Remote Build Execution roles and permissions

This page lists the IAM roles and permissions for Remote Build Execution. To search through all roles and permissions, see the role and permission index.

Remote Build Execution roles

Role Permissions

Role	Permissions
Remote Build Execution Action Cache Writer ^Beta (`roles/remotebuildexecution.actionCacheWriter`) Remote Build Execution Action Cache Writer	`remotebuildexecution.actions.set` `remotebuildexecution.blobs.create`
Remote Build Execution Artifact Admin ^Beta (`roles/remotebuildexecution.artifactAdmin`) Remote Build Execution Artifact Admin	`remotebuildexecution.actions.create` `remotebuildexecution.actions.delete` `remotebuildexecution.actions.get` `remotebuildexecution.blobs.` `remotebuildexecution.blobs.create` `remotebuildexecution.blobs.get` `remotebuildexecution.logstreams.` `remotebuildexecution.logstreams.create` `remotebuildexecution.logstreams.get` `remotebuildexecution.logstreams.update`
Remote Build Execution Artifact Creator ^Beta (`roles/remotebuildexecution.artifactCreator`) Remote Build Execution Artifact Creator	`remotebuildexecution.actions.create` `remotebuildexecution.actions.get` `remotebuildexecution.blobs.` `remotebuildexecution.blobs.create` `remotebuildexecution.blobs.get` `remotebuildexecution.logstreams.` `remotebuildexecution.logstreams.create` `remotebuildexecution.logstreams.get` `remotebuildexecution.logstreams.update`
Remote Build Execution Artifact Viewer ^Beta (`roles/remotebuildexecution.artifactViewer`) Remote Build Execution Artifact Viewer	`remotebuildexecution.actions.get` `remotebuildexecution.blobs.get` `remotebuildexecution.logstreams.get`
Remote Build Execution Configuration Admin ^Beta (`roles/remotebuildexecution.configurationAdmin`) Remote Build Execution Configuration Admin	`remotebuildexecution.instances.` `remotebuildexecution.instances.create` `remotebuildexecution.instances.delete` `remotebuildexecution.instances.get` `remotebuildexecution.instances.list` `remotebuildexecution.instances.update` `remotebuildexecution.workerpools.` `remotebuildexecution.workerpools.create` `remotebuildexecution.workerpools.delete` `remotebuildexecution.workerpools.get` `remotebuildexecution.workerpools.list` `remotebuildexecution.workerpools.update`
Remote Build Execution Configuration Viewer ^Beta (`roles/remotebuildexecution.configurationViewer`) Remote Build Execution Configuration Viewer	`remotebuildexecution.instances.get` `remotebuildexecution.instances.list` `remotebuildexecution.workerpools.get` `remotebuildexecution.workerpools.list`
Remote Build Execution Logstream Writer ^Beta (`roles/remotebuildexecution.logstreamWriter`) Remote Build Execution Logstream Writer	`remotebuildexecution.logstreams.create` `remotebuildexecution.logstreams.update`
Remote Build Execution Reservation Admin ^Beta (`roles/remotebuildexecution.reservationAdmin`) Remote Build Execution Reservation Admin	`remotebuildexecution.actions.create` `remotebuildexecution.actions.delete` `remotebuildexecution.actions.get`
Remote Build Execution Service Agent (`roles/remotebuildexecution.serviceAgent`) Gives Remote Build Execution service account access to managed resources. Warning: Do not grant service agent roles to any principals except service agents.	`remotebuildexecution.actions.update` `remotebuildexecution.blobs.` `remotebuildexecution.blobs.create` `remotebuildexecution.blobs.get` `remotebuildexecution.botsessions.` `remotebuildexecution.botsessions.create` `remotebuildexecution.botsessions.update` `remotebuildexecution.logstreams.create` `remotebuildexecution.logstreams.update`
Remote Build Execution Worker ^Beta (`roles/remotebuildexecution.worker`) Remote Build Execution Worker	`remotebuildexecution.actions.update` `remotebuildexecution.blobs.` `remotebuildexecution.blobs.create` `remotebuildexecution.blobs.get` `remotebuildexecution.botsessions.` `remotebuildexecution.botsessions.create` `remotebuildexecution.botsessions.update` `remotebuildexecution.logstreams.create` `remotebuildexecution.logstreams.update`

Remote Build Execution Action Cache Writer ^Beta

(roles/remotebuildexecution.actionCacheWriter)

Remote Build Execution Action Cache Writer

remotebuildexecution.actions.set

remotebuildexecution.blobs.create

Remote Build Execution Artifact Admin ^Beta

(roles/remotebuildexecution.artifactAdmin)

Remote Build Execution Artifact Admin

remotebuildexecution.actions.create

remotebuildexecution.actions.delete

remotebuildexecution.actions.get

remotebuildexecution.blobs.*

remotebuildexecution.blobs.create
remotebuildexecution.blobs.get

remotebuildexecution.logstreams.*

remotebuildexecution.logstreams.create
remotebuildexecution.logstreams.get
remotebuildexecution.logstreams.update

Remote Build Execution Artifact Creator ^Beta

(roles/remotebuildexecution.artifactCreator)

Remote Build Execution Artifact Creator

remotebuildexecution.actions.create

remotebuildexecution.actions.get

remotebuildexecution.blobs.*

remotebuildexecution.blobs.create
remotebuildexecution.blobs.get

remotebuildexecution.logstreams.*

remotebuildexecution.logstreams.create
remotebuildexecution.logstreams.get
remotebuildexecution.logstreams.update

Remote Build Execution Artifact Viewer ^Beta

(roles/remotebuildexecution.artifactViewer)

Remote Build Execution Artifact Viewer

remotebuildexecution.actions.get

remotebuildexecution.blobs.get

remotebuildexecution.logstreams.get

Remote Build Execution Configuration Admin ^Beta

(roles/remotebuildexecution.configurationAdmin)

Remote Build Execution Configuration Admin

remotebuildexecution.instances.*

remotebuildexecution.instances.create
remotebuildexecution.instances.delete
remotebuildexecution.instances.get
remotebuildexecution.instances.list
remotebuildexecution.instances.update

remotebuildexecution.workerpools.*

remotebuildexecution.workerpools.create
remotebuildexecution.workerpools.delete
remotebuildexecution.workerpools.get
remotebuildexecution.workerpools.list
remotebuildexecution.workerpools.update

Remote Build Execution Configuration Viewer ^Beta

(roles/remotebuildexecution.configurationViewer)

Remote Build Execution Configuration Viewer

remotebuildexecution.instances.get

remotebuildexecution.instances.list

remotebuildexecution.workerpools.get

remotebuildexecution.workerpools.list

Remote Build Execution Logstream Writer ^Beta

(roles/remotebuildexecution.logstreamWriter)

Remote Build Execution Logstream Writer

remotebuildexecution.logstreams.create

remotebuildexecution.logstreams.update

Remote Build Execution Reservation Admin ^Beta

(roles/remotebuildexecution.reservationAdmin)

Remote Build Execution Reservation Admin

remotebuildexecution.actions.create

remotebuildexecution.actions.delete

remotebuildexecution.actions.get

Remote Build Execution Service Agent

(roles/remotebuildexecution.serviceAgent)

Gives Remote Build Execution service account access to managed resources.

remotebuildexecution.actions.update

remotebuildexecution.blobs.*

remotebuildexecution.blobs.create
remotebuildexecution.blobs.get

remotebuildexecution.botsessions.*

remotebuildexecution.botsessions.create
remotebuildexecution.botsessions.update

remotebuildexecution.logstreams.create

remotebuildexecution.logstreams.update

Remote Build Execution Worker ^Beta

(roles/remotebuildexecution.worker)

Remote Build Execution Worker

remotebuildexecution.actions.update

remotebuildexecution.blobs.*

remotebuildexecution.blobs.create
remotebuildexecution.blobs.get

remotebuildexecution.botsessions.*

remotebuildexecution.botsessions.create
remotebuildexecution.botsessions.update

remotebuildexecution.logstreams.create

remotebuildexecution.logstreams.update

Remote Build Execution permissions

Permission	Included in roles
`remotebuildexecution.actions.create`	Owner (`roles/owner`) Editor (`roles/editor`) Remote Build Execution Artifact Admin (`roles/remotebuildexecution.artifactAdmin`) Remote Build Execution Artifact Creator (`roles/remotebuildexecution.artifactCreator`) Remote Build Execution Reservation Admin (`roles/remotebuildexecution.reservationAdmin`)
`remotebuildexecution.actions.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Remote Build Execution Artifact Admin (`roles/remotebuildexecution.artifactAdmin`) Remote Build Execution Reservation Admin (`roles/remotebuildexecution.reservationAdmin`)
`remotebuildexecution.actions.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Remote Build Execution Artifact Admin (`roles/remotebuildexecution.artifactAdmin`) Remote Build Execution Artifact Creator (`roles/remotebuildexecution.artifactCreator`) Remote Build Execution Artifact Viewer (`roles/remotebuildexecution.artifactViewer`) Remote Build Execution Reservation Admin (`roles/remotebuildexecution.reservationAdmin`)
`remotebuildexecution.actions.set`	Remote Build Execution Action Cache Writer (`roles/remotebuildexecution.actionCacheWriter`)
`remotebuildexecution.actions.update`	Owner (`roles/owner`) Editor (`roles/editor`) Remote Build Execution Worker (`roles/remotebuildexecution.worker`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Remote Build Execution Service Agent (`roles/remotebuildexecution.serviceAgent`)
`remotebuildexecution.blobs.create`	Owner (`roles/owner`) Editor (`roles/editor`) Remote Build Execution Action Cache Writer (`roles/remotebuildexecution.actionCacheWriter`) Remote Build Execution Artifact Admin (`roles/remotebuildexecution.artifactAdmin`) Remote Build Execution Artifact Creator (`roles/remotebuildexecution.artifactCreator`) Remote Build Execution Worker (`roles/remotebuildexecution.worker`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Remote Build Execution Service Agent (`roles/remotebuildexecution.serviceAgent`)
`remotebuildexecution.blobs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Build Approver (`roles/cloudbuild.builds.approver`) Cloud Build Service Account (`roles/cloudbuild.builds.builder`) Cloud Build Editor (`roles/cloudbuild.builds.editor`) Cloud Build Viewer (`roles/cloudbuild.builds.viewer`) Cloud Functions Admin (`roles/cloudfunctions.admin`) Cloud Functions Developer (`roles/cloudfunctions.developer`) Cloud Functions Viewer (`roles/cloudfunctions.viewer`) Composer Worker (`roles/composer.worker`) Dataflow Admin (`roles/dataflow.admin`) Dataflow Developer (`roles/dataflow.developer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Data Scientist (`roles/iam.dataScientist`) Dev Ops (`roles/iam.devOps`) Site Reliability Engineer (`roles/iam.siteReliabilityEngineer`) Support User (`roles/iam.supportUser`) Remote Build Execution Artifact Admin (`roles/remotebuildexecution.artifactAdmin`) Remote Build Execution Artifact Creator (`roles/remotebuildexecution.artifactCreator`) Remote Build Execution Artifact Viewer (`roles/remotebuildexecution.artifactViewer`) Remote Build Execution Worker (`roles/remotebuildexecution.worker`) Cloud Run Source Developer (`roles/run.sourceDeveloper`) Cloud Run Source Viewer (`roles/run.sourceViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Functions Service Agent (`roles/cloudfunctions.serviceAgent`) Datapipelines Service Agent (`roles/datapipelines.serviceAgent`) Dataprep Service Agent (`roles/dataprep.serviceAgent`) DesignCenter Service Agent (`roles/designcenter.serviceAgent`) Remote Build Execution Service Agent (`roles/remotebuildexecution.serviceAgent`) Cloud Build Service Agent (`roles/cloudbuild.serviceAgent`)
`remotebuildexecution.botsessions.create`	Owner (`roles/owner`) Editor (`roles/editor`) Remote Build Execution Worker (`roles/remotebuildexecution.worker`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Remote Build Execution Service Agent (`roles/remotebuildexecution.serviceAgent`)
`remotebuildexecution.botsessions.update`	Owner (`roles/owner`) Editor (`roles/editor`) Remote Build Execution Worker (`roles/remotebuildexecution.worker`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Remote Build Execution Service Agent (`roles/remotebuildexecution.serviceAgent`)
`remotebuildexecution.instances.create`	Owner (`roles/owner`) Editor (`roles/editor`) Remote Build Execution Configuration Admin (`roles/remotebuildexecution.configurationAdmin`)
`remotebuildexecution.instances.delete`	Owner (`roles/owner`) Remote Build Execution Configuration Admin (`roles/remotebuildexecution.configurationAdmin`)
`remotebuildexecution.instances.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Remote Build Execution Configuration Admin (`roles/remotebuildexecution.configurationAdmin`) Remote Build Execution Configuration Viewer (`roles/remotebuildexecution.configurationViewer`)
`remotebuildexecution.instances.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Remote Build Execution Configuration Admin (`roles/remotebuildexecution.configurationAdmin`) Remote Build Execution Configuration Viewer (`roles/remotebuildexecution.configurationViewer`)
`remotebuildexecution.instances.update`	Owner (`roles/owner`) Editor (`roles/editor`) Remote Build Execution Configuration Admin (`roles/remotebuildexecution.configurationAdmin`)
`remotebuildexecution.logstreams.create`	Owner (`roles/owner`) Editor (`roles/editor`) Remote Build Execution Artifact Admin (`roles/remotebuildexecution.artifactAdmin`) Remote Build Execution Artifact Creator (`roles/remotebuildexecution.artifactCreator`) Remote Build Execution Logstream Writer (`roles/remotebuildexecution.logstreamWriter`) Remote Build Execution Worker (`roles/remotebuildexecution.worker`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Remote Build Execution Service Agent (`roles/remotebuildexecution.serviceAgent`)
`remotebuildexecution.logstreams.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Remote Build Execution Artifact Admin (`roles/remotebuildexecution.artifactAdmin`) Remote Build Execution Artifact Creator (`roles/remotebuildexecution.artifactCreator`) Remote Build Execution Artifact Viewer (`roles/remotebuildexecution.artifactViewer`)
`remotebuildexecution.logstreams.update`	Owner (`roles/owner`) Editor (`roles/editor`) Remote Build Execution Artifact Admin (`roles/remotebuildexecution.artifactAdmin`) Remote Build Execution Artifact Creator (`roles/remotebuildexecution.artifactCreator`) Remote Build Execution Logstream Writer (`roles/remotebuildexecution.logstreamWriter`) Remote Build Execution Worker (`roles/remotebuildexecution.worker`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Remote Build Execution Service Agent (`roles/remotebuildexecution.serviceAgent`)
`remotebuildexecution.workerpools.create`	Owner (`roles/owner`) Editor (`roles/editor`) Remote Build Execution Configuration Admin (`roles/remotebuildexecution.configurationAdmin`)
`remotebuildexecution.workerpools.delete`	Owner (`roles/owner`) Remote Build Execution Configuration Admin (`roles/remotebuildexecution.configurationAdmin`)
`remotebuildexecution.workerpools.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Remote Build Execution Configuration Admin (`roles/remotebuildexecution.configurationAdmin`) Remote Build Execution Configuration Viewer (`roles/remotebuildexecution.configurationViewer`)
`remotebuildexecution.workerpools.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Remote Build Execution Configuration Admin (`roles/remotebuildexecution.configurationAdmin`) Remote Build Execution Configuration Viewer (`roles/remotebuildexecution.configurationViewer`)
`remotebuildexecution.workerpools.update`	Owner (`roles/owner`) Editor (`roles/editor`) Remote Build Execution Configuration Admin (`roles/remotebuildexecution.configurationAdmin`)

Remote Build Execution roles and permissions