Agent Registry roles and permissions

This page lists the IAM roles and permissions for Agent Registry. To search through all roles and permissions, see the role and permission index.

Agent Registry roles

Role	Permissions
Agent Registry API Admin ^Beta (roles/agentregistry.admin) Full access to Agent Registry API resources.	agentregistry.* agentregistry.agents.get agentregistry.agents.list agentregistry.agents.search agentregistry.bindings.create agentregistry.bindings.delete agentregistry.bindings.fetchAvailable agentregistry.bindings.get agentregistry.bindings.list agentregistry.bindings.update agentregistry.endpoints.get agentregistry.endpoints.list agentregistry.locations.get agentregistry.locations.list agentregistry.mcpServers.get agentregistry.mcpServers.list agentregistry.mcpServers.search agentregistry.operations.cancel agentregistry.operations.delete agentregistry.operations.get agentregistry.operations.list agentregistry.publishers.get agentregistry.publishers.list agentregistry.services.create agentregistry.services.delete agentregistry.services.get agentregistry.services.list agentregistry.services.update agentregistry.skillRevisions.create agentregistry.skillRevisions.delete agentregistry.skillRevisions.get agentregistry.skillRevisions.list agentregistry.skills.create agentregistry.skills.delete agentregistry.skills.get agentregistry.skills.list agentregistry.skills.search agentregistry.skills.update
Agent Registry API Editor ^Beta (roles/agentregistry.editor) Edit access to Agent Registry API resources.	agentregistry.agents.* agentregistry.agents.get agentregistry.agents.list agentregistry.agents.search agentregistry.bindings.fetchAvailable agentregistry.bindings.get agentregistry.bindings.list agentregistry.endpoints.* agentregistry.endpoints.get agentregistry.endpoints.list agentregistry.locations.* agentregistry.locations.get agentregistry.locations.list agentregistry.mcpServers.* agentregistry.mcpServers.get agentregistry.mcpServers.list agentregistry.mcpServers.search agentregistry.operations.* agentregistry.operations.cancel agentregistry.operations.delete agentregistry.operations.get agentregistry.operations.list agentregistry.publishers.* agentregistry.publishers.get agentregistry.publishers.list agentregistry.services.* agentregistry.services.create agentregistry.services.delete agentregistry.services.get agentregistry.services.list agentregistry.services.update agentregistry.skillRevisions.* agentregistry.skillRevisions.create agentregistry.skillRevisions.delete agentregistry.skillRevisions.get agentregistry.skillRevisions.list agentregistry.skills.* agentregistry.skills.create agentregistry.skills.delete agentregistry.skills.get agentregistry.skills.list agentregistry.skills.search agentregistry.skills.update
Agent Registry API Viewer ^Beta (roles/agentregistry.viewer) Readonly access to Agent Registry API resources.	agentregistry.agents.* agentregistry.agents.get agentregistry.agents.list agentregistry.agents.search agentregistry.bindings.fetchAvailable agentregistry.bindings.get agentregistry.bindings.list agentregistry.endpoints.* agentregistry.endpoints.get agentregistry.endpoints.list agentregistry.locations.* agentregistry.locations.get agentregistry.locations.list agentregistry.mcpServers.* agentregistry.mcpServers.get agentregistry.mcpServers.list agentregistry.mcpServers.search agentregistry.operations.get agentregistry.operations.list agentregistry.publishers.* agentregistry.publishers.get agentregistry.publishers.list agentregistry.services.get agentregistry.services.list agentregistry.skillRevisions.get agentregistry.skillRevisions.list agentregistry.skills.get agentregistry.skills.list agentregistry.skills.search
Agent Registry User ^Beta (roles/agentregistry.user) Create, update, and delete skills and skill revisions.	agentregistry.agents.* agentregistry.agents.get agentregistry.agents.list agentregistry.agents.search agentregistry.bindings.fetchAvailable agentregistry.bindings.get agentregistry.bindings.list agentregistry.endpoints.* agentregistry.endpoints.get agentregistry.endpoints.list agentregistry.locations.* agentregistry.locations.get agentregistry.locations.list agentregistry.mcpServers.* agentregistry.mcpServers.get agentregistry.mcpServers.list agentregistry.mcpServers.search agentregistry.operations.get agentregistry.operations.list agentregistry.publishers.* agentregistry.publishers.get agentregistry.publishers.list agentregistry.services.get agentregistry.services.list agentregistry.skillRevisions.* agentregistry.skillRevisions.create agentregistry.skillRevisions.delete agentregistry.skillRevisions.get agentregistry.skillRevisions.list agentregistry.skills.* agentregistry.skills.create agentregistry.skills.delete agentregistry.skills.get agentregistry.skills.list agentregistry.skills.search agentregistry.skills.update

Agent Registry permissions

Permission	Included in roles
agentregistry.agents.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry API Viewer (roles/agentregistry.viewer) Agent Registry User (roles/agentregistry.user) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
agentregistry.agents.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry API Viewer (roles/agentregistry.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Agent Registry User (roles/agentregistry.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
agentregistry.agents.search	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry API Viewer (roles/agentregistry.viewer) Agent Registry User (roles/agentregistry.user) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
agentregistry.bindings.create	Owner (roles/owner) Editor (roles/editor) Agent Registry API Admin (roles/agentregistry.admin)
agentregistry.bindings.delete	Owner (roles/owner) Editor (roles/editor) Agent Registry API Admin (roles/agentregistry.admin)
agentregistry.bindings.fetchAvailable	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry API Viewer (roles/agentregistry.viewer) Agent Registry User (roles/agentregistry.user) Support User (roles/iam.supportUser)
agentregistry.bindings.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry API Viewer (roles/agentregistry.viewer) Agent Registry User (roles/agentregistry.user) Support User (roles/iam.supportUser)
agentregistry.bindings.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry API Viewer (roles/agentregistry.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Agent Registry User (roles/agentregistry.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
agentregistry.bindings.update	Owner (roles/owner) Editor (roles/editor) Agent Registry API Admin (roles/agentregistry.admin)
agentregistry.endpoints.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry API Viewer (roles/agentregistry.viewer) Agent Registry User (roles/agentregistry.user) Support User (roles/iam.supportUser)
agentregistry.endpoints.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry API Viewer (roles/agentregistry.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Agent Registry User (roles/agentregistry.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
agentregistry.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry API Viewer (roles/agentregistry.viewer) Agent Registry User (roles/agentregistry.user) Support User (roles/iam.supportUser)
agentregistry.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry API Viewer (roles/agentregistry.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Agent Registry User (roles/agentregistry.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
agentregistry.mcpServers.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry API Viewer (roles/agentregistry.viewer) Agent Registry User (roles/agentregistry.user) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
agentregistry.mcpServers.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry API Viewer (roles/agentregistry.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Agent Registry User (roles/agentregistry.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
agentregistry.mcpServers.search	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry API Viewer (roles/agentregistry.viewer) Agent Registry User (roles/agentregistry.user) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
agentregistry.operations.cancel	Owner (roles/owner) Editor (roles/editor) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (roles/aiplatform.serviceAgent)
agentregistry.operations.delete	Owner (roles/owner) Editor (roles/editor) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (roles/aiplatform.serviceAgent)
agentregistry.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry API Viewer (roles/agentregistry.viewer) Agent Registry User (roles/agentregistry.user) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (roles/aiplatform.serviceAgent)
agentregistry.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry API Viewer (roles/agentregistry.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Agent Registry User (roles/agentregistry.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (roles/aiplatform.serviceAgent)
agentregistry.publishers.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry API Viewer (roles/agentregistry.viewer) Agent Registry User (roles/agentregistry.user) Support User (roles/iam.supportUser)
agentregistry.publishers.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry API Viewer (roles/agentregistry.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Agent Registry User (roles/agentregistry.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
agentregistry.services.create	Owner (roles/owner) Editor (roles/editor) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor)
agentregistry.services.delete	Owner (roles/owner) Editor (roles/editor) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor)
agentregistry.services.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry API Viewer (roles/agentregistry.viewer) Agent Registry User (roles/agentregistry.user) Support User (roles/iam.supportUser)
agentregistry.services.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry API Viewer (roles/agentregistry.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Agent Registry User (roles/agentregistry.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
agentregistry.services.update	Owner (roles/owner) Editor (roles/editor) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor)
agentregistry.skillRevisions.create	Owner (roles/owner) Editor (roles/editor) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry User (roles/agentregistry.user)
agentregistry.skillRevisions.delete	Owner (roles/owner) Editor (roles/editor) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry User (roles/agentregistry.user)
agentregistry.skillRevisions.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry API Viewer (roles/agentregistry.viewer) Agent Registry User (roles/agentregistry.user) Support User (roles/iam.supportUser)
agentregistry.skillRevisions.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry API Viewer (roles/agentregistry.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Agent Registry User (roles/agentregistry.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
agentregistry.skills.create	Owner (roles/owner) Editor (roles/editor) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry User (roles/agentregistry.user) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (roles/aiplatform.serviceAgent)
agentregistry.skills.delete	Owner (roles/owner) Editor (roles/editor) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry User (roles/agentregistry.user) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (roles/aiplatform.serviceAgent)
agentregistry.skills.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry API Viewer (roles/agentregistry.viewer) Agent Registry User (roles/agentregistry.user) Support User (roles/iam.supportUser)
agentregistry.skills.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry API Viewer (roles/agentregistry.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Agent Registry User (roles/agentregistry.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
agentregistry.skills.search	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry API Viewer (roles/agentregistry.viewer) Agent Registry User (roles/agentregistry.user) Support User (roles/iam.supportUser)
agentregistry.skills.update	Owner (roles/owner) Editor (roles/editor) Agent Registry API Admin (roles/agentregistry.admin) Agent Registry API Editor (roles/agentregistry.editor) Agent Registry User (roles/agentregistry.user)