Policy Analyzer roles and permissions
Stay organized with collections Save and categorize content based on your preferences.

This page lists the IAM roles and permissions for Policy Analyzer. To search through all roles and permissions, see the role and permission index.

Policy Analyzer roles

Role Permissions

Role	Permissions
Activity Analysis Viewer ^Beta (`roles/policyanalyzer.activityAnalysisViewer`) Viewer user that can read all activity analysis.	`policyanalyzer.*` `policyanalyzer.resourceAuthorizationActivities.query` `policyanalyzer.serviceAccountKeyLastAuthenticationActivities.query` `policyanalyzer.serviceAccountLastAuthenticationActivities.query`

(roles/policyanalyzer.activityAnalysisViewer)

Viewer user that can read all activity analysis.

policyanalyzer.*

Permission Included in roles

Permission	Included in roles
`policyanalyzer.resourceAuthorizationActivities.query`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Deny Admin (`roles/iam.denyAdmin`) Activity Analysis Viewer (`roles/policyanalyzer.activityAnalysisViewer`)
`policyanalyzer.serviceAccountKeyLastAuthenticationActivities.query`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Activity Analysis Viewer (`roles/policyanalyzer.activityAnalysisViewer`)
`policyanalyzer.serviceAccountLastAuthenticationActivities.query`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Activity Analysis Viewer (`roles/policyanalyzer.activityAnalysisViewer`)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Deny Admin (roles/iam.denyAdmin)

Activity Analysis Viewer (roles/policyanalyzer.activityAnalysisViewer)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Activity Analysis Viewer (roles/policyanalyzer.activityAnalysisViewer)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Activity Analysis Viewer (roles/policyanalyzer.activityAnalysisViewer)