Cloud Run IAM permissions

The following tables list the Identity and Access Management (IAM) permissions that are associated with Cloud Run.

Configurations

Permission	Description
run.configurations.get	View configurations, excluding IAM policies.
run.configurations.list	List configurations.

Domain mappings

There are no IAM permissions for domain mappings. Viewing, listing, creating and deleting domain mappings requires project-level permissions.

For a reference of which IAM permissions are contained in each IAM role, see Cloud Run IAM Roles.

Jobs

Permission	Description
run.jobs.create	Create new job.
run.jobs.delete	Delete job.
run.jobs.get	View jobs, excluding IAM policies.
run.jobs.getIamPolicy	Get an IAM policy.
run.jobs.list	List jobs.
run.jobs.run	Invoke (execute) jobs and cancel job executions.
run.jobs.runWithOverrides	Override job configuration for a job execution.
run.jobs.setIamPolicy	Set an IAM policy.
run.jobs.update	Update existing job.
run.executions.delete	Delete job executions.
run.executions.get	Get job executions.
run.executions.list	List job executions.
run.tasks.get	Get job execution tasks.
run.tasks.list	List job execution tasks.

Locations

Permission	Description
run.locations.get	Get location information.
run.locations.list	List all locations.

Routes

Permission	Description
run.routes.get	View routes, excluding IAM policies.
run.routes.list	List routes.
run.routes.invoke	Invoke a route.

Services

Permission	Description
run.services.get	View services, excluding IAM policies.
run.services.list	List services.
run.services.create	Create new services.
run.services.update	Update existing services.
run.services.delete	Delete services.
run.services.getIamPolicy	Get an IAM policy.
run.services.setIamPolicy	Set an IAM policy.

Service revisions

Permission	Description
run.revisions.get	View revisions, excluding IAM policies.
run.revisions.list	List revisions.
run.revisions.delete	Delete revisions.

View project

Permission	Description
resourcemanager.projects.get	Get project.