Firewall Insights roles and permissions

This page lists the IAM roles and permissions for Firewall Insights. To search through all roles and permissions, see the role and permission index.

Firewall Insights roles

Firewall Insights offers the following service agent roles. Service agent roles should only be granted to service agents.

Role Permissions

(roles/firewallinsights.serviceAgent)

Gives Cloud Firewall Insights service agent permissions to retrieve Firewall, VM and route resources on user behalf.

compute.backendServices.list

compute.firewalls.get

compute.firewalls.list

compute.forwardingRules.list

compute.healthChecks.list

compute.httpHealthChecks.list

compute.httpsHealthChecks.list

compute.instanceGroups.list

compute.instances.get

compute.instances.list

compute.networks.getEffectiveFirewalls

compute.networks.list

compute.projects.get

compute.regionTargetTcpProxies.list

compute.routers.list

compute.routes.get

compute.routes.list

compute.subnetworks.list

compute.targetHttpProxies.list

compute.targetHttpsProxies.list

compute.targetPools.list

compute.targetSslProxies.list

compute.targetTcpProxies.list

compute.targetVpnGateways.list

compute.urlMaps.list

compute.vpnGateways.list

compute.vpnTunnels.list

Firewall Insights permissions

There are no IAM permissions for this service.