Anthos Support roles and permissions

This page lists the IAM roles and permissions for Anthos Support. To search through all roles and permissions, see the role and permission index.

Anthos Support roles

Anthos Support offers the following service agent roles. Service agent roles should only be granted to service agents.

Role Permissions

(roles/anthossupport.serviceAgent)

Gives the Anthos Support Service Agent access to Cloud Platform resource.

gkehub.features.get

gkehub.features.getIamPolicy

gkehub.features.list

gkehub.fleet.get

gkehub.fleet.getFreeTrial

gkehub.gateway.generateCredentials

gkehub.gateway.get

gkehub.locations.*

  • gkehub.locations.get
  • gkehub.locations.list

gkehub.membershipbindings.get

gkehub.membershipbindings.list

gkehub.membershipfeatures.get

gkehub.membershipfeatures.list

gkehub.memberships.generateConnectManifest

gkehub.memberships.get

gkehub.memberships.getIamPolicy

gkehub.memberships.list

gkehub.namespaces.get

gkehub.namespaces.list

gkehub.operations.get

gkehub.operations.list

gkehub.rbacrolebindings.get

gkehub.rbacrolebindings.list

gkehub.scopes.get

gkehub.scopes.list

gkehub.scopes.listBoundMemberships

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

  • serviceusage.groups.list
  • serviceusage.groups.listExpandedMembers
  • serviceusage.groups.listMembers

serviceusage.services.get

serviceusage.values.test

Anthos Support permissions

There are no IAM permissions for this service.