Network Security roles and permissions
Stay organized with collections Save and categorize content based on your preferences.

This page lists the IAM roles and permissions for Network Security. To search through all roles and permissions, see the role and permission index.

Network Security roles

Role Permissions

Role	Permissions
Intercept Deployment Admin ^Beta (`roles/networksecurity.interceptDeploymentAdmin`) Enables full access to intercept resources on the Producer's side.	`networksecurity.interceptDeploymentGroups.` `networksecurity.interceptDeploymentGroups.create` `networksecurity.interceptDeploymentGroups.delete` `networksecurity.interceptDeploymentGroups.get` `networksecurity.interceptDeploymentGroups.list` `networksecurity.interceptDeploymentGroups.update` `networksecurity.interceptDeploymentGroups.use` `networksecurity.interceptDeployments.` `networksecurity.interceptDeployments.create` `networksecurity.interceptDeployments.delete` `networksecurity.interceptDeployments.get` `networksecurity.interceptDeployments.list` `networksecurity.interceptDeployments.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Intercept Deployment User ^Beta (`roles/networksecurity.interceptDeploymentUser`) Allows a consumer to view and connect to a producer's interceptDeploymentGroup.	`networksecurity.interceptDeploymentGroups.get` `networksecurity.interceptDeploymentGroups.list` `networksecurity.interceptDeploymentGroups.use`
Intercept Deployment Viewer ^Beta (`roles/networksecurity.interceptDeploymentViewer`) Enables read-only access to intercept resources on the Producer's side.	`networksecurity.interceptDeploymentGroups.get` `networksecurity.interceptDeploymentGroups.list` `networksecurity.interceptDeployments.get` `networksecurity.interceptDeployments.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Intercept Endpoint Admin ^Beta (`roles/networksecurity.interceptEndpointAdmin`) Enables full access to intercept resources on the consumer's side.	`networksecurity.interceptEndpointGroupAssociations.` `networksecurity.interceptEndpointGroupAssociations.create` `networksecurity.interceptEndpointGroupAssociations.delete` `networksecurity.interceptEndpointGroupAssociations.get` `networksecurity.interceptEndpointGroupAssociations.list` `networksecurity.interceptEndpointGroupAssociations.update` `networksecurity.interceptEndpointGroups.` `networksecurity.interceptEndpointGroups.create` `networksecurity.interceptEndpointGroups.delete` `networksecurity.interceptEndpointGroups.get` `networksecurity.interceptEndpointGroups.list` `networksecurity.interceptEndpointGroups.update` `networksecurity.interceptEndpointGroups.use` `resourcemanager.projects.get` `resourcemanager.projects.list`
Intercept Endpoint User ^Beta (`roles/networksecurity.interceptEndpointUser`) Allows a consumer to connect their networks to a interceptEndpointGroup.	`networksecurity.interceptEndpointGroups.get` `networksecurity.interceptEndpointGroups.list` `networksecurity.interceptEndpointGroups.use`
Intercept Endpoint Viewer ^Beta (`roles/networksecurity.interceptEndpointViewer`) Enables read-only access to intercept resources on the Consumer's side.	`networksecurity.interceptEndpointGroupAssociations.get` `networksecurity.interceptEndpointGroupAssociations.list` `networksecurity.interceptEndpointGroups.get` `networksecurity.interceptEndpointGroups.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Mirroring Deployment Admin ^Beta (`roles/networksecurity.mirroringDeploymentAdmin`) Enables full access to mirroring resources on the Producer's side.	`networksecurity.mirroringDeploymentGroups.` `networksecurity.mirroringDeploymentGroups.create` `networksecurity.mirroringDeploymentGroups.delete` `networksecurity.mirroringDeploymentGroups.get` `networksecurity.mirroringDeploymentGroups.list` `networksecurity.mirroringDeploymentGroups.update` `networksecurity.mirroringDeploymentGroups.use` `networksecurity.mirroringDeployments.` `networksecurity.mirroringDeployments.create` `networksecurity.mirroringDeployments.delete` `networksecurity.mirroringDeployments.get` `networksecurity.mirroringDeployments.list` `networksecurity.mirroringDeployments.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Mirroring Deployment External User ^Beta (`roles/networksecurity.mirroringDeploymentExternalUser`) Allows an external consumer to a producer's mirroringDeploymentGroup.	`networksecurity.mirroringDeploymentGroups.use`
Mirroring Deployment User ^Beta (`roles/networksecurity.mirroringDeploymentUser`) Allows a consumer to view and connect to a Producer's mirroringDeploymentGroup.	`networksecurity.mirroringDeploymentGroups.get` `networksecurity.mirroringDeploymentGroups.list` `networksecurity.mirroringDeploymentGroups.use`
Mirroring Deployment Viewer ^Beta (`roles/networksecurity.mirroringDeploymentViewer`) Enables read-only access to mirroring resources on the Producer's side.	`networksecurity.mirroringDeploymentGroups.get` `networksecurity.mirroringDeploymentGroups.list` `networksecurity.mirroringDeployments.get` `networksecurity.mirroringDeployments.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Mirroring Endpoint Admin ^Beta (`roles/networksecurity.mirroringEndpointAdmin`) Enables full access to mirroring resources on the consumer's side.	`networksecurity.mirroringEndpointGroupAssociations.` `networksecurity.mirroringEndpointGroupAssociations.create` `networksecurity.mirroringEndpointGroupAssociations.delete` `networksecurity.mirroringEndpointGroupAssociations.get` `networksecurity.mirroringEndpointGroupAssociations.list` `networksecurity.mirroringEndpointGroupAssociations.update` `networksecurity.mirroringEndpointGroups.` `networksecurity.mirroringEndpointGroups.create` `networksecurity.mirroringEndpointGroups.delete` `networksecurity.mirroringEndpointGroups.get` `networksecurity.mirroringEndpointGroups.list` `networksecurity.mirroringEndpointGroups.update` `networksecurity.mirroringEndpointGroups.use` `resourcemanager.projects.get` `resourcemanager.projects.list`
Mirroring Endpoint User ^Beta (`roles/networksecurity.mirroringEndpointUser`) Allows a consumer to connect their networks to a mirroringEndpointGroup.	`networksecurity.mirroringEndpointGroups.get` `networksecurity.mirroringEndpointGroups.list` `networksecurity.mirroringEndpointGroups.use`
Mirroring Endpoint Viewer ^Beta (`roles/networksecurity.mirroringEndpointViewer`) Enables read-only access to mirroring resources on the Consumer's side.	`networksecurity.mirroringEndpointGroupAssociations.get` `networksecurity.mirroringEndpointGroupAssociations.list` `networksecurity.mirroringEndpointGroups.get` `networksecurity.mirroringEndpointGroups.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Security Profile Admin ^Beta (`roles/networksecurity.securityProfileAdmin`) Enables full access to security profile and security profile group resources.	`networksecurity.operations.get` `networksecurity.operations.list` `networksecurity.securityProfileGroups.` `networksecurity.securityProfileGroups.create` `networksecurity.securityProfileGroups.delete` `networksecurity.securityProfileGroups.get` `networksecurity.securityProfileGroups.list` `networksecurity.securityProfileGroups.update` `networksecurity.securityProfileGroups.use` `networksecurity.securityProfiles.` `networksecurity.securityProfiles.create` `networksecurity.securityProfiles.delete` `networksecurity.securityProfiles.get` `networksecurity.securityProfiles.list` `networksecurity.securityProfiles.update` `networksecurity.securityProfiles.use` `resourcemanager.projects.get` `resourcemanager.projects.list`

Intercept Deployment Admin ^Beta

(roles/networksecurity.interceptDeploymentAdmin)

Enables full access to intercept resources on the Producer's side.

networksecurity.interceptDeploymentGroups.*

networksecurity.interceptDeploymentGroups.create
networksecurity.interceptDeploymentGroups.delete
networksecurity.interceptDeploymentGroups.get
networksecurity.interceptDeploymentGroups.list
networksecurity.interceptDeploymentGroups.update
networksecurity.interceptDeploymentGroups.use

networksecurity.interceptDeployments.*

networksecurity.interceptDeployments.create
networksecurity.interceptDeployments.delete
networksecurity.interceptDeployments.get
networksecurity.interceptDeployments.list
networksecurity.interceptDeployments.update

resourcemanager.projects.get

resourcemanager.projects.list

Intercept Deployment User ^Beta

(roles/networksecurity.interceptDeploymentUser)

Allows a consumer to view and connect to a producer's interceptDeploymentGroup.

networksecurity.interceptDeploymentGroups.get

networksecurity.interceptDeploymentGroups.list

networksecurity.interceptDeploymentGroups.use

Intercept Deployment Viewer ^Beta

(roles/networksecurity.interceptDeploymentViewer)

Enables read-only access to intercept resources on the Producer's side.

networksecurity.interceptDeploymentGroups.get

networksecurity.interceptDeploymentGroups.list

networksecurity.interceptDeployments.get

networksecurity.interceptDeployments.list

resourcemanager.projects.get

resourcemanager.projects.list

Intercept Endpoint Admin ^Beta

(roles/networksecurity.interceptEndpointAdmin)

Enables full access to intercept resources on the consumer's side.

networksecurity.interceptEndpointGroupAssociations.*

networksecurity.interceptEndpointGroupAssociations.create
networksecurity.interceptEndpointGroupAssociations.delete
networksecurity.interceptEndpointGroupAssociations.get
networksecurity.interceptEndpointGroupAssociations.list
networksecurity.interceptEndpointGroupAssociations.update

networksecurity.interceptEndpointGroups.*

networksecurity.interceptEndpointGroups.create
networksecurity.interceptEndpointGroups.delete
networksecurity.interceptEndpointGroups.get
networksecurity.interceptEndpointGroups.list
networksecurity.interceptEndpointGroups.update
networksecurity.interceptEndpointGroups.use

resourcemanager.projects.get

resourcemanager.projects.list

Intercept Endpoint User ^Beta

(roles/networksecurity.interceptEndpointUser)

Allows a consumer to connect their networks to a interceptEndpointGroup.

networksecurity.interceptEndpointGroups.get

networksecurity.interceptEndpointGroups.list

networksecurity.interceptEndpointGroups.use

Intercept Endpoint Viewer ^Beta

(roles/networksecurity.interceptEndpointViewer)

Enables read-only access to intercept resources on the Consumer's side.

networksecurity.interceptEndpointGroupAssociations.get

networksecurity.interceptEndpointGroupAssociations.list

networksecurity.interceptEndpointGroups.get

networksecurity.interceptEndpointGroups.list

resourcemanager.projects.get

resourcemanager.projects.list

Mirroring Deployment Admin ^Beta

(roles/networksecurity.mirroringDeploymentAdmin)

Enables full access to mirroring resources on the Producer's side.

networksecurity.mirroringDeploymentGroups.*

networksecurity.mirroringDeploymentGroups.create
networksecurity.mirroringDeploymentGroups.delete
networksecurity.mirroringDeploymentGroups.get
networksecurity.mirroringDeploymentGroups.list
networksecurity.mirroringDeploymentGroups.update
networksecurity.mirroringDeploymentGroups.use

networksecurity.mirroringDeployments.*

networksecurity.mirroringDeployments.create
networksecurity.mirroringDeployments.delete
networksecurity.mirroringDeployments.get
networksecurity.mirroringDeployments.list
networksecurity.mirroringDeployments.update

resourcemanager.projects.get

resourcemanager.projects.list

Mirroring Deployment External User ^Beta

(roles/networksecurity.mirroringDeploymentExternalUser)

Allows an external consumer to a producer's mirroringDeploymentGroup.

networksecurity.mirroringDeploymentGroups.use

Mirroring Deployment User ^Beta

(roles/networksecurity.mirroringDeploymentUser)

Allows a consumer to view and connect to a Producer's mirroringDeploymentGroup.

networksecurity.mirroringDeploymentGroups.get

networksecurity.mirroringDeploymentGroups.list

networksecurity.mirroringDeploymentGroups.use

Mirroring Deployment Viewer ^Beta

(roles/networksecurity.mirroringDeploymentViewer)

Enables read-only access to mirroring resources on the Producer's side.

networksecurity.mirroringDeploymentGroups.get

networksecurity.mirroringDeploymentGroups.list

networksecurity.mirroringDeployments.get

networksecurity.mirroringDeployments.list

resourcemanager.projects.get

resourcemanager.projects.list

Mirroring Endpoint Admin ^Beta

(roles/networksecurity.mirroringEndpointAdmin)

Enables full access to mirroring resources on the consumer's side.

networksecurity.mirroringEndpointGroupAssociations.*

networksecurity.mirroringEndpointGroupAssociations.create
networksecurity.mirroringEndpointGroupAssociations.delete
networksecurity.mirroringEndpointGroupAssociations.get
networksecurity.mirroringEndpointGroupAssociations.list
networksecurity.mirroringEndpointGroupAssociations.update

networksecurity.mirroringEndpointGroups.*

networksecurity.mirroringEndpointGroups.create
networksecurity.mirroringEndpointGroups.delete
networksecurity.mirroringEndpointGroups.get
networksecurity.mirroringEndpointGroups.list
networksecurity.mirroringEndpointGroups.update
networksecurity.mirroringEndpointGroups.use

resourcemanager.projects.get

resourcemanager.projects.list

Mirroring Endpoint User ^Beta

(roles/networksecurity.mirroringEndpointUser)

Allows a consumer to connect their networks to a mirroringEndpointGroup.

networksecurity.mirroringEndpointGroups.get

networksecurity.mirroringEndpointGroups.list

networksecurity.mirroringEndpointGroups.use

Mirroring Endpoint Viewer ^Beta

(roles/networksecurity.mirroringEndpointViewer)

Enables read-only access to mirroring resources on the Consumer's side.

networksecurity.mirroringEndpointGroupAssociations.get

networksecurity.mirroringEndpointGroupAssociations.list

networksecurity.mirroringEndpointGroups.get

networksecurity.mirroringEndpointGroups.list

resourcemanager.projects.get

resourcemanager.projects.list

Security Profile Admin ^Beta

(roles/networksecurity.securityProfileAdmin)

Enables full access to security profile and security profile group resources.

networksecurity.operations.get

networksecurity.operations.list

networksecurity.securityProfileGroups.*

networksecurity.securityProfileGroups.create
networksecurity.securityProfileGroups.delete
networksecurity.securityProfileGroups.get
networksecurity.securityProfileGroups.list
networksecurity.securityProfileGroups.update
networksecurity.securityProfileGroups.use

networksecurity.securityProfiles.*

networksecurity.securityProfiles.create
networksecurity.securityProfiles.delete
networksecurity.securityProfiles.get
networksecurity.securityProfiles.list
networksecurity.securityProfiles.update
networksecurity.securityProfiles.use

resourcemanager.projects.get

resourcemanager.projects.list

Network Security permissions

Permission	Included in roles
`networksecurity.addressGroups.create`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.addressGroups.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.addressGroups.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.addressGroups.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.addressGroups.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.addressGroups.setIamPolicy`	Owner (`roles/owner`) Compute Network Admin (`roles/compute.networkAdmin`) Security Admin (`roles/iam.securityAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.addressGroups.update`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.addressGroups.use`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.authorizationPolicies.create`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Anthos Service Mesh Service Agent (`roles/anthosservicemesh.serviceAgent`)
`networksecurity.authorizationPolicies.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Anthos Service Mesh Service Agent (`roles/anthosservicemesh.serviceAgent`)
`networksecurity.authorizationPolicies.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Anthos Service Mesh Service Agent (`roles/anthosservicemesh.serviceAgent`)
`networksecurity.authorizationPolicies.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.authorizationPolicies.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Anthos Service Mesh Service Agent (`roles/anthosservicemesh.serviceAgent`)
`networksecurity.authorizationPolicies.setIamPolicy`	Owner (`roles/owner`) Compute Network Admin (`roles/compute.networkAdmin`) Security Admin (`roles/iam.securityAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.authorizationPolicies.update`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Anthos Service Mesh Service Agent (`roles/anthosservicemesh.serviceAgent`)
`networksecurity.authorizationPolicies.use`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Anthos Service Mesh Service Agent (`roles/anthosservicemesh.serviceAgent`)
`networksecurity.authzPolicies.create`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.authzPolicies.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.authzPolicies.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.authzPolicies.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.authzPolicies.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.authzPolicies.setIamPolicy`	Owner (`roles/owner`) Compute Network Admin (`roles/compute.networkAdmin`) Security Admin (`roles/iam.securityAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.authzPolicies.update`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.backendAuthenticationConfigs.create`	Owner (`roles/owner`) Editor (`roles/editor`)
`networksecurity.backendAuthenticationConfigs.delete`	Owner (`roles/owner`) Editor (`roles/editor`)
`networksecurity.backendAuthenticationConfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`)
`networksecurity.backendAuthenticationConfigs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`networksecurity.backendAuthenticationConfigs.update`	Owner (`roles/owner`) Editor (`roles/editor`)
`networksecurity.backendAuthenticationConfigs.use`	Owner (`roles/owner`) Editor (`roles/editor`)
`networksecurity.clientTlsPolicies.create`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Mesh Config Service Agent (`roles/meshconfig.serviceAgent`) Anthos Service Mesh Service Agent (`roles/anthosservicemesh.serviceAgent`)
`networksecurity.clientTlsPolicies.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Mesh Config Service Agent (`roles/meshconfig.serviceAgent`) Anthos Service Mesh Service Agent (`roles/anthosservicemesh.serviceAgent`)
`networksecurity.clientTlsPolicies.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Load Balancer Admin (`roles/compute.loadBalancerAdmin`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Mesh Config Service Agent (`roles/meshconfig.serviceAgent`) Anthos Service Mesh Service Agent (`roles/anthosservicemesh.serviceAgent`)
`networksecurity.clientTlsPolicies.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.clientTlsPolicies.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Load Balancer Admin (`roles/compute.loadBalancerAdmin`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Mesh Config Service Agent (`roles/meshconfig.serviceAgent`) Anthos Service Mesh Service Agent (`roles/anthosservicemesh.serviceAgent`)
`networksecurity.clientTlsPolicies.setIamPolicy`	Owner (`roles/owner`) Compute Network Admin (`roles/compute.networkAdmin`) Security Admin (`roles/iam.securityAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.clientTlsPolicies.update`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Mesh Config Service Agent (`roles/meshconfig.serviceAgent`) Anthos Service Mesh Service Agent (`roles/anthosservicemesh.serviceAgent`)
`networksecurity.clientTlsPolicies.use`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Load Balancer Admin (`roles/compute.loadBalancerAdmin`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Anthos Service Mesh Service Agent (`roles/anthosservicemesh.serviceAgent`)
`networksecurity.firewallEndpointAssociations.create`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.firewallEndpointAssociations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.firewallEndpointAssociations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.firewallEndpointAssociations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.firewallEndpointAssociations.update`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.firewallEndpoints.create`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.firewallEndpoints.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.firewallEndpoints.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.firewallEndpoints.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.firewallEndpoints.update`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.firewallEndpoints.use`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.gatewaySecurityPolicies.create`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.gatewaySecurityPolicies.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.gatewaySecurityPolicies.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.gatewaySecurityPolicies.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.gatewaySecurityPolicies.update`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.gatewaySecurityPolicies.use`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.gatewaySecurityPolicyRules.create`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.gatewaySecurityPolicyRules.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.gatewaySecurityPolicyRules.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.gatewaySecurityPolicyRules.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.gatewaySecurityPolicyRules.update`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.gatewaySecurityPolicyRules.use`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.interceptDeploymentGroups.create`	Owner (`roles/owner`) Editor (`roles/editor`) Intercept Deployment Admin (`roles/networksecurity.interceptDeploymentAdmin`)
`networksecurity.interceptDeploymentGroups.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Intercept Deployment Admin (`roles/networksecurity.interceptDeploymentAdmin`)
`networksecurity.interceptDeploymentGroups.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Intercept Deployment Admin (`roles/networksecurity.interceptDeploymentAdmin`) Intercept Deployment User (`roles/networksecurity.interceptDeploymentUser`) Intercept Deployment Viewer (`roles/networksecurity.interceptDeploymentViewer`)
`networksecurity.interceptDeploymentGroups.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Intercept Deployment Admin (`roles/networksecurity.interceptDeploymentAdmin`) Intercept Deployment User (`roles/networksecurity.interceptDeploymentUser`) Intercept Deployment Viewer (`roles/networksecurity.interceptDeploymentViewer`)
`networksecurity.interceptDeploymentGroups.update`	Owner (`roles/owner`) Editor (`roles/editor`) Intercept Deployment Admin (`roles/networksecurity.interceptDeploymentAdmin`)
`networksecurity.interceptDeploymentGroups.use`	Owner (`roles/owner`) Editor (`roles/editor`) Intercept Deployment Admin (`roles/networksecurity.interceptDeploymentAdmin`) Intercept Deployment User (`roles/networksecurity.interceptDeploymentUser`)
`networksecurity.interceptDeployments.create`	Owner (`roles/owner`) Editor (`roles/editor`) Intercept Deployment Admin (`roles/networksecurity.interceptDeploymentAdmin`)
`networksecurity.interceptDeployments.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Intercept Deployment Admin (`roles/networksecurity.interceptDeploymentAdmin`)
`networksecurity.interceptDeployments.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Intercept Deployment Admin (`roles/networksecurity.interceptDeploymentAdmin`) Intercept Deployment Viewer (`roles/networksecurity.interceptDeploymentViewer`)
`networksecurity.interceptDeployments.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Intercept Deployment Admin (`roles/networksecurity.interceptDeploymentAdmin`) Intercept Deployment Viewer (`roles/networksecurity.interceptDeploymentViewer`)
`networksecurity.interceptDeployments.update`	Owner (`roles/owner`) Editor (`roles/editor`) Intercept Deployment Admin (`roles/networksecurity.interceptDeploymentAdmin`)
`networksecurity.interceptEndpointGroupAssociations.create`	Owner (`roles/owner`) Editor (`roles/editor`) Intercept Endpoint Admin (`roles/networksecurity.interceptEndpointAdmin`)
`networksecurity.interceptEndpointGroupAssociations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Intercept Endpoint Admin (`roles/networksecurity.interceptEndpointAdmin`)
`networksecurity.interceptEndpointGroupAssociations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Intercept Endpoint Admin (`roles/networksecurity.interceptEndpointAdmin`) Intercept Endpoint Viewer (`roles/networksecurity.interceptEndpointViewer`)
`networksecurity.interceptEndpointGroupAssociations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Intercept Endpoint Admin (`roles/networksecurity.interceptEndpointAdmin`) Intercept Endpoint Viewer (`roles/networksecurity.interceptEndpointViewer`)
`networksecurity.interceptEndpointGroupAssociations.update`	Owner (`roles/owner`) Editor (`roles/editor`) Intercept Endpoint Admin (`roles/networksecurity.interceptEndpointAdmin`)
`networksecurity.interceptEndpointGroups.create`	Owner (`roles/owner`) Editor (`roles/editor`) Intercept Endpoint Admin (`roles/networksecurity.interceptEndpointAdmin`)
`networksecurity.interceptEndpointGroups.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Intercept Endpoint Admin (`roles/networksecurity.interceptEndpointAdmin`)
`networksecurity.interceptEndpointGroups.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Intercept Endpoint Admin (`roles/networksecurity.interceptEndpointAdmin`) Intercept Endpoint User (`roles/networksecurity.interceptEndpointUser`) Intercept Endpoint Viewer (`roles/networksecurity.interceptEndpointViewer`)
`networksecurity.interceptEndpointGroups.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Intercept Endpoint Admin (`roles/networksecurity.interceptEndpointAdmin`) Intercept Endpoint User (`roles/networksecurity.interceptEndpointUser`) Intercept Endpoint Viewer (`roles/networksecurity.interceptEndpointViewer`)
`networksecurity.interceptEndpointGroups.update`	Owner (`roles/owner`) Editor (`roles/editor`) Intercept Endpoint Admin (`roles/networksecurity.interceptEndpointAdmin`)
`networksecurity.interceptEndpointGroups.use`	Owner (`roles/owner`) Editor (`roles/editor`) Intercept Endpoint Admin (`roles/networksecurity.interceptEndpointAdmin`) Intercept Endpoint User (`roles/networksecurity.interceptEndpointUser`)
`networksecurity.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.mirroringDeploymentGroups.create`	Owner (`roles/owner`) Editor (`roles/editor`) Mirroring Deployment Admin (`roles/networksecurity.mirroringDeploymentAdmin`)
`networksecurity.mirroringDeploymentGroups.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Mirroring Deployment Admin (`roles/networksecurity.mirroringDeploymentAdmin`)
`networksecurity.mirroringDeploymentGroups.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Mirroring Deployment Admin (`roles/networksecurity.mirroringDeploymentAdmin`) Mirroring Deployment User (`roles/networksecurity.mirroringDeploymentUser`) Mirroring Deployment Viewer (`roles/networksecurity.mirroringDeploymentViewer`)
`networksecurity.mirroringDeploymentGroups.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Mirroring Deployment Admin (`roles/networksecurity.mirroringDeploymentAdmin`) Mirroring Deployment User (`roles/networksecurity.mirroringDeploymentUser`) Mirroring Deployment Viewer (`roles/networksecurity.mirroringDeploymentViewer`)
`networksecurity.mirroringDeploymentGroups.update`	Owner (`roles/owner`) Editor (`roles/editor`) Mirroring Deployment Admin (`roles/networksecurity.mirroringDeploymentAdmin`)
`networksecurity.mirroringDeploymentGroups.use`	Owner (`roles/owner`) Editor (`roles/editor`) Mirroring Deployment Admin (`roles/networksecurity.mirroringDeploymentAdmin`) Mirroring Deployment External User (`roles/networksecurity.mirroringDeploymentExternalUser`) Mirroring Deployment User (`roles/networksecurity.mirroringDeploymentUser`)
`networksecurity.mirroringDeployments.create`	Owner (`roles/owner`) Editor (`roles/editor`) Mirroring Deployment Admin (`roles/networksecurity.mirroringDeploymentAdmin`)
`networksecurity.mirroringDeployments.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Mirroring Deployment Admin (`roles/networksecurity.mirroringDeploymentAdmin`)
`networksecurity.mirroringDeployments.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Mirroring Deployment Admin (`roles/networksecurity.mirroringDeploymentAdmin`) Mirroring Deployment Viewer (`roles/networksecurity.mirroringDeploymentViewer`)
`networksecurity.mirroringDeployments.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Mirroring Deployment Admin (`roles/networksecurity.mirroringDeploymentAdmin`) Mirroring Deployment Viewer (`roles/networksecurity.mirroringDeploymentViewer`)
`networksecurity.mirroringDeployments.update`	Owner (`roles/owner`) Editor (`roles/editor`) Mirroring Deployment Admin (`roles/networksecurity.mirroringDeploymentAdmin`)
`networksecurity.mirroringEndpointGroupAssociations.create`	Owner (`roles/owner`) Editor (`roles/editor`) Mirroring Endpoint Admin (`roles/networksecurity.mirroringEndpointAdmin`)
`networksecurity.mirroringEndpointGroupAssociations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Mirroring Endpoint Admin (`roles/networksecurity.mirroringEndpointAdmin`)
`networksecurity.mirroringEndpointGroupAssociations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Mirroring Endpoint Admin (`roles/networksecurity.mirroringEndpointAdmin`) Mirroring Endpoint Viewer (`roles/networksecurity.mirroringEndpointViewer`)
`networksecurity.mirroringEndpointGroupAssociations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Mirroring Endpoint Admin (`roles/networksecurity.mirroringEndpointAdmin`) Mirroring Endpoint Viewer (`roles/networksecurity.mirroringEndpointViewer`)
`networksecurity.mirroringEndpointGroupAssociations.update`	Owner (`roles/owner`) Editor (`roles/editor`) Mirroring Endpoint Admin (`roles/networksecurity.mirroringEndpointAdmin`)
`networksecurity.mirroringEndpointGroups.create`	Owner (`roles/owner`) Editor (`roles/editor`) Mirroring Endpoint Admin (`roles/networksecurity.mirroringEndpointAdmin`)
`networksecurity.mirroringEndpointGroups.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Mirroring Endpoint Admin (`roles/networksecurity.mirroringEndpointAdmin`)
`networksecurity.mirroringEndpointGroups.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Mirroring Endpoint Admin (`roles/networksecurity.mirroringEndpointAdmin`) Mirroring Endpoint User (`roles/networksecurity.mirroringEndpointUser`) Mirroring Endpoint Viewer (`roles/networksecurity.mirroringEndpointViewer`)
`networksecurity.mirroringEndpointGroups.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Mirroring Endpoint Admin (`roles/networksecurity.mirroringEndpointAdmin`) Mirroring Endpoint User (`roles/networksecurity.mirroringEndpointUser`) Mirroring Endpoint Viewer (`roles/networksecurity.mirroringEndpointViewer`)
`networksecurity.mirroringEndpointGroups.update`	Owner (`roles/owner`) Editor (`roles/editor`) Mirroring Endpoint Admin (`roles/networksecurity.mirroringEndpointAdmin`)
`networksecurity.mirroringEndpointGroups.use`	Owner (`roles/owner`) Editor (`roles/editor`) Mirroring Endpoint Admin (`roles/networksecurity.mirroringEndpointAdmin`) Mirroring Endpoint User (`roles/networksecurity.mirroringEndpointUser`)
`networksecurity.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Anthos Service Mesh Service Agent (`roles/anthosservicemesh.serviceAgent`)
`networksecurity.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Anthos Service Mesh Service Agent (`roles/anthosservicemesh.serviceAgent`)
`networksecurity.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Security Profile Admin (`roles/networksecurity.securityProfileAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Anthos Service Mesh Service Agent (`roles/anthosservicemesh.serviceAgent`)
`networksecurity.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Security Profile Admin (`roles/networksecurity.securityProfileAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Anthos Service Mesh Service Agent (`roles/anthosservicemesh.serviceAgent`)
`networksecurity.partnerSSEGateways.create`	Owner (`roles/owner`) Editor (`roles/editor`)
`networksecurity.partnerSSEGateways.delete`	Owner (`roles/owner`) Editor (`roles/editor`)
`networksecurity.partnerSSEGateways.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`)
`networksecurity.partnerSSEGateways.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`networksecurity.partnerSSERealms.create`	Owner (`roles/owner`) Editor (`roles/editor`)
`networksecurity.partnerSSERealms.delete`	Owner (`roles/owner`) Editor (`roles/editor`)
`networksecurity.partnerSSERealms.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`)
`networksecurity.partnerSSERealms.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`networksecurity.sacAttachments.create`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.sacAttachments.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.sacAttachments.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.sacAttachments.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.sacRealms.create`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.sacRealms.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.sacRealms.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.sacRealms.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.securityProfileGroups.create`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Security Profile Admin (`roles/networksecurity.securityProfileAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.securityProfileGroups.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Security Profile Admin (`roles/networksecurity.securityProfileAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.securityProfileGroups.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Security Profile Admin (`roles/networksecurity.securityProfileAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.securityProfileGroups.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Security Profile Admin (`roles/networksecurity.securityProfileAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.securityProfileGroups.update`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Security Profile Admin (`roles/networksecurity.securityProfileAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.securityProfileGroups.use`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Security Profile Admin (`roles/networksecurity.securityProfileAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.securityProfiles.create`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Security Profile Admin (`roles/networksecurity.securityProfileAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.securityProfiles.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Security Profile Admin (`roles/networksecurity.securityProfileAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.securityProfiles.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Security Profile Admin (`roles/networksecurity.securityProfileAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.securityProfiles.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Security Profile Admin (`roles/networksecurity.securityProfileAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.securityProfiles.update`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Security Profile Admin (`roles/networksecurity.securityProfileAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.securityProfiles.use`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Security Profile Admin (`roles/networksecurity.securityProfileAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.serverTlsPolicies.create`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Mesh Config Service Agent (`roles/meshconfig.serviceAgent`) Anthos Service Mesh Service Agent (`roles/anthosservicemesh.serviceAgent`)
`networksecurity.serverTlsPolicies.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Mesh Config Service Agent (`roles/meshconfig.serviceAgent`) Anthos Service Mesh Service Agent (`roles/anthosservicemesh.serviceAgent`)
`networksecurity.serverTlsPolicies.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Load Balancer Admin (`roles/compute.loadBalancerAdmin`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Mesh Config Service Agent (`roles/meshconfig.serviceAgent`) Anthos Service Mesh Service Agent (`roles/anthosservicemesh.serviceAgent`)
`networksecurity.serverTlsPolicies.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.serverTlsPolicies.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Load Balancer Admin (`roles/compute.loadBalancerAdmin`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Mesh Config Service Agent (`roles/meshconfig.serviceAgent`) Anthos Service Mesh Service Agent (`roles/anthosservicemesh.serviceAgent`)
`networksecurity.serverTlsPolicies.setIamPolicy`	Owner (`roles/owner`) Compute Network Admin (`roles/compute.networkAdmin`) Security Admin (`roles/iam.securityAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.serverTlsPolicies.update`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Mesh Config Service Agent (`roles/meshconfig.serviceAgent`) Anthos Service Mesh Service Agent (`roles/anthosservicemesh.serviceAgent`)
`networksecurity.serverTlsPolicies.use`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Load Balancer Admin (`roles/compute.loadBalancerAdmin`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Anthos Service Mesh Service Agent (`roles/anthosservicemesh.serviceAgent`)
`networksecurity.sseGatewayReferences.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`)
`networksecurity.sseGatewayReferences.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`networksecurity.tlsInspectionPolicies.create`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.tlsInspectionPolicies.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.tlsInspectionPolicies.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.tlsInspectionPolicies.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.tlsInspectionPolicies.update`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.tlsInspectionPolicies.use`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.urlLists.create`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.urlLists.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.urlLists.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.urlLists.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Compute Network Viewer (`roles/compute.networkViewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.urlLists.update`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)
`networksecurity.urlLists.use`	Owner (`roles/owner`) Editor (`roles/editor`) Compute Network Admin (`roles/compute.networkAdmin`) Compute Network User (`roles/compute.networkUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud TPU V2 API Service Agent (`roles/cloudtpu.serviceAgent`)

Network Security roles and permissions Stay organized with collections Save and categorize content based on your preferences.