Cloud Source Repositories roles and permissions
Stay organized with collections Save and categorize content based on your preferences.

This page lists the IAM roles and permissions for Cloud Source Repositories. To search through all roles and permissions, see the role and permission index.

Cloud Source Repositories roles

Role Permissions

Role	Permissions
Source Repository Administrator (`roles/source.admin`) Provides permissions to create, update, delete, list, clone, fetch, and browse repositories. Also provides permissions to read and change IAM policies. Lowest-level resources where you can grant this role: Repository	`source.*` `source.repos.create` `source.repos.delete` `source.repos.get` `source.repos.getIamPolicy` `source.repos.getProjectConfig` `source.repos.list` `source.repos.setIamPolicy` `source.repos.update` `source.repos.updateProjectConfig` `source.repos.updateRepoConfig`
Source Repository Reader (`roles/source.reader`) Provides permissions to list, clone, fetch, and browse repositories. Lowest-level resources where you can grant this role: Repository	`source.repos.get` `source.repos.list`
Source Repository Writer (`roles/source.writer`) Provides permissions to list, clone, fetch, browse, and update repositories. Lowest-level resources where you can grant this role: Repository	`source.repos.get` `source.repos.list` `source.repos.update`
Cloud Source Repositories Service Agent (`roles/sourcerepo.serviceAgent`) Allow Cloud Source Repositories to integrate with other Cloud services. Warning: Do not grant service agent roles to any principals except service agents.	`iam.serviceAccounts.getAccessToken` `pubsub.topics.publish`

Source Repository Administrator

(roles/source.admin)

Provides permissions to create, update, delete, list, clone, fetch, and browse repositories. Also provides permissions to read and change IAM policies.

Lowest-level resources where you can grant this role:

Repository

source.*

source.repos.create
source.repos.delete
source.repos.get
source.repos.getIamPolicy
source.repos.getProjectConfig
source.repos.list
source.repos.setIamPolicy
source.repos.update
source.repos.updateProjectConfig
source.repos.updateRepoConfig

Source Repository Reader

(roles/source.reader)

Provides permissions to list, clone, fetch, and browse repositories.

Lowest-level resources where you can grant this role:

Repository

source.repos.get

source.repos.list

Source Repository Writer

(roles/source.writer)

Provides permissions to list, clone, fetch, browse, and update repositories.

Lowest-level resources where you can grant this role:

Repository

source.repos.get

source.repos.list

source.repos.update

Cloud Source Repositories Service Agent

(roles/sourcerepo.serviceAgent)

Allow Cloud Source Repositories to integrate with other Cloud services.

iam.serviceAccounts.getAccessToken

pubsub.topics.publish

Cloud Source Repositories permissions

Permission	Included in roles
`source.repos.create`	Owner (`roles/owner`) Source Repository Administrator (`roles/source.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`)
`source.repos.delete`	Owner (`roles/owner`) Source Repository Administrator (`roles/source.admin`)
`source.repos.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Build Service Account (`roles/cloudbuild.builds.builder`) Composer Worker (`roles/composer.worker`) Cloud Run Builder (`roles/run.builder`) Source Repository Administrator (`roles/source.admin`) Source Repository Reader (`roles/source.reader`) Source Repository Writer (`roles/source.writer`) Telco Automation Admin (`roles/telcoautomation.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Functions Service Agent (`roles/cloudfunctions.serviceAgent`) Endpoints Portal Service Agent (`roles/endpointsportal.serviceAgent`) Cloud Build Service Agent (`roles/cloudbuild.serviceAgent`)
`source.repos.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Source Repository Administrator (`roles/source.admin`)
`source.repos.getProjectConfig`	Owner (`roles/owner`) Source Repository Administrator (`roles/source.admin`)
`source.repos.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Build Service Account (`roles/cloudbuild.builds.builder`) Composer Worker (`roles/composer.worker`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Source Repository Administrator (`roles/source.admin`) Source Repository Reader (`roles/source.reader`) Source Repository Writer (`roles/source.writer`) Telco Automation Admin (`roles/telcoautomation.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Functions Service Agent (`roles/cloudfunctions.serviceAgent`) Cloud Build Service Agent (`roles/cloudbuild.serviceAgent`)
`source.repos.setIamPolicy`	Owner (`roles/owner`) Security Admin (`roles/iam.securityAdmin`) Source Repository Administrator (`roles/source.admin`)
`source.repos.update`	Owner (`roles/owner`) Editor (`roles/editor`) Source Repository Administrator (`roles/source.admin`) Source Repository Writer (`roles/source.writer`)
`source.repos.updateProjectConfig`	Owner (`roles/owner`) Source Repository Administrator (`roles/source.admin`)
`source.repos.updateRepoConfig`	Owner (`roles/owner`) Source Repository Administrator (`roles/source.admin`)

Cloud Source Repositories roles and permissions
Stay organized with collections Save and categorize content based on your preferences.