

`pubsublite. topics. computeHeadCursor`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Support User ( roles/ iam.supportUser )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

Pub/Sub Lite Subscriber ( roles/ pubsublite.subscriber )

Service agent roles

Pub/Sub Lite Service Agent ( roles/ pubsublite.serviceAgent )

`pubsublite. topics. computeMessageStats`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Support User ( roles/ iam.supportUser )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

Pub/Sub Lite Subscriber ( roles/ pubsublite.subscriber )

`pubsublite. topics. computeTimeCursor`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Support User ( roles/ iam.supportUser )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

Pub/Sub Lite Subscriber ( roles/ pubsublite.subscriber )

`pubsublite.topics.create`

Owner ( roles/ owner )

Editor ( roles/ editor )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

`pubsublite.topics.delete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

`pubsublite.topics.get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Support User ( roles/ iam.supportUser )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

Pub/Sub Lite Viewer ( roles/ pubsublite.viewer )

`pubsublite. topics. getPartitions`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Support User ( roles/ iam.supportUser )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

Pub/Sub Lite Publisher ( roles/ pubsublite.publisher )

Pub/Sub Lite Subscriber ( roles/ pubsublite.subscriber )

Pub/Sub Lite Viewer ( roles/ pubsublite.viewer )

Service agent roles

Pub/Sub Lite Service Agent ( roles/ pubsublite.serviceAgent )

`pubsublite.topics.list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

Pub/Sub Lite Viewer ( roles/ pubsublite.viewer )

`pubsublite. topics. listSubscriptions`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Support User ( roles/ iam.supportUser )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

Pub/Sub Lite Viewer ( roles/ pubsublite.viewer )

`pubsublite.topics.publish`

Owner ( roles/ owner )

Editor ( roles/ editor )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

Pub/Sub Lite Publisher ( roles/ pubsublite.publisher )

Service agent roles

Pub/Sub Lite Service Agent ( roles/ pubsublite.serviceAgent )
Content Warehouse Service Agent ( roles/ contentwarehouse.serviceAgent )

`pubsublite.topics.subscribe`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Support User ( roles/ iam.supportUser )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )

Pub/Sub Lite Subscriber ( roles/ pubsublite.subscriber )

`pubsublite.topics.update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Pub/Sub Lite Admin ( roles/ pubsublite.admin )

Pub/Sub Lite Editor ( roles/ pubsublite.editor )