gcp-iam-catalog Roles Permissions
🔐

roles/cloudkmskacls.serviceAgent

Title Cloud KMS KACLS Service Agent
Stage GA
Role Type Service Agent
Permissions 3
Description Grants Cloud KMS KACLS Service Agent access to KMS resource permissions to perform DEK encryption/decryption.
🔍
cloudkms.cryptoKeyVersions.useToDecrypt
cloudkms.cryptoKeyVersions.useToEncrypt
cloudkms.cryptoKeys.get
🔍