Policy Controller roles and permissions

This page lists the IAM roles and permissions for Policy Controller. To search through all roles and permissions, see the role and permission index.

Policy Controller roles

Policy Controller offers the following service agent roles. Service agent roles should only be granted to service agents.

Role	Permissions
Anthos Policy Controller Service Agent (roles/anthospolicycontroller.serviceAgent) Gives the Anthos Policy Controller service agent access toCloud Platform resources. Warning: Do not grant service agent roles to any principals except service agents.	gkehub.features.get gkehub.gateway.delete gkehub.gateway.generateCredentials gkehub.gateway.get gkehub.gateway.patch gkehub.gateway.post gkehub.gateway.put gkehub.locations.* gkehub.locations.get gkehub.locations.list gkehub.memberships.get gkehub.memberships.list

Policy Controller permissions

There are no IAM permissions for this service.