Commerce Org Governance roles and permissions

This page lists the IAM roles and permissions for Commerce Org Governance. To search through all roles and permissions, see the role and permission index.

Commerce Org Governance roles

Role Permissions

Role	Permissions
Commerce Organization Governance Admin ^Beta (`roles/commerceorggovernance.admin`) Full access to Organization Governance APIs	`commerceorggovernance.` `commerceorggovernance.collectionRequestApprovals.list` `commerceorggovernance.collectionRequestApprovals.review` `commerceorggovernance.collections.create` `commerceorggovernance.collections.delete` `commerceorggovernance.collections.get` `commerceorggovernance.collections.list` `commerceorggovernance.collections.update` `commerceorggovernance.consumerSharingPolicies.get` `commerceorggovernance.consumerSharingPolicies.update` `commerceorggovernance.organizationSettings.get` `commerceorggovernance.organizationSettings.update` `commerceorggovernance.populateCollectionJobs.create` `commerceorggovernance.populateCollectionJobs.list` `commerceorggovernance.populateCollectionJobs.run` `commerceorggovernance.populateCollectionJobs.update` `commerceorggovernance.services.get` `commerceorggovernance.services.list` `commerceorggovernance.services.request` `consumerprocurement.entitlements.` `consumerprocurement.entitlements.get` `consumerprocurement.entitlements.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Governed Marketplace User ^Beta (`roles/commerceorggovernance.user`) Full access to Governed Marketplace features.	`commerceorggovernance.services.` `commerceorggovernance.services.get` `commerceorggovernance.services.list` `commerceorggovernance.services.request` `consumerprocurement.entitlements.` `consumerprocurement.entitlements.get` `consumerprocurement.entitlements.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Commerce Organization Governance Viewer ^Beta (`roles/commerceorggovernance.viewer`) Full access to Organization Governance read-only APIs.	`commerceorggovernance.collections.get` `commerceorggovernance.collections.list` `commerceorggovernance.consumerSharingPolicies.get` `commerceorggovernance.organizationSettings.get` `commerceorggovernance.populateCollectionJobs.list` `commerceorggovernance.services.get` `commerceorggovernance.services.list` `consumerprocurement.entitlements.*` `consumerprocurement.entitlements.get` `consumerprocurement.entitlements.list` `resourcemanager.projects.get` `resourcemanager.projects.list`

Commerce Organization Governance Admin ^Beta

(roles/commerceorggovernance.admin)

Full access to Organization Governance APIs

commerceorggovernance.*

commerceorggovernance.collectionRequestApprovals.list
commerceorggovernance.collectionRequestApprovals.review
commerceorggovernance.collections.create
commerceorggovernance.collections.delete
commerceorggovernance.collections.get
commerceorggovernance.collections.list
commerceorggovernance.collections.update
commerceorggovernance.consumerSharingPolicies.get
commerceorggovernance.consumerSharingPolicies.update
commerceorggovernance.organizationSettings.get
commerceorggovernance.organizationSettings.update
commerceorggovernance.populateCollectionJobs.create
commerceorggovernance.populateCollectionJobs.list
commerceorggovernance.populateCollectionJobs.run
commerceorggovernance.populateCollectionJobs.update
commerceorggovernance.services.get
commerceorggovernance.services.list
commerceorggovernance.services.request

consumerprocurement.entitlements.*

consumerprocurement.entitlements.get
consumerprocurement.entitlements.list

resourcemanager.projects.get

resourcemanager.projects.list

Governed Marketplace User ^Beta

(roles/commerceorggovernance.user)

Full access to Governed Marketplace features.

commerceorggovernance.services.*

commerceorggovernance.services.get
commerceorggovernance.services.list
commerceorggovernance.services.request

consumerprocurement.entitlements.*

consumerprocurement.entitlements.get
consumerprocurement.entitlements.list

resourcemanager.projects.get

resourcemanager.projects.list

Commerce Organization Governance Viewer ^Beta

(roles/commerceorggovernance.viewer)

Full access to Organization Governance read-only APIs.

commerceorggovernance.collections.get

commerceorggovernance.collections.list

commerceorggovernance.consumerSharingPolicies.get

commerceorggovernance.organizationSettings.get

commerceorggovernance.populateCollectionJobs.list

commerceorggovernance.services.get

commerceorggovernance.services.list

consumerprocurement.entitlements.*

consumerprocurement.entitlements.get
consumerprocurement.entitlements.list

resourcemanager.projects.get

resourcemanager.projects.list

Commerce Org Governance permissions

Permission	Included in roles
`commerceorggovernance.collectionRequestApprovals.list`	Owner (`roles/owner`) Editor (`roles/editor`) Commerce Organization Governance Admin (`roles/commerceorggovernance.admin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`)
`commerceorggovernance.collectionRequestApprovals.review`	Owner (`roles/owner`) Editor (`roles/editor`) Commerce Organization Governance Admin (`roles/commerceorggovernance.admin`)
`commerceorggovernance.collections.create`	Owner (`roles/owner`) Editor (`roles/editor`) Commerce Organization Governance Admin (`roles/commerceorggovernance.admin`)
`commerceorggovernance.collections.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Commerce Organization Governance Admin (`roles/commerceorggovernance.admin`)
`commerceorggovernance.collections.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Commerce Organization Governance Admin (`roles/commerceorggovernance.admin`) Commerce Organization Governance Viewer (`roles/commerceorggovernance.viewer`) Support User (`roles/iam.supportUser`)
`commerceorggovernance.collections.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Commerce Organization Governance Admin (`roles/commerceorggovernance.admin`) Commerce Organization Governance Viewer (`roles/commerceorggovernance.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`commerceorggovernance.collections.update`	Owner (`roles/owner`) Editor (`roles/editor`) Commerce Organization Governance Admin (`roles/commerceorggovernance.admin`)
`commerceorggovernance.consumerSharingPolicies.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Commerce Organization Governance Admin (`roles/commerceorggovernance.admin`) Commerce Organization Governance Viewer (`roles/commerceorggovernance.viewer`) Support User (`roles/iam.supportUser`)
`commerceorggovernance.consumerSharingPolicies.update`	Owner (`roles/owner`) Editor (`roles/editor`) Commerce Organization Governance Admin (`roles/commerceorggovernance.admin`)
`commerceorggovernance.organizationSettings.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Catalog Org Admin (`roles/cloudprivatecatalogproducer.orgAdmin`) Commerce Organization Governance Admin (`roles/commerceorggovernance.admin`) Commerce Organization Governance Viewer (`roles/commerceorggovernance.viewer`) Support User (`roles/iam.supportUser`)
`commerceorggovernance.organizationSettings.update`	Owner (`roles/owner`) Editor (`roles/editor`) Catalog Org Admin (`roles/cloudprivatecatalogproducer.orgAdmin`) Commerce Organization Governance Admin (`roles/commerceorggovernance.admin`)
`commerceorggovernance.populateCollectionJobs.create`	Owner (`roles/owner`) Editor (`roles/editor`) Commerce Organization Governance Admin (`roles/commerceorggovernance.admin`)
`commerceorggovernance.populateCollectionJobs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Commerce Organization Governance Admin (`roles/commerceorggovernance.admin`) Commerce Organization Governance Viewer (`roles/commerceorggovernance.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`commerceorggovernance.populateCollectionJobs.run`	Owner (`roles/owner`) Editor (`roles/editor`) Commerce Organization Governance Admin (`roles/commerceorggovernance.admin`)
`commerceorggovernance.populateCollectionJobs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Commerce Organization Governance Admin (`roles/commerceorggovernance.admin`)
`commerceorggovernance.services.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Commerce Organization Governance Admin (`roles/commerceorggovernance.admin`) Governed Marketplace User (`roles/commerceorggovernance.user`) Commerce Organization Governance Viewer (`roles/commerceorggovernance.viewer`) Support User (`roles/iam.supportUser`)
`commerceorggovernance.services.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Commerce Organization Governance Admin (`roles/commerceorggovernance.admin`) Governed Marketplace User (`roles/commerceorggovernance.user`) Commerce Organization Governance Viewer (`roles/commerceorggovernance.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`commerceorggovernance.services.request`	Owner (`roles/owner`) Editor (`roles/editor`) Commerce Organization Governance Admin (`roles/commerceorggovernance.admin`) Governed Marketplace User (`roles/commerceorggovernance.user`)

Commerce Org Governance roles and permissions