Roles and permissions

These are the built-in roles for the Compute service. Each row lists a role, what it grants, and the exact permissions it includes. Roles are system-defined (built-in) or custom; permissions are system-defined and read-only. The platform-wide Viewer, Editor, and Admin roles also apply across every service; see the roles and permissions catalogue. You can also compose a custom role from any of these permissions.

Role	Included permissions
Compute Viewer Read-only access to all compute resources	compute.operation.get compute.operation.list compute.vm.get compute.vm.list
Compute Editor Read and write access to all compute resources	compute.operation.get compute.operation.list compute.vm.create compute.vm.get compute.vm.list compute.vm.reset compute.vm.restart compute.vm.resume compute.vm.start compute.vm.stop compute.vm.suspend compute.vm.update
Compute Admin Full access to all compute resources	compute.operation.get compute.operation.list compute.vm.create compute.vm.delete compute.vm.get compute.vm.list compute.vm.reset compute.vm.restart compute.vm.resume compute.vm.start compute.vm.stop compute.vm.suspend compute.vm.update
VM Viewer View virtual machines and operations	compute.operation.get compute.operation.list compute.vm.get compute.vm.list
VM Editor View and manage virtual machines	compute.operation.get compute.operation.list compute.vm.create compute.vm.get compute.vm.list compute.vm.reset compute.vm.restart compute.vm.resume compute.vm.start compute.vm.stop compute.vm.suspend compute.vm.update
VM Admin Full access to virtual machines	compute.operation.get compute.operation.list compute.vm.create compute.vm.delete compute.vm.get compute.vm.list compute.vm.reset compute.vm.restart compute.vm.resume compute.vm.start compute.vm.stop compute.vm.suspend compute.vm.update

Related

• Compute overview
• The authorization model
• Roles and permissions catalogue