Cloud Domains roles and permissions
Stay organized with collections Save and categorize content based on your preferences.

This page lists the IAM roles and permissions for Cloud Domains. To search through all roles and permissions, see the role and permission index.

Cloud Domains roles

Role Permissions

Role	Permissions
Cloud Domains Admin (`roles/domains.admin`) Full access to Cloud Domains Registrations and related resources.	`domains.*` `domains.locations.get` `domains.locations.list` `domains.operations.cancel` `domains.operations.get` `domains.operations.list` `domains.registrations.configureContact` `domains.registrations.configureDns` `domains.registrations.configureManagement` `domains.registrations.create` `domains.registrations.createTagBinding` `domains.registrations.delete` `domains.registrations.deleteTagBinding` `domains.registrations.get` `domains.registrations.getIamPolicy` `domains.registrations.list` `domains.registrations.listEffectiveTags` `domains.registrations.listTagBindings` `domains.registrations.setIamPolicy` `domains.registrations.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud Domains Viewer (`roles/domains.viewer`) Read-only access to Cloud Domains Registrations and related resources.	`domains.locations.*` `domains.locations.get` `domains.locations.list` `domains.operations.get` `domains.operations.list` `domains.registrations.get` `domains.registrations.getIamPolicy` `domains.registrations.list` `domains.registrations.listEffectiveTags` `domains.registrations.listTagBindings` `resourcemanager.projects.get` `resourcemanager.projects.list`

Cloud Domains Admin

(roles/domains.admin)

Full access to Cloud Domains Registrations and related resources.

domains.*

domains.locations.get
domains.locations.list
domains.operations.cancel
domains.operations.get
domains.operations.list
domains.registrations.configureContact
domains.registrations.configureDns
domains.registrations.configureManagement
domains.registrations.create
domains.registrations.createTagBinding
domains.registrations.delete
domains.registrations.deleteTagBinding
domains.registrations.get
domains.registrations.getIamPolicy
domains.registrations.list
domains.registrations.listEffectiveTags
domains.registrations.listTagBindings
domains.registrations.setIamPolicy
domains.registrations.update

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Domains Viewer

(roles/domains.viewer)

Read-only access to Cloud Domains Registrations and related resources.

domains.locations.*

domains.locations.get
domains.locations.list

domains.operations.get

domains.operations.list

domains.registrations.get

domains.registrations.getIamPolicy

domains.registrations.list

domains.registrations.listEffectiveTags

domains.registrations.listTagBindings

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Domains permissions

Permission	Included in roles
`domains.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Domains Admin (`roles/domains.admin`) Cloud Domains Viewer (`roles/domains.viewer`)
`domains.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Domains Admin (`roles/domains.admin`) Cloud Domains Viewer (`roles/domains.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`domains.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Domains Admin (`roles/domains.admin`)
`domains.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Domains Admin (`roles/domains.admin`) Cloud Domains Viewer (`roles/domains.viewer`)
`domains.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Domains Admin (`roles/domains.admin`) Cloud Domains Viewer (`roles/domains.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`domains.registrations.configureContact`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Domains Admin (`roles/domains.admin`)
`domains.registrations.configureDns`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Domains Admin (`roles/domains.admin`)
`domains.registrations.configureManagement`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Domains Admin (`roles/domains.admin`)
`domains.registrations.create`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Domains Admin (`roles/domains.admin`)
`domains.registrations.createTagBinding`	Owner (`roles/owner`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Cloud Domains Admin (`roles/domains.admin`) Tag User (`roles/resourcemanager.tagUser`)
`domains.registrations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Domains Admin (`roles/domains.admin`)
`domains.registrations.deleteTagBinding`	Owner (`roles/owner`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Cloud Domains Admin (`roles/domains.admin`) Tag User (`roles/resourcemanager.tagUser`)
`domains.registrations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Domains Admin (`roles/domains.admin`) Cloud Domains Viewer (`roles/domains.viewer`)
`domains.registrations.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Domains Admin (`roles/domains.admin`) Cloud Domains Viewer (`roles/domains.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`domains.registrations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Domains Admin (`roles/domains.admin`) Cloud Domains Viewer (`roles/domains.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`domains.registrations.listEffectiveTags`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Cloud Domains Admin (`roles/domains.admin`) Cloud Domains Viewer (`roles/domains.viewer`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`)
`domains.registrations.listTagBindings`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Cloud Domains Admin (`roles/domains.admin`) Cloud Domains Viewer (`roles/domains.viewer`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`)
`domains.registrations.setIamPolicy`	Owner (`roles/owner`) Cloud Domains Admin (`roles/domains.admin`) Security Admin (`roles/iam.securityAdmin`)
`domains.registrations.update`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Domains Admin (`roles/domains.admin`)

Cloud Domains roles and permissions
Stay organized with collections Save and categorize content based on your preferences.