Cloud DNS roles and permissions
Stay organized with collections
Save and categorize content based on your preferences.
This page lists the IAM roles and permissions for Cloud DNS. To search through all roles and permissions, see the role and permission index.
Cloud DNS roles
| Role | Permissions |
|---|---|
DNS Administrator( Provides read-write access to all Cloud DNS resources. Lowest-level resources where you can grant this role:
|
|
DNS Editor( Editor role for DNS resources. |
|
DNS Viewer( Viewer role for DNS resources. |
|
DNS Peer( Access to target networks with DNS peering zones |
|
DNS Reader( Provides read-only access to all Cloud DNS resources. Lowest-level resources where you can grant this role:
|
|
Service agent roles
Service agent roles should only be granted to service agents.
| Role | Permissions |
|---|---|
Cloud DNS Service Agent( Gives Cloud DNS Service Agent access to Cloud Platform resources. |
|
Cloud DNS permissions
| Permission | Included in roles |
|---|---|
|
Owner (
Editor (
DNS Administrator (
DNS Editor (
Network Administrator ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DNS Administrator (
DNS Editor (
DNS Viewer (
DNS Reader (
Network Administrator (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DNS Administrator (
DNS Editor (
DNS Viewer (
Security Admin (
Security Reviewer (
DNS Reader (
Network Administrator (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DNS Administrator (
DNS Editor (
DNS Viewer (
DNS Reader (
Network Administrator (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DNS Administrator (
DNS Editor (
DNS Viewer (
Security Admin (
Security Reviewer (
DNS Reader (
Network Administrator (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
DNS Administrator (
DNS Editor (
Network Administrator ( Service agent roles
|
|
Owner (
Editor (
DNS Administrator (
DNS Editor (
Network Administrator ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DNS Administrator (
DNS Editor (
DNS Viewer (
DNS Reader (
Network Administrator (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DNS Administrator (
DNS Editor (
DNS Viewer (
Security Admin (
Security Reviewer (
DNS Reader (
Network Administrator (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
DNS Administrator (
DNS Editor (
Network Administrator ( Service agent roles
|
|
Owner (
Editor (
DNS Administrator (
DNS Editor (
Network Administrator ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DNS Administrator (
DNS Editor (
DNS Viewer (
Composer Shared VPC Agent (
DNS Reader (
Network Administrator (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DNS Administrator (
DNS Editor (
DNS Viewer (
Security Admin (
Security Reviewer (
Network Administrator (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DNS Administrator (
DNS Editor (
DNS Viewer (
Security Admin (
Security Reviewer (
Workload Manager Admin (
Composer Shared VPC Agent (
DNS Reader (
Network Administrator (
Security Auditor (
Support User (
Workload Manager Deployment Admin ( Service agent roles
|
|
Owner (
Security Admin ( |
|
Owner (
Editor (
DNS Administrator (
DNS Editor (
Network Administrator ( Service agent roles
|
|
Owner (
Editor (
DNS Administrator (
DNS Editor (
Kubernetes Engine Host Service Agent User (
Network Administrator ( Service agent roles
|
|
Owner (
Editor (
DNS Administrator (
DNS Editor (
Kubernetes Engine Host Service Agent User (
Network Administrator ( Service agent roles
|
|
Owner (
Editor (
DNS Administrator (
DNS Editor (
Kubernetes Engine Host Service Agent User (
Network Administrator ( Service agent roles
|
|
Owner (
Editor (
DNS Administrator (
DNS Editor (
Composer Shared VPC Agent (
DNS Peer (
Network Administrator ( Service agent roles
|
|
Owner (
Editor (
DNS Administrator (
DNS Editor (
Network Administrator ( Service agent roles
|
|
Owner (
Editor (
DNS Administrator (
DNS Editor (
Network Administrator ( Service agent roles
|
|
Owner (
DNS Administrator (
Tag User (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
Network Administrator ( Service agent roles
|
|
Owner (
Editor (
DNS Administrator (
DNS Editor (
Network Administrator ( Service agent roles
|
|
Owner (
DNS Administrator (
Tag User (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
Network Administrator ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DNS Administrator (
DNS Editor (
DNS Viewer (
DNS Reader (
Network Administrator (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DNS Administrator (
DNS Editor (
DNS Viewer (
Security Admin (
Security Reviewer (
DNS Reader (
Network Administrator (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DNS Administrator (
DNS Editor (
DNS Viewer (
Tag User (
Tag Viewer (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DNS Reader (
Network Administrator (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DNS Administrator (
DNS Editor (
DNS Viewer (
Tag User (
Tag Viewer (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DNS Reader (
Network Administrator (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
DNS Administrator (
DNS Editor (
Network Administrator ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DNS Administrator (
DNS Editor (
DNS Viewer (
DNS Reader (
Network Administrator (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
DNS Administrator (
DNS Editor (
Network Administrator ( Service agent roles
|
|
Owner (
Editor (
DNS Administrator (
DNS Editor (
Network Administrator ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DNS Administrator (
DNS Editor (
DNS Viewer (
DNS Reader (
Network Administrator (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DNS Administrator (
DNS Editor (
DNS Viewer (
Security Admin (
Security Reviewer (
DNS Reader (
Network Administrator (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
DNS Administrator (
DNS Editor (
Network Administrator ( Service agent roles
|
|
Owner (
Editor (
DNS Administrator (
DNS Editor (
Kubernetes Engine Host Service Agent User (
Network Administrator ( Service agent roles
|
|
Owner (
Editor (
DNS Administrator (
DNS Editor (
Kubernetes Engine Host Service Agent User (
Network Administrator ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DNS Administrator (
DNS Editor (
DNS Viewer (
Kubernetes Engine Host Service Agent User (
DNS Reader (
Network Administrator (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DNS Administrator (
DNS Editor (
DNS Viewer (
Security Admin (
Security Reviewer (
Kubernetes Engine Host Service Agent User (
DNS Reader (
Network Administrator (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
DNS Administrator (
DNS Editor (
Kubernetes Engine Host Service Agent User (
Network Administrator ( Service agent roles
|
|
Owner (
Editor (
DNS Administrator (
DNS Editor (
Kubernetes Engine Host Service Agent User (
Network Administrator ( Service agent roles
|
|
Owner (
Editor (
DNS Administrator (
DNS Editor (
Kubernetes Engine Host Service Agent User (
Network Administrator ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DNS Administrator (
DNS Editor (
DNS Viewer (
Kubernetes Engine Host Service Agent User (
DNS Reader (
Network Administrator (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DNS Administrator (
DNS Editor (
DNS Viewer (
Security Admin (
Security Reviewer (
Kubernetes Engine Host Service Agent User (
DNS Reader (
Network Administrator (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
DNS Administrator (
DNS Editor (
Kubernetes Engine Host Service Agent User (
Network Administrator ( Service agent roles
|