SaaS Service Management roles and permissions

This page lists the IAM roles and permissions for SaaS Service Management. To search through all roles and permissions, see the role and permission index.

SaaS Service Management roles

Role Permissions

Role	Permissions
SaaS Service Management Admin ^Beta (`roles/saasservicemgmt.admin`) Provide full access to all SaaS Service Management resources.	`resourcemanager.projects.get` `resourcemanager.projects.list` `saasservicemgmt.*` `saasservicemgmt.locations.get` `saasservicemgmt.locations.list` `saasservicemgmt.operations.cancel` `saasservicemgmt.operations.delete` `saasservicemgmt.operations.get` `saasservicemgmt.operations.list` `saasservicemgmt.releases.create` `saasservicemgmt.releases.delete` `saasservicemgmt.releases.get` `saasservicemgmt.releases.list` `saasservicemgmt.releases.update` `saasservicemgmt.rolloutKinds.create` `saasservicemgmt.rolloutKinds.delete` `saasservicemgmt.rolloutKinds.get` `saasservicemgmt.rolloutKinds.list` `saasservicemgmt.rolloutKinds.update` `saasservicemgmt.rollouts.create` `saasservicemgmt.rollouts.delete` `saasservicemgmt.rollouts.get` `saasservicemgmt.rollouts.list` `saasservicemgmt.rollouts.update` `saasservicemgmt.saas.create` `saasservicemgmt.saas.delete` `saasservicemgmt.saas.get` `saasservicemgmt.saas.list` `saasservicemgmt.saas.update` `saasservicemgmt.unitKinds.create` `saasservicemgmt.unitKinds.delete` `saasservicemgmt.unitKinds.get` `saasservicemgmt.unitKinds.list` `saasservicemgmt.unitKinds.update` `saasservicemgmt.unitOperations.create` `saasservicemgmt.unitOperations.delete` `saasservicemgmt.unitOperations.get` `saasservicemgmt.unitOperations.list` `saasservicemgmt.unitOperations.update` `saasservicemgmt.units.create` `saasservicemgmt.units.delete` `saasservicemgmt.units.get` `saasservicemgmt.units.list` `saasservicemgmt.units.update`
SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`) Service Agent used by SaaS Service Management. Warning: Do not grant service agent roles to any principals except service agents.	`artifactregistry.repositories.downloadArtifacts` `config.deployments.create` `config.deployments.delete` `config.deployments.get` `config.deployments.update` `config.operations.get` `config.revisions.get` `saasservicemgmt.locations.` `saasservicemgmt.locations.get` `saasservicemgmt.locations.list` `saasservicemgmt.operations.get` `saasservicemgmt.operations.list` `saasservicemgmt.releases.create` `saasservicemgmt.releases.get` `saasservicemgmt.releases.list` `saasservicemgmt.releases.update` `saasservicemgmt.rolloutKinds.` `saasservicemgmt.rolloutKinds.create` `saasservicemgmt.rolloutKinds.delete` `saasservicemgmt.rolloutKinds.get` `saasservicemgmt.rolloutKinds.list` `saasservicemgmt.rolloutKinds.update` `saasservicemgmt.rollouts.` `saasservicemgmt.rollouts.create` `saasservicemgmt.rollouts.delete` `saasservicemgmt.rollouts.get` `saasservicemgmt.rollouts.list` `saasservicemgmt.rollouts.update` `saasservicemgmt.saas.create` `saasservicemgmt.saas.get` `saasservicemgmt.saas.list` `saasservicemgmt.saas.update` `saasservicemgmt.unitKinds.create` `saasservicemgmt.unitKinds.get` `saasservicemgmt.unitKinds.list` `saasservicemgmt.unitKinds.update` `saasservicemgmt.unitOperations.` `saasservicemgmt.unitOperations.create` `saasservicemgmt.unitOperations.delete` `saasservicemgmt.unitOperations.get` `saasservicemgmt.unitOperations.list` `saasservicemgmt.unitOperations.update` `saasservicemgmt.units.*` `saasservicemgmt.units.create` `saasservicemgmt.units.delete` `saasservicemgmt.units.get` `saasservicemgmt.units.list` `saasservicemgmt.units.update` `storage.buckets.create` `storage.buckets.delete` `storage.buckets.get` `storage.buckets.getIamPolicy` `storage.buckets.setIamPolicy` `storage.objects.create` `storage.objects.delete` `storage.objects.get` `storage.objects.list`
SaaS Service Management Viewer ^Beta (`roles/saasservicemgmt.viewer`) Provides read-only access to SaaS Service Management resources.	`resourcemanager.projects.get` `resourcemanager.projects.list` `saasservicemgmt.locations.*` `saasservicemgmt.locations.get` `saasservicemgmt.locations.list` `saasservicemgmt.operations.get` `saasservicemgmt.operations.list` `saasservicemgmt.releases.get` `saasservicemgmt.releases.list` `saasservicemgmt.rolloutKinds.get` `saasservicemgmt.rolloutKinds.list` `saasservicemgmt.rollouts.get` `saasservicemgmt.rollouts.list` `saasservicemgmt.saas.get` `saasservicemgmt.saas.list` `saasservicemgmt.unitKinds.get` `saasservicemgmt.unitKinds.list` `saasservicemgmt.unitOperations.get` `saasservicemgmt.unitOperations.list` `saasservicemgmt.units.get` `saasservicemgmt.units.list`

SaaS Service Management Admin ^Beta

(roles/saasservicemgmt.admin)

Provide full access to all SaaS Service Management resources.

resourcemanager.projects.get

resourcemanager.projects.list

saasservicemgmt.*

saasservicemgmt.locations.get
saasservicemgmt.locations.list
saasservicemgmt.operations.cancel
saasservicemgmt.operations.delete
saasservicemgmt.operations.get
saasservicemgmt.operations.list
saasservicemgmt.releases.create
saasservicemgmt.releases.delete
saasservicemgmt.releases.get
saasservicemgmt.releases.list
saasservicemgmt.releases.update
saasservicemgmt.rolloutKinds.create
saasservicemgmt.rolloutKinds.delete
saasservicemgmt.rolloutKinds.get
saasservicemgmt.rolloutKinds.list
saasservicemgmt.rolloutKinds.update
saasservicemgmt.rollouts.create
saasservicemgmt.rollouts.delete
saasservicemgmt.rollouts.get
saasservicemgmt.rollouts.list
saasservicemgmt.rollouts.update
saasservicemgmt.saas.create
saasservicemgmt.saas.delete
saasservicemgmt.saas.get
saasservicemgmt.saas.list
saasservicemgmt.saas.update
saasservicemgmt.unitKinds.create
saasservicemgmt.unitKinds.delete
saasservicemgmt.unitKinds.get
saasservicemgmt.unitKinds.list
saasservicemgmt.unitKinds.update
saasservicemgmt.unitOperations.create
saasservicemgmt.unitOperations.delete
saasservicemgmt.unitOperations.get
saasservicemgmt.unitOperations.list
saasservicemgmt.unitOperations.update
saasservicemgmt.units.create
saasservicemgmt.units.delete
saasservicemgmt.units.get
saasservicemgmt.units.list
saasservicemgmt.units.update

SaaS Service Management Service Agent

(roles/saasservicemgmt.serviceAgent)

Service Agent used by SaaS Service Management.

artifactregistry.repositories.downloadArtifacts

config.deployments.create

config.deployments.delete

config.deployments.get

config.deployments.update

config.operations.get

config.revisions.get

saasservicemgmt.locations.*

saasservicemgmt.locations.get
saasservicemgmt.locations.list

saasservicemgmt.operations.get

saasservicemgmt.operations.list

saasservicemgmt.releases.create

saasservicemgmt.releases.get

saasservicemgmt.releases.list

saasservicemgmt.releases.update

saasservicemgmt.rolloutKinds.*

saasservicemgmt.rolloutKinds.create
saasservicemgmt.rolloutKinds.delete
saasservicemgmt.rolloutKinds.get
saasservicemgmt.rolloutKinds.list
saasservicemgmt.rolloutKinds.update

saasservicemgmt.rollouts.*

saasservicemgmt.rollouts.create
saasservicemgmt.rollouts.delete
saasservicemgmt.rollouts.get
saasservicemgmt.rollouts.list
saasservicemgmt.rollouts.update

saasservicemgmt.saas.create

saasservicemgmt.saas.get

saasservicemgmt.saas.list

saasservicemgmt.saas.update

saasservicemgmt.unitKinds.create

saasservicemgmt.unitKinds.get

saasservicemgmt.unitKinds.list

saasservicemgmt.unitKinds.update

saasservicemgmt.unitOperations.*

saasservicemgmt.unitOperations.create
saasservicemgmt.unitOperations.delete
saasservicemgmt.unitOperations.get
saasservicemgmt.unitOperations.list
saasservicemgmt.unitOperations.update

saasservicemgmt.units.*

saasservicemgmt.units.create
saasservicemgmt.units.delete
saasservicemgmt.units.get
saasservicemgmt.units.list
saasservicemgmt.units.update

storage.buckets.create

storage.buckets.delete

storage.buckets.get

storage.buckets.getIamPolicy

storage.buckets.setIamPolicy

storage.objects.create

storage.objects.delete

storage.objects.get

storage.objects.list

SaaS Service Management Viewer ^Beta

(roles/saasservicemgmt.viewer)

Provides read-only access to SaaS Service Management resources.

resourcemanager.projects.get

resourcemanager.projects.list

saasservicemgmt.locations.*

saasservicemgmt.locations.get
saasservicemgmt.locations.list

saasservicemgmt.operations.get

saasservicemgmt.operations.list

saasservicemgmt.releases.get

saasservicemgmt.releases.list

saasservicemgmt.rolloutKinds.get

saasservicemgmt.rolloutKinds.list

saasservicemgmt.rollouts.get

saasservicemgmt.rollouts.list

saasservicemgmt.saas.get

saasservicemgmt.saas.list

saasservicemgmt.unitKinds.get

saasservicemgmt.unitKinds.list

saasservicemgmt.unitOperations.get

saasservicemgmt.unitOperations.list

saasservicemgmt.units.get

saasservicemgmt.units.list

SaaS Service Management permissions

Permission	Included in roles
`saasservicemgmt.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`)
`saasservicemgmt.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`)
`saasservicemgmt.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.releases.create`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.releases.delete`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`)
`saasservicemgmt.releases.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.releases.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.releases.update`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rolloutKinds.create`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rolloutKinds.delete`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rolloutKinds.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rolloutKinds.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rolloutKinds.update`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rollouts.create`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rollouts.delete`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rollouts.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rollouts.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.rollouts.update`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.saas.create`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.saas.delete`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`)
`saasservicemgmt.saas.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.saas.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.saas.update`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitKinds.create`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitKinds.delete`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`)
`saasservicemgmt.unitKinds.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitKinds.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitKinds.update`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitOperations.create`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitOperations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitOperations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitOperations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.unitOperations.update`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.units.create`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.units.delete`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.units.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.units.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) SaaS Service Management Viewer (`roles/saasservicemgmt.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)
`saasservicemgmt.units.update`	Owner (`roles/owner`) Editor (`roles/editor`) SaaS Service Management Admin (`roles/saasservicemgmt.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SaaS Service Management Service Agent (`roles/saasservicemgmt.serviceAgent`)

SaaS Service Management roles and permissions