Memorystore roles and permissions

This page lists the IAM roles and permissions for Memorystore. To search through all roles and permissions, see the role and permission index.

Memorystore roles

Role Permissions

Role	Permissions
Memorystore Admin (`roles/memorystore.admin`) Full access to Memorystore resources.	`memorystore.*` `memorystore.backupCollections.get` `memorystore.backupCollections.list` `memorystore.backups.delete` `memorystore.backups.export` `memorystore.backups.get` `memorystore.backups.list` `memorystore.instances.backup` `memorystore.instances.connect` `memorystore.instances.create` `memorystore.instances.delete` `memorystore.instances.get` `memorystore.instances.list` `memorystore.instances.update` `memorystore.locations.get` `memorystore.locations.list` `memorystore.operations.cancel` `memorystore.operations.delete` `memorystore.operations.get` `memorystore.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Memorystore DB Connector User (`roles/memorystore.dbConnectionUser`) Access to connecting to Memorystore Server db.	`memorystore.instances.connect`
Cloud Memorystore Service Agent (`roles/memorystore.serviceAgent`) Gives Cloud Memorystore service account access to managed resource Warning: Do not grant service agent roles to any principals except service agents.	`compute.globalOperations.get` `compute.networks.addPeering` `compute.networks.get` `compute.networks.removePeering` `compute.projects.get` `compute.routes.get` `compute.routes.list` `compute.subnetworks.get` `compute.subnetworks.list` `monitoring.metricDescriptors.create` `monitoring.metricDescriptors.get` `monitoring.metricDescriptors.list` `monitoring.monitoredResourceDescriptors.*` `monitoring.monitoredResourceDescriptors.get` `monitoring.monitoredResourceDescriptors.list` `monitoring.timeSeries.create` `resourcemanager.projects.get` `resourcemanager.projects.list` `telemetry.metrics.write`
Memorystore Viewer (`roles/memorystore.viewer`) Readonly access to Memorystore resources.	`memorystore.backupCollections.` `memorystore.backupCollections.get` `memorystore.backupCollections.list` `memorystore.backups.get` `memorystore.backups.list` `memorystore.instances.get` `memorystore.instances.list` `memorystore.locations.` `memorystore.locations.get` `memorystore.locations.list` `memorystore.operations.get` `memorystore.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`

Memorystore Admin

(roles/memorystore.admin)

Full access to Memorystore resources.

memorystore.*

memorystore.backupCollections.get
memorystore.backupCollections.list
memorystore.backups.delete
memorystore.backups.export
memorystore.backups.get
memorystore.backups.list
memorystore.instances.backup
memorystore.instances.connect
memorystore.instances.create
memorystore.instances.delete
memorystore.instances.get
memorystore.instances.list
memorystore.instances.update
memorystore.locations.get
memorystore.locations.list
memorystore.operations.cancel
memorystore.operations.delete
memorystore.operations.get
memorystore.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Memorystore DB Connector User

(roles/memorystore.dbConnectionUser)

Access to connecting to Memorystore Server db.

memorystore.instances.connect

Cloud Memorystore Service Agent

(roles/memorystore.serviceAgent)

Gives Cloud Memorystore service account access to managed resource

compute.globalOperations.get

compute.networks.addPeering

compute.networks.get

compute.networks.removePeering

compute.projects.get

compute.routes.get

compute.routes.list

compute.subnetworks.get

compute.subnetworks.list

monitoring.metricDescriptors.create

monitoring.metricDescriptors.get

monitoring.metricDescriptors.list

monitoring.monitoredResourceDescriptors.*

monitoring.monitoredResourceDescriptors.get
monitoring.monitoredResourceDescriptors.list

monitoring.timeSeries.create

resourcemanager.projects.get

resourcemanager.projects.list

telemetry.metrics.write

Memorystore Viewer

(roles/memorystore.viewer)

Readonly access to Memorystore resources.

memorystore.backupCollections.*

memorystore.backupCollections.get
memorystore.backupCollections.list

memorystore.backups.get

memorystore.backups.list

memorystore.instances.get

memorystore.instances.list

memorystore.locations.*

memorystore.locations.get
memorystore.locations.list

memorystore.operations.get

memorystore.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Memorystore permissions

Permission	Included in roles
`memorystore.backupCollections.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Support User (`roles/iam.supportUser`) Memorystore Admin (`roles/memorystore.admin`) Memorystore Viewer (`roles/memorystore.viewer`)
`memorystore.backupCollections.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Memorystore Admin (`roles/memorystore.admin`) Memorystore Viewer (`roles/memorystore.viewer`)
`memorystore.backups.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Memorystore Admin (`roles/memorystore.admin`)
`memorystore.backups.export`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Memorystore Admin (`roles/memorystore.admin`)
`memorystore.backups.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Support User (`roles/iam.supportUser`) Memorystore Admin (`roles/memorystore.admin`) Memorystore Viewer (`roles/memorystore.viewer`)
`memorystore.backups.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Memorystore Admin (`roles/memorystore.admin`) Memorystore Viewer (`roles/memorystore.viewer`)
`memorystore.instances.backup`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Memorystore Admin (`roles/memorystore.admin`)
`memorystore.instances.connect`	Owner (`roles/owner`) Editor (`roles/editor`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Memorystore Admin (`roles/memorystore.admin`) Memorystore DB Connector User (`roles/memorystore.dbConnectionUser`)
`memorystore.instances.create`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Memorystore Admin (`roles/memorystore.admin`)
`memorystore.instances.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Memorystore Admin (`roles/memorystore.admin`)
`memorystore.instances.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Support User (`roles/iam.supportUser`) Memorystore Admin (`roles/memorystore.admin`) Memorystore Viewer (`roles/memorystore.viewer`)
`memorystore.instances.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Memorystore Admin (`roles/memorystore.admin`) Memorystore Viewer (`roles/memorystore.viewer`)
`memorystore.instances.update`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Memorystore Admin (`roles/memorystore.admin`)
`memorystore.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Support User (`roles/iam.supportUser`) Memorystore Admin (`roles/memorystore.admin`) Memorystore Viewer (`roles/memorystore.viewer`)
`memorystore.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Memorystore Admin (`roles/memorystore.admin`) Memorystore Viewer (`roles/memorystore.viewer`)
`memorystore.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Memorystore Admin (`roles/memorystore.admin`)
`memorystore.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Memorystore Admin (`roles/memorystore.admin`)
`memorystore.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Support User (`roles/iam.supportUser`) Memorystore Admin (`roles/memorystore.admin`) Memorystore Viewer (`roles/memorystore.viewer`)
`memorystore.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Memorystore Admin (`roles/memorystore.admin`) Memorystore Viewer (`roles/memorystore.viewer`)

Memorystore roles and permissions