Policy Analyzer roles and permissions

This page lists the IAM roles and permissions for Policy Analyzer. To search through all roles and permissions, see the role and permission index.

Policy Analyzer roles

Role Permissions

Role	Permissions
Activity Analysis Viewer ^Beta (`roles/policyanalyzer.activityAnalysisViewer`) Viewer user that can read all activity analysis.	`policyanalyzer.*` `policyanalyzer.resourceAuthorizationActivities.query` `policyanalyzer.serviceAccountKeyLastAuthenticationActivities.query` `policyanalyzer.serviceAccountLastAuthenticationActivities.query`

(roles/policyanalyzer.activityAnalysisViewer)

Viewer user that can read all activity analysis.

policyanalyzer.*

Permission Included in roles

Permission	Included in roles
`policyanalyzer.resourceAuthorizationActivities.query`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Deny Admin (`roles/iam.denyAdmin`) Support User (`roles/iam.supportUser`) Activity Analysis Viewer (`roles/policyanalyzer.activityAnalysisViewer`)
`policyanalyzer.serviceAccountKeyLastAuthenticationActivities.query`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Activity Analysis Viewer (`roles/policyanalyzer.activityAnalysisViewer`)
`policyanalyzer.serviceAccountLastAuthenticationActivities.query`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Activity Analysis Viewer (`roles/policyanalyzer.activityAnalysisViewer`)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Deny Admin (roles/iam.denyAdmin)

Support User (roles/iam.supportUser)

Activity Analysis Viewer (roles/policyanalyzer.activityAnalysisViewer)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Activity Analysis Viewer (roles/policyanalyzer.activityAnalysisViewer)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

Activity Analysis Viewer (roles/policyanalyzer.activityAnalysisViewer)