Pub/Sub Lite roles and permissions

This page lists the IAM roles and permissions for Pub/Sub Lite. Tosearch through all roles and permissions, see therole andpermission index.

Pub/Sub Lite roles

RolePermissions

Pub/Sub Lite Admin

(roles/pubsublite.admin)

Full access to topics, subscriptions and reservations.

pubsublite.*

  • pubsublite.locations.openKafkaStream
  • pubsublite.operations.get
  • pubsublite.operations.list
  • pubsublite.reservations.attachTopic
  • pubsublite.reservations.create
  • pubsublite.reservations.delete
  • pubsublite.reservations.get
  • pubsublite.reservations.list
  • pubsublite.reservations.listTopics
  • pubsublite.reservations.update
  • pubsublite.subscriptions.create
  • pubsublite.subscriptions.delete
  • pubsublite.subscriptions.get
  • pubsublite.subscriptions.getCursor
  • pubsublite.subscriptions.list
  • pubsublite.subscriptions.seek
  • pubsublite.subscriptions.setCursor
  • pubsublite.subscriptions.subscribe
  • pubsublite.subscriptions.update
  • pubsublite.topics.computeHeadCursor
  • pubsublite.topics.computeMessageStats
  • pubsublite.topics.computeTimeCursor
  • pubsublite.topics.create
  • pubsublite.topics.delete
  • pubsublite.topics.get
  • pubsublite.topics.getPartitions
  • pubsublite.topics.list
  • pubsublite.topics.listSubscriptions
  • pubsublite.topics.publish
  • pubsublite.topics.subscribe
  • pubsublite.topics.update

Pub/Sub Lite Editor

(roles/pubsublite.editor)

Modify topics, subscriptions and reservations, publish and consume messages.

pubsublite.*

  • pubsublite.locations.openKafkaStream
  • pubsublite.operations.get
  • pubsublite.operations.list
  • pubsublite.reservations.attachTopic
  • pubsublite.reservations.create
  • pubsublite.reservations.delete
  • pubsublite.reservations.get
  • pubsublite.reservations.list
  • pubsublite.reservations.listTopics
  • pubsublite.reservations.update
  • pubsublite.subscriptions.create
  • pubsublite.subscriptions.delete
  • pubsublite.subscriptions.get
  • pubsublite.subscriptions.getCursor
  • pubsublite.subscriptions.list
  • pubsublite.subscriptions.seek
  • pubsublite.subscriptions.setCursor
  • pubsublite.subscriptions.subscribe
  • pubsublite.subscriptions.update
  • pubsublite.topics.computeHeadCursor
  • pubsublite.topics.computeMessageStats
  • pubsublite.topics.computeTimeCursor
  • pubsublite.topics.create
  • pubsublite.topics.delete
  • pubsublite.topics.get
  • pubsublite.topics.getPartitions
  • pubsublite.topics.list
  • pubsublite.topics.listSubscriptions
  • pubsublite.topics.publish
  • pubsublite.topics.subscribe
  • pubsublite.topics.update

Pub/Sub Lite Publisher

(roles/pubsublite.publisher)

Publish messages to a topic.

pubsublite.locations.openKafkaStream

pubsublite.topics.getPartitions

pubsublite.topics.publish

Pub/Sub Lite Service Agent

(roles/pubsublite.serviceAgent)

Grants Pub/Sub Lite Service Agent access to project resources.

Warning: Do not grant service agent roles to any principals exceptservice agents.

pubsub.topics.publish

pubsublite.subscriptions.get

pubsublite.subscriptions.getCursor

pubsublite.subscriptions.setCursor

pubsublite.subscriptions.subscribe

pubsublite.topics.computeHeadCursor

pubsublite.topics.getPartitions

pubsublite.topics.publish

pubsublite.topics.subscribe

Pub/Sub Lite Subscriber

(roles/pubsublite.subscriber)

Subscribe to and read messages from a topic.

pubsublite.locations.openKafkaStream

pubsublite.operations.get

pubsublite.subscriptions.getCursor

pubsublite.subscriptions.seek

pubsublite.subscriptions.setCursor

pubsublite.subscriptions.subscribe

pubsublite.topics.computeHeadCursor

pubsublite.topics.computeMessageStats

pubsublite.topics.computeTimeCursor

pubsublite.topics.getPartitions

pubsublite.topics.subscribe

Pub/Sub Lite Viewer

(roles/pubsublite.viewer)

View topics, subscriptions and reservations.

pubsublite.operations.*

  • pubsublite.operations.get
  • pubsublite.operations.list

pubsublite.reservations.get

pubsublite.reservations.list

pubsublite.reservations.listTopics

pubsublite.subscriptions.get

pubsublite.subscriptions.getCursor

pubsublite.subscriptions.list

pubsublite.topics.get

pubsublite.topics.getPartitions

pubsublite.topics.list

pubsublite.topics.listSubscriptions

Pub/Sub Lite permissions

PermissionIncluded in roles

pubsublite.locations.openKafkaStream

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

Pub/Sub Lite Publisher (roles/pubsublite.publisher)

Pub/Sub Lite Subscriber (roles/pubsublite.subscriber)

pubsublite.operations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

Pub/Sub Lite Subscriber (roles/pubsublite.subscriber)

Pub/Sub Lite Viewer (roles/pubsublite.viewer)

pubsublite.operations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

Pub/Sub Lite Viewer (roles/pubsublite.viewer)

pubsublite.reservations.attachTopic

Owner (roles/owner)

Editor (roles/editor)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

pubsublite.reservations.create

Owner (roles/owner)

Editor (roles/editor)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

pubsublite.reservations.delete

Owner (roles/owner)

Editor (roles/editor)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

pubsublite.reservations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

Pub/Sub Lite Viewer (roles/pubsublite.viewer)

pubsublite.reservations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

Pub/Sub Lite Viewer (roles/pubsublite.viewer)

pubsublite.reservations.listTopics

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

Pub/Sub Lite Viewer (roles/pubsublite.viewer)

pubsublite.reservations.update

Owner (roles/owner)

Editor (roles/editor)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

pubsublite.subscriptions.create

Owner (roles/owner)

Editor (roles/editor)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

pubsublite.subscriptions.delete

Owner (roles/owner)

Editor (roles/editor)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

pubsublite.subscriptions.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

Pub/Sub Lite Viewer (roles/pubsublite.viewer)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

pubsublite.subscriptions.getCursor

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

Pub/Sub Lite Subscriber (roles/pubsublite.subscriber)

Pub/Sub Lite Viewer (roles/pubsublite.viewer)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

pubsublite.subscriptions.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

Pub/Sub Lite Viewer (roles/pubsublite.viewer)

pubsublite.subscriptions.seek

Owner (roles/owner)

Editor (roles/editor)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

Pub/Sub Lite Subscriber (roles/pubsublite.subscriber)

pubsublite.subscriptions.setCursor

Owner (roles/owner)

Editor (roles/editor)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

Pub/Sub Lite Subscriber (roles/pubsublite.subscriber)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

pubsublite.subscriptions.subscribe

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

Pub/Sub Lite Subscriber (roles/pubsublite.subscriber)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

pubsublite.subscriptions.update

Owner (roles/owner)

Editor (roles/editor)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

pubsublite.topics.computeHeadCursor

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

Pub/Sub Lite Subscriber (roles/pubsublite.subscriber)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

pubsublite.topics.computeMessageStats

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

Pub/Sub Lite Subscriber (roles/pubsublite.subscriber)

pubsublite.topics.computeTimeCursor

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

Pub/Sub Lite Subscriber (roles/pubsublite.subscriber)

pubsublite.topics.create

Owner (roles/owner)

Editor (roles/editor)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

pubsublite.topics.delete

Owner (roles/owner)

Editor (roles/editor)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

pubsublite.topics.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

Pub/Sub Lite Viewer (roles/pubsublite.viewer)

pubsublite.topics.getPartitions

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

Pub/Sub Lite Publisher (roles/pubsublite.publisher)

Pub/Sub Lite Subscriber (roles/pubsublite.subscriber)

Pub/Sub Lite Viewer (roles/pubsublite.viewer)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

pubsublite.topics.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

Pub/Sub Lite Viewer (roles/pubsublite.viewer)

pubsublite.topics.listSubscriptions

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

Pub/Sub Lite Viewer (roles/pubsublite.viewer)

pubsublite.topics.publish

Owner (roles/owner)

Editor (roles/editor)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

Pub/Sub Lite Publisher (roles/pubsublite.publisher)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

pubsublite.topics.subscribe

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

Pub/Sub Lite Subscriber (roles/pubsublite.subscriber)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

pubsublite.topics.update

Owner (roles/owner)

Editor (roles/editor)

Pub/Sub Lite Admin (roles/pubsublite.admin)

Pub/Sub Lite Editor (roles/pubsublite.editor)

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-02-18 UTC.