Memorystore roles and permissions
Stay organized with collections Save and categorize content based on your preferences.

This page lists the IAM roles and permissions for Memorystore. To search through all roles and permissions, see the role and permission index.

Memorystore roles

Role Permissions

Role	Permissions
Memorystore Admin (`roles/memorystore.admin`) Full access to Memorystore resources.	`memorystore.*` `memorystore.backupCollections.get` `memorystore.backupCollections.list` `memorystore.backups.delete` `memorystore.backups.export` `memorystore.backups.get` `memorystore.backups.list` `memorystore.instances.backup` `memorystore.instances.connect` `memorystore.instances.create` `memorystore.instances.delete` `memorystore.instances.get` `memorystore.instances.list` `memorystore.instances.update` `memorystore.locations.get` `memorystore.locations.list` `memorystore.operations.cancel` `memorystore.operations.delete` `memorystore.operations.get` `memorystore.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Memorystore DB Connector User (`roles/memorystore.dbConnectionUser`) Access to connecting to Memorystore Server db.	`memorystore.instances.connect`
Cloud Memorystore Service Agent (`roles/memorystore.serviceAgent`) Gives Cloud Memorystore service account access to managed resource Warning: Do not grant service agent roles to any principals except service agents.	`compute.globalOperations.get` `compute.networks.addPeering` `compute.networks.get` `compute.networks.removePeering` `compute.projects.get` `compute.routes.get` `compute.routes.list` `compute.subnetworks.get` `compute.subnetworks.list` `monitoring.metricDescriptors.create` `monitoring.metricDescriptors.get` `monitoring.metricDescriptors.list` `monitoring.monitoredResourceDescriptors.*` `monitoring.monitoredResourceDescriptors.get` `monitoring.monitoredResourceDescriptors.list` `monitoring.timeSeries.create` `resourcemanager.projects.get` `resourcemanager.projects.list`
Memorystore Viewer (`roles/memorystore.viewer`) Readonly access to Memorystore resources.	`memorystore.backupCollections.` `memorystore.backupCollections.get` `memorystore.backupCollections.list` `memorystore.backups.get` `memorystore.backups.list` `memorystore.instances.get` `memorystore.instances.list` `memorystore.locations.` `memorystore.locations.get` `memorystore.locations.list` `memorystore.operations.get` `memorystore.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`

Memorystore Admin

(roles/memorystore.admin)

Full access to Memorystore resources.

memorystore.*

memorystore.backupCollections.get
memorystore.backupCollections.list
memorystore.backups.delete
memorystore.backups.export
memorystore.backups.get
memorystore.backups.list
memorystore.instances.backup
memorystore.instances.connect
memorystore.instances.create
memorystore.instances.delete
memorystore.instances.get
memorystore.instances.list
memorystore.instances.update
memorystore.locations.get
memorystore.locations.list
memorystore.operations.cancel
memorystore.operations.delete
memorystore.operations.get
memorystore.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Memorystore DB Connector User

(roles/memorystore.dbConnectionUser)

Access to connecting to Memorystore Server db.

memorystore.instances.connect

Cloud Memorystore Service Agent

(roles/memorystore.serviceAgent)

Gives Cloud Memorystore service account access to managed resource

compute.globalOperations.get

compute.networks.addPeering

compute.networks.get

compute.networks.removePeering

compute.projects.get

compute.routes.get

compute.routes.list

compute.subnetworks.get

compute.subnetworks.list

monitoring.metricDescriptors.create

monitoring.metricDescriptors.get

monitoring.metricDescriptors.list

monitoring.monitoredResourceDescriptors.*

monitoring.monitoredResourceDescriptors.get
monitoring.monitoredResourceDescriptors.list

monitoring.timeSeries.create

resourcemanager.projects.get

resourcemanager.projects.list

Memorystore Viewer

(roles/memorystore.viewer)

Readonly access to Memorystore resources.

memorystore.backupCollections.*

memorystore.backupCollections.get
memorystore.backupCollections.list

memorystore.backups.get

memorystore.backups.list

memorystore.instances.get

memorystore.instances.list

memorystore.locations.*

memorystore.locations.get
memorystore.locations.list

memorystore.operations.get

memorystore.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Memorystore permissions

Permission	Included in roles
`memorystore.backupCollections.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Memorystore Admin (`roles/memorystore.admin`) Memorystore Viewer (`roles/memorystore.viewer`)
`memorystore.backupCollections.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Memorystore Admin (`roles/memorystore.admin`) Memorystore Viewer (`roles/memorystore.viewer`)
`memorystore.backups.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Memorystore Admin (`roles/memorystore.admin`)
`memorystore.backups.export`	Owner (`roles/owner`) Editor (`roles/editor`) Memorystore Admin (`roles/memorystore.admin`)
`memorystore.backups.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Memorystore Admin (`roles/memorystore.admin`) Memorystore Viewer (`roles/memorystore.viewer`)
`memorystore.backups.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Memorystore Admin (`roles/memorystore.admin`) Memorystore Viewer (`roles/memorystore.viewer`)
`memorystore.instances.backup`	Owner (`roles/owner`) Editor (`roles/editor`) Memorystore Admin (`roles/memorystore.admin`)
`memorystore.instances.connect`	Owner (`roles/owner`) Editor (`roles/editor`) Memorystore Admin (`roles/memorystore.admin`) Memorystore DB Connector User (`roles/memorystore.dbConnectionUser`)
`memorystore.instances.create`	Owner (`roles/owner`) Editor (`roles/editor`) Memorystore Admin (`roles/memorystore.admin`)
`memorystore.instances.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Memorystore Admin (`roles/memorystore.admin`)
`memorystore.instances.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Memorystore Admin (`roles/memorystore.admin`) Memorystore Viewer (`roles/memorystore.viewer`)
`memorystore.instances.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Memorystore Admin (`roles/memorystore.admin`) Memorystore Viewer (`roles/memorystore.viewer`)
`memorystore.instances.update`	Owner (`roles/owner`) Editor (`roles/editor`) Memorystore Admin (`roles/memorystore.admin`)
`memorystore.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Memorystore Admin (`roles/memorystore.admin`) Memorystore Viewer (`roles/memorystore.viewer`)
`memorystore.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Memorystore Admin (`roles/memorystore.admin`) Memorystore Viewer (`roles/memorystore.viewer`)
`memorystore.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Memorystore Admin (`roles/memorystore.admin`)
`memorystore.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Memorystore Admin (`roles/memorystore.admin`)
`memorystore.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Memorystore Admin (`roles/memorystore.admin`) Memorystore Viewer (`roles/memorystore.viewer`)
`memorystore.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Memorystore Admin (`roles/memorystore.admin`) Memorystore Viewer (`roles/memorystore.viewer`)

Memorystore roles and permissions
Stay organized with collections Save and categorize content based on your preferences.