Cloud Debugger roles and permissions

This page lists the IAM roles and permissions for Cloud Debugger. To search through all roles and permissions, see the role and permission index.

Cloud Debugger roles

Role Permissions

Role	Permissions
Cloud Debugger Agent ^Beta (`roles/clouddebugger.agent`) Provides permissions to register the debug target, read active breakpoints, and report breakpoint results. Lowest-level resources where you can grant this role: Service Account	`clouddebugger.breakpoints.list` `clouddebugger.breakpoints.listActive` `clouddebugger.breakpoints.update` `clouddebugger.debuggees.create`
Cloud Debugger User ^Beta (`roles/clouddebugger.user`) Provides permissions to create, view, list, and delete breakpoints (snapshots & logpoints) as well as list debug targets (debuggees). Lowest-level resources where you can grant this role: Project	`clouddebugger.breakpoints.create` `clouddebugger.breakpoints.delete` `clouddebugger.breakpoints.get` `clouddebugger.breakpoints.list` `clouddebugger.debuggees.list`

Cloud Debugger Agent ^Beta

(roles/clouddebugger.agent)

Provides permissions to register the debug target, read active breakpoints, and report breakpoint results.

Lowest-level resources where you can grant this role:

Service Account

clouddebugger.breakpoints.list

clouddebugger.breakpoints.listActive

clouddebugger.breakpoints.update

clouddebugger.debuggees.create

Cloud Debugger User ^Beta

(roles/clouddebugger.user)

Provides permissions to create, view, list, and delete breakpoints (snapshots & logpoints) as well as list debug targets (debuggees).

Lowest-level resources where you can grant this role:

Project

clouddebugger.breakpoints.create

clouddebugger.breakpoints.delete

clouddebugger.breakpoints.get

clouddebugger.breakpoints.list

clouddebugger.debuggees.list

Cloud Debugger permissions

Permission	Included in roles
`clouddebugger.breakpoints.create`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Debugger User (`roles/clouddebugger.user`)
`clouddebugger.breakpoints.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Debugger User (`roles/clouddebugger.user`)
`clouddebugger.breakpoints.get`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Debugger User (`roles/clouddebugger.user`)
`clouddebugger.breakpoints.list`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Debugger Agent (`roles/clouddebugger.agent`) Cloud Debugger User (`roles/clouddebugger.user`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`)
`clouddebugger.breakpoints.listActive`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Debugger Agent (`roles/clouddebugger.agent`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`)
`clouddebugger.breakpoints.update`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Debugger Agent (`roles/clouddebugger.agent`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`)
`clouddebugger.debuggees.create`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Debugger Agent (`roles/clouddebugger.agent`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`)
`clouddebugger.debuggees.list`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Debugger User (`roles/clouddebugger.user`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`)

Cloud Debugger roles and permissions