Predefined Application Integration IAM roles

Predefined roles give granular access to specific Google Cloud resources. These roles are created and maintained by Google. Google automatically updates their permissions as necessary, such as when Google Cloud adds new features or services.

The following table lists all the predefined IAM roles for Application Integration:

Cloud Integrations roles and permissions

This page lists the IAM roles and permissions for Cloud Integrations. To search through all roles and permissions, see the role and permission index.

Cloud Integrations roles

Role Permissions

Role	Permissions
Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) A user that has full access to all Apigee integrations.	`connectors.actions.` `connectors.actions.execute` `connectors.actions.list` `connectors.connections.executeSqlQuery` `connectors.entities.` `connectors.entities.create` `connectors.entities.delete` `connectors.entities.deleteEntitiesWithConditions` `connectors.entities.get` `connectors.entities.list` `connectors.entities.update` `connectors.entities.updateEntitiesWithConditions` `connectors.entityTypes.list` `integrations.apigeeAuthConfigs.` `integrations.apigeeAuthConfigs.create` `integrations.apigeeAuthConfigs.delete` `integrations.apigeeAuthConfigs.get` `integrations.apigeeAuthConfigs.list` `integrations.apigeeAuthConfigs.update` `integrations.apigeeCertificates.` `integrations.apigeeCertificates.create` `integrations.apigeeCertificates.delete` `integrations.apigeeCertificates.get` `integrations.apigeeCertificates.list` `integrations.apigeeCertificates.update` `integrations.apigeeExecutions.list` `integrations.apigeeIntegrationVers.` `integrations.apigeeIntegrationVers.create` `integrations.apigeeIntegrationVers.delete` `integrations.apigeeIntegrationVers.deploy` `integrations.apigeeIntegrationVers.get` `integrations.apigeeIntegrationVers.list` `integrations.apigeeIntegrationVers.update` `integrations.apigeeIntegrations.` `integrations.apigeeIntegrations.invoke` `integrations.apigeeIntegrations.list` `integrations.apigeeSfdcChannels.` `integrations.apigeeSfdcChannels.create` `integrations.apigeeSfdcChannels.delete` `integrations.apigeeSfdcChannels.get` `integrations.apigeeSfdcChannels.list` `integrations.apigeeSfdcChannels.update` `integrations.apigeeSfdcInstances.` `integrations.apigeeSfdcInstances.create` `integrations.apigeeSfdcInstances.delete` `integrations.apigeeSfdcInstances.get` `integrations.apigeeSfdcInstances.list` `integrations.apigeeSfdcInstances.update` `integrations.apigeeSuspensions.` `integrations.apigeeSuspensions.lift` `integrations.apigeeSuspensions.list` `integrations.apigeeSuspensions.resolve` `integrations.authConfigs.` `integrations.authConfigs.create` `integrations.authConfigs.delete` `integrations.authConfigs.get` `integrations.authConfigs.list` `integrations.authConfigs.update` `integrations.certificates.` `integrations.certificates.create` `integrations.certificates.delete` `integrations.certificates.get` `integrations.certificates.list` `integrations.certificates.update` `integrations.executions.get` `integrations.executions.list` `integrations.integrationVersions.create` `integrations.integrationVersions.delete` `integrations.integrationVersions.deploy` `integrations.integrationVersions.get` `integrations.integrationVersions.list` `integrations.integrationVersions.update` `integrations.integrations.create` `integrations.integrations.delete` `integrations.integrations.deploy` `integrations.integrations.get` `integrations.integrations.invoke` `integrations.integrations.list` `integrations.integrations.update` `integrations.sfdcChannels.` `integrations.sfdcChannels.create` `integrations.sfdcChannels.delete` `integrations.sfdcChannels.get` `integrations.sfdcChannels.list` `integrations.sfdcChannels.update` `integrations.sfdcInstances.` `integrations.sfdcInstances.create` `integrations.sfdcInstances.delete` `integrations.sfdcInstances.get` `integrations.sfdcInstances.list` `integrations.sfdcInstances.update` `integrations.suspensions.` `integrations.suspensions.lift` `integrations.suspensions.list` `integrations.suspensions.resolve` `resourcemanager.projects.get` `resourcemanager.projects.list`
Apigee Integration Deployer (`roles/integrations.apigeeIntegrationDeployerRole`) A developer that can deploy/undeploy Apigee integrations to the integration runtime.	`integrations.apigeeIntegrationVers.deploy` `integrations.apigeeIntegrationVers.get` `integrations.apigeeIntegrationVers.list` `integrations.apigeeIntegrations.list` `integrations.integrationVersions.deploy` `integrations.integrationVersions.get` `integrations.integrationVersions.list` `integrations.integrations.deploy` `integrations.integrations.get` `integrations.integrations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) A developer that can list, create and update Apigee integrations.	`connectors.actions.` `connectors.actions.execute` `connectors.actions.list` `connectors.connections.executeSqlQuery` `connectors.entities.` `connectors.entities.create` `connectors.entities.delete` `connectors.entities.deleteEntitiesWithConditions` `connectors.entities.get` `connectors.entities.list` `connectors.entities.update` `connectors.entities.updateEntitiesWithConditions` `connectors.entityTypes.list` `integrations.apigeeAuthConfigs.create` `integrations.apigeeAuthConfigs.get` `integrations.apigeeAuthConfigs.list` `integrations.apigeeAuthConfigs.update` `integrations.apigeeCertificates.create` `integrations.apigeeCertificates.get` `integrations.apigeeCertificates.list` `integrations.apigeeCertificates.update` `integrations.apigeeExecutions.list` `integrations.apigeeIntegrationVers.` `integrations.apigeeIntegrationVers.create` `integrations.apigeeIntegrationVers.delete` `integrations.apigeeIntegrationVers.deploy` `integrations.apigeeIntegrationVers.get` `integrations.apigeeIntegrationVers.list` `integrations.apigeeIntegrationVers.update` `integrations.apigeeIntegrations.` `integrations.apigeeIntegrations.invoke` `integrations.apigeeIntegrations.list` `integrations.apigeeSfdcChannels.create` `integrations.apigeeSfdcChannels.get` `integrations.apigeeSfdcChannels.list` `integrations.apigeeSfdcChannels.update` `integrations.apigeeSfdcInstances.create` `integrations.apigeeSfdcInstances.get` `integrations.apigeeSfdcInstances.list` `integrations.apigeeSfdcInstances.update` `integrations.authConfigs.create` `integrations.authConfigs.get` `integrations.authConfigs.list` `integrations.authConfigs.update` `integrations.certificates.get` `integrations.executions.get` `integrations.executions.list` `integrations.integrationVersions.create` `integrations.integrationVersions.delete` `integrations.integrationVersions.deploy` `integrations.integrationVersions.get` `integrations.integrationVersions.list` `integrations.integrationVersions.update` `integrations.integrations.create` `integrations.integrations.get` `integrations.integrations.invoke` `integrations.integrations.list` `integrations.integrations.update` `integrations.sfdcChannels.` `integrations.sfdcChannels.create` `integrations.sfdcChannels.delete` `integrations.sfdcChannels.get` `integrations.sfdcChannels.list` `integrations.sfdcChannels.update` `integrations.sfdcInstances.` `integrations.sfdcInstances.create` `integrations.sfdcInstances.delete` `integrations.sfdcInstances.get` `integrations.sfdcInstances.list` `integrations.sfdcInstances.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Apigee Integration Invoker (`roles/integrations.apigeeIntegrationInvokerRole`) A role that can invoke Apigee integrations.	`connectors.actions.` `connectors.actions.execute` `connectors.actions.list` `connectors.connections.executeSqlQuery` `connectors.entities.` `connectors.entities.create` `connectors.entities.delete` `connectors.entities.deleteEntitiesWithConditions` `connectors.entities.get` `connectors.entities.list` `connectors.entities.update` `connectors.entities.updateEntitiesWithConditions` `connectors.entityTypes.list` `integrations.apigeeExecutions.list` `integrations.apigeeIntegrationVers.get` `integrations.apigeeIntegrationVers.list` `integrations.apigeeIntegrations.*` `integrations.apigeeIntegrations.invoke` `integrations.apigeeIntegrations.list` `integrations.executions.get` `integrations.executions.list` `integrations.integrationVersions.get` `integrations.integrationVersions.invoke` `integrations.integrationVersions.list` `integrations.integrations.get` `integrations.integrations.invoke` `integrations.integrations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Apigee Integration Viewer (`roles/integrations.apigeeIntegrationsViewer`) A developer that can list and view Apigee integrations.	`integrations.apigeeAuthConfigs.list` `integrations.apigeeCertificates.list` `integrations.apigeeIntegrationVers.get` `integrations.apigeeIntegrationVers.list` `integrations.apigeeIntegrations.list` `integrations.apigeeSfdcChannels.list` `integrations.apigeeSfdcInstances.list` `integrations.authConfigs.get` `integrations.authConfigs.list` `integrations.certificates.get` `integrations.certificates.list` `integrations.executions.get` `integrations.executions.list` `integrations.integrationVersions.get` `integrations.integrationVersions.list` `integrations.integrations.get` `integrations.integrations.list` `integrations.sfdcChannels.list` `integrations.sfdcInstances.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Apigee Integration Approver (`roles/integrations.apigeeSuspensionResolver`) A role that can approve / reject Apigee integrations that contain a suspension/wait task.	`integrations.apigeeSuspensions.` `integrations.apigeeSuspensions.lift` `integrations.apigeeSuspensions.list` `integrations.apigeeSuspensions.resolve` `integrations.suspensions.` `integrations.suspensions.lift` `integrations.suspensions.list` `integrations.suspensions.resolve` `resourcemanager.projects.get` `resourcemanager.projects.list`
Certificate Viewer (`roles/integrations.certificateViewer`) A developer that can list and view Certificates.	`integrations.certificates.get` `resourcemanager.projects.get` `resourcemanager.projects.list`
Application Integration Admin (`roles/integrations.integrationAdmin`) A user that has full access (CRUD) to all integrations.	`integrations.apigeeAuthConfigs.` `integrations.apigeeAuthConfigs.create` `integrations.apigeeAuthConfigs.delete` `integrations.apigeeAuthConfigs.get` `integrations.apigeeAuthConfigs.list` `integrations.apigeeAuthConfigs.update` `integrations.apigeeCertificates.` `integrations.apigeeCertificates.create` `integrations.apigeeCertificates.delete` `integrations.apigeeCertificates.get` `integrations.apigeeCertificates.list` `integrations.apigeeCertificates.update` `integrations.apigeeExecutions.list` `integrations.apigeeIntegrationVers.` `integrations.apigeeIntegrationVers.create` `integrations.apigeeIntegrationVers.delete` `integrations.apigeeIntegrationVers.deploy` `integrations.apigeeIntegrationVers.get` `integrations.apigeeIntegrationVers.list` `integrations.apigeeIntegrationVers.update` `integrations.apigeeIntegrations.` `integrations.apigeeIntegrations.invoke` `integrations.apigeeIntegrations.list` `integrations.apigeeSfdcChannels.` `integrations.apigeeSfdcChannels.create` `integrations.apigeeSfdcChannels.delete` `integrations.apigeeSfdcChannels.get` `integrations.apigeeSfdcChannels.list` `integrations.apigeeSfdcChannels.update` `integrations.apigeeSfdcInstances.` `integrations.apigeeSfdcInstances.create` `integrations.apigeeSfdcInstances.delete` `integrations.apigeeSfdcInstances.get` `integrations.apigeeSfdcInstances.list` `integrations.apigeeSfdcInstances.update` `integrations.apigeeSuspensions.` `integrations.apigeeSuspensions.lift` `integrations.apigeeSuspensions.list` `integrations.apigeeSuspensions.resolve` `integrations.authConfigs.` `integrations.authConfigs.create` `integrations.authConfigs.delete` `integrations.authConfigs.get` `integrations.authConfigs.list` `integrations.authConfigs.update` `integrations.certificates.` `integrations.certificates.create` `integrations.certificates.delete` `integrations.certificates.get` `integrations.certificates.list` `integrations.certificates.update` `integrations.executions.` `integrations.executions.cancel` `integrations.executions.get` `integrations.executions.list` `integrations.executions.replay` `integrations.integrationVersions.create` `integrations.integrationVersions.delete` `integrations.integrationVersions.deploy` `integrations.integrationVersions.get` `integrations.integrationVersions.list` `integrations.integrationVersions.update` `integrations.integrations.` `integrations.integrations.create` `integrations.integrations.delete` `integrations.integrations.deploy` `integrations.integrations.generateOpenApiSpec` `integrations.integrations.get` `integrations.integrations.invoke` `integrations.integrations.list` `integrations.integrations.update` `integrations.sfdcChannels.` `integrations.sfdcChannels.create` `integrations.sfdcChannels.delete` `integrations.sfdcChannels.get` `integrations.sfdcChannels.list` `integrations.sfdcChannels.update` `integrations.sfdcInstances.` `integrations.sfdcInstances.create` `integrations.sfdcInstances.delete` `integrations.sfdcInstances.get` `integrations.sfdcInstances.list` `integrations.sfdcInstances.update` `integrations.suspensions.` `integrations.suspensions.lift` `integrations.suspensions.list` `integrations.suspensions.resolve` `integrations.templates.` `integrations.templates.create` `integrations.templates.delete` `integrations.templates.get` `integrations.templates.list` `integrations.templates.share` `integrations.templates.unshare` `integrations.templates.update` `integrations.templates.use` `integrations.testCases.` `integrations.testCases.create` `integrations.testCases.delete` `integrations.testCases.get` `integrations.testCases.invoke` `integrations.testCases.list` `integrations.testCases.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Application Integration Deployer (`roles/integrations.integrationDeployer`) A developer that can deploy/undeploy integrations to the integration runtime.	`integrations.apigeeIntegrationVers.deploy` `integrations.apigeeIntegrationVers.get` `integrations.apigeeIntegrationVers.list` `integrations.apigeeIntegrations.list` `integrations.integrationVersions.deploy` `integrations.integrationVersions.get` `integrations.integrationVersions.list` `integrations.integrations.deploy` `integrations.integrations.get` `integrations.integrations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Application Integration Editor (`roles/integrations.integrationEditor`) A developer that can list, create and update integrations.	`integrations.apigeeAuthConfigs.create` `integrations.apigeeAuthConfigs.get` `integrations.apigeeAuthConfigs.list` `integrations.apigeeAuthConfigs.update` `integrations.apigeeCertificates.create` `integrations.apigeeCertificates.get` `integrations.apigeeCertificates.list` `integrations.apigeeCertificates.update` `integrations.apigeeExecutions.list` `integrations.apigeeIntegrationVers.` `integrations.apigeeIntegrationVers.create` `integrations.apigeeIntegrationVers.delete` `integrations.apigeeIntegrationVers.deploy` `integrations.apigeeIntegrationVers.get` `integrations.apigeeIntegrationVers.list` `integrations.apigeeIntegrationVers.update` `integrations.apigeeIntegrations.` `integrations.apigeeIntegrations.invoke` `integrations.apigeeIntegrations.list` `integrations.apigeeSfdcChannels.create` `integrations.apigeeSfdcChannels.get` `integrations.apigeeSfdcChannels.list` `integrations.apigeeSfdcChannels.update` `integrations.apigeeSfdcInstances.create` `integrations.apigeeSfdcInstances.get` `integrations.apigeeSfdcInstances.list` `integrations.apigeeSfdcInstances.update` `integrations.authConfigs.create` `integrations.authConfigs.get` `integrations.authConfigs.list` `integrations.authConfigs.update` `integrations.certificates.get` `integrations.executions.` `integrations.executions.cancel` `integrations.executions.get` `integrations.executions.list` `integrations.executions.replay` `integrations.integrationVersions.create` `integrations.integrationVersions.delete` `integrations.integrationVersions.deploy` `integrations.integrationVersions.get` `integrations.integrationVersions.list` `integrations.integrationVersions.update` `integrations.integrations.create` `integrations.integrations.generateOpenApiSpec` `integrations.integrations.get` `integrations.integrations.invoke` `integrations.integrations.list` `integrations.integrations.update` `integrations.sfdcChannels.` `integrations.sfdcChannels.create` `integrations.sfdcChannels.delete` `integrations.sfdcChannels.get` `integrations.sfdcChannels.list` `integrations.sfdcChannels.update` `integrations.sfdcInstances.` `integrations.sfdcInstances.create` `integrations.sfdcInstances.delete` `integrations.sfdcInstances.get` `integrations.sfdcInstances.list` `integrations.sfdcInstances.update` `integrations.templates.` `integrations.templates.create` `integrations.templates.delete` `integrations.templates.get` `integrations.templates.list` `integrations.templates.share` `integrations.templates.unshare` `integrations.templates.update` `integrations.templates.use` `integrations.testCases.*` `integrations.testCases.create` `integrations.testCases.delete` `integrations.testCases.get` `integrations.testCases.invoke` `integrations.testCases.list` `integrations.testCases.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Application Integration Invoker (`roles/integrations.integrationInvoker`) A role that can invoke integrations.	`integrations.apigeeExecutions.list` `integrations.apigeeIntegrationVers.get` `integrations.apigeeIntegrationVers.list` `integrations.apigeeIntegrations.` `integrations.apigeeIntegrations.invoke` `integrations.apigeeIntegrations.list` `integrations.executions.` `integrations.executions.cancel` `integrations.executions.get` `integrations.executions.list` `integrations.executions.replay` `integrations.integrationVersions.get` `integrations.integrationVersions.invoke` `integrations.integrationVersions.list` `integrations.integrations.get` `integrations.integrations.invoke` `integrations.integrations.list` `integrations.testCases.get` `integrations.testCases.invoke` `integrations.testCases.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Application Integration Viewer (`roles/integrations.integrationViewer`) A developer that can list and view integrations.	`integrations.apigeeAuthConfigs.list` `integrations.apigeeCertificates.list` `integrations.apigeeIntegrationVers.get` `integrations.apigeeIntegrationVers.list` `integrations.apigeeIntegrations.list` `integrations.apigeeSfdcChannels.list` `integrations.apigeeSfdcInstances.list` `integrations.authConfigs.get` `integrations.authConfigs.list` `integrations.certificates.get` `integrations.certificates.list` `integrations.executions.get` `integrations.executions.list` `integrations.integrationVersions.get` `integrations.integrationVersions.list` `integrations.integrations.generateOpenApiSpec` `integrations.integrations.get` `integrations.integrations.list` `integrations.sfdcChannels.list` `integrations.sfdcInstances.list` `integrations.templates.get` `integrations.templates.list` `integrations.testCases.get` `integrations.testCases.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Security Integration Admin ^Beta (`roles/integrations.securityIntegrationAdmin`) A user that has full access to all Security integrations.	`integrations.securityAuthConfigs.` `integrations.securityAuthConfigs.create` `integrations.securityAuthConfigs.delete` `integrations.securityAuthConfigs.get` `integrations.securityAuthConfigs.list` `integrations.securityAuthConfigs.update` `integrations.securityExecutions.` `integrations.securityExecutions.cancel` `integrations.securityExecutions.get` `integrations.securityExecutions.list` `integrations.securityIntegTempVers.` `integrations.securityIntegTempVers.create` `integrations.securityIntegTempVers.get` `integrations.securityIntegTempVers.list` `integrations.securityIntegrationVers.` `integrations.securityIntegrationVers.create` `integrations.securityIntegrationVers.delete` `integrations.securityIntegrationVers.deploy` `integrations.securityIntegrationVers.get` `integrations.securityIntegrationVers.list` `integrations.securityIntegrationVers.update` `integrations.securityIntegrations.*` `integrations.securityIntegrations.invoke` `integrations.securityIntegrations.list`
Application Integration Service Agent (`roles/integrations.serviceAgent`) Service agent that grants access to execute an integration. Warning: Do not grant service agent roles to any principals except service agents.	`cloudfunctions.functions.invoke` `cloudscheduler.jobs.create` `cloudscheduler.jobs.delete` `cloudscheduler.jobs.enable` `cloudscheduler.jobs.fullView` `cloudscheduler.jobs.get` `cloudscheduler.jobs.pause` `cloudscheduler.jobs.run` `cloudscheduler.jobs.update` `cloudscheduler.locations.` `cloudscheduler.locations.get` `cloudscheduler.locations.list` `connectors.actions.` `connectors.actions.execute` `connectors.actions.list` `connectors.connections.executeSqlQuery` `connectors.connections.get` `connectors.entities.` `connectors.entities.create` `connectors.entities.delete` `connectors.entities.deleteEntitiesWithConditions` `connectors.entities.get` `connectors.entities.list` `connectors.entities.update` `connectors.entities.updateEntitiesWithConditions` `connectors.entityTypes.list` `iam.serviceAccounts.getAccessToken` `iam.serviceAccounts.getOpenIdToken` `integrations.apigeeAuthConfigs.` `integrations.apigeeAuthConfigs.create` `integrations.apigeeAuthConfigs.delete` `integrations.apigeeAuthConfigs.get` `integrations.apigeeAuthConfigs.list` `integrations.apigeeAuthConfigs.update` `integrations.apigeeCertificates.` `integrations.apigeeCertificates.create` `integrations.apigeeCertificates.delete` `integrations.apigeeCertificates.get` `integrations.apigeeCertificates.list` `integrations.apigeeCertificates.update` `integrations.apigeeExecutions.list` `integrations.apigeeIntegrationVers.` `integrations.apigeeIntegrationVers.create` `integrations.apigeeIntegrationVers.delete` `integrations.apigeeIntegrationVers.deploy` `integrations.apigeeIntegrationVers.get` `integrations.apigeeIntegrationVers.list` `integrations.apigeeIntegrationVers.update` `integrations.apigeeIntegrations.` `integrations.apigeeIntegrations.invoke` `integrations.apigeeIntegrations.list` `integrations.apigeeSfdcChannels.` `integrations.apigeeSfdcChannels.create` `integrations.apigeeSfdcChannels.delete` `integrations.apigeeSfdcChannels.get` `integrations.apigeeSfdcChannels.list` `integrations.apigeeSfdcChannels.update` `integrations.apigeeSfdcInstances.` `integrations.apigeeSfdcInstances.create` `integrations.apigeeSfdcInstances.delete` `integrations.apigeeSfdcInstances.get` `integrations.apigeeSfdcInstances.list` `integrations.apigeeSfdcInstances.update` `integrations.apigeeSuspensions.` `integrations.apigeeSuspensions.lift` `integrations.apigeeSuspensions.list` `integrations.apigeeSuspensions.resolve` `integrations.authConfigs.` `integrations.authConfigs.create` `integrations.authConfigs.delete` `integrations.authConfigs.get` `integrations.authConfigs.list` `integrations.authConfigs.update` `integrations.certificates.` `integrations.certificates.create` `integrations.certificates.delete` `integrations.certificates.get` `integrations.certificates.list` `integrations.certificates.update` `integrations.executions.list` `integrations.integrationVersions.create` `integrations.integrationVersions.delete` `integrations.integrationVersions.deploy` `integrations.integrationVersions.get` `integrations.integrationVersions.list` `integrations.integrationVersions.update` `integrations.integrations.create` `integrations.integrations.delete` `integrations.integrations.deploy` `integrations.integrations.get` `integrations.integrations.invoke` `integrations.integrations.list` `integrations.integrations.update` `integrations.sfdcChannels.` `integrations.sfdcChannels.create` `integrations.sfdcChannels.delete` `integrations.sfdcChannels.get` `integrations.sfdcChannels.list` `integrations.sfdcChannels.update` `integrations.sfdcInstances.` `integrations.sfdcInstances.create` `integrations.sfdcInstances.delete` `integrations.sfdcInstances.get` `integrations.sfdcInstances.list` `integrations.sfdcInstances.update` `integrations.suspensions.*` `integrations.suspensions.lift` `integrations.suspensions.list` `integrations.suspensions.resolve` `pubsub.messageTransforms.validate` `pubsub.schemas.attach` `pubsub.schemas.create` `pubsub.schemas.delete` `pubsub.schemas.get` `pubsub.schemas.list` `pubsub.schemas.validate` `pubsub.snapshots.create` `pubsub.snapshots.delete` `pubsub.snapshots.get` `pubsub.snapshots.list` `pubsub.snapshots.seek` `pubsub.snapshots.update` `pubsub.subscriptions.consume` `pubsub.subscriptions.create` `pubsub.subscriptions.delete` `pubsub.subscriptions.get` `pubsub.subscriptions.list` `pubsub.subscriptions.update` `pubsub.topics.attachSubscription` `pubsub.topics.create` `pubsub.topics.delete` `pubsub.topics.detachSubscription` `pubsub.topics.get` `pubsub.topics.list` `pubsub.topics.publish` `pubsub.topics.update` `pubsub.topics.updateTag` `resourcemanager.projects.get` `resourcemanager.projects.list` `run.jobs.run` `run.routes.invoke` `serviceusage.quotas.get` `serviceusage.services.get` `serviceusage.services.list` `storage.buckets.create` `storage.buckets.get` `storage.buckets.list` `storage.buckets.update` `storage.objects.create` `storage.objects.get` `storage.objects.list` `storage.objects.update`
Application Integration SFDC Instance Admin (`roles/integrations.sfdcInstanceAdmin`) A user that has full access (CRUD) to all SFDC instances.	`integrations.sfdcChannels.` `integrations.sfdcChannels.create` `integrations.sfdcChannels.delete` `integrations.sfdcChannels.get` `integrations.sfdcChannels.list` `integrations.sfdcChannels.update` `integrations.sfdcInstances.` `integrations.sfdcInstances.create` `integrations.sfdcInstances.delete` `integrations.sfdcInstances.get` `integrations.sfdcInstances.list` `integrations.sfdcInstances.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Application Integration SFDC Instance Editor (`roles/integrations.sfdcInstanceEditor`) A developer that can list, create and update integrations.	`integrations.sfdcChannels.create` `integrations.sfdcChannels.get` `integrations.sfdcChannels.list` `integrations.sfdcChannels.update` `integrations.sfdcInstances.create` `integrations.sfdcInstances.get` `integrations.sfdcInstances.list` `integrations.sfdcInstances.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Application Integration SFDC Instance Viewer (`roles/integrations.sfdcInstanceViewer`) A developer that can list and view SFDC instances.	`integrations.sfdcChannels.get` `integrations.sfdcChannels.list` `integrations.sfdcInstances.get` `integrations.sfdcInstances.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Application Integration Approver (`roles/integrations.suspensionResolver`) A role that can resolve suspended integrations.	`integrations.apigeeSuspensions.` `integrations.apigeeSuspensions.lift` `integrations.apigeeSuspensions.list` `integrations.apigeeSuspensions.resolve` `integrations.suspensions.` `integrations.suspensions.lift` `integrations.suspensions.list` `integrations.suspensions.resolve` `resourcemanager.projects.get` `resourcemanager.projects.list`

Apigee Integration Admin

(roles/integrations.apigeeIntegrationAdminRole)

A user that has full access to all Apigee integrations.

connectors.actions.*

connectors.actions.execute
connectors.actions.list

connectors.connections.executeSqlQuery

connectors.entities.*

connectors.entities.create
connectors.entities.delete
connectors.entities.deleteEntitiesWithConditions
connectors.entities.get
connectors.entities.list
connectors.entities.update
connectors.entities.updateEntitiesWithConditions

connectors.entityTypes.list

integrations.apigeeAuthConfigs.*

integrations.apigeeAuthConfigs.create
integrations.apigeeAuthConfigs.delete
integrations.apigeeAuthConfigs.get
integrations.apigeeAuthConfigs.list
integrations.apigeeAuthConfigs.update

integrations.apigeeCertificates.*

integrations.apigeeCertificates.create
integrations.apigeeCertificates.delete
integrations.apigeeCertificates.get
integrations.apigeeCertificates.list
integrations.apigeeCertificates.update

integrations.apigeeExecutions.list

integrations.apigeeIntegrationVers.*

integrations.apigeeIntegrationVers.create
integrations.apigeeIntegrationVers.delete
integrations.apigeeIntegrationVers.deploy
integrations.apigeeIntegrationVers.get
integrations.apigeeIntegrationVers.list
integrations.apigeeIntegrationVers.update

integrations.apigeeIntegrations.*

integrations.apigeeIntegrations.invoke
integrations.apigeeIntegrations.list

integrations.apigeeSfdcChannels.*

integrations.apigeeSfdcChannels.create
integrations.apigeeSfdcChannels.delete
integrations.apigeeSfdcChannels.get
integrations.apigeeSfdcChannels.list
integrations.apigeeSfdcChannels.update

integrations.apigeeSfdcInstances.*

integrations.apigeeSfdcInstances.create
integrations.apigeeSfdcInstances.delete
integrations.apigeeSfdcInstances.get
integrations.apigeeSfdcInstances.list
integrations.apigeeSfdcInstances.update

integrations.apigeeSuspensions.*

integrations.apigeeSuspensions.lift
integrations.apigeeSuspensions.list
integrations.apigeeSuspensions.resolve

integrations.authConfigs.*

integrations.authConfigs.create
integrations.authConfigs.delete
integrations.authConfigs.get
integrations.authConfigs.list
integrations.authConfigs.update

integrations.certificates.*

integrations.certificates.create
integrations.certificates.delete
integrations.certificates.get
integrations.certificates.list
integrations.certificates.update

integrations.executions.get

integrations.executions.list

integrations.integrationVersions.create

integrations.integrationVersions.delete

integrations.integrationVersions.deploy

integrations.integrationVersions.get

integrations.integrationVersions.list

integrations.integrationVersions.update

integrations.integrations.create

integrations.integrations.delete

integrations.integrations.deploy

integrations.integrations.get

integrations.integrations.invoke

integrations.integrations.list

integrations.integrations.update

integrations.sfdcChannels.*

integrations.sfdcChannels.create
integrations.sfdcChannels.delete
integrations.sfdcChannels.get
integrations.sfdcChannels.list
integrations.sfdcChannels.update

integrations.sfdcInstances.*

integrations.sfdcInstances.create
integrations.sfdcInstances.delete
integrations.sfdcInstances.get
integrations.sfdcInstances.list
integrations.sfdcInstances.update

integrations.suspensions.*

integrations.suspensions.lift
integrations.suspensions.list
integrations.suspensions.resolve

resourcemanager.projects.get

resourcemanager.projects.list

Apigee Integration Deployer

(roles/integrations.apigeeIntegrationDeployerRole)

A developer that can deploy/undeploy Apigee integrations to the integration runtime.

integrations.apigeeIntegrationVers.deploy

integrations.apigeeIntegrationVers.get

integrations.apigeeIntegrationVers.list

integrations.apigeeIntegrations.list

integrations.integrationVersions.deploy

integrations.integrationVersions.get

integrations.integrationVersions.list

integrations.integrations.deploy

integrations.integrations.get

integrations.integrations.list

resourcemanager.projects.get

resourcemanager.projects.list

Apigee Integration Editor

(roles/integrations.apigeeIntegrationEditorRole)

A developer that can list, create and update Apigee integrations.

connectors.actions.*

connectors.actions.execute
connectors.actions.list

connectors.connections.executeSqlQuery

connectors.entities.*

connectors.entities.create
connectors.entities.delete
connectors.entities.deleteEntitiesWithConditions
connectors.entities.get
connectors.entities.list
connectors.entities.update
connectors.entities.updateEntitiesWithConditions

connectors.entityTypes.list

integrations.apigeeAuthConfigs.create

integrations.apigeeAuthConfigs.get

integrations.apigeeAuthConfigs.list

integrations.apigeeAuthConfigs.update

integrations.apigeeCertificates.create

integrations.apigeeCertificates.get

integrations.apigeeCertificates.list

integrations.apigeeCertificates.update

integrations.apigeeExecutions.list

integrations.apigeeIntegrationVers.*

integrations.apigeeIntegrationVers.create
integrations.apigeeIntegrationVers.delete
integrations.apigeeIntegrationVers.deploy
integrations.apigeeIntegrationVers.get
integrations.apigeeIntegrationVers.list
integrations.apigeeIntegrationVers.update

integrations.apigeeIntegrations.*

integrations.apigeeIntegrations.invoke
integrations.apigeeIntegrations.list

integrations.apigeeSfdcChannels.create

integrations.apigeeSfdcChannels.get

integrations.apigeeSfdcChannels.list

integrations.apigeeSfdcChannels.update

integrations.apigeeSfdcInstances.create

integrations.apigeeSfdcInstances.get

integrations.apigeeSfdcInstances.list

integrations.apigeeSfdcInstances.update

integrations.authConfigs.create

integrations.authConfigs.get

integrations.authConfigs.list

integrations.authConfigs.update

integrations.certificates.get

integrations.executions.get

integrations.executions.list

integrations.integrationVersions.create

integrations.integrationVersions.delete

integrations.integrationVersions.deploy

integrations.integrationVersions.get

integrations.integrationVersions.list

integrations.integrationVersions.update

integrations.integrations.create

integrations.integrations.get

integrations.integrations.invoke

integrations.integrations.list

integrations.integrations.update

integrations.sfdcChannels.*

integrations.sfdcChannels.create
integrations.sfdcChannels.delete
integrations.sfdcChannels.get
integrations.sfdcChannels.list
integrations.sfdcChannels.update

integrations.sfdcInstances.*

integrations.sfdcInstances.create
integrations.sfdcInstances.delete
integrations.sfdcInstances.get
integrations.sfdcInstances.list
integrations.sfdcInstances.update

resourcemanager.projects.get

resourcemanager.projects.list

Apigee Integration Invoker

(roles/integrations.apigeeIntegrationInvokerRole)

A role that can invoke Apigee integrations.

connectors.actions.*

connectors.actions.execute
connectors.actions.list

connectors.connections.executeSqlQuery

connectors.entities.*

connectors.entities.create
connectors.entities.delete
connectors.entities.deleteEntitiesWithConditions
connectors.entities.get
connectors.entities.list
connectors.entities.update
connectors.entities.updateEntitiesWithConditions

connectors.entityTypes.list

integrations.apigeeExecutions.list

integrations.apigeeIntegrationVers.get

integrations.apigeeIntegrationVers.list

integrations.apigeeIntegrations.*

integrations.apigeeIntegrations.invoke
integrations.apigeeIntegrations.list

integrations.executions.get

integrations.executions.list

integrations.integrationVersions.get

integrations.integrationVersions.invoke

integrations.integrationVersions.list

integrations.integrations.get

integrations.integrations.invoke

integrations.integrations.list

resourcemanager.projects.get

resourcemanager.projects.list

Apigee Integration Viewer

(roles/integrations.apigeeIntegrationsViewer)

A developer that can list and view Apigee integrations.

integrations.apigeeAuthConfigs.list

integrations.apigeeCertificates.list

integrations.apigeeIntegrationVers.get

integrations.apigeeIntegrationVers.list

integrations.apigeeIntegrations.list

integrations.apigeeSfdcChannels.list

integrations.apigeeSfdcInstances.list

integrations.authConfigs.get

integrations.authConfigs.list

integrations.certificates.get

integrations.certificates.list

integrations.executions.get

integrations.executions.list

integrations.integrationVersions.get

integrations.integrationVersions.list

integrations.integrations.get

integrations.integrations.list

integrations.sfdcChannels.list

integrations.sfdcInstances.list

resourcemanager.projects.get

resourcemanager.projects.list

Apigee Integration Approver

(roles/integrations.apigeeSuspensionResolver)

A role that can approve / reject Apigee integrations that contain a suspension/wait task.

integrations.apigeeSuspensions.*

integrations.apigeeSuspensions.lift
integrations.apigeeSuspensions.list
integrations.apigeeSuspensions.resolve

integrations.suspensions.*

integrations.suspensions.lift
integrations.suspensions.list
integrations.suspensions.resolve

resourcemanager.projects.get

resourcemanager.projects.list

Certificate Viewer

(roles/integrations.certificateViewer)

A developer that can list and view Certificates.

integrations.certificates.get

resourcemanager.projects.get

resourcemanager.projects.list

Application Integration Admin

(roles/integrations.integrationAdmin)

A user that has full access (CRUD) to all integrations.

integrations.apigeeAuthConfigs.*

integrations.apigeeAuthConfigs.create
integrations.apigeeAuthConfigs.delete
integrations.apigeeAuthConfigs.get
integrations.apigeeAuthConfigs.list
integrations.apigeeAuthConfigs.update

integrations.apigeeCertificates.*

integrations.apigeeCertificates.create
integrations.apigeeCertificates.delete
integrations.apigeeCertificates.get
integrations.apigeeCertificates.list
integrations.apigeeCertificates.update

integrations.apigeeExecutions.list

integrations.apigeeIntegrationVers.*

integrations.apigeeIntegrationVers.create
integrations.apigeeIntegrationVers.delete
integrations.apigeeIntegrationVers.deploy
integrations.apigeeIntegrationVers.get
integrations.apigeeIntegrationVers.list
integrations.apigeeIntegrationVers.update

integrations.apigeeIntegrations.*

integrations.apigeeIntegrations.invoke
integrations.apigeeIntegrations.list

integrations.apigeeSfdcChannels.*

integrations.apigeeSfdcChannels.create
integrations.apigeeSfdcChannels.delete
integrations.apigeeSfdcChannels.get
integrations.apigeeSfdcChannels.list
integrations.apigeeSfdcChannels.update

integrations.apigeeSfdcInstances.*

integrations.apigeeSfdcInstances.create
integrations.apigeeSfdcInstances.delete
integrations.apigeeSfdcInstances.get
integrations.apigeeSfdcInstances.list
integrations.apigeeSfdcInstances.update

integrations.apigeeSuspensions.*

integrations.apigeeSuspensions.lift
integrations.apigeeSuspensions.list
integrations.apigeeSuspensions.resolve

integrations.authConfigs.*

integrations.authConfigs.create
integrations.authConfigs.delete
integrations.authConfigs.get
integrations.authConfigs.list
integrations.authConfigs.update

integrations.certificates.*

integrations.certificates.create
integrations.certificates.delete
integrations.certificates.get
integrations.certificates.list
integrations.certificates.update

integrations.executions.*

integrations.executions.cancel
integrations.executions.get
integrations.executions.list
integrations.executions.replay

integrations.integrationVersions.create

integrations.integrationVersions.delete

integrations.integrationVersions.deploy

integrations.integrationVersions.get

integrations.integrationVersions.list

integrations.integrationVersions.update

integrations.integrations.*

integrations.integrations.create
integrations.integrations.delete
integrations.integrations.deploy
integrations.integrations.generateOpenApiSpec
integrations.integrations.get
integrations.integrations.invoke
integrations.integrations.list
integrations.integrations.update

integrations.sfdcChannels.*

integrations.sfdcChannels.create
integrations.sfdcChannels.delete
integrations.sfdcChannels.get
integrations.sfdcChannels.list
integrations.sfdcChannels.update

integrations.sfdcInstances.*

integrations.sfdcInstances.create
integrations.sfdcInstances.delete
integrations.sfdcInstances.get
integrations.sfdcInstances.list
integrations.sfdcInstances.update

integrations.suspensions.*

integrations.suspensions.lift
integrations.suspensions.list
integrations.suspensions.resolve

integrations.templates.*

integrations.templates.create
integrations.templates.delete
integrations.templates.get
integrations.templates.list
integrations.templates.share
integrations.templates.unshare
integrations.templates.update
integrations.templates.use

integrations.testCases.*

integrations.testCases.create
integrations.testCases.delete
integrations.testCases.get
integrations.testCases.invoke
integrations.testCases.list
integrations.testCases.update

resourcemanager.projects.get

resourcemanager.projects.list

Application Integration Deployer

(roles/integrations.integrationDeployer)

A developer that can deploy/undeploy integrations to the integration runtime.

integrations.apigeeIntegrationVers.deploy

integrations.apigeeIntegrationVers.get

integrations.apigeeIntegrationVers.list

integrations.apigeeIntegrations.list

integrations.integrationVersions.deploy

integrations.integrationVersions.get

integrations.integrationVersions.list

integrations.integrations.deploy

integrations.integrations.get

integrations.integrations.list

resourcemanager.projects.get

resourcemanager.projects.list

Application Integration Editor

(roles/integrations.integrationEditor)

A developer that can list, create and update integrations.

integrations.apigeeAuthConfigs.create

integrations.apigeeAuthConfigs.get

integrations.apigeeAuthConfigs.list

integrations.apigeeAuthConfigs.update

integrations.apigeeCertificates.create

integrations.apigeeCertificates.get

integrations.apigeeCertificates.list

integrations.apigeeCertificates.update

integrations.apigeeExecutions.list

integrations.apigeeIntegrationVers.*

integrations.apigeeIntegrationVers.create
integrations.apigeeIntegrationVers.delete
integrations.apigeeIntegrationVers.deploy
integrations.apigeeIntegrationVers.get
integrations.apigeeIntegrationVers.list
integrations.apigeeIntegrationVers.update

integrations.apigeeIntegrations.*

integrations.apigeeIntegrations.invoke
integrations.apigeeIntegrations.list

integrations.apigeeSfdcChannels.create

integrations.apigeeSfdcChannels.get

integrations.apigeeSfdcChannels.list

integrations.apigeeSfdcChannels.update

integrations.apigeeSfdcInstances.create

integrations.apigeeSfdcInstances.get

integrations.apigeeSfdcInstances.list

integrations.apigeeSfdcInstances.update

integrations.authConfigs.create

integrations.authConfigs.get

integrations.authConfigs.list

integrations.authConfigs.update

integrations.certificates.get

integrations.executions.*

integrations.executions.cancel
integrations.executions.get
integrations.executions.list
integrations.executions.replay

integrations.integrationVersions.create

integrations.integrationVersions.delete

integrations.integrationVersions.deploy

integrations.integrationVersions.get

integrations.integrationVersions.list

integrations.integrationVersions.update

integrations.integrations.create

integrations.integrations.generateOpenApiSpec

integrations.integrations.get

integrations.integrations.invoke

integrations.integrations.list

integrations.integrations.update

integrations.sfdcChannels.*

integrations.sfdcChannels.create
integrations.sfdcChannels.delete
integrations.sfdcChannels.get
integrations.sfdcChannels.list
integrations.sfdcChannels.update

integrations.sfdcInstances.*

integrations.sfdcInstances.create
integrations.sfdcInstances.delete
integrations.sfdcInstances.get
integrations.sfdcInstances.list
integrations.sfdcInstances.update

integrations.templates.*

integrations.templates.create
integrations.templates.delete
integrations.templates.get
integrations.templates.list
integrations.templates.share
integrations.templates.unshare
integrations.templates.update
integrations.templates.use

integrations.testCases.*

integrations.testCases.create
integrations.testCases.delete
integrations.testCases.get
integrations.testCases.invoke
integrations.testCases.list
integrations.testCases.update

resourcemanager.projects.get

resourcemanager.projects.list

Application Integration Invoker

(roles/integrations.integrationInvoker)

A role that can invoke integrations.

integrations.apigeeExecutions.list

integrations.apigeeIntegrationVers.get

integrations.apigeeIntegrationVers.list

integrations.apigeeIntegrations.*

integrations.apigeeIntegrations.invoke
integrations.apigeeIntegrations.list

integrations.executions.*

integrations.executions.cancel
integrations.executions.get
integrations.executions.list
integrations.executions.replay

integrations.integrationVersions.get

integrations.integrationVersions.invoke

integrations.integrationVersions.list

integrations.integrations.get

integrations.integrations.invoke

integrations.integrations.list

integrations.testCases.get

integrations.testCases.invoke

integrations.testCases.list

resourcemanager.projects.get

resourcemanager.projects.list

Application Integration Viewer

(roles/integrations.integrationViewer)

A developer that can list and view integrations.

integrations.apigeeAuthConfigs.list

integrations.apigeeCertificates.list

integrations.apigeeIntegrationVers.get

integrations.apigeeIntegrationVers.list

integrations.apigeeIntegrations.list

integrations.apigeeSfdcChannels.list

integrations.apigeeSfdcInstances.list

integrations.authConfigs.get

integrations.authConfigs.list

integrations.certificates.get

integrations.certificates.list

integrations.executions.get

integrations.executions.list

integrations.integrationVersions.get

integrations.integrationVersions.list

integrations.integrations.generateOpenApiSpec

integrations.integrations.get

integrations.integrations.list

integrations.sfdcChannels.list

integrations.sfdcInstances.list

integrations.templates.get

integrations.templates.list

integrations.testCases.get

integrations.testCases.list

resourcemanager.projects.get

resourcemanager.projects.list

Security Integration Admin ^Beta

(roles/integrations.securityIntegrationAdmin)

A user that has full access to all Security integrations.

integrations.securityAuthConfigs.*

integrations.securityAuthConfigs.create
integrations.securityAuthConfigs.delete
integrations.securityAuthConfigs.get
integrations.securityAuthConfigs.list
integrations.securityAuthConfigs.update

integrations.securityExecutions.*

integrations.securityExecutions.cancel
integrations.securityExecutions.get
integrations.securityExecutions.list

integrations.securityIntegTempVers.*

integrations.securityIntegTempVers.create
integrations.securityIntegTempVers.get
integrations.securityIntegTempVers.list

integrations.securityIntegrationVers.*

integrations.securityIntegrationVers.create
integrations.securityIntegrationVers.delete
integrations.securityIntegrationVers.deploy
integrations.securityIntegrationVers.get
integrations.securityIntegrationVers.list
integrations.securityIntegrationVers.update

integrations.securityIntegrations.*

integrations.securityIntegrations.invoke
integrations.securityIntegrations.list

Application Integration Service Agent

(roles/integrations.serviceAgent)

Service agent that grants access to execute an integration.

cloudfunctions.functions.invoke

cloudscheduler.jobs.create

cloudscheduler.jobs.delete

cloudscheduler.jobs.enable

cloudscheduler.jobs.fullView

cloudscheduler.jobs.get

cloudscheduler.jobs.pause

cloudscheduler.jobs.run

cloudscheduler.jobs.update

cloudscheduler.locations.*

cloudscheduler.locations.get
cloudscheduler.locations.list

connectors.actions.*

connectors.actions.execute
connectors.actions.list

connectors.connections.executeSqlQuery

connectors.connections.get

connectors.entities.*

connectors.entities.create
connectors.entities.delete
connectors.entities.deleteEntitiesWithConditions
connectors.entities.get
connectors.entities.list
connectors.entities.update
connectors.entities.updateEntitiesWithConditions

connectors.entityTypes.list

iam.serviceAccounts.getAccessToken

iam.serviceAccounts.getOpenIdToken

integrations.apigeeAuthConfigs.*

integrations.apigeeAuthConfigs.create
integrations.apigeeAuthConfigs.delete
integrations.apigeeAuthConfigs.get
integrations.apigeeAuthConfigs.list
integrations.apigeeAuthConfigs.update

integrations.apigeeCertificates.*

integrations.apigeeCertificates.create
integrations.apigeeCertificates.delete
integrations.apigeeCertificates.get
integrations.apigeeCertificates.list
integrations.apigeeCertificates.update

integrations.apigeeExecutions.list

integrations.apigeeIntegrationVers.*

integrations.apigeeIntegrationVers.create
integrations.apigeeIntegrationVers.delete
integrations.apigeeIntegrationVers.deploy
integrations.apigeeIntegrationVers.get
integrations.apigeeIntegrationVers.list
integrations.apigeeIntegrationVers.update

integrations.apigeeIntegrations.*

integrations.apigeeIntegrations.invoke
integrations.apigeeIntegrations.list

integrations.apigeeSfdcChannels.*

integrations.apigeeSfdcChannels.create
integrations.apigeeSfdcChannels.delete
integrations.apigeeSfdcChannels.get
integrations.apigeeSfdcChannels.list
integrations.apigeeSfdcChannels.update

integrations.apigeeSfdcInstances.*

integrations.apigeeSfdcInstances.create
integrations.apigeeSfdcInstances.delete
integrations.apigeeSfdcInstances.get
integrations.apigeeSfdcInstances.list
integrations.apigeeSfdcInstances.update

integrations.apigeeSuspensions.*

integrations.apigeeSuspensions.lift
integrations.apigeeSuspensions.list
integrations.apigeeSuspensions.resolve

integrations.authConfigs.*

integrations.authConfigs.create
integrations.authConfigs.delete
integrations.authConfigs.get
integrations.authConfigs.list
integrations.authConfigs.update

integrations.certificates.*

integrations.certificates.create
integrations.certificates.delete
integrations.certificates.get
integrations.certificates.list
integrations.certificates.update

integrations.executions.list

integrations.integrationVersions.create

integrations.integrationVersions.delete

integrations.integrationVersions.deploy

integrations.integrationVersions.get

integrations.integrationVersions.list

integrations.integrationVersions.update

integrations.integrations.create

integrations.integrations.delete

integrations.integrations.deploy

integrations.integrations.get

integrations.integrations.invoke

integrations.integrations.list

integrations.integrations.update

integrations.sfdcChannels.*

integrations.sfdcChannels.create
integrations.sfdcChannels.delete
integrations.sfdcChannels.get
integrations.sfdcChannels.list
integrations.sfdcChannels.update

integrations.sfdcInstances.*

integrations.sfdcInstances.create
integrations.sfdcInstances.delete
integrations.sfdcInstances.get
integrations.sfdcInstances.list
integrations.sfdcInstances.update

integrations.suspensions.*

integrations.suspensions.lift
integrations.suspensions.list
integrations.suspensions.resolve

pubsub.messageTransforms.validate

pubsub.schemas.attach

pubsub.schemas.create

pubsub.schemas.delete

pubsub.schemas.get

pubsub.schemas.list

pubsub.schemas.validate

pubsub.snapshots.create

pubsub.snapshots.delete

pubsub.snapshots.get

pubsub.snapshots.list

pubsub.snapshots.seek

pubsub.snapshots.update

pubsub.subscriptions.consume

pubsub.subscriptions.create

pubsub.subscriptions.delete

pubsub.subscriptions.get

pubsub.subscriptions.list

pubsub.subscriptions.update

pubsub.topics.attachSubscription

pubsub.topics.create

pubsub.topics.delete

pubsub.topics.detachSubscription

pubsub.topics.get

pubsub.topics.list

pubsub.topics.publish

pubsub.topics.update

pubsub.topics.updateTag

resourcemanager.projects.get

resourcemanager.projects.list

run.jobs.run

run.routes.invoke

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

storage.buckets.create

storage.buckets.get

storage.buckets.list

storage.buckets.update

storage.objects.create

storage.objects.get

storage.objects.list

storage.objects.update

Application Integration SFDC Instance Admin

(roles/integrations.sfdcInstanceAdmin)

A user that has full access (CRUD) to all SFDC instances.

integrations.sfdcChannels.*

integrations.sfdcChannels.create
integrations.sfdcChannels.delete
integrations.sfdcChannels.get
integrations.sfdcChannels.list
integrations.sfdcChannels.update

integrations.sfdcInstances.*

integrations.sfdcInstances.create
integrations.sfdcInstances.delete
integrations.sfdcInstances.get
integrations.sfdcInstances.list
integrations.sfdcInstances.update

resourcemanager.projects.get

resourcemanager.projects.list

Application Integration SFDC Instance Editor

(roles/integrations.sfdcInstanceEditor)

A developer that can list, create and update integrations.

integrations.sfdcChannels.create

integrations.sfdcChannels.get

integrations.sfdcChannels.list

integrations.sfdcChannels.update

integrations.sfdcInstances.create

integrations.sfdcInstances.get

integrations.sfdcInstances.list

integrations.sfdcInstances.update

resourcemanager.projects.get

resourcemanager.projects.list

Application Integration SFDC Instance Viewer

(roles/integrations.sfdcInstanceViewer)

A developer that can list and view SFDC instances.

integrations.sfdcChannels.get

integrations.sfdcChannels.list

integrations.sfdcInstances.get

integrations.sfdcInstances.list

resourcemanager.projects.get

resourcemanager.projects.list

Application Integration Approver

(roles/integrations.suspensionResolver)

A role that can resolve suspended integrations.

integrations.apigeeSuspensions.*

integrations.apigeeSuspensions.lift
integrations.apigeeSuspensions.list
integrations.apigeeSuspensions.resolve

integrations.suspensions.*

integrations.suspensions.lift
integrations.suspensions.list
integrations.suspensions.resolve

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Integrations permissions

Permission	Included in roles
`integrations.apigeeAuthConfigs.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeAuthConfigs.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeAuthConfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeAuthConfigs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Apigee Integration Viewer (`roles/integrations.apigeeIntegrationsViewer`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Viewer (`roles/integrations.integrationViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeAuthConfigs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeCertificates.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeCertificates.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeCertificates.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeCertificates.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Apigee Integration Viewer (`roles/integrations.apigeeIntegrationsViewer`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Viewer (`roles/integrations.integrationViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeCertificates.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeExecutions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Apigee Integration Invoker (`roles/integrations.apigeeIntegrationInvokerRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Invoker (`roles/integrations.integrationInvoker`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`) Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`integrations.apigeeIntegrationVers.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeIntegrationVers.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeIntegrationVers.deploy`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Deployer (`roles/integrations.apigeeIntegrationDeployerRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Deployer (`roles/integrations.integrationDeployer`) Application Integration Editor (`roles/integrations.integrationEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeIntegrationVers.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Deployer (`roles/integrations.apigeeIntegrationDeployerRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Apigee Integration Invoker (`roles/integrations.apigeeIntegrationInvokerRole`) Apigee Integration Viewer (`roles/integrations.apigeeIntegrationsViewer`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Deployer (`roles/integrations.integrationDeployer`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Invoker (`roles/integrations.integrationInvoker`) Application Integration Viewer (`roles/integrations.integrationViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`) Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`integrations.apigeeIntegrationVers.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Deployer (`roles/integrations.apigeeIntegrationDeployerRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Apigee Integration Invoker (`roles/integrations.apigeeIntegrationInvokerRole`) Apigee Integration Viewer (`roles/integrations.apigeeIntegrationsViewer`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Deployer (`roles/integrations.integrationDeployer`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Invoker (`roles/integrations.integrationInvoker`) Application Integration Viewer (`roles/integrations.integrationViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`) Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`integrations.apigeeIntegrationVers.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeIntegrations.invoke`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Apigee Integration Invoker (`roles/integrations.apigeeIntegrationInvokerRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Invoker (`roles/integrations.integrationInvoker`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeIntegrations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Deployer (`roles/integrations.apigeeIntegrationDeployerRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Apigee Integration Invoker (`roles/integrations.apigeeIntegrationInvokerRole`) Apigee Integration Viewer (`roles/integrations.apigeeIntegrationsViewer`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Deployer (`roles/integrations.integrationDeployer`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Invoker (`roles/integrations.integrationInvoker`) Application Integration Viewer (`roles/integrations.integrationViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeSfdcChannels.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeSfdcChannels.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeSfdcChannels.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeSfdcChannels.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Apigee Integration Viewer (`roles/integrations.apigeeIntegrationsViewer`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Viewer (`roles/integrations.integrationViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeSfdcChannels.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeSfdcInstances.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeSfdcInstances.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeSfdcInstances.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeSfdcInstances.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Apigee Integration Viewer (`roles/integrations.apigeeIntegrationsViewer`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Viewer (`roles/integrations.integrationViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeSfdcInstances.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeSuspensions.lift`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Approver (`roles/integrations.apigeeSuspensionResolver`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Approver (`roles/integrations.suspensionResolver`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeSuspensions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Approver (`roles/integrations.apigeeSuspensionResolver`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Approver (`roles/integrations.suspensionResolver`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.apigeeSuspensions.resolve`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Approver (`roles/integrations.apigeeSuspensionResolver`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Approver (`roles/integrations.suspensionResolver`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.authConfigs.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.authConfigs.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.authConfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Apigee Integration Viewer (`roles/integrations.apigeeIntegrationsViewer`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Viewer (`roles/integrations.integrationViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.authConfigs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Apigee Integration Viewer (`roles/integrations.apigeeIntegrationsViewer`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Viewer (`roles/integrations.integrationViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.authConfigs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.certificates.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.certificates.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.certificates.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Apigee Integration Viewer (`roles/integrations.apigeeIntegrationsViewer`) Certificate Viewer (`roles/integrations.certificateViewer`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Viewer (`roles/integrations.integrationViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.certificates.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Viewer (`roles/integrations.apigeeIntegrationsViewer`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Viewer (`roles/integrations.integrationViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.certificates.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.executions.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Invoker (`roles/integrations.integrationInvoker`)
`integrations.executions.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Apigee Integration Invoker (`roles/integrations.apigeeIntegrationInvokerRole`) Apigee Integration Viewer (`roles/integrations.apigeeIntegrationsViewer`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Invoker (`roles/integrations.integrationInvoker`) Application Integration Viewer (`roles/integrations.integrationViewer`)
`integrations.executions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Apigee Integration Invoker (`roles/integrations.apigeeIntegrationInvokerRole`) Apigee Integration Viewer (`roles/integrations.apigeeIntegrationsViewer`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Invoker (`roles/integrations.integrationInvoker`) Application Integration Viewer (`roles/integrations.integrationViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.executions.replay`	Owner (`roles/owner`) Editor (`roles/editor`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Invoker (`roles/integrations.integrationInvoker`)
`integrations.integrationVersions.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.integrationVersions.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.integrationVersions.deploy`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Deployer (`roles/integrations.apigeeIntegrationDeployerRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Deployer (`roles/integrations.integrationDeployer`) Application Integration Editor (`roles/integrations.integrationEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.integrationVersions.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Deployer (`roles/integrations.apigeeIntegrationDeployerRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Apigee Integration Invoker (`roles/integrations.apigeeIntegrationInvokerRole`) Apigee Integration Viewer (`roles/integrations.apigeeIntegrationsViewer`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Deployer (`roles/integrations.integrationDeployer`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Invoker (`roles/integrations.integrationInvoker`) Application Integration Viewer (`roles/integrations.integrationViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Dialogflow Service Agent (`roles/dialogflow.serviceAgent`) Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`) Application Integration Service Agent (`roles/integrations.serviceAgent`) Customer Engagement Suite Service Agent (`roles/ces.serviceAgent`)
`integrations.integrationVersions.invoke`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Invoker (`roles/integrations.apigeeIntegrationInvokerRole`) Application Integration Invoker (`roles/integrations.integrationInvoker`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`integrations.integrationVersions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Deployer (`roles/integrations.apigeeIntegrationDeployerRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Apigee Integration Invoker (`roles/integrations.apigeeIntegrationInvokerRole`) Apigee Integration Viewer (`roles/integrations.apigeeIntegrationsViewer`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Deployer (`roles/integrations.integrationDeployer`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Invoker (`roles/integrations.integrationInvoker`) Application Integration Viewer (`roles/integrations.integrationViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`) Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`integrations.integrationVersions.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.integrations.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.integrations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.integrations.deploy`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Deployer (`roles/integrations.apigeeIntegrationDeployerRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Deployer (`roles/integrations.integrationDeployer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.integrations.generateOpenApiSpec`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Viewer (`roles/integrations.integrationViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Dialogflow Service Agent (`roles/dialogflow.serviceAgent`) Customer Engagement Suite Service Agent (`roles/ces.serviceAgent`)
`integrations.integrations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Deployer (`roles/integrations.apigeeIntegrationDeployerRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Apigee Integration Invoker (`roles/integrations.apigeeIntegrationInvokerRole`) Apigee Integration Viewer (`roles/integrations.apigeeIntegrationsViewer`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Deployer (`roles/integrations.integrationDeployer`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Invoker (`roles/integrations.integrationInvoker`) Application Integration Viewer (`roles/integrations.integrationViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`) Application Integration Service Agent (`roles/integrations.serviceAgent`) Customer Engagement Suite Service Agent (`roles/ces.serviceAgent`)
`integrations.integrations.invoke`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Apigee Integration Invoker (`roles/integrations.apigeeIntegrationInvokerRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Invoker (`roles/integrations.integrationInvoker`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`) Application Integration Service Agent (`roles/integrations.serviceAgent`) Customer Engagement Suite Service Agent (`roles/ces.serviceAgent`)
`integrations.integrations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Deployer (`roles/integrations.apigeeIntegrationDeployerRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Apigee Integration Invoker (`roles/integrations.apigeeIntegrationInvokerRole`) Apigee Integration Viewer (`roles/integrations.apigeeIntegrationsViewer`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Deployer (`roles/integrations.integrationDeployer`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Invoker (`roles/integrations.integrationInvoker`) Application Integration Viewer (`roles/integrations.integrationViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`) Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`integrations.integrations.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.securityAuthConfigs.create`	Owner (`roles/owner`) Editor (`roles/editor`) Security Integration Admin (`roles/integrations.securityIntegrationAdmin`)
`integrations.securityAuthConfigs.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Security Integration Admin (`roles/integrations.securityIntegrationAdmin`)
`integrations.securityAuthConfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Security Integration Admin (`roles/integrations.securityIntegrationAdmin`)
`integrations.securityAuthConfigs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Security Integration Admin (`roles/integrations.securityIntegrationAdmin`)
`integrations.securityAuthConfigs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Security Integration Admin (`roles/integrations.securityIntegrationAdmin`)
`integrations.securityExecutions.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Security Integration Admin (`roles/integrations.securityIntegrationAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Security Center Integration Executor Service Agent (`roles/securitycenter.integrationExecutorServiceAgent`)
`integrations.securityExecutions.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Security Integration Admin (`roles/integrations.securityIntegrationAdmin`)
`integrations.securityExecutions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Security Integration Admin (`roles/integrations.securityIntegrationAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Security Center Integration Executor Service Agent (`roles/securitycenter.integrationExecutorServiceAgent`)
`integrations.securityIntegTempVers.create`	Owner (`roles/owner`) Editor (`roles/editor`) Security Integration Admin (`roles/integrations.securityIntegrationAdmin`)
`integrations.securityIntegTempVers.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Security Integration Admin (`roles/integrations.securityIntegrationAdmin`)
`integrations.securityIntegTempVers.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Security Integration Admin (`roles/integrations.securityIntegrationAdmin`)
`integrations.securityIntegrationVers.create`	Owner (`roles/owner`) Editor (`roles/editor`) Security Integration Admin (`roles/integrations.securityIntegrationAdmin`)
`integrations.securityIntegrationVers.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Security Integration Admin (`roles/integrations.securityIntegrationAdmin`)
`integrations.securityIntegrationVers.deploy`	Owner (`roles/owner`) Editor (`roles/editor`) Security Integration Admin (`roles/integrations.securityIntegrationAdmin`)
`integrations.securityIntegrationVers.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Security Integration Admin (`roles/integrations.securityIntegrationAdmin`)
`integrations.securityIntegrationVers.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Security Integration Admin (`roles/integrations.securityIntegrationAdmin`)
`integrations.securityIntegrationVers.update`	Owner (`roles/owner`) Editor (`roles/editor`) Security Integration Admin (`roles/integrations.securityIntegrationAdmin`)
`integrations.securityIntegrations.invoke`	Owner (`roles/owner`) Editor (`roles/editor`) Security Integration Admin (`roles/integrations.securityIntegrationAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Security Center Integration Executor Service Agent (`roles/securitycenter.integrationExecutorServiceAgent`)
`integrations.securityIntegrations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Security Integration Admin (`roles/integrations.securityIntegrationAdmin`)
`integrations.sfdcChannels.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration SFDC Instance Admin (`roles/integrations.sfdcInstanceAdmin`) Application Integration SFDC Instance Editor (`roles/integrations.sfdcInstanceEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.sfdcChannels.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration SFDC Instance Admin (`roles/integrations.sfdcInstanceAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.sfdcChannels.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration SFDC Instance Admin (`roles/integrations.sfdcInstanceAdmin`) Application Integration SFDC Instance Editor (`roles/integrations.sfdcInstanceEditor`) Application Integration SFDC Instance Viewer (`roles/integrations.sfdcInstanceViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.sfdcChannels.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Apigee Integration Viewer (`roles/integrations.apigeeIntegrationsViewer`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Viewer (`roles/integrations.integrationViewer`) Application Integration SFDC Instance Admin (`roles/integrations.sfdcInstanceAdmin`) Application Integration SFDC Instance Editor (`roles/integrations.sfdcInstanceEditor`) Application Integration SFDC Instance Viewer (`roles/integrations.sfdcInstanceViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.sfdcChannels.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration SFDC Instance Admin (`roles/integrations.sfdcInstanceAdmin`) Application Integration SFDC Instance Editor (`roles/integrations.sfdcInstanceEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.sfdcInstances.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration SFDC Instance Admin (`roles/integrations.sfdcInstanceAdmin`) Application Integration SFDC Instance Editor (`roles/integrations.sfdcInstanceEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.sfdcInstances.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration SFDC Instance Admin (`roles/integrations.sfdcInstanceAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.sfdcInstances.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration SFDC Instance Admin (`roles/integrations.sfdcInstanceAdmin`) Application Integration SFDC Instance Editor (`roles/integrations.sfdcInstanceEditor`) Application Integration SFDC Instance Viewer (`roles/integrations.sfdcInstanceViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.sfdcInstances.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Apigee Integration Viewer (`roles/integrations.apigeeIntegrationsViewer`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Viewer (`roles/integrations.integrationViewer`) Application Integration SFDC Instance Admin (`roles/integrations.sfdcInstanceAdmin`) Application Integration SFDC Instance Editor (`roles/integrations.sfdcInstanceEditor`) Application Integration SFDC Instance Viewer (`roles/integrations.sfdcInstanceViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.sfdcInstances.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Editor (`roles/integrations.apigeeIntegrationEditorRole`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration SFDC Instance Admin (`roles/integrations.sfdcInstanceAdmin`) Application Integration SFDC Instance Editor (`roles/integrations.sfdcInstanceEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.suspensions.lift`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Approver (`roles/integrations.apigeeSuspensionResolver`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Approver (`roles/integrations.suspensionResolver`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.suspensions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Approver (`roles/integrations.apigeeSuspensionResolver`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Approver (`roles/integrations.suspensionResolver`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.suspensions.resolve`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Integration Admin (`roles/integrations.apigeeIntegrationAdminRole`) Apigee Integration Approver (`roles/integrations.apigeeSuspensionResolver`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Approver (`roles/integrations.suspensionResolver`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Application Integration Service Agent (`roles/integrations.serviceAgent`)
`integrations.templates.create`	Owner (`roles/owner`) Editor (`roles/editor`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`)
`integrations.templates.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`)
`integrations.templates.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Viewer (`roles/integrations.integrationViewer`)
`integrations.templates.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Viewer (`roles/integrations.integrationViewer`)
`integrations.templates.share`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`)
`integrations.templates.unshare`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`)
`integrations.templates.update`	Owner (`roles/owner`) Editor (`roles/editor`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`)
`integrations.templates.use`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`)
`integrations.testCases.create`	Owner (`roles/owner`) Editor (`roles/editor`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`)
`integrations.testCases.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`)
`integrations.testCases.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Invoker (`roles/integrations.integrationInvoker`) Application Integration Viewer (`roles/integrations.integrationViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`integrations.testCases.invoke`	Owner (`roles/owner`) Editor (`roles/editor`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Invoker (`roles/integrations.integrationInvoker`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`integrations.testCases.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`) Application Integration Invoker (`roles/integrations.integrationInvoker`) Application Integration Viewer (`roles/integrations.integrationViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`integrations.testCases.update`	Owner (`roles/owner`) Editor (`roles/editor`) Application Integration Admin (`roles/integrations.integrationAdmin`) Application Integration Editor (`roles/integrations.integrationEditor`)

Predefined Application Integration IAM roles

Cloud Integrations roles

Apigee Integration Admin

Apigee Integration Deployer

Apigee Integration Editor

Apigee Integration Invoker

Apigee Integration Viewer

Apigee Integration Approver

Certificate Viewer

Application Integration Admin

Application Integration Deployer

Application Integration Editor

Application Integration Invoker

Application Integration Viewer

Security Integration Admin Beta

Application Integration Service Agent

Application Integration SFDC Instance Admin

Application Integration SFDC Instance Editor

Application Integration SFDC Instance Viewer

Application Integration Approver

Cloud Integrations permissions

integrations.apigeeAuthConfigs.create

integrations.apigeeAuthConfigs.delete

integrations.apigeeAuthConfigs.get

integrations.apigeeAuthConfigs.list

integrations.apigeeAuthConfigs.update

integrations.apigeeCertificates.create

integrations.apigeeCertificates.delete

integrations.apigeeCertificates.get

integrations.apigeeCertificates.list

integrations.apigeeCertificates.update

integrations.apigeeExecutions.list

integrations.apigeeIntegrationVers.create

integrations.apigeeIntegrationVers.delete

integrations.apigeeIntegrationVers.deploy

integrations.apigeeIntegrationVers.get

integrations.apigeeIntegrationVers.list

integrations.apigeeIntegrationVers.update

integrations.apigeeIntegrations.invoke

integrations.apigeeIntegrations.list

integrations.apigeeSfdcChannels.create

integrations.apigeeSfdcChannels.delete

integrations.apigeeSfdcChannels.get

integrations.apigeeSfdcChannels.list

integrations.apigeeSfdcChannels.update

integrations.apigeeSfdcInstances.create

integrations.apigeeSfdcInstances.delete

integrations.apigeeSfdcInstances.get

integrations.apigeeSfdcInstances.list

integrations.apigeeSfdcInstances.update

integrations.apigeeSuspensions.lift

integrations.apigeeSuspensions.list

integrations.apigeeSuspensions.resolve

integrations.authConfigs.create

integrations.authConfigs.delete

integrations.authConfigs.get

integrations.authConfigs.list

integrations.authConfigs.update

integrations.certificates.create

integrations.certificates.delete

integrations.certificates.get

integrations.certificates.list

integrations.certificates.update

integrations.executions.cancel

integrations.executions.get

integrations.executions.list

integrations.executions.replay

integrations.integrationVersions.create

integrations.integrationVersions.delete

integrations.integrationVersions.deploy

integrations.integrationVersions.get

integrations.integrationVersions.invoke

integrations.integrationVersions.list

integrations.integrationVersions.update

integrations.integrations.create

integrations.integrations.delete

integrations.integrations.deploy

integrations.integrations.generateOpenApiSpec

integrations.integrations.get

integrations.integrations.invoke

Security Integration Admin ^Beta

`integrations.apigeeAuthConfigs.create`

`integrations.apigeeAuthConfigs.delete`

`integrations.apigeeAuthConfigs.get`

`integrations.apigeeAuthConfigs.list`

`integrations.apigeeAuthConfigs.update`

`integrations.apigeeCertificates.create`

`integrations.apigeeCertificates.delete`

`integrations.apigeeCertificates.get`

`integrations.apigeeCertificates.list`

`integrations.apigeeCertificates.update`

`integrations.apigeeExecutions.list`

`integrations.apigeeIntegrationVers.create`

`integrations.apigeeIntegrationVers.delete`

`integrations.apigeeIntegrationVers.deploy`

`integrations.apigeeIntegrationVers.get`

`integrations.apigeeIntegrationVers.list`

`integrations.apigeeIntegrationVers.update`

`integrations.apigeeIntegrations.invoke`

`integrations.apigeeIntegrations.list`

`integrations.apigeeSfdcChannels.create`

`integrations.apigeeSfdcChannels.delete`

`integrations.apigeeSfdcChannels.get`

`integrations.apigeeSfdcChannels.list`

`integrations.apigeeSfdcChannels.update`

`integrations.apigeeSfdcInstances.create`

`integrations.apigeeSfdcInstances.delete`

`integrations.apigeeSfdcInstances.get`

`integrations.apigeeSfdcInstances.list`

`integrations.apigeeSfdcInstances.update`

`integrations.apigeeSuspensions.lift`

`integrations.apigeeSuspensions.list`

`integrations.apigeeSuspensions.resolve`

`integrations.authConfigs.create`

`integrations.authConfigs.delete`

`integrations.authConfigs.get`

`integrations.authConfigs.list`

`integrations.authConfigs.update`

`integrations.certificates.create`

`integrations.certificates.delete`

`integrations.certificates.get`

`integrations.certificates.list`

`integrations.certificates.update`

`integrations.executions.cancel`

`integrations.executions.get`

`integrations.executions.list`

`integrations.executions.replay`

`integrations.integrationVersions.create`

`integrations.integrationVersions.delete`

`integrations.integrationVersions.deploy`

`integrations.integrationVersions.get`

`integrations.integrationVersions.invoke`

`integrations.integrationVersions.list`

`integrations.integrationVersions.update`

`integrations.integrations.create`

`integrations.integrations.delete`

`integrations.integrations.deploy`

`integrations.integrations.generateOpenApiSpec`

`integrations.integrations.get`

`integrations.integrations.invoke`

`integrations.integrations.list`

`integrations.integrations.update`

`integrations.securityAuthConfigs.create`

`integrations.securityAuthConfigs.delete`

`integrations.securityAuthConfigs.get`

`integrations.securityAuthConfigs.list`

`integrations.securityAuthConfigs.update`

`integrations.securityExecutions.cancel`

`integrations.securityExecutions.get`

`integrations.securityExecutions.list`

`integrations.securityIntegTempVers.create`

`integrations.securityIntegTempVers.get`

`integrations.securityIntegTempVers.list`

`integrations.securityIntegrationVers.create`

`integrations.securityIntegrationVers.delete`

`integrations.securityIntegrationVers.deploy`

`integrations.securityIntegrationVers.get`

`integrations.securityIntegrationVers.list`

`integrations.securityIntegrationVers.update`

`integrations.securityIntegrations.invoke`