IAM permissions change log

The following permissions have been added to the Agent Platform Administrator role (roles/aiplatform.admin):

aiplatform.notebookRuntimeTemplates.setDefault

The following permissions have been added to the Colab Enterprise Admin role (roles/aiplatform.colabEnterpriseAdmin):

aiplatform.notebookRuntimeTemplates.setDefault

The following permissions have been added to the Notebook Runtime Admin role (roles/aiplatform.notebookRuntimeAdmin):

aiplatform.notebookRuntimeTemplates.setDefault

The following permissions have been added to the Vertex AI Service Agent role (roles/aiplatform.serviceAgent):

agentregistry.agents.get
agentregistry.agents.list
agentregistry.endpoints.get
agentregistry.endpoints.list
agentregistry.mcpServers.get
agentregistry.mcpServers.list

The following permissions have been added to the BigQuery Studio Admin role (roles/bigquery.studioAdmin):

aiplatform.notebookRuntimeTemplates.setDefault

The following permissions have been added to the Chronicle API Restricted Data Access Viewer role (roles/chronicle.restrictedDataAccessViewer):

chronicle.environmentGroups.get
chronicle.integrations.get
chronicle.legacySoarAdvancedReports.get
chronicle.legacySoarUsers.get
chronicle.moduleSettings.rebranding
chronicle.moduleSettingsProperties.get
chronicle.socRoles.get
chronicle.userLocalizations.get
chronicle.userNotifications.get

The Firebase Cloud Messaging Service Editor role (roles/cloudmessaging.editor) has reached General Availability (GA).

The Cloud Tasks Admin role (roles/cloudtasks.admin) has reached General Availability (GA).

The Cloud Tasks Editor role (roles/cloudtasks.editor) has reached General Availability (GA).

The Cloud Tasks Queue Admin role (roles/cloudtasks.queueAdmin) has reached General Availability (GA).

The Cloud Tasks Task Deleter role (roles/cloudtasks.taskDeleter) has reached General Availability (GA).

The Cloud Tasks Viewer role (roles/cloudtasks.viewer) has reached General Availability (GA).

The Developer Connect Insights Admin role (roles/developerconnect.insightsAdmin) has reached General Availability (GA).

The Developer Connect Insights Config Agent role (roles/developerconnect.insightsAgent) has reached General Availability (GA).

The Developer Connect Insights Viewer role (roles/developerconnect.insightsViewer) has reached General Availability (GA).

The following permissions have been added to the Developer Connect Insights Config Agent role (roles/developerconnect.insightsAgent):

cloudasset.feeds.delete

The Device Run Service Agent role (roles/devicerun.serviceAgent) has reached General Availability (GA).

The following permissions have been added to the Discovery Engine Service Agent role (roles/discoveryengine.serviceAgent):

agentregistry.operations.cancel
agentregistry.operations.delete
agentregistry.operations.get
agentregistry.operations.list

The following permissions have been added to the Editor role (roles/editor):

saasservicemgmt.poolKinds.create
saasservicemgmt.poolKinds.delete
saasservicemgmt.poolKinds.get
saasservicemgmt.poolKinds.list
saasservicemgmt.poolKinds.update
saasservicemgmt.pools.create
saasservicemgmt.pools.delete
saasservicemgmt.pools.get
saasservicemgmt.pools.list
saasservicemgmt.pools.update
saasservicemgmt.saasReleases.create
saasservicemgmt.saasReleases.delete
saasservicemgmt.saasReleases.get
saasservicemgmt.saasReleases.list
saasservicemgmt.saasReleases.update
saasservicemgmt.tenantOperations.create
saasservicemgmt.tenantOperations.delete
saasservicemgmt.tenantOperations.get
saasservicemgmt.tenantOperations.list
saasservicemgmt.tenantOperations.update
saasservicemgmt.unitGroupOperations.create
saasservicemgmt.unitGroupOperations.delete
saasservicemgmt.unitGroupOperations.get
saasservicemgmt.unitGroupOperations.list
saasservicemgmt.unitGroupOperations.update
saasservicemgmt.unitGroups.create
saasservicemgmt.unitGroups.delete
saasservicemgmt.unitGroups.get
saasservicemgmt.unitGroups.list
saasservicemgmt.unitGroups.update
securitycentermanagement.securityCenterServices.update

The following permissions have been added to the Firebase Admin role (roles/firebase.admin):

logging.logEntries.download
logging.views.access
logging.views.listLogs
logging.views.listResourceKeys
logging.views.listResourceValues

The following permissions have been added to the Firebase Editor role (roles/firebase.editor):

logging.logEntries.download
logging.views.access
logging.views.listLogs
logging.views.listResourceKeys
logging.views.listResourceValues

The following permissions have been added to the Firebase Quality Admin role (roles/firebase.qualityAdmin):

logging.logEntries.download
logging.views.access
logging.views.listLogs
logging.views.listResourceKeys
logging.views.listResourceValues

The following permissions have been added to the Firebase Quality Viewer role (roles/firebase.qualityViewer):

logging.logEntries.download
logging.views.access
logging.views.listLogs
logging.views.listResourceKeys
logging.views.listResourceValues

The following permissions have been added to the Firebase Viewer role (roles/firebase.viewer):

logging.logEntries.download
logging.views.access
logging.views.listLogs
logging.views.listResourceKeys
logging.views.listResourceValues

The following permissions have been added to the Firebase Crashlytics Admin role (roles/firebasecrashlytics.admin):

logging.logEntries.download
logging.views.access
logging.views.listLogs
logging.views.listResourceKeys
logging.views.listResourceValues

The following permissions have been added to the Firebase Crashlytics Viewer role (roles/firebasecrashlytics.viewer):

logging.logEntries.download
logging.views.access
logging.views.listLogs
logging.views.listResourceKeys
logging.views.listResourceValues

The following permissions have been added to the Cluster Director Service Agent role (roles/hypercomputecluster.serviceAgent):

hypercomputecluster.clusters.update

The following permissions have been added to the ML Engineer role (roles/iam.mlEngineer):

aiplatform.notebookRuntimeTemplates.setDefault

The following permissions have been added to the Security Admin role (roles/iam.securityAdmin):

saasservicemgmt.poolKinds.list
saasservicemgmt.pools.list
saasservicemgmt.saasReleases.list
saasservicemgmt.tenantOperations.list
saasservicemgmt.unitGroupOperations.list
saasservicemgmt.unitGroups.list

The following permissions have been added to the Security Auditor role (roles/iam.securityAuditor):

saasservicemgmt.poolKinds.list
saasservicemgmt.pools.list
saasservicemgmt.saasReleases.list
saasservicemgmt.tenantOperations.list
saasservicemgmt.unitGroupOperations.list
saasservicemgmt.unitGroups.list

The following permissions have been added to the Security Reviewer role (roles/iam.securityReviewer):

saasservicemgmt.poolKinds.list
saasservicemgmt.pools.list
saasservicemgmt.saasReleases.list
saasservicemgmt.tenantOperations.list
saasservicemgmt.unitGroupOperations.list
saasservicemgmt.unitGroups.list

The following permissions have been added to the Support User role (roles/iam.supportUser):

saasservicemgmt.poolKinds.get
saasservicemgmt.poolKinds.list
saasservicemgmt.pools.get
saasservicemgmt.pools.list
saasservicemgmt.saasReleases.get
saasservicemgmt.saasReleases.list
saasservicemgmt.tenantOperations.get
saasservicemgmt.tenantOperations.list
saasservicemgmt.unitGroupOperations.get
saasservicemgmt.unitGroupOperations.list
saasservicemgmt.unitGroups.get
saasservicemgmt.unitGroups.list

The following permissions have been added to the Oracle Database@Google Cloud admin role (roles/oracledatabase.admin):

oracledatabase.dbSystemComputePerformances.list

The following permissions have been added to the Oracle Database@Google Cloud DB System Admin role (roles/oracledatabase.dbSystemAdmin):

oracledatabase.dbSystemComputePerformances.list

The following permissions have been added to the Oracle Database@Google Cloud DB System Viewer role (roles/oracledatabase.dbSystemViewer):

oracledatabase.dbSystemComputePerformances.list

The following permissions have been added to the Oracle Database@Google Cloud viewer role (roles/oracledatabase.viewer):

oracledatabase.dbSystemComputePerformances.list

The following permissions have been added to the Owner role (roles/owner):

saasservicemgmt.poolKinds.create
saasservicemgmt.poolKinds.delete
saasservicemgmt.poolKinds.get
saasservicemgmt.poolKinds.list
saasservicemgmt.poolKinds.update
saasservicemgmt.pools.create
saasservicemgmt.pools.delete
saasservicemgmt.pools.get
saasservicemgmt.pools.list
saasservicemgmt.pools.update
saasservicemgmt.saasReleases.create
saasservicemgmt.saasReleases.delete
saasservicemgmt.saasReleases.get
saasservicemgmt.saasReleases.list
saasservicemgmt.saasReleases.update
saasservicemgmt.tenantOperations.create
saasservicemgmt.tenantOperations.delete
saasservicemgmt.tenantOperations.get
saasservicemgmt.tenantOperations.list
saasservicemgmt.tenantOperations.update
saasservicemgmt.unitGroupOperations.create
saasservicemgmt.unitGroupOperations.delete
saasservicemgmt.unitGroupOperations.get
saasservicemgmt.unitGroupOperations.list
saasservicemgmt.unitGroupOperations.update
saasservicemgmt.unitGroups.create
saasservicemgmt.unitGroups.delete
saasservicemgmt.unitGroups.get
saasservicemgmt.unitGroups.list
saasservicemgmt.unitGroups.update

The Resource Manager Editor role (roles/resourcemanager.editor) has reached General Availability (GA).

The Resource Manager Viewer role (roles/resourcemanager.viewer) has reached General Availability (GA).

The following permissions have been added to the SaaS Service Management Admin role (roles/saasservicemgmt.admin):

saasservicemgmt.poolKinds.create
saasservicemgmt.poolKinds.delete
saasservicemgmt.poolKinds.get
saasservicemgmt.poolKinds.list
saasservicemgmt.poolKinds.update
saasservicemgmt.pools.create
saasservicemgmt.pools.delete
saasservicemgmt.pools.get
saasservicemgmt.pools.list
saasservicemgmt.pools.update
saasservicemgmt.saasReleases.create
saasservicemgmt.saasReleases.delete
saasservicemgmt.saasReleases.get
saasservicemgmt.saasReleases.list
saasservicemgmt.saasReleases.update
saasservicemgmt.tenantOperations.create
saasservicemgmt.tenantOperations.delete
saasservicemgmt.tenantOperations.get
saasservicemgmt.tenantOperations.list
saasservicemgmt.tenantOperations.update
saasservicemgmt.unitGroupOperations.create
saasservicemgmt.unitGroupOperations.delete
saasservicemgmt.unitGroupOperations.get
saasservicemgmt.unitGroupOperations.list
saasservicemgmt.unitGroupOperations.update
saasservicemgmt.unitGroups.create
saasservicemgmt.unitGroups.delete
saasservicemgmt.unitGroups.get
saasservicemgmt.unitGroups.list
saasservicemgmt.unitGroups.update

The following permissions have been added to the SaaS Service Management Viewer role (roles/saasservicemgmt.viewer):

saasservicemgmt.poolKinds.get
saasservicemgmt.poolKinds.list
saasservicemgmt.pools.get
saasservicemgmt.pools.list
saasservicemgmt.saasReleases.get
saasservicemgmt.saasReleases.list
saasservicemgmt.tenantOperations.get
saasservicemgmt.tenantOperations.list
saasservicemgmt.unitGroupOperations.get
saasservicemgmt.unitGroupOperations.list
saasservicemgmt.unitGroups.get
saasservicemgmt.unitGroups.list

The following permissions have been added to the Security Center Management Editor role (roles/securitycentermanagement.editor):

securitycentermanagement.securityCenterServices.update

The following permissions have been added to the Viewer role (roles/viewer):

saasservicemgmt.poolKinds.get
saasservicemgmt.poolKinds.list
saasservicemgmt.pools.get
saasservicemgmt.pools.list
saasservicemgmt.saasReleases.get
saasservicemgmt.saasReleases.list
saasservicemgmt.tenantOperations.get
saasservicemgmt.tenantOperations.list
saasservicemgmt.unitGroupOperations.get
saasservicemgmt.unitGroupOperations.list
saasservicemgmt.unitGroups.get
saasservicemgmt.unitGroups.list

The following permissions have been added to the Visual Inspection AI Service Agent role (roles/visualinspection.serviceAgent):

aiplatform.notebookRuntimeTemplates.setDefault

The following permissions have been added:

aiplatform.interactions.cancel
aiplatform.interactions.create
aiplatform.interactions.delete
aiplatform.interactions.get
aiplatform.interactions.list
aiplatform.notebookRuntimeTemplates.setDefault

The following permissions have reached General Availability (GA):

biglake.namespaces.create
biglake.namespaces.delete
biglake.namespaces.get
biglake.namespaces.getIamPolicy
biglake.namespaces.list
biglake.namespaces.setIamPolicy
biglake.namespaces.update

The following permissions have been added:

chronicle.instances.suggestQueryFields

The following permissions are supported in custom roles:

chronicle.instances.suggestQueryFields

The following permissions are supported in custom roles:

cloudtasks.queues.create
cloudtasks.queues.delete
cloudtasks.queues.get
cloudtasks.queues.list
cloudtasks.queues.pause
cloudtasks.queues.purge
cloudtasks.queues.resume
cloudtasks.queues.update
cloudtasks.tasks.create
cloudtasks.tasks.delete
cloudtasks.tasks.fullView
cloudtasks.tasks.get
cloudtasks.tasks.list
cloudtasks.tasks.run

The following permissions have reached General Availability (GA):

cloudtasks.operations.get
cloudtasks.queues.create
cloudtasks.queues.delete
cloudtasks.queues.get
cloudtasks.queues.list
cloudtasks.queues.pause
cloudtasks.queues.purge
cloudtasks.queues.resume
cloudtasks.queues.update
cloudtasks.tasks.create
cloudtasks.tasks.delete
cloudtasks.tasks.fullView
cloudtasks.tasks.get
cloudtasks.tasks.list
cloudtasks.tasks.run

The following permissions have been added:

compute.instances.troubleshoot
compute.reliabilityRisks.get
compute.reliabilityRisks.list

The following permissions are supported in custom roles:

compute.instances.troubleshoot
compute.reliabilityRisks.get
compute.reliabilityRisks.list

The following permissions have reached General Availability (GA):

compute.reliabilityRisks.get
compute.reliabilityRisks.list

The following permissions have been added:

datamigration.connectionProfiles.createTagBinding
datamigration.connectionProfiles.deleteTagBinding
datamigration.connectionProfiles.listEffectiveTags
datamigration.connectionProfiles.listTagBindings
datamigration.connectionprofiles.createTagBinding
datamigration.connectionprofiles.deleteTagBinding
datamigration.connectionprofiles.listEffectiveTags
datamigration.connectionprofiles.listTagBindings
datamigration.migrationJobs.createTagBinding
datamigration.migrationJobs.deleteTagBinding
datamigration.migrationJobs.listEffectiveTags
datamigration.migrationJobs.listTagBindings
datamigration.migrationjobs.createTagBinding
datamigration.migrationjobs.deleteTagBinding
datamigration.migrationjobs.listEffectiveTags
datamigration.migrationjobs.listTagBindings
datamigration.privateConnections.createTagBinding
datamigration.privateConnections.deleteTagBinding
datamigration.privateConnections.listEffectiveTags
datamigration.privateConnections.listTagBindings
datamigration.privateconnections.createTagBinding
datamigration.privateconnections.deleteTagBinding
datamigration.privateconnections.listEffectiveTags
datamigration.privateconnections.listTagBindings

The following permissions have reached General Availability (GA):

datamigration.connectionProfiles.createTagBinding
datamigration.connectionProfiles.deleteTagBinding
datamigration.connectionProfiles.listEffectiveTags
datamigration.connectionProfiles.listTagBindings
datamigration.connectionprofiles.createTagBinding
datamigration.connectionprofiles.deleteTagBinding
datamigration.connectionprofiles.listEffectiveTags
datamigration.connectionprofiles.listTagBindings
datamigration.migrationJobs.createTagBinding
datamigration.migrationJobs.deleteTagBinding
datamigration.migrationJobs.listEffectiveTags
datamigration.migrationJobs.listTagBindings
datamigration.migrationjobs.createTagBinding
datamigration.migrationjobs.deleteTagBinding
datamigration.migrationjobs.listEffectiveTags
datamigration.migrationjobs.listTagBindings
datamigration.privateConnections.createTagBinding
datamigration.privateConnections.deleteTagBinding
datamigration.privateConnections.listEffectiveTags
datamigration.privateConnections.listTagBindings
datamigration.privateconnections.createTagBinding
datamigration.privateconnections.deleteTagBinding
datamigration.privateconnections.listEffectiveTags
datamigration.privateconnections.listTagBindings

The following permissions have reached General Availability (GA):

developerconnect.deploymentEvents.get
developerconnect.deploymentEvents.list
developerconnect.insightsConfigs.create
developerconnect.insightsConfigs.delete
developerconnect.insightsConfigs.get
developerconnect.insightsConfigs.list
developerconnect.insightsConfigs.update

The following permissions have reached General Availability (GA):

discoveryengine.collections.getIamPolicy
discoveryengine.collections.setIamPolicy
discoveryengine.dataStores.getIamPolicy
discoveryengine.dataStores.setIamPolicy

The following permissions have been added:

networkconnectivity.pscAuthorizationPolicies.create
networkconnectivity.pscAuthorizationPolicies.delete
networkconnectivity.pscAuthorizationPolicies.get
networkconnectivity.pscAuthorizationPolicies.list

The following permissions are supported in custom roles:

networkconnectivity.pscAuthorizationPolicies.create
networkconnectivity.pscAuthorizationPolicies.delete
networkconnectivity.pscAuthorizationPolicies.get
networkconnectivity.pscAuthorizationPolicies.list

The following permissions have reached General Availability (GA):

networkconnectivity.pscAuthorizationPolicies.create
networkconnectivity.pscAuthorizationPolicies.delete
networkconnectivity.pscAuthorizationPolicies.get
networkconnectivity.pscAuthorizationPolicies.list

The following permissions have been added:

oracledatabase.dbSystemComputePerformances.list
oracledatabase.flexComponents.list

The following permissions are supported in custom roles:

oracledatabase.dbSystemComputePerformances.list
oracledatabase.flexComponents.list

The following permissions have reached General Availability (GA):

oracledatabase.dbSystemComputePerformances.list
oracledatabase.flexComponents.list

The following permissions have been added:

recaptchaenterprise.policies.get
recaptchaenterprise.policies.update

The following permissions are supported in custom roles:

recaptchaenterprise.policies.get
recaptchaenterprise.policies.update

The following permissions have reached General Availability (GA):

recaptchaenterprise.policies.get
recaptchaenterprise.policies.update

The following permissions have been added:

resourcemanager.boundaries.associateToCapabilityConfig
resourcemanager.boundaries.create
resourcemanager.boundaries.delete
resourcemanager.boundaries.get
resourcemanager.boundaries.list
resourcemanager.boundaries.update
resourcemanager.boundaryConfigs.get
resourcemanager.boundaryConfigs.update
resourcemanager.capabilityConfigs.create
resourcemanager.capabilityConfigs.delete
resourcemanager.capabilityConfigs.get
resourcemanager.capabilityConfigs.list
resourcemanager.capabilityConfigs.update
resourcemanager.projects.associateToCapabilityConfig

The following permissions are supported in custom roles:

resourcemanager.boundaries.associateToCapabilityConfig
resourcemanager.boundaries.create
resourcemanager.boundaries.delete
resourcemanager.boundaries.get
resourcemanager.boundaries.list
resourcemanager.boundaries.update
resourcemanager.boundaryConfigs.get
resourcemanager.boundaryConfigs.update
resourcemanager.capabilityConfigs.create
resourcemanager.capabilityConfigs.delete
resourcemanager.capabilityConfigs.get
resourcemanager.capabilityConfigs.list
resourcemanager.capabilityConfigs.update
resourcemanager.projects.associateToCapabilityConfig

The following permissions have reached General Availability (GA):

resourcemanager.boundaries.associateToCapabilityConfig
resourcemanager.boundaries.create
resourcemanager.boundaries.delete
resourcemanager.boundaries.get
resourcemanager.boundaries.list
resourcemanager.boundaries.update
resourcemanager.boundaryConfigs.get
resourcemanager.boundaryConfigs.update
resourcemanager.capabilityConfigs.create
resourcemanager.capabilityConfigs.delete
resourcemanager.capabilityConfigs.get
resourcemanager.capabilityConfigs.list
resourcemanager.capabilityConfigs.update
resourcemanager.projects.associateToCapabilityConfig

The following permissions have been added:

saasservicemgmt.poolKinds.create
saasservicemgmt.poolKinds.delete
saasservicemgmt.poolKinds.get
saasservicemgmt.poolKinds.list
saasservicemgmt.poolKinds.update
saasservicemgmt.pools.create
saasservicemgmt.pools.delete
saasservicemgmt.pools.get
saasservicemgmt.pools.list
saasservicemgmt.pools.update
saasservicemgmt.saasReleases.create
saasservicemgmt.saasReleases.delete
saasservicemgmt.saasReleases.get
saasservicemgmt.saasReleases.list
saasservicemgmt.saasReleases.update
saasservicemgmt.tenantOperations.create
saasservicemgmt.tenantOperations.delete
saasservicemgmt.tenantOperations.get
saasservicemgmt.tenantOperations.list
saasservicemgmt.tenantOperations.update
saasservicemgmt.unitGroupOperations.create
saasservicemgmt.unitGroupOperations.delete
saasservicemgmt.unitGroupOperations.get
saasservicemgmt.unitGroupOperations.list
saasservicemgmt.unitGroupOperations.update
saasservicemgmt.unitGroups.create
saasservicemgmt.unitGroups.delete
saasservicemgmt.unitGroups.get
saasservicemgmt.unitGroups.list
saasservicemgmt.unitGroups.update

The following permissions have been added:

securitycenter.issues.retrieve
securitycenter.issues.search
securitycenter.issues.searchImpactedResources

The following permissions are supported in custom roles:

securitycenter.issues.retrieve
securitycenter.issues.search
securitycenter.issues.searchImpactedResources

The following permissions have reached General Availability (GA):

securitycenter.issues.retrieve
securitycenter.issues.search
securitycenter.issues.searchImpactedResources

The following permissions have been added:

storage.managedFolders.update

The following permissions have been added:

tpu.nodes.createTagBinding
tpu.nodes.deleteTagBinding
tpu.nodes.listEffectiveTags
tpu.nodes.listTagBindings

The following permissions have reached General Availability (GA):

tpu.nodes.createTagBinding
tpu.nodes.deleteTagBinding
tpu.nodes.listEffectiveTags
tpu.nodes.listTagBindings

The following permissions have been added:

videostitcher.cdnKeys.createTagBinding
videostitcher.cdnKeys.deleteTagBinding
videostitcher.cdnKeys.listEffectiveTags
videostitcher.cdnKeys.listTagBindings
videostitcher.liveConfigs.createTagBinding
videostitcher.liveConfigs.deleteTagBinding
videostitcher.liveConfigs.listEffectiveTags
videostitcher.liveConfigs.listTagBindings
videostitcher.slates.createTagBinding
videostitcher.slates.deleteTagBinding
videostitcher.slates.listEffectiveTags
videostitcher.slates.listTagBindings
videostitcher.vodConfigs.createTagBinding
videostitcher.vodConfigs.deleteTagBinding
videostitcher.vodConfigs.listEffectiveTags
videostitcher.vodConfigs.listTagBindings

The following permissions have reached General Availability (GA):

videostitcher.cdnKeys.createTagBinding
videostitcher.cdnKeys.deleteTagBinding
videostitcher.cdnKeys.listEffectiveTags
videostitcher.cdnKeys.listTagBindings
videostitcher.liveConfigs.createTagBinding
videostitcher.liveConfigs.deleteTagBinding
videostitcher.liveConfigs.listEffectiveTags
videostitcher.liveConfigs.listTagBindings
videostitcher.slates.createTagBinding
videostitcher.slates.deleteTagBinding
videostitcher.slates.listEffectiveTags
videostitcher.slates.listTagBindings
videostitcher.vodConfigs.createTagBinding
videostitcher.vodConfigs.deleteTagBinding
videostitcher.vodConfigs.listEffectiveTags
videostitcher.vodConfigs.listTagBindings

The App Topology Admin role (roles/apptopology.admin) has reached General Availability (GA).

The App Topology Viewer role (roles/apptopology.viewer) has reached General Availability (GA).

The following permissions have been added to the App Topology Admin role (roles/apptopology.admin):

cloudnotifications.activities.list
monitoring.alertPolicies.get
monitoring.alertPolicies.list
monitoring.alertPolicies.listEffectiveTags
monitoring.alertPolicies.listTagBindings
monitoring.alerts.get
monitoring.alerts.list
monitoring.dashboards.get
monitoring.dashboards.list
monitoring.dashboards.listEffectiveTags
monitoring.dashboards.listTagBindings
monitoring.groups.get
monitoring.groups.list
monitoring.metricDescriptors.get
monitoring.metricDescriptors.list
monitoring.monitoredResourceDescriptors.get
monitoring.monitoredResourceDescriptors.list
monitoring.notificationChannelDescriptors.get
monitoring.notificationChannelDescriptors.list
monitoring.notificationChannels.get
monitoring.notificationChannels.list
monitoring.services.get
monitoring.services.list
monitoring.slos.get
monitoring.slos.list
monitoring.snoozes.get
monitoring.snoozes.list
monitoring.timeSeries.list
monitoring.uptimeCheckConfigs.get
monitoring.uptimeCheckConfigs.list
opsconfigmonitoring.resourceMetadata.list
stackdriver.projects.get
stackdriver.resourceMetadata.list

The following permissions have been added to the App Topology Viewer role (roles/apptopology.viewer):

cloudnotifications.activities.list
monitoring.alertPolicies.get
monitoring.alertPolicies.list
monitoring.alertPolicies.listEffectiveTags
monitoring.alertPolicies.listTagBindings
monitoring.alerts.get
monitoring.alerts.list
monitoring.dashboards.get
monitoring.dashboards.list
monitoring.dashboards.listEffectiveTags
monitoring.dashboards.listTagBindings
monitoring.groups.get
monitoring.groups.list
monitoring.metricDescriptors.get
monitoring.metricDescriptors.list
monitoring.monitoredResourceDescriptors.get
monitoring.monitoredResourceDescriptors.list
monitoring.notificationChannelDescriptors.get
monitoring.notificationChannelDescriptors.list
monitoring.notificationChannels.get
monitoring.notificationChannels.list
monitoring.services.get
monitoring.services.list
monitoring.slos.get
monitoring.slos.list
monitoring.snoozes.get
monitoring.snoozes.list
monitoring.timeSeries.list
monitoring.uptimeCheckConfigs.get
monitoring.uptimeCheckConfigs.list
opsconfigmonitoring.resourceMetadata.list
stackdriver.projects.get
stackdriver.resourceMetadata.list

The following permissions have been added to the BigQuery Job User role (roles/bigquery.jobUser):

geminidataanalytics.locations.chat

The following permissions have been added to the BigQuery Data Transfer Service Agent role (roles/bigquerydatatransfer.serviceAgent):

geminidataanalytics.locations.chat

The following permissions have been added to the Chronicle API Editor role (roles/chronicle.editor):

chronicle.propertySchemaDefinitions.delete
chronicle.propertySchemaDefinitions.update

The following permissions have been added to the Cloud Data Fusion API Service Agent role (roles/datafusion.serviceAgent):

geminidataanalytics.locations.chat
monitoring.dashboards.get
monitoring.dashboards.list
monitoring.groups.get
monitoring.groups.list
stackdriver.projects.get
stackdriver.resourceMetadata.list

The following permissions have been added to the Datapipelines Service Agent role (roles/datapipelines.serviceAgent):

monitoring.dashboards.get
monitoring.dashboards.list
monitoring.groups.get
monitoring.groups.list
monitoring.monitoredResourceDescriptors.get
stackdriver.projects.get
stackdriver.resourceMetadata.list

The following permissions have been added to the Cloud Dataplex Service Agent role (roles/dataplex.serviceAgent):

monitoring.dashboards.get
monitoring.dashboards.list
monitoring.groups.get
monitoring.groups.list
stackdriver.projects.get
stackdriver.resourceMetadata.list

The following permissions have been added to the Dataproc Service Agent role (roles/dataproc.serviceAgent):

monitoring.dashboards.get
monitoring.dashboards.list
monitoring.groups.get
monitoring.groups.list
monitoring.monitoredResourceDescriptors.get
stackdriver.projects.get
stackdriver.resourceMetadata.list

The following permissions have been added to the DLP Organization Data Profiles Driver role (roles/dlp.orgdriver):

geminidataanalytics.locations.chat

The following permissions have been added to the DLP Project Data Profiles Driver role (roles/dlp.projectdriver):

geminidataanalytics.locations.chat

The following permissions have been added to the DLP API Service Agent role (roles/dlp.serviceAgent):

geminidataanalytics.locations.chat
monitoring.dashboards.get
monitoring.dashboards.list
monitoring.groups.get
monitoring.groups.list
monitoring.monitoredResourceDescriptors.get
stackdriver.projects.get
stackdriver.resourceMetadata.list

The following permissions have been added to the Enterprise Knowledge Graph Service Agent role (roles/enterpriseknowledgegraph.serviceAgent):

geminidataanalytics.locations.chat

The following permissions have been removed from the Eventarc Service Agent role (roles/eventarc.serviceAgent):

cloudfunctions.functions.get
compute.networkAttachments.use
container.deployments.list
container.serviceAccounts.list
container.services.list
monitoring.timeSeries.create

The following permissions have been added to the Firebase Admin role (roles/firebase.admin):

monitoring.dashboards.get
monitoring.dashboards.list
monitoring.groups.get
monitoring.groups.list
monitoring.monitoredResourceDescriptors.get
stackdriver.projects.get
stackdriver.resourceMetadata.list

The following permissions have been added to the Firebase Develop Admin role (roles/firebase.developAdmin):

monitoring.dashboards.get
monitoring.dashboards.list
monitoring.groups.get
monitoring.groups.list
monitoring.monitoredResourceDescriptors.get
stackdriver.projects.get
stackdriver.resourceMetadata.list

The following permissions have been added to the FleetEngine Service Agent role (roles/fleetengine.serviceAgent):

geminidataanalytics.locations.chat

The following permissions have been added to the Cluster Director Service Agent role (roles/hypercomputecluster.serviceAgent):

servicemanagement.services.report

The following permissions have been added to the AI Platform Service Agent role (roles/ml.serviceAgent):

monitoring.dashboards.get
monitoring.dashboards.list
monitoring.groups.get
monitoring.groups.list
monitoring.monitoredResourceDescriptors.get
stackdriver.projects.get
stackdriver.resourceMetadata.list

The following permissions have been added to the Storage Admin role (roles/storage.admin):

monitoring.dashboards.get
monitoring.dashboards.list
monitoring.groups.get
monitoring.groups.list
monitoring.monitoredResourceDescriptors.get
stackdriver.projects.get
stackdriver.resourceMetadata.list

The Cloud Telemetry Logs Writer role (roles/telemetry.logsWriter) has reached General Availability (GA).

The following permissions have been added to the Vector Search Service Agent role (roles/vectorsearch.serviceAgent):

aiplatform.batchPredictionJobs.create
aiplatform.batchPredictionJobs.get

The following permissions have been added to the Visual Inspection AI Service Agent role (roles/visualinspection.serviceAgent):

monitoring.dashboards.get
monitoring.dashboards.list
monitoring.groups.get
monitoring.groups.list
monitoring.monitoredResourceDescriptors.get
stackdriver.projects.get
stackdriver.resourceMetadata.list

The following permissions have reached General Availability (GA):

apptopology.applicationTopologies.generate
apptopology.devOpsDomainTopologies.generate
apptopology.discoveredResourcesTopologies.generate
apptopology.domains.get
apptopology.domains.list
apptopology.locations.get
apptopology.locations.list
apptopology.operations.get
apptopology.operations.list
apptopology.schemas.get
apptopology.securityDomainTopologies.generate
apptopology.sreDomainTopologies.generate
apptopology.topologyViews.get
apptopology.topologyViews.list

The following permissions have been added:

backupdr.appliedAutoProtectionPolicies.authorize
backupdr.appliedAutoProtectionPolicies.list
backupdr.appliedAutoProtectionPolicies.viewMatchingResources
backupdr.autoProtectionBindings.create
backupdr.autoProtectionBindings.delete
backupdr.autoProtectionBindings.get
backupdr.autoProtectionBindings.list
backupdr.autoProtectionPolicies.create
backupdr.autoProtectionPolicies.delete
backupdr.autoProtectionPolicies.get
backupdr.autoProtectionPolicies.list
backupdr.autoProtectionPolicies.update
backupdr.bindingMatchingResources.list

The following permissions are supported in custom roles:

backupdr.appliedAutoProtectionPolicies.authorize
backupdr.appliedAutoProtectionPolicies.list
backupdr.appliedAutoProtectionPolicies.viewMatchingResources
backupdr.autoProtectionBindings.create
backupdr.autoProtectionBindings.delete
backupdr.autoProtectionBindings.get
backupdr.autoProtectionBindings.list
backupdr.autoProtectionPolicies.create
backupdr.autoProtectionPolicies.delete
backupdr.autoProtectionPolicies.get
backupdr.autoProtectionPolicies.list
backupdr.autoProtectionPolicies.update
backupdr.bindingMatchingResources.list

The following permissions have reached General Availability (GA):

biglake.catalogs.getIamPolicy
biglake.catalogs.setIamPolicy
biglake.catalogs.update
biglake.tables.createPartitions
biglake.tables.deletePartitions
biglake.tables.getIamPolicy
biglake.tables.listPartitions
biglake.tables.setIamPolicy
biglake.tables.updatePartitions

The following permissions have been added:

chronicle.tags.create
chronicle.tags.delete
chronicle.tags.get
chronicle.tags.list
chronicle.tags.update

The following permissions are supported in custom roles:

chronicle.tags.create
chronicle.tags.delete
chronicle.tags.get
chronicle.tags.list
chronicle.tags.update

The following permissions have been added:

compute.managedRulesets.get
compute.managedRulesets.list

The following permissions have reached General Availability (GA):

compute.managedRulesets.get
compute.managedRulesets.list

The following permissions have been added:

serviceextensions.callouts.invoke
serviceextensions.locations.get
serviceextensions.locations.list

The following permissions have been added to the Audit Manager Auditing Service Agent role (roles/auditmanager.serviceAgent):

cloudsql.instances.connect

The following permissions have been added to the Customer Engagement Suite Service Agent role (roles/ces.serviceAgent):

discoveryengine.collections.get

The following permissions have been added to the Cloud Security Compliance Service Agent role (roles/cloudsecuritycompliance.serviceAgent):

cloudsql.instances.connect

The following permissions have been added to the Cloud Dataflow Service Agent role (roles/dataflow.serviceAgent):

monitoring.alertPolicies.create
monitoring.alertPolicies.delete
monitoring.alertPolicies.update

The following permissions have been added to the Data Studio Managed Storage Service Agent role (roles/datastudio.managedStorageServiceAgent):

bigquery.tables.update

The following permissions have been added to the Discovery Engine Admin role (roles/discoveryengine.admin):

discoveryengine.accounts.create
discoveryengine.audioOverviews.create
discoveryengine.audioOverviews.delete
discoveryengine.audioOverviews.get
discoveryengine.audioOverviews.getIceConfig
discoveryengine.audioOverviews.sendSdpOffer
discoveryengine.notebooks.create
discoveryengine.notebooks.generateGuide
discoveryengine.notebooks.get
discoveryengine.notebooks.getAnalytics
discoveryengine.notebooks.getIamPolicy
discoveryengine.notebooks.interactSources
discoveryengine.notebooks.list
discoveryengine.notebooks.removeSelf
discoveryengine.notebooks.setIamPolicy
discoveryengine.notebooks.update
discoveryengine.notes.create
discoveryengine.notes.delete
discoveryengine.notes.get
discoveryengine.notes.update
discoveryengine.sources.checkFreshness
discoveryengine.sources.create
discoveryengine.sources.delete
discoveryengine.sources.generateDocumentGuide
discoveryengine.sources.get
discoveryengine.sources.refresh
discoveryengine.sources.update

The following permissions have been added to the Gemini Enterprise Admin role (roles/discoveryengine.agentspaceAdmin):

discoveryengine.accounts.create
discoveryengine.audioOverviews.create
discoveryengine.audioOverviews.delete
discoveryengine.audioOverviews.get
discoveryengine.audioOverviews.getIceConfig
discoveryengine.audioOverviews.sendSdpOffer
discoveryengine.notebooks.create
discoveryengine.notebooks.generateGuide
discoveryengine.notebooks.get
discoveryengine.notebooks.getAnalytics
discoveryengine.notebooks.getIamPolicy
discoveryengine.notebooks.interactSources
discoveryengine.notebooks.list
discoveryengine.notebooks.removeSelf
discoveryengine.notebooks.setIamPolicy
discoveryengine.notebooks.update
discoveryengine.notes.create
discoveryengine.notes.delete
discoveryengine.notes.get
discoveryengine.notes.update
discoveryengine.sources.checkFreshness
discoveryengine.sources.create
discoveryengine.sources.delete
discoveryengine.sources.generateDocumentGuide
discoveryengine.sources.get
discoveryengine.sources.refresh
discoveryengine.sources.update

The following permissions have been added to the Gemini Enterprise Restricted User role (roles/discoveryengine.agentspaceRestrictedUser):

discoveryengine.collections.get
discoveryengine.dataStores.get

The following permissions have been added to the Vector Search Service Agent role (roles/vectorsearch.serviceAgent):

vectorsearch.collections.create
vectorsearch.collections.delete
vectorsearch.dataObjects.create
vectorsearch.dataObjects.delete
vectorsearch.dataObjects.import
vectorsearch.dataObjects.update
vectorsearch.indexes.delete

The following permissions have been added:

apptopology.devOpsDomainTopologies.generate
apptopology.securityDomainTopologies.generate
apptopology.sreDomainTopologies.generate

The following permissions have been added:

backupdr.resourceBackupConfigs.fetch

The following permissions have reached General Availability (GA):

backupdr.resourceBackupConfigs.fetch

The following permissions have reached General Availability (GA):

compute.instances.getVmExtensionState
compute.instances.listVmExtensionStates

The following permissions have been added:

dataform.repositories.createTagBinding
dataform.repositories.deleteTagBinding
dataform.repositories.listEffectiveTags
dataform.repositories.listTagBindings

The following permissions have reached General Availability (GA):

dataform.repositories.createTagBinding
dataform.repositories.deleteTagBinding
dataform.repositories.listEffectiveTags
dataform.repositories.listTagBindings

The following permissions have been added:

datalineage.processes.markAsDeleted

The following permissions are supported in custom roles:

datalineage.processes.markAsDeleted

The following permissions have been added:

dataplex.entryGroups.createTagBinding
dataplex.entryGroups.deleteTagBinding
dataplex.entryGroups.listEffectiveTags
dataplex.entryGroups.listTagBindings
dataplex.entryTypes.createTagBinding
dataplex.entryTypes.deleteTagBinding
dataplex.entryTypes.listEffectiveTags
dataplex.entryTypes.listTagBindings
dataplex.governanceRules.createTagBinding
dataplex.governanceRules.deleteTagBinding
dataplex.governanceRules.listEffectiveTags
dataplex.governanceRules.listTagBindings

The following permissions have reached General Availability (GA):

dataplex.entryGroups.createTagBinding
dataplex.entryGroups.deleteTagBinding
dataplex.entryGroups.listEffectiveTags
dataplex.entryGroups.listTagBindings
dataplex.entryTypes.createTagBinding
dataplex.entryTypes.deleteTagBinding
dataplex.entryTypes.listEffectiveTags
dataplex.entryTypes.listTagBindings
dataplex.governanceRules.createTagBinding
dataplex.governanceRules.deleteTagBinding
dataplex.governanceRules.listEffectiveTags
dataplex.governanceRules.listTagBindings

The following permissions have been added:

discoveryengine.cmekConfigs.delete

The following permissions are supported in custom roles:

discoveryengine.cmekConfigs.delete

The following permissions have been added:

notebooks.instances.createTagBinding
notebooks.instances.deleteTagBinding
notebooks.instances.listEffectiveTags
notebooks.instances.listTagBindings

The following permissions have reached General Availability (GA):

notebooks.instances.createTagBinding
notebooks.instances.deleteTagBinding
notebooks.instances.listEffectiveTags
notebooks.instances.listTagBindings

The following permissions have been added:

oracledatabase.dbSystems.update
oracledatabase.exascaleDbStorageVaults.update
oracledatabase.goldenGateConnectionAssignments.update
oracledatabase.goldenGateConnections.update
oracledatabase.goldenGateDeployments.update
oracledatabase.odbNetworks.update
oracledatabase.odbSubnets.update

The following permissions are supported in custom roles:

oracledatabase.dbSystems.update
oracledatabase.exascaleDbStorageVaults.update
oracledatabase.goldenGateConnectionAssignments.update
oracledatabase.goldenGateConnections.update
oracledatabase.goldenGateDeployments.update
oracledatabase.odbNetworks.update
oracledatabase.odbSubnets.update

The following permissions have reached General Availability (GA):

oracledatabase.dbSystems.update
oracledatabase.exascaleDbStorageVaults.update
oracledatabase.goldenGateConnectionAssignments.update
oracledatabase.goldenGateConnections.update
oracledatabase.goldenGateDeployments.update
oracledatabase.odbNetworks.update
oracledatabase.odbSubnets.update

The following permissions have been added:

redis.clusters.createTagBinding
redis.clusters.deleteTagBinding
redis.clusters.listEffectiveTags
redis.clusters.listTagBindings

The following permissions have reached General Availability (GA):

redis.clusters.createTagBinding
redis.clusters.deleteTagBinding
redis.clusters.listEffectiveTags
redis.clusters.listTagBindings

The following permissions have been added:

storage.buckets.viewSecurityIntelligenceDetails

The following permissions are supported in custom roles:

storage.buckets.viewSecurityIntelligenceDetails

The following permissions have been added:

vectorsearch.dataObjects.export
vectorsearch.indexes.update

The following permissions are supported in custom roles:

vectorsearch.dataObjects.export
vectorsearch.indexes.update

The following permissions have reached General Availability (GA):

vectorsearch.dataObjects.export
vectorsearch.indexes.update

The Analytics Hub Service Agent role (roles/analyticshub.serviceAgent) has reached General Availability (GA).

The following permissions have been added to the Chronicle Service Agent role (roles/chronicle.serviceAgent):

chronicle.caseAlerts.get
chronicle.integrationInstances.get
chronicle.integrations.get
chronicle.legacyCases.runManualAction
cloudaicompanion.geminiGcpEnablementSettings.get
cloudaicompanion.geminiGcpEnablementSettings.list
geminicloudassist.agents.invoke
geminicloudassist.locations.get
geminicloudassist.locations.list
serviceusage.services.use

The following permissions have been added to the Database Migration Service Agent role (roles/datamigration.serviceAgent):

datamigration.connectionprofiles.create
datamigration.connectionprofiles.delete
datamigration.connectionprofiles.get
datamigration.connectionprofiles.list
datamigration.connectionprofiles.update
datamigration.operations.get

The following permissions have been added to the Memorystore Admin role (roles/memorystore.admin):

cloudkms.keyHandles.create
cloudkms.keyHandles.get
cloudkms.keyHandles.list
cloudkms.operations.get
cloudkms.projects.showEffectiveAutokeyConfig

The following permissions have been added:

compute.instances.getVmExtensionState
compute.instances.listVmExtensionStates

The following permissions are supported in custom roles:

compute.instances.getVmExtensionState
compute.instances.listVmExtensionStates

The following permissions have been added:

discoveryengine.ideaForgeInstances.stop

The following permissions are supported in custom roles:

discoveryengine.ideaForgeInstances.stop

The following permissions have been added:

iap.resources.egressViaIAP

The following permissions are supported in custom roles:

iap.resources.egressViaIAP

The following permissions have reached General Availability (GA):

iap.resources.egressViaIAP

The following permissions have been added:

roads.selectedRoutes.batchDelete
roads.selectedRoutes.batchUpdate
roads.selectedRoutes.update

The following permissions are supported in custom roles:

roads.selectedRoutes.batchDelete
roads.selectedRoutes.batchUpdate
roads.selectedRoutes.update

The following permissions have reached General Availability (GA):

roads.selectedRoutes.batchDelete
roads.selectedRoutes.batchUpdate
roads.selectedRoutes.update

The following permissions have been added:

run.locations.uploadSource

The following permissions are supported in custom roles:

run.locations.uploadSource

The following permissions have been added to the BigQuery Studio Admin role (roles/bigquery.studioAdmin):

geminidataanalytics.dataAgents.chat
geminidataanalytics.dataAgents.delete
geminidataanalytics.dataAgents.get
geminidataanalytics.dataAgents.getIamPolicy
geminidataanalytics.dataAgents.list
geminidataanalytics.dataAgents.setIamPolicy
geminidataanalytics.dataAgents.update
geminidataanalytics.locations.get
geminidataanalytics.locations.list
geminidataanalytics.operations.cancel
geminidataanalytics.operations.delete
geminidataanalytics.operations.list

The following permissions have been added to the Cloud Dataplex Service Agent role (roles/dataplex.serviceAgent):

dataproc.agents.create
dataproc.agents.delete
dataproc.agents.get
dataproc.agents.list
dataproc.agents.update
dataproc.tasks.lease
dataproc.tasks.listInvalidatedLeases
dataproc.tasks.reportStatus

The Cloud FTP Admin role (roles/ftp.admin) has reached General Availability (GA).

The Cloud FTP Viewer role (roles/ftp.viewer) has reached General Availability (GA).

The following permissions have been added to the Simulator Admin role (roles/policysimulator.admin):

policysimulator.activityBacktestResults.search
policysimulator.activityBacktests.evaluateRabPolicy
policysimulator.activityBacktests.list
policysimulator.activityBacktests.viewRabPolicy

The following permissions have been added:

aiplatform.tasks.cancel
aiplatform.tasks.create
aiplatform.tasks.delete
aiplatform.tasks.get
aiplatform.tasks.list
aiplatform.tasks.update

The following permissions have been added:

chronicle.tagSubscriptions.create
chronicle.tagSubscriptions.delete
chronicle.tagSubscriptions.get
chronicle.tagSubscriptions.list
chronicle.tagSubscriptions.update

The following permissions are supported in custom roles:

chronicle.tagSubscriptions.create
chronicle.tagSubscriptions.delete
chronicle.tagSubscriptions.get
chronicle.tagSubscriptions.list
chronicle.tagSubscriptions.update

The following permissions have reached General Availability (GA):

chronicle.instances.update
chronicle.tenants.create
chronicle.tenants.list
chronicle.tenants.update

The following permissions have been added:

compute.recoverableSnapshots.delete
compute.recoverableSnapshots.get
compute.recoverableSnapshots.getIamPolicy
compute.recoverableSnapshots.list
compute.recoverableSnapshots.recover
compute.recoverableSnapshots.setIamPolicy
compute.snapshotRecycleBinPolicy.get
compute.snapshotRecycleBinPolicy.update
compute.snapshots.getEffectiveRecycleBinRule

The following permissions have been added:

datalineage.processRevisions.delete
datalineage.processRevisions.get
datalineage.processRevisions.insert
datalineage.processRevisions.list

The following permissions are supported in custom roles:

datalineage.processRevisions.delete
datalineage.processRevisions.get
datalineage.processRevisions.insert
datalineage.processRevisions.list

The following permissions have been added:

devicerun.devices.get
devicerun.devices.list
devicerun.locations.get
devicerun.locations.list
devicerun.operations.cancel
devicerun.operations.delete
devicerun.operations.get
devicerun.operations.list
devicerun.sessions.create
devicerun.sessions.delete
devicerun.sessions.get
devicerun.sessions.list

The following permissions are supported in custom roles:

devicerun.devices.get
devicerun.devices.list
devicerun.locations.get
devicerun.locations.list
devicerun.operations.cancel
devicerun.operations.delete
devicerun.operations.get
devicerun.operations.list
devicerun.sessions.create
devicerun.sessions.delete
devicerun.sessions.get
devicerun.sessions.list

The following permissions have been added:

financialservices.v1instances.createTagBinding
financialservices.v1instances.deleteTagBinding
financialservices.v1instances.listEffectiveTags
financialservices.v1instances.listTagBindings

The following permissions have reached General Availability (GA):

financialservices.v1instances.createTagBinding
financialservices.v1instances.deleteTagBinding
financialservices.v1instances.listEffectiveTags
financialservices.v1instances.listTagBindings

The following permissions have been added:

ftp.locations.get
ftp.locations.list
ftp.operations.cancel
ftp.operations.delete
ftp.operations.get
ftp.operations.list
ftp.servers.create
ftp.servers.delete
ftp.servers.get
ftp.servers.list
ftp.servers.start
ftp.servers.stop
ftp.servers.update
ftp.users.create
ftp.users.delete
ftp.users.get
ftp.users.list
ftp.users.update

The following permissions are supported in custom roles:

ftp.locations.get
ftp.locations.list
ftp.operations.cancel
ftp.operations.delete
ftp.operations.get
ftp.operations.list
ftp.servers.create
ftp.servers.delete
ftp.servers.get
ftp.servers.list
ftp.servers.start
ftp.servers.stop
ftp.servers.update
ftp.users.create
ftp.users.delete
ftp.users.get
ftp.users.list
ftp.users.update

The following permissions have reached General Availability (GA):

ftp.locations.get
ftp.locations.list
ftp.operations.cancel
ftp.operations.delete
ftp.operations.get
ftp.operations.list
ftp.servers.create
ftp.servers.delete
ftp.servers.get
ftp.servers.list
ftp.servers.start
ftp.servers.stop
ftp.servers.update
ftp.users.create
ftp.users.delete
ftp.users.get
ftp.users.list
ftp.users.update

The following permissions have been added:

policysimulator.activityBacktestResults.search
policysimulator.activityBacktests.evaluateRabPolicy
policysimulator.activityBacktests.list
policysimulator.activityBacktests.viewRabPolicy

The following permissions have been added:

prodactuation.uberProxyServices.create
prodactuation.uberProxyServices.delete
prodactuation.uberProxyServices.get
prodactuation.uberProxyServices.list
prodactuation.uberProxyServices.update

The following permissions are supported in custom roles:

prodactuation.uberProxyServices.create
prodactuation.uberProxyServices.delete
prodactuation.uberProxyServices.get
prodactuation.uberProxyServices.list
prodactuation.uberProxyServices.update

The following permissions have been added to the App Management Viewer role (roles/apphub.appManagementViewer):

auditmanager.auditReports.get
auditmanager.auditReports.list
auditmanager.auditSchedules.get
auditmanager.auditSchedules.list
auditmanager.billingSettings.get
auditmanager.controlReports.get
auditmanager.controlReports.list
auditmanager.controls.list
auditmanager.findings.list
auditmanager.locations.get
auditmanager.locations.list
auditmanager.operations.get
auditmanager.operations.list
auditmanager.resourceEnrollmentStatuses.get
auditmanager.resourceEnrollmentStatuses.list
cloudsecuritycompliance.auditReports.get
cloudsecuritycompliance.auditReports.list
cloudsecuritycompliance.billingSettings.get
cloudsecuritycompliance.cloudControlDeployments.get
cloudsecuritycompliance.cloudControlDeployments.list
cloudsecuritycompliance.cloudControlPredictions.get
cloudsecuritycompliance.cloudControlPredictions.list
cloudsecuritycompliance.cloudControls.get
cloudsecuritycompliance.cloudControls.list
cloudsecuritycompliance.cmEnrollments.get
cloudsecuritycompliance.controlComplianceSummaries.list
cloudsecuritycompliance.controlReports.get
cloudsecuritycompliance.controls.get
cloudsecuritycompliance.controls.list
cloudsecuritycompliance.findingSummaries.list
cloudsecuritycompliance.findings.list
cloudsecuritycompliance.frameworkAudits.get
cloudsecuritycompliance.frameworkAudits.list
cloudsecuritycompliance.frameworkComplianceReports.aggregate
cloudsecuritycompliance.frameworkComplianceReports.get
cloudsecuritycompliance.frameworkComplianceSummaries.list
cloudsecuritycompliance.frameworkDeployments.get
cloudsecuritycompliance.frameworkDeployments.list
cloudsecuritycompliance.frameworks.get
cloudsecuritycompliance.frameworks.list
cloudsecuritycompliance.locations.get
cloudsecuritycompliance.locations.list
cloudsecuritycompliance.operations.get
cloudsecuritycompliance.operations.list
cloudsecuritycompliance.resourceEnrollmentStatuses.get
cloudsecuritycompliance.resourceEnrollmentStatuses.list

The following permissions have been added to the Google Batch Service Agent role (roles/batch.serviceAgent):

compute.reservationSlots.get
compute.reservationSlots.list
compute.reservationSlots.update

The following permissions have been added to the Cloud TPU V2 API Service Agent role (roles/cloudtpu.serviceAgent):

compute.reservationSlots.get
compute.reservationSlots.list
compute.reservationSlots.update

The following permissions have been added to the Cloud Composer API Service Agent role (roles/composer.serviceAgent):

compute.reservationSlots.get
compute.reservationSlots.list
compute.reservationSlots.update

The following permissions have been added to the Compute Instance Admin (beta) role (roles/compute.instanceAdmin):

compute.reservationSlots.get
compute.reservationSlots.list
compute.reservationSlots.update

The following permissions have been added to the Compute Instance Admin (v1) role (roles/compute.instanceAdmin.v1):

compute.reservationSlots.get
compute.reservationSlots.list
compute.reservationSlots.update

The following permissions have been added to the Kubernetes Engine Service Agent role (roles/container.serviceAgent):

compute.reservationSlots.get
compute.reservationSlots.list
compute.reservationSlots.update

The following permissions have been added to the Cloud Dataflow Service Agent role (roles/dataflow.serviceAgent):

compute.reservationSlots.get
compute.reservationSlots.list
compute.reservationSlots.update

The following permissions have been added to the Dataplex Catalog Admin role (roles/dataplex.catalogAdmin):

dataplex.locations.get
dataplex.locations.list

The following permissions have been added to the Dataproc Service Agent role (roles/dataproc.serviceAgent):

compute.reservationSlots.get
compute.reservationSlots.list
compute.reservationSlots.update

The following permissions have been added to the Application Design Center Admin role (roles/designcenter.admin):

auditmanager.auditReports.get
auditmanager.auditReports.list
auditmanager.auditSchedules.get
auditmanager.auditSchedules.list
auditmanager.billingSettings.get
auditmanager.controlReports.get
auditmanager.controlReports.list
auditmanager.controls.list
auditmanager.findings.list
auditmanager.locations.get
auditmanager.locations.list
auditmanager.operations.get
auditmanager.operations.list
auditmanager.resourceEnrollmentStatuses.get
auditmanager.resourceEnrollmentStatuses.list
cloudsecuritycompliance.auditReports.get
cloudsecuritycompliance.auditReports.list
cloudsecuritycompliance.billingSettings.get
cloudsecuritycompliance.cloudControlDeployments.get
cloudsecuritycompliance.cloudControlDeployments.list
cloudsecuritycompliance.cloudControlPredictions.get
cloudsecuritycompliance.cloudControlPredictions.list
cloudsecuritycompliance.cloudControls.get
cloudsecuritycompliance.cloudControls.list
cloudsecuritycompliance.cmEnrollments.get
cloudsecuritycompliance.controlComplianceSummaries.list
cloudsecuritycompliance.controlReports.get
cloudsecuritycompliance.controls.get
cloudsecuritycompliance.controls.list
cloudsecuritycompliance.findingSummaries.list
cloudsecuritycompliance.findings.list
cloudsecuritycompliance.frameworkAudits.get
cloudsecuritycompliance.frameworkAudits.list
cloudsecuritycompliance.frameworkComplianceReports.aggregate
cloudsecuritycompliance.frameworkComplianceReports.get
cloudsecuritycompliance.frameworkComplianceSummaries.list
cloudsecuritycompliance.frameworkDeployments.get
cloudsecuritycompliance.frameworkDeployments.list
cloudsecuritycompliance.frameworks.get
cloudsecuritycompliance.frameworks.list
cloudsecuritycompliance.locations.get
cloudsecuritycompliance.locations.list
cloudsecuritycompliance.operations.get
cloudsecuritycompliance.operations.list
cloudsecuritycompliance.resourceEnrollmentStatuses.get
cloudsecuritycompliance.resourceEnrollmentStatuses.list

The following permissions have been added to the Application Admin role (roles/designcenter.applicationAdmin):

auditmanager.auditReports.get
auditmanager.auditReports.list
auditmanager.auditSchedules.get
auditmanager.auditSchedules.list
auditmanager.billingSettings.get
auditmanager.controlReports.get
auditmanager.controlReports.list
auditmanager.controls.list
auditmanager.findings.list
auditmanager.locations.get
auditmanager.locations.list
auditmanager.operations.get
auditmanager.operations.list
auditmanager.resourceEnrollmentStatuses.get
auditmanager.resourceEnrollmentStatuses.list
cloudsecuritycompliance.auditReports.get
cloudsecuritycompliance.auditReports.list
cloudsecuritycompliance.billingSettings.get
cloudsecuritycompliance.cloudControlDeployments.get
cloudsecuritycompliance.cloudControlDeployments.list
cloudsecuritycompliance.cloudControlPredictions.get
cloudsecuritycompliance.cloudControlPredictions.list
cloudsecuritycompliance.cloudControls.get
cloudsecuritycompliance.cloudControls.list
cloudsecuritycompliance.cmEnrollments.get
cloudsecuritycompliance.controlComplianceSummaries.list
cloudsecuritycompliance.controlReports.get
cloudsecuritycompliance.controls.get
cloudsecuritycompliance.controls.list
cloudsecuritycompliance.findingSummaries.list
cloudsecuritycompliance.findings.list
cloudsecuritycompliance.frameworkAudits.get
cloudsecuritycompliance.frameworkAudits.list
cloudsecuritycompliance.frameworkComplianceReports.aggregate
cloudsecuritycompliance.frameworkComplianceReports.get
cloudsecuritycompliance.frameworkComplianceSummaries.list
cloudsecuritycompliance.frameworkDeployments.get
cloudsecuritycompliance.frameworkDeployments.list
cloudsecuritycompliance.frameworks.get
cloudsecuritycompliance.frameworks.list
cloudsecuritycompliance.locations.get
cloudsecuritycompliance.locations.list
cloudsecuritycompliance.operations.get
cloudsecuritycompliance.operations.list
cloudsecuritycompliance.resourceEnrollmentStatuses.get
cloudsecuritycompliance.resourceEnrollmentStatuses.list

The following permissions have been added to the Application Editor role (roles/designcenter.applicationEditor):

auditmanager.auditReports.get
auditmanager.auditReports.list
auditmanager.auditSchedules.get
auditmanager.auditSchedules.list
auditmanager.billingSettings.get
auditmanager.controlReports.get
auditmanager.controlReports.list
auditmanager.controls.list
auditmanager.findings.list
auditmanager.locations.get
auditmanager.locations.list
auditmanager.operations.get
auditmanager.operations.list
auditmanager.resourceEnrollmentStatuses.get
auditmanager.resourceEnrollmentStatuses.list
cloudsecuritycompliance.auditReports.get
cloudsecuritycompliance.auditReports.list
cloudsecuritycompliance.billingSettings.get
cloudsecuritycompliance.cloudControlDeployments.get
cloudsecuritycompliance.cloudControlDeployments.list
cloudsecuritycompliance.cloudControlPredictions.get
cloudsecuritycompliance.cloudControlPredictions.list
cloudsecuritycompliance.cloudControls.get
cloudsecuritycompliance.cloudControls.list
cloudsecuritycompliance.cmEnrollments.get
cloudsecuritycompliance.controlComplianceSummaries.list
cloudsecuritycompliance.controlReports.get
cloudsecuritycompliance.controls.get
cloudsecuritycompliance.controls.list
cloudsecuritycompliance.findingSummaries.list
cloudsecuritycompliance.findings.list
cloudsecuritycompliance.frameworkAudits.get
cloudsecuritycompliance.frameworkAudits.list
cloudsecuritycompliance.frameworkComplianceReports.aggregate
cloudsecuritycompliance.frameworkComplianceReports.get
cloudsecuritycompliance.frameworkComplianceSummaries.list
cloudsecuritycompliance.frameworkDeployments.get
cloudsecuritycompliance.frameworkDeployments.list
cloudsecuritycompliance.frameworks.get
cloudsecuritycompliance.frameworks.list
cloudsecuritycompliance.locations.get
cloudsecuritycompliance.locations.list
cloudsecuritycompliance.operations.get
cloudsecuritycompliance.operations.list
cloudsecuritycompliance.resourceEnrollmentStatuses.get
cloudsecuritycompliance.resourceEnrollmentStatuses.list

The following permissions have been added to the Application Viewer role (roles/designcenter.applicationViewer):

auditmanager.auditReports.get
auditmanager.auditReports.list
auditmanager.auditSchedules.get
auditmanager.auditSchedules.list
auditmanager.billingSettings.get
auditmanager.controlReports.get
auditmanager.controlReports.list
auditmanager.controls.list
auditmanager.findings.list
auditmanager.locations.get
auditmanager.locations.list
auditmanager.operations.get
auditmanager.operations.list
auditmanager.resourceEnrollmentStatuses.get
auditmanager.resourceEnrollmentStatuses.list
cloudsecuritycompliance.auditReports.get
cloudsecuritycompliance.auditReports.list
cloudsecuritycompliance.billingSettings.get
cloudsecuritycompliance.cloudControlDeployments.get
cloudsecuritycompliance.cloudControlDeployments.list
cloudsecuritycompliance.cloudControlPredictions.get
cloudsecuritycompliance.cloudControlPredictions.list
cloudsecuritycompliance.cloudControls.get
cloudsecuritycompliance.cloudControls.list
cloudsecuritycompliance.cmEnrollments.get
cloudsecuritycompliance.controlComplianceSummaries.list
cloudsecuritycompliance.controlReports.get
cloudsecuritycompliance.controls.get
cloudsecuritycompliance.controls.list
cloudsecuritycompliance.findingSummaries.list
cloudsecuritycompliance.findings.list
cloudsecuritycompliance.frameworkAudits.get
cloudsecuritycompliance.frameworkAudits.list
cloudsecuritycompliance.frameworkComplianceReports.aggregate
cloudsecuritycompliance.frameworkComplianceReports.get
cloudsecuritycompliance.frameworkComplianceSummaries.list
cloudsecuritycompliance.frameworkDeployments.get
cloudsecuritycompliance.frameworkDeployments.list
cloudsecuritycompliance.frameworks.get
cloudsecuritycompliance.frameworks.list
cloudsecuritycompliance.locations.get
cloudsecuritycompliance.locations.list
cloudsecuritycompliance.operations.get
cloudsecuritycompliance.operations.list
cloudsecuritycompliance.resourceEnrollmentStatuses.get
cloudsecuritycompliance.resourceEnrollmentStatuses.list

The following permissions have been added to the Designcenter Editor role (roles/designcenter.editor):

auditmanager.auditReports.get
auditmanager.auditReports.list
auditmanager.auditSchedules.get
auditmanager.auditSchedules.list
auditmanager.billingSettings.get
auditmanager.controlReports.get
auditmanager.controlReports.list
auditmanager.controls.list
auditmanager.findings.list
auditmanager.locations.get
auditmanager.locations.list
auditmanager.operations.get
auditmanager.operations.list
auditmanager.resourceEnrollmentStatuses.get
auditmanager.resourceEnrollmentStatuses.list
cloudsecuritycompliance.auditReports.get
cloudsecuritycompliance.auditReports.list
cloudsecuritycompliance.billingSettings.get
cloudsecuritycompliance.cloudControlDeployments.get
cloudsecuritycompliance.cloudControlDeployments.list
cloudsecuritycompliance.cloudControlPredictions.get
cloudsecuritycompliance.cloudControlPredictions.list
cloudsecuritycompliance.cloudControls.get
cloudsecuritycompliance.cloudControls.list
cloudsecuritycompliance.cmEnrollments.get
cloudsecuritycompliance.controlComplianceSummaries.list
cloudsecuritycompliance.controlReports.get
cloudsecuritycompliance.controls.get
cloudsecuritycompliance.controls.list
cloudsecuritycompliance.findingSummaries.list
cloudsecuritycompliance.findings.list
cloudsecuritycompliance.frameworkAudits.get