Stay organized with collections Save and categorize content based on your preferences.
This page lists the IAM roles and permissions for Assured Workloads. To search through all roles and permissions, see the role and permission index.
Assured Workloads roles Role Permissions Assured Workloads Administrator(roles/assuredworkloads.admin)
Grants full access to Assured Workloads resources, CRM resources - project/folder and Organization Policy administration
assuredworkloads.*
assuredworkloads.operations.getassuredworkloads.operations.listassuredworkloads.updates.listassuredworkloads.updates.updateassuredworkloads.violations.getassuredworkloads.violations.listassuredworkloads.violations.updateassuredworkloads.workload.createassuredworkloads.workload.deleteassuredworkloads.workload.getassuredworkloads.workload.listassuredworkloads.workload.updateaxt.labels.set
bigquery.config.update
logging.settings.update
orgpolicy.policies.*
orgpolicy.policies.createorgpolicy.policies.deleteorgpolicy.policies.listorgpolicy.policies.updateorgpolicy.policy.*
orgpolicy.policy.getorgpolicy.policy.setresourcemanager.folders.create
resourcemanager.folders.get
resourcemanager.folders.list
resourcemanager.organizations.get
resourcemanager.projects.create
resourcemanager.projects.get
resourcemanager.projects.list
(roles/assuredworkloads.editor)
Grants read, write access to Assured Workloads resources, CRM resources - project/folder and Organization Policy administration
assuredworkloads.*
assuredworkloads.operations.getassuredworkloads.operations.listassuredworkloads.updates.listassuredworkloads.updates.updateassuredworkloads.violations.getassuredworkloads.violations.listassuredworkloads.violations.updateassuredworkloads.workload.createassuredworkloads.workload.deleteassuredworkloads.workload.getassuredworkloads.workload.listassuredworkloads.workload.updateaxt.labels.set
bigquery.config.update
logging.settings.update
orgpolicy.policies.*
orgpolicy.policies.createorgpolicy.policies.deleteorgpolicy.policies.listorgpolicy.policies.updateorgpolicy.policy.*
orgpolicy.policy.getorgpolicy.policy.setresourcemanager.folders.create
resourcemanager.folders.get
resourcemanager.folders.list
resourcemanager.organizations.get
resourcemanager.projects.create
resourcemanager.projects.get
resourcemanager.projects.list
(roles/assuredworkloads.monitoringServiceAgent)
Gives the Assured Workloads service account access to create CAIS feed and monitor Assured Workloads.
Warning: Do not grant service agent roles to any principals except service agents.cloudasset.assets.exportResource
cloudasset.assets.listResource
cloudasset.feeds.create
cloudasset.feeds.delete
cloudasset.feeds.get
(roles/assuredworkloads.reader)
Grants read access to all Assured Workloads resources and CRM resources - project/folder
assuredworkloads.operations.*
assuredworkloads.operations.getassuredworkloads.operations.listassuredworkloads.updates.list
assuredworkloads.violations.get
assuredworkloads.violations.list
assuredworkloads.workload.get
assuredworkloads.workload.list
orgpolicy.policies.list
orgpolicy.policy.get
resourcemanager.folders.get
resourcemanager.folders.list
resourcemanager.organizations.get
resourcemanager.projects.get
resourcemanager.projects.list
(roles/assuredworkloads.serviceAgent)
Gives the Assured Workloads service account access to create KMS keyrings and keys, monitor Assured Workloads and read Organization Policies.
Warning: Do not grant service agent roles to any principals except service agents.cloudkms.cryptoKeys.create
cloudkms.keyRings.create
orgpolicy.policies.list
orgpolicy.policy.get
serviceusage.services.enable
serviceusage.services.get
serviceusage.services.use
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-07-02 UTC.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-07-02 UTC."],[],[]]
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4