Cloud Run IAM permissions (original) (raw)
Cloud Run IAM permissions
The following tables list the Identity and Access Management (IAM)permissions that are associated with Cloud Run.
Cloud Run resources
Services
| Permission |
Description |
| run.services.get |
View services, excluding IAM policies. |
| run.services.list |
List services. |
| run.services.create |
Create new services. |
| run.services.update |
Update existing services. |
| run.services.delete |
Delete services. |
| run.services.getIamPolicy |
Get an IAM policy. |
| run.services.setIamPolicy |
Set an IAM policy. |
Service revisions
| Permission |
Description |
| run.revisions.get |
View revisions, excluding IAM policies. |
| run.revisions.list |
List revisions. |
| run.revisions.delete |
Delete revisions. |
Jobs
| Permission |
Description |
| run.jobs.create |
Create new job. |
| run.jobs.delete |
Delete job. |
| run.jobs.get |
View jobs, excluding IAM policies. |
| run.jobs.getIamPolicy |
Get an IAM policy. |
| run.jobs.list |
List jobs. |
| run.jobs.run |
Invoke (execute) jobs executions. |
| run.jobs.runWithOverrides |
Override job configuration for a job execution. |
| run.jobs.setIamPolicy |
Set an IAM policy. |
| run.jobs.update |
Update existing job. |
| run.executions.delete |
Delete job executions. |
| run.executions.get |
Get job executions. |
| run.executions.list |
List job executions. |
| run.executions.cancel. |
Cancel job executions. |
| run.tasks.get |
Get job execution tasks. |
| run.tasks.list |
List job execution tasks. |
Worker pools
| Permission |
Description |
| run.workerpools.get |
View worker pools, excluding IAM policies. |
| run.workerpools.list |
List worker pools. |
| run.workerpools.create |
Create new worker pools. |
| run.workerpools.update |
Update existing worker pools. |
| run.workerpools.delete |
Delete worker pools. |
| run.workerpools.getIamPolicy |
Get an IAM policy. |
| run.workerpools.setIamPolicy |
Set an IAM policy. |
Configurations
| Permission |
Description |
| run.configurations.get |
View configurations, excluding IAM policies. |
| run.configurations.list |
List configurations. |
Locations
| Permission |
Description |
| run.locations.get |
Get location information. |
| run.locations.list |
List all locations. |
Routes
| Permission |
Description |
| run.routes.get |
View routes, excluding IAM policies. |
| run.routes.list |
List routes. |
| run.routes.invoke |
Invoke a route. |
View project
| Permission |
Description |
| resourcemanager.projects.get |
Get project. |
Domain mappings
There are no IAM permissions for domain mappings. Viewing, listing, creating and deleting domain mappings requires project-level permissions.
For a reference of which IAM permissions are contained in each IAM role, seeCloud Run IAM roles.
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-06-15 UTC.