Distribuição por Tier
Project Owner
1Admin
446Editor
1Operator
48Developer
171Viewer
297Specialized
1417Roles Privilegiadas
Accesscontextmanager AdminAdminAccess Context Manager AdminAdminAuth Provider Admin BetaAdminAgent Platform AdministratorAdminColab Enterprise AdminAdminVertex AI Colab Service AgentSpecializedAgent Platform Feature Store EntityType ownerAdminVertex AI Extension Custom Code Service AgentAdminAgent Platform Feature Store AdminAdminAgent Platform Feature Store User BetaAdminNotebook Runtime AdminAdminVertex AI Service AgentSpecializedAnalytics Hub AdminAdminAnalytics Hub Listing AdminAdminApiGateway AdminAdminApigee Organization AdminAdminApigee Environment AdminAdminCloud Apigee Registry Admin BetaAdminApp Engine flexible environment Service AgentAdminApp Hub AdminAdminArtifact Registry AdministratorAdminContainer Registry -> Artifact Registry Migration AdminAdminAssured OSS AdminAdminAutoML Admin BetaAdminAutoscaling Admin BetaAdminAutoscaling Site Admin BetaAdminBackup and DR AdminAdminBackup and DR Compute Engine OperatorSpecializedBackup and DR Service AgentSpecializedGoogle Batch Service AgentSpecializedCloud BeyondCorp Admin BetaAdminBigLake AdminAdminBigQuery AdminAdminBigQuery Connection AdminAdminBigQuery Data OwnerAdminBigQuery Resource AdminAdminBigQuery Security Admin BetaAdminBigQuery Studio AdminAdminBigQuery Data Policy AdminAdminBigtable AdministratorAdminBilling Account AdministratorAdminBinary Authorization AdminAdminBinary Authorization Attestor AdminAdminBinary Authorization Policy AdministratorAdminGemini Enterprise for Customer Experience AdminAdminChronicle Service AgentAdminGemini for Google Cloud AdminAdminCode Repository Indexes AdminAdminTopic Admin BetaAdminCloud Build AdminAdminCloud Build Connection AdminAdminInfrastructure Manager Service AgentSpecializedCloud Deploy AdminAdminCloud Deploy Custom Target Type AdminAdminCloud Deploy Policy AdminAdminCloud Deploy Service AgentSpecializedCloud Deployment Manager Service AgentSpecializedCloud Functions AdminAdmin(Deprecated) Cloud Functions Service AgentAdminCloud KMS AdminAdminCloud KMS Service AgentAdminCatalog Admin BetaAdminCatalog Org Admin BetaAdminSupport Account AdministratorAdminCloud Tasks Admin BetaAdminCloud Tasks Queue Admin BetaAdminCloud TPU V2 API Service AgentAdminEnvironment and Storage Object AdministratorAdminCloud Composer API Service AgentAdminCloud Composer v2 API Service Agent ExtensionAdminComposer WorkerAdminCompute AdminAdminCompute Instance Admin (beta)AdminCompute Instance Admin (v1)AdminInstance Group Manager Service AgentSpecializedCompute Load Balancer AdminAdminCompute Network AdminAdminCompute Organization Firewall Policy AdminAdminCompute Organization Security Policy AdminAdminCompute Organization Security Policy UserAdminCompute Organization Resource AdminAdminCompute Security AdminAdminCompute Engine Service AgentSpecializedCompute Storage AdminAdminCompute Shared VPC AdminAdminCloud Infrastructure Manager AdminAdminConfig Delivery Service AgentAdminConnector AdminAdminCustom Connectors AdminAdminConnectors Endpoint Attachment AdminAdminConnectors Managed Zone AdminAdminContact Center AI Insights AdminAdminKubernetes Engine Service AgentAdminContainer Analysis AdminAdminContent Warehouse AdminAdminContent Warehouse Document AdminAdminData Catalog AdminAdminPolicy Tag AdminAdminDataCatalog EntryGroup OwnerAdminDataCatalog Entry OwnerAdminDataCatalog Glossary Owner BetaAdminData Catalog TagTemplate OwnerAdminData Connectors Admin BetaAdminConnector Admin BetaAdminCloud Dataflow Service AgentAdminDataform AdminAdminCode OwnerAdminTeam Folder OwnerAdminCloud Data Fusion AdminAdminCloud Data Fusion API Service AgentAdminData Labeling Service AgentAdminDatabase Migration AdminAdminDatapipelines Service AgentAdminDataplex AdministratorAdminDataplex Aspect Type OwnerAdminDataplex Binding AdministratorAdminDataplex Catalog AdminAdminDataplex Data Domain Admin BetaAdminDataplex Data Products AdminAdminDataplex DataScan AdministratorAdminDataplex DeveloperAdminDataplex Entry Group OwnerAdminDataplex Entry Type OwnerAdminCloud Dataplex Service AgentAdminDataplex Taxonomy AdministratorAdminDataprep Service AgentAdminDataproc AdministratorAdminDataproc Hub AgentSpecializedDataproc Service AgentAdminDataproc WorkerAdminDatastream AdminAdminData Studio Admin BetaAdminData Studio Workspace Manager BetaAdminDeployment Manager AdminAdminApplication Design Center AdminAdminDiscovery Engine AdminAdminAgent Admin BetaAdminGemini Enterprise AdminAdminCloud NotebookLM AdminAdminCloud NotebookLM Notebook OwnerAdminDiscovery Engine Service AgentAdminDLP API Service AgentAdminCloud Domains AdminAdminEarth Engine Resource Admin BetaAdminEarth Engine Apps Publisher BetaAdminEdge Container AdminAdminEdge Network AdminAdminEditorEditorEventarc AdminAdminEventarc Service AgentSpecializedFirebase AdminAdminFirebase Develop AdminAdminFirebase Service Management Service AgentAdminFirebase Admin SDK Administrator Service AgentAdminFirebase App Hosting Service AgentSpecializedFirebase Extensions API Service AgentAdminGame Services Service AgentSpecializedGemini Cloud Assist Admin BetaAdminGemini Cloud Assist Investigation Admin BetaAdminGemini Cloud Assist Investigation Owner BetaAdminGemini Data Analytics AdminAdminGemini Data Analytics Data Agent OwnerAdminGenomics AdminAdminGenomics Service AgentAdminBackup for GKE AdminAdminBackup for GKE Backup AdminAdminBackup for GKE Restore AdminAdminFleet Admin (formerly GKE Hub Admin)AdminGKE Hub Cross Project Service AgentAdminFleet Scope AdminAdminAnthos Multi-Cloud Service AgentAdminGKE on-prem AdminAdminHealthcare Annotation AdministratorAdminHealthcare Consent Store AdministratorAdminHealthcare Dataset AdministratorAdminHealthcare DICOM Store AdministratorAdminHealthcare FHIR Store AdministratorAdminHealthcare HL7v2 Store AdministratorAdminCluster Director Service AgentAdminIam AdminAdminDatabases AdminAdminData ScientistAdminDev OpsAdminIam EditorDeveloperInfrastructure AdministratorAdminML EngineerAdminNetwork AdministratorAdminSecurity AdminAdminService Account AdminAdminService Account Key AdminSpecializedService Account UserSpecializedSite Reliability EngineerAdminIAM Workforce Pool AdminAdminIAM Workload Identity Pool Admin BetaAdminConnector Admin BetaAdminIAP Policy AdminAdminIdentity Platform Admin BetaAdminIdentity Toolkit AdminAdminCloud IDS Admin BetaAdminConfig Controller AdminAdminKRM API Hosting AnthosApiEndpoint Service AgentAdminKRM API Hosting Service AgentSpecializedKubeRun Events Control Plane Service AgentAdminCloud Life Sciences Service AgentAdminLogging AdminAdminLooker Admin BetaAdminGoogle Cloud Managed Identities AdminAdminGoogle Cloud Managed Identities Backup AdminAdminGoogle Cloud Managed Identities Domain AdminAdminGoogle Cloud Managed Identities Peering AdminAdminDataproc Metastore AdminAdminDataproc Metastore Data OwnerAdminDataproc Metastore Service AgentAdminAI Platform AdminAdminAI Platform DeveloperAdminAI Platform Job OwnerAdminAI Platform Model OwnerAdminAI Platform Service AgentAdminMulti Cluster Ingress Service AgentAdminMulti-Cluster Service Discovery Service AgentAdminGroup AdminAdminHub & Spoke AdminAdminNetwork Connectivity Service AgentAdminSpoke AdminAdminNetwork Management AdminAdminNetworksecurity AdminAdminNetwork Services AdminAdminNotebooks AdminAdminNotebooks Legacy AdminAdminAI Platform Notebooks Service AgentAdminCloud OS Config Service AgentSpecializedOwnerProject OwnerCA Service AdminAdminPrivileged Access Manager AdminAdminPrivileged Access Manager Folder Service AgentAdminPrivileged Access Manager Organization Service AgentAdminPrivileged Access Manager Project Service AgentAdminPrivileged Access Manager Service AgentAdminProximitybeacon AdminAdminPub/Sub AdminAdminFolder AdminAdminFolder IAM AdminAdminOrganization AdministratorAdminProject IAM AdminAdminTag AdministratorAdminCloud Run AdminAdminCloud Run Service AgentSpecializedServerless Integrations Service AgentSpecializedCloud RuntimeConfig AdminAdminSaaS Service Management Service AgentAdminSecret Manager AdminAdminSLZ BQDW Blueprint Project Level Remediator BetaAdminSecured Landing Zone Service AgentAdminSecure Source Manager AdminAdminSecure Source Manager Instance OwnerAdminSecure Source Manager Repository AdminAdminSecurity Center AdminAdminGoogle Cloud Security Response Service AgentSpecializedSecurity Center Sources AdminAdminService Broker AdminAdminService Directory AdminAdminService Management AdministratorAdminSource Repository AdministratorAdminCloud Spanner AdminAdminCloud Spanner Backup AdminAdminCloud Spanner Database AdminAdminStorage AdminAdminStorage Folder AdminAdminStorage Legacy Bucket OwnerAdminStorage Legacy Object OwnerAdminStorage Object AdminAdminTelemetry AdminAdminConsumer Admin BetaAdminVisionAI Admin BetaAdminVisual Inspection AI Service AgentAdminVmwareengine AdminAdminVMware Engine Service AdminAdminCloud Workstations AdminAdminCloud Workstations Policy AdminAdminWorkstations Service AgentSpecialized
Por Categoria
O GCP IAM trabalha com predefined roles, que agrupam permissões granulares por serviço. Role de alto nível como roles/owner e roles/iam.admin só deveria ser atribuída quando não houver alternativa — antes disso, prefira a de menor escopo: Viewer, User ou Invoker.