Apigee Registry roles and permissions

This page lists the IAM roles and permissions for Apigee Registry. To search through all roles and permissions, see the role and permission index.

Apigee Registry roles

Role Permissions

Role	Permissions
Cloud Apigee Registry Admin ^Beta (`roles/apigeeregistry.admin`) Full access to Cloud Apigee Registry Registry and Runtime resources.	`apigeeregistry.*` `apigeeregistry.apis.create` `apigeeregistry.apis.delete` `apigeeregistry.apis.get` `apigeeregistry.apis.getIamPolicy` `apigeeregistry.apis.list` `apigeeregistry.apis.setIamPolicy` `apigeeregistry.apis.update` `apigeeregistry.artifacts.create` `apigeeregistry.artifacts.delete` `apigeeregistry.artifacts.get` `apigeeregistry.artifacts.getIamPolicy` `apigeeregistry.artifacts.list` `apigeeregistry.artifacts.setIamPolicy` `apigeeregistry.artifacts.update` `apigeeregistry.deployments.create` `apigeeregistry.deployments.delete` `apigeeregistry.deployments.get` `apigeeregistry.deployments.list` `apigeeregistry.deployments.update` `apigeeregistry.instances.get` `apigeeregistry.instances.update` `apigeeregistry.locations.get` `apigeeregistry.locations.list` `apigeeregistry.operations.cancel` `apigeeregistry.operations.delete` `apigeeregistry.operations.get` `apigeeregistry.operations.list` `apigeeregistry.specs.create` `apigeeregistry.specs.delete` `apigeeregistry.specs.get` `apigeeregistry.specs.getIamPolicy` `apigeeregistry.specs.list` `apigeeregistry.specs.setIamPolicy` `apigeeregistry.specs.update` `apigeeregistry.versions.create` `apigeeregistry.versions.delete` `apigeeregistry.versions.get` `apigeeregistry.versions.getIamPolicy` `apigeeregistry.versions.list` `apigeeregistry.versions.setIamPolicy` `apigeeregistry.versions.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud Apigee Registry Editor ^Beta (`roles/apigeeregistry.editor`) Edit access to Cloud Apigee Registry Registry resources.	`apigeeregistry.apis.create` `apigeeregistry.apis.delete` `apigeeregistry.apis.get` `apigeeregistry.apis.getIamPolicy` `apigeeregistry.apis.list` `apigeeregistry.apis.update` `apigeeregistry.artifacts.create` `apigeeregistry.artifacts.delete` `apigeeregistry.artifacts.get` `apigeeregistry.artifacts.getIamPolicy` `apigeeregistry.artifacts.list` `apigeeregistry.artifacts.update` `apigeeregistry.deployments.*` `apigeeregistry.deployments.create` `apigeeregistry.deployments.delete` `apigeeregistry.deployments.get` `apigeeregistry.deployments.list` `apigeeregistry.deployments.update` `apigeeregistry.specs.create` `apigeeregistry.specs.delete` `apigeeregistry.specs.get` `apigeeregistry.specs.getIamPolicy` `apigeeregistry.specs.list` `apigeeregistry.specs.update` `apigeeregistry.versions.create` `apigeeregistry.versions.delete` `apigeeregistry.versions.get` `apigeeregistry.versions.getIamPolicy` `apigeeregistry.versions.list` `apigeeregistry.versions.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud Apigee Registry Viewer ^Beta (`roles/apigeeregistry.viewer`) Read-only access to Cloud Apigee Registry Registry resources.	`apigeeregistry.apis.get` `apigeeregistry.apis.list` `apigeeregistry.artifacts.get` `apigeeregistry.artifacts.list` `apigeeregistry.deployments.get` `apigeeregistry.deployments.list` `apigeeregistry.specs.get` `apigeeregistry.specs.list` `apigeeregistry.versions.get` `apigeeregistry.versions.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud Apigee Registry Worker ^Beta (`roles/apigeeregistry.worker`) The role used by Apigee Registry application workers to read and update Apigee Registry Artifacts.	`apigeeregistry.apis.get` `apigeeregistry.apis.list` `apigeeregistry.apis.update` `apigeeregistry.artifacts.create` `apigeeregistry.artifacts.delete` `apigeeregistry.artifacts.get` `apigeeregistry.artifacts.list` `apigeeregistry.artifacts.update` `apigeeregistry.deployments.get` `apigeeregistry.deployments.list` `apigeeregistry.deployments.update` `apigeeregistry.specs.get` `apigeeregistry.specs.list` `apigeeregistry.specs.update` `apigeeregistry.versions.get` `apigeeregistry.versions.list` `apigeeregistry.versions.update` `resourcemanager.projects.get` `resourcemanager.projects.list`

Cloud Apigee Registry Admin ^Beta

(roles/apigeeregistry.admin)

Full access to Cloud Apigee Registry Registry and Runtime resources.

apigeeregistry.*

apigeeregistry.apis.create
apigeeregistry.apis.delete
apigeeregistry.apis.get
apigeeregistry.apis.getIamPolicy
apigeeregistry.apis.list
apigeeregistry.apis.setIamPolicy
apigeeregistry.apis.update
apigeeregistry.artifacts.create
apigeeregistry.artifacts.delete
apigeeregistry.artifacts.get
apigeeregistry.artifacts.getIamPolicy
apigeeregistry.artifacts.list
apigeeregistry.artifacts.setIamPolicy
apigeeregistry.artifacts.update
apigeeregistry.deployments.create
apigeeregistry.deployments.delete
apigeeregistry.deployments.get
apigeeregistry.deployments.list
apigeeregistry.deployments.update
apigeeregistry.instances.get
apigeeregistry.instances.update
apigeeregistry.locations.get
apigeeregistry.locations.list
apigeeregistry.operations.cancel
apigeeregistry.operations.delete
apigeeregistry.operations.get
apigeeregistry.operations.list
apigeeregistry.specs.create
apigeeregistry.specs.delete
apigeeregistry.specs.get
apigeeregistry.specs.getIamPolicy
apigeeregistry.specs.list
apigeeregistry.specs.setIamPolicy
apigeeregistry.specs.update
apigeeregistry.versions.create
apigeeregistry.versions.delete
apigeeregistry.versions.get
apigeeregistry.versions.getIamPolicy
apigeeregistry.versions.list
apigeeregistry.versions.setIamPolicy
apigeeregistry.versions.update

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Apigee Registry Editor ^Beta

(roles/apigeeregistry.editor)

Edit access to Cloud Apigee Registry Registry resources.

apigeeregistry.apis.create

apigeeregistry.apis.delete

apigeeregistry.apis.get

apigeeregistry.apis.getIamPolicy

apigeeregistry.apis.list

apigeeregistry.apis.update

apigeeregistry.artifacts.create

apigeeregistry.artifacts.delete

apigeeregistry.artifacts.get

apigeeregistry.artifacts.getIamPolicy

apigeeregistry.artifacts.list

apigeeregistry.artifacts.update

apigeeregistry.deployments.*

apigeeregistry.deployments.create
apigeeregistry.deployments.delete
apigeeregistry.deployments.get
apigeeregistry.deployments.list
apigeeregistry.deployments.update

apigeeregistry.specs.create

apigeeregistry.specs.delete

apigeeregistry.specs.get

apigeeregistry.specs.getIamPolicy

apigeeregistry.specs.list

apigeeregistry.specs.update

apigeeregistry.versions.create

apigeeregistry.versions.delete

apigeeregistry.versions.get

apigeeregistry.versions.getIamPolicy

apigeeregistry.versions.list

apigeeregistry.versions.update

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Apigee Registry Viewer ^Beta

(roles/apigeeregistry.viewer)

Read-only access to Cloud Apigee Registry Registry resources.

apigeeregistry.apis.get

apigeeregistry.apis.list

apigeeregistry.artifacts.get

apigeeregistry.artifacts.list

apigeeregistry.deployments.get

apigeeregistry.deployments.list

apigeeregistry.specs.get

apigeeregistry.specs.list

apigeeregistry.versions.get

apigeeregistry.versions.list

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Apigee Registry Worker ^Beta

(roles/apigeeregistry.worker)

The role used by Apigee Registry application workers to read and update Apigee Registry Artifacts.

apigeeregistry.apis.get

apigeeregistry.apis.list

apigeeregistry.apis.update

apigeeregistry.artifacts.create

apigeeregistry.artifacts.delete

apigeeregistry.artifacts.get

apigeeregistry.artifacts.list

apigeeregistry.artifacts.update

apigeeregistry.deployments.get

apigeeregistry.deployments.list

apigeeregistry.deployments.update

apigeeregistry.specs.get

apigeeregistry.specs.list

apigeeregistry.specs.update

apigeeregistry.versions.get

apigeeregistry.versions.list

apigeeregistry.versions.update

resourcemanager.projects.get

resourcemanager.projects.list

Apigee Registry permissions

Permission	Included in roles
`apigeeregistry.apis.create`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`)
`apigeeregistry.apis.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`)
`apigeeregistry.apis.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`) Cloud Apigee Registry Viewer (`roles/apigeeregistry.viewer`) Cloud Apigee Registry Worker (`roles/apigeeregistry.worker`) Support User (`roles/iam.supportUser`)
`apigeeregistry.apis.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`apigeeregistry.apis.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`) Cloud Apigee Registry Viewer (`roles/apigeeregistry.viewer`) Cloud Apigee Registry Worker (`roles/apigeeregistry.worker`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`apigeeregistry.apis.setIamPolicy`	Owner (`roles/owner`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Security Admin (`roles/iam.securityAdmin`)
`apigeeregistry.apis.update`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`) Cloud Apigee Registry Worker (`roles/apigeeregistry.worker`)
`apigeeregistry.artifacts.create`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`) Cloud Apigee Registry Worker (`roles/apigeeregistry.worker`)
`apigeeregistry.artifacts.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`) Cloud Apigee Registry Worker (`roles/apigeeregistry.worker`)
`apigeeregistry.artifacts.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`) Cloud Apigee Registry Viewer (`roles/apigeeregistry.viewer`) Cloud Apigee Registry Worker (`roles/apigeeregistry.worker`) Support User (`roles/iam.supportUser`)
`apigeeregistry.artifacts.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`apigeeregistry.artifacts.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`) Cloud Apigee Registry Viewer (`roles/apigeeregistry.viewer`) Cloud Apigee Registry Worker (`roles/apigeeregistry.worker`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`apigeeregistry.artifacts.setIamPolicy`	Owner (`roles/owner`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Security Admin (`roles/iam.securityAdmin`)
`apigeeregistry.artifacts.update`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`) Cloud Apigee Registry Worker (`roles/apigeeregistry.worker`)
`apigeeregistry.deployments.create`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`)
`apigeeregistry.deployments.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`)
`apigeeregistry.deployments.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`) Cloud Apigee Registry Viewer (`roles/apigeeregistry.viewer`) Cloud Apigee Registry Worker (`roles/apigeeregistry.worker`) Support User (`roles/iam.supportUser`)
`apigeeregistry.deployments.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`) Cloud Apigee Registry Viewer (`roles/apigeeregistry.viewer`) Cloud Apigee Registry Worker (`roles/apigeeregistry.worker`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`apigeeregistry.deployments.update`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`) Cloud Apigee Registry Worker (`roles/apigeeregistry.worker`)
`apigeeregistry.instances.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Support User (`roles/iam.supportUser`)
`apigeeregistry.instances.update`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`)
`apigeeregistry.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Support User (`roles/iam.supportUser`)
`apigeeregistry.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`apigeeregistry.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`)
`apigeeregistry.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`)
`apigeeregistry.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Support User (`roles/iam.supportUser`)
`apigeeregistry.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`apigeeregistry.specs.create`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`)
`apigeeregistry.specs.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`)
`apigeeregistry.specs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`) Cloud Apigee Registry Viewer (`roles/apigeeregistry.viewer`) Cloud Apigee Registry Worker (`roles/apigeeregistry.worker`) Support User (`roles/iam.supportUser`)
`apigeeregistry.specs.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`apigeeregistry.specs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`) Cloud Apigee Registry Viewer (`roles/apigeeregistry.viewer`) Cloud Apigee Registry Worker (`roles/apigeeregistry.worker`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`apigeeregistry.specs.setIamPolicy`	Owner (`roles/owner`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Security Admin (`roles/iam.securityAdmin`)
`apigeeregistry.specs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`) Cloud Apigee Registry Worker (`roles/apigeeregistry.worker`)
`apigeeregistry.versions.create`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`)
`apigeeregistry.versions.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`)
`apigeeregistry.versions.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`) Cloud Apigee Registry Viewer (`roles/apigeeregistry.viewer`) Cloud Apigee Registry Worker (`roles/apigeeregistry.worker`) Support User (`roles/iam.supportUser`)
`apigeeregistry.versions.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`apigeeregistry.versions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`) Cloud Apigee Registry Viewer (`roles/apigeeregistry.viewer`) Cloud Apigee Registry Worker (`roles/apigeeregistry.worker`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`apigeeregistry.versions.setIamPolicy`	Owner (`roles/owner`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Security Admin (`roles/iam.securityAdmin`)
`apigeeregistry.versions.update`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Apigee Registry Admin (`roles/apigeeregistry.admin`) Cloud Apigee Registry Editor (`roles/apigeeregistry.editor`) Cloud Apigee Registry Worker (`roles/apigeeregistry.worker`)

Apigee Registry roles and permissions