API Hub roles and permissions

This page lists the IAM roles and permissions for API Hub. To search through all roles and permissions, see the role and permission index.

API Hub roles

Role Permissions

Role	Permissions
Cloud API Hub Admin (`roles/apihub.admin`) Full access to all API hub resources.	`apigee.projectorganizations.get` `apihub.` `apihub.addons.get` `apihub.addons.list` `apihub.addons.manage` `apihub.apiHubInstances.create` `apihub.apiHubInstances.delete` `apihub.apiHubInstances.get` `apihub.apiHubInstances.list` `apihub.apiHubInstances.update` `apihub.apiOperations.create` `apihub.apiOperations.delete` `apihub.apiOperations.get` `apihub.apiOperations.list` `apihub.apiOperations.listAll` `apihub.apiOperations.update` `apihub.apis.create` `apihub.apis.createTagBinding` `apihub.apis.delete` `apihub.apis.deleteTagBinding` `apihub.apis.get` `apihub.apis.list` `apihub.apis.listEffectiveTags` `apihub.apis.listTagBindings` `apihub.apis.update` `apihub.attributes.create` `apihub.attributes.delete` `apihub.attributes.get` `apihub.attributes.list` `apihub.attributes.update` `apihub.curations.create` `apihub.curations.delete` `apihub.curations.get` `apihub.curations.list` `apihub.curations.update` `apihub.definitions.get` `apihub.definitions.list` `apihub.definitions.update` `apihub.dependencies.create` `apihub.dependencies.delete` `apihub.dependencies.get` `apihub.dependencies.list` `apihub.dependencies.update` `apihub.deployments.create` `apihub.deployments.createTagBinding` `apihub.deployments.delete` `apihub.deployments.deleteTagBinding` `apihub.deployments.get` `apihub.deployments.list` `apihub.deployments.listEffectiveTags` `apihub.deployments.listTagBindings` `apihub.deployments.update` `apihub.discoveredApiObservations.get` `apihub.discoveredApiObservations.list` `apihub.discoveredApiOperations.get` `apihub.discoveredApiOperations.list` `apihub.externalApis.create` `apihub.externalApis.delete` `apihub.externalApis.get` `apihub.externalApis.list` `apihub.externalApis.update` `apihub.hostProjectRegistrations.create` `apihub.hostProjectRegistrations.delete` `apihub.hostProjectRegistrations.get` `apihub.hostProjectRegistrations.list` `apihub.hostProjectRegistrations.register` `apihub.llmEnablements.deregister` `apihub.llmEnablements.get` `apihub.llmEnablements.list` `apihub.llmEnablements.register` `apihub.locations.collectApiData` `apihub.locations.getApiInsights` `apihub.locations.searchResources` `apihub.locations2.searchResources` `apihub.operations.cancel` `apihub.operations.delete` `apihub.operations.get` `apihub.operations.list` `apihub.plugininstances.applyConfig` `apihub.plugininstances.create` `apihub.plugininstances.delete` `apihub.plugininstances.disable` `apihub.plugininstances.enable` `apihub.plugininstances.execute` `apihub.plugininstances.get` `apihub.plugininstances.list` `apihub.plugininstances.managePluginInstanceSourceData` `apihub.plugininstances.update` `apihub.plugins.create` `apihub.plugins.delete` `apihub.plugins.disable` `apihub.plugins.enable` `apihub.plugins.get` `apihub.plugins.list` `apihub.runTimeProjectAttachments.attach` `apihub.runTimeProjectAttachments.create` `apihub.runTimeProjectAttachments.delete` `apihub.runTimeProjectAttachments.get` `apihub.runTimeProjectAttachments.list` `apihub.runTimeProjectAttachments.lookup` `apihub.specs.create` `apihub.specs.delete` `apihub.specs.get` `apihub.specs.lint` `apihub.specs.list` `apihub.specs.listAll` `apihub.specs.update` `apihub.styleGuides.get` `apihub.styleGuides.update` `apihub.versions.create` `apihub.versions.delete` `apihub.versions.get` `apihub.versions.list` `apihub.versions.listAll` `apihub.versions.update` `cloudkms.keyHandles.` `cloudkms.keyHandles.create` `cloudkms.keyHandles.get` `cloudkms.keyHandles.list` `cloudkms.operations.get` `cloudkms.projects.showEffectiveAutokeyConfig` `monitoring.dashboards.get` `monitoring.dashboards.list` `monitoring.metricDescriptors.get` `monitoring.metricDescriptors.list` `monitoring.monitoredResourceDescriptors.*` `monitoring.monitoredResourceDescriptors.get` `monitoring.monitoredResourceDescriptors.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud API Hub Editor (`roles/apihub.editor`) Edit access to most of Cloud API Hub resources.	`apihub.addons.get` `apihub.addons.list` `apihub.apiHubInstances.get` `apihub.apiHubInstances.list` `apihub.apiOperations.` `apihub.apiOperations.create` `apihub.apiOperations.delete` `apihub.apiOperations.get` `apihub.apiOperations.list` `apihub.apiOperations.listAll` `apihub.apiOperations.update` `apihub.apis.` `apihub.apis.create` `apihub.apis.createTagBinding` `apihub.apis.delete` `apihub.apis.deleteTagBinding` `apihub.apis.get` `apihub.apis.list` `apihub.apis.listEffectiveTags` `apihub.apis.listTagBindings` `apihub.apis.update` `apihub.attributes.get` `apihub.attributes.list` `apihub.curations.get` `apihub.curations.list` `apihub.definitions.` `apihub.definitions.get` `apihub.definitions.list` `apihub.definitions.update` `apihub.dependencies.` `apihub.dependencies.create` `apihub.dependencies.delete` `apihub.dependencies.get` `apihub.dependencies.list` `apihub.dependencies.update` `apihub.deployments.` `apihub.deployments.create` `apihub.deployments.createTagBinding` `apihub.deployments.delete` `apihub.deployments.deleteTagBinding` `apihub.deployments.get` `apihub.deployments.list` `apihub.deployments.listEffectiveTags` `apihub.deployments.listTagBindings` `apihub.deployments.update` `apihub.discoveredApiObservations.` `apihub.discoveredApiObservations.get` `apihub.discoveredApiObservations.list` `apihub.discoveredApiOperations.` `apihub.discoveredApiOperations.get` `apihub.discoveredApiOperations.list` `apihub.externalApis.` `apihub.externalApis.create` `apihub.externalApis.delete` `apihub.externalApis.get` `apihub.externalApis.list` `apihub.externalApis.update` `apihub.hostProjectRegistrations.get` `apihub.hostProjectRegistrations.list` `apihub.llmEnablements.` `apihub.llmEnablements.deregister` `apihub.llmEnablements.get` `apihub.llmEnablements.list` `apihub.llmEnablements.register` `apihub.locations.collectApiData` `apihub.locations.searchResources` `apihub.operations.get` `apihub.operations.list` `apihub.plugininstances.get` `apihub.plugininstances.list` `apihub.plugins.get` `apihub.plugins.list` `apihub.runTimeProjectAttachments.get` `apihub.runTimeProjectAttachments.list` `apihub.specs.` `apihub.specs.create` `apihub.specs.delete` `apihub.specs.get` `apihub.specs.lint` `apihub.specs.list` `apihub.specs.listAll` `apihub.specs.update` `apihub.styleGuides.get` `apihub.versions.*` `apihub.versions.create` `apihub.versions.delete` `apihub.versions.get` `apihub.versions.list` `apihub.versions.listAll` `apihub.versions.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud API Hub Viewer (`roles/apihub.viewer`) View access to all Cloud API hub resources.	`apihub.addons.get` `apihub.addons.list` `apihub.apiHubInstances.get` `apihub.apiHubInstances.list` `apihub.apiOperations.get` `apihub.apiOperations.list` `apihub.apiOperations.listAll` `apihub.apis.get` `apihub.apis.list` `apihub.apis.listEffectiveTags` `apihub.apis.listTagBindings` `apihub.attributes.get` `apihub.attributes.list` `apihub.curations.get` `apihub.curations.list` `apihub.definitions.get` `apihub.definitions.list` `apihub.dependencies.get` `apihub.dependencies.list` `apihub.deployments.get` `apihub.deployments.list` `apihub.deployments.listEffectiveTags` `apihub.deployments.listTagBindings` `apihub.discoveredApiObservations.` `apihub.discoveredApiObservations.get` `apihub.discoveredApiObservations.list` `apihub.discoveredApiOperations.` `apihub.discoveredApiOperations.get` `apihub.discoveredApiOperations.list` `apihub.externalApis.get` `apihub.externalApis.list` `apihub.hostProjectRegistrations.get` `apihub.hostProjectRegistrations.list` `apihub.llmEnablements.get` `apihub.llmEnablements.list` `apihub.locations.searchResources` `apihub.operations.get` `apihub.operations.list` `apihub.plugininstances.get` `apihub.plugininstances.list` `apihub.plugins.get` `apihub.plugins.list` `apihub.runTimeProjectAttachments.get` `apihub.runTimeProjectAttachments.list` `apihub.specs.get` `apihub.specs.list` `apihub.specs.listAll` `apihub.styleGuides.get` `apihub.versions.get` `apihub.versions.list` `apihub.versions.listAll` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud API hub Addons Admin (`roles/apihub.addonsAdmin`) Full access to all Cloud API hub addon resources.	`apihub.addons.*` `apihub.addons.get` `apihub.addons.list` `apihub.addons.manage` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud API hub Insights Viewer (`roles/apihub.apiInsightsViewer`) View API hub insights dashboards.	`apigee.projectorganizations.get` `apihub.apiHubInstances.get` `apihub.apiHubInstances.list` `apihub.apis.get` `apihub.apis.list` `apihub.deployments.get` `apihub.deployments.list` `apihub.locations.getApiInsights` `apihub.plugininstances.get` `apihub.plugininstances.list` `monitoring.dashboards.get` `monitoring.dashboards.list` `monitoring.metricDescriptors.get` `monitoring.metricDescriptors.list` `monitoring.monitoredResourceDescriptors.*` `monitoring.monitoredResourceDescriptors.get` `monitoring.monitoredResourceDescriptors.list`
Cloud API hub Attributes Admin (`roles/apihub.attributeAdmin`) Full access to all Cloud API hub attribute's resources.	`apihub.attributes.*` `apihub.attributes.create` `apihub.attributes.delete` `apihub.attributes.get` `apihub.attributes.list` `apihub.attributes.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Full access to all Cloud API hub plugin's resources.	`apihub.curations.` `apihub.curations.create` `apihub.curations.delete` `apihub.curations.get` `apihub.curations.list` `apihub.curations.update` `apihub.locations.collectApiData` `apihub.operations.` `apihub.operations.cancel` `apihub.operations.delete` `apihub.operations.get` `apihub.operations.list` `apihub.plugininstances.` `apihub.plugininstances.applyConfig` `apihub.plugininstances.create` `apihub.plugininstances.delete` `apihub.plugininstances.disable` `apihub.plugininstances.enable` `apihub.plugininstances.execute` `apihub.plugininstances.get` `apihub.plugininstances.list` `apihub.plugininstances.managePluginInstanceSourceData` `apihub.plugininstances.update` `apihub.plugins.` `apihub.plugins.create` `apihub.plugins.delete` `apihub.plugins.disable` `apihub.plugins.enable` `apihub.plugins.get` `apihub.plugins.list` `apihub.specs.lint` `apihub.styleGuides.*` `apihub.styleGuides.get` `apihub.styleGuides.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Full access to Cloud API hub provisioning related resources.	`apihub.apiHubInstances.` `apihub.apiHubInstances.create` `apihub.apiHubInstances.delete` `apihub.apiHubInstances.get` `apihub.apiHubInstances.list` `apihub.apiHubInstances.update` `apihub.hostProjectRegistrations.` `apihub.hostProjectRegistrations.create` `apihub.hostProjectRegistrations.delete` `apihub.hostProjectRegistrations.get` `apihub.hostProjectRegistrations.list` `apihub.hostProjectRegistrations.register` `apihub.operations.` `apihub.operations.cancel` `apihub.operations.delete` `apihub.operations.get` `apihub.operations.list` `apihub.runTimeProjectAttachments.` `apihub.runTimeProjectAttachments.attach` `apihub.runTimeProjectAttachments.create` `apihub.runTimeProjectAttachments.delete` `apihub.runTimeProjectAttachments.get` `apihub.runTimeProjectAttachments.list` `apihub.runTimeProjectAttachments.lookup` `cloudkms.keyHandles.*` `cloudkms.keyHandles.create` `cloudkms.keyHandles.get` `cloudkms.keyHandles.list` `cloudkms.operations.get` `cloudkms.projects.showEffectiveAutokeyConfig` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud API hub Runtime Project Attachment Editor (`roles/apihub.runTimeProjectAttachmentsEditor`) Access to add/delete project as a runtime project attachment to API hub host project.	`apihub.runTimeProjectAttachments.attach`

Cloud API Hub Admin

(roles/apihub.admin)

Full access to all API hub resources.

apigee.projectorganizations.get

apihub.*

apihub.addons.get
apihub.addons.list
apihub.addons.manage
apihub.apiHubInstances.create
apihub.apiHubInstances.delete
apihub.apiHubInstances.get
apihub.apiHubInstances.list
apihub.apiHubInstances.update
apihub.apiOperations.create
apihub.apiOperations.delete
apihub.apiOperations.get
apihub.apiOperations.list
apihub.apiOperations.listAll
apihub.apiOperations.update
apihub.apis.create
apihub.apis.createTagBinding
apihub.apis.delete
apihub.apis.deleteTagBinding
apihub.apis.get
apihub.apis.list
apihub.apis.listEffectiveTags
apihub.apis.listTagBindings
apihub.apis.update
apihub.attributes.create
apihub.attributes.delete
apihub.attributes.get
apihub.attributes.list
apihub.attributes.update
apihub.curations.create
apihub.curations.delete
apihub.curations.get
apihub.curations.list
apihub.curations.update
apihub.definitions.get
apihub.definitions.list
apihub.definitions.update
apihub.dependencies.create
apihub.dependencies.delete
apihub.dependencies.get
apihub.dependencies.list
apihub.dependencies.update
apihub.deployments.create
apihub.deployments.createTagBinding
apihub.deployments.delete
apihub.deployments.deleteTagBinding
apihub.deployments.get
apihub.deployments.list
apihub.deployments.listEffectiveTags
apihub.deployments.listTagBindings
apihub.deployments.update
apihub.discoveredApiObservations.get
apihub.discoveredApiObservations.list
apihub.discoveredApiOperations.get
apihub.discoveredApiOperations.list
apihub.externalApis.create
apihub.externalApis.delete
apihub.externalApis.get
apihub.externalApis.list
apihub.externalApis.update
apihub.hostProjectRegistrations.create
apihub.hostProjectRegistrations.delete
apihub.hostProjectRegistrations.get
apihub.hostProjectRegistrations.list
apihub.hostProjectRegistrations.register
apihub.llmEnablements.deregister
apihub.llmEnablements.get
apihub.llmEnablements.list
apihub.llmEnablements.register
apihub.locations.collectApiData
apihub.locations.getApiInsights
apihub.locations.searchResources
apihub.locations2.searchResources
apihub.operations.cancel
apihub.operations.delete
apihub.operations.get
apihub.operations.list
apihub.plugininstances.applyConfig
apihub.plugininstances.create
apihub.plugininstances.delete
apihub.plugininstances.disable
apihub.plugininstances.enable
apihub.plugininstances.execute
apihub.plugininstances.get
apihub.plugininstances.list
apihub.plugininstances.managePluginInstanceSourceData
apihub.plugininstances.update
apihub.plugins.create
apihub.plugins.delete
apihub.plugins.disable
apihub.plugins.enable
apihub.plugins.get
apihub.plugins.list
apihub.runTimeProjectAttachments.attach
apihub.runTimeProjectAttachments.create
apihub.runTimeProjectAttachments.delete
apihub.runTimeProjectAttachments.get
apihub.runTimeProjectAttachments.list
apihub.runTimeProjectAttachments.lookup
apihub.specs.create
apihub.specs.delete
apihub.specs.get
apihub.specs.lint
apihub.specs.list
apihub.specs.listAll
apihub.specs.update
apihub.styleGuides.get
apihub.styleGuides.update
apihub.versions.create
apihub.versions.delete
apihub.versions.get
apihub.versions.list
apihub.versions.listAll
apihub.versions.update

cloudkms.keyHandles.*

cloudkms.keyHandles.create
cloudkms.keyHandles.get
cloudkms.keyHandles.list

cloudkms.operations.get

cloudkms.projects.showEffectiveAutokeyConfig

monitoring.dashboards.get

monitoring.dashboards.list

monitoring.metricDescriptors.get

monitoring.metricDescriptors.list

monitoring.monitoredResourceDescriptors.*

monitoring.monitoredResourceDescriptors.get
monitoring.monitoredResourceDescriptors.list

resourcemanager.projects.get

resourcemanager.projects.list

Cloud API Hub Editor

(roles/apihub.editor)

Edit access to most of Cloud API Hub resources.

apihub.addons.get

apihub.addons.list

apihub.apiHubInstances.get

apihub.apiHubInstances.list

apihub.apiOperations.*

apihub.apiOperations.create
apihub.apiOperations.delete
apihub.apiOperations.get
apihub.apiOperations.list
apihub.apiOperations.listAll
apihub.apiOperations.update

apihub.apis.*

apihub.apis.create
apihub.apis.createTagBinding
apihub.apis.delete
apihub.apis.deleteTagBinding
apihub.apis.get
apihub.apis.list
apihub.apis.listEffectiveTags
apihub.apis.listTagBindings
apihub.apis.update

apihub.attributes.get

apihub.attributes.list

apihub.curations.get

apihub.curations.list

apihub.definitions.*

apihub.definitions.get
apihub.definitions.list
apihub.definitions.update

apihub.dependencies.*

apihub.dependencies.create
apihub.dependencies.delete
apihub.dependencies.get
apihub.dependencies.list
apihub.dependencies.update

apihub.deployments.*

apihub.deployments.create
apihub.deployments.createTagBinding
apihub.deployments.delete
apihub.deployments.deleteTagBinding
apihub.deployments.get
apihub.deployments.list
apihub.deployments.listEffectiveTags
apihub.deployments.listTagBindings
apihub.deployments.update

apihub.discoveredApiObservations.*

apihub.discoveredApiObservations.get
apihub.discoveredApiObservations.list

apihub.discoveredApiOperations.*

apihub.discoveredApiOperations.get
apihub.discoveredApiOperations.list

apihub.externalApis.*

apihub.externalApis.create
apihub.externalApis.delete
apihub.externalApis.get
apihub.externalApis.list
apihub.externalApis.update

apihub.hostProjectRegistrations.get

apihub.hostProjectRegistrations.list

apihub.llmEnablements.*

apihub.llmEnablements.deregister
apihub.llmEnablements.get
apihub.llmEnablements.list
apihub.llmEnablements.register

apihub.locations.collectApiData

apihub.locations.searchResources

apihub.operations.get

apihub.operations.list

apihub.plugininstances.get

apihub.plugininstances.list

apihub.plugins.get

apihub.plugins.list

apihub.runTimeProjectAttachments.get

apihub.runTimeProjectAttachments.list

apihub.specs.*

apihub.specs.create
apihub.specs.delete
apihub.specs.get
apihub.specs.lint
apihub.specs.list
apihub.specs.listAll
apihub.specs.update

apihub.styleGuides.get

apihub.versions.*

apihub.versions.create
apihub.versions.delete
apihub.versions.get
apihub.versions.list
apihub.versions.listAll
apihub.versions.update

resourcemanager.projects.get

resourcemanager.projects.list

Cloud API Hub Viewer

(roles/apihub.viewer)

View access to all Cloud API hub resources.

apihub.addons.get

apihub.addons.list

apihub.apiHubInstances.get

apihub.apiHubInstances.list

apihub.apiOperations.get

apihub.apiOperations.list

apihub.apiOperations.listAll

apihub.apis.get

apihub.apis.list

apihub.apis.listEffectiveTags

apihub.apis.listTagBindings

apihub.attributes.get

apihub.attributes.list

apihub.curations.get

apihub.curations.list

apihub.definitions.get

apihub.definitions.list

apihub.dependencies.get

apihub.dependencies.list

apihub.deployments.get

apihub.deployments.list

apihub.deployments.listEffectiveTags

apihub.deployments.listTagBindings

apihub.discoveredApiObservations.*

apihub.discoveredApiObservations.get
apihub.discoveredApiObservations.list

apihub.discoveredApiOperations.*

apihub.discoveredApiOperations.get
apihub.discoveredApiOperations.list

apihub.externalApis.get

apihub.externalApis.list

apihub.hostProjectRegistrations.get

apihub.hostProjectRegistrations.list

apihub.llmEnablements.get

apihub.llmEnablements.list

apihub.locations.searchResources

apihub.operations.get

apihub.operations.list

apihub.plugininstances.get

apihub.plugininstances.list

apihub.plugins.get

apihub.plugins.list

apihub.runTimeProjectAttachments.get

apihub.runTimeProjectAttachments.list

apihub.specs.get

apihub.specs.list

apihub.specs.listAll

apihub.styleGuides.get

apihub.versions.get

apihub.versions.list

apihub.versions.listAll

resourcemanager.projects.get

resourcemanager.projects.list

Cloud API hub Addons Admin

(roles/apihub.addonsAdmin)

Full access to all Cloud API hub addon resources.

apihub.addons.*

apihub.addons.get
apihub.addons.list
apihub.addons.manage

resourcemanager.projects.get

resourcemanager.projects.list

Cloud API hub Insights Viewer

(roles/apihub.apiInsightsViewer)

View API hub insights dashboards.

apigee.projectorganizations.get

apihub.apiHubInstances.get

apihub.apiHubInstances.list

apihub.apis.get

apihub.apis.list

apihub.deployments.get

apihub.deployments.list

apihub.locations.getApiInsights

apihub.plugininstances.get

apihub.plugininstances.list

monitoring.dashboards.get

monitoring.dashboards.list

monitoring.metricDescriptors.get

monitoring.metricDescriptors.list

monitoring.monitoredResourceDescriptors.*

monitoring.monitoredResourceDescriptors.get
monitoring.monitoredResourceDescriptors.list

Cloud API hub Attributes Admin

(roles/apihub.attributeAdmin)

Full access to all Cloud API hub attribute's resources.

apihub.attributes.*

apihub.attributes.create
apihub.attributes.delete
apihub.attributes.get
apihub.attributes.list
apihub.attributes.update

resourcemanager.projects.get

resourcemanager.projects.list

Cloud API hub Plugins Admin

(roles/apihub.pluginAdmin)

Full access to all Cloud API hub plugin's resources.

apihub.curations.*

apihub.curations.create
apihub.curations.delete
apihub.curations.get
apihub.curations.list
apihub.curations.update

apihub.locations.collectApiData

apihub.operations.*

apihub.operations.cancel
apihub.operations.delete
apihub.operations.get
apihub.operations.list

apihub.plugininstances.*

apihub.plugininstances.applyConfig
apihub.plugininstances.create
apihub.plugininstances.delete
apihub.plugininstances.disable
apihub.plugininstances.enable
apihub.plugininstances.execute
apihub.plugininstances.get
apihub.plugininstances.list
apihub.plugininstances.managePluginInstanceSourceData
apihub.plugininstances.update

apihub.plugins.*

apihub.plugins.create
apihub.plugins.delete
apihub.plugins.disable
apihub.plugins.enable
apihub.plugins.get
apihub.plugins.list

apihub.specs.lint

apihub.styleGuides.*

apihub.styleGuides.get
apihub.styleGuides.update

resourcemanager.projects.get

resourcemanager.projects.list

Cloud API hub Provisioning Admin

(roles/apihub.provisioningAdmin)

Full access to Cloud API hub provisioning related resources.

apihub.apiHubInstances.*

apihub.apiHubInstances.create
apihub.apiHubInstances.delete
apihub.apiHubInstances.get
apihub.apiHubInstances.list
apihub.apiHubInstances.update

apihub.hostProjectRegistrations.*

apihub.hostProjectRegistrations.create
apihub.hostProjectRegistrations.delete
apihub.hostProjectRegistrations.get
apihub.hostProjectRegistrations.list
apihub.hostProjectRegistrations.register

apihub.operations.*

apihub.operations.cancel
apihub.operations.delete
apihub.operations.get
apihub.operations.list

apihub.runTimeProjectAttachments.*

apihub.runTimeProjectAttachments.attach
apihub.runTimeProjectAttachments.create
apihub.runTimeProjectAttachments.delete
apihub.runTimeProjectAttachments.get
apihub.runTimeProjectAttachments.list
apihub.runTimeProjectAttachments.lookup

cloudkms.keyHandles.*

cloudkms.keyHandles.create
cloudkms.keyHandles.get
cloudkms.keyHandles.list

cloudkms.operations.get

cloudkms.projects.showEffectiveAutokeyConfig

resourcemanager.projects.get

resourcemanager.projects.list

Cloud API hub Runtime Project Attachment Editor

(roles/apihub.runTimeProjectAttachmentsEditor)

Access to add/delete project as a runtime project attachment to API hub host project.

apihub.runTimeProjectAttachments.attach

Service agent roles

Service agent roles should only be granted to service agents.

Role Permissions

Role	Permissions
API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`) Gives API-Hub Service Account access to runtime project resources. Warning: Do not grant service agent roles to any principals except service agents.	`apigee.deployments.list` `apigee.envgroupattachments.list` `apigee.envgroups.list` `apigee.environments.get` `apigee.organizations.create` `apigee.organizations.delete` `apigee.organizations.get` `apigee.organizations.update` `apigee.proxies.get` `apigee.proxyrevisions.get` `apihub.addons.get` `apihub.addons.list` `apihub.apiOperations.delete` `apihub.apiOperations.list` `apihub.apis.create` `apihub.apis.delete` `apihub.apis.list` `apihub.apis.update` `apihub.attributes.create` `apihub.attributes.list` `apihub.attributes.update` `apihub.curations.list` `apihub.definitions.list` `apihub.dependencies.delete` `apihub.dependencies.list` `apihub.deployments.create` `apihub.deployments.delete` `apihub.deployments.list` `apihub.deployments.update` `apihub.externalApis.list` `apihub.hostProjectRegistrations.list` `apihub.operations.get` `apihub.operations.list` `apihub.plugininstances.create` `apihub.plugininstances.delete` `apihub.plugininstances.list` `apihub.plugininstances.update` `apihub.plugins.create` `apihub.plugins.delete` `apihub.plugins.list` `apihub.runTimeProjectAttachments.list` `apihub.specs.create` `apihub.specs.delete` `apihub.specs.list` `apihub.specs.update` `apihub.versions.create` `apihub.versions.delete` `apihub.versions.list` `apihub.versions.update`

API-Hub Runtime Project Service Agent

(roles/apihub.runtimeProjectServiceAgent)

Gives API-Hub Service Account access to runtime project resources.

apigee.deployments.list

apigee.envgroupattachments.list

apigee.envgroups.list

apigee.environments.get

apigee.organizations.create

apigee.organizations.delete

apigee.organizations.get

apigee.organizations.update

apigee.proxies.get

apigee.proxyrevisions.get

apihub.addons.get

apihub.addons.list

apihub.apiOperations.delete

apihub.apiOperations.list

apihub.apis.create

apihub.apis.delete

apihub.apis.list

apihub.apis.update

apihub.attributes.create

apihub.attributes.list

apihub.attributes.update

apihub.curations.list

apihub.definitions.list

apihub.dependencies.delete

apihub.dependencies.list

apihub.deployments.create

apihub.deployments.delete

apihub.deployments.list

apihub.deployments.update

apihub.externalApis.list

apihub.hostProjectRegistrations.list

apihub.operations.get

apihub.operations.list

apihub.plugininstances.create

apihub.plugininstances.delete

apihub.plugininstances.list

apihub.plugininstances.update

apihub.plugins.create

apihub.plugins.delete

apihub.plugins.list

apihub.runTimeProjectAttachments.list

apihub.specs.create

apihub.specs.delete

apihub.specs.list

apihub.specs.update

apihub.versions.create

apihub.versions.delete

apihub.versions.list

apihub.versions.update

API Hub permissions

Permission	Included in roles
`apihub.addons.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API hub Addons Admin (`roles/apihub.addonsAdmin`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`) API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.addons.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API hub Addons Admin (`roles/apihub.addonsAdmin`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`) API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.addons.manage`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Addons Admin (`roles/apihub.addonsAdmin`) Writer (`roles/writer`)
`apihub.apiHubInstances.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.apiHubInstances.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.apiHubInstances.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API hub Insights Viewer (`roles/apihub.apiInsightsViewer`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.apiHubInstances.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API hub Insights Viewer (`roles/apihub.apiInsightsViewer`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.apiHubInstances.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Writer (`roles/writer`)
`apihub.apiOperations.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Writer (`roles/writer`)
`apihub.apiOperations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.apiOperations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`apihub.apiOperations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.apiOperations.listAll`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`apihub.apiOperations.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Writer (`roles/writer`)
`apihub.apis.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.apis.createTagBinding`	Owner (`roles/owner`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Tag User (`roles/resourcemanager.tagUser`) Admin (`roles/admin`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`)
`apihub.apis.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.apis.deleteTagBinding`	Owner (`roles/owner`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Tag User (`roles/resourcemanager.tagUser`) Admin (`roles/admin`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`)
`apihub.apis.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Apigee Security Admin (`roles/apigee.securityAdmin`) Apigee Security Viewer (`roles/apigee.securityViewer`) Cloud API hub Insights Viewer (`roles/apihub.apiInsightsViewer`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.apis.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API hub Insights Viewer (`roles/apihub.apiInsightsViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`) API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.apis.listEffectiveTags`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`apihub.apis.listTagBindings`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`apihub.apis.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.attributes.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Attributes Admin (`roles/apihub.attributeAdmin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.attributes.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Attributes Admin (`roles/apihub.attributeAdmin`) Writer (`roles/writer`)
`apihub.attributes.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API hub Attributes Admin (`roles/apihub.attributeAdmin`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`apihub.attributes.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API hub Attributes Admin (`roles/apihub.attributeAdmin`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.attributes.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Attributes Admin (`roles/apihub.attributeAdmin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.curations.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Writer (`roles/writer`)
`apihub.curations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Writer (`roles/writer`)
`apihub.curations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`apihub.curations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.curations.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Writer (`roles/writer`)
`apihub.definitions.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`apihub.definitions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.definitions.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Writer (`roles/writer`)
`apihub.dependencies.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Writer (`roles/writer`)
`apihub.dependencies.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.dependencies.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`apihub.dependencies.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.dependencies.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Writer (`roles/writer`)
`apihub.deployments.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.deployments.createTagBinding`	Owner (`roles/owner`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Tag User (`roles/resourcemanager.tagUser`) Admin (`roles/admin`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`)
`apihub.deployments.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.deployments.deleteTagBinding`	Owner (`roles/owner`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Tag User (`roles/resourcemanager.tagUser`) Admin (`roles/admin`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`)
`apihub.deployments.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API hub Insights Viewer (`roles/apihub.apiInsightsViewer`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.deployments.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Apigee Security Admin (`roles/apigee.securityAdmin`) Apigee Security Viewer (`roles/apigee.securityViewer`) Cloud API hub Insights Viewer (`roles/apihub.apiInsightsViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`) API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.deployments.listEffectiveTags`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`apihub.deployments.listTagBindings`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`apihub.deployments.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.discoveredApiObservations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`apihub.discoveredApiObservations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`apihub.discoveredApiOperations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`apihub.discoveredApiOperations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`apihub.externalApis.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Writer (`roles/writer`)
`apihub.externalApis.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Writer (`roles/writer`)
`apihub.externalApis.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`apihub.externalApis.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.externalApis.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Writer (`roles/writer`)
`apihub.hostProjectRegistrations.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.hostProjectRegistrations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.hostProjectRegistrations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.hostProjectRegistrations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`) API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.hostProjectRegistrations.register`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.llmEnablements.deregister`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Writer (`roles/writer`)
`apihub.llmEnablements.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`apihub.llmEnablements.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`apihub.llmEnablements.register`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Writer (`roles/writer`)
`apihub.locations.collectApiData`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Writer (`roles/writer`)
`apihub.locations.getApiInsights`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Insights Viewer (`roles/apihub.apiInsightsViewer`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`apihub.locations.searchResources`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`apihub.locations2.searchResources`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`apihub.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`) API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`) API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.plugininstances.applyConfig`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.plugininstances.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`) API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.plugininstances.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`) API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.plugininstances.disable`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.plugininstances.enable`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.plugininstances.execute`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.plugininstances.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API hub Insights Viewer (`roles/apihub.apiInsightsViewer`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.plugininstances.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API hub Insights Viewer (`roles/apihub.apiInsightsViewer`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`) API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.plugininstances.managePluginInstanceSourceData`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Writer (`roles/writer`)
`apihub.plugininstances.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`) API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.plugins.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`) API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.plugins.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`) API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.plugins.disable`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.plugins.enable`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.plugins.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.plugins.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`) API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.runTimeProjectAttachments.attach`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Cloud API hub Runtime Project Attachment Editor (`roles/apihub.runTimeProjectAttachmentsEditor`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.runTimeProjectAttachments.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.runTimeProjectAttachments.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.runTimeProjectAttachments.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.runTimeProjectAttachments.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) ApiGateway Admin (`roles/apigateway.admin`) ApiGateway Editor (`roles/apigateway.editor`) ApiGateway Viewer (`roles/apigateway.viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`) API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.runTimeProjectAttachments.lookup`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Provisioning Admin (`roles/apihub.provisioningAdmin`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.specs.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.specs.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.specs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.specs.lint`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Writer (`roles/writer`)
`apihub.specs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`) API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.specs.listAll`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`apihub.specs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.styleGuides.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`apihub.styleGuides.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Admin (`roles/admin`) Cloud API hub Plugins Admin (`roles/apihub.pluginAdmin`) Writer (`roles/writer`)
`apihub.versions.create`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.versions.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.versions.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Apigee Core Service Agent (`roles/apigee.coreServiceAgent`) Apigee Service Agent (`roles/apigee.serviceAgent`)
`apihub.versions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)
`apihub.versions.listAll`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Apigee Organization Admin (`roles/apigee.admin`) Apigee API Admin (`roles/apigee.apiAdminV2`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Cloud API Hub Viewer (`roles/apihub.viewer`) Admin (`roles/admin`) Apigee API Reader (`roles/apigee.apiReaderV2`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`apihub.versions.update`	Owner (`roles/owner`) Editor (`roles/editor`) Apigee Organization Admin (`roles/apigee.admin`) Cloud API Hub Admin (`roles/apihub.admin`) Cloud API Hub Editor (`roles/apihub.editor`) Admin (`roles/admin`) Writer (`roles/writer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. API-Hub Runtime Project Service Agent (`roles/apihub.runtimeProjectServiceAgent`)

API Hub roles and permissions Stay organized with collections Save and categorize content based on your preferences.

API Hub roles

Cloud API Hub Admin

Cloud API Hub Editor

Cloud API Hub Viewer

Cloud API hub Addons Admin

Cloud API hub Insights Viewer

Cloud API hub Attributes Admin

Cloud API hub Plugins Admin

Cloud API hub Provisioning Admin

Cloud API hub Runtime Project Attachment Editor

Service agent roles

API-Hub Runtime Project Service Agent

API Hub permissions

apihub.addons.get

apihub.addons.list

apihub.addons.manage

apihub.apiHubInstances.create

apihub.apiHubInstances.delete

apihub.apiHubInstances.get

apihub.apiHubInstances.list

apihub.apiHubInstances.update

apihub.apiOperations.create

apihub.apiOperations.delete

apihub.apiOperations.get

apihub.apiOperations.list

apihub.apiOperations.listAll

apihub.apiOperations.update

apihub.apis.create

apihub.apis.createTagBinding

apihub.apis.delete

apihub.apis.deleteTagBinding

apihub.apis.get

apihub.apis.list

apihub.apis.listEffectiveTags

apihub.apis.listTagBindings

apihub.apis.update

apihub.attributes.create

apihub.attributes.delete

apihub.attributes.get

apihub.attributes.list

apihub.attributes.update

apihub.curations.create

apihub.curations.delete

apihub.curations.get

apihub.curations.list

apihub.curations.update

apihub.definitions.get

apihub.definitions.list

apihub.definitions.update

apihub.dependencies.create

apihub.dependencies.delete

apihub.dependencies.get

apihub.dependencies.list

apihub.dependencies.update

apihub.deployments.create

apihub.deployments.createTagBinding

apihub.deployments.delete

apihub.deployments.deleteTagBinding

apihub.deployments.get

apihub.deployments.list

apihub.deployments.listEffectiveTags

apihub.deployments.listTagBindings

apihub.deployments.update

apihub.discoveredApiObservations.get

apihub.discoveredApiObservations.list

apihub.discoveredApiOperations.get

apihub.discoveredApiOperations.list

apihub.externalApis.create

apihub.externalApis.delete

apihub.externalApis.get

apihub.externalApis.list

apihub.externalApis.update

apihub.hostProjectRegistrations.create

apihub.hostProjectRegistrations.delete

apihub.hostProjectRegistrations.get

apihub.hostProjectRegistrations.list

apihub.hostProjectRegistrations.register

apihub.llmEnablements.deregister

apihub.llmEnablements.get

API Hub roles and permissions

`apihub.addons.get`

`apihub.addons.list`

`apihub.addons.manage`

`apihub.apiHubInstances.create`

`apihub.apiHubInstances.delete`

`apihub.apiHubInstances.get`

`apihub.apiHubInstances.list`

`apihub.apiHubInstances.update`

`apihub.apiOperations.create`

`apihub.apiOperations.delete`

`apihub.apiOperations.get`

`apihub.apiOperations.list`

`apihub.apiOperations.listAll`

`apihub.apiOperations.update`

`apihub.apis.create`

`apihub.apis.createTagBinding`

`apihub.apis.delete`

`apihub.apis.deleteTagBinding`

`apihub.apis.get`

`apihub.apis.list`

`apihub.apis.listEffectiveTags`

`apihub.apis.listTagBindings`

`apihub.apis.update`

`apihub.attributes.create`

`apihub.attributes.delete`

`apihub.attributes.get`

`apihub.attributes.list`

`apihub.attributes.update`

`apihub.curations.create`

`apihub.curations.delete`

`apihub.curations.get`

`apihub.curations.list`

`apihub.curations.update`

`apihub.definitions.get`

`apihub.definitions.list`

`apihub.definitions.update`

`apihub.dependencies.create`

`apihub.dependencies.delete`

`apihub.dependencies.get`

`apihub.dependencies.list`

`apihub.dependencies.update`

`apihub.deployments.create`

`apihub.deployments.createTagBinding`

`apihub.deployments.delete`

`apihub.deployments.deleteTagBinding`

`apihub.deployments.get`

`apihub.deployments.list`

`apihub.deployments.listEffectiveTags`

`apihub.deployments.listTagBindings`

`apihub.deployments.update`

`apihub.discoveredApiObservations.get`

`apihub.discoveredApiObservations.list`

`apihub.discoveredApiOperations.get`

`apihub.discoveredApiOperations.list`

`apihub.externalApis.create`

`apihub.externalApis.delete`

`apihub.externalApis.get`

`apihub.externalApis.list`

`apihub.externalApis.update`

`apihub.hostProjectRegistrations.create`

`apihub.hostProjectRegistrations.delete`

`apihub.hostProjectRegistrations.get`

`apihub.hostProjectRegistrations.list`

`apihub.hostProjectRegistrations.register`

`apihub.llmEnablements.deregister`

`apihub.llmEnablements.get`

`apihub.llmEnablements.list`

`apihub.llmEnablements.register`

`apihub.locations.collectApiData`

`apihub.locations.getApiInsights`

`apihub.locations.searchResources`

`apihub.locations2.searchResources`

`apihub.operations.cancel`

`apihub.operations.delete`

`apihub.operations.get`

`apihub.operations.list`

`apihub.plugininstances.applyConfig`

`apihub.plugininstances.create`

`apihub.plugininstances.delete`