Security Center Management API roles and permissions

This page lists the IAM roles and permissions for Security Center Management API. To search through all roles and permissions, see the role and permission index .

Security Center Management API roles

Role

Permissions

Security Center Management Admin

( roles/ securitycentermanagement.admin )

Full access to manage Cloud Security Command Center services and custom modules configuration.

resourcemanager. organizations. get

resourcemanager.projects.get

resourcemanager.projects.list

securitycenter. organizationsettings.*

securitycenter. organizationsettings. get
securitycenter. organizationsettings. update

securitycenter. securitycentersettings.*

securitycenter. securitycentersettings. get
securitycenter. securitycentersettings. update

securitycentermanagement.*

securitycentermanagement. billingMetadata. get
securitycentermanagement. effectiveEventThreatDetectionCustomModules. get
securitycentermanagement. effectiveEventThreatDetectionCustomModules. list
securitycentermanagement. effectiveSecurityHealthAnalyticsCustomModules. get
securitycentermanagement. effectiveSecurityHealthAnalyticsCustomModules. list
securitycentermanagement. eventThreatDetectionCustomModules. create
securitycentermanagement. eventThreatDetectionCustomModules. delete
securitycentermanagement. eventThreatDetectionCustomModules. get
securitycentermanagement. eventThreatDetectionCustomModules. list
securitycentermanagement. eventThreatDetectionCustomModules. update
securitycentermanagement. eventThreatDetectionCustomModules. validate
securitycentermanagement. locations. get
securitycentermanagement. locations. list
securitycentermanagement. securityCenterServices. get
securitycentermanagement. securityCenterServices. list
securitycentermanagement. securityCenterServices. update
securitycentermanagement. securityCommandCenter. activate
securitycentermanagement. securityCommandCenter. checkActivationOperation
securitycentermanagement. securityCommandCenter. checkEligibility
securitycentermanagement. securityCommandCenter. checkOnboardingStatus
securitycentermanagement. securityCommandCenter. generateServiceAccounts
securitycentermanagement. securityCommandCenter. get
securitycentermanagement. securityCommandCenter. update
securitycentermanagement. securityHealthAnalyticsCustomModules. create
securitycentermanagement. securityHealthAnalyticsCustomModules. delete
securitycentermanagement. securityHealthAnalyticsCustomModules. get
securitycentermanagement. securityHealthAnalyticsCustomModules. list
securitycentermanagement. securityHealthAnalyticsCustomModules. simulate
securitycentermanagement. securityHealthAnalyticsCustomModules. test
securitycentermanagement. securityHealthAnalyticsCustomModules. update

Security Center Management Custom Modules Editor

( roles/ securitycentermanagement.customModulesEditor )

Full access to manage Cloud Security Command Center custom modules.

resourcemanager. organizations. get

resourcemanager.projects.get

resourcemanager.projects.list

securitycentermanagement. effectiveEventThreatDetectionCustomModules.*

securitycentermanagement. effectiveEventThreatDetectionCustomModules. get
securitycentermanagement. effectiveEventThreatDetectionCustomModules. list

securitycentermanagement. effectiveSecurityHealthAnalyticsCustomModules.*

securitycentermanagement. effectiveSecurityHealthAnalyticsCustomModules. get
securitycentermanagement. effectiveSecurityHealthAnalyticsCustomModules. list

securitycentermanagement. eventThreatDetectionCustomModules.*

securitycentermanagement. eventThreatDetectionCustomModules. create
securitycentermanagement. eventThreatDetectionCustomModules. delete
securitycentermanagement. eventThreatDetectionCustomModules. get
securitycentermanagement. eventThreatDetectionCustomModules. list
securitycentermanagement. eventThreatDetectionCustomModules. update
securitycentermanagement. eventThreatDetectionCustomModules. validate

securitycentermanagement. locations.*

securitycentermanagement. locations. get
securitycentermanagement. locations. list

securitycentermanagement. securityHealthAnalyticsCustomModules.*

securitycentermanagement. securityHealthAnalyticsCustomModules. create
securitycentermanagement. securityHealthAnalyticsCustomModules. delete
securitycentermanagement. securityHealthAnalyticsCustomModules. get
securitycentermanagement. securityHealthAnalyticsCustomModules. list
securitycentermanagement. securityHealthAnalyticsCustomModules. simulate
securitycentermanagement. securityHealthAnalyticsCustomModules. test
securitycentermanagement. securityHealthAnalyticsCustomModules. update

Security Center Management Custom Modules Viewer

( roles/ securitycentermanagement.customModulesViewer )

Readonly access to Cloud Security Command Center custom modules.

resourcemanager. organizations. get

resourcemanager.projects.get

resourcemanager.projects.list

securitycentermanagement. effectiveEventThreatDetectionCustomModules.*

securitycentermanagement. effectiveEventThreatDetectionCustomModules. get
securitycentermanagement. effectiveEventThreatDetectionCustomModules. list

securitycentermanagement. effectiveSecurityHealthAnalyticsCustomModules.*

securitycentermanagement. effectiveSecurityHealthAnalyticsCustomModules. get
securitycentermanagement. effectiveSecurityHealthAnalyticsCustomModules. list

securitycentermanagement. eventThreatDetectionCustomModules. get

securitycentermanagement. eventThreatDetectionCustomModules. list

securitycentermanagement. eventThreatDetectionCustomModules. validate

securitycentermanagement. locations.*

securitycentermanagement. locations. get
securitycentermanagement. locations. list

securitycentermanagement. securityHealthAnalyticsCustomModules. get

securitycentermanagement. securityHealthAnalyticsCustomModules. list

securitycentermanagement. securityHealthAnalyticsCustomModules. simulate

securitycentermanagement. securityHealthAnalyticsCustomModules. test

Security Center Management Custom ETD Modules Editor

( roles/ securitycentermanagement.etdCustomModulesEditor )

Full access to manage Cloud Security Command Center ETD custom modules.

resourcemanager. organizations. get

resourcemanager.projects.get

resourcemanager.projects.list

securitycentermanagement. effectiveEventThreatDetectionCustomModules.*

securitycentermanagement. effectiveEventThreatDetectionCustomModules. get
securitycentermanagement. effectiveEventThreatDetectionCustomModules. list

securitycentermanagement. eventThreatDetectionCustomModules.*

securitycentermanagement. eventThreatDetectionCustomModules. create
securitycentermanagement. eventThreatDetectionCustomModules. delete
securitycentermanagement. eventThreatDetectionCustomModules. get
securitycentermanagement. eventThreatDetectionCustomModules. list
securitycentermanagement. eventThreatDetectionCustomModules. update
securitycentermanagement. eventThreatDetectionCustomModules. validate

securitycentermanagement. locations.*

securitycentermanagement. locations. get
securitycentermanagement. locations. list

Security Center Management ETD Custom Modules Viewer

( roles/ securitycentermanagement.etdCustomModulesViewer )

Readonly access to Cloud Security Command Center ETD custom modules.

resourcemanager. organizations. get

resourcemanager.projects.get

resourcemanager.projects.list

securitycentermanagement. effectiveEventThreatDetectionCustomModules.*

securitycentermanagement. effectiveEventThreatDetectionCustomModules. get
securitycentermanagement. effectiveEventThreatDetectionCustomModules. list

securitycentermanagement. eventThreatDetectionCustomModules. get

securitycentermanagement. eventThreatDetectionCustomModules. list

securitycentermanagement. eventThreatDetectionCustomModules. validate

securitycentermanagement. locations.*

securitycentermanagement. locations. get
securitycentermanagement. locations. list

Security Center Management Services Editor

( roles/ securitycentermanagement.securityCenterServicesEditor )

Full access to manage Cloud Security Command Center services configuration.

securitycentermanagement. securityCenterServices.*

securitycentermanagement. securityCenterServices. get
securitycentermanagement. securityCenterServices. list
securitycentermanagement. securityCenterServices. update

Security Center Management Services Viewer

( roles/ securitycentermanagement.securityCenterServicesViewer )

Readonly access to Cloud Security Command Center services configuration.

securitycentermanagement. securityCenterServices. get

securitycentermanagement. securityCenterServices. list

Security Center Management Settings Editor

( roles/ securitycentermanagement.settingsEditor )

Full access to manage Cloud Security Command Center settings

resourcemanager. organizations. get

resourcemanager.projects.get

resourcemanager.projects.list

securitycenter. organizationsettings.*

securitycenter. organizationsettings. get
securitycenter. organizationsettings. update

securitycenter. securitycentersettings.*

securitycenter. securitycentersettings. get
securitycenter. securitycentersettings. update

securitycentermanagement.*

securitycentermanagement. billingMetadata. get
securitycentermanagement. effectiveEventThreatDetectionCustomModules. get
securitycentermanagement. effectiveEventThreatDetectionCustomModules. list
securitycentermanagement. effectiveSecurityHealthAnalyticsCustomModules. get
securitycentermanagement. effectiveSecurityHealthAnalyticsCustomModules. list
securitycentermanagement. eventThreatDetectionCustomModules. create
securitycentermanagement. eventThreatDetectionCustomModules. delete
securitycentermanagement. eventThreatDetectionCustomModules. get
securitycentermanagement. eventThreatDetectionCustomModules. list
securitycentermanagement. eventThreatDetectionCustomModules. update
securitycentermanagement. eventThreatDetectionCustomModules. validate
securitycentermanagement. locations. get
securitycentermanagement. locations. list
securitycentermanagement. securityCenterServices. get
securitycentermanagement. securityCenterServices. list
securitycentermanagement. securityCenterServices. update
securitycentermanagement. securityCommandCenter. activate
securitycentermanagement. securityCommandCenter. checkActivationOperation
securitycentermanagement. securityCommandCenter. checkEligibility
securitycentermanagement. securityCommandCenter. checkOnboardingStatus
securitycentermanagement. securityCommandCenter. generateServiceAccounts
securitycentermanagement. securityCommandCenter. get
securitycentermanagement. securityCommandCenter. update
securitycentermanagement. securityHealthAnalyticsCustomModules. create
securitycentermanagement. securityHealthAnalyticsCustomModules. delete
securitycentermanagement. securityHealthAnalyticsCustomModules. get
securitycentermanagement. securityHealthAnalyticsCustomModules. list
securitycentermanagement. securityHealthAnalyticsCustomModules. simulate
securitycentermanagement. securityHealthAnalyticsCustomModules. test
securitycentermanagement. securityHealthAnalyticsCustomModules. update

Security Center Management Settings Viewer

( roles/ securitycentermanagement.settingsViewer )

Readonly access to Cloud Security Command Center settings

resourcemanager. organizations. get

resourcemanager.projects.get

resourcemanager.projects.list

securitycenter. organizationsettings. get

securitycenter. securitycentersettings. get

securitycentermanagement. billingMetadata. get

securitycentermanagement. effectiveEventThreatDetectionCustomModules.*

securitycentermanagement. effectiveEventThreatDetectionCustomModules. get
securitycentermanagement. effectiveEventThreatDetectionCustomModules. list

securitycentermanagement. effectiveSecurityHealthAnalyticsCustomModules.*

securitycentermanagement. effectiveSecurityHealthAnalyticsCustomModules. get
securitycentermanagement. effectiveSecurityHealthAnalyticsCustomModules. list

securitycentermanagement. eventThreatDetectionCustomModules. get

securitycentermanagement. eventThreatDetectionCustomModules. list

securitycentermanagement. eventThreatDetectionCustomModules. validate

securitycentermanagement. locations.*

securitycentermanagement. locations. get
securitycentermanagement. locations. list

securitycentermanagement. securityCenterServices. get

securitycentermanagement. securityCenterServices. list

securitycentermanagement. securityCommandCenter. checkActivationOperation

securitycentermanagement. securityCommandCenter. checkOnboardingStatus

securitycentermanagement. securityCommandCenter. get

securitycentermanagement. securityHealthAnalyticsCustomModules. get

securitycentermanagement. securityHealthAnalyticsCustomModules. list

securitycentermanagement. securityHealthAnalyticsCustomModules. simulate

securitycentermanagement. securityHealthAnalyticsCustomModules. test

Security Center Management SHA Custom Modules Editor

( roles/ securitycentermanagement.shaCustomModulesEditor )

Full access to manage Cloud Security Command Center SHA custom modules.

resourcemanager. organizations. get

resourcemanager.projects.get

resourcemanager.projects.list

securitycentermanagement. effectiveSecurityHealthAnalyticsCustomModules.*

securitycentermanagement. effectiveSecurityHealthAnalyticsCustomModules. get
securitycentermanagement. effectiveSecurityHealthAnalyticsCustomModules. list

securitycentermanagement. locations.*

securitycentermanagement. locations. get
securitycentermanagement. locations. list

securitycentermanagement. securityHealthAnalyticsCustomModules.*

securitycentermanagement. securityHealthAnalyticsCustomModules. create
securitycentermanagement. securityHealthAnalyticsCustomModules. delete
securitycentermanagement. securityHealthAnalyticsCustomModules. get
securitycentermanagement. securityHealthAnalyticsCustomModules. list
securitycentermanagement. securityHealthAnalyticsCustomModules. simulate
securitycentermanagement. securityHealthAnalyticsCustomModules. test
securitycentermanagement. securityHealthAnalyticsCustomModules. update

Security Center Management SHA Custom Modules Viewer

( roles/ securitycentermanagement.shaCustomModulesViewer )

Readonly access to Cloud Security Command Center SHA custom modules.

resourcemanager. organizations. get

resourcemanager.projects.get

resourcemanager.projects.list

securitycentermanagement. effectiveSecurityHealthAnalyticsCustomModules.*

securitycentermanagement. effectiveSecurityHealthAnalyticsCustomModules. get
securitycentermanagement. effectiveSecurityHealthAnalyticsCustomModules. list

securitycentermanagement. locations.*

securitycentermanagement. locations. get
securitycentermanagement. locations. list

securitycentermanagement. securityHealthAnalyticsCustomModules. get

securitycentermanagement. securityHealthAnalyticsCustomModules. list

securitycentermanagement. securityHealthAnalyticsCustomModules. simulate

securitycentermanagement. securityHealthAnalyticsCustomModules. test

Security Center Management Viewer

( roles/ securitycentermanagement.viewer )

Readonly access to Cloud Security Command Center services and custom modules configuration.

resourcemanager. organizations. get

resourcemanager.projects.get

resourcemanager.projects.list

securitycenter. organizationsettings. get

securitycenter. securitycentersettings. get

securitycentermanagement. billingMetadata. get

securitycentermanagement. effectiveEventThreatDetectionCustomModules.*

securitycentermanagement. effectiveEventThreatDetectionCustomModules. get
securitycentermanagement. effectiveEventThreatDetectionCustomModules. list

securitycentermanagement. effectiveSecurityHealthAnalyticsCustomModules.*

securitycentermanagement. effectiveSecurityHealthAnalyticsCustomModules. get
securitycentermanagement. effectiveSecurityHealthAnalyticsCustomModules. list

securitycentermanagement. eventThreatDetectionCustomModules. get

securitycentermanagement. eventThreatDetectionCustomModules. list

securitycentermanagement. eventThreatDetectionCustomModules. validate

securitycentermanagement. locations.*

securitycentermanagement. locations. get
securitycentermanagement. locations. list

securitycentermanagement. securityCenterServices. get

securitycentermanagement. securityCenterServices. list

securitycentermanagement. securityCommandCenter. checkActivationOperation

securitycentermanagement. securityCommandCenter. checkOnboardingStatus

securitycentermanagement. securityCommandCenter. get

securitycentermanagement. securityHealthAnalyticsCustomModules. get

securitycentermanagement. securityHealthAnalyticsCustomModules. list

securitycentermanagement. securityHealthAnalyticsCustomModules. simulate

securitycentermanagement. securityHealthAnalyticsCustomModules. test

Security Center Management API permissions

Permission

Included in roles

`securitycentermanagement. billingMetadata. get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Admin Editor ( roles/ securitycenter.adminEditor )

Security Center Admin Viewer ( roles/ securitycenter.adminViewer )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Settings Viewer ( roles/ securitycenter.settingsViewer )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

Security Center Management Settings Viewer ( roles/ securitycentermanagement.settingsViewer )

Security Center Management Viewer ( roles/ securitycentermanagement.viewer )

Service agent roles

Risk Manager Service Agent ( roles/ riskmanager.serviceAgent )

`securitycentermanagement. effectiveEventThreatDetectionCustomModules. get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Admin Editor ( roles/ securitycenter.adminEditor )

Security Center Admin Viewer ( roles/ securitycenter.adminViewer )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Settings Viewer ( roles/ securitycenter.settingsViewer )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Custom Modules Editor ( roles/ securitycentermanagement.customModulesEditor )

Security Center Management Custom Modules Viewer ( roles/ securitycentermanagement.customModulesViewer )

Security Center Management Custom ETD Modules Editor ( roles/ securitycentermanagement.etdCustomModulesEditor )

Security Center Management ETD Custom Modules Viewer ( roles/ securitycentermanagement.etdCustomModulesViewer )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

Security Center Management Settings Viewer ( roles/ securitycentermanagement.settingsViewer )

Security Center Management Viewer ( roles/ securitycentermanagement.viewer )

Service agent roles

Risk Manager Service Agent ( roles/ riskmanager.serviceAgent )

`securitycentermanagement. effectiveEventThreatDetectionCustomModules. list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Admin Editor ( roles/ securitycenter.adminEditor )

Security Center Admin Viewer ( roles/ securitycenter.adminViewer )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Settings Viewer ( roles/ securitycenter.settingsViewer )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Custom Modules Editor ( roles/ securitycentermanagement.customModulesEditor )

Security Center Management Custom Modules Viewer ( roles/ securitycentermanagement.customModulesViewer )

Security Center Management Custom ETD Modules Editor ( roles/ securitycentermanagement.etdCustomModulesEditor )

Security Center Management ETD Custom Modules Viewer ( roles/ securitycentermanagement.etdCustomModulesViewer )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

Security Center Management Settings Viewer ( roles/ securitycentermanagement.settingsViewer )

Security Center Management Viewer ( roles/ securitycentermanagement.viewer )

Service agent roles

Risk Manager Service Agent ( roles/ riskmanager.serviceAgent )

`securitycentermanagement. effectiveSecurityHealthAnalyticsCustomModules. get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Admin Editor ( roles/ securitycenter.adminEditor )

Security Center Admin Viewer ( roles/ securitycenter.adminViewer )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Settings Viewer ( roles/ securitycenter.settingsViewer )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Custom Modules Editor ( roles/ securitycentermanagement.customModulesEditor )

Security Center Management Custom Modules Viewer ( roles/ securitycentermanagement.customModulesViewer )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

Security Center Management Settings Viewer ( roles/ securitycentermanagement.settingsViewer )

Security Center Management SHA Custom Modules Editor ( roles/ securitycentermanagement.shaCustomModulesEditor )

Security Center Management SHA Custom Modules Viewer ( roles/ securitycentermanagement.shaCustomModulesViewer )

Security Center Management Viewer ( roles/ securitycentermanagement.viewer )

Security Posture Admin ( roles/ securityposture.admin )

Service agent roles

Risk Manager Service Agent ( roles/ riskmanager.serviceAgent )
Security Center Control Service Agent ( roles/ securitycenter.controlServiceAgent )
Security Center Service Agent ( roles/ securitycenter.serviceAgent )
DSPM Service Agent ( roles/ dspm.serviceAgent )

`securitycentermanagement. effectiveSecurityHealthAnalyticsCustomModules. list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Admin Editor ( roles/ securitycenter.adminEditor )

Security Center Admin Viewer ( roles/ securitycenter.adminViewer )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Settings Viewer ( roles/ securitycenter.settingsViewer )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Custom Modules Editor ( roles/ securitycentermanagement.customModulesEditor )

Security Center Management Custom Modules Viewer ( roles/ securitycentermanagement.customModulesViewer )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

Security Center Management Settings Viewer ( roles/ securitycentermanagement.settingsViewer )

Security Center Management SHA Custom Modules Editor ( roles/ securitycentermanagement.shaCustomModulesEditor )

Security Center Management SHA Custom Modules Viewer ( roles/ securitycentermanagement.shaCustomModulesViewer )

Security Center Management Viewer ( roles/ securitycentermanagement.viewer )

Security Posture Admin ( roles/ securityposture.admin )

Service agent roles

Security Center Control Service Agent ( roles/ securitycenter.controlServiceAgent )
Security Center Service Agent ( roles/ securitycenter.serviceAgent )
Risk Manager Service Agent ( roles/ riskmanager.serviceAgent )

`securitycentermanagement. eventThreatDetectionCustomModules. create`

Owner ( roles/ owner )

Editor ( roles/ editor )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Custom Modules Editor ( roles/ securitycentermanagement.customModulesEditor )

Security Center Management Custom ETD Modules Editor ( roles/ securitycentermanagement.etdCustomModulesEditor )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

`securitycentermanagement. eventThreatDetectionCustomModules. delete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Custom Modules Editor ( roles/ securitycentermanagement.customModulesEditor )

Security Center Management Custom ETD Modules Editor ( roles/ securitycentermanagement.etdCustomModulesEditor )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

`securitycentermanagement. eventThreatDetectionCustomModules. get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Admin Editor ( roles/ securitycenter.adminEditor )

Security Center Admin Viewer ( roles/ securitycenter.adminViewer )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Settings Viewer ( roles/ securitycenter.settingsViewer )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Custom Modules Editor ( roles/ securitycentermanagement.customModulesEditor )

Security Center Management Custom Modules Viewer ( roles/ securitycentermanagement.customModulesViewer )

Security Center Management Custom ETD Modules Editor ( roles/ securitycentermanagement.etdCustomModulesEditor )

Security Center Management ETD Custom Modules Viewer ( roles/ securitycentermanagement.etdCustomModulesViewer )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

Security Center Management Settings Viewer ( roles/ securitycentermanagement.settingsViewer )

Security Center Management Viewer ( roles/ securitycentermanagement.viewer )

Service agent roles

Risk Manager Service Agent ( roles/ riskmanager.serviceAgent )

`securitycentermanagement. eventThreatDetectionCustomModules. list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Admin Editor ( roles/ securitycenter.adminEditor )

Security Center Admin Viewer ( roles/ securitycenter.adminViewer )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Settings Viewer ( roles/ securitycenter.settingsViewer )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Custom Modules Editor ( roles/ securitycentermanagement.customModulesEditor )

Security Center Management Custom Modules Viewer ( roles/ securitycentermanagement.customModulesViewer )

Security Center Management Custom ETD Modules Editor ( roles/ securitycentermanagement.etdCustomModulesEditor )

Security Center Management ETD Custom Modules Viewer ( roles/ securitycentermanagement.etdCustomModulesViewer )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

Security Center Management Settings Viewer ( roles/ securitycentermanagement.settingsViewer )

Security Center Management Viewer ( roles/ securitycentermanagement.viewer )

Service agent roles

Risk Manager Service Agent ( roles/ riskmanager.serviceAgent )

`securitycentermanagement. eventThreatDetectionCustomModules. update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Custom Modules Editor ( roles/ securitycentermanagement.customModulesEditor )

Security Center Management Custom ETD Modules Editor ( roles/ securitycentermanagement.etdCustomModulesEditor )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

`securitycentermanagement. eventThreatDetectionCustomModules. validate`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Admin Editor ( roles/ securitycenter.adminEditor )

Security Center Admin Viewer ( roles/ securitycenter.adminViewer )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Settings Viewer ( roles/ securitycenter.settingsViewer )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Custom Modules Editor ( roles/ securitycentermanagement.customModulesEditor )

Security Center Management Custom Modules Viewer ( roles/ securitycentermanagement.customModulesViewer )

Security Center Management Custom ETD Modules Editor ( roles/ securitycentermanagement.etdCustomModulesEditor )

Security Center Management ETD Custom Modules Viewer ( roles/ securitycentermanagement.etdCustomModulesViewer )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

Security Center Management Settings Viewer ( roles/ securitycentermanagement.settingsViewer )

Security Center Management Viewer ( roles/ securitycentermanagement.viewer )

Service agent roles

Risk Manager Service Agent ( roles/ riskmanager.serviceAgent )

`securitycentermanagement. locations. get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Admin Editor ( roles/ securitycenter.adminEditor )

Security Center Admin Viewer ( roles/ securitycenter.adminViewer )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Settings Viewer ( roles/ securitycenter.settingsViewer )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Custom Modules Editor ( roles/ securitycentermanagement.customModulesEditor )

Security Center Management Custom Modules Viewer ( roles/ securitycentermanagement.customModulesViewer )

Security Center Management Custom ETD Modules Editor ( roles/ securitycentermanagement.etdCustomModulesEditor )

Security Center Management ETD Custom Modules Viewer ( roles/ securitycentermanagement.etdCustomModulesViewer )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

Security Center Management Settings Viewer ( roles/ securitycentermanagement.settingsViewer )

Security Center Management SHA Custom Modules Editor ( roles/ securitycentermanagement.shaCustomModulesEditor )

Security Center Management SHA Custom Modules Viewer ( roles/ securitycentermanagement.shaCustomModulesViewer )

Security Center Management Viewer ( roles/ securitycentermanagement.viewer )

Service agent roles

Risk Manager Service Agent ( roles/ riskmanager.serviceAgent )

`securitycentermanagement. locations. list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Admin Editor ( roles/ securitycenter.adminEditor )

Security Center Admin Viewer ( roles/ securitycenter.adminViewer )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Settings Viewer ( roles/ securitycenter.settingsViewer )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Custom Modules Editor ( roles/ securitycentermanagement.customModulesEditor )

Security Center Management Custom Modules Viewer ( roles/ securitycentermanagement.customModulesViewer )

Security Center Management Custom ETD Modules Editor ( roles/ securitycentermanagement.etdCustomModulesEditor )

Security Center Management ETD Custom Modules Viewer ( roles/ securitycentermanagement.etdCustomModulesViewer )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

Security Center Management Settings Viewer ( roles/ securitycentermanagement.settingsViewer )

Security Center Management SHA Custom Modules Editor ( roles/ securitycentermanagement.shaCustomModulesEditor )

Security Center Management SHA Custom Modules Viewer ( roles/ securitycentermanagement.shaCustomModulesViewer )

Security Center Management Viewer ( roles/ securitycentermanagement.viewer )

Service agent roles

Risk Manager Service Agent ( roles/ riskmanager.serviceAgent )

`securitycentermanagement. securityCenterServices. get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Admin Editor ( roles/ securitycenter.adminEditor )

Security Center Admin Viewer ( roles/ securitycenter.adminViewer )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Settings Viewer ( roles/ securitycenter.settingsViewer )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Services Editor ( roles/ securitycentermanagement.securityCenterServicesEditor )

Security Center Management Services Viewer ( roles/ securitycentermanagement.securityCenterServicesViewer )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

Security Center Management Settings Viewer ( roles/ securitycentermanagement.settingsViewer )

Security Center Management Viewer ( roles/ securitycentermanagement.viewer )

Service agent roles

DSPM Service Agent ( roles/ dspm.serviceAgent )
Risk Manager Service Agent ( roles/ riskmanager.serviceAgent )
Cloud Security Compliance Service Agent ( roles/ cloudsecuritycompliance.serviceAgent )

`securitycentermanagement. securityCenterServices. list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Admin Editor ( roles/ securitycenter.adminEditor )

Security Center Admin Viewer ( roles/ securitycenter.adminViewer )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Settings Viewer ( roles/ securitycenter.settingsViewer )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Services Editor ( roles/ securitycentermanagement.securityCenterServicesEditor )

Security Center Management Services Viewer ( roles/ securitycentermanagement.securityCenterServicesViewer )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

Security Center Management Settings Viewer ( roles/ securitycentermanagement.settingsViewer )

Security Center Management Viewer ( roles/ securitycentermanagement.viewer )

Service agent roles

Risk Manager Service Agent ( roles/ riskmanager.serviceAgent )

`securitycentermanagement. securityCenterServices. update`

Owner ( roles/ owner )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Services Editor ( roles/ securitycentermanagement.securityCenterServicesEditor )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

Service agent roles

DSPM Service Agent ( roles/ dspm.serviceAgent )
Cloud Security Compliance Service Agent ( roles/ cloudsecuritycompliance.serviceAgent )

`securitycentermanagement. securityCommandCenter. activate`

Owner ( roles/ owner )

Editor ( roles/ editor )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

`securitycentermanagement. securityCommandCenter. checkActivationOperation`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Admin Editor ( roles/ securitycenter.adminEditor )

Security Center Admin Viewer ( roles/ securitycenter.adminViewer )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Settings Viewer ( roles/ securitycenter.settingsViewer )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

Security Center Management Settings Viewer ( roles/ securitycentermanagement.settingsViewer )

Security Center Management Viewer ( roles/ securitycentermanagement.viewer )

Service agent roles

Risk Manager Service Agent ( roles/ riskmanager.serviceAgent )

`securitycentermanagement. securityCommandCenter. checkEligibility`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Support User ( roles/ iam.supportUser )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

`securitycentermanagement. securityCommandCenter. checkOnboardingStatus`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Admin Editor ( roles/ securitycenter.adminEditor )

Security Center Admin Viewer ( roles/ securitycenter.adminViewer )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Settings Viewer ( roles/ securitycenter.settingsViewer )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

Security Center Management Settings Viewer ( roles/ securitycentermanagement.settingsViewer )

Security Center Management Viewer ( roles/ securitycentermanagement.viewer )

Service agent roles

Risk Manager Service Agent ( roles/ riskmanager.serviceAgent )

`securitycentermanagement. securityCommandCenter. generateServiceAccounts`

Owner ( roles/ owner )

Editor ( roles/ editor )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Admin Editor ( roles/ securitycenter.adminEditor )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

`securitycentermanagement. securityCommandCenter. get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Admin Editor ( roles/ securitycenter.adminEditor )

Security Center Admin Viewer ( roles/ securitycenter.adminViewer )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Settings Viewer ( roles/ securitycenter.settingsViewer )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

Security Center Management Settings Viewer ( roles/ securitycentermanagement.settingsViewer )

Security Center Management Viewer ( roles/ securitycentermanagement.viewer )

Service agent roles

Risk Manager Service Agent ( roles/ riskmanager.serviceAgent )

`securitycentermanagement. securityCommandCenter. update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Admin Editor ( roles/ securitycenter.adminEditor )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

`securitycentermanagement. securityHealthAnalyticsCustomModules. create`

Owner ( roles/ owner )

Editor ( roles/ editor )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Custom Modules Editor ( roles/ securitycentermanagement.customModulesEditor )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

Security Center Management SHA Custom Modules Editor ( roles/ securitycentermanagement.shaCustomModulesEditor )

Security Posture Admin ( roles/ securityposture.admin )

Security Posture Deployer ( roles/ securityposture.postureDeployer )

Service agent roles

Security Center Control Service Agent ( roles/ securitycenter.controlServiceAgent )
Security Center Service Agent ( roles/ securitycenter.serviceAgent )
DSPM Service Agent ( roles/ dspm.serviceAgent )

`securitycentermanagement. securityHealthAnalyticsCustomModules. delete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Custom Modules Editor ( roles/ securitycentermanagement.customModulesEditor )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

Security Center Management SHA Custom Modules Editor ( roles/ securitycentermanagement.shaCustomModulesEditor )

Security Posture Admin ( roles/ securityposture.admin )

Security Posture Deployer ( roles/ securityposture.postureDeployer )

Service agent roles

Security Center Service Agent ( roles/ securitycenter.serviceAgent )
Security Center Control Service Agent ( roles/ securitycenter.controlServiceAgent )

`securitycentermanagement. securityHealthAnalyticsCustomModules. get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Admin Editor ( roles/ securitycenter.adminEditor )

Security Center Admin Viewer ( roles/ securitycenter.adminViewer )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Settings Viewer ( roles/ securitycenter.settingsViewer )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Custom Modules Editor ( roles/ securitycentermanagement.customModulesEditor )

Security Center Management Custom Modules Viewer ( roles/ securitycentermanagement.customModulesViewer )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

Security Center Management Settings Viewer ( roles/ securitycentermanagement.settingsViewer )

Security Center Management SHA Custom Modules Editor ( roles/ securitycentermanagement.shaCustomModulesEditor )

Security Center Management SHA Custom Modules Viewer ( roles/ securitycentermanagement.shaCustomModulesViewer )

Security Center Management Viewer ( roles/ securitycentermanagement.viewer )

Security Posture Admin ( roles/ securityposture.admin )

Service agent roles

Risk Manager Service Agent ( roles/ riskmanager.serviceAgent )
Security Center Control Service Agent ( roles/ securitycenter.controlServiceAgent )
Security Center Service Agent ( roles/ securitycenter.serviceAgent )
DSPM Service Agent ( roles/ dspm.serviceAgent )

`securitycentermanagement. securityHealthAnalyticsCustomModules. list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Auditor ( roles/ iam.securityAuditor )

Security Reviewer ( roles/ iam.securityReviewer )

Support User ( roles/ iam.supportUser )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Admin Editor ( roles/ securitycenter.adminEditor )

Security Center Admin Viewer ( roles/ securitycenter.adminViewer )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Settings Viewer ( roles/ securitycenter.settingsViewer )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Custom Modules Editor ( roles/ securitycentermanagement.customModulesEditor )

Security Center Management Custom Modules Viewer ( roles/ securitycentermanagement.customModulesViewer )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

Security Center Management Settings Viewer ( roles/ securitycentermanagement.settingsViewer )

Security Center Management SHA Custom Modules Editor ( roles/ securitycentermanagement.shaCustomModulesEditor )

Security Center Management SHA Custom Modules Viewer ( roles/ securitycentermanagement.shaCustomModulesViewer )

Security Center Management Viewer ( roles/ securitycentermanagement.viewer )

Security Posture Admin ( roles/ securityposture.admin )

Service agent roles

Security Center Control Service Agent ( roles/ securitycenter.controlServiceAgent )
Security Center Service Agent ( roles/ securitycenter.serviceAgent )
Risk Manager Service Agent ( roles/ riskmanager.serviceAgent )

`securitycentermanagement. securityHealthAnalyticsCustomModules. simulate`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Admin Editor ( roles/ securitycenter.adminEditor )

Security Center Admin Viewer ( roles/ securitycenter.adminViewer )

Security Health Analytics Custom Modules Tester ( roles/ securitycenter.securityHealthAnalyticsCustomModulesTester )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Settings Viewer ( roles/ securitycenter.settingsViewer )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Custom Modules Editor ( roles/ securitycentermanagement.customModulesEditor )

Security Center Management Custom Modules Viewer ( roles/ securitycentermanagement.customModulesViewer )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

Security Center Management Settings Viewer ( roles/ securitycentermanagement.settingsViewer )

Security Center Management SHA Custom Modules Editor ( roles/ securitycentermanagement.shaCustomModulesEditor )

Security Center Management SHA Custom Modules Viewer ( roles/ securitycentermanagement.shaCustomModulesViewer )

Security Center Management Viewer ( roles/ securitycentermanagement.viewer )

Service agent roles

Security Center Control Service Agent ( roles/ securitycenter.controlServiceAgent )
Security Center Service Agent ( roles/ securitycenter.serviceAgent )
Risk Manager Service Agent ( roles/ riskmanager.serviceAgent )

`securitycentermanagement. securityHealthAnalyticsCustomModules. test`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Admin Editor ( roles/ securitycenter.adminEditor )

Security Center Admin Viewer ( roles/ securitycenter.adminViewer )

Security Health Analytics Custom Modules Tester ( roles/ securitycenter.securityHealthAnalyticsCustomModulesTester )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Settings Viewer ( roles/ securitycenter.settingsViewer )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Custom Modules Editor ( roles/ securitycentermanagement.customModulesEditor )

Security Center Management Custom Modules Viewer ( roles/ securitycentermanagement.customModulesViewer )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

Security Center Management Settings Viewer ( roles/ securitycentermanagement.settingsViewer )

Security Center Management SHA Custom Modules Editor ( roles/ securitycentermanagement.shaCustomModulesEditor )

Security Center Management SHA Custom Modules Viewer ( roles/ securitycentermanagement.shaCustomModulesViewer )

Security Center Management Viewer ( roles/ securitycentermanagement.viewer )

Service agent roles

Risk Manager Service Agent ( roles/ riskmanager.serviceAgent )

`securitycentermanagement. securityHealthAnalyticsCustomModules. update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Security Center Admin ( roles/ securitycenter.admin )

Security Center Settings Admin ( roles/ securitycenter.settingsAdmin )

Security Center Settings Editor ( roles/ securitycenter.settingsEditor )

Security Center Management Admin ( roles/ securitycentermanagement.admin )

Security Center Management Custom Modules Editor ( roles/ securitycentermanagement.customModulesEditor )

Security Center Management Settings Editor ( roles/ securitycentermanagement.settingsEditor )

Security Center Management SHA Custom Modules Editor ( roles/ securitycentermanagement.shaCustomModulesEditor )

Security Posture Admin ( roles/ securityposture.admin )

Security Posture Deployer ( roles/ securityposture.postureDeployer )

Service agent roles

Security Center Service Agent ( roles/ securitycenter.serviceAgent )
Security Center Control Service Agent ( roles/ securitycenter.controlServiceAgent )