Cloud API Registry roles and permissions

This page lists the IAM roles and permissions for Cloud API Registry. Tosearch through all roles and permissions, see therole andpermission index.

Cloud API Registry roles

RolePermissions

Cloud API Registry for Consumers AdminBeta

(roles/cloudapiregistry.admin)

Read/write access to Cloud API Registry for Consumers resources.

cloudapiregistry.*

  • cloudapiregistry.locations.get
  • cloudapiregistry.locations.list
  • cloudapiregistry.mcpServers.get
  • cloudapiregistry.mcpServers.list
  • cloudapiregistry.mcpTools.get
  • cloudapiregistry.mcpTools.list

serviceusage.effectivemcppolicy.get

Cloud API Registry for Consumers ViewerBeta

(roles/cloudapiregistry.viewer)

Readonly access to Cloud API Registry for Consumers resources.

cloudapiregistry.*

  • cloudapiregistry.locations.get
  • cloudapiregistry.locations.list
  • cloudapiregistry.mcpServers.get
  • cloudapiregistry.mcpServers.list
  • cloudapiregistry.mcpTools.get
  • cloudapiregistry.mcpTools.list

serviceusage.effectivemcppolicy.get

Cloud API Registry permissions

PermissionIncluded in roles

cloudapiregistry.locations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud API Registry for Consumers Admin (roles/cloudapiregistry.admin)

Cloud API Registry for Consumers Viewer (roles/cloudapiregistry.viewer)

Support User (roles/iam.supportUser)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

cloudapiregistry.locations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud API Registry for Consumers Admin (roles/cloudapiregistry.admin)

Cloud API Registry for Consumers Viewer (roles/cloudapiregistry.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

cloudapiregistry.mcpServers.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud API Registry for Consumers Admin (roles/cloudapiregistry.admin)

Cloud API Registry for Consumers Viewer (roles/cloudapiregistry.viewer)

Support User (roles/iam.supportUser)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

cloudapiregistry.mcpServers.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud API Registry for Consumers Admin (roles/cloudapiregistry.admin)

Cloud API Registry for Consumers Viewer (roles/cloudapiregistry.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

cloudapiregistry.mcpTools.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud API Registry for Consumers Admin (roles/cloudapiregistry.admin)

Cloud API Registry for Consumers Viewer (roles/cloudapiregistry.viewer)

Support User (roles/iam.supportUser)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

cloudapiregistry.mcpTools.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud API Registry for Consumers Admin (roles/cloudapiregistry.admin)

Cloud API Registry for Consumers Viewer (roles/cloudapiregistry.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-12-16 UTC.