API Hub roles and permissions

This page lists the IAM roles and permissions for API Hub. To search through all roles and permissions, see the role and permission index.

API Hub roles

Role Permissions

Role	Permissions
Cloud API hub Addons Admin ^Beta (`roles/apihub.addonsAdmin`) Full access to all Cloud API hub addon resources.	`apihub.addons.*` `apihub.addons.get` `apihub.addons.list` `apihub.addons.manage` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud API Hub Admin ^Beta (`roles/apihub.admin`) Full access to all API hub resources.	`apigee.projectorganizations.get` `apihub.` `apihub.addons.get` `apihub.addons.list` `apihub.addons.manage` `apihub.apiHubInstances.create` `apihub.apiHubInstances.delete` `apihub.apiHubInstances.get` `apihub.apiHubInstances.list` `apihub.apiHubInstances.update` `apihub.apiOperations.create` `apihub.apiOperations.delete` `apihub.apiOperations.get` `apihub.apiOperations.list` `apihub.apiOperations.listAll` `apihub.apiOperations.update` `apihub.apis.create` `apihub.apis.createTagBinding` `apihub.apis.delete` `apihub.apis.deleteTagBinding` `apihub.apis.get` `apihub.apis.list` `apihub.apis.listEffectiveTags` `apihub.apis.listTagBindings` `apihub.apis.update` `apihub.attributes.create` `apihub.attributes.delete` `apihub.attributes.get` `apihub.attributes.list` `apihub.attributes.update` `apihub.curations.create` `apihub.curations.delete` `apihub.curations.get` `apihub.curations.list` `apihub.curations.update` `apihub.definitions.get` `apihub.definitions.list` `apihub.definitions.update` `apihub.dependencies.create` `apihub.dependencies.delete` `apihub.dependencies.get` `apihub.dependencies.list` `apihub.dependencies.update` `apihub.deployments.create` `apihub.deployments.createTagBinding` `apihub.deployments.delete` `apihub.deployments.deleteTagBinding` `apihub.deployments.get` `apihub.deployments.list` `apihub.deployments.listEffectiveTags` `apihub.deployments.listTagBindings` `apihub.deployments.update` `apihub.discoveredApiObservations.get` `apihub.discoveredApiObservations.list` `apihub.discoveredApiOperations.get` `apihub.discoveredApiOperations.list` `apihub.externalApis.create` `apihub.externalApis.delete` `apihub.externalApis.get` `apihub.externalApis.list` `apihub.externalApis.update` `apihub.hostProjectRegistrations.create` `apihub.hostProjectRegistrations.delete` `apihub.hostProjectRegistrations.get` `apihub.hostProjectRegistrations.list` `apihub.hostProjectRegistrations.register` `apihub.llmEnablements.deregister` `apihub.llmEnablements.get` `apihub.llmEnablements.list` `apihub.llmEnablements.register` `apihub.locations.collectApiData` `apihub.locations.getApiInsights` `apihub.locations.searchResources` `apihub.locations2.searchResources` `apihub.operations.cancel` `apihub.operations.delete` `apihub.operations.get` `apihub.operations.list` `apihub.plugininstances.applyConfig` `apihub.plugininstances.create` `apihub.plugininstances.delete` `apihub.plugininstances.disable` `apihub.plugininstances.enable` `apihub.plugininstances.execute` `apihub.plugininstances.get` `apihub.plugininstances.list` `apihub.plugininstances.managePluginInstanceSourceData` `apihub.plugininstances.update` `apihub.plugins.create` `apihub.plugins.delete` `apihub.plugins.disable` `apihub.plugins.enable` `apihub.plugins.get` `apihub.plugins.list` `apihub.runTimeProjectAttachments.attach` `apihub.runTimeProjectAttachments.create` `apihub.runTimeProjectAttachments.delete` `apihub.runTimeProjectAttachments.get` `apihub.runTimeProjectAttachments.list` `apihub.runTimeProjectAttachments.lookup` `apihub.specs.create` `apihub.specs.delete` `apihub.specs.get` `apihub.specs.lint` `apihub.specs.list` `apihub.specs.listAll` `apihub.specs.update` `apihub.styleGuides.get` `apihub.styleGuides.update` `apihub.versions.create` `apihub.versions.delete` `apihub.versions.get` `apihub.versions.list` `apihub.versions.listAll` `apihub.versions.update` `monitoring.dashboards.get` `monitoring.dashboards.list` `monitoring.metricDescriptors.get` `monitoring.metricDescriptors.list` `monitoring.monitoredResourceDescriptors.` `monitoring.monitoredResourceDescriptors.get` `monitoring.monitoredResourceDescriptors.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud API hub Insights Viewer ^Beta (`roles/apihub.apiInsightsViewer`) View API hub insights dashboards.	`apigee.projectorganizations.get` `apihub.apiHubInstances.get` `apihub.apiHubInstances.list` `apihub.apis.get` `apihub.apis.list` `apihub.deployments.get` `apihub.deployments.list` `apihub.locations.getApiInsights` `apihub.plugininstances.get` `apihub.plugininstances.list` `monitoring.dashboards.get` `monitoring.dashboards.list` `monitoring.metricDescriptors.get` `monitoring.metricDescriptors.list` `monitoring.monitoredResourceDescriptors.*` `monitoring.monitoredResourceDescriptors.get` `monitoring.monitoredResourceDescriptors.list`
Cloud API hub Attributes Admin ^Beta (`roles/apihub.attributeAdmin`) Full access to all Cloud API hub attribute's resources.	`apihub.attributes.*` `apihub.attributes.create` `apihub.attributes.delete` `apihub.attributes.get` `apihub.attributes.list` `apihub.attributes.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud API Hub Editor ^Beta (`roles/apihub.editor`) Edit access to most of Cloud API Hub resources.	`apihub.addons.get` `apihub.addons.list` `apihub.apiHubInstances.get` `apihub.apiHubInstances.list` `apihub.apiOperations.` `apihub.apiOperations.create` `apihub.apiOperations.delete` `apihub.apiOperations.get` `apihub.apiOperations.list` `apihub.apiOperations.listAll` `apihub.apiOperations.update` `apihub.apis.` `apihub.apis.create` `apihub.apis.createTagBinding` `apihub.apis.delete` `apihub.apis.deleteTagBinding` `apihub.apis.get` `apihub.apis.list` `apihub.apis.listEffectiveTags` `apihub.apis.listTagBindings` `apihub.apis.update` `apihub.attributes.get` `apihub.attributes.list` `apihub.curations.get` `apihub.curations.list` `apihub.definitions.` `apihub.definitions.get` `apihub.definitions.list` `apihub.definitions.update` `apihub.dependencies.` `apihub.dependencies.create` `apihub.dependencies.delete` `apihub.dependencies.get` `apihub.dependencies.list` `apihub.dependencies.update` `apihub.deployments.` `apihub.deployments.create` `apihub.deployments.createTagBinding` `apihub.deployments.delete` `apihub.deployments.deleteTagBinding` `apihub.deployments.get` `apihub.deployments.list` `apihub.deployments.listEffectiveTags` `apihub.deployments.listTagBindings` `apihub.deployments.update` `apihub.discoveredApiObservations.` `apihub.discoveredApiObservations.get` `apihub.discoveredApiObservations.list` `apihub.discoveredApiOperations.` `apihub.discoveredApiOperations.get` `apihub.discoveredApiOperations.list` `apihub.externalApis.` `apihub.externalApis.create` `apihub.externalApis.delete` `apihub.externalApis.get` `apihub.externalApis.list` `apihub.externalApis.update` `apihub.hostProjectRegistrations.get` `apihub.hostProjectRegistrations.list` `apihub.llmEnablements.` `apihub.llmEnablements.deregister` `apihub.llmEnablements.get` `apihub.llmEnablements.list` `apihub.llmEnablements.register` `apihub.locations.collectApiData` `apihub.locations.searchResources` `apihub.operations.get` `apihub.operations.list` `apihub.plugininstances.get` `apihub.plugininstances.list` `apihub.plugins.get` `apihub.plugins.list` `apihub.runTimeProjectAttachments.get` `apihub.runTimeProjectAttachments.list` `apihub.specs.` `apihub.specs.create` `apihub.specs.delete` `apihub.specs.get` `apihub.specs.lint` `apihub.specs.list` `apihub.specs.listAll` `apihub.specs.update` `apihub.styleGuides.get` `apihub.versions.*` `apihub.versions.create` `apihub.versions.delete` `apihub.versions.get` `apihub.versions.list` `apihub.versions.listAll` `apihub.versions.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud API hub Plugins Admin ^Beta (`roles/apihub.pluginAdmin`) Full access to all Cloud API hub plugin's resources.	`apihub.curations.` `apihub.curations.create` `apihub.curations.delete` `apihub.curations.get` `apihub.curations.list` `apihub.curations.update` `apihub.locations.collectApiData` `apihub.operations.` `apihub.operations.cancel` `apihub.operations.delete` `apihub.operations.get` `apihub.operations.list` `apihub.plugininstances.` `apihub.plugininstances.applyConfig` `apihub.plugininstances.create` `apihub.plugininstances.delete` `apihub.plugininstances.disable` `apihub.plugininstances.enable` `apihub.plugininstances.execute` `apihub.plugininstances.get` `apihub.plugininstances.list` `apihub.plugininstances.managePluginInstanceSourceData` `apihub.plugininstances.update` `apihub.plugins.` `apihub.plugins.create` `apihub.plugins.delete` `apihub.plugins.disable` `apihub.plugins.enable` `apihub.plugins.get` `apihub.plugins.list` `apihub.specs.lint` `apihub.styleGuides.*` `apihub.styleGuides.get` `apihub.styleGuides.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud API hub Provisioning Admin ^Beta (`roles/apihub.provisioningAdmin`) Full access to Cloud API hub provisioning related resources.	`apihub.apiHubInstances.` `apihub.apiHubInstances.create` `apihub.apiHubInstances.delete` `apihub.apiHubInstances.get` `apihub.apiHubInstances.list` `apihub.apiHubInstances.update` `apihub.hostProjectRegistrations.` `apihub.hostProjectRegistrations.create` `apihub.hostProjectRegistrations.delete` `apihub.hostProjectRegistrations.get` `apihub.hostProjectRegistrations.list` `apihub.hostProjectRegistrations.register` `apihub.operations.` `apihub.operations.cancel` `apihub.operations.delete` `apihub.operations.get` `apihub.operations.list` `apihub.runTimeProjectAttachments.` `apihub.runTimeProjectAttachments.attach` `apihub.runTimeProjectAttachments.create` `apihub.runTimeProjectAttachments.delete` `apihub.runTimeProjectAttachments.get` `apihub.runTimeProjectAttachments.list` `apihub.runTimeProjectAttachments.lookup` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud API hub Runtime Project Attachment Editor ^Beta (`roles/apihub.runTimeProjectAttachmentsEditor`) Access to add/delete project as a runtime project attachment to API hub host project.	`apihub.runTimeProjectAttachments.attach`
API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`) Gives API-Hub Service Account access to runtime project resources. Warning: Do not grant service agent roles to any principals except service agents.	`apigee.deployments.list` `apigee.envgroupattachments.list` `apigee.envgroups.list` `apigee.environments.get` `apigee.organizations.create` `apigee.organizations.delete` `apigee.organizations.get` `apigee.organizations.update` `apigee.proxies.get` `apigee.proxyrevisions.get` `apihub.apiOperations.delete` `apihub.apiOperations.list` `apihub.apis.create` `apihub.apis.delete` `apihub.apis.list` `apihub.apis.update` `apihub.attributes.create` `apihub.attributes.list` `apihub.attributes.update` `apihub.curations.list` `apihub.definitions.list` `apihub.dependencies.delete` `apihub.dependencies.list` `apihub.deployments.create` `apihub.deployments.delete` `apihub.deployments.list` `apihub.deployments.update` `apihub.externalApis.list` `apihub.hostProjectRegistrations.list` `apihub.operations.get` `apihub.operations.list` `apihub.plugininstances.create` `apihub.plugininstances.delete` `apihub.plugininstances.list` `apihub.plugininstances.update` `apihub.plugins.create` `apihub.plugins.delete` `apihub.plugins.list` `apihub.runTimeProjectAttachments.list` `apihub.specs.create` `apihub.specs.delete` `apihub.specs.list` `apihub.specs.update` `apihub.versions.create` `apihub.versions.delete` `apihub.versions.list` `apihub.versions.update`
Cloud API hub Viewer ^Beta (`roles/apihub.viewer`) View access to all Cloud API hub resources.	`apihub.addons.get` `apihub.addons.list` `apihub.apiHubInstances.get` `apihub.apiHubInstances.list` `apihub.apiOperations.get` `apihub.apiOperations.list` `apihub.apiOperations.listAll` `apihub.apis.get` `apihub.apis.list` `apihub.apis.listEffectiveTags` `apihub.apis.listTagBindings` `apihub.attributes.get` `apihub.attributes.list` `apihub.curations.get` `apihub.curations.list` `apihub.definitions.get` `apihub.definitions.list` `apihub.dependencies.get` `apihub.dependencies.list` `apihub.deployments.get` `apihub.deployments.list` `apihub.deployments.listEffectiveTags` `apihub.deployments.listTagBindings` `apihub.discoveredApiObservations.` `apihub.discoveredApiObservations.get` `apihub.discoveredApiObservations.list` `apihub.discoveredApiOperations.` `apihub.discoveredApiOperations.get` `apihub.discoveredApiOperations.list` `apihub.externalApis.get` `apihub.externalApis.list` `apihub.hostProjectRegistrations.get` `apihub.hostProjectRegistrations.list` `apihub.llmEnablements.get` `apihub.llmEnablements.list` `apihub.locations.searchResources` `apihub.operations.get` `apihub.operations.list` `apihub.plugininstances.get` `apihub.plugininstances.list` `apihub.plugins.get` `apihub.plugins.list` `apihub.runTimeProjectAttachments.get` `apihub.runTimeProjectAttachments.list` `apihub.specs.get` `apihub.specs.list` `apihub.specs.listAll` `apihub.styleGuides.get` `apihub.versions.get` `apihub.versions.list` `apihub.versions.listAll` `resourcemanager.projects.get` `resourcemanager.projects.list`

Cloud API hub Addons Admin ^Beta

(roles/apihub.addonsAdmin)

Full access to all Cloud API hub addon resources.

apihub.addons.*

apihub.addons.get
apihub.addons.list
apihub.addons.manage

resourcemanager.projects.get

resourcemanager.projects.list

Cloud API Hub Admin ^Beta

(roles/apihub.admin)

Full access to all API hub resources.

apigee.projectorganizations.get

apihub.*

apihub.addons.get
apihub.addons.list
apihub.addons.manage
apihub.apiHubInstances.create
apihub.apiHubInstances.delete
apihub.apiHubInstances.get
apihub.apiHubInstances.list
apihub.apiHubInstances.update
apihub.apiOperations.create
apihub.apiOperations.delete
apihub.apiOperations.get
apihub.apiOperations.list
apihub.apiOperations.listAll
apihub.apiOperations.update
apihub.apis.create
apihub.apis.createTagBinding
apihub.apis.delete
apihub.apis.deleteTagBinding
apihub.apis.get
apihub.apis.list
apihub.apis.listEffectiveTags
apihub.apis.listTagBindings
apihub.apis.update
apihub.attributes.create
apihub.attributes.delete
apihub.attributes.get
apihub.attributes.list
apihub.attributes.update
apihub.curations.create
apihub.curations.delete
apihub.curations.get
apihub.curations.list
apihub.curations.update
apihub.definitions.get
apihub.definitions.list
apihub.definitions.update
apihub.dependencies.create
apihub.dependencies.delete
apihub.dependencies.get
apihub.dependencies.list
apihub.dependencies.update
apihub.deployments.create
apihub.deployments.createTagBinding
apihub.deployments.delete
apihub.deployments.deleteTagBinding
apihub.deployments.get
apihub.deployments.list
apihub.deployments.listEffectiveTags
apihub.deployments.listTagBindings
apihub.deployments.update
apihub.discoveredApiObservations.get
apihub.discoveredApiObservations.list
apihub.discoveredApiOperations.get
apihub.discoveredApiOperations.list
apihub.externalApis.create
apihub.externalApis.delete
apihub.externalApis.get
apihub.externalApis.list
apihub.externalApis.update
apihub.hostProjectRegistrations.create
apihub.hostProjectRegistrations.delete
apihub.hostProjectRegistrations.get
apihub.hostProjectRegistrations.list
apihub.hostProjectRegistrations.register
apihub.llmEnablements.deregister
apihub.llmEnablements.get
apihub.llmEnablements.list
apihub.llmEnablements.register
apihub.locations.collectApiData
apihub.locations.getApiInsights
apihub.locations.searchResources
apihub.locations2.searchResources
apihub.operations.cancel
apihub.operations.delete
apihub.operations.get
apihub.operations.list
apihub.plugininstances.applyConfig
apihub.plugininstances.create
apihub.plugininstances.delete
apihub.plugininstances.disable
apihub.plugininstances.enable
apihub.plugininstances.execute
apihub.plugininstances.get
apihub.plugininstances.list
apihub.plugininstances.managePluginInstanceSourceData
apihub.plugininstances.update
apihub.plugins.create
apihub.plugins.delete
apihub.plugins.disable
apihub.plugins.enable
apihub.plugins.get
apihub.plugins.list
apihub.runTimeProjectAttachments.attach
apihub.runTimeProjectAttachments.create
apihub.runTimeProjectAttachments.delete
apihub.runTimeProjectAttachments.get
apihub.runTimeProjectAttachments.list
apihub.runTimeProjectAttachments.lookup
apihub.specs.create
apihub.specs.delete
apihub.specs.get
apihub.specs.lint
apihub.specs.list
apihub.specs.listAll
apihub.specs.update
apihub.styleGuides.get
apihub.styleGuides.update
apihub.versions.create
apihub.versions.delete
apihub.versions.get
apihub.versions.list
apihub.versions.listAll
apihub.versions.update

monitoring.dashboards.get

monitoring.dashboards.list

monitoring.metricDescriptors.get

monitoring.metricDescriptors.list

monitoring.monitoredResourceDescriptors.*

monitoring.monitoredResourceDescriptors.get
monitoring.monitoredResourceDescriptors.list

resourcemanager.projects.get

resourcemanager.projects.list

Cloud API hub Insights Viewer ^Beta

(roles/apihub.apiInsightsViewer)

View API hub insights dashboards.

apigee.projectorganizations.get

apihub.apiHubInstances.get

apihub.apiHubInstances.list

apihub.apis.get

apihub.apis.list

apihub.deployments.get

apihub.deployments.list

apihub.locations.getApiInsights

apihub.plugininstances.get

apihub.plugininstances.list

monitoring.dashboards.get

monitoring.dashboards.list

monitoring.metricDescriptors.get

monitoring.metricDescriptors.list

monitoring.monitoredResourceDescriptors.*

monitoring.monitoredResourceDescriptors.get
monitoring.monitoredResourceDescriptors.list

Cloud API hub Attributes Admin ^Beta

(roles/apihub.attributeAdmin)

Full access to all Cloud API hub attribute's resources.

apihub.attributes.*

apihub.attributes.create
apihub.attributes.delete
apihub.attributes.get
apihub.attributes.list
apihub.attributes.update

resourcemanager.projects.get

resourcemanager.projects.list

Cloud API Hub Editor ^Beta

(roles/apihub.editor)

Edit access to most of Cloud API Hub resources.

apihub.addons.get

apihub.addons.list

apihub.apiHubInstances.get

apihub.apiHubInstances.list

apihub.apiOperations.*

apihub.apiOperations.create
apihub.apiOperations.delete
apihub.apiOperations.get
apihub.apiOperations.list
apihub.apiOperations.listAll
apihub.apiOperations.update

apihub.apis.*

apihub.apis.create
apihub.apis.createTagBinding
apihub.apis.delete
apihub.apis.deleteTagBinding
apihub.apis.get
apihub.apis.list
apihub.apis.listEffectiveTags
apihub.apis.listTagBindings
apihub.apis.update

apihub.attributes.get

apihub.attributes.list

apihub.curations.get

apihub.curations.list

apihub.definitions.*

apihub.definitions.get
apihub.definitions.list
apihub.definitions.update

apihub.dependencies.*

apihub.dependencies.create
apihub.dependencies.delete
apihub.dependencies.get
apihub.dependencies.list
apihub.dependencies.update

apihub.deployments.*

apihub.deployments.create
apihub.deployments.createTagBinding
apihub.deployments.delete
apihub.deployments.deleteTagBinding
apihub.deployments.get
apihub.deployments.list
apihub.deployments.listEffectiveTags
apihub.deployments.listTagBindings
apihub.deployments.update

apihub.discoveredApiObservations.*

apihub.discoveredApiObservations.get
apihub.discoveredApiObservations.list

apihub.discoveredApiOperations.*

apihub.discoveredApiOperations.get
apihub.discoveredApiOperations.list

apihub.externalApis.*

apihub.externalApis.create
apihub.externalApis.delete
apihub.externalApis.get
apihub.externalApis.list
apihub.externalApis.update

apihub.hostProjectRegistrations.get

apihub.hostProjectRegistrations.list

apihub.llmEnablements.*

apihub.llmEnablements.deregister
apihub.llmEnablements.get
apihub.llmEnablements.list
apihub.llmEnablements.register

apihub.locations.collectApiData

apihub.locations.searchResources

apihub.operations.get

apihub.operations.list

apihub.plugininstances.get

apihub.plugininstances.list

apihub.plugins.get

apihub.plugins.list

apihub.runTimeProjectAttachments.get

apihub.runTimeProjectAttachments.list

apihub.specs.*

apihub.specs.create
apihub.specs.delete
apihub.specs.get
apihub.specs.lint
apihub.specs.list
apihub.specs.listAll
apihub.specs.update

apihub.styleGuides.get

apihub.versions.*

apihub.versions.create
apihub.versions.delete
apihub.versions.get
apihub.versions.list
apihub.versions.listAll
apihub.versions.update

resourcemanager.projects.get

resourcemanager.projects.list

Cloud API hub Plugins Admin ^Beta

(roles/apihub.pluginAdmin)

Full access to all Cloud API hub plugin's resources.

apihub.curations.*

apihub.curations.create
apihub.curations.delete
apihub.curations.get
apihub.curations.list
apihub.curations.update

apihub.locations.collectApiData

apihub.operations.*

apihub.operations.cancel
apihub.operations.delete
apihub.operations.get
apihub.operations.list

apihub.plugininstances.*

apihub.plugininstances.applyConfig
apihub.plugininstances.create
apihub.plugininstances.delete
apihub.plugininstances.disable
apihub.plugininstances.enable
apihub.plugininstances.execute
apihub.plugininstances.get
apihub.plugininstances.list
apihub.plugininstances.managePluginInstanceSourceData
apihub.plugininstances.update

apihub.plugins.*

apihub.plugins.create
apihub.plugins.delete
apihub.plugins.disable
apihub.plugins.enable
apihub.plugins.get
apihub.plugins.list

apihub.specs.lint

apihub.styleGuides.*

apihub.styleGuides.get
apihub.styleGuides.update

resourcemanager.projects.get

resourcemanager.projects.list

Cloud API hub Provisioning Admin ^Beta

(roles/apihub.provisioningAdmin)

Full access to Cloud API hub provisioning related resources.

apihub.apiHubInstances.*

apihub.apiHubInstances.create
apihub.apiHubInstances.delete
apihub.apiHubInstances.get
apihub.apiHubInstances.list
apihub.apiHubInstances.update

apihub.hostProjectRegistrations.*

apihub.hostProjectRegistrations.create
apihub.hostProjectRegistrations.delete
apihub.hostProjectRegistrations.get
apihub.hostProjectRegistrations.list
apihub.hostProjectRegistrations.register

apihub.operations.*

apihub.operations.cancel
apihub.operations.delete
apihub.operations.get
apihub.operations.list

apihub.runTimeProjectAttachments.*

apihub.runTimeProjectAttachments.attach
apihub.runTimeProjectAttachments.create
apihub.runTimeProjectAttachments.delete
apihub.runTimeProjectAttachments.get
apihub.runTimeProjectAttachments.list
apihub.runTimeProjectAttachments.lookup

resourcemanager.projects.get

resourcemanager.projects.list

Cloud API hub Runtime Project Attachment Editor ^Beta

(roles/apihub.runTimeProjectAttachmentsEditor)

Access to add/delete project as a runtime project attachment to API hub host project.

apihub.runTimeProjectAttachments.attach

API-Hub Runtime Project Service Agent

(roles/apihub.runtimeProjectServiceAgent)

Gives API-Hub Service Account access to runtime project resources.

apigee.deployments.list

apigee.envgroupattachments.list

apigee.envgroups.list

apigee.environments.get

apigee.organizations.create

apigee.organizations.delete

apigee.organizations.get

apigee.organizations.update

apigee.proxies.get

apigee.proxyrevisions.get

apihub.apiOperations.delete

apihub.apiOperations.list

apihub.apis.create

apihub.apis.delete

apihub.apis.list

apihub.apis.update

apihub.attributes.create

apihub.attributes.list

apihub.attributes.update

apihub.curations.list

apihub.definitions.list

apihub.dependencies.delete

apihub.dependencies.list

apihub.deployments.create

apihub.deployments.delete

apihub.deployments.list

apihub.deployments.update

apihub.externalApis.list

apihub.hostProjectRegistrations.list

apihub.operations.get

apihub.operations.list

apihub.plugininstances.create

apihub.plugininstances.delete

apihub.plugininstances.list

apihub.plugininstances.update

apihub.plugins.create

apihub.plugins.delete

apihub.plugins.list

apihub.runTimeProjectAttachments.list

apihub.specs.create

apihub.specs.delete

apihub.specs.list

apihub.specs.update

apihub.versions.create

apihub.versions.delete

apihub.versions.list

apihub.versions.update

Cloud API hub Viewer ^Beta

(roles/apihub.viewer)

View access to all Cloud API hub resources.

apihub.addons.get

apihub.addons.list

apihub.apiHubInstances.get

apihub.apiHubInstances.list

apihub.apiOperations.get

apihub.apiOperations.list

apihub.apiOperations.listAll

apihub.apis.get

apihub.apis.list

apihub.apis.listEffectiveTags

apihub.apis.listTagBindings

apihub.attributes.get

apihub.attributes.list

apihub.curations.get

apihub.curations.list

apihub.definitions.get

apihub.definitions.list

apihub.dependencies.get

apihub.dependencies.list

apihub.deployments.get

apihub.deployments.list

apihub.deployments.listEffectiveTags

apihub.deployments.listTagBindings

apihub.discoveredApiObservations.*

apihub.discoveredApiObservations.get
apihub.discoveredApiObservations.list

apihub.discoveredApiOperations.*

apihub.discoveredApiOperations.get
apihub.discoveredApiOperations.list

apihub.externalApis.get

apihub.externalApis.list

apihub.hostProjectRegistrations.get

apihub.hostProjectRegistrations.list

apihub.llmEnablements.get

apihub.llmEnablements.list

apihub.locations.searchResources

apihub.operations.get

apihub.operations.list

apihub.plugininstances.get

apihub.plugininstances.list

apihub.plugins.get

apihub.plugins.list

apihub.runTimeProjectAttachments.get

apihub.runTimeProjectAttachments.list

apihub.specs.get

apihub.specs.list

apihub.specs.listAll

apihub.styleGuides.get

apihub.versions.get

apihub.versions.list

apihub.versions.listAll

resourcemanager.projects.get

resourcemanager.projects.list

API Hub permissions

Permission	Included in roles
`apihub.addons.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API hub Addons Admin (`roles/apihub.addonsAdmin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.addons.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API hub Addons Admin (`roles/apihub.addonsAdmin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.addons.manage`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API hub Addons Admin (`roles/apihub.addonsAdmin`) Cloud API Hub Admin (`roles/apihub.admin`)
`apihub.apiHubInstances.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.apiHubInstances.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.apiHubInstances.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Insights Viewer (`roles/apihub.apiInsightsViewer`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Cloud API hub Viewer (`roles/apihub.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.apiHubInstances.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Insights Viewer (`roles/apihub.apiInsightsViewer`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Cloud API hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.apiHubInstances.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`)
`apihub.apiOperations.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`)
`apihub.apiOperations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.apiOperations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Support User (`roles/iam.supportUser`)
`apihub.apiOperations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.apiOperations.listAll`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Support User (`roles/iam.supportUser`)
`apihub.apiOperations.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`)
`apihub.apis.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.apis.createTagBinding`	Owner (`roles/owner`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`)
`apihub.apis.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.apis.deleteTagBinding`	Owner (`roles/owner`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`)
`apihub.apis.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Insights Viewer (`roles/apihub.apiInsightsViewer`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.apis.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Insights Viewer (`roles/apihub.apiInsightsViewer`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.apis.listEffectiveTags`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`)
`apihub.apis.listTagBindings`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`)
`apihub.apis.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.attributes.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Attributes Admin (`roles/apihub.attributeAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.attributes.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Attributes Admin (`roles/apihub.attributeAdmin`)
`apihub.attributes.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Attributes Admin (`roles/apihub.attributeAdmin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Support User (`roles/iam.supportUser`)
`apihub.attributes.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Attributes Admin (`roles/apihub.attributeAdmin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.attributes.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Attributes Admin (`roles/apihub.attributeAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.curations.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`)
`apihub.curations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`)
`apihub.curations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Cloud API hub Viewer (`roles/apihub.viewer`) Support User (`roles/iam.supportUser`)
`apihub.curations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Cloud API hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.curations.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`)
`apihub.definitions.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Support User (`roles/iam.supportUser`)
`apihub.definitions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.definitions.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`)
`apihub.dependencies.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`)
`apihub.dependencies.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.dependencies.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Support User (`roles/iam.supportUser`)
`apihub.dependencies.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.dependencies.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`)
`apihub.deployments.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.deployments.createTagBinding`	Owner (`roles/owner`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`)
`apihub.deployments.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.deployments.deleteTagBinding`	Owner (`roles/owner`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`)
`apihub.deployments.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Insights Viewer (`roles/apihub.apiInsightsViewer`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Support User (`roles/iam.supportUser`)
`apihub.deployments.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Insights Viewer (`roles/apihub.apiInsightsViewer`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.deployments.listEffectiveTags`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`)
`apihub.deployments.listTagBindings`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`)
`apihub.deployments.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.discoveredApiObservations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Support User (`roles/iam.supportUser`)
`apihub.discoveredApiObservations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`apihub.discoveredApiOperations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Support User (`roles/iam.supportUser`)
`apihub.discoveredApiOperations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`apihub.externalApis.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`)
`apihub.externalApis.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`)
`apihub.externalApis.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Support User (`roles/iam.supportUser`)
`apihub.externalApis.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.externalApis.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`)
`apihub.hostProjectRegistrations.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.hostProjectRegistrations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.hostProjectRegistrations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Cloud API hub Viewer (`roles/apihub.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.hostProjectRegistrations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Cloud API hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.hostProjectRegistrations.register`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.llmEnablements.deregister`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`)
`apihub.llmEnablements.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Support User (`roles/iam.supportUser`)
`apihub.llmEnablements.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`apihub.llmEnablements.register`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`)
`apihub.locations.collectApiData`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`)
`apihub.locations.getApiInsights`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Insights Viewer (`roles/apihub.apiInsightsViewer`) Support User (`roles/iam.supportUser`)
`apihub.locations.searchResources`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Support User (`roles/iam.supportUser`)
`apihub.locations2.searchResources`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Support User (`roles/iam.supportUser`)
`apihub.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Cloud API hub Viewer (`roles/apihub.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Cloud API hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.plugininstances.applyConfig`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.plugininstances.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.plugininstances.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.plugininstances.disable`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.plugininstances.enable`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.plugininstances.execute`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.plugininstances.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Insights Viewer (`roles/apihub.apiInsightsViewer`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Cloud API hub Viewer (`roles/apihub.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.plugininstances.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Insights Viewer (`roles/apihub.apiInsightsViewer`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Cloud API hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.plugininstances.managePluginInstanceSourceData`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`)
`apihub.plugininstances.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.plugins.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.plugins.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.plugins.disable`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.plugins.enable`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.plugins.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Cloud API hub Viewer (`roles/apihub.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.plugins.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Cloud API hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.runTimeProjectAttachments.attach`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Cloud API hub Runtime Project Attachment Editor (`roles/apihub.runTimeProjectAttachmentsEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.runTimeProjectAttachments.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.runTimeProjectAttachments.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.runTimeProjectAttachments.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Cloud API hub Viewer (`roles/apihub.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.runTimeProjectAttachments.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) ApiGateway Admin (`roles/apigateway.admin`) ApiGateway Viewer (`roles/apigateway.viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Cloud API hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.runTimeProjectAttachments.lookup`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.specs.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.specs.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.specs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.specs.lint`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`)
`apihub.specs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.specs.listAll`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Support User (`roles/iam.supportUser`)
`apihub.specs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.styleGuides.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Cloud API hub Viewer (`roles/apihub.viewer`) Support User (`roles/iam.supportUser`)
`apihub.styleGuides.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`)
`apihub.versions.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.versions.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.versions.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.versions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.versions.listAll`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API hub Viewer (`roles/apihub.viewer`) Support User (`roles/iam.supportUser`)
`apihub.versions.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)

API Hub roles and permissions Stay organized with collections Save and categorize content based on your preferences.

API Hub roles

Cloud API hub Addons Admin Beta

Cloud API Hub Admin Beta

Cloud API hub Insights Viewer Beta

Cloud API hub Attributes Admin Beta

Cloud API Hub Editor Beta

Cloud API hub Plugins Admin Beta

Cloud API hub Provisioning Admin Beta

Cloud API hub Runtime Project Attachment Editor Beta

API-Hub Runtime Project Service Agent

Cloud API hub Viewer Beta

API Hub permissions

apihub.addons.get

apihub.addons.list

apihub.addons.manage

apihub.apiHubInstances.create

apihub.apiHubInstances.delete

apihub.apiHubInstances.get

apihub.apiHubInstances.list

apihub.apiHubInstances.update

apihub.apiOperations.create

apihub.apiOperations.delete

apihub.apiOperations.get

apihub.apiOperations.list

apihub.apiOperations.listAll

apihub.apiOperations.update

apihub.apis.create

apihub.apis.createTagBinding

apihub.apis.delete

apihub.apis.deleteTagBinding

apihub.apis.get

apihub.apis.list

apihub.apis.listEffectiveTags

apihub.apis.listTagBindings

apihub.apis.update

apihub.attributes.create

apihub.attributes.delete

apihub.attributes.get

apihub.attributes.list

apihub.attributes.update

apihub.curations.create

apihub.curations.delete

apihub.curations.get

apihub.curations.list

apihub.curations.update

apihub.definitions.get

apihub.definitions.list

apihub.definitions.update

apihub.dependencies.create

apihub.dependencies.delete

apihub.dependencies.get

apihub.dependencies.list

apihub.dependencies.update

apihub.deployments.create

apihub.deployments.createTagBinding

apihub.deployments.delete

apihub.deployments.deleteTagBinding

apihub.deployments.get

apihub.deployments.list

apihub.deployments.listEffectiveTags

apihub.deployments.listTagBindings

apihub.deployments.update

apihub.discoveredApiObservations.get

apihub.discoveredApiObservations.list

apihub.discoveredApiOperations.get

apihub.discoveredApiOperations.list

apihub.externalApis.create

apihub.externalApis.delete

apihub.externalApis.get

apihub.externalApis.list

apihub.externalApis.update

apihub.hostProjectRegistrations.create

apihub.hostProjectRegistrations.delete

apihub.hostProjectRegistrations.get

apihub.hostProjectRegistrations.list

apihub.hostProjectRegistrations.register

apihub.llmEnablements.deregister

apihub.llmEnablements.get

apihub.llmEnablements.list

API Hub roles and permissions

Cloud API hub Addons Admin ^Beta

Cloud API Hub Admin ^Beta

Cloud API hub Insights Viewer ^Beta

Cloud API hub Attributes Admin ^Beta

Cloud API Hub Editor ^Beta

Cloud API hub Plugins Admin ^Beta

Cloud API hub Provisioning Admin ^Beta

Cloud API hub Runtime Project Attachment Editor ^Beta

Cloud API hub Viewer ^Beta

`apihub.addons.get`

`apihub.addons.list`

`apihub.addons.manage`

`apihub.apiHubInstances.create`

`apihub.apiHubInstances.delete`

`apihub.apiHubInstances.get`

`apihub.apiHubInstances.list`

`apihub.apiHubInstances.update`

`apihub.apiOperations.create`

`apihub.apiOperations.delete`

`apihub.apiOperations.get`

`apihub.apiOperations.list`

`apihub.apiOperations.listAll`

`apihub.apiOperations.update`

`apihub.apis.create`

`apihub.apis.createTagBinding`

`apihub.apis.delete`

`apihub.apis.deleteTagBinding`

`apihub.apis.get`

`apihub.apis.list`

`apihub.apis.listEffectiveTags`

`apihub.apis.listTagBindings`

`apihub.apis.update`

`apihub.attributes.create`

`apihub.attributes.delete`

`apihub.attributes.get`

`apihub.attributes.list`

`apihub.attributes.update`

`apihub.curations.create`

`apihub.curations.delete`

`apihub.curations.get`

`apihub.curations.list`

`apihub.curations.update`

`apihub.definitions.get`

`apihub.definitions.list`

`apihub.definitions.update`

`apihub.dependencies.create`

`apihub.dependencies.delete`

`apihub.dependencies.get`

`apihub.dependencies.list`

`apihub.dependencies.update`

`apihub.deployments.create`

`apihub.deployments.createTagBinding`

`apihub.deployments.delete`

`apihub.deployments.deleteTagBinding`

`apihub.deployments.get`

`apihub.deployments.list`

`apihub.deployments.listEffectiveTags`

`apihub.deployments.listTagBindings`

`apihub.deployments.update`

`apihub.discoveredApiObservations.get`

`apihub.discoveredApiObservations.list`

`apihub.discoveredApiOperations.get`

`apihub.discoveredApiOperations.list`

`apihub.externalApis.create`

`apihub.externalApis.delete`

`apihub.externalApis.get`

`apihub.externalApis.list`

`apihub.externalApis.update`

`apihub.hostProjectRegistrations.create`

`apihub.hostProjectRegistrations.delete`

`apihub.hostProjectRegistrations.get`

`apihub.hostProjectRegistrations.list`

`apihub.hostProjectRegistrations.register`

`apihub.llmEnablements.deregister`

`apihub.llmEnablements.get`

`apihub.llmEnablements.list`

`apihub.llmEnablements.register`

`apihub.locations.collectApiData`

`apihub.locations.getApiInsights`