This page lists the IAM roles and permissions for Cloud TPU. To search through all roles and permissions, see the role and permission index .
Cloud TPU roles
Cloud TPU V2 API Service Agent
( roles/
)
Give Cloud TPUs service account access to managed resources
backupdr.
backupdr.
backupdr.
backupdr.
backupdr.
backupdr.
backupdr.
backupdr.
backupdr.
backupdr.
backupdr.
backupdr.backupPlans.get
backupdr.backupPlans.list
backupdr.
backupdr.
backupdr.backupVaults.get
backupdr.backupVaults.list
backupdr.locations.list
backupdr.operations.get
backupdr.operations.list
backupdr.
compute.acceleratorTypes.*
-
compute.acceleratorTypes.get
-
compute.acceleratorTypes.list
compute.addresses.*
-
compute.addresses.create
-
compute.
addresses. createInternal -
compute.
addresses. createTagBinding -
compute.addresses.delete
-
compute.
addresses. deleteInternal -
compute.
addresses. deleteTagBinding -
compute.addresses.get
-
compute.addresses.list
-
compute.
addresses. listEffectiveTags -
compute.
addresses. listTagBindings -
compute.addresses.setLabels
-
compute.addresses.use
-
compute.addresses.useInternal
compute.autoscalers.*
-
compute.autoscalers.create
-
compute.autoscalers.delete
-
compute.autoscalers.get
-
compute.autoscalers.list
-
compute.autoscalers.update
compute.backendBuckets.*
-
compute.
backendBuckets. addSignedUrlKey -
compute.backendBuckets.create
-
compute.
backendBuckets. createTagBinding -
compute.backendBuckets.delete
-
compute.
backendBuckets. deleteSignedUrlKey -
compute.
backendBuckets. deleteTagBinding -
compute.backendBuckets.get
-
compute.
backendBuckets. getIamPolicy -
compute.backendBuckets.list
-
compute.
backendBuckets. listEffectiveTags -
compute.
backendBuckets. listTagBindings -
compute.
backendBuckets. setIamPolicy -
compute.
backendBuckets. setSecurityPolicy -
compute.backendBuckets.update
-
compute.backendBuckets.use
compute.backendServices.*
-
compute.
backendServices. addSignedUrlKey -
compute.backendServices.create
-
compute.
backendServices. createTagBinding -
compute.backendServices.delete
-
compute.
backendServices. deleteSignedUrlKey -
compute.
backendServices. deleteTagBinding -
compute.backendServices.get
-
compute.
backendServices. getIamPolicy -
compute.backendServices.list
-
compute.
backendServices. listEffectiveTags -
compute.
backendServices. listTagBindings -
compute.
backendServices. setIamPolicy -
compute.
backendServices. setSecurityPolicy -
compute.backendServices.update
-
compute.backendServices.use
compute.crossSiteNetworks.*
-
compute.
crossSiteNetworks. create -
compute.
crossSiteNetworks. delete -
compute.crossSiteNetworks.get
-
compute.crossSiteNetworks.list
-
compute.
crossSiteNetworks. update
compute.diskSettings.get
compute.diskTypes.*
-
compute.diskTypes.get
-
compute.diskTypes.list
compute.disks.*
-
compute.
disks. addResourcePolicies -
compute.disks.create
-
compute.disks.createSnapshot
-
compute.disks.createTagBinding
-
compute.disks.delete
-
compute.disks.deleteTagBinding
-
compute.disks.get
-
compute.disks.getIamPolicy
-
compute.disks.list
-
compute.
disks. listEffectiveTags -
compute.disks.listTagBindings
-
compute.
disks. removeResourcePolicies -
compute.disks.resize
-
compute.disks.setIamPolicy
-
compute.disks.setLabels
-
compute.
disks. startAsyncReplication -
compute.
disks. stopAsyncReplication -
compute.
disks. stopGroupAsyncReplication -
compute.disks.update
-
compute.disks.use
-
compute.disks.useReadOnly
compute.externalVpnGateways.*
-
compute.
externalVpnGateways. create -
compute.
externalVpnGateways. createTagBinding -
compute.
externalVpnGateways. delete -
compute.
externalVpnGateways. deleteTagBinding -
compute.
externalVpnGateways. get -
compute.
externalVpnGateways. list -
compute.
externalVpnGateways. listEffectiveTags -
compute.
externalVpnGateways. listTagBindings -
compute.
externalVpnGateways. setLabels -
compute.
externalVpnGateways. use
compute.firewallPolicies.get
compute.firewallPolicies.list
compute.
compute.
compute.firewallPolicies.use
compute.firewalls.create
compute.firewalls.delete
compute.firewalls.get
compute.firewalls.list
compute.
compute.
compute.firewalls.update
compute.forwardingRules.*
-
compute.forwardingRules.create
-
compute.
forwardingRules. createTagBinding -
compute.forwardingRules.delete
-
compute.
forwardingRules. deleteTagBinding -
compute.forwardingRules.get
-
compute.forwardingRules.list
-
compute.
forwardingRules. listEffectiveTags -
compute.
forwardingRules. listTagBindings -
compute.
forwardingRules. pscCreate -
compute.
forwardingRules. pscDelete -
compute.
forwardingRules. pscSetLabels -
compute.
forwardingRules. pscUpdate -
compute.
forwardingRules. setLabels -
compute.
forwardingRules. setTarget -
compute.forwardingRules.update
-
compute.forwardingRules.use
compute.globalAddresses.*
-
compute.globalAddresses.create
-
compute.
globalAddresses. createInternal -
compute.
globalAddresses. createTagBinding -
compute.globalAddresses.delete
-
compute.
globalAddresses. deleteInternal -
compute.
globalAddresses. deleteTagBinding -
compute.globalAddresses.get
-
compute.globalAddresses.list
-
compute.
globalAddresses. listEffectiveTags -
compute.
globalAddresses. listTagBindings -
compute.
globalAddresses. setLabels -
compute.globalAddresses.use
compute.
-
compute.
globalForwardingRules. create -
compute.
globalForwardingRules. createTagBinding -
compute.
globalForwardingRules. delete -
compute.
globalForwardingRules. deleteTagBinding -
compute.
globalForwardingRules. get -
compute.
globalForwardingRules. list -
compute.
globalForwardingRules. listEffectiveTags -
compute.
globalForwardingRules. listTagBindings -
compute.
globalForwardingRules. pscCreate -
compute.
globalForwardingRules. pscDelete -
compute.
globalForwardingRules. pscSetLabels -
compute.
globalForwardingRules. pscUpdate -
compute.
globalForwardingRules. setLabels -
compute.
globalForwardingRules. setTarget -
compute.
globalForwardingRules. update
compute.
-
compute.
globalNetworkEndpointGroups. attachNetworkEndpoints -
compute.
globalNetworkEndpointGroups. create -
compute.
globalNetworkEndpointGroups. createTagBinding -
compute.
globalNetworkEndpointGroups. delete -
compute.
globalNetworkEndpointGroups. deleteTagBinding -
compute.
globalNetworkEndpointGroups. detachNetworkEndpoints -
compute.
globalNetworkEndpointGroups. get -
compute.
globalNetworkEndpointGroups. list -
compute.
globalNetworkEndpointGroups. listEffectiveTags -
compute.
globalNetworkEndpointGroups. listTagBindings -
compute.
globalNetworkEndpointGroups. use
compute.globalOperations.get
compute.globalOperations.list
compute.
compute.
compute.
compute.
compute.healthChecks.*
-
compute.healthChecks.create
-
compute.
healthChecks. createTagBinding -
compute.healthChecks.delete
-
compute.
healthChecks. deleteTagBinding -
compute.healthChecks.get
-
compute.healthChecks.list
-
compute.
healthChecks. listEffectiveTags -
compute.
healthChecks. listTagBindings -
compute.healthChecks.update
-
compute.healthChecks.use
-
compute.
healthChecks. useReadOnly
compute.httpHealthChecks.*
-
compute.
httpHealthChecks. create -
compute.
httpHealthChecks. createTagBinding -
compute.
httpHealthChecks. delete -
compute.
httpHealthChecks. deleteTagBinding -
compute.httpHealthChecks.get
-
compute.httpHealthChecks.list
-
compute.
httpHealthChecks. listEffectiveTags -
compute.
httpHealthChecks. listTagBindings -
compute.
httpHealthChecks. update -
compute.httpHealthChecks.use
-
compute.
httpHealthChecks. useReadOnly
compute.httpsHealthChecks.*
-
compute.
httpsHealthChecks. create -
compute.
httpsHealthChecks. createTagBinding -
compute.
httpsHealthChecks. delete -
compute.
httpsHealthChecks. deleteTagBinding -
compute.httpsHealthChecks.get
-
compute.httpsHealthChecks.list
-
compute.
httpsHealthChecks. listEffectiveTags -
compute.
httpsHealthChecks. listTagBindings -
compute.
httpsHealthChecks. update -
compute.httpsHealthChecks.use
-
compute.
httpsHealthChecks. useReadOnly
compute.images.*
-
compute.images.create
-
compute.
images. createTagBinding -
compute.images.delete
-
compute.
images. deleteTagBinding -
compute.images.deprecate
-
compute.images.get
-
compute.images.getFromFamily
-
compute.images.getIamPolicy
-
compute.images.list
-
compute.
images. listEffectiveTags -
compute.images.listTagBindings
-
compute.images.setIamPolicy
-
compute.images.setLabels
-
compute.images.update
-
compute.images.useReadOnly
compute.
-
compute.
instanceGroupManagers. create -
compute.
instanceGroupManagers. createTagBinding -
compute.
instanceGroupManagers. delete -
compute.
instanceGroupManagers. deleteTagBinding -
compute.
instanceGroupManagers. get -
compute.
instanceGroupManagers. list -
compute.
instanceGroupManagers. listEffectiveTags -
compute.
instanceGroupManagers. listTagBindings -
compute.
instanceGroupManagers. update -
compute.
instanceGroupManagers. use
compute.instanceGroups.*
-
compute.instanceGroups.create
-
compute.
instanceGroups. createTagBinding -
compute.instanceGroups.delete
-
compute.
instanceGroups. deleteTagBinding -
compute.instanceGroups.get
-
compute.instanceGroups.list
-
compute.
instanceGroups. listEffectiveTags -
compute.
instanceGroups. listTagBindings -
compute.instanceGroups.update
-
compute.instanceGroups.use
compute.instanceSettings.*
-
compute.instanceSettings.get
-
compute.
instanceSettings. update
compute.instanceTemplates.*
-
compute.
instanceTemplates. create -
compute.
instanceTemplates. delete -
compute.instanceTemplates.get
-
compute.
instanceTemplates. getIamPolicy -
compute.instanceTemplates.list
-
compute.
instanceTemplates. setIamPolicy -
compute.
instanceTemplates. useReadOnly
compute.instances.*
-
compute.
instances. addAccessConfig -
compute.
instances. addNetworkInterface -
compute.
instances. addResourcePolicies -
compute.instances.attachDisk
-
compute.instances.create
-
compute.
instances. createTagBinding -
compute.instances.delete
-
compute.
instances. deleteAccessConfig -
compute.
instances. deleteNetworkInterface -
compute.
instances. deleteTagBinding -
compute.instances.detachDisk
-
compute.instances.get
-
compute.
instances. getEffectiveFirewalls -
compute.
instances. getGuestAttributes -
compute.instances.getIamPolicy
-
compute.
instances. getScreenshot -
compute.
instances. getSerialPortOutput -
compute.
instances. getShieldedInstanceIdentity -
compute.
instances. getShieldedVmIdentity -
compute.instances.list
-
compute.
instances. listEffectiveTags -
compute.
instances. listReferrers -
compute.
instances. listTagBindings -
compute.instances.osAdminLogin
-
compute.instances.osLogin
-
compute.
instances. pscInterfaceCreate -
compute.
instances. removeResourcePolicies -
compute.instances.reset
-
compute.instances.resume
-
compute.
instances. sendDiagnosticInterrupt -
compute.
instances. setDeletionProtection -
compute.
instances. setDiskAutoDelete -
compute.instances.setIamPolicy
-
compute.instances.setLabels
-
compute.
instances. setMachineResources -
compute.
instances. setMachineType -
compute.instances.setMetadata
-
compute.
instances. setMinCpuPlatform -
compute.instances.setName
-
compute.
instances. setScheduling -
compute.
instances. setSecurityPolicy -
compute.
instances. setServiceAccount -
compute.
instances. setShieldedInstanceIntegrityPolicy -
compute.
instances. setShieldedVmIntegrityPolicy -
compute.instances.setTags
-
compute.
instances. simulateMaintenanceEvent -
compute.instances.start
-
compute.
instances. startWithEncryptionKey -
compute.instances.stop
-
compute.instances.suspend
-
compute.instances.update
-
compute.
instances. updateAccessConfig -
compute.
instances. updateDisplayDevice -
compute.
instances. updateNetworkInterface -
compute.
instances. updateSecurity -
compute.
instances. updateShieldedInstanceConfig -
compute.
instances. updateShieldedVmConfig -
compute.instances.use
-
compute.instances.useReadOnly
compute.instantSnapshots.*
-
compute.
instantSnapshots. create -
compute.
instantSnapshots. delete -
compute.
instantSnapshots. export -
compute.instantSnapshots.get
-
compute.
instantSnapshots. getIamPolicy -
compute.instantSnapshots.list
-
compute.
instantSnapshots. setIamPolicy -
compute.
instantSnapshots. setLabels -
compute.
instantSnapshots. useReadOnly
compute.
-
compute.
interconnectAttachmentGroups. create -
compute.
interconnectAttachmentGroups. delete -
compute.
interconnectAttachmentGroups. get -
compute.
interconnectAttachmentGroups. list -
compute.
interconnectAttachmentGroups. patch
compute.
-
compute.
interconnectAttachments. create -
compute.
interconnectAttachments. createTagBinding -
compute.
interconnectAttachments. delete -
compute.
interconnectAttachments. deleteTagBinding -
compute.
interconnectAttachments. get -
compute.
interconnectAttachments. list -
compute.
interconnectAttachments. listEffectiveTags -
compute.
interconnectAttachments. listTagBindings -
compute.
interconnectAttachments. setLabels -
compute.
interconnectAttachments. update -
compute.
interconnectAttachments. use
compute.interconnectGroups.*
-
compute.
interconnectGroups. create -
compute.
interconnectGroups. delete -
compute.interconnectGroups.get
-
compute.
interconnectGroups. list -
compute.
interconnectGroups. patch
compute.
-
compute.
interconnectLocations. get -
compute.
interconnectLocations. list
compute.
-
compute.
interconnectRemoteLocations. get -
compute.
interconnectRemoteLocations. list
compute.interconnects.*
-
compute.interconnects.create
-
compute.
interconnects. createTagBinding -
compute.interconnects.delete
-
compute.
interconnects. deleteTagBinding -
compute.interconnects.get
-
compute.
interconnects. getMacsecConfig -
compute.interconnects.list
-
compute.
interconnects. listEffectiveTags -
compute.
interconnects. listTagBindings -
compute.
interconnects. setLabels -
compute.interconnects.update
-
compute.interconnects.use
compute.licenseCodes.*
-
compute.licenseCodes.get
-
compute.
licenseCodes. getIamPolicy -
compute.licenseCodes.list
-
compute.
licenseCodes. setIamPolicy -
compute.licenseCodes.update
compute.licenses.*
-
compute.licenses.create
-
compute.licenses.delete
-
compute.licenses.get
-
compute.licenses.getIamPolicy
-
compute.licenses.list
-
compute.licenses.setIamPolicy
-
compute.licenses.update
compute.machineImages.*
-
compute.machineImages.create
-
compute.machineImages.delete
-
compute.machineImages.get
-
compute.
machineImages. getIamPolicy -
compute.machineImages.list
-
compute.
machineImages. setIamPolicy -
compute.
machineImages. setLabels -
compute.
machineImages. useReadOnly
compute.machineTypes.*
-
compute.machineTypes.get
-
compute.machineTypes.list
compute.multiMig.*
-
compute.multiMig.create
-
compute.multiMig.delete
-
compute.multiMig.get
-
compute.multiMig.list
compute.networkAttachments.*
-
compute.
networkAttachments. create -
compute.
networkAttachments. createTagBinding -
compute.
networkAttachments. delete -
compute.
networkAttachments. deleteTagBinding -
compute.networkAttachments.get
-
compute.
networkAttachments. getIamPolicy -
compute.
networkAttachments. list -
compute.
networkAttachments. listEffectiveTags -
compute.
networkAttachments. listTagBindings -
compute.
networkAttachments. setIamPolicy -
compute.
networkAttachments. update -
compute.networkAttachments.use
compute.
-
compute.
networkEndpointGroups. attachNetworkEndpoints -
compute.
networkEndpointGroups. create -
compute.
networkEndpointGroups. createTagBinding -
compute.
networkEndpointGroups. delete -
compute.
networkEndpointGroups. deleteTagBinding -
compute.
networkEndpointGroups. detachNetworkEndpoints -
compute.
networkEndpointGroups. get -
compute.
networkEndpointGroups. list -
compute.
networkEndpointGroups. listEffectiveTags -
compute.
networkEndpointGroups. listTagBindings -
compute.
networkEndpointGroups. use
compute.networkProfiles.*
-
compute.networkProfiles.get
-
compute.networkProfiles.list
compute.networks.*
-
compute.networks.access
-
compute.networks.addPeering
-
compute.networks.create
-
compute.
networks. createTagBinding -
compute.networks.delete
-
compute.
networks. deleteTagBinding -
compute.networks.get
-
compute.
networks. getEffectiveFirewalls -
compute.
networks. getRegionEffectiveFirewalls -
compute.networks.list
-
compute.
networks. listEffectiveTags -
compute.
networks. listPeeringRoutes -
compute.
networks. listTagBindings -
compute.networks.mirror
-
compute.networks.removePeering
-
compute.
networks. setFirewallPolicy -
compute.
networks. switchToCustomMode -
compute.networks.update
-
compute.networks.updatePeering
-
compute.networks.updatePolicy
-
compute.networks.use
-
compute.networks.useExternalIp
compute.packetMirrorings.get
compute.packetMirrorings.list
compute.
compute.
compute.projects.get
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
-
compute.
regionBackendServices. create -
compute.
regionBackendServices. createTagBinding -
compute.
regionBackendServices. delete -
compute.
regionBackendServices. deleteTagBinding -
compute.
regionBackendServices. get -
compute.
regionBackendServices. getIamPolicy -
compute.
regionBackendServices. list -
compute.
regionBackendServices. listEffectiveTags -
compute.
regionBackendServices. listTagBindings -
compute.
regionBackendServices. setIamPolicy -
compute.
regionBackendServices. setSecurityPolicy -
compute.
regionBackendServices. update -
compute.
regionBackendServices. use
compute.
compute.
compute.
compute.
compute.
compute.
-
compute.
regionHealthCheckServices. create -
compute.
regionHealthCheckServices. delete -
compute.
regionHealthCheckServices. get -
compute.
regionHealthCheckServices. list -
compute.
regionHealthCheckServices. update -
compute.
regionHealthCheckServices. use
compute.regionHealthChecks.*
-
compute.
regionHealthChecks. create -
compute.
regionHealthChecks. createTagBinding -
compute.
regionHealthChecks. delete -
compute.
regionHealthChecks. deleteTagBinding -
compute.regionHealthChecks.get
-
compute.
regionHealthChecks. list -
compute.
regionHealthChecks. listEffectiveTags -
compute.
regionHealthChecks. listTagBindings -
compute.
regionHealthChecks. update -
compute.regionHealthChecks.use
-
compute.
regionHealthChecks. useReadOnly
compute.
-
compute.
regionNetworkEndpointGroups. attachNetworkEndpoints -
compute.
regionNetworkEndpointGroups. create -
compute.
regionNetworkEndpointGroups. createTagBinding -
compute.
regionNetworkEndpointGroups. delete -
compute.
regionNetworkEndpointGroups. deleteTagBinding -
compute.
regionNetworkEndpointGroups. detachNetworkEndpoints -
compute.
regionNetworkEndpointGroups. get -
compute.
regionNetworkEndpointGroups. list -
compute.
regionNetworkEndpointGroups. listEffectiveTags -
compute.
regionNetworkEndpointGroups. listTagBindings -
compute.
regionNetworkEndpointGroups. use
compute.
-
compute.
regionNotificationEndpoints. create -
compute.
regionNotificationEndpoints. delete -
compute.
regionNotificationEndpoints. get -
compute.
regionNotificationEndpoints. list -
compute.
regionNotificationEndpoints. update -
compute.
regionNotificationEndpoints. use
compute.regionOperations.get
compute.regionOperations.list
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.regionSslPolicies.*
-
compute.
regionSslPolicies. create -
compute.
regionSslPolicies. createTagBinding -
compute.
regionSslPolicies. delete -
compute.
regionSslPolicies. deleteTagBinding -
compute.regionSslPolicies.get
-
compute.regionSslPolicies.list
-
compute.
regionSslPolicies. listAvailableFeatures -
compute.
regionSslPolicies. listEffectiveTags -
compute.
regionSslPolicies. listTagBindings -
compute.
regionSslPolicies. update -
compute.regionSslPolicies.use
compute.
-
compute.
regionTargetHttpProxies. create -
compute.
regionTargetHttpProxies. createTagBinding -
compute.
regionTargetHttpProxies. delete -
compute.
regionTargetHttpProxies. deleteTagBinding -
compute.
regionTargetHttpProxies. get -
compute.
regionTargetHttpProxies. list -
compute.
regionTargetHttpProxies. listEffectiveTags -
compute.
regionTargetHttpProxies. listTagBindings -
compute.
regionTargetHttpProxies. setUrlMap -
compute.
regionTargetHttpProxies. use
compute.
-
compute.
regionTargetHttpsProxies. create -
compute.
regionTargetHttpsProxies. createTagBinding -
compute.
regionTargetHttpsProxies. delete -
compute.
regionTargetHttpsProxies. deleteTagBinding -
compute.
regionTargetHttpsProxies. get -
compute.
regionTargetHttpsProxies. list -
compute.
regionTargetHttpsProxies. listEffectiveTags -
compute.
regionTargetHttpsProxies. listTagBindings -
compute.
regionTargetHttpsProxies. setSslCertificates -
compute.
regionTargetHttpsProxies. setUrlMap -
compute.
regionTargetHttpsProxies. update -
compute.
regionTargetHttpsProxies. use
compute.
-
compute.
regionTargetTcpProxies. create -
compute.
regionTargetTcpProxies. createTagBinding -
compute.
regionTargetTcpProxies. delete -
compute.
regionTargetTcpProxies. deleteTagBinding -
compute.
regionTargetTcpProxies. get -
compute.
regionTargetTcpProxies. list -
compute.
regionTargetTcpProxies. listEffectiveTags -
compute.
regionTargetTcpProxies. listTagBindings -
compute.
regionTargetTcpProxies. use
compute.regionUrlMaps.*
-
compute.regionUrlMaps.create
-
compute.
regionUrlMaps. createTagBinding -
compute.regionUrlMaps.delete
-
compute.
regionUrlMaps. deleteTagBinding -
compute.regionUrlMaps.get
-
compute.
regionUrlMaps. invalidateCache -
compute.regionUrlMaps.list
-
compute.
regionUrlMaps. listEffectiveTags -
compute.
regionUrlMaps. listTagBindings -
compute.regionUrlMaps.update
-
compute.regionUrlMaps.use
-
compute.regionUrlMaps.validate
compute.regions.*
-
compute.regions.get
-
compute.regions.list
compute.reservationBlocks.get
compute.reservationBlocks.list
compute.reservationSubBlocks.*
-
compute.
reservationSubBlocks. get -
compute.
reservationSubBlocks. list -
compute.
reservationSubBlocks. performMaintenance
compute.reservations.get
compute.reservations.list
compute.resourcePolicies.*
-
compute.
resourcePolicies. create -
compute.
resourcePolicies. delete -
compute.resourcePolicies.get
-
compute.
resourcePolicies. getIamPolicy -
compute.resourcePolicies.list
-
compute.
resourcePolicies. setIamPolicy -
compute.
resourcePolicies. update -
compute.resourcePolicies.use
-
compute.
resourcePolicies. useReadOnly
compute.routers.*
-
compute.routers.create
-
compute.
routers. createTagBinding -
compute.routers.delete
-
compute.
routers. deleteRoutePolicy -
compute.
routers. deleteTagBinding -
compute.routers.get
-
compute.routers.getRoutePolicy
-
compute.routers.list
-
compute.routers.listBgpRoutes
-
compute.
routers. listEffectiveTags -
compute.
routers. listRoutePolicies -
compute.
routers. listTagBindings -
compute.routers.update
-
compute.
routers. updateRoutePolicy -
compute.routers.use
compute.routes.*
-
compute.routes.create
-
compute.
routes. createTagBinding -
compute.routes.delete
-
compute.
routes. deleteTagBinding -
compute.routes.get
-
compute.routes.list
-
compute.
routes. listEffectiveTags -
compute.routes.listTagBindings
compute.securityPolicies.get
compute.securityPolicies.list
compute.
compute.
compute.securityPolicies.use
compute.serviceAttachments.*
-
compute.
serviceAttachments. create -
compute.
serviceAttachments. createTagBinding -
compute.
serviceAttachments. delete -
compute.
serviceAttachments. deleteTagBinding -
compute.serviceAttachments.get
-
compute.
serviceAttachments. getIamPolicy -
compute.
serviceAttachments. list -
compute.
serviceAttachments. listEffectiveTags -
compute.
serviceAttachments. listTagBindings -
compute.
serviceAttachments. setIamPolicy -
compute.
serviceAttachments. update -
compute.serviceAttachments.use
compute.snapshots.*
-
compute.snapshots.create
-
compute.
snapshots. createTagBinding -
compute.snapshots.delete
-
compute.
snapshots. deleteTagBinding -
compute.snapshots.get
-
compute.snapshots.getIamPolicy
-
compute.snapshots.list
-
compute.
snapshots. listEffectiveTags -
compute.
snapshots. listTagBindings -
compute.snapshots.setIamPolicy
-
compute.snapshots.setLabels
-
compute.snapshots.useReadOnly
compute.spotAssistants.get
compute.sslCertificates.get
compute.sslCertificates.list
compute.
compute.
compute.sslPolicies.*
-
compute.sslPolicies.create
-
compute.
sslPolicies. createTagBinding -
compute.sslPolicies.delete
-
compute.
sslPolicies. deleteTagBinding -
compute.sslPolicies.get
-
compute.sslPolicies.list
-
compute.
sslPolicies. listAvailableFeatures -
compute.
sslPolicies. listEffectiveTags -
compute.
sslPolicies. listTagBindings -
compute.sslPolicies.update
-
compute.sslPolicies.use
compute.storagePools.get
compute.storagePools.list
compute.storagePools.use
compute.subnetworks.*
-
compute.subnetworks.create
-
compute.
subnetworks. createTagBinding -
compute.subnetworks.delete
-
compute.
subnetworks. deleteTagBinding -
compute.
subnetworks. expandIpCidrRange -
compute.subnetworks.get
-
compute.
subnetworks. getIamPolicy -
compute.subnetworks.list
-
compute.
subnetworks. listEffectiveTags -
compute.
subnetworks. listTagBindings -
compute.subnetworks.mirror
-
compute.
subnetworks. setIamPolicy -
compute.
subnetworks. setPrivateIpGoogleAccess -
compute.subnetworks.update
-
compute.subnetworks.use
-
compute.
subnetworks. useExternalIp -
compute.
subnetworks. usePeerMigration
compute.targetGrpcProxies.*
-
compute.
targetGrpcProxies. create -
compute.
targetGrpcProxies. createTagBinding -
compute.
targetGrpcProxies. delete -
compute.
targetGrpcProxies. deleteTagBinding -
compute.targetGrpcProxies.get
-
compute.targetGrpcProxies.list
-
compute.
targetGrpcProxies. listEffectiveTags -
compute.
targetGrpcProxies. listTagBindings -
compute.
targetGrpcProxies. update -
compute.targetGrpcProxies.use
compute.targetHttpProxies.*
-
compute.
targetHttpProxies. create -
compute.
targetHttpProxies. createTagBinding -
compute.
targetHttpProxies. delete -
compute.
targetHttpProxies. deleteTagBinding -
compute.targetHttpProxies.get
-
compute.targetHttpProxies.list
-
compute.
targetHttpProxies. listEffectiveTags -
compute.
targetHttpProxies. listTagBindings -
compute.
targetHttpProxies. setUrlMap -
compute.
targetHttpProxies. update -
compute.targetHttpProxies.use
compute.targetHttpsProxies.*
-
compute.
targetHttpsProxies. create -
compute.
targetHttpsProxies. createTagBinding -
compute.
targetHttpsProxies. delete -
compute.
targetHttpsProxies. deleteTagBinding -
compute.targetHttpsProxies.get
-
compute.
targetHttpsProxies. list -
compute.
targetHttpsProxies. listEffectiveTags -
compute.
targetHttpsProxies. listTagBindings -
compute.
targetHttpsProxies. setCertificateMap -
compute.
targetHttpsProxies. setQuicOverride -
compute.
targetHttpsProxies. setSslCertificates -
compute.
targetHttpsProxies. setSslPolicy -
compute.
targetHttpsProxies. setUrlMap -
compute.
targetHttpsProxies. update -
compute.targetHttpsProxies.use
compute.targetInstances.*
-
compute.targetInstances.create
-
compute.
targetInstances. createTagBinding -
compute.targetInstances.delete
-
compute.
targetInstances. deleteTagBinding -
compute.targetInstances.get
-
compute.targetInstances.list
-
compute.
targetInstances. listEffectiveTags -
compute.
targetInstances. listTagBindings -
compute.
targetInstances. setSecurityPolicy -
compute.targetInstances.use
compute.targetPools.*
-
compute.
targetPools. addHealthCheck -
compute.
targetPools. addInstance -
compute.targetPools.create
-
compute.
targetPools. createTagBinding -
compute.targetPools.delete
-
compute.
targetPools. deleteTagBinding -
compute.targetPools.get
-
compute.targetPools.list
-
compute.
targetPools. listEffectiveTags -
compute.
targetPools. listTagBindings -
compute.
targetPools. removeHealthCheck -
compute.
targetPools. removeInstance -
compute.
targetPools. setSecurityPolicy -
compute.targetPools.update
-
compute.targetPools.use
compute.targetSslProxies.*
-
compute.
targetSslProxies. create -
compute.
targetSslProxies. createTagBinding -
compute.
targetSslProxies. delete -
compute.
targetSslProxies. deleteTagBinding -
compute.targetSslProxies.get
-
compute.targetSslProxies.list
-
compute.
targetSslProxies. listEffectiveTags -
compute.
targetSslProxies. listTagBindings -
compute.
targetSslProxies. setBackendService -
compute.
targetSslProxies. setCertificateMap -
compute.
targetSslProxies. setProxyHeader -
compute.
targetSslProxies. setSslCertificates -
compute.
targetSslProxies. setSslPolicy -
compute.
targetSslProxies. update -
compute.targetSslProxies.use
compute.targetTcpProxies.*
-
compute.
targetTcpProxies. create -
compute.
targetTcpProxies. createTagBinding -
compute.
targetTcpProxies. delete -
compute.
targetTcpProxies. deleteTagBinding -
compute.targetTcpProxies.get
-
compute.targetTcpProxies.list
-
compute.
targetTcpProxies. listEffectiveTags -
compute.
targetTcpProxies. listTagBindings -
compute.
targetTcpProxies. update -
compute.targetTcpProxies.use
compute.targetVpnGateways.*
-
compute.
targetVpnGateways. create -
compute.
targetVpnGateways. createTagBinding -
compute.
targetVpnGateways. delete -
compute.
targetVpnGateways. deleteTagBinding -
compute.targetVpnGateways.get
-
compute.targetVpnGateways.list
-
compute.
targetVpnGateways. listEffectiveTags -
compute.
targetVpnGateways. listTagBindings -
compute.
targetVpnGateways. setLabels -
compute.targetVpnGateways.use
compute.urlMaps.*
-
compute.urlMaps.create
-
compute.
urlMaps. createTagBinding -
compute.urlMaps.delete
-
compute.
urlMaps. deleteTagBinding -
compute.urlMaps.get
-
compute.
urlMaps. invalidateCache -
compute.urlMaps.list
-
compute.
urlMaps. listEffectiveTags -
compute.
urlMaps. listTagBindings -
compute.urlMaps.update
-
compute.urlMaps.use
-
compute.urlMaps.validate
compute.vpnGateways.*
-
compute.vpnGateways.create
-
compute.
vpnGateways. createTagBinding -
compute.vpnGateways.delete
-
compute.
vpnGateways. deleteTagBinding -
compute.vpnGateways.get
-
compute.vpnGateways.list
-
compute.
vpnGateways. listEffectiveTags -
compute.
vpnGateways. listTagBindings -
compute.vpnGateways.setLabels
-
compute.vpnGateways.use
compute.vpnTunnels.*
-
compute.vpnTunnels.create
-
compute.
vpnTunnels. createTagBinding -
compute.vpnTunnels.delete
-
compute.
vpnTunnels. deleteTagBinding -
compute.vpnTunnels.get
-
compute.vpnTunnels.list
-
compute.
vpnTunnels. listEffectiveTags -
compute.
vpnTunnels. listTagBindings -
compute.vpnTunnels.setLabels
compute.wireGroups.*
-
compute.wireGroups.create
-
compute.wireGroups.delete
-
compute.wireGroups.get
-
compute.wireGroups.list
-
compute.wireGroups.update
compute.zoneOperations.get
compute.zoneOperations.list
compute.zones.*
-
compute.zones.get
-
compute.zones.list
iam.serviceAccounts.actAs
iam.serviceAccounts.get
iam.serviceAccounts.list
logging.logEntries.create
logging.logEntries.route
monitoring.
monitoring.
monitoring.
monitoring.
-
monitoring.
monitoredResourceDescriptors. get -
monitoring.
monitoredResourceDescriptors. list
monitoring.timeSeries.create
networkconnectivity.
-
networkconnectivity.
internalRanges. create -
networkconnectivity.
internalRanges. delete -
networkconnectivity.
internalRanges. get -
networkconnectivity.
internalRanges. getIamPolicy -
networkconnectivity.
internalRanges. list -
networkconnectivity.
internalRanges. setIamPolicy -
networkconnectivity.
internalRanges. update
networkconnectivity.
-
networkconnectivity.
locations. get -
networkconnectivity.
locations. list
networkconnectivity.
-
networkconnectivity.
operations. cancel -
networkconnectivity.
operations. delete -
networkconnectivity.
operations. get -
networkconnectivity.
operations. list
networkconnectivity.
-
networkconnectivity.
policyBasedRoutes. create -
networkconnectivity.
policyBasedRoutes. delete -
networkconnectivity.
policyBasedRoutes. get -
networkconnectivity.
policyBasedRoutes. getIamPolicy -
networkconnectivity.
policyBasedRoutes. list -
networkconnectivity.
policyBasedRoutes. setIamPolicy
networkconnectivity.
-
networkconnectivity.
regionalEndpoints. create -
networkconnectivity.
regionalEndpoints. delete -
networkconnectivity.
regionalEndpoints. get -
networkconnectivity.
regionalEndpoints. list
networkconnectivity.
-
networkconnectivity.
serviceClasses. create -
networkconnectivity.
serviceClasses. delete -
networkconnectivity.
serviceClasses. get -
networkconnectivity.
serviceClasses. list -
networkconnectivity.
serviceClasses. update -
networkconnectivity.
serviceClasses. use
networkconnectivity.
-
networkconnectivity.
serviceConnectionMaps. create -
networkconnectivity.
serviceConnectionMaps. delete -
networkconnectivity.
serviceConnectionMaps. get -
networkconnectivity.
serviceConnectionMaps. list -
networkconnectivity.
serviceConnectionMaps. update
networkconnectivity.
-
networkconnectivity.
serviceConnectionPolicies. create -
networkconnectivity.
serviceConnectionPolicies. delete -
networkconnectivity.
serviceConnectionPolicies. get -
networkconnectivity.
serviceConnectionPolicies. list -
networkconnectivity.
serviceConnectionPolicies. update
networkmanagement.
networkmanagement.
networksecurity.
-
networksecurity.
addressGroups. create -
networksecurity.
addressGroups. delete -
networksecurity.
addressGroups. get -
networksecurity.
addressGroups. getIamPolicy -
networksecurity.
addressGroups. list -
networksecurity.
addressGroups. setIamPolicy -
networksecurity.
addressGroups. update -
networksecurity.
addressGroups. use
networksecurity.
-
networksecurity.
authorizationPolicies. create -
networksecurity.
authorizationPolicies. delete -
networksecurity.
authorizationPolicies. get -
networksecurity.
authorizationPolicies. getIamPolicy -
networksecurity.
authorizationPolicies. list -
networksecurity.
authorizationPolicies. setIamPolicy -
networksecurity.
authorizationPolicies. update -
networksecurity.
authorizationPolicies. use
networksecurity.
-
networksecurity.
authzPolicies. create -
networksecurity.
authzPolicies. delete -
networksecurity.
authzPolicies. get -
networksecurity.
authzPolicies. getIamPolicy -
networksecurity.
authzPolicies. list -
networksecurity.
authzPolicies. setIamPolicy -
networksecurity.
authzPolicies. update
networksecurity.
-
networksecurity.
backendAuthenticationConfigs. create -
networksecurity.
backendAuthenticationConfigs. delete -
networksecurity.
backendAuthenticationConfigs. get -
networksecurity.
backendAuthenticationConfigs. list -
networksecurity.
backendAuthenticationConfigs. update -
networksecurity.
backendAuthenticationConfigs. use
networksecurity.
-
networksecurity.
clientTlsPolicies. create -
networksecurity.
clientTlsPolicies. delete -
networksecurity.
clientTlsPolicies. get -
networksecurity.
clientTlsPolicies. getIamPolicy -
networksecurity.
clientTlsPolicies. list -
networksecurity.
clientTlsPolicies. setIamPolicy -
networksecurity.
clientTlsPolicies. update -
networksecurity.
clientTlsPolicies. use
networksecurity.
-
networksecurity.
firewallEndpointAssociations. create -
networksecurity.
firewallEndpointAssociations. delete -
networksecurity.
firewallEndpointAssociations. get -
networksecurity.
firewallEndpointAssociations. list -
networksecurity.
firewallEndpointAssociations. update
networksecurity.
-
networksecurity.
firewallEndpoints. create -
networksecurity.
firewallEndpoints. delete -
networksecurity.
firewallEndpoints. get -
networksecurity.
firewallEndpoints. list -
networksecurity.
firewallEndpoints. update -
networksecurity.
firewallEndpoints. use
networksecurity.
-
networksecurity.
gatewaySecurityPolicies. create -
networksecurity.
gatewaySecurityPolicies. delete -
networksecurity.
gatewaySecurityPolicies. get -
networksecurity.
gatewaySecurityPolicies. list -
networksecurity.
gatewaySecurityPolicies. update -
networksecurity.
gatewaySecurityPolicies. use
networksecurity.
-
networksecurity.
gatewaySecurityPolicyRules. create -
networksecurity.
gatewaySecurityPolicyRules. delete -
networksecurity.
gatewaySecurityPolicyRules. get -
networksecurity.
gatewaySecurityPolicyRules. list -
networksecurity.
gatewaySecurityPolicyRules. update -
networksecurity.
gatewaySecurityPolicyRules. use
networksecurity.locations.*
-
networksecurity.locations.get
-
networksecurity.locations.list
networksecurity.operations.*
-
networksecurity.
operations. cancel -
networksecurity.
operations. delete -
networksecurity.operations.get
-
networksecurity.
operations. list
networksecurity.
-
networksecurity.
sacAttachments. create -
networksecurity.
sacAttachments. delete -
networksecurity.
sacAttachments. get -
networksecurity.
sacAttachments. list
networksecurity.sacRealms.*
-
networksecurity.
sacRealms. create -
networksecurity.
sacRealms. delete -
networksecurity.sacRealms.get
-
networksecurity.sacRealms.list
networksecurity.
-
networksecurity.
securityProfileGroups. create -
networksecurity.
securityProfileGroups. delete -
networksecurity.
securityProfileGroups. get -
networksecurity.
securityProfileGroups. list -
networksecurity.
securityProfileGroups. update -
networksecurity.
securityProfileGroups. use
networksecurity.
-
networksecurity.
securityProfiles. create -
networksecurity.
securityProfiles. delete -
networksecurity.
securityProfiles. get -
networksecurity.
securityProfiles. list -
networksecurity.
securityProfiles. update -
networksecurity.
securityProfiles. use
networksecurity.
-
networksecurity.
serverTlsPolicies. create -
networksecurity.
serverTlsPolicies. delete -
networksecurity.
serverTlsPolicies. get -
networksecurity.
serverTlsPolicies. getIamPolicy -
networksecurity.
serverTlsPolicies. list -
networksecurity.
serverTlsPolicies. setIamPolicy -
networksecurity.
serverTlsPolicies. update -
networksecurity.
serverTlsPolicies. use
networksecurity.
-
networksecurity.
tlsInspectionPolicies. create -
networksecurity.
tlsInspectionPolicies. delete -
networksecurity.
tlsInspectionPolicies. get -
networksecurity.
tlsInspectionPolicies. list -
networksecurity.
tlsInspectionPolicies. update -
networksecurity.
tlsInspectionPolicies. use
networksecurity.urlLists.*
-
networksecurity.
urlLists. create -
networksecurity.
urlLists. delete -
networksecurity.urlLists.get
-
networksecurity.urlLists.list
-
networksecurity.
urlLists. update -
networksecurity.urlLists.use
networkservices.*
-
networkservices.
authzExtensions. create -
networkservices.
authzExtensions. delete -
networkservices.
authzExtensions. get -
networkservices.
authzExtensions. list -
networkservices.
authzExtensions. update -
networkservices.
authzExtensions. use -
networkservices.
endpointPolicies. create -
networkservices.
endpointPolicies. delete -
networkservices.
endpointPolicies. get -
networkservices.
endpointPolicies. list -
networkservices.
endpointPolicies. update -
networkservices.
gateways. create -
networkservices.
gateways. delete -
networkservices.gateways.get
-
networkservices.gateways.list
-
networkservices.
gateways. update -
networkservices.gateways.use
-
networkservices.
grpcRoutes. create -
networkservices.
grpcRoutes. delete -
networkservices.grpcRoutes.get
-
networkservices.
grpcRoutes. list -
networkservices.
grpcRoutes. update -
networkservices.
httpFilters. create -
networkservices.
httpFilters. delete -
networkservices.
httpFilters. get -
networkservices.
httpFilters. list -
networkservices.
httpFilters. update -
networkservices.
httpRoutes. create -
networkservices.
httpRoutes. delete -
networkservices.httpRoutes.get
-
networkservices.
httpRoutes. list -
networkservices.
httpRoutes. update -
networkservices.
httpfilters. create -
networkservices.
httpfilters. delete -
networkservices.
httpfilters. get -
networkservices.
httpfilters. getIamPolicy -
networkservices.
httpfilters. list -
networkservices.
httpfilters. setIamPolicy -
networkservices.
httpfilters. update -
networkservices.
httpfilters. use -
networkservices.
lbEdgeExtensions. create -
networkservices.
lbEdgeExtensions. delete -
networkservices.
lbEdgeExtensions. get -
networkservices.
lbEdgeExtensions. list -
networkservices.
lbEdgeExtensions. update -
networkservices.
lbRouteExtensions. create -
networkservices.
lbRouteExtensions. delete -
networkservices.
lbRouteExtensions. get -
networkservices.
lbRouteExtensions. list -
networkservices.
lbRouteExtensions. update -
networkservices.
lbTrafficExtensions. create -
networkservices.
lbTrafficExtensions. delete -
networkservices.
lbTrafficExtensions. get -
networkservices.
lbTrafficExtensions. list -
networkservices.
lbTrafficExtensions. update -
networkservices.locations.get
-
networkservices.locations.list
-
networkservices.meshes.create
-
networkservices.meshes.delete
-
networkservices.meshes.get
-
networkservices.meshes.list
-
networkservices.meshes.update
-
networkservices.meshes.use
-
networkservices.
operations. cancel -
networkservices.
operations. delete -
networkservices.operations.get
-
networkservices.
operations. list -
networkservices.
route_views. get -
networkservices.
route_views. list -
networkservices.
serviceBindings. create -
networkservices.
serviceBindings. delete -
networkservices.
serviceBindings. get -
networkservices.
serviceBindings. list -
networkservices.
serviceBindings. update -
networkservices.
serviceLbPolicies. create -
networkservices.
serviceLbPolicies. delete -
networkservices.
serviceLbPolicies. get -
networkservices.
serviceLbPolicies. list -
networkservices.
serviceLbPolicies. update -
networkservices.
tcpRoutes. create -
networkservices.
tcpRoutes. delete -
networkservices.tcpRoutes.get
-
networkservices.tcpRoutes.list
-
networkservices.
tcpRoutes. update -
networkservices.
tlsRoutes. create -
networkservices.
tlsRoutes. delete -
networkservices.tlsRoutes.get
-
networkservices.tlsRoutes.list
-
networkservices.
tlsRoutes. update -
networkservices.
wasmPlugins. create -
networkservices.
wasmPlugins. delete -
networkservices.
wasmPlugins. get -
networkservices.
wasmPlugins. list -
networkservices.
wasmPlugins. update -
networkservices.
wasmPlugins. use
pubsub.*
-
pubsub.
messageTransforms. validate -
pubsub.schemas.attach
-
pubsub.schemas.commit
-
pubsub.schemas.create
-
pubsub.schemas.delete
-
pubsub.schemas.get
-
pubsub.schemas.getIamPolicy
-
pubsub.schemas.list
-
pubsub.schemas.listRevisions
-
pubsub.schemas.rollback
-
pubsub.schemas.setIamPolicy
-
pubsub.schemas.validate
-
pubsub.snapshots.create
-
pubsub.snapshots.delete
-
pubsub.snapshots.get
-
pubsub.snapshots.getIamPolicy
-
pubsub.snapshots.list
-
pubsub.snapshots.seek
-
pubsub.snapshots.setIamPolicy
-
pubsub.snapshots.update
-
pubsub.subscriptions.consume
-
pubsub.subscriptions.create
-
pubsub.subscriptions.delete
-
pubsub.subscriptions.get
-
pubsub.
subscriptions. getIamPolicy -
pubsub.subscriptions.list
-
pubsub.
subscriptions. setIamPolicy -
pubsub.subscriptions.update
-
pubsub.
topics. attachSubscription -
pubsub.topics.create
-
pubsub.topics.delete
-
pubsub.
topics. detachSubscription -
pubsub.topics.get
-
pubsub.topics.getIamPolicy
-
pubsub.topics.list
-
pubsub.topics.publish
-
pubsub.topics.setIamPolicy
-
pubsub.topics.update
-
pubsub.topics.updateTag
resourcemanager.projects.get
resourcemanager.projects.list
servicedirectory.
servicedirectory.
servicedirectory.
servicedirectory.
servicenetworking.
servicenetworking.
servicenetworking.
servicenetworking.
servicenetworking.
servicenetworking.
servicenetworking.
servicenetworking.services.get
servicenetworking.
serviceusage.quotas.get
serviceusage.services.get
serviceusage.services.list
trafficdirector.*
-
trafficdirector.
networks. getConfigs -
trafficdirector.
networks. reportMetrics
TPU Admin
( roles/
)
Full access to TPU nodes and related resources.
resourcemanager.projects.get
resourcemanager.projects.list
tpu.*
-
tpu.acceleratortypes.get
-
tpu.acceleratortypes.list
-
tpu.locations.get
-
tpu.locations.list
-
tpu.nodes.create
-
tpu.nodes.delete
-
tpu.nodes.get
-
tpu.nodes.list
-
tpu.nodes.performMaintenance
-
tpu.nodes.reimage
-
tpu.nodes.reset
-
tpu.
nodes. simulateMaintenanceEvent -
tpu.nodes.start
-
tpu.nodes.stop
-
tpu.nodes.update
-
tpu.operations.get
-
tpu.operations.list
-
tpu.runtimeversions.get
-
tpu.runtimeversions.list
-
tpu.tensorflowversions.get
-
tpu.tensorflowversions.list
Cloud TPU API Service Agent
( roles/
)
Give Cloud TPUs service account access to managed resources
compute.globalOperations.get
compute.networks.addPeering
compute.networks.get
compute.networks.removePeering
compute.networks.update
compute.routes.get
compute.routes.list
compute.subnetworks.get
compute.subnetworks.list
compute.zones.*
-
compute.zones.get
-
compute.zones.list
monitoring.
monitoring.
monitoring.
monitoring.
-
monitoring.
monitoredResourceDescriptors. get -
monitoring.
monitoredResourceDescriptors. list
monitoring.timeSeries.create
resourcemanager.projects.get
resourcemanager.projects.list
TPU Viewer
( roles/
)
Read-only access to TPU nodes and related resources.
resourcemanager.projects.get
resourcemanager.projects.list
tpu.acceleratortypes.*
-
tpu.acceleratortypes.get
-
tpu.acceleratortypes.list
tpu.locations.*
-
tpu.locations.get
-
tpu.locations.list
tpu.nodes.get
tpu.nodes.list
tpu.operations.*
-
tpu.operations.get
-
tpu.operations.list
tpu.runtimeversions.*
-
tpu.runtimeversions.get
-
tpu.runtimeversions.list
tpu.tensorflowversions.*
-
tpu.tensorflowversions.get
-
tpu.tensorflowversions.list
TPU Shared VPC Agent
( roles/
)
Can use shared VPC network (XPN) for the TPU VMs.
compute.
compute.
compute.addresses.get
compute.addresses.list
compute.addresses.use
compute.addresses.useInternal
compute.firewalls.create
compute.firewalls.delete
compute.firewalls.get
compute.firewalls.update
compute.globalOperations.get
compute.networks.get
compute.networks.list
compute.networks.updatePolicy
compute.networks.use
compute.networks.useExternalIp
compute.routes.list
compute.subnetworks.get
compute.subnetworks.list
compute.subnetworks.use
compute.
compute.zoneOperations.get
Cloud TPU permissions
tpu.acceleratortypes.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
TPU Admin
( roles/
)
TPU Viewer
( roles/
)
tpu.acceleratortypes.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
TPU Admin
( roles/
)
TPU Viewer
( roles/
)
tpu.locations.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
TPU Admin
( roles/
)
TPU Viewer
( roles/
)
Service agent roles
- Kubernetes Engine Service Agent
(
roles/
)container.serviceAgent
tpu.locations.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
TPU Admin
( roles/
)
TPU Viewer
( roles/
)
Service agent roles
- Kubernetes Engine Service Agent
(
roles/
)container.serviceAgent
tpu.nodes.create
Owner
( roles/
)
Editor
( roles/
)
TPU Admin
( roles/
)
Service agent roles
- Kubernetes Engine Service Agent
(
roles/
)container.serviceAgent
tpu.nodes.delete
Owner
( roles/
)
Editor
( roles/
)
TPU Admin
( roles/
)
Service agent roles
- Kubernetes Engine Service Agent
(
roles/
)container.serviceAgent
tpu.nodes.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
TPU Admin
( roles/
)
TPU Viewer
( roles/
)
Service agent roles
- Kubernetes Engine Service Agent
(
roles/
)container.serviceAgent
tpu.nodes.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
TPU Admin
( roles/
)
TPU Viewer
( roles/
)
Service agent roles
- Kubernetes Engine Service Agent
(
roles/
)container.serviceAgent
tpu.nodes.performMaintenance
tpu.
nodes.
simulateMaintenanceEvent
tpu.operations.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
TPU Admin
( roles/
)
TPU Viewer
( roles/
)
Service agent roles
- Kubernetes Engine Service Agent
(
roles/
)container.serviceAgent
tpu.operations.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
TPU Admin
( roles/
)
TPU Viewer
( roles/
)
Service agent roles
- Kubernetes Engine Service Agent
(
roles/
)container.serviceAgent
tpu.runtimeversions.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
TPU Admin
( roles/
)
TPU Viewer
( roles/
)
tpu.runtimeversions.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
TPU Admin
( roles/
)
TPU Viewer
( roles/
)
tpu.tensorflowversions.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
TPU Admin
( roles/
)
TPU Viewer
( roles/
)
tpu.tensorflowversions.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
TPU Admin
( roles/
)
TPU Viewer
( roles/
)