Cloud Optimization roles and permissions

This page lists the IAM roles and permissions for Cloud Optimization. Tosearch through all roles and permissions, see therole andpermission index.

Cloud Optimization roles

Role	Permissions
Cloud Optimization AI Admin (`roles/cloudoptimization.admin`) Administrator of Cloud Optimization AI resources	`cloudoptimization.*` `cloudoptimization.operations.create` `cloudoptimization.operations.get`
Cloud Optimization AI Editor (`roles/cloudoptimization.editor`) Editor of Cloud Optimization AI resources	`cloudoptimization.*` `cloudoptimization.operations.create` `cloudoptimization.operations.get`
Cloud Optimization Service Agent (`roles/cloudoptimization.serviceAgent`) Grants Cloud Optimization Service Account access to read and write data in the user project. Warning: Do not grant service agent roles to any principals except service agents.	`storage.buckets.get` `storage.objects.create` `storage.objects.delete` `storage.objects.get` `storage.objects.list` `storage.objects.update`
Cloud Optimization AI Viewer (`roles/cloudoptimization.viewer`) Viewer of Cloud Optimization AI resources	`cloudoptimization.operations.get`

Permission Included in roles

Permission	Included in roles
`cloudoptimization.operations.create`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Optimization AI Admin (`roles/cloudoptimization.admin`) Cloud Optimization AI Editor (`roles/cloudoptimization.editor`)
`cloudoptimization.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Optimization AI Admin (`roles/cloudoptimization.admin`) Cloud Optimization AI Editor (`roles/cloudoptimization.editor`) Cloud Optimization AI Viewer (`roles/cloudoptimization.viewer`) Support User (`roles/iam.supportUser`)

Owner (roles/owner)

Editor (roles/editor)

Cloud Optimization AI Admin (roles/cloudoptimization.admin)

Cloud Optimization AI Editor (roles/cloudoptimization.editor)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud Optimization AI Admin (roles/cloudoptimization.admin)

Cloud Optimization AI Editor (roles/cloudoptimization.editor)

Cloud Optimization AI Viewer (roles/cloudoptimization.viewer)

Support User (roles/iam.supportUser)

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-02-19 UTC.