This page lists the IAM roles and permissions for SaaS Service Management. To search through all roles and permissions, see the role and permission index .
SaaS Service Management roles
SaaS Service Management Admin Beta
( roles/
)
Provide full access to all SaaS Service Management resources.
resourcemanager.projects.get
resourcemanager.projects.list
saasservicemgmt.*
-
saasservicemgmt.locations.get
-
saasservicemgmt.locations.list
-
saasservicemgmt.
operations. cancel -
saasservicemgmt.
operations. delete -
saasservicemgmt.operations.get
-
saasservicemgmt.
operations. list -
saasservicemgmt.
releases. create -
saasservicemgmt.
releases. delete -
saasservicemgmt.releases.get
-
saasservicemgmt.releases.list
-
saasservicemgmt.
releases. update -
saasservicemgmt.
rolloutKinds. create -
saasservicemgmt.
rolloutKinds. delete -
saasservicemgmt.
rolloutKinds. get -
saasservicemgmt.
rolloutKinds. list -
saasservicemgmt.
rolloutKinds. update -
saasservicemgmt.
rollouts. create -
saasservicemgmt.
rollouts. delete -
saasservicemgmt.rollouts.get
-
saasservicemgmt.rollouts.list
-
saasservicemgmt.
rollouts. update -
saasservicemgmt.saas.create
-
saasservicemgmt.saas.delete
-
saasservicemgmt.saas.get
-
saasservicemgmt.saas.list
-
saasservicemgmt.saas.update
-
saasservicemgmt.
unitKinds. create -
saasservicemgmt.
unitKinds. delete -
saasservicemgmt.unitKinds.get
-
saasservicemgmt.unitKinds.list
-
saasservicemgmt.
unitKinds. update -
saasservicemgmt.
unitOperations. create -
saasservicemgmt.
unitOperations. delete -
saasservicemgmt.
unitOperations. get -
saasservicemgmt.
unitOperations. list -
saasservicemgmt.
unitOperations. update -
saasservicemgmt.units.create
-
saasservicemgmt.units.delete
-
saasservicemgmt.units.get
-
saasservicemgmt.units.list
-
saasservicemgmt.units.update
SaaS Service Management Service Agent
( roles/
)
Service Agent used by SaaS Service Management.
artifactregistry.
config.deployments.create
config.deployments.delete
config.deployments.get
config.deployments.update
config.operations.get
config.revisions.get
saasservicemgmt.locations.*
-
saasservicemgmt.locations.get
-
saasservicemgmt.locations.list
saasservicemgmt.operations.get
saasservicemgmt.
saasservicemgmt.
saasservicemgmt.releases.get
saasservicemgmt.releases.list
saasservicemgmt.
saasservicemgmt.rolloutKinds.*
-
saasservicemgmt.
rolloutKinds. create -
saasservicemgmt.
rolloutKinds. delete -
saasservicemgmt.
rolloutKinds. get -
saasservicemgmt.
rolloutKinds. list -
saasservicemgmt.
rolloutKinds. update
saasservicemgmt.rollouts.*
-
saasservicemgmt.
rollouts. create -
saasservicemgmt.
rollouts. delete -
saasservicemgmt.rollouts.get
-
saasservicemgmt.rollouts.list
-
saasservicemgmt.
rollouts. update
saasservicemgmt.saas.create
saasservicemgmt.saas.get
saasservicemgmt.saas.list
saasservicemgmt.saas.update
saasservicemgmt.
saasservicemgmt.unitKinds.get
saasservicemgmt.unitKinds.list
saasservicemgmt.
saasservicemgmt.
-
saasservicemgmt.
unitOperations. create -
saasservicemgmt.
unitOperations. delete -
saasservicemgmt.
unitOperations. get -
saasservicemgmt.
unitOperations. list -
saasservicemgmt.
unitOperations. update
saasservicemgmt.units.*
-
saasservicemgmt.units.create
-
saasservicemgmt.units.delete
-
saasservicemgmt.units.get
-
saasservicemgmt.units.list
-
saasservicemgmt.units.update
storage.buckets.create
storage.buckets.delete
storage.buckets.get
storage.buckets.getIamPolicy
storage.buckets.setIamPolicy
storage.objects.create
storage.objects.delete
storage.objects.get
storage.objects.list
SaaS Service Management Viewer Beta
( roles/
)
Provides read-only access to SaaS Service Management resources.
resourcemanager.projects.get
resourcemanager.projects.list
saasservicemgmt.locations.*
-
saasservicemgmt.locations.get
-
saasservicemgmt.locations.list
saasservicemgmt.operations.get
saasservicemgmt.
saasservicemgmt.releases.get
saasservicemgmt.releases.list
saasservicemgmt.
saasservicemgmt.
saasservicemgmt.rollouts.get
saasservicemgmt.rollouts.list
saasservicemgmt.saas.get
saasservicemgmt.saas.list
saasservicemgmt.unitKinds.get
saasservicemgmt.unitKinds.list
saasservicemgmt.
saasservicemgmt.
saasservicemgmt.units.get
saasservicemgmt.units.list
SaaS Service Management permissions
saasservicemgmt.locations.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
SaaS Service Management Admin
( roles/
)
SaaS Service Management Viewer
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.locations.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
SaaS Service Management Admin
( roles/
)
SaaS Service Management Viewer
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.
operations.
cancel
Owner
( roles/
)
Editor
( roles/
)
SaaS Service Management Admin
( roles/
)
saasservicemgmt.
operations.
delete
Owner
( roles/
)
Editor
( roles/
)
SaaS Service Management Admin
( roles/
)
saasservicemgmt.operations.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
SaaS Service Management Admin
( roles/
)
SaaS Service Management Viewer
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.
operations.
list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
SaaS Service Management Admin
( roles/
)
SaaS Service Management Viewer
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.
releases.
create
Owner
( roles/
)
Editor
( roles/
)
SaaS Service Management Admin
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.
releases.
delete
Owner
( roles/
)
Editor
( roles/
)
SaaS Service Management Admin
( roles/
)
saasservicemgmt.releases.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
SaaS Service Management Admin
( roles/
)
SaaS Service Management Viewer
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.releases.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
SaaS Service Management Admin
( roles/
)
SaaS Service Management Viewer
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.
releases.
update
Owner
( roles/
)
Editor
( roles/
)
SaaS Service Management Admin
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.
rolloutKinds.
create
Owner
( roles/
)
Editor
( roles/
)
SaaS Service Management Admin
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.
rolloutKinds.
delete
Owner
( roles/
)
Editor
( roles/
)
SaaS Service Management Admin
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.
rolloutKinds.
get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
SaaS Service Management Admin
( roles/
)
SaaS Service Management Viewer
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.
rolloutKinds.
list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
SaaS Service Management Admin
( roles/
)
SaaS Service Management Viewer
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.
rolloutKinds.
update
Owner
( roles/
)
Editor
( roles/
)
SaaS Service Management Admin
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.
rollouts.
create
Owner
( roles/
)
Editor
( roles/
)
SaaS Service Management Admin
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.
rollouts.
delete
Owner
( roles/
)
Editor
( roles/
)
SaaS Service Management Admin
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.rollouts.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
SaaS Service Management Admin
( roles/
)
SaaS Service Management Viewer
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.rollouts.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
SaaS Service Management Admin
( roles/
)
SaaS Service Management Viewer
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.
rollouts.
update
Owner
( roles/
)
Editor
( roles/
)
SaaS Service Management Admin
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.saas.create
Owner
( roles/
)
Editor
( roles/
)
SaaS Service Management Admin
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.saas.delete
Owner
( roles/
)
Editor
( roles/
)
SaaS Service Management Admin
( roles/
)
saasservicemgmt.saas.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
SaaS Service Management Admin
( roles/
)
SaaS Service Management Viewer
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.saas.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
SaaS Service Management Admin
( roles/
)
SaaS Service Management Viewer
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.saas.update
Owner
( roles/
)
Editor
( roles/
)
SaaS Service Management Admin
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.
unitKinds.
create
Owner
( roles/
)
Editor
( roles/
)
SaaS Service Management Admin
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.
unitKinds.
delete
Owner
( roles/
)
Editor
( roles/
)
SaaS Service Management Admin
( roles/
)
saasservicemgmt.unitKinds.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
SaaS Service Management Admin
( roles/
)
SaaS Service Management Viewer
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.unitKinds.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
SaaS Service Management Admin
( roles/
)
SaaS Service Management Viewer
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.
unitKinds.
update
Owner
( roles/
)
Editor
( roles/
)
SaaS Service Management Admin
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.
unitOperations.
create
Owner
( roles/
)
Editor
( roles/
)
SaaS Service Management Admin
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.
unitOperations.
delete
Owner
( roles/
)
Editor
( roles/
)
SaaS Service Management Admin
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.
unitOperations.
get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
SaaS Service Management Admin
( roles/
)
SaaS Service Management Viewer
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.
unitOperations.
list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
SaaS Service Management Admin
( roles/
)
SaaS Service Management Viewer
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.
unitOperations.
update
Owner
( roles/
)
Editor
( roles/
)
SaaS Service Management Admin
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.units.create
Owner
( roles/
)
Editor
( roles/
)
SaaS Service Management Admin
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.units.delete
Owner
( roles/
)
Editor
( roles/
)
SaaS Service Management Admin
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.units.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
SaaS Service Management Admin
( roles/
)
SaaS Service Management Viewer
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.units.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
SaaS Service Management Admin
( roles/
)
SaaS Service Management Viewer
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent
saasservicemgmt.units.update
Owner
( roles/
)
Editor
( roles/
)
SaaS Service Management Admin
( roles/
)
Service agent roles
- SaaS Service Management Service Agent
(
roles/
)saasservicemgmt.serviceAgent