Serverless Integrations roles and permissions

This page lists the IAM roles and permissions for Serverless Integrations. Tosearch through all roles and permissions, see therole andpermission index.

Serverless Integrations roles

RolePermissions

Serverless Integrations DeveloperBeta

(roles/runapps.developer)

Access to create and change Serverless Integrations and their configuration.

resourcemanager.projects.get

resourcemanager.projects.list

runapps.applications.*

  • runapps.applications.create
  • runapps.applications.delete
  • runapps.applications.get
  • runapps.applications.getStatus
  • runapps.applications.list
  • runapps.applications.update

runapps.deployments.get

runapps.deployments.list

runapps.locations.*

  • runapps.locations.get
  • runapps.locations.list

runapps.operations.*

  • runapps.operations.cancel
  • runapps.operations.delete
  • runapps.operations.get
  • runapps.operations.list

Serverless Integrations OperatorBeta

(roles/runapps.operator)

Access to deploy Serverless Integrations.

resourcemanager.projects.get

resourcemanager.projects.list

runapps.applications.get

runapps.applications.getStatus

runapps.applications.list

runapps.deployments.*

  • runapps.deployments.create
  • runapps.deployments.get
  • runapps.deployments.list

runapps.locations.*

  • runapps.locations.get
  • runapps.locations.list

runapps.operations.*

  • runapps.operations.cancel
  • runapps.operations.delete
  • runapps.operations.get
  • runapps.operations.list

Serverless Integrations Service Agent

(roles/runapps.serviceAgent)

Gives Serverless Integrations Service Account access to customer project resources.

Warning: Do not grant service agent roles to any principals exceptservice agents.

cloudbuild.builds.create

cloudbuild.builds.get

cloudsql.databases.get

cloudsql.instances.get

cloudsql.users.get

compute.backendServices.get

compute.backendServices.list

compute.globalAddresses.get

compute.globalAddresses.list

compute.globalForwardingRules.get

compute.globalForwardingRules.list

compute.networks.get

compute.networks.list

compute.regionNetworkEndpointGroups.get

compute.regionNetworkEndpointGroups.list

compute.sslCertificates.get

compute.sslCertificates.list

compute.targetHttpProxies.get

compute.targetHttpProxies.list

compute.targetHttpsProxies.get

compute.targetHttpsProxies.list

compute.urlMaps.get

compute.urlMaps.list

firebasehosting.sites.get

iam.serviceAccounts.actAs

redis.instances.get

redis.instances.list

run.jobs.get

run.jobs.list

run.services.get

run.services.list

serviceusage.services.use

storage.buckets.create

storage.buckets.delete

storage.buckets.get

storage.objects.create

storage.objects.delete

storage.objects.get

storage.objects.list

vpcaccess.connectors.get

vpcaccess.connectors.list

Serverless Integrations ViewerBeta

(roles/runapps.viewer)

Read-only access to Serverless Integrations resources.

resourcemanager.projects.get

resourcemanager.projects.list

runapps.applications.get

runapps.applications.getStatus

runapps.applications.list

runapps.deployments.get

runapps.deployments.list

runapps.locations.*

  • runapps.locations.get
  • runapps.locations.list

runapps.operations.get

runapps.operations.list

Serverless Integrations permissions

PermissionIncluded in roles

runapps.applications.create

Owner (roles/owner)

Editor (roles/editor)

Serverless Integrations Developer (roles/runapps.developer)

runapps.applications.delete

Owner (roles/owner)

Editor (roles/editor)

Serverless Integrations Developer (roles/runapps.developer)

runapps.applications.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Serverless Integrations Developer (roles/runapps.developer)

Serverless Integrations Operator (roles/runapps.operator)

Serverless Integrations Viewer (roles/runapps.viewer)

runapps.applications.getStatus

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Serverless Integrations Developer (roles/runapps.developer)

Serverless Integrations Operator (roles/runapps.operator)

Serverless Integrations Viewer (roles/runapps.viewer)

runapps.applications.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Serverless Integrations Developer (roles/runapps.developer)

Serverless Integrations Operator (roles/runapps.operator)

Serverless Integrations Viewer (roles/runapps.viewer)

runapps.applications.update

Owner (roles/owner)

Editor (roles/editor)

Serverless Integrations Developer (roles/runapps.developer)

runapps.deployments.create

Owner (roles/owner)

Editor (roles/editor)

Serverless Integrations Operator (roles/runapps.operator)

runapps.deployments.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Serverless Integrations Developer (roles/runapps.developer)

Serverless Integrations Operator (roles/runapps.operator)

Serverless Integrations Viewer (roles/runapps.viewer)

runapps.deployments.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Serverless Integrations Developer (roles/runapps.developer)

Serverless Integrations Operator (roles/runapps.operator)

Serverless Integrations Viewer (roles/runapps.viewer)

runapps.locations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Serverless Integrations Developer (roles/runapps.developer)

Serverless Integrations Operator (roles/runapps.operator)

Serverless Integrations Viewer (roles/runapps.viewer)

runapps.locations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Serverless Integrations Developer (roles/runapps.developer)

Serverless Integrations Operator (roles/runapps.operator)

Serverless Integrations Viewer (roles/runapps.viewer)

runapps.operations.cancel

Owner (roles/owner)

Editor (roles/editor)

Serverless Integrations Developer (roles/runapps.developer)

Serverless Integrations Operator (roles/runapps.operator)

runapps.operations.delete

Owner (roles/owner)

Editor (roles/editor)

Serverless Integrations Developer (roles/runapps.developer)

Serverless Integrations Operator (roles/runapps.operator)

runapps.operations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Serverless Integrations Developer (roles/runapps.developer)

Serverless Integrations Operator (roles/runapps.operator)

Serverless Integrations Viewer (roles/runapps.viewer)

runapps.operations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Serverless Integrations Developer (roles/runapps.developer)

Serverless Integrations Operator (roles/runapps.operator)

Serverless Integrations Viewer (roles/runapps.viewer)

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-12-15 UTC.