Stay organized with collections
Save and categorize content based on your preferences.
The Artifact Registry Service Agent acts on behalf of
Artifact Registry when interacting with Google Cloud services.
After you create the first Artifact Registry repository in a
Google Cloud project, the Artifact Registry Service Agent
is automatically created. The service agent identifier is:
Replace PROJECT-ID with the Google Cloud project ID.
The Artifact Registry Service Agent is granted the Artifact Registry
Service Agent role (roles/artifactregistry.serviceAgent) for resources in the
project. To enforce the security principle of least privilege, the role only
has the minimum required permissions:
Publish Pub/Sub topics: pubsub.topics.publish
Download artifacts from Artifact Registry repositories:
artifactregistry.repositories.downloadArtifacts
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-04 UTC."],[[["The Artifact Registry Service Agent operates on behalf of Artifact Registry when interacting with other Google Cloud services."],["This service agent is automatically generated upon the creation of the first Artifact Registry repository within a Google Cloud project."],["The service agent's identifier is `service-PROJECT-NUMBER@gcp-sa-artifactregistry.iam.gserviceaccount.com`, where PROJECT-NUMBER represents the project number."],["The service agent is granted the Artifact Registry Service Agent role, which includes permissions for publishing Pub/Sub topics, downloading artifacts, and deleting artifacts."],["You can manually create the service agent in projects without any repositories using the provided `gcloud` command."]]],[]]
