GKE Identity Service roles and permissions

This page lists the IAM roles and permissions for GKE Identity Service. To search through all roles and permissions, see the role and permission index.

GKE Identity Service roles

GKE Identity Service offers the following service agent roles. Service agent roles should only be granted to service agents.

Role	Permissions
Anthos Identity Service Agent (roles/anthosidentityservice.serviceAgent) Gives the Anthos Identity service agent access to Google Cloud resources. Warning: Do not grant service agent roles to any principals except service agents.	gkehub.features.get gkehub.gateway.delete gkehub.gateway.generateCredentials gkehub.gateway.get gkehub.gateway.patch gkehub.gateway.post gkehub.gateway.put gkehub.locations.* gkehub.locations.get gkehub.locations.list gkehub.memberships.get gkehub.memberships.list

GKE Identity Service permissions

There are no IAM permissions for this service.