Parameter Manager roles and permissions

This page lists the IAM roles and permissions for Parameter Manager. To search through all roles and permissions, see the role and permission index.

Parameter Manager roles

Role Permissions

Role	Permissions
Parameter Manager Admin (`roles/parametermanager.admin`) Grants full access to all Parameter Manager resources. Intended for project admins & owners who need to perform all administrative tasks.	`parametermanager.*` `parametermanager.locations.get` `parametermanager.locations.list` `parametermanager.parameterVersions.create` `parametermanager.parameterVersions.delete` `parametermanager.parameterVersions.get` `parametermanager.parameterVersions.list` `parametermanager.parameterVersions.render` `parametermanager.parameterVersions.update` `parametermanager.parameters.create` `parametermanager.parameters.delete` `parametermanager.parameters.get` `parametermanager.parameters.list` `parametermanager.parameters.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Parameter Manager Parameter Accessor (`roles/parametermanager.parameterAccessor`) Grants read access to ParameterManager ParameterVersion resources. Intended for users & applications that need to perform read operations on ParameterVersions only.	`parametermanager.locations.*` `parametermanager.locations.get` `parametermanager.locations.list` `parametermanager.parameterVersions.render` `resourcemanager.projects.get` `resourcemanager.projects.list`
Parameter Manager Parameter Version Adder (`roles/parametermanager.parameterVersionAdder`) Grants create access to Parameter Manager ParameterVersion resources. Intended for users & applications that need to perform create operations on ParameterVersions only.	`parametermanager.locations.*` `parametermanager.locations.get` `parametermanager.locations.list` `parametermanager.parameterVersions.create` `parametermanager.parameters.get` `parametermanager.parameters.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Parameter Manager Parameter Version Manager (`roles/parametermanager.parameterVersionManager`) Grants read & write access to all Parameter Manager ParameterVersion resources. Intended for users & applications that need to view Parameters and perform create/read/update/delete/list operations on ParameterVersions only.	`parametermanager.locations.*` `parametermanager.locations.get` `parametermanager.locations.list` `parametermanager.parameterVersions.create` `parametermanager.parameterVersions.delete` `parametermanager.parameterVersions.get` `parametermanager.parameterVersions.list` `parametermanager.parameterVersions.update` `parametermanager.parameters.get` `parametermanager.parameters.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Parameter Manager Parameter Viewer (`roles/parametermanager.parameterViewer`) Grants read access to Parameter Manager Parameter & ParameterVersion resources. Intended for users & applications that need to perform read/list operations on Parameters and ParameterVersions only.	`parametermanager.locations.*` `parametermanager.locations.get` `parametermanager.locations.list` `parametermanager.parameterVersions.get` `parametermanager.parameterVersions.list` `parametermanager.parameters.get` `parametermanager.parameters.list` `resourcemanager.projects.get` `resourcemanager.projects.list`

Parameter Manager Admin

(roles/parametermanager.admin)

Grants full access to all Parameter Manager resources. Intended for project admins & owners who need to perform all administrative tasks.

parametermanager.*

parametermanager.locations.get
parametermanager.locations.list
parametermanager.parameterVersions.create
parametermanager.parameterVersions.delete
parametermanager.parameterVersions.get
parametermanager.parameterVersions.list
parametermanager.parameterVersions.render
parametermanager.parameterVersions.update
parametermanager.parameters.create
parametermanager.parameters.delete
parametermanager.parameters.get
parametermanager.parameters.list
parametermanager.parameters.update

resourcemanager.projects.get

resourcemanager.projects.list

Parameter Manager Parameter Accessor

(roles/parametermanager.parameterAccessor)

Grants read access to ParameterManager ParameterVersion resources. Intended for users & applications that need to perform read operations on ParameterVersions only.

parametermanager.locations.*

parametermanager.locations.get
parametermanager.locations.list

parametermanager.parameterVersions.render

resourcemanager.projects.get

resourcemanager.projects.list

Parameter Manager Parameter Version Adder

(roles/parametermanager.parameterVersionAdder)

Grants create access to Parameter Manager ParameterVersion resources. Intended for users & applications that need to perform create operations on ParameterVersions only.

parametermanager.locations.*

parametermanager.locations.get
parametermanager.locations.list

parametermanager.parameterVersions.create

parametermanager.parameters.get

parametermanager.parameters.list

resourcemanager.projects.get

resourcemanager.projects.list

Parameter Manager Parameter Version Manager

(roles/parametermanager.parameterVersionManager)

Grants read & write access to all Parameter Manager ParameterVersion resources. Intended for users & applications that need to view Parameters and perform create/read/update/delete/list operations on ParameterVersions only.

parametermanager.locations.*

parametermanager.locations.get
parametermanager.locations.list

parametermanager.parameterVersions.create

parametermanager.parameterVersions.delete

parametermanager.parameterVersions.get

parametermanager.parameterVersions.list

parametermanager.parameterVersions.update

parametermanager.parameters.get

parametermanager.parameters.list

resourcemanager.projects.get

resourcemanager.projects.list

Parameter Manager Parameter Viewer

(roles/parametermanager.parameterViewer)

Grants read access to Parameter Manager Parameter & ParameterVersion resources. Intended for users & applications that need to perform read/list operations on Parameters and ParameterVersions only.

parametermanager.locations.*

parametermanager.locations.get
parametermanager.locations.list

parametermanager.parameterVersions.get

parametermanager.parameterVersions.list

parametermanager.parameters.get

parametermanager.parameters.list

resourcemanager.projects.get

resourcemanager.projects.list

Parameter Manager permissions

Permission	Included in roles
`parametermanager.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Parameter Manager Admin (`roles/parametermanager.admin`) Parameter Manager Parameter Accessor (`roles/parametermanager.parameterAccessor`) Parameter Manager Parameter Version Adder (`roles/parametermanager.parameterVersionAdder`) Parameter Manager Parameter Version Manager (`roles/parametermanager.parameterVersionManager`) Parameter Manager Parameter Viewer (`roles/parametermanager.parameterViewer`)
`parametermanager.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Parameter Manager Admin (`roles/parametermanager.admin`) Parameter Manager Parameter Accessor (`roles/parametermanager.parameterAccessor`) Parameter Manager Parameter Version Adder (`roles/parametermanager.parameterVersionAdder`) Parameter Manager Parameter Version Manager (`roles/parametermanager.parameterVersionManager`) Parameter Manager Parameter Viewer (`roles/parametermanager.parameterViewer`)
`parametermanager.parameterVersions.create`	Owner (`roles/owner`) Editor (`roles/editor`) Parameter Manager Admin (`roles/parametermanager.admin`) Parameter Manager Parameter Version Adder (`roles/parametermanager.parameterVersionAdder`) Parameter Manager Parameter Version Manager (`roles/parametermanager.parameterVersionManager`)
`parametermanager.parameterVersions.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Parameter Manager Admin (`roles/parametermanager.admin`) Parameter Manager Parameter Version Manager (`roles/parametermanager.parameterVersionManager`)
`parametermanager.parameterVersions.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Parameter Manager Admin (`roles/parametermanager.admin`) Parameter Manager Parameter Version Manager (`roles/parametermanager.parameterVersionManager`) Parameter Manager Parameter Viewer (`roles/parametermanager.parameterViewer`)
`parametermanager.parameterVersions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Parameter Manager Admin (`roles/parametermanager.admin`) Parameter Manager Parameter Version Manager (`roles/parametermanager.parameterVersionManager`) Parameter Manager Parameter Viewer (`roles/parametermanager.parameterViewer`)
`parametermanager.parameterVersions.render`	Owner (`roles/owner`) Parameter Manager Admin (`roles/parametermanager.admin`) Parameter Manager Parameter Accessor (`roles/parametermanager.parameterAccessor`)
`parametermanager.parameterVersions.update`	Owner (`roles/owner`) Editor (`roles/editor`) Parameter Manager Admin (`roles/parametermanager.admin`) Parameter Manager Parameter Version Manager (`roles/parametermanager.parameterVersionManager`)
`parametermanager.parameters.create`	Owner (`roles/owner`) Editor (`roles/editor`) Parameter Manager Admin (`roles/parametermanager.admin`)
`parametermanager.parameters.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Parameter Manager Admin (`roles/parametermanager.admin`)
`parametermanager.parameters.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Parameter Manager Admin (`roles/parametermanager.admin`) Parameter Manager Parameter Version Adder (`roles/parametermanager.parameterVersionAdder`) Parameter Manager Parameter Version Manager (`roles/parametermanager.parameterVersionManager`) Parameter Manager Parameter Viewer (`roles/parametermanager.parameterViewer`)
`parametermanager.parameters.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Parameter Manager Admin (`roles/parametermanager.admin`) Parameter Manager Parameter Version Adder (`roles/parametermanager.parameterVersionAdder`) Parameter Manager Parameter Version Manager (`roles/parametermanager.parameterVersionManager`) Parameter Manager Parameter Viewer (`roles/parametermanager.parameterViewer`)
`parametermanager.parameters.update`	Owner (`roles/owner`) Editor (`roles/editor`) Parameter Manager Admin (`roles/parametermanager.admin`)

Parameter Manager roles and permissions