Stay organized with collections
Save and categorize content based on your preferences.
Identity and Access Management (IAM) lets you give access to specific resources.
To give access to a resource, you grant a specific role to a user, which gives
the user certain permissions.
Required roles
Every Workload Manager API method requires the necessary
IAM permissions. Permissions are assigned by granting roles to
a user, group, or service account. For information about how to grant access to
resources, see Manage access.
The following table shows the Workload Manager
IAM roles and the permissions granted by those roles.
Workload Manager Service Agent
(roles/workloadmanager.serviceAgent)
Gives Workload Manager Service Agent access to CAI export functions and Cloud Monitoring.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[],[]]