[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-29 UTC."],[],[],null,["This page lists the IAM roles and permissions for Knative serving. To\nsearch through all roles and permissions, see the [role and\npermission index](/iam/docs/roles-permissions).\n\nKnative serving roles\n\n| Role | Permissions |\n|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| KubeRun Events Control Plane Service Agent (`roles/``kuberun.eventsControlPlaneServiceAgent`) Service account role used to setup authentication for the control plane used by KubeRun Events. | **Warning:** Do not grant service agent roles to any principals except [service agents](/iam/docs/service-agents). | `cloudscheduler.jobs.create` `cloudscheduler.jobs.delete` `cloudscheduler.jobs.get` `logging.sinks.create` `logging.sinks.delete` `logging.sinks.get` `pubsub.subscriptions.create` `pubsub.subscriptions.delete` `pubsub.subscriptions.get` `pubsub.``topics.``attachSubscription` `pubsub.topics.create` `pubsub.topics.delete` `pubsub.topics.get` `pubsub.topics.getIamPolicy` `pubsub.topics.setIamPolicy` `resourcemanager.projects.get` `storage.buckets.get` `storage.buckets.update` |\n| KubeRun Events Data Plane Service Agent (`roles/``kuberun.eventsDataPlaneServiceAgent`) Service account role used to setup authentication for the data plane used by KubeRun Events. | **Warning:** Do not grant service agent roles to any principals except [service agents](/iam/docs/service-agents). | `cloudtrace.traces.patch` `monitoring.timeSeries.create` `pubsub.subscriptions.consume` `pubsub.subscriptions.get` `pubsub.topics.get` `pubsub.topics.publish` `resourcemanager.projects.get` |\n\nKnative serving permissions\n\nThere are no IAM permissions for this service."]]
