FleetEngine roles and permissions

This page lists the IAM roles and permissions for FleetEngine. To search through all roles and permissions, see the role and permission index.

FleetEngine roles

Role Permissions

Role	Permissions
Fleet Engine Consumer SDK User (`roles/fleetengine.consumerSdkUser`) Limited read access to Fleet Engine resources	`fleetengine.trips.get` `fleetengine.vehicles.get` `fleetengine.vehicles.search` `fleetengine.vehicles.searchFuzzed`
Fleet Engine Delivery Admin (`roles/fleetengine.deliveryAdmin`) Full access to Fleet Engine Delivery resources.	`fleetengine.deliveryvehicles.` `fleetengine.deliveryvehicles.allowAllActions` `fleetengine.deliveryvehicles.create` `fleetengine.deliveryvehicles.delete` `fleetengine.deliveryvehicles.get` `fleetengine.deliveryvehicles.list` `fleetengine.deliveryvehicles.update` `fleetengine.deliveryvehicles.updateLocation` `fleetengine.deliveryvehicles.updateVehicleStops` `fleetengine.tasks.` `fleetengine.tasks.allowAllActions` `fleetengine.tasks.create` `fleetengine.tasks.delete` `fleetengine.tasks.get` `fleetengine.tasks.list` `fleetengine.tasks.searchWithTrackingId` `fleetengine.tasks.update` `fleetengine.tasktrackinginfo.*` `fleetengine.tasktrackinginfo.allowAllActions` `fleetengine.tasktrackinginfo.get` `resourcemanager.projects.get` `resourcemanager.projects.list` `serviceusage.services.use`
Fleet Engine Delivery Consumer User (`roles/fleetengine.deliveryConsumer`) Limited read access to Fleet Engine Delivery resources	`fleetengine.tasks.searchWithTrackingId` `fleetengine.tasktrackinginfo.get`
Fleet Engine Delivery Fleet Reader User (`roles/fleetengine.deliveryFleetReader`) Grants read access to all Fleet Engine Delivery resources	`fleetengine.deliveryvehicles.get` `fleetengine.deliveryvehicles.list` `fleetengine.tasks.get` `fleetengine.tasks.list` `fleetengine.tasks.searchWithTrackingId` `fleetengine.tasktrackinginfo.get`
Fleet Engine Delivery Super User (`roles/fleetengine.deliverySuperUser`) Full access to Fleet Engine DeliveryVehicles and Tasks resources.	`fleetengine.deliveryvehicles.create` `fleetengine.deliveryvehicles.delete` `fleetengine.deliveryvehicles.get` `fleetengine.deliveryvehicles.list` `fleetengine.deliveryvehicles.update` `fleetengine.deliveryvehicles.updateLocation` `fleetengine.deliveryvehicles.updateVehicleStops` `fleetengine.tasks.create` `fleetengine.tasks.delete` `fleetengine.tasks.get` `fleetengine.tasks.list` `fleetengine.tasks.searchWithTrackingId` `fleetengine.tasks.update` `fleetengine.tasktrackinginfo.get` `resourcemanager.projects.get` `resourcemanager.projects.list`
Fleet Engine Delivery Trusted Driver User (`roles/fleetengine.deliveryTrustedDriver`) Read and write access to Fleet Engine Delivery resources	`fleetengine.deliveryvehicles.create` `fleetengine.deliveryvehicles.get` `fleetengine.deliveryvehicles.update` `fleetengine.deliveryvehicles.updateLocation` `fleetengine.deliveryvehicles.updateVehicleStops` `fleetengine.tasks.create` `fleetengine.tasks.update`
Fleet Engine Delivery Untrusted Driver User (`roles/fleetengine.deliveryUntrustedDriver`) Limited write access to Fleet Engine Delivery Vehicle resources	`fleetengine.deliveryvehicles.get` `fleetengine.deliveryvehicles.updateLocation`
Fleet Engine Driver SDK User (`roles/fleetengine.driverSdkUser`) Read and limited update access to Fleet Engine resources	`fleetengine.trips.get` `fleetengine.trips.search` `fleetengine.trips.update` `fleetengine.vehicles.get` `fleetengine.vehicles.updateLocation`
Fleet Engine On-Demand Admin (`roles/fleetengine.ondemandAdmin`) Full access to Vehicle and Trip resources.	`fleetengine.trips.` `fleetengine.trips.allowAllActions` `fleetengine.trips.create` `fleetengine.trips.delete` `fleetengine.trips.get` `fleetengine.trips.search` `fleetengine.trips.update` `fleetengine.trips.updateState` `fleetengine.vehicles.` `fleetengine.vehicles.allowAllActions` `fleetengine.vehicles.create` `fleetengine.vehicles.delete` `fleetengine.vehicles.get` `fleetengine.vehicles.list` `fleetengine.vehicles.search` `fleetengine.vehicles.searchFuzzed` `fleetengine.vehicles.update` `fleetengine.vehicles.updateLocation` `resourcemanager.projects.get` `resourcemanager.projects.list` `serviceusage.services.use`
FleetEngine Service Agent (`roles/fleetengine.serviceAgent`) Grants the FleetEngine Service Account access to manage resources. Warning: Do not grant service agent roles to any principals except service agents.	`bigquery.config.get` `bigquery.datasets.create` `bigquery.datasets.get` `bigquery.jobs.create` `bigquery.tables.getData` `dataform.locations.*` `dataform.locations.get` `dataform.locations.list` `dataform.repositories.create` `dataform.repositories.list` `resourcemanager.projects.get` `resourcemanager.projects.list` `serviceusage.services.enable`
Fleet Engine Service Super User (`roles/fleetengine.serviceSuperUser`) Full access to all Fleet Engine resources.	`fleetengine.trips.create` `fleetengine.trips.delete` `fleetengine.trips.get` `fleetengine.trips.search` `fleetengine.trips.update` `fleetengine.trips.updateState` `fleetengine.vehicles.create` `fleetengine.vehicles.delete` `fleetengine.vehicles.get` `fleetengine.vehicles.list` `fleetengine.vehicles.search` `fleetengine.vehicles.searchFuzzed` `fleetengine.vehicles.update` `fleetengine.vehicles.updateLocation` `resourcemanager.projects.get` `resourcemanager.projects.list`

Fleet Engine Consumer SDK User

(roles/fleetengine.consumerSdkUser)

Limited read access to Fleet Engine resources

fleetengine.trips.get

fleetengine.vehicles.get

fleetengine.vehicles.search

fleetengine.vehicles.searchFuzzed

Fleet Engine Delivery Admin

(roles/fleetengine.deliveryAdmin)

Full access to Fleet Engine Delivery resources.

fleetengine.deliveryvehicles.*

fleetengine.deliveryvehicles.allowAllActions
fleetengine.deliveryvehicles.create
fleetengine.deliveryvehicles.delete
fleetengine.deliveryvehicles.get
fleetengine.deliveryvehicles.list
fleetengine.deliveryvehicles.update
fleetengine.deliveryvehicles.updateLocation
fleetengine.deliveryvehicles.updateVehicleStops

fleetengine.tasks.*

fleetengine.tasks.allowAllActions
fleetengine.tasks.create
fleetengine.tasks.delete
fleetengine.tasks.get
fleetengine.tasks.list
fleetengine.tasks.searchWithTrackingId
fleetengine.tasks.update

fleetengine.tasktrackinginfo.*

fleetengine.tasktrackinginfo.allowAllActions
fleetengine.tasktrackinginfo.get

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.services.use

Fleet Engine Delivery Consumer User

(roles/fleetengine.deliveryConsumer)

Limited read access to Fleet Engine Delivery resources

fleetengine.tasks.searchWithTrackingId

fleetengine.tasktrackinginfo.get

Fleet Engine Delivery Fleet Reader User

(roles/fleetengine.deliveryFleetReader)

Grants read access to all Fleet Engine Delivery resources

fleetengine.deliveryvehicles.get

fleetengine.deliveryvehicles.list

fleetengine.tasks.get

fleetengine.tasks.list

fleetengine.tasks.searchWithTrackingId

fleetengine.tasktrackinginfo.get

Fleet Engine Delivery Super User

(roles/fleetengine.deliverySuperUser)

Full access to Fleet Engine DeliveryVehicles and Tasks resources.

fleetengine.deliveryvehicles.create

fleetengine.deliveryvehicles.delete

fleetengine.deliveryvehicles.get

fleetengine.deliveryvehicles.list

fleetengine.deliveryvehicles.update

fleetengine.deliveryvehicles.updateLocation

fleetengine.deliveryvehicles.updateVehicleStops

fleetengine.tasks.create

fleetengine.tasks.delete

fleetengine.tasks.get

fleetengine.tasks.list

fleetengine.tasks.searchWithTrackingId

fleetengine.tasks.update

fleetengine.tasktrackinginfo.get

resourcemanager.projects.get

resourcemanager.projects.list

Fleet Engine Delivery Trusted Driver User

(roles/fleetengine.deliveryTrustedDriver)

Read and write access to Fleet Engine Delivery resources

fleetengine.deliveryvehicles.create

fleetengine.deliveryvehicles.get

fleetengine.deliveryvehicles.update

fleetengine.deliveryvehicles.updateLocation

fleetengine.deliveryvehicles.updateVehicleStops

fleetengine.tasks.create

fleetengine.tasks.update

Fleet Engine Delivery Untrusted Driver User

(roles/fleetengine.deliveryUntrustedDriver)

Limited write access to Fleet Engine Delivery Vehicle resources

fleetengine.deliveryvehicles.get

fleetengine.deliveryvehicles.updateLocation

Fleet Engine Driver SDK User

(roles/fleetengine.driverSdkUser)

Read and limited update access to Fleet Engine resources

fleetengine.trips.get

fleetengine.trips.search

fleetengine.trips.update

fleetengine.vehicles.get

fleetengine.vehicles.updateLocation

Fleet Engine On-Demand Admin

(roles/fleetengine.ondemandAdmin)

Full access to Vehicle and Trip resources.

fleetengine.trips.*

fleetengine.trips.allowAllActions
fleetengine.trips.create
fleetengine.trips.delete
fleetengine.trips.get
fleetengine.trips.search
fleetengine.trips.update
fleetengine.trips.updateState

fleetengine.vehicles.*

fleetengine.vehicles.allowAllActions
fleetengine.vehicles.create
fleetengine.vehicles.delete
fleetengine.vehicles.get
fleetengine.vehicles.list
fleetengine.vehicles.search
fleetengine.vehicles.searchFuzzed
fleetengine.vehicles.update
fleetengine.vehicles.updateLocation

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.services.use

FleetEngine Service Agent

(roles/fleetengine.serviceAgent)

Grants the FleetEngine Service Account access to manage resources.

bigquery.config.get

bigquery.datasets.create

bigquery.datasets.get

bigquery.jobs.create

bigquery.tables.getData

dataform.locations.*

dataform.locations.get
dataform.locations.list

dataform.repositories.create

dataform.repositories.list

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.services.enable

Fleet Engine Service Super User

(roles/fleetengine.serviceSuperUser)

Full access to all Fleet Engine resources.

fleetengine.trips.create

fleetengine.trips.delete

fleetengine.trips.get

fleetengine.trips.search

fleetengine.trips.update

fleetengine.trips.updateState

fleetengine.vehicles.create

fleetengine.vehicles.delete

fleetengine.vehicles.get

fleetengine.vehicles.list

fleetengine.vehicles.search

fleetengine.vehicles.searchFuzzed

fleetengine.vehicles.update

fleetengine.vehicles.updateLocation

resourcemanager.projects.get

resourcemanager.projects.list

FleetEngine permissions

Permission	Included in roles
`fleetengine.deliveryvehicles.allowAllActions`	Owner (`roles/owner`) Editor (`roles/editor`) Fleet Engine Delivery Admin (`roles/fleetengine.deliveryAdmin`)
`fleetengine.deliveryvehicles.create`	Owner (`roles/owner`) Editor (`roles/editor`) Fleet Engine Delivery Admin (`roles/fleetengine.deliveryAdmin`) Fleet Engine Delivery Super User (`roles/fleetengine.deliverySuperUser`) Fleet Engine Delivery Trusted Driver User (`roles/fleetengine.deliveryTrustedDriver`)
`fleetengine.deliveryvehicles.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Fleet Engine Delivery Admin (`roles/fleetengine.deliveryAdmin`) Fleet Engine Delivery Super User (`roles/fleetengine.deliverySuperUser`)
`fleetengine.deliveryvehicles.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Fleet Engine Delivery Admin (`roles/fleetengine.deliveryAdmin`) Fleet Engine Delivery Fleet Reader User (`roles/fleetengine.deliveryFleetReader`) Fleet Engine Delivery Super User (`roles/fleetengine.deliverySuperUser`) Fleet Engine Delivery Trusted Driver User (`roles/fleetengine.deliveryTrustedDriver`) Fleet Engine Delivery Untrusted Driver User (`roles/fleetengine.deliveryUntrustedDriver`) Support User (`roles/iam.supportUser`)
`fleetengine.deliveryvehicles.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Fleet Engine Delivery Admin (`roles/fleetengine.deliveryAdmin`) Fleet Engine Delivery Fleet Reader User (`roles/fleetengine.deliveryFleetReader`) Fleet Engine Delivery Super User (`roles/fleetengine.deliverySuperUser`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`fleetengine.deliveryvehicles.update`	Owner (`roles/owner`) Editor (`roles/editor`) Fleet Engine Delivery Admin (`roles/fleetengine.deliveryAdmin`) Fleet Engine Delivery Super User (`roles/fleetengine.deliverySuperUser`) Fleet Engine Delivery Trusted Driver User (`roles/fleetengine.deliveryTrustedDriver`)
`fleetengine.deliveryvehicles.updateLocation`	Owner (`roles/owner`) Editor (`roles/editor`) Fleet Engine Delivery Admin (`roles/fleetengine.deliveryAdmin`) Fleet Engine Delivery Super User (`roles/fleetengine.deliverySuperUser`) Fleet Engine Delivery Trusted Driver User (`roles/fleetengine.deliveryTrustedDriver`) Fleet Engine Delivery Untrusted Driver User (`roles/fleetengine.deliveryUntrustedDriver`)
`fleetengine.deliveryvehicles.updateVehicleStops`	Owner (`roles/owner`) Editor (`roles/editor`) Fleet Engine Delivery Admin (`roles/fleetengine.deliveryAdmin`) Fleet Engine Delivery Super User (`roles/fleetengine.deliverySuperUser`) Fleet Engine Delivery Trusted Driver User (`roles/fleetengine.deliveryTrustedDriver`)
`fleetengine.tasks.allowAllActions`	Owner (`roles/owner`) Editor (`roles/editor`) Fleet Engine Delivery Admin (`roles/fleetengine.deliveryAdmin`)
`fleetengine.tasks.create`	Owner (`roles/owner`) Editor (`roles/editor`) Fleet Engine Delivery Admin (`roles/fleetengine.deliveryAdmin`) Fleet Engine Delivery Super User (`roles/fleetengine.deliverySuperUser`) Fleet Engine Delivery Trusted Driver User (`roles/fleetengine.deliveryTrustedDriver`)
`fleetengine.tasks.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Fleet Engine Delivery Admin (`roles/fleetengine.deliveryAdmin`) Fleet Engine Delivery Super User (`roles/fleetengine.deliverySuperUser`)
`fleetengine.tasks.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Fleet Engine Delivery Admin (`roles/fleetengine.deliveryAdmin`) Fleet Engine Delivery Fleet Reader User (`roles/fleetengine.deliveryFleetReader`) Fleet Engine Delivery Super User (`roles/fleetengine.deliverySuperUser`) Support User (`roles/iam.supportUser`)
`fleetengine.tasks.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Fleet Engine Delivery Admin (`roles/fleetengine.deliveryAdmin`) Fleet Engine Delivery Fleet Reader User (`roles/fleetengine.deliveryFleetReader`) Fleet Engine Delivery Super User (`roles/fleetengine.deliverySuperUser`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`fleetengine.tasks.searchWithTrackingId`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Fleet Engine Delivery Admin (`roles/fleetengine.deliveryAdmin`) Fleet Engine Delivery Consumer User (`roles/fleetengine.deliveryConsumer`) Fleet Engine Delivery Fleet Reader User (`roles/fleetengine.deliveryFleetReader`) Fleet Engine Delivery Super User (`roles/fleetengine.deliverySuperUser`) Support User (`roles/iam.supportUser`)
`fleetengine.tasks.update`	Owner (`roles/owner`) Editor (`roles/editor`) Fleet Engine Delivery Admin (`roles/fleetengine.deliveryAdmin`) Fleet Engine Delivery Super User (`roles/fleetengine.deliverySuperUser`) Fleet Engine Delivery Trusted Driver User (`roles/fleetengine.deliveryTrustedDriver`)
`fleetengine.tasktrackinginfo.allowAllActions`	Owner (`roles/owner`) Editor (`roles/editor`) Fleet Engine Delivery Admin (`roles/fleetengine.deliveryAdmin`)
`fleetengine.tasktrackinginfo.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Fleet Engine Delivery Admin (`roles/fleetengine.deliveryAdmin`) Fleet Engine Delivery Consumer User (`roles/fleetengine.deliveryConsumer`) Fleet Engine Delivery Fleet Reader User (`roles/fleetengine.deliveryFleetReader`) Fleet Engine Delivery Super User (`roles/fleetengine.deliverySuperUser`) Support User (`roles/iam.supportUser`)
`fleetengine.trips.allowAllActions`	Owner (`roles/owner`) Editor (`roles/editor`) Fleet Engine On-Demand Admin (`roles/fleetengine.ondemandAdmin`)
`fleetengine.trips.create`	Owner (`roles/owner`) Editor (`roles/editor`) Fleet Engine On-Demand Admin (`roles/fleetengine.ondemandAdmin`) Fleet Engine Service Super User (`roles/fleetengine.serviceSuperUser`)
`fleetengine.trips.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Fleet Engine On-Demand Admin (`roles/fleetengine.ondemandAdmin`) Fleet Engine Service Super User (`roles/fleetengine.serviceSuperUser`)
`fleetengine.trips.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Fleet Engine Consumer SDK User (`roles/fleetengine.consumerSdkUser`) Fleet Engine Driver SDK User (`roles/fleetengine.driverSdkUser`) Fleet Engine On-Demand Admin (`roles/fleetengine.ondemandAdmin`) Fleet Engine Service Super User (`roles/fleetengine.serviceSuperUser`) Support User (`roles/iam.supportUser`)
`fleetengine.trips.search`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Fleet Engine Driver SDK User (`roles/fleetengine.driverSdkUser`) Fleet Engine On-Demand Admin (`roles/fleetengine.ondemandAdmin`) Fleet Engine Service Super User (`roles/fleetengine.serviceSuperUser`) Support User (`roles/iam.supportUser`)
`fleetengine.trips.update`	Owner (`roles/owner`) Editor (`roles/editor`) Fleet Engine Driver SDK User (`roles/fleetengine.driverSdkUser`) Fleet Engine On-Demand Admin (`roles/fleetengine.ondemandAdmin`) Fleet Engine Service Super User (`roles/fleetengine.serviceSuperUser`)
`fleetengine.trips.updateState`	Owner (`roles/owner`) Editor (`roles/editor`) Fleet Engine On-Demand Admin (`roles/fleetengine.ondemandAdmin`) Fleet Engine Service Super User (`roles/fleetengine.serviceSuperUser`)
`fleetengine.vehicles.allowAllActions`	Owner (`roles/owner`) Editor (`roles/editor`) Fleet Engine On-Demand Admin (`roles/fleetengine.ondemandAdmin`)
`fleetengine.vehicles.create`	Owner (`roles/owner`) Editor (`roles/editor`) Fleet Engine On-Demand Admin (`roles/fleetengine.ondemandAdmin`) Fleet Engine Service Super User (`roles/fleetengine.serviceSuperUser`)
`fleetengine.vehicles.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Fleet Engine On-Demand Admin (`roles/fleetengine.ondemandAdmin`) Fleet Engine Service Super User (`roles/fleetengine.serviceSuperUser`)
`fleetengine.vehicles.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Fleet Engine Consumer SDK User (`roles/fleetengine.consumerSdkUser`) Fleet Engine Driver SDK User (`roles/fleetengine.driverSdkUser`) Fleet Engine On-Demand Admin (`roles/fleetengine.ondemandAdmin`) Fleet Engine Service Super User (`roles/fleetengine.serviceSuperUser`) Support User (`roles/iam.supportUser`)
`fleetengine.vehicles.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Fleet Engine On-Demand Admin (`roles/fleetengine.ondemandAdmin`) Fleet Engine Service Super User (`roles/fleetengine.serviceSuperUser`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`fleetengine.vehicles.search`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Fleet Engine Consumer SDK User (`roles/fleetengine.consumerSdkUser`) Fleet Engine On-Demand Admin (`roles/fleetengine.ondemandAdmin`) Fleet Engine Service Super User (`roles/fleetengine.serviceSuperUser`) Support User (`roles/iam.supportUser`)
`fleetengine.vehicles.searchFuzzed`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Fleet Engine Consumer SDK User (`roles/fleetengine.consumerSdkUser`) Fleet Engine On-Demand Admin (`roles/fleetengine.ondemandAdmin`) Fleet Engine Service Super User (`roles/fleetengine.serviceSuperUser`) Support User (`roles/iam.supportUser`)
`fleetengine.vehicles.update`	Owner (`roles/owner`) Editor (`roles/editor`) Fleet Engine On-Demand Admin (`roles/fleetengine.ondemandAdmin`) Fleet Engine Service Super User (`roles/fleetengine.serviceSuperUser`)
`fleetengine.vehicles.updateLocation`	Owner (`roles/owner`) Editor (`roles/editor`) Fleet Engine Driver SDK User (`roles/fleetengine.driverSdkUser`) Fleet Engine On-Demand Admin (`roles/fleetengine.ondemandAdmin`) Fleet Engine Service Super User (`roles/fleetengine.serviceSuperUser`)

FleetEngine roles and permissions