Pub/Sub Lite roles and permissions

This page lists the IAM roles and permissions for Pub/Sub Lite. To search through all roles and permissions, see the role and permission index.

Pub/Sub Lite roles

Role Permissions

Role	Permissions
Pub/Sub Lite Admin (`roles/pubsublite.admin`) Full access to topics, subscriptions and reservations.	`pubsublite.*` `pubsublite.locations.openKafkaStream` `pubsublite.operations.get` `pubsublite.operations.list` `pubsublite.reservations.attachTopic` `pubsublite.reservations.create` `pubsublite.reservations.delete` `pubsublite.reservations.get` `pubsublite.reservations.list` `pubsublite.reservations.listTopics` `pubsublite.reservations.update` `pubsublite.subscriptions.create` `pubsublite.subscriptions.delete` `pubsublite.subscriptions.get` `pubsublite.subscriptions.getCursor` `pubsublite.subscriptions.list` `pubsublite.subscriptions.seek` `pubsublite.subscriptions.setCursor` `pubsublite.subscriptions.subscribe` `pubsublite.subscriptions.update` `pubsublite.topics.computeHeadCursor` `pubsublite.topics.computeMessageStats` `pubsublite.topics.computeTimeCursor` `pubsublite.topics.create` `pubsublite.topics.delete` `pubsublite.topics.get` `pubsublite.topics.getPartitions` `pubsublite.topics.list` `pubsublite.topics.listSubscriptions` `pubsublite.topics.publish` `pubsublite.topics.subscribe` `pubsublite.topics.update`
Pub/Sub Lite Editor (`roles/pubsublite.editor`) Modify topics, subscriptions and reservations, publish and consume messages.	`pubsublite.*` `pubsublite.locations.openKafkaStream` `pubsublite.operations.get` `pubsublite.operations.list` `pubsublite.reservations.attachTopic` `pubsublite.reservations.create` `pubsublite.reservations.delete` `pubsublite.reservations.get` `pubsublite.reservations.list` `pubsublite.reservations.listTopics` `pubsublite.reservations.update` `pubsublite.subscriptions.create` `pubsublite.subscriptions.delete` `pubsublite.subscriptions.get` `pubsublite.subscriptions.getCursor` `pubsublite.subscriptions.list` `pubsublite.subscriptions.seek` `pubsublite.subscriptions.setCursor` `pubsublite.subscriptions.subscribe` `pubsublite.subscriptions.update` `pubsublite.topics.computeHeadCursor` `pubsublite.topics.computeMessageStats` `pubsublite.topics.computeTimeCursor` `pubsublite.topics.create` `pubsublite.topics.delete` `pubsublite.topics.get` `pubsublite.topics.getPartitions` `pubsublite.topics.list` `pubsublite.topics.listSubscriptions` `pubsublite.topics.publish` `pubsublite.topics.subscribe` `pubsublite.topics.update`
Pub/Sub Lite Publisher (`roles/pubsublite.publisher`) Publish messages to a topic.	`pubsublite.locations.openKafkaStream` `pubsublite.topics.getPartitions` `pubsublite.topics.publish`
Pub/Sub Lite Service Agent (`roles/pubsublite.serviceAgent`) Grants Pub/Sub Lite Service Agent access to project resources. Warning: Do not grant service agent roles to any principals except service agents.	`pubsub.topics.publish` `pubsublite.subscriptions.get` `pubsublite.subscriptions.getCursor` `pubsublite.subscriptions.setCursor` `pubsublite.subscriptions.subscribe` `pubsublite.topics.computeHeadCursor` `pubsublite.topics.getPartitions` `pubsublite.topics.publish` `pubsublite.topics.subscribe`
Pub/Sub Lite Subscriber (`roles/pubsublite.subscriber`) Subscribe to and read messages from a topic.	`pubsublite.locations.openKafkaStream` `pubsublite.operations.get` `pubsublite.subscriptions.getCursor` `pubsublite.subscriptions.seek` `pubsublite.subscriptions.setCursor` `pubsublite.subscriptions.subscribe` `pubsublite.topics.computeHeadCursor` `pubsublite.topics.computeMessageStats` `pubsublite.topics.computeTimeCursor` `pubsublite.topics.getPartitions` `pubsublite.topics.subscribe`
Pub/Sub Lite Viewer (`roles/pubsublite.viewer`) View topics, subscriptions and reservations.	`pubsublite.operations.*` `pubsublite.operations.get` `pubsublite.operations.list` `pubsublite.reservations.get` `pubsublite.reservations.list` `pubsublite.reservations.listTopics` `pubsublite.subscriptions.get` `pubsublite.subscriptions.getCursor` `pubsublite.subscriptions.list` `pubsublite.topics.get` `pubsublite.topics.getPartitions` `pubsublite.topics.list` `pubsublite.topics.listSubscriptions`

Pub/Sub Lite Admin

(roles/pubsublite.admin)

Full access to topics, subscriptions and reservations.

pubsublite.*

pubsublite.locations.openKafkaStream
pubsublite.operations.get
pubsublite.operations.list
pubsublite.reservations.attachTopic
pubsublite.reservations.create
pubsublite.reservations.delete
pubsublite.reservations.get
pubsublite.reservations.list
pubsublite.reservations.listTopics
pubsublite.reservations.update
pubsublite.subscriptions.create
pubsublite.subscriptions.delete
pubsublite.subscriptions.get
pubsublite.subscriptions.getCursor
pubsublite.subscriptions.list
pubsublite.subscriptions.seek
pubsublite.subscriptions.setCursor
pubsublite.subscriptions.subscribe
pubsublite.subscriptions.update
pubsublite.topics.computeHeadCursor
pubsublite.topics.computeMessageStats
pubsublite.topics.computeTimeCursor
pubsublite.topics.create
pubsublite.topics.delete
pubsublite.topics.get
pubsublite.topics.getPartitions
pubsublite.topics.list
pubsublite.topics.listSubscriptions
pubsublite.topics.publish
pubsublite.topics.subscribe
pubsublite.topics.update

Pub/Sub Lite Editor

(roles/pubsublite.editor)

Modify topics, subscriptions and reservations, publish and consume messages.

pubsublite.*

pubsublite.locations.openKafkaStream
pubsublite.operations.get
pubsublite.operations.list
pubsublite.reservations.attachTopic
pubsublite.reservations.create
pubsublite.reservations.delete
pubsublite.reservations.get
pubsublite.reservations.list
pubsublite.reservations.listTopics
pubsublite.reservations.update
pubsublite.subscriptions.create
pubsublite.subscriptions.delete
pubsublite.subscriptions.get
pubsublite.subscriptions.getCursor
pubsublite.subscriptions.list
pubsublite.subscriptions.seek
pubsublite.subscriptions.setCursor
pubsublite.subscriptions.subscribe
pubsublite.subscriptions.update
pubsublite.topics.computeHeadCursor
pubsublite.topics.computeMessageStats
pubsublite.topics.computeTimeCursor
pubsublite.topics.create
pubsublite.topics.delete
pubsublite.topics.get
pubsublite.topics.getPartitions
pubsublite.topics.list
pubsublite.topics.listSubscriptions
pubsublite.topics.publish
pubsublite.topics.subscribe
pubsublite.topics.update

Pub/Sub Lite Publisher

(roles/pubsublite.publisher)

Publish messages to a topic.

pubsublite.locations.openKafkaStream

pubsublite.topics.getPartitions

pubsublite.topics.publish

Pub/Sub Lite Service Agent

(roles/pubsublite.serviceAgent)

Grants Pub/Sub Lite Service Agent access to project resources.

pubsub.topics.publish

pubsublite.subscriptions.get

pubsublite.subscriptions.getCursor

pubsublite.subscriptions.setCursor

pubsublite.subscriptions.subscribe

pubsublite.topics.computeHeadCursor

pubsublite.topics.getPartitions

pubsublite.topics.publish

pubsublite.topics.subscribe

Pub/Sub Lite Subscriber

(roles/pubsublite.subscriber)

Subscribe to and read messages from a topic.

pubsublite.locations.openKafkaStream

pubsublite.operations.get

pubsublite.subscriptions.getCursor

pubsublite.subscriptions.seek

pubsublite.subscriptions.setCursor

pubsublite.subscriptions.subscribe

pubsublite.topics.computeHeadCursor

pubsublite.topics.computeMessageStats

pubsublite.topics.computeTimeCursor

pubsublite.topics.getPartitions

pubsublite.topics.subscribe

Pub/Sub Lite Viewer

(roles/pubsublite.viewer)

View topics, subscriptions and reservations.

pubsublite.operations.*

pubsublite.operations.get
pubsublite.operations.list

pubsublite.reservations.get

pubsublite.reservations.list

pubsublite.reservations.listTopics

pubsublite.subscriptions.get

pubsublite.subscriptions.getCursor

pubsublite.subscriptions.list

pubsublite.topics.get

pubsublite.topics.getPartitions

pubsublite.topics.list

pubsublite.topics.listSubscriptions

Pub/Sub Lite permissions

Permission	Included in roles
`pubsublite.locations.openKafkaStream`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Publisher (`roles/pubsublite.publisher`) Pub/Sub Lite Subscriber (`roles/pubsublite.subscriber`)
`pubsublite.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Subscriber (`roles/pubsublite.subscriber`) Pub/Sub Lite Viewer (`roles/pubsublite.viewer`)
`pubsublite.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Viewer (`roles/pubsublite.viewer`)
`pubsublite.reservations.attachTopic`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`)
`pubsublite.reservations.create`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`)
`pubsublite.reservations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`)
`pubsublite.reservations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Viewer (`roles/pubsublite.viewer`)
`pubsublite.reservations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Viewer (`roles/pubsublite.viewer`)
`pubsublite.reservations.listTopics`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Viewer (`roles/pubsublite.viewer`)
`pubsublite.reservations.update`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`)
`pubsublite.subscriptions.create`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`)
`pubsublite.subscriptions.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`)
`pubsublite.subscriptions.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Viewer (`roles/pubsublite.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Pub/Sub Lite Service Agent (`roles/pubsublite.serviceAgent`)
`pubsublite.subscriptions.getCursor`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Subscriber (`roles/pubsublite.subscriber`) Pub/Sub Lite Viewer (`roles/pubsublite.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Pub/Sub Lite Service Agent (`roles/pubsublite.serviceAgent`)
`pubsublite.subscriptions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Viewer (`roles/pubsublite.viewer`)
`pubsublite.subscriptions.seek`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Subscriber (`roles/pubsublite.subscriber`)
`pubsublite.subscriptions.setCursor`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Subscriber (`roles/pubsublite.subscriber`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Pub/Sub Lite Service Agent (`roles/pubsublite.serviceAgent`)
`pubsublite.subscriptions.subscribe`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Subscriber (`roles/pubsublite.subscriber`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Pub/Sub Lite Service Agent (`roles/pubsublite.serviceAgent`)
`pubsublite.subscriptions.update`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`)
`pubsublite.topics.computeHeadCursor`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Subscriber (`roles/pubsublite.subscriber`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Pub/Sub Lite Service Agent (`roles/pubsublite.serviceAgent`)
`pubsublite.topics.computeMessageStats`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Subscriber (`roles/pubsublite.subscriber`)
`pubsublite.topics.computeTimeCursor`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Subscriber (`roles/pubsublite.subscriber`)
`pubsublite.topics.create`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`)
`pubsublite.topics.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`)
`pubsublite.topics.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Viewer (`roles/pubsublite.viewer`)
`pubsublite.topics.getPartitions`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Publisher (`roles/pubsublite.publisher`) Pub/Sub Lite Subscriber (`roles/pubsublite.subscriber`) Pub/Sub Lite Viewer (`roles/pubsublite.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Pub/Sub Lite Service Agent (`roles/pubsublite.serviceAgent`)
`pubsublite.topics.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Viewer (`roles/pubsublite.viewer`)
`pubsublite.topics.listSubscriptions`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Viewer (`roles/pubsublite.viewer`)
`pubsublite.topics.publish`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Publisher (`roles/pubsublite.publisher`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Pub/Sub Lite Service Agent (`roles/pubsublite.serviceAgent`) Content Warehouse Service Agent (`roles/contentwarehouse.serviceAgent`)
`pubsublite.topics.subscribe`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Subscriber (`roles/pubsublite.subscriber`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Pub/Sub Lite Service Agent (`roles/pubsublite.serviceAgent`)
`pubsublite.topics.update`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`)

Pub/Sub Lite roles and permissions