Google Cloud Managed Lustre roles and permissions

This page lists the IAM roles and permissions for Google Cloud Managed Lustre. To search through all roles and permissions, see the role and permission index.

Google Cloud Managed Lustre roles

Role Permissions

Role	Permissions
Google Cloud Managed Lustre Admin (`roles/lustre.admin`) Full access to Google Cloud Managed Lustre resources.	`lustre.*` `lustre.instances.create` `lustre.instances.delete` `lustre.instances.exportData` `lustre.instances.get` `lustre.instances.importData` `lustre.instances.list` `lustre.instances.rescheduleMaintenance` `lustre.instances.update` `lustre.locations.get` `lustre.locations.list` `lustre.operations.cancel` `lustre.operations.delete` `lustre.operations.get` `lustre.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Google Cloud Managed Lustre Viewer (`roles/lustre.viewer`) Readonly access to Google Cloud Managed Lustre resources.	`lustre.instances.get` `lustre.instances.list` `lustre.locations.*` `lustre.locations.get` `lustre.locations.list` `lustre.operations.get` `lustre.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`

Google Cloud Managed Lustre Admin

(roles/lustre.admin)

Full access to Google Cloud Managed Lustre resources.

lustre.*

lustre.instances.create
lustre.instances.delete
lustre.instances.exportData
lustre.instances.get
lustre.instances.importData
lustre.instances.list
lustre.instances.rescheduleMaintenance
lustre.instances.update
lustre.locations.get
lustre.locations.list
lustre.operations.cancel
lustre.operations.delete
lustre.operations.get
lustre.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Google Cloud Managed Lustre Viewer

(roles/lustre.viewer)

Readonly access to Google Cloud Managed Lustre resources.

lustre.instances.get

lustre.instances.list

lustre.locations.*

lustre.locations.get
lustre.locations.list

lustre.operations.get

lustre.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Google Cloud Managed Lustre permissions

Permission	Included in roles
`lustre.instances.create`	Owner (`roles/owner`) Editor (`roles/editor`) Google Cloud Managed Lustre Admin (`roles/lustre.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cluster Director Service Agent (`roles/hypercomputecluster.serviceAgent`)
`lustre.instances.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Google Cloud Managed Lustre Admin (`roles/lustre.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cluster Director Service Agent (`roles/hypercomputecluster.serviceAgent`)
`lustre.instances.exportData`	Owner (`roles/owner`) Editor (`roles/editor`) Google Cloud Managed Lustre Admin (`roles/lustre.admin`)
`lustre.instances.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Google Cloud Managed Lustre Admin (`roles/lustre.admin`) Google Cloud Managed Lustre Viewer (`roles/lustre.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cluster Director Service Agent (`roles/hypercomputecluster.serviceAgent`)
`lustre.instances.importData`	Owner (`roles/owner`) Editor (`roles/editor`) Google Cloud Managed Lustre Admin (`roles/lustre.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`lustre.instances.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Google Cloud Managed Lustre Admin (`roles/lustre.admin`) Google Cloud Managed Lustre Viewer (`roles/lustre.viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cluster Director Service Agent (`roles/hypercomputecluster.serviceAgent`)
`lustre.instances.rescheduleMaintenance`	Owner (`roles/owner`) Editor (`roles/editor`) Google Cloud Managed Lustre Admin (`roles/lustre.admin`)
`lustre.instances.update`	Owner (`roles/owner`) Editor (`roles/editor`) Google Cloud Managed Lustre Admin (`roles/lustre.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cluster Director Service Agent (`roles/hypercomputecluster.serviceAgent`)
`lustre.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Google Cloud Managed Lustre Admin (`roles/lustre.admin`) Google Cloud Managed Lustre Viewer (`roles/lustre.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cluster Director Service Agent (`roles/hypercomputecluster.serviceAgent`)
`lustre.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Google Cloud Managed Lustre Admin (`roles/lustre.admin`) Google Cloud Managed Lustre Viewer (`roles/lustre.viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cluster Director Service Agent (`roles/hypercomputecluster.serviceAgent`)
`lustre.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Google Cloud Managed Lustre Admin (`roles/lustre.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`lustre.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Google Cloud Managed Lustre Admin (`roles/lustre.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`lustre.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Google Cloud Managed Lustre Admin (`roles/lustre.admin`) Google Cloud Managed Lustre Viewer (`roles/lustre.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cluster Director Service Agent (`roles/hypercomputecluster.serviceAgent`)
`lustre.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Google Cloud Managed Lustre Admin (`roles/lustre.admin`) Google Cloud Managed Lustre Viewer (`roles/lustre.viewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cluster Director Service Agent (`roles/hypercomputecluster.serviceAgent`)

Google Cloud Managed Lustre roles and permissions