Application Design Center roles and permissions

This page lists the IAM roles and permissions for Application Design Center. To search through all roles and permissions, see the role and permission index.

Application Design Center roles

Role	Permissions
Application Design Center Admin (roles/designcenter.admin) Full access to Application Design Center resources.	apphub.applications.create apphub.applications.delete apphub.applications.get apphub.applications.list apphub.applications.update apphub.boundaries.attach apphub.boundaries.update apphub.locations.* apphub.locations.get apphub.locations.list apphub.serviceProjectAttachments.list auditmanager.auditReports.get auditmanager.auditReports.list auditmanager.auditSchedules.get auditmanager.auditSchedules.list auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controlReports.get auditmanager.controlReports.list auditmanager.controls.list auditmanager.findings.list auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.operations.get auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.* auditmanager.resourceEnrollmentStatuses.get auditmanager.resourceEnrollmentStatuses.list cloudbuild.builds.get cloudbuild.builds.list cloudsecuritycompliance.auditReports.get cloudsecuritycompliance.auditReports.list cloudsecuritycompliance.billingSettings.get cloudsecuritycompliance.cloudControlDeployments.get cloudsecuritycompliance.cloudControlDeployments.list cloudsecuritycompliance.cloudControlPredictions.get cloudsecuritycompliance.cloudControlPredictions.list cloudsecuritycompliance.cloudControls.get cloudsecuritycompliance.cloudControls.list cloudsecuritycompliance.cmEnrollments.get cloudsecuritycompliance.controlComplianceSummaries.list cloudsecuritycompliance.controlReports.get cloudsecuritycompliance.controls.* cloudsecuritycompliance.controls.get cloudsecuritycompliance.controls.list cloudsecuritycompliance.findingSummaries.list cloudsecuritycompliance.findings.list cloudsecuritycompliance.frameworkAudits.get cloudsecuritycompliance.frameworkAudits.list cloudsecuritycompliance.frameworkComplianceReports.* cloudsecuritycompliance.frameworkComplianceReports.aggregate cloudsecuritycompliance.frameworkComplianceReports.get cloudsecuritycompliance.frameworkComplianceSummaries.list cloudsecuritycompliance.frameworkDeployments.get cloudsecuritycompliance.frameworkDeployments.list cloudsecuritycompliance.frameworks.get cloudsecuritycompliance.frameworks.list cloudsecuritycompliance.locations.get cloudsecuritycompliance.locations.list cloudsecuritycompliance.operations.get cloudsecuritycompliance.operations.list cloudsecuritycompliance.resourceEnrollmentStatuses.* cloudsecuritycompliance.resourceEnrollmentStatuses.get cloudsecuritycompliance.resourceEnrollmentStatuses.list config.automigrationconfig.get config.deploymentgrouprevisions.* config.deploymentgrouprevisions.get config.deploymentgrouprevisions.list config.deploymentgroups.get config.deploymentgroups.list config.deploymentgroups.listEffectiveTags config.deploymentgroups.listTagBindings config.deployments.get config.deployments.getIamPolicy config.deployments.list config.deployments.listEffectiveTags config.deployments.listTagBindings config.locations.* config.locations.get config.locations.list config.operations.get config.operations.list config.previews.export config.previews.get config.previews.list config.previews.listEffectiveTags config.previews.listTagBindings config.resources.* config.resources.get config.resources.list config.revisions.get config.revisions.list config.terraformversions.* config.terraformversions.get config.terraformversions.list container.clusters.list designcenter.* designcenter.applicationTemplateRevisions.delete designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.create designcenter.applicationTemplates.delete designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applicationTemplates.update designcenter.applications.create designcenter.applications.delete designcenter.applications.get designcenter.applications.list designcenter.applications.update designcenter.catalogTemplateRevisions.create designcenter.catalogTemplateRevisions.delete designcenter.catalogTemplateRevisions.get designcenter.catalogTemplateRevisions.list designcenter.catalogTemplates.create designcenter.catalogTemplates.delete designcenter.catalogTemplates.get designcenter.catalogTemplates.list designcenter.catalogTemplates.update designcenter.catalogs.create designcenter.catalogs.delete designcenter.catalogs.get designcenter.catalogs.list designcenter.catalogs.update designcenter.components.create designcenter.components.delete designcenter.components.get designcenter.components.list designcenter.components.update designcenter.connections.create designcenter.connections.delete designcenter.connections.get designcenter.connections.list designcenter.connections.update designcenter.locations.get designcenter.locations.list designcenter.operations.cancel designcenter.operations.delete designcenter.operations.get designcenter.operations.list designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.create designcenter.shares.delete designcenter.shares.get designcenter.shares.list designcenter.spaces.create designcenter.spaces.delete designcenter.spaces.get designcenter.spaces.getIamPolicy designcenter.spaces.list designcenter.spaces.setIamPolicy designcenter.spaces.update developerconnect.connections.constructGitHubAppManifest developerconnect.connections.create developerconnect.connections.delete developerconnect.connections.fetchGitHubInstallations developerconnect.connections.fetchLinkableGitRepositories developerconnect.connections.generateGitHubStateToken developerconnect.connections.get developerconnect.connections.list developerconnect.connections.processGitHubAppCreationCallback developerconnect.connections.processGitHubOAuthCallback developerconnect.connections.update developerconnect.gitRepositoryLinks.create developerconnect.gitRepositoryLinks.delete developerconnect.gitRepositoryLinks.fetchGitRefs developerconnect.gitRepositoryLinks.get developerconnect.gitRepositoryLinks.gitProxyRead developerconnect.gitRepositoryLinks.gitProxyWrite developerconnect.gitRepositoryLinks.list developerconnect.locations.* developerconnect.locations.get developerconnect.locations.list developerconnect.operations.* developerconnect.operations.cancel developerconnect.operations.delete developerconnect.operations.get developerconnect.operations.list monitoring.timeSeries.create orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.list storage.folders.* storage.folders.create storage.folders.delete storage.folders.get storage.folders.list storage.folders.rename storage.managedFolders.create storage.managedFolders.delete storage.managedFolders.get storage.managedFolders.list storage.managedFolders.update storage.multipartUploads.* storage.multipartUploads.abort storage.multipartUploads.create storage.multipartUploads.list storage.multipartUploads.listParts storage.objects.create storage.objects.createContext storage.objects.delete storage.objects.deleteContext storage.objects.get storage.objects.list storage.objects.move storage.objects.restore storage.objects.update storage.objects.updateContext
Designcenter Editor (roles/designcenter.editor) Editor role for designcenter	auditmanager.auditReports.get auditmanager.auditReports.list auditmanager.auditSchedules.get auditmanager.auditSchedules.list auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controlReports.get auditmanager.controlReports.list auditmanager.controls.list auditmanager.findings.list auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.operations.get auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.* auditmanager.resourceEnrollmentStatuses.get auditmanager.resourceEnrollmentStatuses.list cloudsecuritycompliance.auditReports.get cloudsecuritycompliance.auditReports.list cloudsecuritycompliance.billingSettings.get cloudsecuritycompliance.cloudControlDeployments.get cloudsecuritycompliance.cloudControlDeployments.list cloudsecuritycompliance.cloudControlPredictions.get cloudsecuritycompliance.cloudControlPredictions.list cloudsecuritycompliance.cloudControls.get cloudsecuritycompliance.cloudControls.list cloudsecuritycompliance.cmEnrollments.get cloudsecuritycompliance.controlComplianceSummaries.list cloudsecuritycompliance.controlReports.get cloudsecuritycompliance.controls.* cloudsecuritycompliance.controls.get cloudsecuritycompliance.controls.list cloudsecuritycompliance.findingSummaries.list cloudsecuritycompliance.findings.list cloudsecuritycompliance.frameworkAudits.get cloudsecuritycompliance.frameworkAudits.list cloudsecuritycompliance.frameworkComplianceReports.* cloudsecuritycompliance.frameworkComplianceReports.aggregate cloudsecuritycompliance.frameworkComplianceReports.get cloudsecuritycompliance.frameworkComplianceSummaries.list cloudsecuritycompliance.frameworkDeployments.get cloudsecuritycompliance.frameworkDeployments.list cloudsecuritycompliance.frameworks.get cloudsecuritycompliance.frameworks.list cloudsecuritycompliance.locations.get cloudsecuritycompliance.locations.list cloudsecuritycompliance.operations.get cloudsecuritycompliance.operations.list cloudsecuritycompliance.resourceEnrollmentStatuses.* cloudsecuritycompliance.resourceEnrollmentStatuses.get cloudsecuritycompliance.resourceEnrollmentStatuses.list container.clusters.list designcenter.applicationTemplateRevisions.* designcenter.applicationTemplateRevisions.delete designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.* designcenter.applicationTemplates.create designcenter.applicationTemplates.delete designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applicationTemplates.update designcenter.applications.* designcenter.applications.create designcenter.applications.delete designcenter.applications.get designcenter.applications.list designcenter.applications.update designcenter.catalogTemplateRevisions.* designcenter.catalogTemplateRevisions.create designcenter.catalogTemplateRevisions.delete designcenter.catalogTemplateRevisions.get designcenter.catalogTemplateRevisions.list designcenter.catalogTemplates.* designcenter.catalogTemplates.create designcenter.catalogTemplates.delete designcenter.catalogTemplates.get designcenter.catalogTemplates.list designcenter.catalogTemplates.update designcenter.catalogs.* designcenter.catalogs.create designcenter.catalogs.delete designcenter.catalogs.get designcenter.catalogs.list designcenter.catalogs.update designcenter.components.* designcenter.components.create designcenter.components.delete designcenter.components.get designcenter.components.list designcenter.components.update designcenter.connections.* designcenter.connections.create designcenter.connections.delete designcenter.connections.get designcenter.connections.list designcenter.connections.update designcenter.locations.* designcenter.locations.get designcenter.locations.list designcenter.operations.* designcenter.operations.cancel designcenter.operations.delete designcenter.operations.get designcenter.operations.list designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.* designcenter.shares.create designcenter.shares.delete designcenter.shares.get designcenter.shares.list designcenter.spaces.create designcenter.spaces.delete designcenter.spaces.get designcenter.spaces.getIamPolicy designcenter.spaces.list designcenter.spaces.update resourcemanager.projects.get resourcemanager.projects.list storage.folders.get storage.folders.list storage.managedFolders.get storage.managedFolders.list storage.objects.get storage.objects.list
Application Design Center Viewer (roles/designcenter.viewer) Readonly access to Application Design Center resources.	auditmanager.auditReports.get auditmanager.auditReports.list auditmanager.auditSchedules.get auditmanager.auditSchedules.list auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controlReports.get auditmanager.controlReports.list auditmanager.controls.list auditmanager.findings.list auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.operations.get auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.* auditmanager.resourceEnrollmentStatuses.get auditmanager.resourceEnrollmentStatuses.list cloudsecuritycompliance.auditReports.get cloudsecuritycompliance.auditReports.list cloudsecuritycompliance.billingSettings.get cloudsecuritycompliance.cloudControlDeployments.get cloudsecuritycompliance.cloudControlDeployments.list cloudsecuritycompliance.cloudControlPredictions.get cloudsecuritycompliance.cloudControlPredictions.list cloudsecuritycompliance.cloudControls.get cloudsecuritycompliance.cloudControls.list cloudsecuritycompliance.cmEnrollments.get cloudsecuritycompliance.controlComplianceSummaries.list cloudsecuritycompliance.controlReports.get cloudsecuritycompliance.controls.* cloudsecuritycompliance.controls.get cloudsecuritycompliance.controls.list cloudsecuritycompliance.findingSummaries.list cloudsecuritycompliance.findings.list cloudsecuritycompliance.frameworkAudits.get cloudsecuritycompliance.frameworkAudits.list cloudsecuritycompliance.frameworkComplianceReports.* cloudsecuritycompliance.frameworkComplianceReports.aggregate cloudsecuritycompliance.frameworkComplianceReports.get cloudsecuritycompliance.frameworkComplianceSummaries.list cloudsecuritycompliance.frameworkDeployments.get cloudsecuritycompliance.frameworkDeployments.list cloudsecuritycompliance.frameworks.get cloudsecuritycompliance.frameworks.list cloudsecuritycompliance.locations.get cloudsecuritycompliance.locations.list cloudsecuritycompliance.operations.get cloudsecuritycompliance.operations.list cloudsecuritycompliance.resourceEnrollmentStatuses.* cloudsecuritycompliance.resourceEnrollmentStatuses.get cloudsecuritycompliance.resourceEnrollmentStatuses.list container.clusters.list designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applications.get designcenter.applications.list designcenter.catalogTemplateRevisions.get designcenter.catalogTemplateRevisions.list designcenter.catalogTemplates.get designcenter.catalogTemplates.list designcenter.catalogs.get designcenter.catalogs.list designcenter.components.get designcenter.components.list designcenter.connections.get designcenter.connections.list designcenter.locations.* designcenter.locations.get designcenter.locations.list designcenter.operations.get designcenter.operations.list designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.get designcenter.shares.list designcenter.spaces.get designcenter.spaces.getIamPolicy designcenter.spaces.list resourcemanager.projects.get resourcemanager.projects.list storage.folders.get storage.folders.list storage.managedFolders.get storage.managedFolders.list storage.objects.get storage.objects.list
Application Admin (roles/designcenter.applicationAdmin) Admin access to Application.	apphub.applications.create apphub.applications.delete apphub.applications.get apphub.applications.list apphub.applications.update apphub.locations.* apphub.locations.get apphub.locations.list apphub.serviceProjectAttachments.list auditmanager.auditReports.get auditmanager.auditReports.list auditmanager.auditSchedules.get auditmanager.auditSchedules.list auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controlReports.get auditmanager.controlReports.list auditmanager.controls.list auditmanager.findings.list auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.operations.get auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.* auditmanager.resourceEnrollmentStatuses.get auditmanager.resourceEnrollmentStatuses.list cloudbuild.builds.get cloudbuild.builds.list cloudsecuritycompliance.auditReports.get cloudsecuritycompliance.auditReports.list cloudsecuritycompliance.billingSettings.get cloudsecuritycompliance.cloudControlDeployments.get cloudsecuritycompliance.cloudControlDeployments.list cloudsecuritycompliance.cloudControlPredictions.get cloudsecuritycompliance.cloudControlPredictions.list cloudsecuritycompliance.cloudControls.get cloudsecuritycompliance.cloudControls.list cloudsecuritycompliance.cmEnrollments.get cloudsecuritycompliance.controlComplianceSummaries.list cloudsecuritycompliance.controlReports.get cloudsecuritycompliance.controls.* cloudsecuritycompliance.controls.get cloudsecuritycompliance.controls.list cloudsecuritycompliance.findingSummaries.list cloudsecuritycompliance.findings.list cloudsecuritycompliance.frameworkAudits.get cloudsecuritycompliance.frameworkAudits.list cloudsecuritycompliance.frameworkComplianceReports.* cloudsecuritycompliance.frameworkComplianceReports.aggregate cloudsecuritycompliance.frameworkComplianceReports.get cloudsecuritycompliance.frameworkComplianceSummaries.list cloudsecuritycompliance.frameworkDeployments.get cloudsecuritycompliance.frameworkDeployments.list cloudsecuritycompliance.frameworks.get cloudsecuritycompliance.frameworks.list cloudsecuritycompliance.locations.get cloudsecuritycompliance.locations.list cloudsecuritycompliance.operations.get cloudsecuritycompliance.operations.list cloudsecuritycompliance.resourceEnrollmentStatuses.* cloudsecuritycompliance.resourceEnrollmentStatuses.get cloudsecuritycompliance.resourceEnrollmentStatuses.list config.automigrationconfig.get config.deploymentgrouprevisions.* config.deploymentgrouprevisions.get config.deploymentgrouprevisions.list config.deploymentgroups.get config.deploymentgroups.list config.deploymentgroups.listEffectiveTags config.deploymentgroups.listTagBindings config.deployments.get config.deployments.getIamPolicy config.deployments.list config.deployments.listEffectiveTags config.deployments.listTagBindings config.locations.* config.locations.get config.locations.list config.operations.get config.operations.list config.previews.export config.previews.get config.previews.list config.previews.listEffectiveTags config.previews.listTagBindings config.resources.* config.resources.get config.resources.list config.revisions.get config.revisions.list config.terraformversions.* config.terraformversions.get config.terraformversions.list container.clusters.list designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applications.* designcenter.applications.create designcenter.applications.delete designcenter.applications.get designcenter.applications.list designcenter.applications.update designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.get designcenter.shares.list designcenter.spaces.get designcenter.spaces.list developerconnect.connections.constructGitHubAppManifest developerconnect.connections.create developerconnect.connections.delete developerconnect.connections.fetchGitHubInstallations developerconnect.connections.fetchLinkableGitRepositories developerconnect.connections.generateGitHubStateToken developerconnect.connections.get developerconnect.connections.list developerconnect.connections.processGitHubAppCreationCallback developerconnect.connections.processGitHubOAuthCallback developerconnect.connections.update developerconnect.gitRepositoryLinks.create developerconnect.gitRepositoryLinks.delete developerconnect.gitRepositoryLinks.fetchGitRefs developerconnect.gitRepositoryLinks.get developerconnect.gitRepositoryLinks.gitProxyRead developerconnect.gitRepositoryLinks.gitProxyWrite developerconnect.gitRepositoryLinks.list developerconnect.locations.* developerconnect.locations.get developerconnect.locations.list developerconnect.operations.* developerconnect.operations.cancel developerconnect.operations.delete developerconnect.operations.get developerconnect.operations.list resourcemanager.projects.get resourcemanager.projects.list
Application Editor (roles/designcenter.applicationEditor) Read and Write access to Application.	apphub.applications.create apphub.applications.delete apphub.applications.get apphub.applications.list apphub.applications.update apphub.locations.* apphub.locations.get apphub.locations.list apphub.serviceProjectAttachments.list auditmanager.auditReports.get auditmanager.auditReports.list auditmanager.auditSchedules.get auditmanager.auditSchedules.list auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controlReports.get auditmanager.controlReports.list auditmanager.controls.list auditmanager.findings.list auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.operations.get auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.* auditmanager.resourceEnrollmentStatuses.get auditmanager.resourceEnrollmentStatuses.list cloudbuild.builds.get cloudbuild.builds.list cloudsecuritycompliance.auditReports.get cloudsecuritycompliance.auditReports.list cloudsecuritycompliance.billingSettings.get cloudsecuritycompliance.cloudControlDeployments.get cloudsecuritycompliance.cloudControlDeployments.list cloudsecuritycompliance.cloudControlPredictions.get cloudsecuritycompliance.cloudControlPredictions.list cloudsecuritycompliance.cloudControls.get cloudsecuritycompliance.cloudControls.list cloudsecuritycompliance.cmEnrollments.get cloudsecuritycompliance.controlComplianceSummaries.list cloudsecuritycompliance.controlReports.get cloudsecuritycompliance.controls.* cloudsecuritycompliance.controls.get cloudsecuritycompliance.controls.list cloudsecuritycompliance.findingSummaries.list cloudsecuritycompliance.findings.list cloudsecuritycompliance.frameworkAudits.get cloudsecuritycompliance.frameworkAudits.list cloudsecuritycompliance.frameworkComplianceReports.* cloudsecuritycompliance.frameworkComplianceReports.aggregate cloudsecuritycompliance.frameworkComplianceReports.get cloudsecuritycompliance.frameworkComplianceSummaries.list cloudsecuritycompliance.frameworkDeployments.get cloudsecuritycompliance.frameworkDeployments.list cloudsecuritycompliance.frameworks.get cloudsecuritycompliance.frameworks.list cloudsecuritycompliance.locations.get cloudsecuritycompliance.locations.list cloudsecuritycompliance.operations.get cloudsecuritycompliance.operations.list cloudsecuritycompliance.resourceEnrollmentStatuses.* cloudsecuritycompliance.resourceEnrollmentStatuses.get cloudsecuritycompliance.resourceEnrollmentStatuses.list config.automigrationconfig.get config.deploymentgrouprevisions.* config.deploymentgrouprevisions.get config.deploymentgrouprevisions.list config.deploymentgroups.get config.deploymentgroups.list config.deploymentgroups.listEffectiveTags config.deploymentgroups.listTagBindings config.deployments.get config.deployments.getIamPolicy config.deployments.list config.deployments.listEffectiveTags config.deployments.listTagBindings config.locations.* config.locations.get config.locations.list config.operations.get config.operations.list config.previews.export config.previews.get config.previews.list config.previews.listEffectiveTags config.previews.listTagBindings config.resources.* config.resources.get config.resources.list config.revisions.get config.revisions.list config.terraformversions.* config.terraformversions.get config.terraformversions.list container.clusters.list designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applications.* designcenter.applications.create designcenter.applications.delete designcenter.applications.get designcenter.applications.list designcenter.applications.update designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.get designcenter.shares.list designcenter.spaces.get designcenter.spaces.list resourcemanager.projects.get resourcemanager.projects.list
Application Viewer (roles/designcenter.applicationViewer) Readonly access to Application.	apphub.applications.get apphub.applications.list apphub.locations.* apphub.locations.get apphub.locations.list auditmanager.auditReports.get auditmanager.auditReports.list auditmanager.auditSchedules.get auditmanager.auditSchedules.list auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controlReports.get auditmanager.controlReports.list auditmanager.controls.list auditmanager.findings.list auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.operations.get auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.* auditmanager.resourceEnrollmentStatuses.get auditmanager.resourceEnrollmentStatuses.list cloudsecuritycompliance.auditReports.get cloudsecuritycompliance.auditReports.list cloudsecuritycompliance.billingSettings.get cloudsecuritycompliance.cloudControlDeployments.get cloudsecuritycompliance.cloudControlDeployments.list cloudsecuritycompliance.cloudControlPredictions.get cloudsecuritycompliance.cloudControlPredictions.list cloudsecuritycompliance.cloudControls.get cloudsecuritycompliance.cloudControls.list cloudsecuritycompliance.cmEnrollments.get cloudsecuritycompliance.controlComplianceSummaries.list cloudsecuritycompliance.controlReports.get cloudsecuritycompliance.controls.* cloudsecuritycompliance.controls.get cloudsecuritycompliance.controls.list cloudsecuritycompliance.findingSummaries.list cloudsecuritycompliance.findings.list cloudsecuritycompliance.frameworkAudits.get cloudsecuritycompliance.frameworkAudits.list cloudsecuritycompliance.frameworkComplianceReports.* cloudsecuritycompliance.frameworkComplianceReports.aggregate cloudsecuritycompliance.frameworkComplianceReports.get cloudsecuritycompliance.frameworkComplianceSummaries.list cloudsecuritycompliance.frameworkDeployments.get cloudsecuritycompliance.frameworkDeployments.list cloudsecuritycompliance.frameworks.get cloudsecuritycompliance.frameworks.list cloudsecuritycompliance.locations.get cloudsecuritycompliance.locations.list cloudsecuritycompliance.operations.get cloudsecuritycompliance.operations.list cloudsecuritycompliance.resourceEnrollmentStatuses.* cloudsecuritycompliance.resourceEnrollmentStatuses.get cloudsecuritycompliance.resourceEnrollmentStatuses.list config.automigrationconfig.get config.deploymentgrouprevisions.* config.deploymentgrouprevisions.get config.deploymentgrouprevisions.list config.deploymentgroups.get config.deploymentgroups.list config.deploymentgroups.listEffectiveTags config.deploymentgroups.listTagBindings config.deployments.get config.deployments.getIamPolicy config.deployments.list config.deployments.listEffectiveTags config.deployments.listTagBindings config.locations.* config.locations.get config.locations.list config.operations.get config.operations.list config.previews.get config.previews.list config.previews.listEffectiveTags config.previews.listTagBindings config.resources.* config.resources.get config.resources.list config.revisions.get config.revisions.list config.terraformversions.* config.terraformversions.get config.terraformversions.list container.clusters.list designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applications.get designcenter.applications.list designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.get designcenter.shares.list designcenter.spaces.get designcenter.spaces.list resourcemanager.projects.get resourcemanager.projects.list
Application Design Center User (roles/designcenter.user) Readonly access to Application Design Center resources.	apphub.serviceProjectAttachments.list auditmanager.auditReports.get auditmanager.auditReports.list auditmanager.auditSchedules.get auditmanager.auditSchedules.list auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controlReports.get auditmanager.controlReports.list auditmanager.controls.list auditmanager.findings.list auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.operations.get auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.* auditmanager.resourceEnrollmentStatuses.get auditmanager.resourceEnrollmentStatuses.list cloudsecuritycompliance.auditReports.get cloudsecuritycompliance.auditReports.list cloudsecuritycompliance.billingSettings.get cloudsecuritycompliance.cloudControlDeployments.get cloudsecuritycompliance.cloudControlDeployments.list cloudsecuritycompliance.cloudControlPredictions.get cloudsecuritycompliance.cloudControlPredictions.list cloudsecuritycompliance.cloudControls.get cloudsecuritycompliance.cloudControls.list cloudsecuritycompliance.cmEnrollments.get cloudsecuritycompliance.controlComplianceSummaries.list cloudsecuritycompliance.controlReports.get cloudsecuritycompliance.controls.* cloudsecuritycompliance.controls.get cloudsecuritycompliance.controls.list cloudsecuritycompliance.findingSummaries.list cloudsecuritycompliance.findings.list cloudsecuritycompliance.frameworkAudits.get cloudsecuritycompliance.frameworkAudits.list cloudsecuritycompliance.frameworkComplianceReports.* cloudsecuritycompliance.frameworkComplianceReports.aggregate cloudsecuritycompliance.frameworkComplianceReports.get cloudsecuritycompliance.frameworkComplianceSummaries.list cloudsecuritycompliance.frameworkDeployments.get cloudsecuritycompliance.frameworkDeployments.list cloudsecuritycompliance.frameworks.get cloudsecuritycompliance.frameworks.list cloudsecuritycompliance.locations.get cloudsecuritycompliance.locations.list cloudsecuritycompliance.operations.get cloudsecuritycompliance.operations.list cloudsecuritycompliance.resourceEnrollmentStatuses.* cloudsecuritycompliance.resourceEnrollmentStatuses.get cloudsecuritycompliance.resourceEnrollmentStatuses.list container.clusters.list designcenter.applicationTemplateRevisions.* designcenter.applicationTemplateRevisions.delete designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.* designcenter.applicationTemplates.create designcenter.applicationTemplates.delete designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applicationTemplates.update designcenter.applications.get designcenter.applications.list designcenter.catalogTemplateRevisions.get designcenter.catalogTemplateRevisions.list designcenter.catalogTemplates.get designcenter.catalogTemplates.list designcenter.catalogs.get designcenter.catalogs.list designcenter.components.* designcenter.components.create designcenter.components.delete designcenter.components.get designcenter.components.list designcenter.components.update designcenter.connections.* designcenter.connections.create designcenter.connections.delete designcenter.connections.get designcenter.connections.list designcenter.connections.update designcenter.locations.* designcenter.locations.get designcenter.locations.list designcenter.operations.get designcenter.operations.list designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.get designcenter.shares.list designcenter.spaces.get designcenter.spaces.getIamPolicy designcenter.spaces.list monitoring.timeSeries.create orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.list storage.folders.* storage.folders.create storage.folders.delete storage.folders.get storage.folders.list storage.folders.rename storage.managedFolders.create storage.managedFolders.delete storage.managedFolders.get storage.managedFolders.list storage.managedFolders.update storage.multipartUploads.* storage.multipartUploads.abort storage.multipartUploads.create storage.multipartUploads.list storage.multipartUploads.listParts storage.objects.create storage.objects.createContext storage.objects.delete storage.objects.deleteContext storage.objects.get storage.objects.list storage.objects.move storage.objects.restore storage.objects.update storage.objects.updateContext

Service agent roles

Service agent roles should only be granted to service agents.

Role

Permissions

DesignCenter Service Agent (roles/designcenter.serviceAgent) Gives the DesignCenter API Service Account access to necessary GCP resources. Warning: Do not grant service agent roles to any principals except service agents.

apphub.applications.create apphub.applications.delete apphub.applications.get apphub.applications.list apphub.applications.update apphub.boundaries.attach apphub.boundaries.update apphub.discoveredServices.* apphub.discoveredServices.get apphub.discoveredServices.list apphub.discoveredServices.register apphub.discoveredWorkloads.* apphub.discoveredWorkloads.get apphub.discoveredWorkloads.list apphub.discoveredWorkloads.register apphub.operations.get apphub.operations.list apphub.serviceProjectAttachments.get apphub.serviceProjectAttachments.list apphub.serviceProjectAttachments.lookup apphub.services.create apphub.workloads.create cloudbuild.builds.create cloudbuild.builds.get cloudbuild.builds.list config.deploymentgrouprevisions.* config.deploymentgrouprevisions.get config.deploymentgrouprevisions.list config.deploymentgroups.create config.deploymentgroups.delete config.deploymentgroups.deprovision config.deploymentgroups.get config.deploymentgroups.list config.deploymentgroups.provision config.deploymentgroups.update config.deployments.create config.deployments.delete config.deployments.get config.deployments.getState config.deployments.list config.deployments.lock config.deployments.unlock config.deployments.update config.locations.* config.locations.get config.locations.list config.operations.* config.operations.cancel config.operations.delete config.operations.get config.operations.list config.previews.create config.previews.delete config.previews.export config.previews.get config.previews.list config.resources.* config.resources.get config.resources.list config.revisions.* config.revisions.get config.revisions.getState config.revisions.list config.terraformversions.* config.terraformversions.get config.terraformversions.list developerconnect.gitRepositoryLinks.get developerconnect.gitRepositoryLinks.gitProxyRead developerconnect.gitRepositoryLinks.gitProxyWrite remotebuildexecution.blobs.get resourcemanager.projects.get storage.buckets.create storage.buckets.delete storage.buckets.get storage.buckets.list storage.buckets.update storage.managedFolders.create storage.managedFolders.delete storage.managedFolders.get storage.managedFolders.getIamPolicy storage.managedFolders.list storage.objects.create storage.objects.delete storage.objects.get storage.objects.list storage.objects.update

Application Design Center permissions

Permission	Included in roles
designcenter.applicationTemplateRevisions.delete	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Admin (roles/admin) Application Design Center User (roles/designcenter.user) Writer (roles/writer)
designcenter.applicationTemplateRevisions.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Admin (roles/designcenter.applicationAdmin) Application Editor (roles/designcenter.applicationEditor) Application Viewer (roles/designcenter.applicationViewer) Application Design Center User (roles/designcenter.user) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (roles/saasservicemgmt.serviceAgent)
designcenter.applicationTemplateRevisions.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Admin (roles/designcenter.applicationAdmin) Application Editor (roles/designcenter.applicationEditor) Application Viewer (roles/designcenter.applicationViewer) Application Design Center User (roles/designcenter.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
designcenter.applicationTemplates.create	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Admin (roles/admin) Application Design Center User (roles/designcenter.user) Writer (roles/writer)
designcenter.applicationTemplates.delete	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Admin (roles/admin) Application Design Center User (roles/designcenter.user) Writer (roles/writer)
designcenter.applicationTemplates.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Admin (roles/designcenter.applicationAdmin) Application Editor (roles/designcenter.applicationEditor) Application Viewer (roles/designcenter.applicationViewer) Application Design Center User (roles/designcenter.user) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (roles/saasservicemgmt.serviceAgent)
designcenter.applicationTemplates.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Admin (roles/designcenter.applicationAdmin) Application Editor (roles/designcenter.applicationEditor) Application Viewer (roles/designcenter.applicationViewer) Application Design Center User (roles/designcenter.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
designcenter.applicationTemplates.update	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Admin (roles/admin) Application Design Center User (roles/designcenter.user) Writer (roles/writer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (roles/saasservicemgmt.serviceAgent)
designcenter.applications.create	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Admin (roles/admin) Application Admin (roles/designcenter.applicationAdmin) Application Editor (roles/designcenter.applicationEditor) Writer (roles/writer)
designcenter.applications.delete	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Admin (roles/admin) Application Admin (roles/designcenter.applicationAdmin) Application Editor (roles/designcenter.applicationEditor) Writer (roles/writer)
designcenter.applications.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Admin (roles/designcenter.applicationAdmin) Application Editor (roles/designcenter.applicationEditor) Application Viewer (roles/designcenter.applicationViewer) Application Design Center User (roles/designcenter.user) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
designcenter.applications.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Admin (roles/designcenter.applicationAdmin) Application Editor (roles/designcenter.applicationEditor) Application Viewer (roles/designcenter.applicationViewer) Application Design Center User (roles/designcenter.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
designcenter.applications.update	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Admin (roles/admin) Application Admin (roles/designcenter.applicationAdmin) Application Editor (roles/designcenter.applicationEditor) Writer (roles/writer)
designcenter.catalogTemplateRevisions.create	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Admin (roles/admin) Writer (roles/writer)
designcenter.catalogTemplateRevisions.delete	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Admin (roles/admin) Writer (roles/writer)
designcenter.catalogTemplateRevisions.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Design Center User (roles/designcenter.user) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
designcenter.catalogTemplateRevisions.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Design Center User (roles/designcenter.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
designcenter.catalogTemplates.create	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Admin (roles/admin) Writer (roles/writer)
designcenter.catalogTemplates.delete	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Admin (roles/admin) Writer (roles/writer)
designcenter.catalogTemplates.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Design Center User (roles/designcenter.user) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
designcenter.catalogTemplates.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Design Center User (roles/designcenter.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
designcenter.catalogTemplates.update	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Admin (roles/admin) Writer (roles/writer)
designcenter.catalogs.create	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Admin (roles/admin) Writer (roles/writer)
designcenter.catalogs.delete	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Admin (roles/admin) Writer (roles/writer)
designcenter.catalogs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Design Center User (roles/designcenter.user) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
designcenter.catalogs.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Design Center User (roles/designcenter.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
designcenter.catalogs.update	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Admin (roles/admin) Writer (roles/writer)
designcenter.components.create	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Admin (roles/admin) Application Design Center User (roles/designcenter.user) Writer (roles/writer)
designcenter.components.delete	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Admin (roles/admin) Application Design Center User (roles/designcenter.user) Writer (roles/writer)
designcenter.components.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Design Center User (roles/designcenter.user) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
designcenter.components.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Design Center User (roles/designcenter.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
designcenter.components.update	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Admin (roles/admin) Application Design Center User (roles/designcenter.user) Writer (roles/writer)
designcenter.connections.create	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Admin (roles/admin) Application Design Center User (roles/designcenter.user) Writer (roles/writer)
designcenter.connections.delete	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Admin (roles/admin) Application Design Center User (roles/designcenter.user) Writer (roles/writer)
designcenter.connections.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Design Center User (roles/designcenter.user) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
designcenter.connections.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Design Center User (roles/designcenter.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
designcenter.connections.update	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Admin (roles/admin) Application Design Center User (roles/designcenter.user) Writer (roles/writer)
designcenter.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Design Center User (roles/designcenter.user) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (roles/saasservicemgmt.serviceAgent)
designcenter.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Design Center User (roles/designcenter.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
designcenter.operations.cancel	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Admin (roles/admin) Writer (roles/writer)
designcenter.operations.delete	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Admin (roles/admin) Writer (roles/writer)
designcenter.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Design Center User (roles/designcenter.user) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (roles/saasservicemgmt.serviceAgent)
designcenter.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Design Center User (roles/designcenter.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
designcenter.sharedTemplateRevisions.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Admin (roles/designcenter.applicationAdmin) Application Editor (roles/designcenter.applicationEditor) Application Viewer (roles/designcenter.applicationViewer) Application Design Center User (roles/designcenter.user) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
designcenter.sharedTemplateRevisions.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Admin (roles/designcenter.applicationAdmin) Application Editor (roles/designcenter.applicationEditor) Application Viewer (roles/designcenter.applicationViewer) Application Design Center User (roles/designcenter.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
designcenter.sharedTemplates.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Admin (roles/designcenter.applicationAdmin) Application Editor (roles/designcenter.applicationEditor) Application Viewer (roles/designcenter.applicationViewer) Application Design Center User (roles/designcenter.user) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
designcenter.sharedTemplates.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Admin (roles/designcenter.applicationAdmin) Application Editor (roles/designcenter.applicationEditor) Application Viewer (roles/designcenter.applicationViewer) Application Design Center User (roles/designcenter.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
designcenter.shares.create	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Admin (roles/admin) Writer (roles/writer)
designcenter.shares.delete	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Admin (roles/admin) Writer (roles/writer)
designcenter.shares.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Admin (roles/designcenter.applicationAdmin) Application Editor (roles/designcenter.applicationEditor) Application Viewer (roles/designcenter.applicationViewer) Application Design Center User (roles/designcenter.user) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
designcenter.shares.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Admin (roles/designcenter.applicationAdmin) Application Editor (roles/designcenter.applicationEditor) Application Viewer (roles/designcenter.applicationViewer) Application Design Center User (roles/designcenter.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
designcenter.spaces.create	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Admin (roles/admin) Writer (roles/writer)
designcenter.spaces.delete	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Admin (roles/admin) Writer (roles/writer)
designcenter.spaces.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Admin (roles/designcenter.applicationAdmin) Application Editor (roles/designcenter.applicationEditor) Application Viewer (roles/designcenter.applicationViewer) Application Design Center User (roles/designcenter.user) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
designcenter.spaces.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Design Center User (roles/designcenter.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
designcenter.spaces.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Application Design Center Viewer (roles/designcenter.viewer) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Admin (roles/admin) App Management Viewer (roles/apphub.appManagementViewer) Cloud Hub Operator (roles/cloudhub.operator) Application Admin (roles/designcenter.applicationAdmin) Application Editor (roles/designcenter.applicationEditor) Application Viewer (roles/designcenter.applicationViewer) Application Design Center User (roles/designcenter.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
designcenter.spaces.setIamPolicy	Owner (roles/owner) Application Design Center Admin (roles/designcenter.admin) Security Admin (roles/iam.securityAdmin) Admin (roles/admin)
designcenter.spaces.update	Owner (roles/owner) Editor (roles/editor) Application Design Center Admin (roles/designcenter.admin) Designcenter Editor (roles/designcenter.editor) Admin (roles/admin) Writer (roles/writer)