Stay organized with collections Save and categorize content based on your preferences.
This page lists the IAM roles and permissions for Workload Certificate. To search through all roles and permissions, see the role and permission index.
Workload Certificate roles Role Permissions Workload Certificate Admin Beta(roles/workloadcertificate.admin
)
Full access to all Workload Certificate API resources.
resourcemanager.projects.get
resourcemanager.projects.list
workloadcertificate.*
workloadcertificate.locations.get
workloadcertificate.locations.list
workloadcertificate.operations.cancel
workloadcertificate.operations.delete
workloadcertificate.operations.get
workloadcertificate.operations.list
workloadcertificate.workloadCertificateFeature.get
workloadcertificate.workloadCertificateFeature.update
workloadcertificate.workloadRegistrations.create
workloadcertificate.workloadRegistrations.delete
workloadcertificate.workloadRegistrations.get
workloadcertificate.workloadRegistrations.list
workloadcertificate.workloadRegistrations.update
(roles/workloadcertificate.registrationAdmin
)
Full access to WorkloadRegistration resources.
resourcemanager.projects.get
resourcemanager.projects.list
workloadcertificate.locations.*
workloadcertificate.locations.get
workloadcertificate.locations.list
workloadcertificate.operations.*
workloadcertificate.operations.cancel
workloadcertificate.operations.delete
workloadcertificate.operations.get
workloadcertificate.operations.list
workloadcertificate.workloadRegistrations.*
workloadcertificate.workloadRegistrations.create
workloadcertificate.workloadRegistrations.delete
workloadcertificate.workloadRegistrations.get
workloadcertificate.workloadRegistrations.list
workloadcertificate.workloadRegistrations.update
(roles/workloadcertificate.registrationViewer
)
Read-only access to WorkloadRegistration resources.
resourcemanager.projects.get
resourcemanager.projects.list
workloadcertificate.locations.*
workloadcertificate.locations.get
workloadcertificate.locations.list
workloadcertificate.operations.get
workloadcertificate.operations.list
workloadcertificate.workloadRegistrations.get
workloadcertificate.workloadRegistrations.list
(roles/workloadcertificate.serviceAgent
)
Gives the Workload Certificate service agent access to Cloud Platform resources.
Warning: Do not grant service agent roles to any principals except service agents.container.clusterRoleBindings.get
container.clusterRoleBindings.list
container.clusters.get
container.clusters.update
container.customResourceDefinitions.create
container.customResourceDefinitions.get
container.customResourceDefinitions.list
container.operations.get
container.thirdPartyObjects.update
gkehub.features.get
gkehub.fleet.create
gkehub.fleet.get
gkehub.locations.*
gkehub.locations.get
gkehub.locations.list
gkehub.memberships.get
gkehub.memberships.list
gkehub.operations.get
serviceconsumermanagement.tenancyu.addResource
serviceconsumermanagement.tenancyu.create
serviceconsumermanagement.tenancyu.delete
serviceconsumermanagement.tenancyu.removeResource
serviceusage.services.use
workloadcertificate.workloadCertificateFeature.get
workloadcertificate.workloadRegistrations.list
(roles/workloadcertificate.viewer
)
Read-only access to Workload Certificate all resources.
resourcemanager.projects.get
resourcemanager.projects.list
workloadcertificate.locations.*
workloadcertificate.locations.get
workloadcertificate.locations.list
workloadcertificate.operations.get
workloadcertificate.operations.list
workloadcertificate.workloadCertificateFeature.get
workloadcertificate.workloadRegistrations.get
workloadcertificate.workloadRegistrations.list
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-07-02 UTC.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-07-02 UTC."],[],[]]
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4