Secure Source Manager roles and permissions

This page lists the IAM roles and permissions for Secure Source Manager. To search through all roles and permissions, see the role and permission index.

Secure Source Manager roles

Role Permissions

(roles/securesourcemanager.admin)

Full access to all Secure Source Manager resources.

resourcemanager.projects.get

resourcemanager.projects.list

securesourcemanager.*

  • securesourcemanager.branchRules.create
  • securesourcemanager.branchRules.delete
  • securesourcemanager.branchRules.get
  • securesourcemanager.branchRules.list
  • securesourcemanager.branchRules.update
  • securesourcemanager.instances.access
  • securesourcemanager.instances.create
  • securesourcemanager.instances.createRepository
  • securesourcemanager.instances.delete
  • securesourcemanager.instances.get
  • securesourcemanager.instances.getIamPolicy
  • securesourcemanager.instances.list
  • securesourcemanager.instances.setIamPolicy
  • securesourcemanager.locations.get
  • securesourcemanager.locations.list
  • securesourcemanager.operations.cancel
  • securesourcemanager.operations.delete
  • securesourcemanager.operations.get
  • securesourcemanager.operations.list
  • securesourcemanager.repositories.approvePullRequests
  • securesourcemanager.repositories.create
  • securesourcemanager.repositories.delete
  • securesourcemanager.repositories.fetch
  • securesourcemanager.repositories.get
  • securesourcemanager.repositories.getIamPolicy
  • securesourcemanager.repositories.list
  • securesourcemanager.repositories.push
  • securesourcemanager.repositories.readIssues
  • securesourcemanager.repositories.readPullRequests
  • securesourcemanager.repositories.setIamPolicy
  • securesourcemanager.repositories.update
  • securesourcemanager.repositories.writeIssues
  • securesourcemanager.repositories.writePullRequests
  • securesourcemanager.sshkeys.create
  • securesourcemanager.sshkeys.createAny
  • securesourcemanager.sshkeys.delete
  • securesourcemanager.sshkeys.deleteAny
  • securesourcemanager.sshkeys.get
  • securesourcemanager.sshkeys.list
  • securesourcemanager.sshkeys.listAny

(roles/securesourcemanager.instanceAccessor)

An instance accessor can access an instance, but not necessarily create resources in the instance.

resourcemanager.projects.get

resourcemanager.projects.list

securesourcemanager.instances.access

securesourcemanager.sshkeys.create

securesourcemanager.sshkeys.delete

securesourcemanager.sshkeys.get

securesourcemanager.sshkeys.list

(roles/securesourcemanager.instanceManager)

Read-write access to all Secure Source Manager resources (full control except for the ability to modify permissions).

resourcemanager.projects.get

resourcemanager.projects.list

securesourcemanager.instances.access

securesourcemanager.instances.createRepository

securesourcemanager.instances.delete

securesourcemanager.instances.get

securesourcemanager.instances.list

securesourcemanager.locations.*

  • securesourcemanager.locations.get
  • securesourcemanager.locations.list

securesourcemanager.operations.*

  • securesourcemanager.operations.cancel
  • securesourcemanager.operations.delete
  • securesourcemanager.operations.get
  • securesourcemanager.operations.list

securesourcemanager.sshkeys.*

  • securesourcemanager.sshkeys.create
  • securesourcemanager.sshkeys.createAny
  • securesourcemanager.sshkeys.delete
  • securesourcemanager.sshkeys.deleteAny
  • securesourcemanager.sshkeys.get
  • securesourcemanager.sshkeys.list
  • securesourcemanager.sshkeys.listAny

(roles/securesourcemanager.instanceOwner)

Full control over Secure Source Manager instances, including listing, creating, and deleting them. Also enables instance user management.

resourcemanager.projects.get

resourcemanager.projects.list

securesourcemanager.instances.*

  • securesourcemanager.instances.access
  • securesourcemanager.instances.create
  • securesourcemanager.instances.createRepository
  • securesourcemanager.instances.delete
  • securesourcemanager.instances.get
  • securesourcemanager.instances.getIamPolicy
  • securesourcemanager.instances.list
  • securesourcemanager.instances.setIamPolicy

securesourcemanager.locations.*

  • securesourcemanager.locations.get
  • securesourcemanager.locations.list

securesourcemanager.operations.*

  • securesourcemanager.operations.cancel
  • securesourcemanager.operations.delete
  • securesourcemanager.operations.get
  • securesourcemanager.operations.list

securesourcemanager.sshkeys.*

  • securesourcemanager.sshkeys.create
  • securesourcemanager.sshkeys.createAny
  • securesourcemanager.sshkeys.delete
  • securesourcemanager.sshkeys.deleteAny
  • securesourcemanager.sshkeys.get
  • securesourcemanager.sshkeys.list
  • securesourcemanager.sshkeys.listAny

(roles/securesourcemanager.instanceRepositoryCreator)

An instance repository creator can connect to a Cloud Git instance via IAP (HTTPS) and create repositories in the instance.

resourcemanager.projects.get

resourcemanager.projects.list

securesourcemanager.instances.access

securesourcemanager.instances.createRepository

securesourcemanager.sshkeys.create

securesourcemanager.sshkeys.delete

securesourcemanager.sshkeys.get

securesourcemanager.sshkeys.list

(roles/securesourcemanager.repoAdmin)

A repoAdmin has the ability to CRUD a repository and its children as well as assign users to a repository. They can also set, get, or check IAM policies on the repository.

resourcemanager.projects.get

resourcemanager.projects.list

securesourcemanager.branchRules.*

  • securesourcemanager.branchRules.create
  • securesourcemanager.branchRules.delete
  • securesourcemanager.branchRules.get
  • securesourcemanager.branchRules.list
  • securesourcemanager.branchRules.update

securesourcemanager.repositories.*

  • securesourcemanager.repositories.approvePullRequests
  • securesourcemanager.repositories.create
  • securesourcemanager.repositories.delete
  • securesourcemanager.repositories.fetch
  • securesourcemanager.repositories.get
  • securesourcemanager.repositories.getIamPolicy
  • securesourcemanager.repositories.list
  • securesourcemanager.repositories.push
  • securesourcemanager.repositories.readIssues
  • securesourcemanager.repositories.readPullRequests
  • securesourcemanager.repositories.setIamPolicy
  • securesourcemanager.repositories.update
  • securesourcemanager.repositories.writeIssues
  • securesourcemanager.repositories.writePullRequests

(roles/securesourcemanager.repoCreator)

A repoCreator has access to create repostiory in a project, the creator will then become the repoAdmin on this repository.

resourcemanager.projects.get

resourcemanager.projects.list

securesourcemanager.repositories.create

(roles/securesourcemanager.repoPullRequestApprover)

A pull request approver can approve pull requests in a repository.

resourcemanager.projects.get

resourcemanager.projects.list

securesourcemanager.repositories.approvePullRequests

(roles/securesourcemanager.repoReader)

A repoReader has read access to a particular repository, including its child components. They cannot create repositories, and do not manage IAM policies on the repository.

resourcemanager.projects.get

resourcemanager.projects.list

securesourcemanager.branchRules.get

securesourcemanager.branchRules.list

securesourcemanager.repositories.fetch

securesourcemanager.repositories.get

securesourcemanager.repositories.list

securesourcemanager.repositories.readIssues

securesourcemanager.repositories.readPullRequests

(roles/securesourcemanager.repoWriter)

A repoWriter has read/write access to a particular repository, including its child components. They cannot create repositories, and do not manage IAM policies on the repository.

resourcemanager.projects.get

resourcemanager.projects.list

securesourcemanager.branchRules.get

securesourcemanager.branchRules.list

securesourcemanager.repositories.fetch

securesourcemanager.repositories.get

securesourcemanager.repositories.list

securesourcemanager.repositories.push

securesourcemanager.repositories.readIssues

securesourcemanager.repositories.readPullRequests

securesourcemanager.repositories.writeIssues

securesourcemanager.repositories.writePullRequests

(roles/securesourcemanager.serviceAgent)

Gives Secure Source Manager service account access to managed resources.

iam.serviceAccounts.signJwt

securesourcemanager.instances.access

serviceusage.services.use

(roles/securesourcemanager.sshKeyUser)

An sshKeyUser can create SSH keys for themselves and list/delete SSH keys they own.

resourcemanager.projects.get

resourcemanager.projects.list

securesourcemanager.sshkeys.create

securesourcemanager.sshkeys.delete

securesourcemanager.sshkeys.get

securesourcemanager.sshkeys.list

Secure Source Manager permissions

Permission Included in roles

Owner (roles/owner)

Editor (roles/editor)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Repository Admin (roles/securesourcemanager.repoAdmin)

Owner (roles/owner)

Editor (roles/editor)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Repository Admin (roles/securesourcemanager.repoAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Repository Admin (roles/securesourcemanager.repoAdmin)

Secure Source Manager Repository Reader (roles/securesourcemanager.repoReader)

Secure Source Manager Repository Writer (roles/securesourcemanager.repoWriter)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Repository Admin (roles/securesourcemanager.repoAdmin)

Secure Source Manager Repository Reader (roles/securesourcemanager.repoReader)

Secure Source Manager Repository Writer (roles/securesourcemanager.repoWriter)

Owner (roles/owner)

Editor (roles/editor)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Repository Admin (roles/securesourcemanager.repoAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Instance Accessor (roles/securesourcemanager.instanceAccessor)

Secure Source Manager Instance Manager (roles/securesourcemanager.instanceManager)

Secure Source Manager Instance Owner (roles/securesourcemanager.instanceOwner)

Secure Source Manager Instance Repository Creator (roles/securesourcemanager.instanceRepositoryCreator)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Instance Owner (roles/securesourcemanager.instanceOwner)

Owner (roles/owner)

Editor (roles/editor)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Instance Manager (roles/securesourcemanager.instanceManager)

Secure Source Manager Instance Owner (roles/securesourcemanager.instanceOwner)

Secure Source Manager Instance Repository Creator (roles/securesourcemanager.instanceRepositoryCreator)

Owner (roles/owner)

Editor (roles/editor)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Instance Manager (roles/securesourcemanager.instanceManager)

Secure Source Manager Instance Owner (roles/securesourcemanager.instanceOwner)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Instance Manager (roles/securesourcemanager.instanceManager)

Secure Source Manager Instance Owner (roles/securesourcemanager.instanceOwner)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Instance Owner (roles/securesourcemanager.instanceOwner)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Instance Manager (roles/securesourcemanager.instanceManager)

Secure Source Manager Instance Owner (roles/securesourcemanager.instanceOwner)

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Instance Owner (roles/securesourcemanager.instanceOwner)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Instance Manager (roles/securesourcemanager.instanceManager)

Secure Source Manager Instance Owner (roles/securesourcemanager.instanceOwner)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Instance Manager (roles/securesourcemanager.instanceManager)

Secure Source Manager Instance Owner (roles/securesourcemanager.instanceOwner)

Owner (roles/owner)

Editor (roles/editor)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Instance Manager (roles/securesourcemanager.instanceManager)

Secure Source Manager Instance Owner (roles/securesourcemanager.instanceOwner)

Owner (roles/owner)

Editor (roles/editor)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Instance Manager (roles/securesourcemanager.instanceManager)

Secure Source Manager Instance Owner (roles/securesourcemanager.instanceOwner)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Instance Manager (roles/securesourcemanager.instanceManager)

Secure Source Manager Instance Owner (roles/securesourcemanager.instanceOwner)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Instance Manager (roles/securesourcemanager.instanceManager)

Secure Source Manager Instance Owner (roles/securesourcemanager.instanceOwner)

Owner (roles/owner)

Editor (roles/editor)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Repository Admin (roles/securesourcemanager.repoAdmin)

Secure Source Manager Repository Pull Request Approver (roles/securesourcemanager.repoPullRequestApprover)

Owner (roles/owner)

Editor (roles/editor)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Repository Admin (roles/securesourcemanager.repoAdmin)

Secure Source Manager Repository Creator (roles/securesourcemanager.repoCreator)

Owner (roles/owner)

Editor (roles/editor)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Repository Admin (roles/securesourcemanager.repoAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Repository Admin (roles/securesourcemanager.repoAdmin)

Secure Source Manager Repository Reader (roles/securesourcemanager.repoReader)

Secure Source Manager Repository Writer (roles/securesourcemanager.repoWriter)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Repository Admin (roles/securesourcemanager.repoAdmin)

Secure Source Manager Repository Reader (roles/securesourcemanager.repoReader)

Secure Source Manager Repository Writer (roles/securesourcemanager.repoWriter)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Repository Admin (roles/securesourcemanager.repoAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Repository Admin (roles/securesourcemanager.repoAdmin)

Secure Source Manager Repository Reader (roles/securesourcemanager.repoReader)

Secure Source Manager Repository Writer (roles/securesourcemanager.repoWriter)

Owner (roles/owner)

Editor (roles/editor)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Repository Admin (roles/securesourcemanager.repoAdmin)

Secure Source Manager Repository Writer (roles/securesourcemanager.repoWriter)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Repository Admin (roles/securesourcemanager.repoAdmin)

Secure Source Manager Repository Reader (roles/securesourcemanager.repoReader)

Secure Source Manager Repository Writer (roles/securesourcemanager.repoWriter)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Repository Admin (roles/securesourcemanager.repoAdmin)

Secure Source Manager Repository Reader (roles/securesourcemanager.repoReader)

Secure Source Manager Repository Writer (roles/securesourcemanager.repoWriter)

Owner (roles/owner)

Security Admin (roles/iam.securityAdmin)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Repository Admin (roles/securesourcemanager.repoAdmin)

Owner (roles/owner)

Editor (roles/editor)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Repository Admin (roles/securesourcemanager.repoAdmin)

Owner (roles/owner)

Editor (roles/editor)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Repository Admin (roles/securesourcemanager.repoAdmin)

Secure Source Manager Repository Writer (roles/securesourcemanager.repoWriter)

Owner (roles/owner)

Editor (roles/editor)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Repository Admin (roles/securesourcemanager.repoAdmin)

Secure Source Manager Repository Writer (roles/securesourcemanager.repoWriter)

Owner (roles/owner)

Editor (roles/editor)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Instance Accessor (roles/securesourcemanager.instanceAccessor)

Secure Source Manager Instance Manager (roles/securesourcemanager.instanceManager)

Secure Source Manager Instance Owner (roles/securesourcemanager.instanceOwner)

Secure Source Manager Instance Repository Creator (roles/securesourcemanager.instanceRepositoryCreator)

Secure Source Manager SSH Key User (roles/securesourcemanager.sshKeyUser)

Owner (roles/owner)

Editor (roles/editor)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Instance Manager (roles/securesourcemanager.instanceManager)

Secure Source Manager Instance Owner (roles/securesourcemanager.instanceOwner)

Owner (roles/owner)

Editor (roles/editor)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Instance Accessor (roles/securesourcemanager.instanceAccessor)

Secure Source Manager Instance Manager (roles/securesourcemanager.instanceManager)

Secure Source Manager Instance Owner (roles/securesourcemanager.instanceOwner)

Secure Source Manager Instance Repository Creator (roles/securesourcemanager.instanceRepositoryCreator)

Secure Source Manager SSH Key User (roles/securesourcemanager.sshKeyUser)

Owner (roles/owner)

Editor (roles/editor)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Instance Manager (roles/securesourcemanager.instanceManager)

Secure Source Manager Instance Owner (roles/securesourcemanager.instanceOwner)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Instance Accessor (roles/securesourcemanager.instanceAccessor)

Secure Source Manager Instance Manager (roles/securesourcemanager.instanceManager)

Secure Source Manager Instance Owner (roles/securesourcemanager.instanceOwner)

Secure Source Manager Instance Repository Creator (roles/securesourcemanager.instanceRepositoryCreator)

Secure Source Manager SSH Key User (roles/securesourcemanager.sshKeyUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Instance Accessor (roles/securesourcemanager.instanceAccessor)

Secure Source Manager Instance Manager (roles/securesourcemanager.instanceManager)

Secure Source Manager Instance Owner (roles/securesourcemanager.instanceOwner)

Secure Source Manager Instance Repository Creator (roles/securesourcemanager.instanceRepositoryCreator)

Secure Source Manager SSH Key User (roles/securesourcemanager.sshKeyUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Secure Source Manager Admin (roles/securesourcemanager.admin)

Secure Source Manager Instance Manager (roles/securesourcemanager.instanceManager)

Secure Source Manager Instance Owner (roles/securesourcemanager.instanceOwner)