Parameter Manager roles and permissions
Stay organized with collections Save and categorize content based on your preferences.

This page lists the IAM roles and permissions for Parameter Manager. To search through all roles and permissions, see the role and permission index.

Parameter Manager roles

Role Permissions

Role	Permissions
Parameter Manager Admin (`roles/parametermanager.admin`) Grants full access to all Parameter Manager resources. Intended for project admins & owners who need to perform all administrative tasks.	`parametermanager.*` `parametermanager.locations.get` `parametermanager.locations.list` `parametermanager.parameterVersions.create` `parametermanager.parameterVersions.delete` `parametermanager.parameterVersions.get` `parametermanager.parameterVersions.list` `parametermanager.parameterVersions.render` `parametermanager.parameterVersions.update` `parametermanager.parameters.create` `parametermanager.parameters.delete` `parametermanager.parameters.get` `parametermanager.parameters.list` `parametermanager.parameters.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Parameter Manager Parameter Accessor (`roles/parametermanager.parameterAccessor`) Grants read access to ParameterManager ParameterVersion resources. Intended for users & applications that need to perform read operations on ParameterVersion only.	`parametermanager.locations.*` `parametermanager.locations.get` `parametermanager.locations.list` `parametermanager.parameterVersions.render` `resourcemanager.projects.get` `resourcemanager.projects.list`
Parameter Manager Parameter Version Adder (`roles/parametermanager.parameterVersionAdder`) Grants create access to Parameter Manager ParameterVersion resources. Intended for users & applications that need to perform create operations on ParameterVersions only.	`parametermanager.locations.*` `parametermanager.locations.get` `parametermanager.locations.list` `parametermanager.parameterVersions.create` `parametermanager.parameters.get` `parametermanager.parameters.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Parameter Manager Parameter Version Manager (`roles/parametermanager.parameterVersionManager`) Grants read & write access to all Parameter Manager ParameterVersion resources. Intended for users & applications that need to view Parameters & perform create/read/update/delete/list operations on ParameterVersions only.	`parametermanager.locations.*` `parametermanager.locations.get` `parametermanager.locations.list` `parametermanager.parameterVersions.create` `parametermanager.parameterVersions.delete` `parametermanager.parameterVersions.get` `parametermanager.parameterVersions.list` `parametermanager.parameterVersions.update` `parametermanager.parameters.get` `parametermanager.parameters.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Parameter Manager Parameter Viewer (`roles/parametermanager.parameterViewer`) Grants read access to Parameter Manager Parameter & ParameterVersion resources. Intended for users & applications that need to perform read/list operations on Parameters & ParameterVersions only.	`parametermanager.locations.*` `parametermanager.locations.get` `parametermanager.locations.list` `parametermanager.parameterVersions.get` `parametermanager.parameterVersions.list` `parametermanager.parameters.get` `parametermanager.parameters.list` `resourcemanager.projects.get` `resourcemanager.projects.list`

Parameter Manager Admin

(roles/parametermanager.admin)

Grants full access to all Parameter Manager resources. Intended for project admins & owners who need to perform all administrative tasks.

parametermanager.*

parametermanager.locations.get
parametermanager.locations.list
parametermanager.parameterVersions.create
parametermanager.parameterVersions.delete
parametermanager.parameterVersions.get
parametermanager.parameterVersions.list
parametermanager.parameterVersions.render
parametermanager.parameterVersions.update
parametermanager.parameters.create
parametermanager.parameters.delete
parametermanager.parameters.get
parametermanager.parameters.list
parametermanager.parameters.update

resourcemanager.projects.get

resourcemanager.projects.list

Parameter Manager Parameter Accessor

(roles/parametermanager.parameterAccessor)

Grants read access to ParameterManager ParameterVersion resources. Intended for users & applications that need to perform read operations on ParameterVersion only.

parametermanager.locations.*

parametermanager.locations.get
parametermanager.locations.list

parametermanager.parameterVersions.render

resourcemanager.projects.get

resourcemanager.projects.list

Parameter Manager Parameter Version Adder

(roles/parametermanager.parameterVersionAdder)

Grants create access to Parameter Manager ParameterVersion resources. Intended for users & applications that need to perform create operations on ParameterVersions only.

parametermanager.locations.*

parametermanager.locations.get
parametermanager.locations.list

parametermanager.parameterVersions.create

parametermanager.parameters.get

parametermanager.parameters.list

resourcemanager.projects.get

resourcemanager.projects.list

Parameter Manager Parameter Version Manager

(roles/parametermanager.parameterVersionManager)

Grants read & write access to all Parameter Manager ParameterVersion resources. Intended for users & applications that need to view Parameters & perform create/read/update/delete/list operations on ParameterVersions only.

parametermanager.locations.*

parametermanager.locations.get
parametermanager.locations.list

parametermanager.parameterVersions.create

parametermanager.parameterVersions.delete

parametermanager.parameterVersions.get

parametermanager.parameterVersions.list

parametermanager.parameterVersions.update

parametermanager.parameters.get

parametermanager.parameters.list

resourcemanager.projects.get

resourcemanager.projects.list

Parameter Manager Parameter Viewer

(roles/parametermanager.parameterViewer)

Grants read access to Parameter Manager Parameter & ParameterVersion resources. Intended for users & applications that need to perform read/list operations on Parameters & ParameterVersions only.

parametermanager.locations.*

parametermanager.locations.get
parametermanager.locations.list

parametermanager.parameterVersions.get

parametermanager.parameterVersions.list

parametermanager.parameters.get

parametermanager.parameters.list

resourcemanager.projects.get

resourcemanager.projects.list

Parameter Manager permissions

Permission	Included in roles
`parametermanager.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Parameter Manager Admin (`roles/parametermanager.admin`) Parameter Manager Parameter Accessor (`roles/parametermanager.parameterAccessor`) Parameter Manager Parameter Version Adder (`roles/parametermanager.parameterVersionAdder`) Parameter Manager Parameter Version Manager (`roles/parametermanager.parameterVersionManager`) Parameter Manager Parameter Viewer (`roles/parametermanager.parameterViewer`)
`parametermanager.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Parameter Manager Admin (`roles/parametermanager.admin`) Parameter Manager Parameter Accessor (`roles/parametermanager.parameterAccessor`) Parameter Manager Parameter Version Adder (`roles/parametermanager.parameterVersionAdder`) Parameter Manager Parameter Version Manager (`roles/parametermanager.parameterVersionManager`) Parameter Manager Parameter Viewer (`roles/parametermanager.parameterViewer`)
`parametermanager.parameterVersions.create`	Owner (`roles/owner`) Editor (`roles/editor`) Parameter Manager Admin (`roles/parametermanager.admin`) Parameter Manager Parameter Version Adder (`roles/parametermanager.parameterVersionAdder`) Parameter Manager Parameter Version Manager (`roles/parametermanager.parameterVersionManager`)
`parametermanager.parameterVersions.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Parameter Manager Admin (`roles/parametermanager.admin`) Parameter Manager Parameter Version Manager (`roles/parametermanager.parameterVersionManager`)
`parametermanager.parameterVersions.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Parameter Manager Admin (`roles/parametermanager.admin`) Parameter Manager Parameter Version Manager (`roles/parametermanager.parameterVersionManager`) Parameter Manager Parameter Viewer (`roles/parametermanager.parameterViewer`)
`parametermanager.parameterVersions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Parameter Manager Admin (`roles/parametermanager.admin`) Parameter Manager Parameter Version Manager (`roles/parametermanager.parameterVersionManager`) Parameter Manager Parameter Viewer (`roles/parametermanager.parameterViewer`)
`parametermanager.parameterVersions.render`	Owner (`roles/owner`) Parameter Manager Admin (`roles/parametermanager.admin`) Parameter Manager Parameter Accessor (`roles/parametermanager.parameterAccessor`)
`parametermanager.parameterVersions.update`	Owner (`roles/owner`) Editor (`roles/editor`) Parameter Manager Admin (`roles/parametermanager.admin`) Parameter Manager Parameter Version Manager (`roles/parametermanager.parameterVersionManager`)
`parametermanager.parameters.create`	Owner (`roles/owner`) Editor (`roles/editor`) Parameter Manager Admin (`roles/parametermanager.admin`)
`parametermanager.parameters.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Parameter Manager Admin (`roles/parametermanager.admin`)
`parametermanager.parameters.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Parameter Manager Admin (`roles/parametermanager.admin`) Parameter Manager Parameter Version Adder (`roles/parametermanager.parameterVersionAdder`) Parameter Manager Parameter Version Manager (`roles/parametermanager.parameterVersionManager`) Parameter Manager Parameter Viewer (`roles/parametermanager.parameterViewer`)
`parametermanager.parameters.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Parameter Manager Admin (`roles/parametermanager.admin`) Parameter Manager Parameter Version Adder (`roles/parametermanager.parameterVersionAdder`) Parameter Manager Parameter Version Manager (`roles/parametermanager.parameterVersionManager`) Parameter Manager Parameter Viewer (`roles/parametermanager.parameterViewer`)
`parametermanager.parameters.update`	Owner (`roles/owner`) Editor (`roles/editor`) Parameter Manager Admin (`roles/parametermanager.admin`)

Parameter Manager roles and permissions
Stay organized with collections Save and categorize content based on your preferences.