Service Security Insights roles and permissions

This page lists the IAM roles and permissions for Service Security Insights. Tosearch through all roles and permissions, see therole andpermission index.

Service Security Insights roles

RolePermissions

Security Insights ViewerBeta

(roles/servicesecurityinsights.securityInsightsViewer)

Read-only access to Security Insights resources

servicesecurityinsights.*

  • servicesecurityinsights.clusterSecurityInfo.get
  • servicesecurityinsights.clusterSecurityInfo.list
  • servicesecurityinsights.policies.get
  • servicesecurityinsights.projectStates.get
  • servicesecurityinsights.securityInfo.list
  • servicesecurityinsights.securityViews.get
  • servicesecurityinsights.workloadPolicies.list
  • servicesecurityinsights.workloadSecurityInfo.get

Service Security Insights permissions

PermissionIncluded in roles

servicesecurityinsights.clusterSecurityInfo.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Security Insights Viewer (roles/servicesecurityinsights.securityInsightsViewer)

servicesecurityinsights.clusterSecurityInfo.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Security Insights Viewer (roles/servicesecurityinsights.securityInsightsViewer)

servicesecurityinsights.policies.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Security Insights Viewer (roles/servicesecurityinsights.securityInsightsViewer)

servicesecurityinsights.projectStates.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Security Insights Viewer (roles/servicesecurityinsights.securityInsightsViewer)

servicesecurityinsights.securityInfo.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Security Insights Viewer (roles/servicesecurityinsights.securityInsightsViewer)

servicesecurityinsights.securityViews.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Security Insights Viewer (roles/servicesecurityinsights.securityInsightsViewer)

servicesecurityinsights.workloadPolicies.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Security Insights Viewer (roles/servicesecurityinsights.securityInsightsViewer)

servicesecurityinsights.workloadSecurityInfo.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Security Insights Viewer (roles/servicesecurityinsights.securityInsightsViewer)

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-12-15 UTC.