Developer Connect roles and permissions

This page lists the IAM roles and permissions for Developer Connect. Tosearch through all roles and permissions, see therole andpermission index.

Developer Connect roles

Role Permissions

Role	Permissions
Developer Connect Admin^Beta (`roles/developerconnect.admin`) Full access to Developer Connect resources.	`developerconnect.connections.constructGitHubAppManifest` `developerconnect.connections.create` `developerconnect.connections.delete` `developerconnect.connections.fetchGitHubInstallations` `developerconnect.connections.fetchLinkableGitRepositories` `developerconnect.connections.generateGitHubStateToken` `developerconnect.connections.get` `developerconnect.connections.list` `developerconnect.connections.processGitHubAppCreationCallback` `developerconnect.connections.processGitHubOAuthCallback` `developerconnect.connections.update` `developerconnect.gitRepositoryLinks.create` `developerconnect.gitRepositoryLinks.delete` `developerconnect.gitRepositoryLinks.fetchGitRefs` `developerconnect.gitRepositoryLinks.get` `developerconnect.gitRepositoryLinks.gitProxyRead` `developerconnect.gitRepositoryLinks.gitProxyWrite` `developerconnect.gitRepositoryLinks.list` `developerconnect.locations.` `developerconnect.locations.get` `developerconnect.locations.list` `developerconnect.operations.` `developerconnect.operations.cancel` `developerconnect.operations.delete` `developerconnect.operations.get` `developerconnect.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Developer Connect HTTP Proxy Writer^Beta (`roles/developerconnect.connectionHttpProxyWriter`) Grants read and write access to connections through the HTTP Proxy.	`developerconnect.connections.httpProxyRead` `developerconnect.connections.httpProxyWrite`
Developer Connect Git Proxy Reader^Beta (`roles/developerconnect.gitProxyReader`) Grants read-only access to repositories through the Git Proxy.	`developerconnect.gitRepositoryLinks.gitProxyRead`
Developer Connect Git Proxy User^Beta (`roles/developerconnect.gitProxyUser`) Grants read and write access to repositories through the Git Proxy.	`developerconnect.gitRepositoryLinks.gitProxyRead` `developerconnect.gitRepositoryLinks.gitProxyWrite`
Developer Connect Insights Admin^Beta (`roles/developerconnect.insightsAdmin`) Admin access to Developer Connect Insights resources.	`developerconnect.insightsConfigs.` `developerconnect.insightsConfigs.create` `developerconnect.insightsConfigs.delete` `developerconnect.insightsConfigs.get` `developerconnect.insightsConfigs.list` `developerconnect.insightsConfigs.update` `developerconnect.locations.` `developerconnect.locations.get` `developerconnect.locations.list` `developerconnect.operations.get` `developerconnect.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Developer Connect Insights Config Agent^Beta (`roles/developerconnect.insightsAgent`) Allow Developer Connect to access SDLC information.	`cloudasset.assets.exportResource` `cloudasset.assets.listResource` `cloudasset.assets.searchAllResources` `cloudasset.feeds.create` `cloudasset.feeds.get` `cloudasset.feeds.update` `containeranalysis.occurrences.get` `containeranalysis.occurrences.list` `logging.logEntries.create`
Developer Connect Insights Viewer^Beta (`roles/developerconnect.insightsViewer`) Read-only access to Developer Connect Insights resources.	`developerconnect.insightsConfigs.get` `developerconnect.insightsConfigs.list` `developerconnect.locations.*` `developerconnect.locations.get` `developerconnect.locations.list` `developerconnect.operations.get` `developerconnect.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Developer Connect OAuth Admin^Beta (`roles/developerconnect.oauthAdmin`) Grants read and write access to AccountConnector resources.	`developerconnect.accountConnectors.` `developerconnect.accountConnectors.create` `developerconnect.accountConnectors.delete` `developerconnect.accountConnectors.get` `developerconnect.accountConnectors.list` `developerconnect.accountConnectors.update` `developerconnect.locations.` `developerconnect.locations.get` `developerconnect.locations.list` `developerconnect.operations.get` `developerconnect.operations.list` `developerconnect.providers.list` `developerconnect.users.*` `developerconnect.users.delete` `developerconnect.users.deleteSelf` `developerconnect.users.fetchAccessToken` `developerconnect.users.finishOAuth` `developerconnect.users.getSelf` `developerconnect.users.list` `developerconnect.users.startOAuth` `resourcemanager.projects.get` `resourcemanager.projects.list`
Developer Connect OAuth User^Beta (`roles/developerconnect.oauthUser`) Grants read and write access to User resources, and read access to AccountConnectors.	`developerconnect.accountConnectors.get` `developerconnect.accountConnectors.list` `developerconnect.locations.*` `developerconnect.locations.get` `developerconnect.locations.list` `developerconnect.operations.get` `developerconnect.operations.list` `developerconnect.users.deleteSelf` `developerconnect.users.fetchAccessToken` `developerconnect.users.finishOAuth` `developerconnect.users.getSelf` `developerconnect.users.startOAuth` `resourcemanager.projects.get` `resourcemanager.projects.list`
Developer Connect Read Token Accessor^Beta (`roles/developerconnect.readTokenAccessor`) Grants access to Read-Only tokens (both PAT and short-lived). Also grants access to view the git repository link.	`developerconnect.connections.get` `developerconnect.gitRepositoryLinks.fetchReadToken` `developerconnect.gitRepositoryLinks.get`
Developer Connect Service Agent (`roles/developerconnect.serviceAgent`) Gives the Developer Connect API Service Account access to necessary GCP resources. Warning: Do not grant service agent roles to any principals except service agents.	`apphub.applications.get` `apphub.services.get` `apphub.services.list` `apphub.workloads.get` `apphub.workloads.list`
Developer Connect Token Accessor^Beta (`roles/developerconnect.tokenAccessor`) Grants access to Read/Write and Read-Only tokens (both PAT and short-lived). Also grants access to view the git repository link.	`developerconnect.connections.get` `developerconnect.gitRepositoryLinks.fetchReadToken` `developerconnect.gitRepositoryLinks.fetchReadWriteToken` `developerconnect.gitRepositoryLinks.get`
Developer Connect User^Beta (`roles/developerconnect.user`) Grants access to view the connection and to the features that interact with the actual repository such as reading content from the repository	`developerconnect.connections.fetchGitHubInstallations` `developerconnect.connections.fetchLinkableGitRepositories` `developerconnect.connections.get` `developerconnect.connections.list` `developerconnect.gitRepositoryLinks.fetchGitRefs` `developerconnect.gitRepositoryLinks.get` `developerconnect.gitRepositoryLinks.list` `developerconnect.locations.*` `developerconnect.locations.get` `developerconnect.locations.list` `developerconnect.operations.get` `developerconnect.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Developer Connect Viewer^Beta (`roles/developerconnect.viewer`) Read-only access to Developer Connect resources.	`developerconnect.connections.get` `developerconnect.connections.list` `developerconnect.gitRepositoryLinks.get` `developerconnect.gitRepositoryLinks.list` `developerconnect.locations.*` `developerconnect.locations.get` `developerconnect.locations.list` `developerconnect.operations.get` `developerconnect.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`

Developer Connect Admin^Beta

(roles/developerconnect.admin)

Full access to Developer Connect resources.

developerconnect.connections.constructGitHubAppManifest

developerconnect.connections.create

developerconnect.connections.delete

developerconnect.connections.fetchGitHubInstallations

developerconnect.connections.fetchLinkableGitRepositories

developerconnect.connections.generateGitHubStateToken

developerconnect.connections.get

developerconnect.connections.list

developerconnect.connections.processGitHubAppCreationCallback

developerconnect.connections.processGitHubOAuthCallback

developerconnect.connections.update

developerconnect.gitRepositoryLinks.create

developerconnect.gitRepositoryLinks.delete

developerconnect.gitRepositoryLinks.fetchGitRefs

developerconnect.gitRepositoryLinks.get

developerconnect.gitRepositoryLinks.gitProxyRead

developerconnect.gitRepositoryLinks.gitProxyWrite

developerconnect.gitRepositoryLinks.list

developerconnect.locations.*

developerconnect.locations.get
developerconnect.locations.list

developerconnect.operations.*

developerconnect.operations.cancel
developerconnect.operations.delete
developerconnect.operations.get
developerconnect.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Developer Connect HTTP Proxy Writer^Beta

(roles/developerconnect.connectionHttpProxyWriter)

Grants read and write access to connections through the HTTP Proxy.

developerconnect.connections.httpProxyRead

developerconnect.connections.httpProxyWrite

Developer Connect Git Proxy Reader^Beta

(roles/developerconnect.gitProxyReader)

Grants read-only access to repositories through the Git Proxy.

developerconnect.gitRepositoryLinks.gitProxyRead

Developer Connect Git Proxy User^Beta

(roles/developerconnect.gitProxyUser)

Grants read and write access to repositories through the Git Proxy.

developerconnect.gitRepositoryLinks.gitProxyRead

developerconnect.gitRepositoryLinks.gitProxyWrite

Developer Connect Insights Admin^Beta

(roles/developerconnect.insightsAdmin)

Admin access to Developer Connect Insights resources.

developerconnect.insightsConfigs.*

developerconnect.insightsConfigs.create
developerconnect.insightsConfigs.delete
developerconnect.insightsConfigs.get
developerconnect.insightsConfigs.list
developerconnect.insightsConfigs.update

developerconnect.locations.*

developerconnect.locations.get
developerconnect.locations.list

developerconnect.operations.get

developerconnect.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Developer Connect Insights Config Agent^Beta

(roles/developerconnect.insightsAgent)

Allow Developer Connect to access SDLC information.

cloudasset.assets.exportResource

cloudasset.assets.listResource

cloudasset.assets.searchAllResources

cloudasset.feeds.create

cloudasset.feeds.get

cloudasset.feeds.update

containeranalysis.occurrences.get

containeranalysis.occurrences.list

logging.logEntries.create

Developer Connect Insights Viewer^Beta

(roles/developerconnect.insightsViewer)

Read-only access to Developer Connect Insights resources.

developerconnect.insightsConfigs.get

developerconnect.insightsConfigs.list

developerconnect.locations.*

developerconnect.locations.get
developerconnect.locations.list

developerconnect.operations.get

developerconnect.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Developer Connect OAuth Admin^Beta

(roles/developerconnect.oauthAdmin)

Grants read and write access to AccountConnector resources.

developerconnect.accountConnectors.*

developerconnect.accountConnectors.create
developerconnect.accountConnectors.delete
developerconnect.accountConnectors.get
developerconnect.accountConnectors.list
developerconnect.accountConnectors.update

developerconnect.locations.*

developerconnect.locations.get
developerconnect.locations.list

developerconnect.operations.get

developerconnect.operations.list

developerconnect.providers.list

developerconnect.users.*

developerconnect.users.delete
developerconnect.users.deleteSelf
developerconnect.users.fetchAccessToken
developerconnect.users.finishOAuth
developerconnect.users.getSelf
developerconnect.users.list
developerconnect.users.startOAuth

resourcemanager.projects.get

resourcemanager.projects.list

Developer Connect OAuth User^Beta

(roles/developerconnect.oauthUser)

Grants read and write access to User resources, and read access to AccountConnectors.

developerconnect.accountConnectors.get

developerconnect.accountConnectors.list

developerconnect.locations.*

developerconnect.locations.get
developerconnect.locations.list

developerconnect.operations.get

developerconnect.operations.list

developerconnect.users.deleteSelf

developerconnect.users.fetchAccessToken

developerconnect.users.finishOAuth

developerconnect.users.getSelf

developerconnect.users.startOAuth

resourcemanager.projects.get

resourcemanager.projects.list

Developer Connect Read Token Accessor^Beta

(roles/developerconnect.readTokenAccessor)

Grants access to Read-Only tokens (both PAT and short-lived). Also grants access to view the git repository link.

developerconnect.connections.get

developerconnect.gitRepositoryLinks.fetchReadToken

developerconnect.gitRepositoryLinks.get

Developer Connect Service Agent

(roles/developerconnect.serviceAgent)

Gives the Developer Connect API Service Account access to necessary GCP resources.

Warning: Do not grant service agent roles to any principals except service agents.

apphub.applications.get

apphub.services.get

apphub.services.list

apphub.workloads.get

apphub.workloads.list

Developer Connect Token Accessor^Beta

(roles/developerconnect.tokenAccessor)

Grants access to Read/Write and Read-Only tokens (both PAT and short-lived). Also grants access to view the git repository link.

developerconnect.connections.get

developerconnect.gitRepositoryLinks.fetchReadToken

developerconnect.gitRepositoryLinks.fetchReadWriteToken

developerconnect.gitRepositoryLinks.get

Developer Connect User^Beta

(roles/developerconnect.user)

Grants access to view the connection and to the features that interact with the actual repository such as reading content from the repository

developerconnect.connections.fetchGitHubInstallations

developerconnect.connections.fetchLinkableGitRepositories

developerconnect.connections.get

developerconnect.connections.list

developerconnect.gitRepositoryLinks.fetchGitRefs

developerconnect.gitRepositoryLinks.get

developerconnect.gitRepositoryLinks.list

developerconnect.locations.*

developerconnect.locations.get
developerconnect.locations.list

developerconnect.operations.get

developerconnect.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Developer Connect Viewer^Beta

(roles/developerconnect.viewer)

Read-only access to Developer Connect resources.

developerconnect.connections.get

developerconnect.connections.list

developerconnect.gitRepositoryLinks.get

developerconnect.gitRepositoryLinks.list

developerconnect.locations.*

developerconnect.locations.get
developerconnect.locations.list

developerconnect.operations.get

developerconnect.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Developer Connect permissions

Permission	Included in roles
`developerconnect.accountConnectors.create`	Owner (`roles/owner`) Editor (`roles/editor`) Gemini Code Assist Tools Admin (`roles/cloudaicompanion.codeToolsAdmin`) Developer Connect OAuth Admin (`roles/developerconnect.oauthAdmin`)
`developerconnect.accountConnectors.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Gemini Code Assist Tools Admin (`roles/cloudaicompanion.codeToolsAdmin`) Developer Connect OAuth Admin (`roles/developerconnect.oauthAdmin`)
`developerconnect.accountConnectors.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Gemini Code Assist Tools Admin (`roles/cloudaicompanion.codeToolsAdmin`) Gemini Code Assist Tools User (`roles/cloudaicompanion.codeToolsUser`) Developer Connect OAuth Admin (`roles/developerconnect.oauthAdmin`) Developer Connect OAuth User (`roles/developerconnect.oauthUser`) Support User (`roles/iam.supportUser`)
`developerconnect.accountConnectors.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Gemini Code Assist Tools Admin (`roles/cloudaicompanion.codeToolsAdmin`) Gemini Code Assist Tools User (`roles/cloudaicompanion.codeToolsUser`) Developer Connect OAuth Admin (`roles/developerconnect.oauthAdmin`) Developer Connect OAuth User (`roles/developerconnect.oauthUser`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`developerconnect.accountConnectors.update`	Owner (`roles/owner`) Editor (`roles/editor`) Gemini Code Assist Tools Admin (`roles/cloudaicompanion.codeToolsAdmin`) Developer Connect OAuth Admin (`roles/developerconnect.oauthAdmin`)
`developerconnect.connections.constructGitHubAppManifest`	Owner (`roles/owner`) Editor (`roles/editor`) Developer Connect Admin (`roles/developerconnect.admin`) Dev Ops (`roles/iam.devOps`)
`developerconnect.connections.create`	Owner (`roles/owner`) Editor (`roles/editor`) Developer Connect Admin (`roles/developerconnect.admin`) Dev Ops (`roles/iam.devOps`)
`developerconnect.connections.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Developer Connect Admin (`roles/developerconnect.admin`) Dev Ops (`roles/iam.devOps`)
`developerconnect.connections.fetchGitHubInstallations`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Developer Connect Admin (`roles/developerconnect.admin`) Developer Connect User (`roles/developerconnect.user`) Dev Ops (`roles/iam.devOps`) Support User (`roles/iam.supportUser`)
`developerconnect.connections.fetchLinkableGitRepositories`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Developer Connect Admin (`roles/developerconnect.admin`) Developer Connect User (`roles/developerconnect.user`) Dev Ops (`roles/iam.devOps`) Support User (`roles/iam.supportUser`)
`developerconnect.connections.generateGitHubStateToken`	Owner (`roles/owner`) Editor (`roles/editor`) Developer Connect Admin (`roles/developerconnect.admin`) Dev Ops (`roles/iam.devOps`)
`developerconnect.connections.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Developer Connect Admin (`roles/developerconnect.admin`) Developer Connect Read Token Accessor (`roles/developerconnect.readTokenAccessor`) Developer Connect Token Accessor (`roles/developerconnect.tokenAccessor`) Developer Connect User (`roles/developerconnect.user`) Developer Connect Viewer (`roles/developerconnect.viewer`) Firebase App Hosting Compute Runner (`roles/firebaseapphosting.computeRunner`) Dev Ops (`roles/iam.devOps`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Gemini for Google Cloud Service Agent (`roles/cloudaicompanion.serviceAgent`) Cloud Build Service Agent (`roles/cloudbuild.serviceAgent`) Firebase App Hosting Service Agent (`roles/firebaseapphosting.serviceAgent`) Gemini Code Assist Management Service Agent (`roles/geminicodeassistmanagement.serviceAgent`) Vertex AI Reasoning Engine Service Agent (`roles/aiplatform.reasoningEngineServiceAgent`)
`developerconnect.connections.httpProxyRead`	Owner (`roles/owner`) Developer Connect HTTP Proxy Writer (`roles/developerconnect.connectionHttpProxyWriter`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Gemini Code Assist Management Service Agent (`roles/geminicodeassistmanagement.serviceAgent`)
`developerconnect.connections.httpProxyWrite`	Owner (`roles/owner`) Developer Connect HTTP Proxy Writer (`roles/developerconnect.connectionHttpProxyWriter`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Gemini Code Assist Management Service Agent (`roles/geminicodeassistmanagement.serviceAgent`)
`developerconnect.connections.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Developer Connect Admin (`roles/developerconnect.admin`) Developer Connect User (`roles/developerconnect.user`) Developer Connect Viewer (`roles/developerconnect.viewer`) Dev Ops (`roles/iam.devOps`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`developerconnect.connections.processGitHubAppCreationCallback`	Owner (`roles/owner`) Editor (`roles/editor`) Developer Connect Admin (`roles/developerconnect.admin`) Dev Ops (`roles/iam.devOps`)
`developerconnect.connections.processGitHubOAuthCallback`	Owner (`roles/owner`) Editor (`roles/editor`) Developer Connect Admin (`roles/developerconnect.admin`) Dev Ops (`roles/iam.devOps`)
`developerconnect.connections.update`	Owner (`roles/owner`) Editor (`roles/editor`) Developer Connect Admin (`roles/developerconnect.admin`) Dev Ops (`roles/iam.devOps`)
`developerconnect.gitRepositoryLinks.create`	Owner (`roles/owner`) Editor (`roles/editor`) Developer Connect Admin (`roles/developerconnect.admin`) Dev Ops (`roles/iam.devOps`)
`developerconnect.gitRepositoryLinks.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Developer Connect Admin (`roles/developerconnect.admin`) Dev Ops (`roles/iam.devOps`)
`developerconnect.gitRepositoryLinks.fetchGitRefs`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Developer Connect Admin (`roles/developerconnect.admin`) Developer Connect User (`roles/developerconnect.user`) Dev Ops (`roles/iam.devOps`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Gemini for Google Cloud Service Agent (`roles/cloudaicompanion.serviceAgent`)
`developerconnect.gitRepositoryLinks.fetchReadToken`	Owner (`roles/owner`) Developer Connect Read Token Accessor (`roles/developerconnect.readTokenAccessor`) Developer Connect Token Accessor (`roles/developerconnect.tokenAccessor`) Firebase App Hosting Compute Runner (`roles/firebaseapphosting.computeRunner`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Gemini for Google Cloud Service Agent (`roles/cloudaicompanion.serviceAgent`) Cloud Build Service Agent (`roles/cloudbuild.serviceAgent`) Firebase App Hosting Service Agent (`roles/firebaseapphosting.serviceAgent`) Vertex AI Reasoning Engine Service Agent (`roles/aiplatform.reasoningEngineServiceAgent`)
`developerconnect.gitRepositoryLinks.fetchReadWriteToken`	Owner (`roles/owner`) Developer Connect Token Accessor (`roles/developerconnect.tokenAccessor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (`roles/firebaseapphosting.serviceAgent`) Cloud Build Service Agent (`roles/cloudbuild.serviceAgent`)
`developerconnect.gitRepositoryLinks.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Developer Connect Admin (`roles/developerconnect.admin`) Developer Connect Read Token Accessor (`roles/developerconnect.readTokenAccessor`) Developer Connect Token Accessor (`roles/developerconnect.tokenAccessor`) Developer Connect User (`roles/developerconnect.user`) Developer Connect Viewer (`roles/developerconnect.viewer`) Firebase App Hosting Compute Runner (`roles/firebaseapphosting.computeRunner`) Dev Ops (`roles/iam.devOps`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Gemini for Google Cloud Service Agent (`roles/cloudaicompanion.serviceAgent`) Cloud Build Service Agent (`roles/cloudbuild.serviceAgent`) DesignCenter Service Agent (`roles/designcenter.serviceAgent`) Firebase App Hosting Service Agent (`roles/firebaseapphosting.serviceAgent`) Gemini Code Assist Management Service Agent (`roles/geminicodeassistmanagement.serviceAgent`) Vertex AI Reasoning Engine Service Agent (`roles/aiplatform.reasoningEngineServiceAgent`)
`developerconnect.gitRepositoryLinks.gitProxyRead`	Owner (`roles/owner`) Developer Connect Admin (`roles/developerconnect.admin`) Developer Connect Git Proxy Reader (`roles/developerconnect.gitProxyReader`) Developer Connect Git Proxy User (`roles/developerconnect.gitProxyUser`) Dev Ops (`roles/iam.devOps`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. DesignCenter Service Agent (`roles/designcenter.serviceAgent`) Gemini for Google Cloud Service Agent (`roles/cloudaicompanion.serviceAgent`)
`developerconnect.gitRepositoryLinks.gitProxyWrite`	Owner (`roles/owner`) Developer Connect Admin (`roles/developerconnect.admin`) Developer Connect Git Proxy User (`roles/developerconnect.gitProxyUser`) Dev Ops (`roles/iam.devOps`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. DesignCenter Service Agent (`roles/designcenter.serviceAgent`)
`developerconnect.gitRepositoryLinks.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Developer Connect Admin (`roles/developerconnect.admin`) Developer Connect User (`roles/developerconnect.user`) Developer Connect Viewer (`roles/developerconnect.viewer`) Dev Ops (`roles/iam.devOps`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Gemini for Google Cloud Service Agent (`roles/cloudaicompanion.serviceAgent`)
`developerconnect.insightsConfigs.create`	Owner (`roles/owner`) Editor (`roles/editor`) Developer Connect Insights Admin (`roles/developerconnect.insightsAdmin`)
`developerconnect.insightsConfigs.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Developer Connect Insights Admin (`roles/developerconnect.insightsAdmin`)
`developerconnect.insightsConfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) App Management Viewer (`roles/apphub.appManagementViewer`) Cloud Hub Operator (`roles/cloudhub.operator`) Developer Connect Insights Admin (`roles/developerconnect.insightsAdmin`) Developer Connect Insights Viewer (`roles/developerconnect.insightsViewer`) Support User (`roles/iam.supportUser`)
`developerconnect.insightsConfigs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) App Management Viewer (`roles/apphub.appManagementViewer`) Cloud Hub Operator (`roles/cloudhub.operator`) Developer Connect Insights Admin (`roles/developerconnect.insightsAdmin`) Developer Connect Insights Viewer (`roles/developerconnect.insightsViewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`developerconnect.insightsConfigs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Developer Connect Insights Admin (`roles/developerconnect.insightsAdmin`)
`developerconnect.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) App Management Viewer (`roles/apphub.appManagementViewer`) Gemini Code Assist Tools Admin (`roles/cloudaicompanion.codeToolsAdmin`) Gemini Code Assist Tools User (`roles/cloudaicompanion.codeToolsUser`) Cloud Hub Operator (`roles/cloudhub.operator`) Developer Connect Admin (`roles/developerconnect.admin`) Developer Connect Insights Admin (`roles/developerconnect.insightsAdmin`) Developer Connect Insights Viewer (`roles/developerconnect.insightsViewer`) Developer Connect OAuth Admin (`roles/developerconnect.oauthAdmin`) Developer Connect OAuth User (`roles/developerconnect.oauthUser`) Developer Connect User (`roles/developerconnect.user`) Developer Connect Viewer (`roles/developerconnect.viewer`) Dev Ops (`roles/iam.devOps`) Support User (`roles/iam.supportUser`)
`developerconnect.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) App Management Viewer (`roles/apphub.appManagementViewer`) Gemini Code Assist Tools Admin (`roles/cloudaicompanion.codeToolsAdmin`) Gemini Code Assist Tools User (`roles/cloudaicompanion.codeToolsUser`) Cloud Hub Operator (`roles/cloudhub.operator`) Developer Connect Admin (`roles/developerconnect.admin`) Developer Connect Insights Admin (`roles/developerconnect.insightsAdmin`) Developer Connect Insights Viewer (`roles/developerconnect.insightsViewer`) Developer Connect OAuth Admin (`roles/developerconnect.oauthAdmin`) Developer Connect OAuth User (`roles/developerconnect.oauthUser`) Developer Connect User (`roles/developerconnect.user`) Developer Connect Viewer (`roles/developerconnect.viewer`) Dev Ops (`roles/iam.devOps`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`developerconnect.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Developer Connect Admin (`roles/developerconnect.admin`) Dev Ops (`roles/iam.devOps`)
`developerconnect.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Developer Connect Admin (`roles/developerconnect.admin`) Dev Ops (`roles/iam.devOps`)
`developerconnect.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) App Management Viewer (`roles/apphub.appManagementViewer`) Gemini Code Assist Tools Admin (`roles/cloudaicompanion.codeToolsAdmin`) Gemini Code Assist Tools User (`roles/cloudaicompanion.codeToolsUser`) Cloud Hub Operator (`roles/cloudhub.operator`) Developer Connect Admin (`roles/developerconnect.admin`) Developer Connect Insights Admin (`roles/developerconnect.insightsAdmin`) Developer Connect Insights Viewer (`roles/developerconnect.insightsViewer`) Developer Connect OAuth Admin (`roles/developerconnect.oauthAdmin`) Developer Connect OAuth User (`roles/developerconnect.oauthUser`) Developer Connect User (`roles/developerconnect.user`) Developer Connect Viewer (`roles/developerconnect.viewer`) Dev Ops (`roles/iam.devOps`) Support User (`roles/iam.supportUser`)
`developerconnect.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) App Management Viewer (`roles/apphub.appManagementViewer`) Gemini Code Assist Tools Admin (`roles/cloudaicompanion.codeToolsAdmin`) Gemini Code Assist Tools User (`roles/cloudaicompanion.codeToolsUser`) Cloud Hub Operator (`roles/cloudhub.operator`) Developer Connect Admin (`roles/developerconnect.admin`) Developer Connect Insights Admin (`roles/developerconnect.insightsAdmin`) Developer Connect Insights Viewer (`roles/developerconnect.insightsViewer`) Developer Connect OAuth Admin (`roles/developerconnect.oauthAdmin`) Developer Connect OAuth User (`roles/developerconnect.oauthUser`) Developer Connect User (`roles/developerconnect.user`) Developer Connect Viewer (`roles/developerconnect.viewer`) Dev Ops (`roles/iam.devOps`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`developerconnect.providers.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Gemini Code Assist Tools Admin (`roles/cloudaicompanion.codeToolsAdmin`) Developer Connect OAuth Admin (`roles/developerconnect.oauthAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`developerconnect.users.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Gemini Code Assist Tools Admin (`roles/cloudaicompanion.codeToolsAdmin`) Developer Connect OAuth Admin (`roles/developerconnect.oauthAdmin`)
`developerconnect.users.deleteSelf`	Owner (`roles/owner`) Editor (`roles/editor`) Gemini Code Assist Tools Admin (`roles/cloudaicompanion.codeToolsAdmin`) Gemini Code Assist Tools User (`roles/cloudaicompanion.codeToolsUser`) Developer Connect OAuth Admin (`roles/developerconnect.oauthAdmin`) Developer Connect OAuth User (`roles/developerconnect.oauthUser`)
`developerconnect.users.fetchAccessToken`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Gemini Code Assist Tools Admin (`roles/cloudaicompanion.codeToolsAdmin`) Gemini Code Assist Tools User (`roles/cloudaicompanion.codeToolsUser`) Developer Connect OAuth Admin (`roles/developerconnect.oauthAdmin`) Developer Connect OAuth User (`roles/developerconnect.oauthUser`) Support User (`roles/iam.supportUser`)
`developerconnect.users.finishOAuth`	Owner (`roles/owner`) Editor (`roles/editor`) Gemini Code Assist Tools Admin (`roles/cloudaicompanion.codeToolsAdmin`) Gemini Code Assist Tools User (`roles/cloudaicompanion.codeToolsUser`) Developer Connect OAuth Admin (`roles/developerconnect.oauthAdmin`) Developer Connect OAuth User (`roles/developerconnect.oauthUser`)
`developerconnect.users.getSelf`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Gemini Code Assist Tools Admin (`roles/cloudaicompanion.codeToolsAdmin`) Gemini Code Assist Tools User (`roles/cloudaicompanion.codeToolsUser`) Developer Connect OAuth Admin (`roles/developerconnect.oauthAdmin`) Developer Connect OAuth User (`roles/developerconnect.oauthUser`) Support User (`roles/iam.supportUser`)
`developerconnect.users.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Gemini Code Assist Tools Admin (`roles/cloudaicompanion.codeToolsAdmin`) Developer Connect OAuth Admin (`roles/developerconnect.oauthAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`developerconnect.users.startOAuth`	Owner (`roles/owner`) Editor (`roles/editor`) Gemini Code Assist Tools Admin (`roles/cloudaicompanion.codeToolsAdmin`) Gemini Code Assist Tools User (`roles/cloudaicompanion.codeToolsUser`) Developer Connect OAuth Admin (`roles/developerconnect.oauthAdmin`) Developer Connect OAuth User (`roles/developerconnect.oauthUser`)

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-12-16 UTC.

Movatterモバイル変換

Developer Connect roles and permissions Stay organized with collections Save and categorize content based on your preferences.