English
Deutsch
Español – América Latina
Français
Português – Brasil
中文 – 简体
日本語
한국어

Console

Contact Us Start free

Cloud Autoscaling roles and permissions

This page lists the IAM roles and permissions for Cloud Autoscaling. To search through all roles and permissions, see the role and permission index.

Cloud Autoscaling roles

Role	Permissions
Autoscaling Metrics Writer ^Beta (`roles/autoscaling.metricsWriter`) Access to write metrics for autoscaling site	`autoscaling.sites.writeMetrics`
Autoscaling Recommendations Reader ^Beta (`roles/autoscaling.recommendationsReader`) Access to read recommendations from autoscaling site	`autoscaling.sites.readRecommendations`
Autoscaling Site Admin ^Beta (`roles/autoscaling.sitesAdmin`) Full access to all autoscaling site features	`autoscaling.*` `autoscaling.sites.getIamPolicy` `autoscaling.sites.readRecommendations` `autoscaling.sites.setIamPolicy` `autoscaling.sites.writeMetrics` `autoscaling.sites.writeState` `resourcemanager.projects.get` `resourcemanager.projects.list`
Autoscaling State Writer ^Beta (`roles/autoscaling.stateWriter`) Access to write state for autoscaling site	`autoscaling.sites.writeState`

Cloud Autoscaling permissions

Permission	Included in roles
`autoscaling.sites.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Autoscaling Site Admin (`roles/autoscaling.sitesAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`autoscaling.sites.readRecommendations`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Autoscaling Recommendations Reader (`roles/autoscaling.recommendationsReader`) Autoscaling Site Admin (`roles/autoscaling.sitesAdmin`) Dataflow Worker (`roles/dataflow.worker`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`autoscaling.sites.setIamPolicy`	Owner (`roles/owner`) Autoscaling Site Admin (`roles/autoscaling.sitesAdmin`) Security Admin (`roles/iam.securityAdmin`)
`autoscaling.sites.writeMetrics`	Owner (`roles/owner`) Editor (`roles/editor`) Autoscaling Metrics Writer (`roles/autoscaling.metricsWriter`) Autoscaling Site Admin (`roles/autoscaling.sitesAdmin`) Kubernetes Engine Default Node Service Account (`roles/container.defaultNodeServiceAccount`) Dataflow Worker (`roles/dataflow.worker`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. [Deprecated] Kubernetes Engine Node Service Agent (`roles/container.nodeServiceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) RMA Service Agent (`roles/rapidmigrationassessment.serviceAgent`) Kubernetes Engine Default Node Service Agent (`roles/container.defaultNodeServiceAgent`)
`autoscaling.sites.writeState`	Owner (`roles/owner`) Editor (`roles/editor`) Autoscaling Site Admin (`roles/autoscaling.sitesAdmin`) Autoscaling State Writer (`roles/autoscaling.stateWriter`) Dataflow Worker (`roles/dataflow.worker`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Kubernetes Engine Service Agent (`roles/container.serviceAgent`)

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-10-29 UTC.