Cloud Tasks roles and permissions

This page lists the IAM roles and permissions for Cloud Tasks. To search through all roles and permissions, see the role and permission index.

Cloud Tasks roles

Role Permissions

Role	Permissions
Cloud Tasks Admin ^Beta (`roles/cloudtasks.admin`) Full access to queues and tasks.	`cloudtasks.*` `cloudtasks.cmekConfig.get` `cloudtasks.cmekConfig.update` `cloudtasks.locations.get` `cloudtasks.locations.list` `cloudtasks.queues.create` `cloudtasks.queues.delete` `cloudtasks.queues.get` `cloudtasks.queues.getIamPolicy` `cloudtasks.queues.list` `cloudtasks.queues.pause` `cloudtasks.queues.purge` `cloudtasks.queues.resume` `cloudtasks.queues.setIamPolicy` `cloudtasks.queues.update` `cloudtasks.tasks.create` `cloudtasks.tasks.delete` `cloudtasks.tasks.fullView` `cloudtasks.tasks.get` `cloudtasks.tasks.list` `cloudtasks.tasks.run` `monitoring.timeSeries.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud Tasks Enqueuer ^Beta (`roles/cloudtasks.enqueuer`) Access to create tasks.	`cloudtasks.tasks.create` `cloudtasks.tasks.fullView` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud Tasks Queue Admin ^Beta (`roles/cloudtasks.queueAdmin`) Admin access to queues.	`cloudtasks.locations.` `cloudtasks.locations.get` `cloudtasks.locations.list` `cloudtasks.queues.` `cloudtasks.queues.create` `cloudtasks.queues.delete` `cloudtasks.queues.get` `cloudtasks.queues.getIamPolicy` `cloudtasks.queues.list` `cloudtasks.queues.pause` `cloudtasks.queues.purge` `cloudtasks.queues.resume` `cloudtasks.queues.setIamPolicy` `cloudtasks.queues.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud Tasks Service Agent (`roles/cloudtasks.serviceAgent`) Grants Cloud Tasks Service Account access to manage resources. Warning: Do not grant service agent roles to any principals except service agents.	`iam.serviceAccounts.getAccessToken` `iam.serviceAccounts.getOpenIdToken` `logging.logEntries.create`
Cloud Tasks Task Deleter ^Beta (`roles/cloudtasks.taskDeleter`) Access to delete tasks.	`cloudtasks.tasks.delete` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud Tasks Task Runner ^Beta (`roles/cloudtasks.taskRunner`) Access to run tasks.	`cloudtasks.tasks.fullView` `cloudtasks.tasks.run` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud Tasks Viewer ^Beta (`roles/cloudtasks.viewer`) Get and list access to tasks, queues, and locations.	`cloudtasks.cmekConfig.get` `cloudtasks.locations.*` `cloudtasks.locations.get` `cloudtasks.locations.list` `cloudtasks.queues.get` `cloudtasks.queues.list` `cloudtasks.tasks.fullView` `cloudtasks.tasks.get` `cloudtasks.tasks.list` `monitoring.timeSeries.list` `resourcemanager.projects.get` `resourcemanager.projects.list`

Cloud Tasks Admin ^Beta

(roles/cloudtasks.admin)

Full access to queues and tasks.

cloudtasks.*

cloudtasks.cmekConfig.get
cloudtasks.cmekConfig.update
cloudtasks.locations.get
cloudtasks.locations.list
cloudtasks.queues.create
cloudtasks.queues.delete
cloudtasks.queues.get
cloudtasks.queues.getIamPolicy
cloudtasks.queues.list
cloudtasks.queues.pause
cloudtasks.queues.purge
cloudtasks.queues.resume
cloudtasks.queues.setIamPolicy
cloudtasks.queues.update
cloudtasks.tasks.create
cloudtasks.tasks.delete
cloudtasks.tasks.fullView
cloudtasks.tasks.get
cloudtasks.tasks.list
cloudtasks.tasks.run

monitoring.timeSeries.list

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Tasks Enqueuer ^Beta

(roles/cloudtasks.enqueuer)

Access to create tasks.

cloudtasks.tasks.create

cloudtasks.tasks.fullView

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Tasks Queue Admin ^Beta

(roles/cloudtasks.queueAdmin)

Admin access to queues.

cloudtasks.locations.*

cloudtasks.locations.get
cloudtasks.locations.list

cloudtasks.queues.*

cloudtasks.queues.create
cloudtasks.queues.delete
cloudtasks.queues.get
cloudtasks.queues.getIamPolicy
cloudtasks.queues.list
cloudtasks.queues.pause
cloudtasks.queues.purge
cloudtasks.queues.resume
cloudtasks.queues.setIamPolicy
cloudtasks.queues.update

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Tasks Service Agent

(roles/cloudtasks.serviceAgent)

Grants Cloud Tasks Service Account access to manage resources.

iam.serviceAccounts.getAccessToken

iam.serviceAccounts.getOpenIdToken

logging.logEntries.create

Cloud Tasks Task Deleter ^Beta

(roles/cloudtasks.taskDeleter)

Access to delete tasks.

cloudtasks.tasks.delete

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Tasks Task Runner ^Beta

(roles/cloudtasks.taskRunner)

Access to run tasks.

cloudtasks.tasks.fullView

cloudtasks.tasks.run

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Tasks Viewer ^Beta

(roles/cloudtasks.viewer)

Get and list access to tasks, queues, and locations.

cloudtasks.cmekConfig.get

cloudtasks.locations.*

cloudtasks.locations.get
cloudtasks.locations.list

cloudtasks.queues.get

cloudtasks.queues.list

cloudtasks.tasks.fullView

cloudtasks.tasks.get

cloudtasks.tasks.list

monitoring.timeSeries.list

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Tasks permissions

Permission	Included in roles
`cloudtasks.cmekConfig.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Viewer (`roles/cloudtasks.viewer`) Support User (`roles/iam.supportUser`)
`cloudtasks.cmekConfig.update`	Owner (`roles/owner`) Cloud Tasks Admin (`roles/cloudtasks.admin`)
`cloudtasks.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Queue Admin (`roles/cloudtasks.queueAdmin`) Cloud Tasks Viewer (`roles/cloudtasks.viewer`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`) Support User (`roles/iam.supportUser`)
`cloudtasks.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Queue Admin (`roles/cloudtasks.queueAdmin`) Cloud Tasks Viewer (`roles/cloudtasks.viewer`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`cloudtasks.queues.create`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Queue Admin (`roles/cloudtasks.queueAdmin`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`)
`cloudtasks.queues.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Queue Admin (`roles/cloudtasks.queueAdmin`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`)
`cloudtasks.queues.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Queue Admin (`roles/cloudtasks.queueAdmin`) Cloud Tasks Viewer (`roles/cloudtasks.viewer`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`)
`cloudtasks.queues.getIamPolicy`	Owner (`roles/owner`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Queue Admin (`roles/cloudtasks.queueAdmin`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`)
`cloudtasks.queues.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Queue Admin (`roles/cloudtasks.queueAdmin`) Cloud Tasks Viewer (`roles/cloudtasks.viewer`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`cloudtasks.queues.pause`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Queue Admin (`roles/cloudtasks.queueAdmin`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`)
`cloudtasks.queues.purge`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Queue Admin (`roles/cloudtasks.queueAdmin`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`)
`cloudtasks.queues.resume`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Queue Admin (`roles/cloudtasks.queueAdmin`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`)
`cloudtasks.queues.setIamPolicy`	Owner (`roles/owner`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Queue Admin (`roles/cloudtasks.queueAdmin`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`) Security Admin (`roles/iam.securityAdmin`)
`cloudtasks.queues.update`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Queue Admin (`roles/cloudtasks.queueAdmin`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`)
`cloudtasks.tasks.create`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Enqueuer (`roles/cloudtasks.enqueuer`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`)
`cloudtasks.tasks.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Task Deleter (`roles/cloudtasks.taskDeleter`)
`cloudtasks.tasks.fullView`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Enqueuer (`roles/cloudtasks.enqueuer`) Cloud Tasks Task Runner (`roles/cloudtasks.taskRunner`) Cloud Tasks Viewer (`roles/cloudtasks.viewer`) Firebase Extensions API Service Agent (`roles/firebasemods.serviceAgent`) Support User (`roles/iam.supportUser`)
`cloudtasks.tasks.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Viewer (`roles/cloudtasks.viewer`) Support User (`roles/iam.supportUser`)
`cloudtasks.tasks.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Viewer (`roles/cloudtasks.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`cloudtasks.tasks.run`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Tasks Admin (`roles/cloudtasks.admin`) Cloud Tasks Task Runner (`roles/cloudtasks.taskRunner`)

Cloud Tasks roles and permissions