gcp-iam-catalog Roles Permissions
🔐

roles/osconfig.serviceAgent

Title Cloud OS Config Service Agent
Stage GA
Role Type Service Agent
Permissions 27
Description Grants OS Config Service Account access to Google Compute Engine instances.
🔍
cloudasset.assets.listOSConfigOSPolicyAssignments
cloudasset.assets.listPatchDeployments
compute.globalOperations.get
compute.instances.get
compute.instances.getGuestAttributes
compute.instances.list
compute.instances.setMetadata
compute.projects.get
compute.projects.setCommonInstanceMetadata
compute.zones.get
compute.zones.list
containeranalysis.notes.attachOccurrence
containeranalysis.notes.create
containeranalysis.notes.delete
containeranalysis.notes.get
containeranalysis.notes.list
containeranalysis.notes.update
containeranalysis.occurrences.create
containeranalysis.occurrences.delete
containeranalysis.occurrences.get
containeranalysis.occurrences.list
containeranalysis.occurrences.update
iam.serviceAccounts.actAs
osconfig.projectFeatureSettings.get
osconfig.projectFeatureSettings.update
resourcemanager.projects.get
resourcemanager.projects.list
🔍