gcp-iam-catalog Roles Permissions
🔐

roles/privateca.caManager

Title CA Service Operation Manager
Stage GA
Role Type Predefined
Permissions 47
Description Create and manage CAs, revoke certificates, create certificates templates, and read-only access for CA Service resources.
🔍
privateca.caPools.create
privateca.caPools.createTagBinding
privateca.caPools.delete
privateca.caPools.deleteTagBinding
privateca.caPools.get
privateca.caPools.getIamPolicy
privateca.caPools.list
privateca.caPools.listEffectiveTags
privateca.caPools.listTagBindings
privateca.caPools.update
privateca.certificateAuthorities.create
privateca.certificateAuthorities.delete
privateca.certificateAuthorities.get
privateca.certificateAuthorities.getIamPolicy
privateca.certificateAuthorities.list
privateca.certificateAuthorities.update
privateca.certificateRevocationLists.get
privateca.certificateRevocationLists.getIamPolicy
privateca.certificateRevocationLists.list
privateca.certificateRevocationLists.update
privateca.certificateTemplates.create
privateca.certificateTemplates.createTagBinding
privateca.certificateTemplates.delete
privateca.certificateTemplates.deleteTagBinding
privateca.certificateTemplates.get
privateca.certificateTemplates.getIamPolicy
privateca.certificateTemplates.list
privateca.certificateTemplates.listEffectiveTags
privateca.certificateTemplates.listTagBindings
privateca.certificateTemplates.update
privateca.certificates.get
privateca.certificates.getIamPolicy
privateca.certificates.list
privateca.certificates.update
privateca.locations.get
privateca.locations.list
privateca.operations.get
privateca.operations.list
privateca.reusableConfigs.create
privateca.reusableConfigs.delete
privateca.reusableConfigs.get
privateca.reusableConfigs.getIamPolicy
privateca.reusableConfigs.list
privateca.reusableConfigs.update
resourcemanager.projects.get
resourcemanager.projects.list
storage.buckets.create
🔍