SaaS Service Management roles and permissions
Stay organized with collections Save and categorize content based on your preferences.

This page lists the IAM roles and permissions for SaaS Service Management. To search through all roles and permissions, see the role and permission index.

SaaS Service Management roles

Role Permissions

Role	Permissions
SaaS Service Management Admin ^Beta (`roles/saasservicemgmt.admin`) Full access to SaaS Service Management resources.	`resourcemanager.projects.get` `resourcemanager.projects.list` `saasservicemgmt.*` `saasservicemgmt.locations.get` `saasservicemgmt.locations.list` `saasservicemgmt.operations.cancel` `saasservicemgmt.operations.delete` `saasservicemgmt.operations.get` `saasservicemgmt.operations.list` `saasservicemgmt.releases.create` `saasservicemgmt.releases.delete` `saasservicemgmt.releases.get` `saasservicemgmt.releases.list` `saasservicemgmt.releases.update` `saasservicemgmt.rolloutKinds.create` `saasservicemgmt.rolloutKinds.delete` `saasservicemgmt.rolloutKinds.get` `saasservicemgmt.rolloutKinds.list` `saasservicemgmt.rolloutKinds.update` `saasservicemgmt.rollouts.create` `saasservicemgmt.rollouts.delete` `saasservicemgmt.rollouts.get` `saasservicemgmt.rollouts.list` `saasservicemgmt.rollouts.update` `saasservicemgmt.saas.create` `saasservicemgmt.saas.delete` `saasservicemgmt.saas.get` `saasservicemgmt.saas.list` `saasservicemgmt.saas.update` `saasservicemgmt.unitKinds.create` `saasservicemgmt.unitKinds.delete` `saasservicemgmt.unitKinds.get` `saasservicemgmt.unitKinds.list` `saasservicemgmt.unitKinds.update` `saasservicemgmt.unitOperations.create` `saasservicemgmt.unitOperations.delete` `saasservicemgmt.unitOperations.get` `saasservicemgmt.unitOperations.list` `saasservicemgmt.unitOperations.update` `saasservicemgmt.units.create` `saasservicemgmt.units.delete` `saasservicemgmt.units.get` `saasservicemgmt.units.list` `saasservicemgmt.units.update`
SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`) Service Agent used by SaaS Service Management. Warning: Do not grant service agent roles to any principals except service agents.	`saasservicemgmt.locations.` `saasservicemgmt.locations.get` `saasservicemgmt.locations.list` `saasservicemgmt.operations.get` `saasservicemgmt.operations.list` `saasservicemgmt.releases.create` `saasservicemgmt.releases.get` `saasservicemgmt.releases.list` `saasservicemgmt.releases.update` `saasservicemgmt.rolloutKinds.` `saasservicemgmt.rolloutKinds.create` `saasservicemgmt.rolloutKinds.delete` `saasservicemgmt.rolloutKinds.get` `saasservicemgmt.rolloutKinds.list` `saasservicemgmt.rolloutKinds.update` `saasservicemgmt.rollouts.` `saasservicemgmt.rollouts.create` `saasservicemgmt.rollouts.delete` `saasservicemgmt.rollouts.get` `saasservicemgmt.rollouts.list` `saasservicemgmt.rollouts.update` `saasservicemgmt.saas.create` `saasservicemgmt.saas.get` `saasservicemgmt.saas.list` `saasservicemgmt.saas.update` `saasservicemgmt.unitKinds.create` `saasservicemgmt.unitKinds.get` `saasservicemgmt.unitKinds.list` `saasservicemgmt.unitKinds.update` `saasservicemgmt.unitOperations.` `saasservicemgmt.unitOperations.create` `saasservicemgmt.unitOperations.delete` `saasservicemgmt.unitOperations.get` `saasservicemgmt.unitOperations.list` `saasservicemgmt.unitOperations.update` `saasservicemgmt.units.*` `saasservicemgmt.units.create` `saasservicemgmt.units.delete` `saasservicemgmt.units.get` `saasservicemgmt.units.list` `saasservicemgmt.units.update`
SaaS Service Management Viewer ^Beta (`roles/saasservicemgmt.viewer`) Readonly access to SaaS Service Management resources.	`resourcemanager.projects.get` `resourcemanager.projects.list` `saasservicemgmt.locations.*` `saasservicemgmt.locations.get` `saasservicemgmt.locations.list` `saasservicemgmt.operations.get` `saasservicemgmt.operations.list` `saasservicemgmt.releases.get` `saasservicemgmt.releases.list` `saasservicemgmt.rolloutKinds.get` `saasservicemgmt.rolloutKinds.list` `saasservicemgmt.rollouts.get` `saasservicemgmt.rollouts.list` `saasservicemgmt.saas.get` `saasservicemgmt.saas.list` `saasservicemgmt.unitKinds.get` `saasservicemgmt.unitKinds.list` `saasservicemgmt.unitOperations.get` `saasservicemgmt.unitOperations.list` `saasservicemgmt.units.get` `saasservicemgmt.units.list`

SaaS Service Management Admin ^Beta

(roles/saasservicemgmt.admin)

Full access to SaaS Service Management resources.

resourcemanager.projects.get

resourcemanager.projects.list

saasservicemgmt.*

saasservicemgmt.locations.get
saasservicemgmt.locations.list
saasservicemgmt.operations.cancel
saasservicemgmt.operations.delete
saasservicemgmt.operations.get
saasservicemgmt.operations.list
saasservicemgmt.releases.create
saasservicemgmt.releases.delete
saasservicemgmt.releases.get
saasservicemgmt.releases.list
saasservicemgmt.releases.update
saasservicemgmt.rolloutKinds.create
saasservicemgmt.rolloutKinds.delete
saasservicemgmt.rolloutKinds.get
saasservicemgmt.rolloutKinds.list
saasservicemgmt.rolloutKinds.update
saasservicemgmt.rollouts.create
saasservicemgmt.rollouts.delete
saasservicemgmt.rollouts.get
saasservicemgmt.rollouts.list
saasservicemgmt.rollouts.update
saasservicemgmt.saas.create
saasservicemgmt.saas.delete
saasservicemgmt.saas.get
saasservicemgmt.saas.list
saasservicemgmt.saas.update
saasservicemgmt.unitKinds.create
saasservicemgmt.unitKinds.delete
saasservicemgmt.unitKinds.get
saasservicemgmt.unitKinds.list
saasservicemgmt.unitKinds.update
saasservicemgmt.unitOperations.create
saasservicemgmt.unitOperations.delete
saasservicemgmt.unitOperations.get
saasservicemgmt.unitOperations.list
saasservicemgmt.unitOperations.update
saasservicemgmt.units.create
saasservicemgmt.units.delete
saasservicemgmt.units.get
saasservicemgmt.units.list
saasservicemgmt.units.update

SaaS Service Management Service Agent

(roles/saasservicemgmt.serviceAgent)

Service Agent used by SaaS Service Management.

saasservicemgmt.locations.*

saasservicemgmt.locations.get
saasservicemgmt.locations.list

saasservicemgmt.operations.get

saasservicemgmt.operations.list

saasservicemgmt.releases.create

saasservicemgmt.releases.get

saasservicemgmt.releases.list

saasservicemgmt.releases.update

saasservicemgmt.rolloutKinds.*

saasservicemgmt.rolloutKinds.create
saasservicemgmt.rolloutKinds.delete
saasservicemgmt.rolloutKinds.get
saasservicemgmt.rolloutKinds.list
saasservicemgmt.rolloutKinds.update

saasservicemgmt.rollouts.*

saasservicemgmt.rollouts.create
saasservicemgmt.rollouts.delete
saasservicemgmt.rollouts.get
saasservicemgmt.rollouts.list
saasservicemgmt.rollouts.update

saasservicemgmt.saas.create

saasservicemgmt.saas.get

saasservicemgmt.saas.list

saasservicemgmt.saas.update

saasservicemgmt.unitKinds.create

saasservicemgmt.unitKinds.get

saasservicemgmt.unitKinds.list

saasservicemgmt.unitKinds.update

saasservicemgmt.unitOperations.*

saasservicemgmt.unitOperations.create
saasservicemgmt.unitOperations.delete
saasservicemgmt.unitOperations.get
saasservicemgmt.unitOperations.list
saasservicemgmt.unitOperations.update

saasservicemgmt.units.*

saasservicemgmt.units.create
saasservicemgmt.units.delete
saasservicemgmt.units.get
saasservicemgmt.units.list
saasservicemgmt.units.update

SaaS Service Management Viewer ^Beta

(roles/saasservicemgmt.viewer)

Readonly access to SaaS Service Management resources.

resourcemanager.projects.get

resourcemanager.projects.list

saasservicemgmt.locations.*

saasservicemgmt.locations.get
saasservicemgmt.locations.list

saasservicemgmt.operations.get

saasservicemgmt.operations.list

saasservicemgmt.releases.get

saasservicemgmt.releases.list

saasservicemgmt.rolloutKinds.get

saasservicemgmt.rolloutKinds.list

saasservicemgmt.rollouts.get

saasservicemgmt.rollouts.list

saasservicemgmt.saas.get

saasservicemgmt.saas.list

saasservicemgmt.unitKinds.get

saasservicemgmt.unitKinds.list

saasservicemgmt.unitOperations.get

saasservicemgmt.unitOperations.list

saasservicemgmt.units.get

saasservicemgmt.units.list

SaaS Service Management permissions

Permission	Included in roles
`saasservicemgmt.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`)
`saasservicemgmt.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`)
`saasservicemgmt.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.releases.create`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.releases.delete`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`)
`saasservicemgmt.releases.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.releases.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.releases.update`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rolloutKinds.create`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rolloutKinds.delete`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rolloutKinds.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rolloutKinds.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rolloutKinds.update`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rollouts.create`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rollouts.delete`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rollouts.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rollouts.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rollouts.update`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.saas.create`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.saas.delete`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`)
`saasservicemgmt.saas.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.saas.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.saas.update`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitKinds.create`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitKinds.delete`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`)
`saasservicemgmt.unitKinds.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitKinds.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitKinds.update`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitOperations.create`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitOperations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitOperations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitOperations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitOperations.update`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.units.create`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.units.delete`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.units.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.units.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.units.update`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)

SaaS Service Management roles and permissions Stay organized with collections Save and categorize content based on your preferences.