Security Center Management API roles and permissions

This page lists the IAM roles and permissions for Security Center Management API. Tosearch through all roles and permissions, see therole andpermission index.

Security Center Management API roles

Role Permissions

Role	Permissions
Security Center Management Admin (`roles/securitycentermanagement.admin`) Full access to manage Cloud Security Command Center services and custom modules configuration.	`resourcemanager.organizations.get` `resourcemanager.projects.get` `resourcemanager.projects.list` `securitycenter.organizationsettings.` `securitycenter.organizationsettings.get` `securitycenter.organizationsettings.update` `securitycenter.securitycentersettings.` `securitycenter.securitycentersettings.get` `securitycenter.securitycentersettings.update` `securitycentermanagement.*` `securitycentermanagement.billingMetadata.get` `securitycentermanagement.effectiveEventThreatDetectionCustomModules.get` `securitycentermanagement.effectiveEventThreatDetectionCustomModules.list` `securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get` `securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list` `securitycentermanagement.eventThreatDetectionCustomModules.create` `securitycentermanagement.eventThreatDetectionCustomModules.delete` `securitycentermanagement.eventThreatDetectionCustomModules.get` `securitycentermanagement.eventThreatDetectionCustomModules.list` `securitycentermanagement.eventThreatDetectionCustomModules.update` `securitycentermanagement.eventThreatDetectionCustomModules.validate` `securitycentermanagement.locations.get` `securitycentermanagement.locations.list` `securitycentermanagement.securityCenterServices.get` `securitycentermanagement.securityCenterServices.list` `securitycentermanagement.securityCenterServices.update` `securitycentermanagement.securityCommandCenter.activate` `securitycentermanagement.securityCommandCenter.checkActivationOperation` `securitycentermanagement.securityCommandCenter.checkEligibility` `securitycentermanagement.securityCommandCenter.checkOnboardingStatus` `securitycentermanagement.securityCommandCenter.generateServiceAccounts` `securitycentermanagement.securityCommandCenter.get` `securitycentermanagement.securityCommandCenter.update` `securitycentermanagement.securityHealthAnalyticsCustomModules.create` `securitycentermanagement.securityHealthAnalyticsCustomModules.delete` `securitycentermanagement.securityHealthAnalyticsCustomModules.get` `securitycentermanagement.securityHealthAnalyticsCustomModules.list` `securitycentermanagement.securityHealthAnalyticsCustomModules.simulate` `securitycentermanagement.securityHealthAnalyticsCustomModules.test` `securitycentermanagement.securityHealthAnalyticsCustomModules.update`
Security Center Management Custom Modules Editor (`roles/securitycentermanagement.customModulesEditor`) Full access to manage Cloud Security Command Center custom modules.	`resourcemanager.organizations.get` `resourcemanager.projects.get` `resourcemanager.projects.list` `securitycentermanagement.effectiveEventThreatDetectionCustomModules.` `securitycentermanagement.effectiveEventThreatDetectionCustomModules.get` `securitycentermanagement.effectiveEventThreatDetectionCustomModules.list` `securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.` `securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get` `securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list` `securitycentermanagement.eventThreatDetectionCustomModules.` `securitycentermanagement.eventThreatDetectionCustomModules.create` `securitycentermanagement.eventThreatDetectionCustomModules.delete` `securitycentermanagement.eventThreatDetectionCustomModules.get` `securitycentermanagement.eventThreatDetectionCustomModules.list` `securitycentermanagement.eventThreatDetectionCustomModules.update` `securitycentermanagement.eventThreatDetectionCustomModules.validate` `securitycentermanagement.locations.` `securitycentermanagement.locations.get` `securitycentermanagement.locations.list` `securitycentermanagement.securityHealthAnalyticsCustomModules.*` `securitycentermanagement.securityHealthAnalyticsCustomModules.create` `securitycentermanagement.securityHealthAnalyticsCustomModules.delete` `securitycentermanagement.securityHealthAnalyticsCustomModules.get` `securitycentermanagement.securityHealthAnalyticsCustomModules.list` `securitycentermanagement.securityHealthAnalyticsCustomModules.simulate` `securitycentermanagement.securityHealthAnalyticsCustomModules.test` `securitycentermanagement.securityHealthAnalyticsCustomModules.update`
Security Center Management Custom Modules Viewer (`roles/securitycentermanagement.customModulesViewer`) Readonly access to Cloud Security Command Center custom modules.	`resourcemanager.organizations.get` `resourcemanager.projects.get` `resourcemanager.projects.list` `securitycentermanagement.effectiveEventThreatDetectionCustomModules.` `securitycentermanagement.effectiveEventThreatDetectionCustomModules.get` `securitycentermanagement.effectiveEventThreatDetectionCustomModules.list` `securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.` `securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get` `securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list` `securitycentermanagement.eventThreatDetectionCustomModules.get` `securitycentermanagement.eventThreatDetectionCustomModules.list` `securitycentermanagement.eventThreatDetectionCustomModules.validate` `securitycentermanagement.locations.*` `securitycentermanagement.locations.get` `securitycentermanagement.locations.list` `securitycentermanagement.securityHealthAnalyticsCustomModules.get` `securitycentermanagement.securityHealthAnalyticsCustomModules.list` `securitycentermanagement.securityHealthAnalyticsCustomModules.simulate` `securitycentermanagement.securityHealthAnalyticsCustomModules.test`
Security Center Management Custom ETD Modules Editor (`roles/securitycentermanagement.etdCustomModulesEditor`) Full access to manage Cloud Security Command Center ETD custom modules.	`resourcemanager.organizations.get` `resourcemanager.projects.get` `resourcemanager.projects.list` `securitycentermanagement.effectiveEventThreatDetectionCustomModules.` `securitycentermanagement.effectiveEventThreatDetectionCustomModules.get` `securitycentermanagement.effectiveEventThreatDetectionCustomModules.list` `securitycentermanagement.eventThreatDetectionCustomModules.` `securitycentermanagement.eventThreatDetectionCustomModules.create` `securitycentermanagement.eventThreatDetectionCustomModules.delete` `securitycentermanagement.eventThreatDetectionCustomModules.get` `securitycentermanagement.eventThreatDetectionCustomModules.list` `securitycentermanagement.eventThreatDetectionCustomModules.update` `securitycentermanagement.eventThreatDetectionCustomModules.validate` `securitycentermanagement.locations.*` `securitycentermanagement.locations.get` `securitycentermanagement.locations.list`
Security Center Management ETD Custom Modules Viewer (`roles/securitycentermanagement.etdCustomModulesViewer`) Readonly access to Cloud Security Command Center ETD custom modules.	`resourcemanager.organizations.get` `resourcemanager.projects.get` `resourcemanager.projects.list` `securitycentermanagement.effectiveEventThreatDetectionCustomModules.` `securitycentermanagement.effectiveEventThreatDetectionCustomModules.get` `securitycentermanagement.effectiveEventThreatDetectionCustomModules.list` `securitycentermanagement.eventThreatDetectionCustomModules.get` `securitycentermanagement.eventThreatDetectionCustomModules.list` `securitycentermanagement.eventThreatDetectionCustomModules.validate` `securitycentermanagement.locations.` `securitycentermanagement.locations.get` `securitycentermanagement.locations.list`
Security Center Management Services Editor (`roles/securitycentermanagement.securityCenterServicesEditor`) Full access to manage Cloud Security Command Center services configuration.	`securitycentermanagement.securityCenterServices.*` `securitycentermanagement.securityCenterServices.get` `securitycentermanagement.securityCenterServices.list` `securitycentermanagement.securityCenterServices.update`
Security Center Management Services Viewer (`roles/securitycentermanagement.securityCenterServicesViewer`) Readonly access to Cloud Security Command Center services configuration.	`securitycentermanagement.securityCenterServices.get` `securitycentermanagement.securityCenterServices.list`
Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`) Full access to manage Cloud Security Command Center settings	`resourcemanager.organizations.get` `resourcemanager.projects.get` `resourcemanager.projects.list` `securitycenter.organizationsettings.` `securitycenter.organizationsettings.get` `securitycenter.organizationsettings.update` `securitycenter.securitycentersettings.` `securitycenter.securitycentersettings.get` `securitycenter.securitycentersettings.update` `securitycentermanagement.*` `securitycentermanagement.billingMetadata.get` `securitycentermanagement.effectiveEventThreatDetectionCustomModules.get` `securitycentermanagement.effectiveEventThreatDetectionCustomModules.list` `securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get` `securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list` `securitycentermanagement.eventThreatDetectionCustomModules.create` `securitycentermanagement.eventThreatDetectionCustomModules.delete` `securitycentermanagement.eventThreatDetectionCustomModules.get` `securitycentermanagement.eventThreatDetectionCustomModules.list` `securitycentermanagement.eventThreatDetectionCustomModules.update` `securitycentermanagement.eventThreatDetectionCustomModules.validate` `securitycentermanagement.locations.get` `securitycentermanagement.locations.list` `securitycentermanagement.securityCenterServices.get` `securitycentermanagement.securityCenterServices.list` `securitycentermanagement.securityCenterServices.update` `securitycentermanagement.securityCommandCenter.activate` `securitycentermanagement.securityCommandCenter.checkActivationOperation` `securitycentermanagement.securityCommandCenter.checkEligibility` `securitycentermanagement.securityCommandCenter.checkOnboardingStatus` `securitycentermanagement.securityCommandCenter.generateServiceAccounts` `securitycentermanagement.securityCommandCenter.get` `securitycentermanagement.securityCommandCenter.update` `securitycentermanagement.securityHealthAnalyticsCustomModules.create` `securitycentermanagement.securityHealthAnalyticsCustomModules.delete` `securitycentermanagement.securityHealthAnalyticsCustomModules.get` `securitycentermanagement.securityHealthAnalyticsCustomModules.list` `securitycentermanagement.securityHealthAnalyticsCustomModules.simulate` `securitycentermanagement.securityHealthAnalyticsCustomModules.test` `securitycentermanagement.securityHealthAnalyticsCustomModules.update`
Security Center Management Settings Viewer (`roles/securitycentermanagement.settingsViewer`) Readonly access to Cloud Security Command Center settings	`resourcemanager.organizations.get` `resourcemanager.projects.get` `resourcemanager.projects.list` `securitycenter.organizationsettings.get` `securitycenter.securitycentersettings.get` `securitycentermanagement.billingMetadata.get` `securitycentermanagement.effectiveEventThreatDetectionCustomModules.` `securitycentermanagement.effectiveEventThreatDetectionCustomModules.get` `securitycentermanagement.effectiveEventThreatDetectionCustomModules.list` `securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.` `securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get` `securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list` `securitycentermanagement.eventThreatDetectionCustomModules.get` `securitycentermanagement.eventThreatDetectionCustomModules.list` `securitycentermanagement.eventThreatDetectionCustomModules.validate` `securitycentermanagement.locations.*` `securitycentermanagement.locations.get` `securitycentermanagement.locations.list` `securitycentermanagement.securityCenterServices.get` `securitycentermanagement.securityCenterServices.list` `securitycentermanagement.securityCommandCenter.checkActivationOperation` `securitycentermanagement.securityCommandCenter.checkOnboardingStatus` `securitycentermanagement.securityCommandCenter.get` `securitycentermanagement.securityHealthAnalyticsCustomModules.get` `securitycentermanagement.securityHealthAnalyticsCustomModules.list` `securitycentermanagement.securityHealthAnalyticsCustomModules.simulate` `securitycentermanagement.securityHealthAnalyticsCustomModules.test`
Security Center Management SHA Custom Modules Editor (`roles/securitycentermanagement.shaCustomModulesEditor`) Full access to manage Cloud Security Command Center SHA custom modules.	`resourcemanager.organizations.get` `resourcemanager.projects.get` `resourcemanager.projects.list` `securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.` `securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get` `securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list` `securitycentermanagement.locations.` `securitycentermanagement.locations.get` `securitycentermanagement.locations.list` `securitycentermanagement.securityHealthAnalyticsCustomModules.*` `securitycentermanagement.securityHealthAnalyticsCustomModules.create` `securitycentermanagement.securityHealthAnalyticsCustomModules.delete` `securitycentermanagement.securityHealthAnalyticsCustomModules.get` `securitycentermanagement.securityHealthAnalyticsCustomModules.list` `securitycentermanagement.securityHealthAnalyticsCustomModules.simulate` `securitycentermanagement.securityHealthAnalyticsCustomModules.test` `securitycentermanagement.securityHealthAnalyticsCustomModules.update`
Security Center Management SHA Custom Modules Viewer (`roles/securitycentermanagement.shaCustomModulesViewer`) Readonly access to Cloud Security Command Center SHA custom modules.	`resourcemanager.organizations.get` `resourcemanager.projects.get` `resourcemanager.projects.list` `securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.` `securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get` `securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list` `securitycentermanagement.locations.` `securitycentermanagement.locations.get` `securitycentermanagement.locations.list` `securitycentermanagement.securityHealthAnalyticsCustomModules.get` `securitycentermanagement.securityHealthAnalyticsCustomModules.list` `securitycentermanagement.securityHealthAnalyticsCustomModules.simulate` `securitycentermanagement.securityHealthAnalyticsCustomModules.test`
Security Center Management Viewer (`roles/securitycentermanagement.viewer`) Readonly access to Cloud Security Command Center services and custom modules configuration.	`resourcemanager.organizations.get` `resourcemanager.projects.get` `resourcemanager.projects.list` `securitycenter.organizationsettings.get` `securitycenter.securitycentersettings.get` `securitycentermanagement.billingMetadata.get` `securitycentermanagement.effectiveEventThreatDetectionCustomModules.` `securitycentermanagement.effectiveEventThreatDetectionCustomModules.get` `securitycentermanagement.effectiveEventThreatDetectionCustomModules.list` `securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.` `securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get` `securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list` `securitycentermanagement.eventThreatDetectionCustomModules.get` `securitycentermanagement.eventThreatDetectionCustomModules.list` `securitycentermanagement.eventThreatDetectionCustomModules.validate` `securitycentermanagement.locations.*` `securitycentermanagement.locations.get` `securitycentermanagement.locations.list` `securitycentermanagement.securityCenterServices.get` `securitycentermanagement.securityCenterServices.list` `securitycentermanagement.securityCommandCenter.checkActivationOperation` `securitycentermanagement.securityCommandCenter.checkOnboardingStatus` `securitycentermanagement.securityCommandCenter.get` `securitycentermanagement.securityHealthAnalyticsCustomModules.get` `securitycentermanagement.securityHealthAnalyticsCustomModules.list` `securitycentermanagement.securityHealthAnalyticsCustomModules.simulate` `securitycentermanagement.securityHealthAnalyticsCustomModules.test`

Security Center Management Admin

(roles/securitycentermanagement.admin)

Full access to manage Cloud Security Command Center services and custom modules configuration.

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

securitycenter.organizationsettings.*

securitycenter.organizationsettings.get
securitycenter.organizationsettings.update

securitycenter.securitycentersettings.*

securitycenter.securitycentersettings.get
securitycenter.securitycentersettings.update

securitycentermanagement.*

securitycentermanagement.billingMetadata.get
securitycentermanagement.effectiveEventThreatDetectionCustomModules.get
securitycentermanagement.effectiveEventThreatDetectionCustomModules.list
securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get
securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list
securitycentermanagement.eventThreatDetectionCustomModules.create
securitycentermanagement.eventThreatDetectionCustomModules.delete
securitycentermanagement.eventThreatDetectionCustomModules.get
securitycentermanagement.eventThreatDetectionCustomModules.list
securitycentermanagement.eventThreatDetectionCustomModules.update
securitycentermanagement.eventThreatDetectionCustomModules.validate
securitycentermanagement.locations.get
securitycentermanagement.locations.list
securitycentermanagement.securityCenterServices.get
securitycentermanagement.securityCenterServices.list
securitycentermanagement.securityCenterServices.update
securitycentermanagement.securityCommandCenter.activate
securitycentermanagement.securityCommandCenter.checkActivationOperation
securitycentermanagement.securityCommandCenter.checkEligibility
securitycentermanagement.securityCommandCenter.checkOnboardingStatus
securitycentermanagement.securityCommandCenter.generateServiceAccounts
securitycentermanagement.securityCommandCenter.get
securitycentermanagement.securityCommandCenter.update
securitycentermanagement.securityHealthAnalyticsCustomModules.create
securitycentermanagement.securityHealthAnalyticsCustomModules.delete
securitycentermanagement.securityHealthAnalyticsCustomModules.get
securitycentermanagement.securityHealthAnalyticsCustomModules.list
securitycentermanagement.securityHealthAnalyticsCustomModules.simulate
securitycentermanagement.securityHealthAnalyticsCustomModules.test
securitycentermanagement.securityHealthAnalyticsCustomModules.update

Security Center Management Custom Modules Editor

(roles/securitycentermanagement.customModulesEditor)

Full access to manage Cloud Security Command Center custom modules.

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

securitycentermanagement.effectiveEventThreatDetectionCustomModules.*

securitycentermanagement.effectiveEventThreatDetectionCustomModules.get
securitycentermanagement.effectiveEventThreatDetectionCustomModules.list

securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.*

securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get
securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list

securitycentermanagement.eventThreatDetectionCustomModules.*

securitycentermanagement.eventThreatDetectionCustomModules.create
securitycentermanagement.eventThreatDetectionCustomModules.delete
securitycentermanagement.eventThreatDetectionCustomModules.get
securitycentermanagement.eventThreatDetectionCustomModules.list
securitycentermanagement.eventThreatDetectionCustomModules.update
securitycentermanagement.eventThreatDetectionCustomModules.validate

securitycentermanagement.locations.*

securitycentermanagement.locations.get
securitycentermanagement.locations.list

securitycentermanagement.securityHealthAnalyticsCustomModules.*

securitycentermanagement.securityHealthAnalyticsCustomModules.create
securitycentermanagement.securityHealthAnalyticsCustomModules.delete
securitycentermanagement.securityHealthAnalyticsCustomModules.get
securitycentermanagement.securityHealthAnalyticsCustomModules.list
securitycentermanagement.securityHealthAnalyticsCustomModules.simulate
securitycentermanagement.securityHealthAnalyticsCustomModules.test
securitycentermanagement.securityHealthAnalyticsCustomModules.update

Security Center Management Custom Modules Viewer

(roles/securitycentermanagement.customModulesViewer)

Readonly access to Cloud Security Command Center custom modules.

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

securitycentermanagement.effectiveEventThreatDetectionCustomModules.*

securitycentermanagement.effectiveEventThreatDetectionCustomModules.get
securitycentermanagement.effectiveEventThreatDetectionCustomModules.list

securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.*

securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get
securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list

securitycentermanagement.eventThreatDetectionCustomModules.get

securitycentermanagement.eventThreatDetectionCustomModules.list

securitycentermanagement.eventThreatDetectionCustomModules.validate

securitycentermanagement.locations.*

securitycentermanagement.locations.get
securitycentermanagement.locations.list

securitycentermanagement.securityHealthAnalyticsCustomModules.get

securitycentermanagement.securityHealthAnalyticsCustomModules.list

securitycentermanagement.securityHealthAnalyticsCustomModules.simulate

securitycentermanagement.securityHealthAnalyticsCustomModules.test

Security Center Management Custom ETD Modules Editor

(roles/securitycentermanagement.etdCustomModulesEditor)

Full access to manage Cloud Security Command Center ETD custom modules.

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

securitycentermanagement.effectiveEventThreatDetectionCustomModules.*

securitycentermanagement.effectiveEventThreatDetectionCustomModules.get
securitycentermanagement.effectiveEventThreatDetectionCustomModules.list

securitycentermanagement.eventThreatDetectionCustomModules.*

securitycentermanagement.eventThreatDetectionCustomModules.create
securitycentermanagement.eventThreatDetectionCustomModules.delete
securitycentermanagement.eventThreatDetectionCustomModules.get
securitycentermanagement.eventThreatDetectionCustomModules.list
securitycentermanagement.eventThreatDetectionCustomModules.update
securitycentermanagement.eventThreatDetectionCustomModules.validate

securitycentermanagement.locations.*

securitycentermanagement.locations.get
securitycentermanagement.locations.list

Security Center Management ETD Custom Modules Viewer

(roles/securitycentermanagement.etdCustomModulesViewer)

Readonly access to Cloud Security Command Center ETD custom modules.

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

securitycentermanagement.effectiveEventThreatDetectionCustomModules.*

securitycentermanagement.effectiveEventThreatDetectionCustomModules.get
securitycentermanagement.effectiveEventThreatDetectionCustomModules.list

securitycentermanagement.eventThreatDetectionCustomModules.get

securitycentermanagement.eventThreatDetectionCustomModules.list

securitycentermanagement.eventThreatDetectionCustomModules.validate

securitycentermanagement.locations.*

securitycentermanagement.locations.get
securitycentermanagement.locations.list

Security Center Management Services Editor

(roles/securitycentermanagement.securityCenterServicesEditor)

Full access to manage Cloud Security Command Center services configuration.

securitycentermanagement.securityCenterServices.*

securitycentermanagement.securityCenterServices.get
securitycentermanagement.securityCenterServices.list
securitycentermanagement.securityCenterServices.update

Security Center Management Services Viewer

(roles/securitycentermanagement.securityCenterServicesViewer)

Readonly access to Cloud Security Command Center services configuration.

securitycentermanagement.securityCenterServices.get

securitycentermanagement.securityCenterServices.list

Security Center Management Settings Editor

(roles/securitycentermanagement.settingsEditor)

Full access to manage Cloud Security Command Center settings

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

securitycenter.organizationsettings.*

securitycenter.organizationsettings.get
securitycenter.organizationsettings.update

securitycenter.securitycentersettings.*

securitycenter.securitycentersettings.get
securitycenter.securitycentersettings.update

securitycentermanagement.*

securitycentermanagement.billingMetadata.get
securitycentermanagement.effectiveEventThreatDetectionCustomModules.get
securitycentermanagement.effectiveEventThreatDetectionCustomModules.list
securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get
securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list
securitycentermanagement.eventThreatDetectionCustomModules.create
securitycentermanagement.eventThreatDetectionCustomModules.delete
securitycentermanagement.eventThreatDetectionCustomModules.get
securitycentermanagement.eventThreatDetectionCustomModules.list
securitycentermanagement.eventThreatDetectionCustomModules.update
securitycentermanagement.eventThreatDetectionCustomModules.validate
securitycentermanagement.locations.get
securitycentermanagement.locations.list
securitycentermanagement.securityCenterServices.get
securitycentermanagement.securityCenterServices.list
securitycentermanagement.securityCenterServices.update
securitycentermanagement.securityCommandCenter.activate
securitycentermanagement.securityCommandCenter.checkActivationOperation
securitycentermanagement.securityCommandCenter.checkEligibility
securitycentermanagement.securityCommandCenter.checkOnboardingStatus
securitycentermanagement.securityCommandCenter.generateServiceAccounts
securitycentermanagement.securityCommandCenter.get
securitycentermanagement.securityCommandCenter.update
securitycentermanagement.securityHealthAnalyticsCustomModules.create
securitycentermanagement.securityHealthAnalyticsCustomModules.delete
securitycentermanagement.securityHealthAnalyticsCustomModules.get
securitycentermanagement.securityHealthAnalyticsCustomModules.list
securitycentermanagement.securityHealthAnalyticsCustomModules.simulate
securitycentermanagement.securityHealthAnalyticsCustomModules.test
securitycentermanagement.securityHealthAnalyticsCustomModules.update

Security Center Management Settings Viewer

(roles/securitycentermanagement.settingsViewer)

Readonly access to Cloud Security Command Center settings

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

securitycenter.organizationsettings.get

securitycenter.securitycentersettings.get

securitycentermanagement.billingMetadata.get

securitycentermanagement.effectiveEventThreatDetectionCustomModules.*

securitycentermanagement.effectiveEventThreatDetectionCustomModules.get
securitycentermanagement.effectiveEventThreatDetectionCustomModules.list

securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.*

securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get
securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list

securitycentermanagement.eventThreatDetectionCustomModules.get

securitycentermanagement.eventThreatDetectionCustomModules.list

securitycentermanagement.eventThreatDetectionCustomModules.validate

securitycentermanagement.locations.*

securitycentermanagement.locations.get
securitycentermanagement.locations.list

securitycentermanagement.securityCenterServices.get

securitycentermanagement.securityCenterServices.list

securitycentermanagement.securityCommandCenter.checkActivationOperation

securitycentermanagement.securityCommandCenter.checkOnboardingStatus

securitycentermanagement.securityCommandCenter.get

securitycentermanagement.securityHealthAnalyticsCustomModules.get

securitycentermanagement.securityHealthAnalyticsCustomModules.list

securitycentermanagement.securityHealthAnalyticsCustomModules.simulate

securitycentermanagement.securityHealthAnalyticsCustomModules.test

Security Center Management SHA Custom Modules Editor

(roles/securitycentermanagement.shaCustomModulesEditor)

Full access to manage Cloud Security Command Center SHA custom modules.

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.*

securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get
securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list

securitycentermanagement.locations.*

securitycentermanagement.locations.get
securitycentermanagement.locations.list

securitycentermanagement.securityHealthAnalyticsCustomModules.*

securitycentermanagement.securityHealthAnalyticsCustomModules.create
securitycentermanagement.securityHealthAnalyticsCustomModules.delete
securitycentermanagement.securityHealthAnalyticsCustomModules.get
securitycentermanagement.securityHealthAnalyticsCustomModules.list
securitycentermanagement.securityHealthAnalyticsCustomModules.simulate
securitycentermanagement.securityHealthAnalyticsCustomModules.test
securitycentermanagement.securityHealthAnalyticsCustomModules.update

Security Center Management SHA Custom Modules Viewer

(roles/securitycentermanagement.shaCustomModulesViewer)

Readonly access to Cloud Security Command Center SHA custom modules.

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.*

securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get
securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list

securitycentermanagement.locations.*

securitycentermanagement.locations.get
securitycentermanagement.locations.list

securitycentermanagement.securityHealthAnalyticsCustomModules.get

securitycentermanagement.securityHealthAnalyticsCustomModules.list

securitycentermanagement.securityHealthAnalyticsCustomModules.simulate

securitycentermanagement.securityHealthAnalyticsCustomModules.test

Security Center Management Viewer

(roles/securitycentermanagement.viewer)

Readonly access to Cloud Security Command Center services and custom modules configuration.

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

securitycenter.organizationsettings.get

securitycenter.securitycentersettings.get

securitycentermanagement.billingMetadata.get

securitycentermanagement.effectiveEventThreatDetectionCustomModules.*

securitycentermanagement.effectiveEventThreatDetectionCustomModules.get
securitycentermanagement.effectiveEventThreatDetectionCustomModules.list

securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.*

securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get
securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list

securitycentermanagement.eventThreatDetectionCustomModules.get

securitycentermanagement.eventThreatDetectionCustomModules.list

securitycentermanagement.eventThreatDetectionCustomModules.validate

securitycentermanagement.locations.*

securitycentermanagement.locations.get
securitycentermanagement.locations.list

securitycentermanagement.securityCenterServices.get

securitycentermanagement.securityCenterServices.list

securitycentermanagement.securityCommandCenter.checkActivationOperation

securitycentermanagement.securityCommandCenter.checkOnboardingStatus

securitycentermanagement.securityCommandCenter.get

securitycentermanagement.securityHealthAnalyticsCustomModules.get

securitycentermanagement.securityHealthAnalyticsCustomModules.list

securitycentermanagement.securityHealthAnalyticsCustomModules.simulate

securitycentermanagement.securityHealthAnalyticsCustomModules.test

Security Center Management API permissions

Permission	Included in roles
`securitycentermanagement.billingMetadata.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Security Center Admin (`roles/securitycenter.admin`) Security Center Admin Editor (`roles/securitycenter.adminEditor`) Security Center Admin Viewer (`roles/securitycenter.adminViewer`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Settings Viewer (`roles/securitycenter.settingsViewer`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`) Security Center Management Settings Viewer (`roles/securitycentermanagement.settingsViewer`) Security Center Management Viewer (`roles/securitycentermanagement.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Risk Manager Service Agent (`roles/riskmanager.serviceAgent`)
`securitycentermanagement.effectiveEventThreatDetectionCustomModules.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Security Center Admin (`roles/securitycenter.admin`) Security Center Admin Editor (`roles/securitycenter.adminEditor`) Security Center Admin Viewer (`roles/securitycenter.adminViewer`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Settings Viewer (`roles/securitycenter.settingsViewer`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Custom Modules Editor (`roles/securitycentermanagement.customModulesEditor`) Security Center Management Custom Modules Viewer (`roles/securitycentermanagement.customModulesViewer`) Security Center Management Custom ETD Modules Editor (`roles/securitycentermanagement.etdCustomModulesEditor`) Security Center Management ETD Custom Modules Viewer (`roles/securitycentermanagement.etdCustomModulesViewer`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`) Security Center Management Settings Viewer (`roles/securitycentermanagement.settingsViewer`) Security Center Management Viewer (`roles/securitycentermanagement.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Risk Manager Service Agent (`roles/riskmanager.serviceAgent`)
`securitycentermanagement.effectiveEventThreatDetectionCustomModules.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Security Center Admin (`roles/securitycenter.admin`) Security Center Admin Editor (`roles/securitycenter.adminEditor`) Security Center Admin Viewer (`roles/securitycenter.adminViewer`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Settings Viewer (`roles/securitycenter.settingsViewer`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Custom Modules Editor (`roles/securitycentermanagement.customModulesEditor`) Security Center Management Custom Modules Viewer (`roles/securitycentermanagement.customModulesViewer`) Security Center Management Custom ETD Modules Editor (`roles/securitycentermanagement.etdCustomModulesEditor`) Security Center Management ETD Custom Modules Viewer (`roles/securitycentermanagement.etdCustomModulesViewer`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`) Security Center Management Settings Viewer (`roles/securitycentermanagement.settingsViewer`) Security Center Management Viewer (`roles/securitycentermanagement.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Risk Manager Service Agent (`roles/riskmanager.serviceAgent`)
`securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Security Center Admin (`roles/securitycenter.admin`) Security Center Admin Editor (`roles/securitycenter.adminEditor`) Security Center Admin Viewer (`roles/securitycenter.adminViewer`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Settings Viewer (`roles/securitycenter.settingsViewer`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Custom Modules Editor (`roles/securitycentermanagement.customModulesEditor`) Security Center Management Custom Modules Viewer (`roles/securitycentermanagement.customModulesViewer`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`) Security Center Management Settings Viewer (`roles/securitycentermanagement.settingsViewer`) Security Center Management SHA Custom Modules Editor (`roles/securitycentermanagement.shaCustomModulesEditor`) Security Center Management SHA Custom Modules Viewer (`roles/securitycentermanagement.shaCustomModulesViewer`) Security Center Management Viewer (`roles/securitycentermanagement.viewer`) Security Posture Admin (`roles/securityposture.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Risk Manager Service Agent (`roles/riskmanager.serviceAgent`) Security Center Control Service Agent (`roles/securitycenter.controlServiceAgent`) Security Center Service Agent (`roles/securitycenter.serviceAgent`) DSPM Service Agent (`roles/dspm.serviceAgent`)
`securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Security Center Admin (`roles/securitycenter.admin`) Security Center Admin Editor (`roles/securitycenter.adminEditor`) Security Center Admin Viewer (`roles/securitycenter.adminViewer`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Settings Viewer (`roles/securitycenter.settingsViewer`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Custom Modules Editor (`roles/securitycentermanagement.customModulesEditor`) Security Center Management Custom Modules Viewer (`roles/securitycentermanagement.customModulesViewer`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`) Security Center Management Settings Viewer (`roles/securitycentermanagement.settingsViewer`) Security Center Management SHA Custom Modules Editor (`roles/securitycentermanagement.shaCustomModulesEditor`) Security Center Management SHA Custom Modules Viewer (`roles/securitycentermanagement.shaCustomModulesViewer`) Security Center Management Viewer (`roles/securitycentermanagement.viewer`) Security Posture Admin (`roles/securityposture.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Security Center Control Service Agent (`roles/securitycenter.controlServiceAgent`) Security Center Service Agent (`roles/securitycenter.serviceAgent`) Risk Manager Service Agent (`roles/riskmanager.serviceAgent`)
`securitycentermanagement.eventThreatDetectionCustomModules.create`	Owner (`roles/owner`) Editor (`roles/editor`) Security Center Admin (`roles/securitycenter.admin`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Custom Modules Editor (`roles/securitycentermanagement.customModulesEditor`) Security Center Management Custom ETD Modules Editor (`roles/securitycentermanagement.etdCustomModulesEditor`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`)
`securitycentermanagement.eventThreatDetectionCustomModules.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Security Center Admin (`roles/securitycenter.admin`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Custom Modules Editor (`roles/securitycentermanagement.customModulesEditor`) Security Center Management Custom ETD Modules Editor (`roles/securitycentermanagement.etdCustomModulesEditor`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`)
`securitycentermanagement.eventThreatDetectionCustomModules.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Security Center Admin (`roles/securitycenter.admin`) Security Center Admin Editor (`roles/securitycenter.adminEditor`) Security Center Admin Viewer (`roles/securitycenter.adminViewer`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Settings Viewer (`roles/securitycenter.settingsViewer`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Custom Modules Editor (`roles/securitycentermanagement.customModulesEditor`) Security Center Management Custom Modules Viewer (`roles/securitycentermanagement.customModulesViewer`) Security Center Management Custom ETD Modules Editor (`roles/securitycentermanagement.etdCustomModulesEditor`) Security Center Management ETD Custom Modules Viewer (`roles/securitycentermanagement.etdCustomModulesViewer`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`) Security Center Management Settings Viewer (`roles/securitycentermanagement.settingsViewer`) Security Center Management Viewer (`roles/securitycentermanagement.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Risk Manager Service Agent (`roles/riskmanager.serviceAgent`)
`securitycentermanagement.eventThreatDetectionCustomModules.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Security Center Admin (`roles/securitycenter.admin`) Security Center Admin Editor (`roles/securitycenter.adminEditor`) Security Center Admin Viewer (`roles/securitycenter.adminViewer`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Settings Viewer (`roles/securitycenter.settingsViewer`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Custom Modules Editor (`roles/securitycentermanagement.customModulesEditor`) Security Center Management Custom Modules Viewer (`roles/securitycentermanagement.customModulesViewer`) Security Center Management Custom ETD Modules Editor (`roles/securitycentermanagement.etdCustomModulesEditor`) Security Center Management ETD Custom Modules Viewer (`roles/securitycentermanagement.etdCustomModulesViewer`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`) Security Center Management Settings Viewer (`roles/securitycentermanagement.settingsViewer`) Security Center Management Viewer (`roles/securitycentermanagement.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Risk Manager Service Agent (`roles/riskmanager.serviceAgent`)
`securitycentermanagement.eventThreatDetectionCustomModules.update`	Owner (`roles/owner`) Editor (`roles/editor`) Security Center Admin (`roles/securitycenter.admin`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Custom Modules Editor (`roles/securitycentermanagement.customModulesEditor`) Security Center Management Custom ETD Modules Editor (`roles/securitycentermanagement.etdCustomModulesEditor`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`)
`securitycentermanagement.eventThreatDetectionCustomModules.validate`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Security Center Admin (`roles/securitycenter.admin`) Security Center Admin Editor (`roles/securitycenter.adminEditor`) Security Center Admin Viewer (`roles/securitycenter.adminViewer`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Settings Viewer (`roles/securitycenter.settingsViewer`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Custom Modules Editor (`roles/securitycentermanagement.customModulesEditor`) Security Center Management Custom Modules Viewer (`roles/securitycentermanagement.customModulesViewer`) Security Center Management Custom ETD Modules Editor (`roles/securitycentermanagement.etdCustomModulesEditor`) Security Center Management ETD Custom Modules Viewer (`roles/securitycentermanagement.etdCustomModulesViewer`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`) Security Center Management Settings Viewer (`roles/securitycentermanagement.settingsViewer`) Security Center Management Viewer (`roles/securitycentermanagement.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Risk Manager Service Agent (`roles/riskmanager.serviceAgent`)
`securitycentermanagement.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Security Center Admin (`roles/securitycenter.admin`) Security Center Admin Editor (`roles/securitycenter.adminEditor`) Security Center Admin Viewer (`roles/securitycenter.adminViewer`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Settings Viewer (`roles/securitycenter.settingsViewer`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Custom Modules Editor (`roles/securitycentermanagement.customModulesEditor`) Security Center Management Custom Modules Viewer (`roles/securitycentermanagement.customModulesViewer`) Security Center Management Custom ETD Modules Editor (`roles/securitycentermanagement.etdCustomModulesEditor`) Security Center Management ETD Custom Modules Viewer (`roles/securitycentermanagement.etdCustomModulesViewer`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`) Security Center Management Settings Viewer (`roles/securitycentermanagement.settingsViewer`) Security Center Management SHA Custom Modules Editor (`roles/securitycentermanagement.shaCustomModulesEditor`) Security Center Management SHA Custom Modules Viewer (`roles/securitycentermanagement.shaCustomModulesViewer`) Security Center Management Viewer (`roles/securitycentermanagement.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Risk Manager Service Agent (`roles/riskmanager.serviceAgent`)
`securitycentermanagement.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Security Center Admin (`roles/securitycenter.admin`) Security Center Admin Editor (`roles/securitycenter.adminEditor`) Security Center Admin Viewer (`roles/securitycenter.adminViewer`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Settings Viewer (`roles/securitycenter.settingsViewer`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Custom Modules Editor (`roles/securitycentermanagement.customModulesEditor`) Security Center Management Custom Modules Viewer (`roles/securitycentermanagement.customModulesViewer`) Security Center Management Custom ETD Modules Editor (`roles/securitycentermanagement.etdCustomModulesEditor`) Security Center Management ETD Custom Modules Viewer (`roles/securitycentermanagement.etdCustomModulesViewer`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`) Security Center Management Settings Viewer (`roles/securitycentermanagement.settingsViewer`) Security Center Management SHA Custom Modules Editor (`roles/securitycentermanagement.shaCustomModulesEditor`) Security Center Management SHA Custom Modules Viewer (`roles/securitycentermanagement.shaCustomModulesViewer`) Security Center Management Viewer (`roles/securitycentermanagement.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Risk Manager Service Agent (`roles/riskmanager.serviceAgent`)
`securitycentermanagement.securityCenterServices.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Security Center Admin (`roles/securitycenter.admin`) Security Center Admin Editor (`roles/securitycenter.adminEditor`) Security Center Admin Viewer (`roles/securitycenter.adminViewer`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Settings Viewer (`roles/securitycenter.settingsViewer`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Services Editor (`roles/securitycentermanagement.securityCenterServicesEditor`) Security Center Management Services Viewer (`roles/securitycentermanagement.securityCenterServicesViewer`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`) Security Center Management Settings Viewer (`roles/securitycentermanagement.settingsViewer`) Security Center Management Viewer (`roles/securitycentermanagement.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. DSPM Service Agent (`roles/dspm.serviceAgent`) Risk Manager Service Agent (`roles/riskmanager.serviceAgent`) Cloud Security Compliance Service Agent (`roles/cloudsecuritycompliance.serviceAgent`)
`securitycentermanagement.securityCenterServices.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Security Center Admin (`roles/securitycenter.admin`) Security Center Admin Editor (`roles/securitycenter.adminEditor`) Security Center Admin Viewer (`roles/securitycenter.adminViewer`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Settings Viewer (`roles/securitycenter.settingsViewer`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Services Editor (`roles/securitycentermanagement.securityCenterServicesEditor`) Security Center Management Services Viewer (`roles/securitycentermanagement.securityCenterServicesViewer`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`) Security Center Management Settings Viewer (`roles/securitycentermanagement.settingsViewer`) Security Center Management Viewer (`roles/securitycentermanagement.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Risk Manager Service Agent (`roles/riskmanager.serviceAgent`)
`securitycentermanagement.securityCenterServices.update`	Owner (`roles/owner`) Security Center Admin (`roles/securitycenter.admin`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Services Editor (`roles/securitycentermanagement.securityCenterServicesEditor`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. DSPM Service Agent (`roles/dspm.serviceAgent`) Cloud Security Compliance Service Agent (`roles/cloudsecuritycompliance.serviceAgent`)
`securitycentermanagement.securityCommandCenter.activate`	Owner (`roles/owner`) Editor (`roles/editor`) IAM Recommender Admin (`roles/recommender.iamAdmin`) Security Center Admin (`roles/securitycenter.admin`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`)
`securitycentermanagement.securityCommandCenter.checkActivationOperation`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) IAM Recommender Admin (`roles/recommender.iamAdmin`) Security Center Admin (`roles/securitycenter.admin`) Security Center Admin Editor (`roles/securitycenter.adminEditor`) Security Center Admin Viewer (`roles/securitycenter.adminViewer`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Settings Viewer (`roles/securitycenter.settingsViewer`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`) Security Center Management Settings Viewer (`roles/securitycentermanagement.settingsViewer`) Security Center Management Viewer (`roles/securitycentermanagement.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Risk Manager Service Agent (`roles/riskmanager.serviceAgent`)
`securitycentermanagement.securityCommandCenter.checkEligibility`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) IAM Recommender Admin (`roles/recommender.iamAdmin`) Security Center Admin (`roles/securitycenter.admin`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`)
`securitycentermanagement.securityCommandCenter.checkOnboardingStatus`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Security Center Admin (`roles/securitycenter.admin`) Security Center Admin Editor (`roles/securitycenter.adminEditor`) Security Center Admin Viewer (`roles/securitycenter.adminViewer`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Settings Viewer (`roles/securitycenter.settingsViewer`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`) Security Center Management Settings Viewer (`roles/securitycentermanagement.settingsViewer`) Security Center Management Viewer (`roles/securitycentermanagement.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Risk Manager Service Agent (`roles/riskmanager.serviceAgent`)
`securitycentermanagement.securityCommandCenter.generateServiceAccounts`	Owner (`roles/owner`) Editor (`roles/editor`) Security Center Admin (`roles/securitycenter.admin`) Security Center Admin Editor (`roles/securitycenter.adminEditor`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`)
`securitycentermanagement.securityCommandCenter.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Security Center Admin (`roles/securitycenter.admin`) Security Center Admin Editor (`roles/securitycenter.adminEditor`) Security Center Admin Viewer (`roles/securitycenter.adminViewer`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Settings Viewer (`roles/securitycenter.settingsViewer`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`) Security Center Management Settings Viewer (`roles/securitycentermanagement.settingsViewer`) Security Center Management Viewer (`roles/securitycentermanagement.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Risk Manager Service Agent (`roles/riskmanager.serviceAgent`)
`securitycentermanagement.securityCommandCenter.update`	Owner (`roles/owner`) Editor (`roles/editor`) Security Center Admin (`roles/securitycenter.admin`) Security Center Admin Editor (`roles/securitycenter.adminEditor`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`)
`securitycentermanagement.securityHealthAnalyticsCustomModules.create`	Owner (`roles/owner`) Editor (`roles/editor`) Security Center Admin (`roles/securitycenter.admin`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Custom Modules Editor (`roles/securitycentermanagement.customModulesEditor`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`) Security Center Management SHA Custom Modules Editor (`roles/securitycentermanagement.shaCustomModulesEditor`) Security Posture Admin (`roles/securityposture.admin`) Security Posture Deployer (`roles/securityposture.postureDeployer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Security Center Control Service Agent (`roles/securitycenter.controlServiceAgent`) Security Center Service Agent (`roles/securitycenter.serviceAgent`) DSPM Service Agent (`roles/dspm.serviceAgent`)
`securitycentermanagement.securityHealthAnalyticsCustomModules.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Security Center Admin (`roles/securitycenter.admin`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Custom Modules Editor (`roles/securitycentermanagement.customModulesEditor`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`) Security Center Management SHA Custom Modules Editor (`roles/securitycentermanagement.shaCustomModulesEditor`) Security Posture Admin (`roles/securityposture.admin`) Security Posture Deployer (`roles/securityposture.postureDeployer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Security Center Service Agent (`roles/securitycenter.serviceAgent`) Security Center Control Service Agent (`roles/securitycenter.controlServiceAgent`)
`securitycentermanagement.securityHealthAnalyticsCustomModules.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Security Center Admin (`roles/securitycenter.admin`) Security Center Admin Editor (`roles/securitycenter.adminEditor`) Security Center Admin Viewer (`roles/securitycenter.adminViewer`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Settings Viewer (`roles/securitycenter.settingsViewer`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Custom Modules Editor (`roles/securitycentermanagement.customModulesEditor`) Security Center Management Custom Modules Viewer (`roles/securitycentermanagement.customModulesViewer`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`) Security Center Management Settings Viewer (`roles/securitycentermanagement.settingsViewer`) Security Center Management SHA Custom Modules Editor (`roles/securitycentermanagement.shaCustomModulesEditor`) Security Center Management SHA Custom Modules Viewer (`roles/securitycentermanagement.shaCustomModulesViewer`) Security Center Management Viewer (`roles/securitycentermanagement.viewer`) Security Posture Admin (`roles/securityposture.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Risk Manager Service Agent (`roles/riskmanager.serviceAgent`) Security Center Control Service Agent (`roles/securitycenter.controlServiceAgent`) Security Center Service Agent (`roles/securitycenter.serviceAgent`) DSPM Service Agent (`roles/dspm.serviceAgent`)
`securitycentermanagement.securityHealthAnalyticsCustomModules.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Security Center Admin (`roles/securitycenter.admin`) Security Center Admin Editor (`roles/securitycenter.adminEditor`) Security Center Admin Viewer (`roles/securitycenter.adminViewer`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Settings Viewer (`roles/securitycenter.settingsViewer`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Custom Modules Editor (`roles/securitycentermanagement.customModulesEditor`) Security Center Management Custom Modules Viewer (`roles/securitycentermanagement.customModulesViewer`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`) Security Center Management Settings Viewer (`roles/securitycentermanagement.settingsViewer`) Security Center Management SHA Custom Modules Editor (`roles/securitycentermanagement.shaCustomModulesEditor`) Security Center Management SHA Custom Modules Viewer (`roles/securitycentermanagement.shaCustomModulesViewer`) Security Center Management Viewer (`roles/securitycentermanagement.viewer`) Security Posture Admin (`roles/securityposture.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Security Center Control Service Agent (`roles/securitycenter.controlServiceAgent`) Security Center Service Agent (`roles/securitycenter.serviceAgent`) Risk Manager Service Agent (`roles/riskmanager.serviceAgent`)
`securitycentermanagement.securityHealthAnalyticsCustomModules.simulate`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Security Center Admin (`roles/securitycenter.admin`) Security Center Admin Editor (`roles/securitycenter.adminEditor`) Security Center Admin Viewer (`roles/securitycenter.adminViewer`) Security Health Analytics Custom Modules Tester (`roles/securitycenter.securityHealthAnalyticsCustomModulesTester`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Settings Viewer (`roles/securitycenter.settingsViewer`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Custom Modules Editor (`roles/securitycentermanagement.customModulesEditor`) Security Center Management Custom Modules Viewer (`roles/securitycentermanagement.customModulesViewer`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`) Security Center Management Settings Viewer (`roles/securitycentermanagement.settingsViewer`) Security Center Management SHA Custom Modules Editor (`roles/securitycentermanagement.shaCustomModulesEditor`) Security Center Management SHA Custom Modules Viewer (`roles/securitycentermanagement.shaCustomModulesViewer`) Security Center Management Viewer (`roles/securitycentermanagement.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Security Center Control Service Agent (`roles/securitycenter.controlServiceAgent`) Security Center Service Agent (`roles/securitycenter.serviceAgent`) Risk Manager Service Agent (`roles/riskmanager.serviceAgent`)
`securitycentermanagement.securityHealthAnalyticsCustomModules.test`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Security Center Admin (`roles/securitycenter.admin`) Security Center Admin Editor (`roles/securitycenter.adminEditor`) Security Center Admin Viewer (`roles/securitycenter.adminViewer`) Security Health Analytics Custom Modules Tester (`roles/securitycenter.securityHealthAnalyticsCustomModulesTester`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Settings Viewer (`roles/securitycenter.settingsViewer`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Custom Modules Editor (`roles/securitycentermanagement.customModulesEditor`) Security Center Management Custom Modules Viewer (`roles/securitycentermanagement.customModulesViewer`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`) Security Center Management Settings Viewer (`roles/securitycentermanagement.settingsViewer`) Security Center Management SHA Custom Modules Editor (`roles/securitycentermanagement.shaCustomModulesEditor`) Security Center Management SHA Custom Modules Viewer (`roles/securitycentermanagement.shaCustomModulesViewer`) Security Center Management Viewer (`roles/securitycentermanagement.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Risk Manager Service Agent (`roles/riskmanager.serviceAgent`)
`securitycentermanagement.securityHealthAnalyticsCustomModules.update`	Owner (`roles/owner`) Editor (`roles/editor`) Security Center Admin (`roles/securitycenter.admin`) Security Center Settings Admin (`roles/securitycenter.settingsAdmin`) Security Center Settings Editor (`roles/securitycenter.settingsEditor`) Security Center Management Admin (`roles/securitycentermanagement.admin`) Security Center Management Custom Modules Editor (`roles/securitycentermanagement.customModulesEditor`) Security Center Management Settings Editor (`roles/securitycentermanagement.settingsEditor`) Security Center Management SHA Custom Modules Editor (`roles/securitycentermanagement.shaCustomModulesEditor`) Security Posture Admin (`roles/securityposture.admin`) Security Posture Deployer (`roles/securityposture.postureDeployer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Security Center Service Agent (`roles/securitycenter.serviceAgent`) Security Center Control Service Agent (`roles/securitycenter.controlServiceAgent`)

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-02-18 UTC.

Movatterモバイル変換

Security Center Management API roles and permissions Stay organized with collections Save and categorize content based on your preferences.