Cloud Domains roles and permissions

This page lists the IAM roles and permissions for Cloud Domains. To search through all roles and permissions, see the role and permission index.

Cloud Domains roles

Role Permissions

Role	Permissions
Cloud Domains Admin (`roles/domains.admin`) Full access to Cloud Domains Registrations and related resources.	`domains.*` `domains.locations.get` `domains.locations.list` `domains.operations.cancel` `domains.operations.get` `domains.operations.list` `domains.registrations.configureContact` `domains.registrations.configureDns` `domains.registrations.configureManagement` `domains.registrations.create` `domains.registrations.createTagBinding` `domains.registrations.delete` `domains.registrations.deleteTagBinding` `domains.registrations.get` `domains.registrations.getIamPolicy` `domains.registrations.list` `domains.registrations.listEffectiveTags` `domains.registrations.listTagBindings` `domains.registrations.setIamPolicy` `domains.registrations.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud Domains Viewer (`roles/domains.viewer`) Read-only access to Cloud Domains Registrations and related resources.	`domains.locations.*` `domains.locations.get` `domains.locations.list` `domains.operations.get` `domains.operations.list` `domains.registrations.get` `domains.registrations.getIamPolicy` `domains.registrations.list` `domains.registrations.listEffectiveTags` `domains.registrations.listTagBindings` `resourcemanager.projects.get` `resourcemanager.projects.list`

Cloud Domains Admin

(roles/domains.admin)

Full access to Cloud Domains Registrations and related resources.

domains.*

domains.locations.get
domains.locations.list
domains.operations.cancel
domains.operations.get
domains.operations.list
domains.registrations.configureContact
domains.registrations.configureDns
domains.registrations.configureManagement
domains.registrations.create
domains.registrations.createTagBinding
domains.registrations.delete
domains.registrations.deleteTagBinding
domains.registrations.get
domains.registrations.getIamPolicy
domains.registrations.list
domains.registrations.listEffectiveTags
domains.registrations.listTagBindings
domains.registrations.setIamPolicy
domains.registrations.update

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Domains Viewer

(roles/domains.viewer)

Read-only access to Cloud Domains Registrations and related resources.

domains.locations.*

domains.locations.get
domains.locations.list

domains.operations.get

domains.operations.list

domains.registrations.get

domains.registrations.getIamPolicy

domains.registrations.list

domains.registrations.listEffectiveTags

domains.registrations.listTagBindings

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Domains permissions

Permission	Included in roles
`domains.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Domains Admin (`roles/domains.admin`) Cloud Domains Viewer (`roles/domains.viewer`) Support User (`roles/iam.supportUser`)
`domains.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Domains Admin (`roles/domains.admin`) Cloud Domains Viewer (`roles/domains.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`domains.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Domains Admin (`roles/domains.admin`)
`domains.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Domains Admin (`roles/domains.admin`) Cloud Domains Viewer (`roles/domains.viewer`) Support User (`roles/iam.supportUser`)
`domains.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Domains Admin (`roles/domains.admin`) Cloud Domains Viewer (`roles/domains.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`domains.registrations.configureContact`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Domains Admin (`roles/domains.admin`)
`domains.registrations.configureDns`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Domains Admin (`roles/domains.admin`)
`domains.registrations.configureManagement`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Domains Admin (`roles/domains.admin`)
`domains.registrations.create`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Domains Admin (`roles/domains.admin`)
`domains.registrations.createTagBinding`	Owner (`roles/owner`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Cloud Domains Admin (`roles/domains.admin`) Tag User (`roles/resourcemanager.tagUser`)
`domains.registrations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Domains Admin (`roles/domains.admin`)
`domains.registrations.deleteTagBinding`	Owner (`roles/owner`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Cloud Domains Admin (`roles/domains.admin`) Tag User (`roles/resourcemanager.tagUser`)
`domains.registrations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Domains Admin (`roles/domains.admin`) Cloud Domains Viewer (`roles/domains.viewer`) Support User (`roles/iam.supportUser`)
`domains.registrations.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Domains Admin (`roles/domains.admin`) Cloud Domains Viewer (`roles/domains.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`domains.registrations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Domains Admin (`roles/domains.admin`) Cloud Domains Viewer (`roles/domains.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`domains.registrations.listEffectiveTags`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Cloud Domains Admin (`roles/domains.admin`) Cloud Domains Viewer (`roles/domains.viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`)
`domains.registrations.listTagBindings`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Cloud Domains Admin (`roles/domains.admin`) Cloud Domains Viewer (`roles/domains.viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`)
`domains.registrations.setIamPolicy`	Owner (`roles/owner`) Cloud Domains Admin (`roles/domains.admin`) Security Admin (`roles/iam.securityAdmin`)
`domains.registrations.update`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Domains Admin (`roles/domains.admin`)

Cloud Domains roles and permissions