stage: "ALPHA"
title: "Role for LTM and KCS VMs"
description: "Permissions given to gce-xfstests LTM and KCS VMs"
includedPermissions:
- compute.addresses.get
- compute.addresses.list
- compute.addresses.use
- compute.addresses.useInternal
- compute.diskTypes.get
- compute.diskTypes.list
- compute.disks.create
- compute.disks.createSnapshot
- compute.disks.delete
- compute.disks.get
- compute.disks.list
- compute.disks.resize
- compute.disks.setLabels
- compute.disks.update
- compute.disks.use
- compute.disks.useReadOnly
- compute.forwardingRules.use
- compute.globalAddresses.use
- compute.healthChecks.get
- compute.healthChecks.use
- compute.healthChecks.useReadOnly
- compute.globalOperations.get
- compute.images.get
- compute.images.getFromFamily
- compute.images.list
- compute.images.useReadOnly
- compute.instances.addAccessConfig
- compute.instances.addMaintenancePolicies
- compute.instances.attachDisk
- compute.instances.create
- compute.instances.delete
- compute.instances.deleteAccessConfig
- compute.instances.detachDisk
- compute.instances.get
- compute.instances.getEffectiveFirewalls
- compute.instances.getGuestAttributes
- compute.instances.getIamPolicy
- compute.instances.getScreenshot
- compute.instances.getSerialPortOutput
- compute.instances.getShieldedInstanceIdentity
- compute.instances.getShieldedVmIdentity
- compute.instances.list
- compute.instances.listReferrers
- compute.instances.osAdminLogin
- compute.instances.osLogin
- compute.instances.removeMaintenancePolicies
- compute.instances.reset
- compute.instances.resume
- compute.instances.sendDiagnosticInterrupt
- compute.instances.setDeletionProtection
- compute.instances.setDiskAutoDelete
- compute.instances.setLabels
- compute.instances.setMachineResources
- compute.instances.setMachineType
- compute.instances.setMetadata
- compute.instances.setMinCpuPlatform
- compute.instances.setScheduling
- compute.instances.setServiceAccount
- compute.instances.setShieldedInstanceIntegrityPolicy
- compute.instances.setShieldedVmIntegrityPolicy
- compute.instances.setTags
- compute.instances.start
- compute.instances.startWithEncryptionKey
- compute.instances.stop
- compute.instances.suspend
- compute.instances.update
- compute.instances.updateAccessConfig
- compute.instances.updateDisplayDevice
- compute.instances.updateNetworkInterface
- compute.instances.updateSecurity
- compute.instances.updateShieldedInstanceConfig
- compute.instances.updateShieldedVmConfig
- compute.instances.use
- compute.instances.useReadOnly
- compute.licenseCodes.get
- compute.licenseCodes.list
- compute.licenseCodes.use
- compute.licenses.create
- compute.licenses.get
- compute.licenses.list
- compute.machineTypes.get
- compute.machineTypes.list
- compute.maintenancePolicies.get
- compute.maintenancePolicies.list
- compute.maintenancePolicies.use
- compute.networks.access
- compute.networks.addPeering
- compute.networks.create
- compute.networks.delete
- compute.networks.get
- compute.networks.getEffectiveFirewalls
- compute.networks.list
- compute.networks.listPeeringRoutes
- compute.networks.mirror
- compute.networks.removePeering
- compute.networks.switchToCustomMode
- compute.networks.update
- compute.networks.updatePeering
- compute.networks.updatePolicy
- compute.networks.use
- compute.networks.useExternalIp
- compute.nodeTypes.get
- compute.nodeTypes.list
- compute.packetMirrorings.update
- compute.projects.get
- compute.regions.get
- compute.regions.list
- compute.resourcePolicies.get
- compute.resourcePolicies.list
- compute.resourcePolicies.use
- compute.snapshots.create
- compute.snapshots.delete
- compute.snapshots.get
- compute.snapshots.getIamPolicy
- compute.snapshots.list
- compute.snapshots.useReadOnly
- compute.subnetworks.get
- compute.subnetworks.use
- compute.subnetworks.useExternalIp
- compute.zoneOperations.delete
- compute.zoneOperations.get
- compute.zoneOperations.getIamPolicy
- compute.zoneOperations.list
- compute.zones.get
- compute.zones.list
- iam.roles.get
- iam.roles.list
- iam.serviceAccounts.actAs
- iam.serviceAccounts.get
- iam.serviceAccounts.list
- logging.buckets.copyLogEntries
- logging.buckets.get
- logging.buckets.list
- logging.cmekSettings.get
- logging.cmekSettings.update
- logging.exclusions.get
- logging.exclusions.list
- logging.locations.get
- logging.locations.list
- logging.logEntries.create
- logging.logEntries.download
- logging.logEntries.list
- logging.logMetrics.create
- logging.logMetrics.delete
- logging.logMetrics.get
- logging.logMetrics.list
- logging.logMetrics.update
- logging.logServiceIndexes.list
- logging.logServices.list
- logging.logs.delete
- logging.logs.list
- logging.notificationRules.create
- logging.notificationRules.delete
- logging.notificationRules.get
- logging.notificationRules.list
- logging.notificationRules.update
- logging.operations.cancel
- logging.operations.get
- logging.operations.list
- logging.queries.create
- logging.queries.delete
- logging.queries.get
- logging.queries.list
- logging.queries.listShared
- logging.queries.update
- logging.sinks.get
- logging.sinks.list
- logging.usage.get
- logging.views.create
- logging.views.delete
- logging.views.get
- logging.views.list
- logging.views.listLogs
- logging.views.listResourceKeys
- logging.views.listResourceValues
- logging.views.update
- recommender.locations.get
- recommender.locations.list
- resourcemanager.projects.get
- run.configurations.get
- run.configurations.list
- run.locations.list
- run.operations.get
- run.operations.list
- run.revisions.get
- run.revisions.list
- run.routes.get
- run.routes.list
- run.services.get
- run.services.getIamPolicy
- run.services.list
- storage.buckets.get
- storage.buckets.list
- storage.objects.create
- storage.objects.delete
- storage.objects.get
- storage.objects.list
- storage.objects.update
