Device Run roles and permissions

This page lists the IAM roles and permissions for Device Run. To search through all roles and permissions, see the role and permission index.

Device Run roles

Role	Permissions
Device Run Admin ^Beta (roles/devicerun.admin) Full access to Device Run resources.	cloudtestservice.environmentcatalog.get devicerun.* devicerun.devices.get devicerun.devices.list devicerun.locations.get devicerun.locations.list devicerun.operations.cancel devicerun.operations.delete devicerun.operations.get devicerun.operations.list devicerun.sessions.create devicerun.sessions.delete devicerun.sessions.get devicerun.sessions.list devicestreaming.* devicestreaming.deviceSessions.cancel devicestreaming.deviceSessions.create devicestreaming.deviceSessions.get devicestreaming.deviceSessions.list devicestreaming.deviceSessions.update resourcemanager.projects.get resourcemanager.projects.list
Device Run Viewer ^Beta (roles/devicerun.viewer) Readonly access to Device Run resources.	cloudtestservice.environmentcatalog.get devicerun.devices.* devicerun.devices.get devicerun.devices.list devicerun.locations.* devicerun.locations.get devicerun.locations.list devicerun.operations.get devicerun.operations.list devicerun.sessions.get devicerun.sessions.list devicestreaming.deviceSessions.get devicestreaming.deviceSessions.list resourcemanager.projects.get resourcemanager.projects.list

Service agent roles

Service agent roles should only be granted to service agents.

Role	Permissions
Device Run Service Agent (roles/devicerun.serviceAgent) Grants Device Run Service Agent permissions required to manage resources in the consumer project. Warning: Do not grant service agent roles to any principals except service agents.	pubsub.topics.publish storage.buckets.create storage.buckets.get storage.buckets.list storage.objects.create storage.objects.delete storage.objects.get

Device Run permissions

Permission	Included in roles
devicerun.devices.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Device Run Admin (roles/devicerun.admin) Device Run Viewer (roles/devicerun.viewer) Support User (roles/iam.supportUser)
devicerun.devices.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Device Run Admin (roles/devicerun.admin) Device Run Viewer (roles/devicerun.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
devicerun.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Device Run Admin (roles/devicerun.admin) Device Run Viewer (roles/devicerun.viewer) Support User (roles/iam.supportUser)
devicerun.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Device Run Admin (roles/devicerun.admin) Device Run Viewer (roles/devicerun.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
devicerun.operations.cancel	Owner (roles/owner) Editor (roles/editor) Device Run Admin (roles/devicerun.admin)
devicerun.operations.delete	Owner (roles/owner) Editor (roles/editor) Device Run Admin (roles/devicerun.admin)
devicerun.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Device Run Admin (roles/devicerun.admin) Device Run Viewer (roles/devicerun.viewer) Support User (roles/iam.supportUser)
devicerun.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Device Run Admin (roles/devicerun.admin) Device Run Viewer (roles/devicerun.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
devicerun.sessions.create	Owner (roles/owner) Editor (roles/editor) Device Run Admin (roles/devicerun.admin)
devicerun.sessions.delete	Owner (roles/owner) Editor (roles/editor) Device Run Admin (roles/devicerun.admin)
devicerun.sessions.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Device Run Admin (roles/devicerun.admin) Device Run Viewer (roles/devicerun.viewer) Support User (roles/iam.supportUser)
devicerun.sessions.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Device Run Admin (roles/devicerun.admin) Device Run Viewer (roles/devicerun.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)