Cloud Run IAM permissions

The following tables list theIdentity and Access Management (IAM)permissions that are associated with Cloud Run.

Configurations

PermissionDescription
run.configurations.getView configurations, excluding IAM policies.
run.configurations.listList configurations.

Domain mappings

There are no IAM permissions for domain mappings. Viewing, listing, creating anddeleting domain mappings requires project-level permissions.

For a reference of which IAM permissions are contained in each IAM role, seeCloud Run IAM Roles.

Jobs

Note: Beginning onSeptember 16, 2024, the permission for canceling jobexecutions will change fromrun.jobs.run torun.executions.cancel.
PermissionDescription
run.jobs.createCreate new job.
run.jobs.deleteDelete job.
run.jobs.getView jobs, excluding IAM policies.
run.jobs.getIamPolicyGet an IAM policy.
run.jobs.listList jobs.
run.jobs.runInvoke (execute) jobs and cancel job executions.
run.jobs.runWithOverridesOverride job configuration for a job execution.
run.jobs.setIamPolicySet an IAM policy.
run.jobs.updateUpdate existing job.
run.executions.deleteDelete job executions.
run.executions.getGet job executions.
run.executions.listList job executions.
run.tasks.getGet job execution tasks.
run.tasks.listList job execution tasks.

Locations

PermissionDescription
run.locations.getGet location information.
run.locations.listList all locations.

Routes

PermissionDescription
run.routes.getView routes, excluding IAM policies.
run.routes.listList routes.
run.routes.invokeInvoke a route.

Services

PermissionDescription
run.services.getView services, excluding IAM policies.
run.services.listList services.
run.services.createCreate new services.
run.services.updateUpdate existing services.
run.services.deleteDelete services.
run.services.getIamPolicyGet an IAM policy.
run.services.setIamPolicySet an IAM policy.

Service revisions

PermissionDescription
run.revisions.getView revisions, excluding IAM policies.
run.revisions.listList revisions.
run.revisions.deleteDelete revisions.

View project

PermissionDescription
resourcemanager.projects.getGet project.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-02-19 UTC.