Parameter Manager roles and permissions

This page lists the IAM roles and permissions for Parameter Manager. Tosearch through all roles and permissions, see therole andpermission index.

Parameter Manager roles

RolePermissions

Parameter Manager Admin

(roles/parametermanager.admin)

Grants full access to all Parameter Manager resources. Intended for project admins & owners who need to perform all administrative tasks.

parametermanager.*

  • parametermanager.locations.get
  • parametermanager.locations.list
  • parametermanager.parameterVersions.create
  • parametermanager.parameterVersions.delete
  • parametermanager.parameterVersions.get
  • parametermanager.parameterVersions.list
  • parametermanager.parameterVersions.render
  • parametermanager.parameterVersions.update
  • parametermanager.parameters.create
  • parametermanager.parameters.delete
  • parametermanager.parameters.get
  • parametermanager.parameters.list
  • parametermanager.parameters.update

resourcemanager.projects.get

resourcemanager.projects.list

Parameter Manager Parameter Accessor

(roles/parametermanager.parameterAccessor)

Grants read access to ParameterManager ParameterVersion resources. Intended for users & applications that need to perform read operations on ParameterVersions only.

parametermanager.locations.*

  • parametermanager.locations.get
  • parametermanager.locations.list

parametermanager.parameterVersions.render

resourcemanager.projects.get

resourcemanager.projects.list

Parameter Manager Parameter Version Adder

(roles/parametermanager.parameterVersionAdder)

Grants create access to Parameter Manager ParameterVersion resources. Intended for users & applications that need to perform create operations on ParameterVersions only.

parametermanager.locations.*

  • parametermanager.locations.get
  • parametermanager.locations.list

parametermanager.parameterVersions.create

parametermanager.parameters.get

parametermanager.parameters.list

resourcemanager.projects.get

resourcemanager.projects.list

Parameter Manager Parameter Version Manager

(roles/parametermanager.parameterVersionManager)

Grants read & write access to all Parameter Manager ParameterVersion resources. Intended for users & applications that need to view Parameters and perform create/read/update/delete/list operations on ParameterVersions only.

parametermanager.locations.*

  • parametermanager.locations.get
  • parametermanager.locations.list

parametermanager.parameterVersions.create

parametermanager.parameterVersions.delete

parametermanager.parameterVersions.get

parametermanager.parameterVersions.list

parametermanager.parameterVersions.update

parametermanager.parameters.get

parametermanager.parameters.list

resourcemanager.projects.get

resourcemanager.projects.list

Parameter Manager Parameter Viewer

(roles/parametermanager.parameterViewer)

Grants read access to Parameter Manager Parameter & ParameterVersion resources. Intended for users & applications that need to perform read/list operations on Parameters and ParameterVersions only.

parametermanager.locations.*

  • parametermanager.locations.get
  • parametermanager.locations.list

parametermanager.parameterVersions.get

parametermanager.parameterVersions.list

parametermanager.parameters.get

parametermanager.parameters.list

resourcemanager.projects.get

resourcemanager.projects.list

Parameter Manager permissions

PermissionIncluded in roles

parametermanager.locations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Parameter Manager Admin (roles/parametermanager.admin)

Parameter Manager Parameter Accessor (roles/parametermanager.parameterAccessor)

Parameter Manager Parameter Version Adder (roles/parametermanager.parameterVersionAdder)

Parameter Manager Parameter Version Manager (roles/parametermanager.parameterVersionManager)

Parameter Manager Parameter Viewer (roles/parametermanager.parameterViewer)

parametermanager.locations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Parameter Manager Admin (roles/parametermanager.admin)

Parameter Manager Parameter Accessor (roles/parametermanager.parameterAccessor)

Parameter Manager Parameter Version Adder (roles/parametermanager.parameterVersionAdder)

Parameter Manager Parameter Version Manager (roles/parametermanager.parameterVersionManager)

Parameter Manager Parameter Viewer (roles/parametermanager.parameterViewer)

parametermanager.parameterVersions.create

Owner (roles/owner)

Editor (roles/editor)

Parameter Manager Admin (roles/parametermanager.admin)

Parameter Manager Parameter Version Adder (roles/parametermanager.parameterVersionAdder)

Parameter Manager Parameter Version Manager (roles/parametermanager.parameterVersionManager)

parametermanager.parameterVersions.delete

Owner (roles/owner)

Editor (roles/editor)

Parameter Manager Admin (roles/parametermanager.admin)

Parameter Manager Parameter Version Manager (roles/parametermanager.parameterVersionManager)

parametermanager.parameterVersions.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Parameter Manager Admin (roles/parametermanager.admin)

Parameter Manager Parameter Version Manager (roles/parametermanager.parameterVersionManager)

Parameter Manager Parameter Viewer (roles/parametermanager.parameterViewer)

parametermanager.parameterVersions.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Parameter Manager Admin (roles/parametermanager.admin)

Parameter Manager Parameter Version Manager (roles/parametermanager.parameterVersionManager)

Parameter Manager Parameter Viewer (roles/parametermanager.parameterViewer)

parametermanager.parameterVersions.render

Owner (roles/owner)

Parameter Manager Admin (roles/parametermanager.admin)

Parameter Manager Parameter Accessor (roles/parametermanager.parameterAccessor)

parametermanager.parameterVersions.update

Owner (roles/owner)

Editor (roles/editor)

Parameter Manager Admin (roles/parametermanager.admin)

Parameter Manager Parameter Version Manager (roles/parametermanager.parameterVersionManager)

parametermanager.parameters.create

Owner (roles/owner)

Editor (roles/editor)

Parameter Manager Admin (roles/parametermanager.admin)

parametermanager.parameters.delete

Owner (roles/owner)

Editor (roles/editor)

Parameter Manager Admin (roles/parametermanager.admin)

parametermanager.parameters.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Parameter Manager Admin (roles/parametermanager.admin)

Parameter Manager Parameter Version Adder (roles/parametermanager.parameterVersionAdder)

Parameter Manager Parameter Version Manager (roles/parametermanager.parameterVersionManager)

Parameter Manager Parameter Viewer (roles/parametermanager.parameterViewer)

parametermanager.parameters.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Parameter Manager Admin (roles/parametermanager.admin)

Parameter Manager Parameter Version Adder (roles/parametermanager.parameterVersionAdder)

Parameter Manager Parameter Version Manager (roles/parametermanager.parameterVersionManager)

Parameter Manager Parameter Viewer (roles/parametermanager.parameterViewer)

parametermanager.parameters.update

Owner (roles/owner)

Editor (roles/editor)

Parameter Manager Admin (roles/parametermanager.admin)

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-12-15 UTC.