English
Deutsch
Español – América Latina
Français
Português – Brasil
中文 – 简体
日本語
한국어

Console

Contact Us Start free

Telemetry API roles and permissions

This page lists the IAM roles and permissions for Telemetry API. To search through all roles and permissions, see the role and permission index.

Telemetry API roles

Role	Permissions
Cloud Telemetry Metrics Writer (`roles/telemetry.metricsWriter`) Access to write metrics.	`telemetry.metrics.write`
Integrated Service Telemetry Logs Writer ^Beta (`roles/telemetry.serviceLogsWriter`) Allows an onboarded service to write log data to a destination.	`telemetry.consumers.writeLogs`
Integrated Service Telemetry Metrics Writer ^Beta (`roles/telemetry.serviceMetricsWriter`) Allows an onboarded service to write metrics data to a destination.	`telemetry.consumers.writeMetrics`
Integrated Service Telemetry Writer ^Beta (`roles/telemetry.serviceTelemetryWriter`) Allows an onboarded service to write all telemetry data to a destination.	`telemetry.consumers.*` `telemetry.consumers.writeLogs` `telemetry.consumers.writeMetrics` `telemetry.consumers.writeTraces`
Integrated Service Telemetry Traces Writer ^Beta (`roles/telemetry.serviceTracesWriter`) Allows an onboarded service to write trace data to a destination.	`telemetry.consumers.writeTraces`
Cloud Telemetry Traces Writer (`roles/telemetry.tracesWriter`) Access to write trace spans.	`telemetry.traces.write`
Cloud Telemetry Writer (`roles/telemetry.writer`) Full access to write all telemetry data.	`telemetry.metrics.write` `telemetry.traces.write`

Telemetry API permissions

Permission	Included in roles
`telemetry.consumers.writeLogs`	Owner (`roles/owner`) Integrated Service Telemetry Logs Writer (`roles/telemetry.serviceLogsWriter`) Integrated Service Telemetry Writer (`roles/telemetry.serviceTelemetryWriter`)
`telemetry.consumers.writeMetrics`	Owner (`roles/owner`) Integrated Service Telemetry Metrics Writer (`roles/telemetry.serviceMetricsWriter`) Integrated Service Telemetry Writer (`roles/telemetry.serviceTelemetryWriter`)
`telemetry.consumers.writeTraces`	Owner (`roles/owner`) Integrated Service Telemetry Writer (`roles/telemetry.serviceTelemetryWriter`) Integrated Service Telemetry Traces Writer (`roles/telemetry.serviceTracesWriter`)
`telemetry.metrics.write`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Telemetry Metrics Writer (`roles/telemetry.metricsWriter`) Cloud Telemetry Writer (`roles/telemetry.writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Machine Learning Service Agent (`roles/firebaseml.serviceAgent`) Kubernetes Engine Default Node Service Agent (`roles/container.defaultNodeServiceAgent`)
`telemetry.traces.write`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Trace Admin (`roles/cloudtrace.admin`) Cloud Trace Agent (`roles/cloudtrace.agent`) Cloud Telemetry Traces Writer (`roles/telemetry.tracesWriter`) Cloud Telemetry Writer (`roles/telemetry.writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Kubernetes Engine Default Node Service Agent (`roles/container.defaultNodeServiceAgent`) Firebase Machine Learning Service Agent (`roles/firebaseml.serviceAgent`) Mesh Data Plane Service Agent (`roles/meshdataplane.serviceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-08-29 UTC.