SaaS Service Management roles and permissions

This page lists the IAM roles and permissions for SaaS Service Management. Tosearch through all roles and permissions, see therole andpermission index.

SaaS Service Management roles

RolePermissions

SaaS Service Management AdminBeta

(roles/saasservicemgmt.admin)

Provide full access to all SaaS Service Management resources.

resourcemanager.projects.get

resourcemanager.projects.list

saasservicemgmt.*

  • saasservicemgmt.locations.get
  • saasservicemgmt.locations.list
  • saasservicemgmt.operations.cancel
  • saasservicemgmt.operations.delete
  • saasservicemgmt.operations.get
  • saasservicemgmt.operations.list
  • saasservicemgmt.releases.create
  • saasservicemgmt.releases.delete
  • saasservicemgmt.releases.get
  • saasservicemgmt.releases.list
  • saasservicemgmt.releases.update
  • saasservicemgmt.rolloutKinds.create
  • saasservicemgmt.rolloutKinds.delete
  • saasservicemgmt.rolloutKinds.get
  • saasservicemgmt.rolloutKinds.list
  • saasservicemgmt.rolloutKinds.update
  • saasservicemgmt.rollouts.create
  • saasservicemgmt.rollouts.delete
  • saasservicemgmt.rollouts.get
  • saasservicemgmt.rollouts.list
  • saasservicemgmt.rollouts.update
  • saasservicemgmt.saas.create
  • saasservicemgmt.saas.delete
  • saasservicemgmt.saas.get
  • saasservicemgmt.saas.list
  • saasservicemgmt.saas.update
  • saasservicemgmt.tenants.create
  • saasservicemgmt.tenants.delete
  • saasservicemgmt.tenants.get
  • saasservicemgmt.tenants.list
  • saasservicemgmt.tenants.update
  • saasservicemgmt.unitKinds.create
  • saasservicemgmt.unitKinds.delete
  • saasservicemgmt.unitKinds.get
  • saasservicemgmt.unitKinds.list
  • saasservicemgmt.unitKinds.update
  • saasservicemgmt.unitOperations.create
  • saasservicemgmt.unitOperations.delete
  • saasservicemgmt.unitOperations.get
  • saasservicemgmt.unitOperations.list
  • saasservicemgmt.unitOperations.update
  • saasservicemgmt.units.create
  • saasservicemgmt.units.delete
  • saasservicemgmt.units.get
  • saasservicemgmt.units.list
  • saasservicemgmt.units.update

SaaS Service Management Service Agent

(roles/saasservicemgmt.serviceAgent)

Service Agent used by SaaS Service Management.

Warning: Do not grant service agent roles to any principals exceptservice agents.

artifactregistry.repositories.downloadArtifacts

config.deployments.create

config.deployments.delete

config.deployments.get

config.deployments.update

config.operations.get

config.revisions.get

saasservicemgmt.locations.*

  • saasservicemgmt.locations.get
  • saasservicemgmt.locations.list

saasservicemgmt.operations.get

saasservicemgmt.operations.list

saasservicemgmt.releases.create

saasservicemgmt.releases.get

saasservicemgmt.releases.list

saasservicemgmt.releases.update

saasservicemgmt.rolloutKinds.*

  • saasservicemgmt.rolloutKinds.create
  • saasservicemgmt.rolloutKinds.delete
  • saasservicemgmt.rolloutKinds.get
  • saasservicemgmt.rolloutKinds.list
  • saasservicemgmt.rolloutKinds.update

saasservicemgmt.rollouts.*

  • saasservicemgmt.rollouts.create
  • saasservicemgmt.rollouts.delete
  • saasservicemgmt.rollouts.get
  • saasservicemgmt.rollouts.list
  • saasservicemgmt.rollouts.update

saasservicemgmt.saas.create

saasservicemgmt.saas.get

saasservicemgmt.saas.list

saasservicemgmt.saas.update

saasservicemgmt.tenants.*

  • saasservicemgmt.tenants.create
  • saasservicemgmt.tenants.delete
  • saasservicemgmt.tenants.get
  • saasservicemgmt.tenants.list
  • saasservicemgmt.tenants.update

saasservicemgmt.unitKinds.create

saasservicemgmt.unitKinds.get

saasservicemgmt.unitKinds.list

saasservicemgmt.unitKinds.update

saasservicemgmt.unitOperations.*

  • saasservicemgmt.unitOperations.create
  • saasservicemgmt.unitOperations.delete
  • saasservicemgmt.unitOperations.get
  • saasservicemgmt.unitOperations.list
  • saasservicemgmt.unitOperations.update

saasservicemgmt.units.*

  • saasservicemgmt.units.create
  • saasservicemgmt.units.delete
  • saasservicemgmt.units.get
  • saasservicemgmt.units.list
  • saasservicemgmt.units.update

storage.buckets.create

storage.buckets.delete

storage.buckets.get

storage.buckets.getIamPolicy

storage.buckets.setIamPolicy

storage.objects.create

storage.objects.delete

storage.objects.get

storage.objects.list

SaaS Service Management ViewerBeta

(roles/saasservicemgmt.viewer)

Provides read-only access to SaaS Service Management resources.

resourcemanager.projects.get

resourcemanager.projects.list

saasservicemgmt.locations.*

  • saasservicemgmt.locations.get
  • saasservicemgmt.locations.list

saasservicemgmt.operations.get

saasservicemgmt.operations.list

saasservicemgmt.releases.get

saasservicemgmt.releases.list

saasservicemgmt.rolloutKinds.get

saasservicemgmt.rolloutKinds.list

saasservicemgmt.rollouts.get

saasservicemgmt.rollouts.list

saasservicemgmt.saas.get

saasservicemgmt.saas.list

saasservicemgmt.tenants.get

saasservicemgmt.tenants.list

saasservicemgmt.unitKinds.get

saasservicemgmt.unitKinds.list

saasservicemgmt.unitOperations.get

saasservicemgmt.unitOperations.list

saasservicemgmt.units.get

saasservicemgmt.units.list

SaaS Service Management permissions

PermissionIncluded in roles

saasservicemgmt.locations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

SaaS Service Management Viewer (roles/saasservicemgmt.viewer)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.locations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

SaaS Service Management Viewer (roles/saasservicemgmt.viewer)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.operations.cancel

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

saasservicemgmt.operations.delete

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

saasservicemgmt.operations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

SaaS Service Management Viewer (roles/saasservicemgmt.viewer)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.operations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

SaaS Service Management Viewer (roles/saasservicemgmt.viewer)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.releases.create

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.releases.delete

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

saasservicemgmt.releases.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

SaaS Service Management Viewer (roles/saasservicemgmt.viewer)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.releases.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

SaaS Service Management Viewer (roles/saasservicemgmt.viewer)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.releases.update

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.rolloutKinds.create

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.rolloutKinds.delete

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.rolloutKinds.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

SaaS Service Management Viewer (roles/saasservicemgmt.viewer)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.rolloutKinds.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

SaaS Service Management Viewer (roles/saasservicemgmt.viewer)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.rolloutKinds.update

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.rollouts.create

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.rollouts.delete

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.rollouts.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

SaaS Service Management Viewer (roles/saasservicemgmt.viewer)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.rollouts.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

SaaS Service Management Viewer (roles/saasservicemgmt.viewer)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.rollouts.update

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.saas.create

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.saas.delete

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

saasservicemgmt.saas.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

SaaS Service Management Viewer (roles/saasservicemgmt.viewer)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.saas.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

SaaS Service Management Viewer (roles/saasservicemgmt.viewer)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.saas.update

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.tenants.create

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.tenants.delete

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.tenants.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

SaaS Service Management Viewer (roles/saasservicemgmt.viewer)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.tenants.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

SaaS Service Management Viewer (roles/saasservicemgmt.viewer)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.tenants.update

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.unitKinds.create

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.unitKinds.delete

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

saasservicemgmt.unitKinds.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

SaaS Service Management Viewer (roles/saasservicemgmt.viewer)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.unitKinds.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

SaaS Service Management Viewer (roles/saasservicemgmt.viewer)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.unitKinds.update

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.unitOperations.create

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.unitOperations.delete

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.unitOperations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

SaaS Service Management Viewer (roles/saasservicemgmt.viewer)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.unitOperations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

SaaS Service Management Viewer (roles/saasservicemgmt.viewer)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.unitOperations.update

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.units.create

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.units.delete

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.units.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

SaaS Service Management Viewer (roles/saasservicemgmt.viewer)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.units.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

SaaS Service Management Viewer (roles/saasservicemgmt.viewer)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

saasservicemgmt.units.update

Owner (roles/owner)

Editor (roles/editor)

SaaS Service Management Admin (roles/saasservicemgmt.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-02-19 UTC.