Cloud Tasks 角色和权限

本页面列出了 Cloud Tasks 的 IAM 角色和权限。如需搜索所有角色和权限，请参阅角色和权限索引。

Cloud Tasks 角色

Role Permissions

Role	Permissions
Cloud Tasks Admin ^Beta (`roles/cloudtasks.admin`) Full access to queues and tasks.	`cloudtasks.*` `cloudtasks.cmekConfig.get` `cloudtasks.cmekConfig.update` `cloudtasks.locations.get` `cloudtasks.locations.list` `cloudtasks.queues.create` `cloudtasks.queues.delete` `cloudtasks.queues.get` `cloudtasks.queues.getIamPolicy` `cloudtasks.queues.list` `cloudtasks.queues.pause` `cloudtasks.queues.purge` `cloudtasks.queues.resume` `cloudtasks.queues.setIamPolicy` `cloudtasks.queues.update` `cloudtasks.tasks.create` `cloudtasks.tasks.delete` `cloudtasks.tasks.fullView` `cloudtasks.tasks.get` `cloudtasks.tasks.list` `cloudtasks.tasks.run` `monitoring.timeSeries.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud Tasks Enqueuer ^Beta (`roles/cloudtasks.enqueuer`) Access to create tasks.	`cloudtasks.tasks.create` `cloudtasks.tasks.fullView` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud Tasks Queue Admin ^Beta (`roles/cloudtasks.queueAdmin`) Admin access to queues.	`cloudtasks.locations.` `cloudtasks.locations.get` `cloudtasks.locations.list` `cloudtasks.queues.` `cloudtasks.queues.create` `cloudtasks.queues.delete` `cloudtasks.queues.get` `cloudtasks.queues.getIamPolicy` `cloudtasks.queues.list` `cloudtasks.queues.pause` `cloudtasks.queues.purge` `cloudtasks.queues.resume` `cloudtasks.queues.setIamPolicy` `cloudtasks.queues.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud Tasks Service Agent (`roles/cloudtasks.serviceAgent`) Grants Cloud Tasks Service Account access to manage resources. Warning: Do not grant service agent roles to any principals except service agents.	`iam.serviceAccounts.getAccessToken` `iam.serviceAccounts.getOpenIdToken` `logging.logEntries.create`
Cloud Tasks Task Deleter ^Beta (`roles/cloudtasks.taskDeleter`) Access to delete tasks.	`cloudtasks.tasks.delete` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud Tasks Task Runner ^Beta (`roles/cloudtasks.taskRunner`) Access to run tasks.	`cloudtasks.tasks.fullView` `cloudtasks.tasks.run` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud Tasks Viewer ^Beta (`roles/cloudtasks.viewer`) Get and list access to tasks, queues, and locations.	`cloudtasks.cmekConfig.get` `cloudtasks.locations.*` `cloudtasks.locations.get` `cloudtasks.locations.list` `cloudtasks.queues.get` `cloudtasks.queues.list` `cloudtasks.tasks.fullView` `cloudtasks.tasks.get` `cloudtasks.tasks.list` `monitoring.timeSeries.list` `resourcemanager.projects.get` `resourcemanager.projects.list`

Cloud Tasks Admin ^Beta

(roles/cloudtasks.admin)

Full access to queues and tasks.

cloudtasks.*

cloudtasks.cmekConfig.get
cloudtasks.cmekConfig.update
cloudtasks.locations.get
cloudtasks.locations.list
cloudtasks.queues.create
cloudtasks.queues.delete
cloudtasks.queues.get
cloudtasks.queues.getIamPolicy
cloudtasks.queues.list
cloudtasks.queues.pause
cloudtasks.queues.purge
cloudtasks.queues.resume
cloudtasks.queues.setIamPolicy
cloudtasks.queues.update
cloudtasks.tasks.create
cloudtasks.tasks.delete
cloudtasks.tasks.fullView
cloudtasks.tasks.get
cloudtasks.tasks.list
cloudtasks.tasks.run

monitoring.timeSeries.list

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Tasks Enqueuer ^Beta

(roles/cloudtasks.enqueuer)

Access to create tasks.

cloudtasks.tasks.create

cloudtasks.tasks.fullView

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Tasks Queue Admin ^Beta

(roles/cloudtasks.queueAdmin)

Admin access to queues.

cloudtasks.locations.*

cloudtasks.locations.get
cloudtasks.locations.list

cloudtasks.queues.*

cloudtasks.queues.create
cloudtasks.queues.delete
cloudtasks.queues.get
cloudtasks.queues.getIamPolicy
cloudtasks.queues.list
cloudtasks.queues.pause
cloudtasks.queues.purge
cloudtasks.queues.resume
cloudtasks.queues.setIamPolicy
cloudtasks.queues.update

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Tasks Service Agent

(roles/cloudtasks.serviceAgent)

Grants Cloud Tasks Service Account access to manage resources.

iam.serviceAccounts.getAccessToken

iam.serviceAccounts.getOpenIdToken

logging.logEntries.create

Cloud Tasks Task Deleter ^Beta

(roles/cloudtasks.taskDeleter)

Access to delete tasks.

cloudtasks.tasks.delete

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Tasks Task Runner ^Beta

(roles/cloudtasks.taskRunner)

Access to run tasks.

cloudtasks.tasks.fullView

cloudtasks.tasks.run

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Tasks Viewer ^Beta

(roles/cloudtasks.viewer)

Get and list access to tasks, queues, and locations.

cloudtasks.cmekConfig.get

cloudtasks.locations.*

cloudtasks.locations.get
cloudtasks.locations.list

cloudtasks.queues.get

cloudtasks.queues.list

cloudtasks.tasks.fullView

cloudtasks.tasks.get

cloudtasks.tasks.list

monitoring.timeSeries.list

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Tasks 权限

权限	以下角色拥有此权限
`cloudtasks.cmekConfig.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Viewer (`roles/cloudtasks.viewer`)
`cloudtasks.cmekConfig.update`	Owner (`roles/owner`) Cloud Tasks Admin (`roles/cloudtasks.admin`)
`cloudtasks.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Queue Admin (`roles/cloudtasks.queueAdmin`) Cloud Tasks Viewer (`roles/cloudtasks.viewer`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`)
`cloudtasks.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Queue Admin (`roles/cloudtasks.queueAdmin`) Cloud Tasks Viewer (`roles/cloudtasks.viewer`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`cloudtasks.queues.create`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Queue Admin (`roles/cloudtasks.queueAdmin`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`)
`cloudtasks.queues.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Queue Admin (`roles/cloudtasks.queueAdmin`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`)
`cloudtasks.queues.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Queue Admin (`roles/cloudtasks.queueAdmin`) Cloud Tasks Viewer (`roles/cloudtasks.viewer`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`)
`cloudtasks.queues.getIamPolicy`	Owner (`roles/owner`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Queue Admin (`roles/cloudtasks.queueAdmin`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`cloudtasks.queues.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Queue Admin (`roles/cloudtasks.queueAdmin`) Cloud Tasks Viewer (`roles/cloudtasks.viewer`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`cloudtasks.queues.pause`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Queue Admin (`roles/cloudtasks.queueAdmin`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`)
`cloudtasks.queues.purge`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Queue Admin (`roles/cloudtasks.queueAdmin`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`)
`cloudtasks.queues.resume`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Queue Admin (`roles/cloudtasks.queueAdmin`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`)
`cloudtasks.queues.setIamPolicy`	Owner (`roles/owner`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Queue Admin (`roles/cloudtasks.queueAdmin`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`) Security Admin (`roles/iam.securityAdmin`)
`cloudtasks.queues.update`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Queue Admin (`roles/cloudtasks.queueAdmin`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`)
`cloudtasks.tasks.create`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Enqueuer (`roles/cloudtasks.enqueuer`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`)
`cloudtasks.tasks.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Task Deleter (`roles/cloudtasks.taskDeleter`)
`cloudtasks.tasks.fullView`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Enqueuer (`roles/cloudtasks.enqueuer`) Cloud Tasks Task Runner (`roles/cloudtasks.taskRunner`) Cloud Tasks Viewer (`roles/cloudtasks.viewer`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`)
`cloudtasks.tasks.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Viewer (`roles/cloudtasks.viewer`)
`cloudtasks.tasks.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Viewer (`roles/cloudtasks.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`cloudtasks.tasks.run`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Task Runner (`roles/cloudtasks.taskRunner`)

Cloud Tasks 角色和权限