Cloud Source Repositories roles and permissions

This page lists the IAM roles and permissions for Cloud Source Repositories. Tosearch through all roles and permissions, see therole andpermission index.

Cloud Source Repositories roles

RolePermissions

Source Repository Administrator

(roles/source.admin)

Provides permissions to create, update, delete, list, clone, fetch, andbrowse repositories. Also provides permissions to read and change IAMpolicies.

Lowest-level resources where you can grant this role:

  • Repository

source.*

  • source.repos.create
  • source.repos.delete
  • source.repos.get
  • source.repos.getIamPolicy
  • source.repos.getProjectConfig
  • source.repos.list
  • source.repos.setIamPolicy
  • source.repos.update
  • source.repos.updateProjectConfig
  • source.repos.updateRepoConfig

Source Repository Reader

(roles/source.reader)

Provides permissions to list, clone, fetch, and browse repositories.

Lowest-level resources where you can grant this role:

  • Repository

source.repos.get

source.repos.list

Source Repository Writer

(roles/source.writer)

Provides permissions to list, clone, fetch, browse, and updaterepositories.

Lowest-level resources where you can grant this role:

  • Repository

source.repos.get

source.repos.list

source.repos.update

Cloud Source Repositories Service Agent

(roles/sourcerepo.serviceAgent)

Allow Cloud Source Repositories to integrate with other Cloud services.

Warning: Do not grant service agent roles to any principals exceptservice agents.

iam.serviceAccounts.getAccessToken

pubsub.topics.publish

Cloud Source Repositories permissions

PermissionIncluded in roles

source.repos.create

Owner (roles/owner)

Dev Ops (roles/iam.devOps)

Source Repository Administrator (roles/source.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

source.repos.delete

Owner (roles/owner)

Dev Ops (roles/iam.devOps)

Source Repository Administrator (roles/source.admin)

source.repos.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Composer Worker (roles/composer.worker)

Dev Ops (roles/iam.devOps)

Support User (roles/iam.supportUser)

Cloud Run Builder (roles/run.builder)

Source Repository Administrator (roles/source.admin)

Source Repository Reader (roles/source.reader)

Source Repository Writer (roles/source.writer)

Telco Automation Admin (roles/telcoautomation.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

source.repos.getIamPolicy

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Dev Ops (roles/iam.devOps)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Source Repository Administrator (roles/source.admin)

source.repos.getProjectConfig

Owner (roles/owner)

Dev Ops (roles/iam.devOps)

Source Repository Administrator (roles/source.admin)

source.repos.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud Build Service Account (roles/cloudbuild.builds.builder)

Composer Worker (roles/composer.worker)

Dev Ops (roles/iam.devOps)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Source Repository Administrator (roles/source.admin)

Source Repository Reader (roles/source.reader)

Source Repository Writer (roles/source.writer)

Telco Automation Admin (roles/telcoautomation.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

source.repos.setIamPolicy

Owner (roles/owner)

Dev Ops (roles/iam.devOps)

Security Admin (roles/iam.securityAdmin)

Source Repository Administrator (roles/source.admin)

source.repos.update

Owner (roles/owner)

Editor (roles/editor)

Dev Ops (roles/iam.devOps)

Source Repository Administrator (roles/source.admin)

Source Repository Writer (roles/source.writer)

source.repos.updateProjectConfig

Owner (roles/owner)

Dev Ops (roles/iam.devOps)

Source Repository Administrator (roles/source.admin)

source.repos.updateRepoConfig

Owner (roles/owner)

Dev Ops (roles/iam.devOps)

Source Repository Administrator (roles/source.admin)

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-12-15 UTC.