gcp-iam-catalog Roles Permissions
🔐

roles/cloudkms.serviceAgent

Title Cloud KMS Service Agent
Stage GA
Role Type Service Agent
Permissions 9
Description Gives Cloud KMS service account access to managed resources.
🔍
cloudasset.assets.listCloudkmsCryptoKeys
cloudasset.assets.listResource
cloudasset.assets.searchAllIamPolicies
cloudasset.assets.searchAllResources
cloudkms.cryptoKeys.create
cloudkms.cryptoKeys.getIamPolicy
cloudkms.cryptoKeys.setIamPolicy
cloudkms.keyRings.create
cloudkms.keyRings.get
🔍