App Engine roles and permissions

This page lists the IAM roles and permissions for App Engine. To search through all roles and permissions, see the role and permission index.

App Engine roles

Role Permissions

Appengine Admin

(roles/appengine.admin)

Admin role for appengine

appengine.*

  • appengine.applications.create
  • appengine.applications.get
  • appengine.applications.listRuntimes
  • appengine.applications.update
  • appengine.instances.delete
  • appengine.instances.enableDebug
  • appengine.instances.get
  • appengine.instances.list
  • appengine.memcache.addKey
  • appengine.memcache.flush
  • appengine.memcache.get
  • appengine.memcache.getKey
  • appengine.memcache.list
  • appengine.memcache.update
  • appengine.operations.get
  • appengine.operations.list
  • appengine.runtimes.actAsAdmin
  • appengine.services.delete
  • appengine.services.get
  • appengine.services.list
  • appengine.services.update
  • appengine.versions.create
  • appengine.versions.delete
  • appengine.versions.exportAppImage
  • appengine.versions.get
  • appengine.versions.getFileContents
  • appengine.versions.list
  • appengine.versions.update

resourcemanager.projects.get

resourcemanager.projects.list

App Engine Admin

(roles/appengine.appAdmin)

Read/Write/Modify access to all application configuration and settings.

To deploy new versions, a principal must have the Service Account User (roles/iam.serviceAccountUser) role on the assigned App Engine service account, and the Cloud Build Editor (roles/cloudbuild.builds.editor), and Cloud Storage Object Admin (roles/storage.objectAdmin) roles on the project.

Lowest-level resources where you can grant this role:

  • Project

appengine.applications.get

appengine.applications.listRuntimes

appengine.applications.update

appengine.instances.*

  • appengine.instances.delete
  • appengine.instances.enableDebug
  • appengine.instances.get
  • appengine.instances.list

appengine.memcache.addKey

appengine.memcache.flush

appengine.memcache.get

appengine.memcache.update

appengine.operations.*

  • appengine.operations.get
  • appengine.operations.list

appengine.runtimes.actAsAdmin

appengine.services.*

  • appengine.services.delete
  • appengine.services.get
  • appengine.services.list
  • appengine.services.update

appengine.versions.create

appengine.versions.delete

appengine.versions.exportAppImage

appengine.versions.get

appengine.versions.list

appengine.versions.update

artifactregistry.projectsettings.get

artifactregistry.repositories.deleteArtifacts

artifactregistry.repositories.downloadArtifacts

artifactregistry.repositories.uploadArtifacts

recommender.appengineVersionCostInsights.*

  • recommender.appengineVersionCostInsights.get
  • recommender.appengineVersionCostInsights.list
  • recommender.appengineVersionCostInsights.update

recommender.appengineVersionCostRecommendations.*

  • recommender.appengineVersionCostRecommendations.get
  • recommender.appengineVersionCostRecommendations.list
  • recommender.appengineVersionCostRecommendations.update

recommender.locations.*

  • recommender.locations.get
  • recommender.locations.list

resourcemanager.projects.get

resourcemanager.projects.list

Appengine Editor

(roles/appengine.editor)

Editor role for appengine

appengine.applications.get

appengine.applications.listRuntimes

appengine.applications.update

appengine.instances.*

  • appengine.instances.delete
  • appengine.instances.enableDebug
  • appengine.instances.get
  • appengine.instances.list

appengine.memcache.*

  • appengine.memcache.addKey
  • appengine.memcache.flush
  • appengine.memcache.get
  • appengine.memcache.getKey
  • appengine.memcache.list
  • appengine.memcache.update

appengine.operations.*

  • appengine.operations.get
  • appengine.operations.list

appengine.runtimes.actAsAdmin

appengine.services.*

  • appengine.services.delete
  • appengine.services.get
  • appengine.services.list
  • appengine.services.update

appengine.versions.create

appengine.versions.delete

appengine.versions.exportAppImage

appengine.versions.get

appengine.versions.list

appengine.versions.update

resourcemanager.projects.get

resourcemanager.projects.list

Appengine Viewer

(roles/appengine.viewer)

Viewer role for appengine

appengine.applications.get

appengine.applications.listRuntimes

appengine.instances.get

appengine.instances.list

appengine.memcache.get

appengine.memcache.getKey

appengine.memcache.list

appengine.operations.*

  • appengine.operations.get
  • appengine.operations.list

appengine.runtimes.actAsAdmin

appengine.services.get

appengine.services.list

appengine.versions.get

appengine.versions.list

resourcemanager.projects.get

resourcemanager.projects.list

App Engine Creator

(roles/appengine.appCreator)

Ability to create the App Engine resource for the project.

Lowest-level resources where you can grant this role:

  • Project

appengine.applications.create

resourcemanager.projects.get

resourcemanager.projects.list

App Engine Viewer

(roles/appengine.appViewer)

Read-only access to all application configuration and settings.

Lowest-level resources where you can grant this role:

  • Project

appengine.applications.get

appengine.applications.listRuntimes

appengine.instances.get

appengine.instances.list

appengine.operations.*

  • appengine.operations.get
  • appengine.operations.list

appengine.services.get

appengine.services.list

appengine.versions.get

appengine.versions.list

artifactregistry.projectsettings.get

recommender.appengineVersionCostInsights.get

recommender.appengineVersionCostInsights.list

recommender.appengineVersionCostRecommendations.get

recommender.appengineVersionCostRecommendations.list

recommender.locations.*

  • recommender.locations.get
  • recommender.locations.list

resourcemanager.projects.get

resourcemanager.projects.list

App Engine Code Viewer

(roles/appengine.codeViewer)

Read-only access to all application configuration, settings, and deployed source code.

Lowest-level resources where you can grant this role:

  • Project

appengine.applications.get

appengine.applications.listRuntimes

appengine.instances.get

appengine.instances.list

appengine.operations.*

  • appengine.operations.get
  • appengine.operations.list

appengine.services.get

appengine.services.list

appengine.versions.get

appengine.versions.getFileContents

appengine.versions.list

artifactregistry.projectsettings.get

resourcemanager.projects.get

resourcemanager.projects.list

App Engine Managed VM Debug Access

(roles/appengine.debugger)

Ability to read or manage v2 instances.

appengine.applications.get

appengine.applications.listRuntimes

appengine.instances.*

  • appengine.instances.delete
  • appengine.instances.enableDebug
  • appengine.instances.get
  • appengine.instances.list

appengine.operations.*

  • appengine.operations.get
  • appengine.operations.list

appengine.services.get

appengine.services.list

appengine.versions.get

appengine.versions.list

resourcemanager.projects.get

resourcemanager.projects.list

App Engine Deployer

(roles/appengine.deployer)

Read-only access to all application configuration and settings.

To deploy new versions, you must also have the Service Account User (roles/iam.serviceAccountUser) role on the assigned App Engine service account, and the Cloud Build Editor (roles/cloudbuild.builds.editor), and Cloud Storage Object Admin (roles/storage.objectAdmin) roles on the project.

Cannot modify existing versions other than deleting versions that are not receiving traffic.

Lowest-level resources where you can grant this role:

  • Project

appengine.applications.get

appengine.applications.listRuntimes

appengine.instances.get

appengine.instances.list

appengine.operations.*

  • appengine.operations.get
  • appengine.operations.list

appengine.services.get

appengine.services.list

appengine.versions.create

appengine.versions.delete

appengine.versions.exportAppImage

appengine.versions.get

appengine.versions.list

artifactregistry.projectsettings.get

artifactregistry.repositories.deleteArtifacts

artifactregistry.repositories.downloadArtifacts

artifactregistry.repositories.uploadArtifacts

recommender.appengineVersionCostInsights.*

  • recommender.appengineVersionCostInsights.get
  • recommender.appengineVersionCostInsights.list
  • recommender.appengineVersionCostInsights.update

recommender.appengineVersionCostRecommendations.*

  • recommender.appengineVersionCostRecommendations.get
  • recommender.appengineVersionCostRecommendations.list
  • recommender.appengineVersionCostRecommendations.update

recommender.locations.*

  • recommender.locations.get
  • recommender.locations.list

resourcemanager.projects.get

resourcemanager.projects.list

App Engine Memcache Data Admin

(roles/appengine.memcacheDataAdmin)

Can get, set, delete, and flush App Engine Memcache items.

appengine.applications.get

appengine.memcache.addKey

appengine.memcache.flush

appengine.memcache.get

appengine.memcache.update

resourcemanager.projects.get

resourcemanager.projects.list

App Engine Service Admin

(roles/appengine.serviceAdmin)

Read-only access to all application configuration and settings.

Write access to module-level and version-level settings. Cannot deploy a new version.

Lowest-level resources where you can grant this role:

  • Project

appengine.applications.get

appengine.applications.listRuntimes

appengine.instances.delete

appengine.instances.get

appengine.instances.list

appengine.operations.*

  • appengine.operations.get
  • appengine.operations.list

appengine.services.*

  • appengine.services.delete
  • appengine.services.get
  • appengine.services.list
  • appengine.services.update

appengine.versions.delete

appengine.versions.get

appengine.versions.list

appengine.versions.update

artifactregistry.projectsettings.get

recommender.appengineVersionCostInsights.*

  • recommender.appengineVersionCostInsights.get
  • recommender.appengineVersionCostInsights.list
  • recommender.appengineVersionCostInsights.update

recommender.appengineVersionCostRecommendations.*

  • recommender.appengineVersionCostRecommendations.get
  • recommender.appengineVersionCostRecommendations.list
  • recommender.appengineVersionCostRecommendations.update

recommender.locations.*

  • recommender.locations.get
  • recommender.locations.list

resourcemanager.projects.get

resourcemanager.projects.list

Service agent roles

Service agent roles should only be granted to service agents.

Role Permissions

App Engine Standard Environment Service Agent

(roles/appengine.serviceAgent)

Give App Engine Standard Envirnoment service account access to managed resources. Includes access to service accounts.

appengine.versions.delete

appengine.versions.get

appengine.versions.list

appengine.versions.update

artifactregistry.aptartifacts.create

artifactregistry.dockerimages.*

  • artifactregistry.dockerimages.get
  • artifactregistry.dockerimages.list

artifactregistry.files.download

artifactregistry.files.get

artifactregistry.files.list

artifactregistry.kfpartifacts.create

artifactregistry.locations.*

  • artifactregistry.locations.get
  • artifactregistry.locations.list

artifactregistry.mavenartifacts.*

  • artifactregistry.mavenartifacts.get
  • artifactregistry.mavenartifacts.list

artifactregistry.npmpackages.*

  • artifactregistry.npmpackages.get
  • artifactregistry.npmpackages.list

artifactregistry.packages.get

artifactregistry.packages.list

artifactregistry.projectsettings.get

artifactregistry.pythonpackages.*

  • artifactregistry.pythonpackages.get
  • artifactregistry.pythonpackages.list

artifactregistry.repositories.create

artifactregistry.repositories.downloadArtifacts

artifactregistry.repositories.get

artifactregistry.repositories.list

artifactregistry.repositories.listEffectiveTags

artifactregistry.repositories.listTagBindings

artifactregistry.repositories.readViaVirtualRepository

artifactregistry.repositories.uploadArtifacts

artifactregistry.tags.create

artifactregistry.tags.get

artifactregistry.tags.list

artifactregistry.tags.update

artifactregistry.versions.get

artifactregistry.versions.list

artifactregistry.yumartifacts.create

compute.addresses.create

compute.addresses.createInternal

compute.addresses.delete

compute.addresses.deleteInternal

compute.addresses.get

compute.addresses.list

compute.globalOperations.get

compute.networks.get

compute.regionOperations.get

compute.subnetworks.get

compute.subnetworks.use

compute.zoneOperations.get

datastore.databases.get

datastore.entities.create

datastore.entities.delete

datastore.entities.get

datastore.entities.list

datastore.entities.update

datastore.namespaces.*

  • datastore.namespaces.get
  • datastore.namespaces.list

datastore.schemas.list

datastore.statistics.*

  • datastore.statistics.get
  • datastore.statistics.list

iam.serviceAccounts.getAccessToken

iam.serviceAccounts.getOpenIdToken

iam.serviceAccounts.signBlob

serviceusage.consumerpolicy.*

  • serviceusage.consumerpolicy.analyze
  • serviceusage.consumerpolicy.get
  • serviceusage.consumerpolicy.update

serviceusage.effectivepolicy.get

serviceusage.groups.*

  • serviceusage.groups.list
  • serviceusage.groups.listExpandedMembers
  • serviceusage.groups.listMembers

serviceusage.services.enable

serviceusage.services.get

serviceusage.values.test

storage.buckets.create

storage.buckets.get

App Engine permissions

Permission Included in roles

appengine.applications.create

Owner (roles/owner)

Appengine Admin (roles/appengine.admin)

App Engine Creator (roles/appengine.appCreator)

Service agent roles

appengine.applications.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Appengine Admin (roles/appengine.admin)

App Engine Admin (roles/appengine.appAdmin)

Appengine Editor (roles/appengine.editor)

Appengine Viewer (roles/appengine.viewer)

Cloud Scheduler Admin (roles/cloudscheduler.admin)

Cloud Scheduler Viewer (roles/cloudscheduler.viewer)

Web Security Scanner Admin (roles/cloudsecurityscanner.admin)

Web Security Scanner Editor (roles/cloudsecurityscanner.editor)

Cloud Datastore Admin (roles/datastore.admin)

Cloud Datastore Editor (roles/datastore.editor)

Cloud Datastore Owner (roles/datastore.owner)

Cloud Datastore User (roles/datastore.user)

Cloud Datastore Viewer (roles/datastore.viewer)

Firebase Admin (roles/firebase.admin)

Security Center Admin (roles/securitycenter.admin)

App Engine Viewer (roles/appengine.appViewer)

App Engine Code Viewer (roles/appengine.codeViewer)

App Engine Managed VM Debug Access (roles/appengine.debugger)

App Engine Deployer (roles/appengine.deployer)

App Engine Memcache Data Admin (roles/appengine.memcacheDataAdmin)

App Engine Service Admin (roles/appengine.serviceAdmin)

Cloud Scheduler Job Runner (roles/cloudscheduler.jobRunner)

Cloud Datastore Import Export Admin (roles/datastore.importExportAdmin)

Cloud Datastore Index Admin (roles/datastore.indexAdmin)

Firebase Develop Admin (roles/firebase.developAdmin)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Security Center Admin Editor (roles/securitycenter.adminEditor)

Service agent roles

appengine.applications.listRuntimes

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Appengine Admin (roles/appengine.admin)

App Engine Admin (roles/appengine.appAdmin)

Appengine Editor (roles/appengine.editor)

Appengine Viewer (roles/appengine.viewer)

App Engine Viewer (roles/appengine.appViewer)

App Engine Code Viewer (roles/appengine.codeViewer)

App Engine Managed VM Debug Access (roles/appengine.debugger)

App Engine Deployer (roles/appengine.deployer)

App Engine Service Admin (roles/appengine.serviceAdmin)

Support User (roles/iam.supportUser)

Service agent roles

appengine.applications.update

Owner (roles/owner)

Editor (roles/editor)

Appengine Admin (roles/appengine.admin)

App Engine Admin (roles/appengine.appAdmin)

Appengine Editor (roles/appengine.editor)

Service agent roles

appengine.instances.delete

Owner (roles/owner)

Editor (roles/editor)

Appengine Admin (roles/appengine.admin)

App Engine Admin (roles/appengine.appAdmin)

Appengine Editor (roles/appengine.editor)

App Engine Managed VM Debug Access (roles/appengine.debugger)

App Engine Service Admin (roles/appengine.serviceAdmin)

Service agent roles

appengine.instances.enableDebug

Owner (roles/owner)

Editor (roles/editor)

Appengine Admin (roles/appengine.admin)

App Engine Admin (roles/appengine.appAdmin)

Appengine Editor (roles/appengine.editor)

App Engine Managed VM Debug Access (roles/appengine.debugger)

Service agent roles

appengine.instances.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Appengine Admin (roles/appengine.admin)

App Engine Admin (roles/appengine.appAdmin)

Appengine Editor (roles/appengine.editor)

Appengine Viewer (roles/appengine.viewer)

App Engine Viewer (roles/appengine.appViewer)

App Engine Code Viewer (roles/appengine.codeViewer)

App Engine Managed VM Debug Access (roles/appengine.debugger)

App Engine Deployer (roles/appengine.deployer)

App Engine Service Admin (roles/appengine.serviceAdmin)

Support User (roles/iam.supportUser)

Service agent roles

appengine.instances.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Appengine Admin (roles/appengine.admin)

App Engine Admin (roles/appengine.appAdmin)

Appengine Editor (roles/appengine.editor)

Appengine Viewer (roles/appengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

App Engine Viewer (roles/appengine.appViewer)

App Engine Code Viewer (roles/appengine.codeViewer)

App Engine Managed VM Debug Access (roles/appengine.debugger)

App Engine Deployer (roles/appengine.deployer)

App Engine Service Admin (roles/appengine.serviceAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Service agent roles

appengine.memcache.addKey

Owner (roles/owner)

Editor (roles/editor)

Appengine Admin (roles/appengine.admin)

App Engine Admin (roles/appengine.appAdmin)

Appengine Editor (roles/appengine.editor)

App Engine Memcache Data Admin (roles/appengine.memcacheDataAdmin)

Service agent roles

appengine.memcache.flush

Owner (roles/owner)

Editor (roles/editor)

Appengine Admin (roles/appengine.admin)

App Engine Admin (roles/appengine.appAdmin)

Appengine Editor (roles/appengine.editor)

App Engine Memcache Data Admin (roles/appengine.memcacheDataAdmin)

Service agent roles

appengine.memcache.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Appengine Admin (roles/appengine.admin)

App Engine Admin (roles/appengine.appAdmin)

Appengine Editor (roles/appengine.editor)

Appengine Viewer (roles/appengine.viewer)

App Engine Memcache Data Admin (roles/appengine.memcacheDataAdmin)

Support User (roles/iam.supportUser)

Service agent roles

appengine.memcache.getKey

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Appengine Admin (roles/appengine.admin)

Appengine Editor (roles/appengine.editor)

Appengine Viewer (roles/appengine.viewer)

Support User (roles/iam.supportUser)

appengine.memcache.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Appengine Admin (roles/appengine.admin)

Appengine Editor (roles/appengine.editor)

Appengine Viewer (roles/appengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

appengine.memcache.update

Owner (roles/owner)

Editor (roles/editor)

Appengine Admin (roles/appengine.admin)

App Engine Admin (roles/appengine.appAdmin)

Appengine Editor (roles/appengine.editor)

App Engine Memcache Data Admin (roles/appengine.memcacheDataAdmin)

Service agent roles

appengine.operations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Appengine Admin (roles/appengine.admin)

App Engine Admin (roles/appengine.appAdmin)

Appengine Editor (roles/appengine.editor)

Appengine Viewer (roles/appengine.viewer)

App Engine Viewer (roles/appengine.appViewer)

App Engine Code Viewer (roles/appengine.codeViewer)

App Engine Managed VM Debug Access (roles/appengine.debugger)

App Engine Deployer (roles/appengine.deployer)

App Engine Service Admin (roles/appengine.serviceAdmin)

Support User (roles/iam.supportUser)

Service agent roles

appengine.operations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Appengine Admin (roles/appengine.admin)

App Engine Admin (roles/appengine.appAdmin)

Appengine Editor (roles/appengine.editor)

Appengine Viewer (roles/appengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

App Engine Viewer (roles/appengine.appViewer)

App Engine Code Viewer (roles/appengine.codeViewer)

App Engine Managed VM Debug Access (roles/appengine.debugger)

App Engine Deployer (roles/appengine.deployer)

App Engine Service Admin (roles/appengine.serviceAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Service agent roles

appengine.runtimes.actAsAdmin

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Appengine Admin (roles/appengine.admin)

App Engine Admin (roles/appengine.appAdmin)

Appengine Editor (roles/appengine.editor)

Appengine Viewer (roles/appengine.viewer)

Support User (roles/iam.supportUser)

Service agent roles

appengine.services.delete

Owner (roles/owner)

Editor (roles/editor)

Appengine Admin (roles/appengine.admin)

App Engine Admin (roles/appengine.appAdmin)

Appengine Editor (roles/appengine.editor)

App Engine Service Admin (roles/appengine.serviceAdmin)

Service agent roles

appengine.services.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Appengine Admin (roles/appengine.admin)

App Engine Admin (roles/appengine.appAdmin)

Appengine Editor (roles/appengine.editor)

Appengine Viewer (roles/appengine.viewer)

App Engine Viewer (roles/appengine.appViewer)

App Engine Code Viewer (roles/appengine.codeViewer)

App Engine Managed VM Debug Access (roles/appengine.debugger)

App Engine Deployer (roles/appengine.deployer)

App Engine Service Admin (roles/appengine.serviceAdmin)

Support User (roles/iam.supportUser)

Service agent roles

appengine.services.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Appengine Admin (roles/appengine.admin)

App Engine Admin (roles/appengine.appAdmin)

Appengine Editor (roles/appengine.editor)

Appengine Viewer (roles/appengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

App Engine Viewer (roles/appengine.appViewer)

App Engine Code Viewer (roles/appengine.codeViewer)

App Engine Managed VM Debug Access (roles/appengine.debugger)

App Engine Deployer (roles/appengine.deployer)

App Engine Service Admin (roles/appengine.serviceAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Service agent roles

appengine.services.update

Owner (roles/owner)

Editor (roles/editor)

Appengine Admin (roles/appengine.admin)

App Engine Admin (roles/appengine.appAdmin)

Appengine Editor (roles/appengine.editor)

App Engine Service Admin (roles/appengine.serviceAdmin)

Service agent roles

appengine.versions.create

Owner (roles/owner)

Editor (roles/editor)

Appengine Admin (roles/appengine.admin)

App Engine Admin (roles/appengine.appAdmin)

Appengine Editor (roles/appengine.editor)

App Engine Deployer (roles/appengine.deployer)

Service agent roles

appengine.versions.delete

Owner (roles/owner)

Editor (roles/editor)

Appengine Admin (roles/appengine.admin)

App Engine Admin (roles/appengine.appAdmin)

Appengine Editor (roles/appengine.editor)

App Engine Deployer (roles/appengine.deployer)

App Engine Service Admin (roles/appengine.serviceAdmin)

Service agent roles

appengine.versions.exportAppImage

Owner (roles/owner)

Editor (roles/editor)

Appengine Admin (roles/appengine.admin)

App Engine Admin (roles/appengine.appAdmin)

Appengine Editor (roles/appengine.editor)

App Engine Deployer (roles/appengine.deployer)

Service agent roles

appengine.versions.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Appengine Admin (roles/appengine.admin)

App Engine Admin (roles/appengine.appAdmin)

Appengine Editor (roles/appengine.editor)

Appengine Viewer (roles/appengine.viewer)

App Engine Viewer (roles/appengine.appViewer)

App Engine Code Viewer (roles/appengine.codeViewer)

App Engine Managed VM Debug Access (roles/appengine.debugger)

App Engine Deployer (roles/appengine.deployer)

App Engine Service Admin (roles/appengine.serviceAdmin)

Support User (roles/iam.supportUser)

Service agent roles

appengine.versions.getFileContents

Owner (roles/owner)

Appengine Admin (roles/appengine.admin)

App Engine Code Viewer (roles/appengine.codeViewer)

appengine.versions.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Appengine Admin (roles/appengine.admin)

App Engine Admin (roles/appengine.appAdmin)

Appengine Editor (roles/appengine.editor)

Appengine Viewer (roles/appengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

App Engine Viewer (roles/appengine.appViewer)

App Engine Code Viewer (roles/appengine.codeViewer)

App Engine Managed VM Debug Access (roles/appengine.debugger)

App Engine Deployer (roles/appengine.deployer)

App Engine Service Admin (roles/appengine.serviceAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Service agent roles

appengine.versions.update

Owner (roles/owner)

Editor (roles/editor)

Appengine Admin (roles/appengine.admin)

App Engine Admin (roles/appengine.appAdmin)

Appengine Editor (roles/appengine.editor)

App Engine Service Admin (roles/appengine.serviceAdmin)

Service agent roles

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026年08月28日 UTC.