Cloud Scheduler roles and permissions
Stay organized with collections Save and categorize content based on your preferences.

This page lists the IAM roles and permissions for Cloud Scheduler. To search through all roles and permissions, see the role and permission index.

Cloud Scheduler roles

Role Permissions

Role	Permissions
Cloud Scheduler Admin (`roles/cloudscheduler.admin`) Full access to jobs and executions. Note that a Cloud Scheduler Admin (or any custom role with the permission cloudscheduler.jobs.create) can create jobs that publish to any Pub/Sub topics within the project.	`appengine.applications.get` `cloudscheduler.*` `cloudscheduler.jobs.create` `cloudscheduler.jobs.delete` `cloudscheduler.jobs.enable` `cloudscheduler.jobs.fullView` `cloudscheduler.jobs.get` `cloudscheduler.jobs.list` `cloudscheduler.jobs.pause` `cloudscheduler.jobs.run` `cloudscheduler.jobs.update` `cloudscheduler.locations.get` `cloudscheduler.locations.list` `resourcemanager.projects.get` `resourcemanager.projects.list` `serviceusage.services.get` `serviceusage.services.list`
Cloud Scheduler Job Runner (`roles/cloudscheduler.jobRunner`) Access to run jobs.	`appengine.applications.get` `cloudscheduler.jobs.fullView` `cloudscheduler.jobs.run` `resourcemanager.projects.get` `resourcemanager.projects.list` `serviceusage.services.get` `serviceusage.services.list`
Cloud Scheduler Service Agent (`roles/cloudscheduler.serviceAgent`) Grants Cloud Scheduler Service Account access to manage resources. Warning: Do not grant service agent roles to any principals except service agents.	`iam.serviceAccounts.getAccessToken` `iam.serviceAccounts.getOpenIdToken` `logging.logEntries.create` `logging.logEntries.route` `pubsub.topics.publish`
Cloud Scheduler Viewer (`roles/cloudscheduler.viewer`) Get and list access to jobs, executions, and locations.	`appengine.applications.get` `cloudscheduler.jobs.fullView` `cloudscheduler.jobs.get` `cloudscheduler.jobs.list` `cloudscheduler.locations.*` `cloudscheduler.locations.get` `cloudscheduler.locations.list` `resourcemanager.projects.get` `resourcemanager.projects.list` `serviceusage.services.get` `serviceusage.services.list`

Cloud Scheduler Admin

(roles/cloudscheduler.admin)

Full access to jobs and executions.

Note that a Cloud Scheduler Admin (or any custom role with the permission cloudscheduler.jobs.create) can create jobs that publish to any Pub/Sub topics within the project.

appengine.applications.get

cloudscheduler.*

cloudscheduler.jobs.create
cloudscheduler.jobs.delete
cloudscheduler.jobs.enable
cloudscheduler.jobs.fullView
cloudscheduler.jobs.get
cloudscheduler.jobs.list
cloudscheduler.jobs.pause
cloudscheduler.jobs.run
cloudscheduler.jobs.update
cloudscheduler.locations.get
cloudscheduler.locations.list

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.services.get

serviceusage.services.list

Cloud Scheduler Job Runner

(roles/cloudscheduler.jobRunner)

Access to run jobs.

appengine.applications.get

cloudscheduler.jobs.fullView

cloudscheduler.jobs.run

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.services.get

serviceusage.services.list

Cloud Scheduler Service Agent

(roles/cloudscheduler.serviceAgent)

Grants Cloud Scheduler Service Account access to manage resources.

iam.serviceAccounts.getAccessToken

iam.serviceAccounts.getOpenIdToken

logging.logEntries.create

logging.logEntries.route

pubsub.topics.publish

Cloud Scheduler Viewer

(roles/cloudscheduler.viewer)

Get and list access to jobs, executions, and locations.

appengine.applications.get

cloudscheduler.jobs.fullView

cloudscheduler.jobs.get

cloudscheduler.jobs.list

cloudscheduler.locations.*

cloudscheduler.locations.get
cloudscheduler.locations.list

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.services.get

serviceusage.services.list

Cloud Scheduler permissions

Permission	Included in roles
`cloudscheduler.jobs.create`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Scheduler Admin (`roles/cloudscheduler.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Datapipelines Service Agent (`roles/datapipelines.serviceAgent`) Application Integration Service Agent (`roles/integrations.serviceAgent`) KubeRun Events Control Plane Service Agent (`roles/kuberun.eventsControlPlaneServiceAgent`) Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`)
`cloudscheduler.jobs.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Scheduler Admin (`roles/cloudscheduler.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Datapipelines Service Agent (`roles/datapipelines.serviceAgent`) Application Integration Service Agent (`roles/integrations.serviceAgent`) KubeRun Events Control Plane Service Agent (`roles/kuberun.eventsControlPlaneServiceAgent`) Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`)
`cloudscheduler.jobs.enable`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Scheduler Admin (`roles/cloudscheduler.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`) Datapipelines Service Agent (`roles/datapipelines.serviceAgent`)
`cloudscheduler.jobs.fullView`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Scheduler Admin (`roles/cloudscheduler.admin`) Cloud Scheduler Job Runner (`roles/cloudscheduler.jobRunner`) Cloud Scheduler Viewer (`roles/cloudscheduler.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`) Datapipelines Service Agent (`roles/datapipelines.serviceAgent`)
`cloudscheduler.jobs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Scheduler Admin (`roles/cloudscheduler.admin`) Cloud Scheduler Viewer (`roles/cloudscheduler.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Datapipelines Service Agent (`roles/datapipelines.serviceAgent`) Application Integration Service Agent (`roles/integrations.serviceAgent`) KubeRun Events Control Plane Service Agent (`roles/kuberun.eventsControlPlaneServiceAgent`) Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`)
`cloudscheduler.jobs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Scheduler Admin (`roles/cloudscheduler.admin`) Cloud Scheduler Viewer (`roles/cloudscheduler.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Datapipelines Service Agent (`roles/datapipelines.serviceAgent`)
`cloudscheduler.jobs.pause`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Scheduler Admin (`roles/cloudscheduler.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`) Datapipelines Service Agent (`roles/datapipelines.serviceAgent`)
`cloudscheduler.jobs.run`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Scheduler Admin (`roles/cloudscheduler.admin`) Cloud Scheduler Job Runner (`roles/cloudscheduler.jobRunner`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`) Datapipelines Service Agent (`roles/datapipelines.serviceAgent`)
`cloudscheduler.jobs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Scheduler Admin (`roles/cloudscheduler.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Datapipelines Service Agent (`roles/datapipelines.serviceAgent`) Application Integration Service Agent (`roles/integrations.serviceAgent`) Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`)
`cloudscheduler.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Scheduler Admin (`roles/cloudscheduler.admin`) Cloud Scheduler Viewer (`roles/cloudscheduler.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`) Datapipelines Service Agent (`roles/datapipelines.serviceAgent`)
`cloudscheduler.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Scheduler Admin (`roles/cloudscheduler.admin`) Cloud Scheduler Viewer (`roles/cloudscheduler.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`) Datapipelines Service Agent (`roles/datapipelines.serviceAgent`)

Cloud Scheduler roles and permissions
Stay organized with collections Save and categorize content based on your preferences.