Memorystore for Redis roles and permissions

This page lists the IAM roles and permissions for Memorystore for Redis. To search through all roles and permissions, see the role and permission index.

Memorystore for Redis roles

Role Permissions

Role	Permissions
Cloud Memorystore Redis Admin (`roles/redis.admin`) Full access to Redis instances and related resources.	`cloudkms.keyHandles.` `cloudkms.keyHandles.create` `cloudkms.keyHandles.get` `cloudkms.keyHandles.list` `cloudkms.operations.get` `cloudkms.projects.showEffectiveAutokeyConfig` `compute.networks.list` `networkconnectivity.serviceConnectionPolicies.list` `redis.` `redis.backupCollections.create` `redis.backupCollections.delete` `redis.backupCollections.get` `redis.backupCollections.list` `redis.backups.create` `redis.backups.delete` `redis.backups.export` `redis.backups.get` `redis.backups.list` `redis.clusters.backup` `redis.clusters.connect` `redis.clusters.create` `redis.clusters.delete` `redis.clusters.get` `redis.clusters.list` `redis.clusters.update` `redis.instances.create` `redis.instances.createTagBinding` `redis.instances.delete` `redis.instances.deleteTagBinding` `redis.instances.export` `redis.instances.failover` `redis.instances.get` `redis.instances.getAuthString` `redis.instances.import` `redis.instances.list` `redis.instances.listEffectiveTags` `redis.instances.listTagBindings` `redis.instances.rescheduleMaintenance` `redis.instances.update` `redis.instances.updateAuth` `redis.instances.upgrade` `redis.locations.get` `redis.locations.list` `redis.operations.cancel` `redis.operations.delete` `redis.operations.get` `redis.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list` `serviceusage.services.use`
Cloud Memorystore Redis Db Connection User ^Beta (`roles/redis.dbConnectionUser`) Access to connecting to Redis Server db.	`redis.clusters.connect`
Cloud Memorystore Redis Editor (`roles/redis.editor`) Read-Write access to Redis instances and related resources.	`compute.networks.list` `redis.backupCollections.get` `redis.backupCollections.list` `redis.backups.get` `redis.backups.list` `redis.clusters.backup` `redis.clusters.get` `redis.clusters.list` `redis.clusters.update` `redis.instances.failover` `redis.instances.get` `redis.instances.list` `redis.instances.update` `redis.locations.` `redis.locations.get` `redis.locations.list` `redis.operations.` `redis.operations.cancel` `redis.operations.delete` `redis.operations.get` `redis.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list` `serviceusage.services.use`
Cloud Memorystore Redis Service Agent (`roles/redis.serviceAgent`) Gives Cloud Memorystore Redis service account access to managed resource Warning: Do not grant service agent roles to any principals except service agents.	`compute.globalOperations.get` `compute.networks.addPeering` `compute.networks.get` `compute.networks.removePeering` `compute.networks.update` `compute.projects.get` `compute.routes.get` `compute.routes.list` `compute.subnetworks.get` `compute.subnetworks.list` `monitoring.metricDescriptors.create` `monitoring.metricDescriptors.get` `monitoring.metricDescriptors.list` `monitoring.monitoredResourceDescriptors.*` `monitoring.monitoredResourceDescriptors.get` `monitoring.monitoredResourceDescriptors.list` `monitoring.timeSeries.create` `resourcemanager.projects.get` `resourcemanager.projects.list` `telemetry.metrics.write`
Cloud Memorystore Redis Viewer (`roles/redis.viewer`) Read-only access to Redis instances and related resources.	`redis.backupCollections.get` `redis.backupCollections.list` `redis.backups.get` `redis.backups.list` `redis.clusters.get` `redis.clusters.list` `redis.instances.get` `redis.instances.list` `redis.instances.listEffectiveTags` `redis.instances.listTagBindings` `redis.locations.*` `redis.locations.get` `redis.locations.list` `redis.operations.get` `redis.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list` `serviceusage.services.use`

Cloud Memorystore Redis Admin

(roles/redis.admin)

Full access to Redis instances and related resources.

cloudkms.keyHandles.*

cloudkms.keyHandles.create
cloudkms.keyHandles.get
cloudkms.keyHandles.list

cloudkms.operations.get

cloudkms.projects.showEffectiveAutokeyConfig

compute.networks.list

networkconnectivity.serviceConnectionPolicies.list

redis.*

redis.backupCollections.create
redis.backupCollections.delete
redis.backupCollections.get
redis.backupCollections.list
redis.backups.create
redis.backups.delete
redis.backups.export
redis.backups.get
redis.backups.list
redis.clusters.backup
redis.clusters.connect
redis.clusters.create
redis.clusters.delete
redis.clusters.get
redis.clusters.list
redis.clusters.update
redis.instances.create
redis.instances.createTagBinding
redis.instances.delete
redis.instances.deleteTagBinding
redis.instances.export
redis.instances.failover
redis.instances.get
redis.instances.getAuthString
redis.instances.import
redis.instances.list
redis.instances.listEffectiveTags
redis.instances.listTagBindings
redis.instances.rescheduleMaintenance
redis.instances.update
redis.instances.updateAuth
redis.instances.upgrade
redis.locations.get
redis.locations.list
redis.operations.cancel
redis.operations.delete
redis.operations.get
redis.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.services.use

Cloud Memorystore Redis Db Connection User ^Beta

(roles/redis.dbConnectionUser)

Access to connecting to Redis Server db.

redis.clusters.connect

Cloud Memorystore Redis Editor

(roles/redis.editor)

Read-Write access to Redis instances and related resources.

compute.networks.list

redis.backupCollections.get

redis.backupCollections.list

redis.backups.get

redis.backups.list

redis.clusters.backup

redis.clusters.get

redis.clusters.list

redis.clusters.update

redis.instances.failover

redis.instances.get

redis.instances.list

redis.instances.update

redis.locations.*

redis.locations.get
redis.locations.list

redis.operations.*

redis.operations.cancel
redis.operations.delete
redis.operations.get
redis.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.services.use

Cloud Memorystore Redis Service Agent

(roles/redis.serviceAgent)

Gives Cloud Memorystore Redis service account access to managed resource

compute.globalOperations.get

compute.networks.addPeering

compute.networks.get

compute.networks.removePeering

compute.networks.update

compute.projects.get

compute.routes.get

compute.routes.list

compute.subnetworks.get

compute.subnetworks.list

monitoring.metricDescriptors.create

monitoring.metricDescriptors.get

monitoring.metricDescriptors.list

monitoring.monitoredResourceDescriptors.*

monitoring.monitoredResourceDescriptors.get
monitoring.monitoredResourceDescriptors.list

monitoring.timeSeries.create

resourcemanager.projects.get

resourcemanager.projects.list

telemetry.metrics.write

Cloud Memorystore Redis Viewer

(roles/redis.viewer)

Read-only access to Redis instances and related resources.

redis.backupCollections.get

redis.backupCollections.list

redis.backups.get

redis.backups.list

redis.clusters.get

redis.clusters.list

redis.instances.get

redis.instances.list

redis.instances.listEffectiveTags

redis.instances.listTagBindings

redis.locations.*

redis.locations.get
redis.locations.list

redis.operations.get

redis.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.services.use

Memorystore for Redis permissions

Permission	Included in roles
`redis.backupCollections.create`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Cloud Memorystore Redis Admin (`roles/redis.admin`)
`redis.backupCollections.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Cloud Memorystore Redis Admin (`roles/redis.admin`)
`redis.backupCollections.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Support User (`roles/iam.supportUser`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Cloud Memorystore Redis Editor (`roles/redis.editor`) Cloud Memorystore Redis Viewer (`roles/redis.viewer`)
`redis.backupCollections.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Cloud Memorystore Redis Editor (`roles/redis.editor`) Cloud Memorystore Redis Viewer (`roles/redis.viewer`)
`redis.backups.create`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Cloud Memorystore Redis Admin (`roles/redis.admin`)
`redis.backups.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Cloud Memorystore Redis Admin (`roles/redis.admin`)
`redis.backups.export`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Databases Admin (`roles/iam.databasesAdmin`) Support User (`roles/iam.supportUser`) Cloud Memorystore Redis Admin (`roles/redis.admin`)
`redis.backups.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Support User (`roles/iam.supportUser`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Cloud Memorystore Redis Editor (`roles/redis.editor`) Cloud Memorystore Redis Viewer (`roles/redis.viewer`)
`redis.backups.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Cloud Memorystore Redis Editor (`roles/redis.editor`) Cloud Memorystore Redis Viewer (`roles/redis.viewer`)
`redis.clusters.backup`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Cloud Memorystore Redis Editor (`roles/redis.editor`)
`redis.clusters.connect`	Owner (`roles/owner`) Editor (`roles/editor`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Cloud Memorystore Redis Db Connection User (`roles/redis.dbConnectionUser`)
`redis.clusters.create`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Cloud Memorystore Redis Admin (`roles/redis.admin`)
`redis.clusters.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Cloud Memorystore Redis Admin (`roles/redis.admin`)
`redis.clusters.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Support User (`roles/iam.supportUser`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Cloud Memorystore Redis Editor (`roles/redis.editor`) Cloud Memorystore Redis Viewer (`roles/redis.viewer`)
`redis.clusters.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Cloud Memorystore Redis Editor (`roles/redis.editor`) Cloud Memorystore Redis Viewer (`roles/redis.viewer`)
`redis.clusters.update`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Cloud Memorystore Redis Editor (`roles/redis.editor`)
`redis.instances.create`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`)
`redis.instances.createTagBinding`	Owner (`roles/owner`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Databases Admin (`roles/iam.databasesAdmin`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Tag User (`roles/resourcemanager.tagUser`)
`redis.instances.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`)
`redis.instances.deleteTagBinding`	Owner (`roles/owner`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Databases Admin (`roles/iam.databasesAdmin`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Tag User (`roles/resourcemanager.tagUser`)
`redis.instances.export`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Cloud Memorystore Redis Admin (`roles/redis.admin`)
`redis.instances.failover`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Cloud Memorystore Redis Editor (`roles/redis.editor`)
`redis.instances.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Support User (`roles/iam.supportUser`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Cloud Memorystore Redis Editor (`roles/redis.editor`) Cloud Memorystore Redis Viewer (`roles/redis.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Serverless Integrations Service Agent (`roles/runapps.serviceAgent`) Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`)
`redis.instances.getAuthString`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Cloud Memorystore Redis Admin (`roles/redis.admin`)
`redis.instances.import`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Cloud Memorystore Redis Admin (`roles/redis.admin`)
`redis.instances.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Cloud Memorystore Redis Editor (`roles/redis.editor`) Cloud Memorystore Redis Viewer (`roles/redis.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Serverless Integrations Service Agent (`roles/runapps.serviceAgent`)
`redis.instances.listEffectiveTags`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Cloud Memorystore Redis Viewer (`roles/redis.viewer`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`)
`redis.instances.listTagBindings`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Cloud Memorystore Redis Viewer (`roles/redis.viewer`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`)
`redis.instances.rescheduleMaintenance`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Cloud Memorystore Redis Admin (`roles/redis.admin`)
`redis.instances.update`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Cloud Memorystore Redis Editor (`roles/redis.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`)
`redis.instances.updateAuth`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`)
`redis.instances.upgrade`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Cloud Memorystore Redis Admin (`roles/redis.admin`)
`redis.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Support User (`roles/iam.supportUser`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Cloud Memorystore Redis Editor (`roles/redis.editor`) Cloud Memorystore Redis Viewer (`roles/redis.viewer`)
`redis.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Cloud Memorystore Redis Editor (`roles/redis.editor`) Cloud Memorystore Redis Viewer (`roles/redis.viewer`)
`redis.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Cloud Memorystore Redis Editor (`roles/redis.editor`)
`redis.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Databases Admin (`roles/iam.databasesAdmin`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Cloud Memorystore Redis Editor (`roles/redis.editor`)
`redis.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Support User (`roles/iam.supportUser`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Cloud Memorystore Redis Editor (`roles/redis.editor`) Cloud Memorystore Redis Viewer (`roles/redis.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`)
`redis.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Cloud Memorystore Redis Admin (`roles/redis.admin`) Cloud Memorystore Redis Editor (`roles/redis.editor`) Cloud Memorystore Redis Viewer (`roles/redis.viewer`)

Memorystore for Redis roles and permissions