This page describes changes to the public Identity and Access Management (IAM) permissions
for all Generally Available (GA) and Preview services on Google Cloud. This
change log can help you maintain and troubleshoot your
custom roles.
When a permission is added, IAM does not
automatically add the permission to your custom roles.
For changes that occurred before 2022, see
Archived permissions change log.
You can see the latest product updates for all of Google Cloud on the
Google Cloud page, browse and filter all release notes in the
Google Cloud console,
or programmatically access release notes in
BigQuery.
To get the latest product updates delivered to you, add the URL of this page
to your feed
reader, or add the
feed URL
directly.
IAM changes for the week of 2026-09-08
| Service |
Description |
|
App Topology
|
The App Topology Admin role (roles/apptopology.admin) has reached General Availability (GA).
|
|
App Topology
|
The App Topology Viewer role (roles/apptopology.viewer) has reached General Availability (GA).
|
|
App Topology
|
The following permissions have been added to the App Topology Admin role (roles/apptopology.admin):
cloudnotifications.activities.list
monitoring.alertPolicies.get
monitoring.alertPolicies.list
monitoring.alertPolicies.listEffectiveTags
monitoring.alertPolicies.listTagBindings
monitoring.alerts.get
monitoring.alerts.list
monitoring.dashboards.get
monitoring.dashboards.list
monitoring.dashboards.listEffectiveTags
monitoring.dashboards.listTagBindings
monitoring.groups.get
monitoring.groups.list
monitoring.metricDescriptors.get
monitoring.metricDescriptors.list
monitoring.monitoredResourceDescriptors.get
monitoring.monitoredResourceDescriptors.list
monitoring.notificationChannelDescriptors.get
monitoring.notificationChannelDescriptors.list
monitoring.notificationChannels.get
monitoring.notificationChannels.list
monitoring.services.get
monitoring.services.list
monitoring.slos.get
monitoring.slos.list
monitoring.snoozes.get
monitoring.snoozes.list
monitoring.timeSeries.list
monitoring.uptimeCheckConfigs.get
monitoring.uptimeCheckConfigs.list
opsconfigmonitoring.resourceMetadata.list
stackdriver.projects.get
stackdriver.resourceMetadata.list
|
|
App Topology
|
The following permissions have been added to the App Topology Viewer role (roles/apptopology.viewer):
cloudnotifications.activities.list
monitoring.alertPolicies.get
monitoring.alertPolicies.list
monitoring.alertPolicies.listEffectiveTags
monitoring.alertPolicies.listTagBindings
monitoring.alerts.get
monitoring.alerts.list
monitoring.dashboards.get
monitoring.dashboards.list
monitoring.dashboards.listEffectiveTags
monitoring.dashboards.listTagBindings
monitoring.groups.get
monitoring.groups.list
monitoring.metricDescriptors.get
monitoring.metricDescriptors.list
monitoring.monitoredResourceDescriptors.get
monitoring.monitoredResourceDescriptors.list
monitoring.notificationChannelDescriptors.get
monitoring.notificationChannelDescriptors.list
monitoring.notificationChannels.get
monitoring.notificationChannels.list
monitoring.services.get
monitoring.services.list
monitoring.slos.get
monitoring.slos.list
monitoring.snoozes.get
monitoring.snoozes.list
monitoring.timeSeries.list
monitoring.uptimeCheckConfigs.get
monitoring.uptimeCheckConfigs.list
opsconfigmonitoring.resourceMetadata.list
stackdriver.projects.get
stackdriver.resourceMetadata.list
|
|
BigQuery
|
The following permissions have been added to the BigQuery Job User role (roles/bigquery.jobUser):
geminidataanalytics.locations.chat
|
|
BigQuery Data Transfer Service
|
The following permissions have been added to the BigQuery Data Transfer Service Agent role (roles/bigquerydatatransfer.serviceAgent):
geminidataanalytics.locations.chat
|
|
Google Security Operations
|
The following permissions have been added to the Chronicle API Editor role (roles/chronicle.editor):
chronicle.propertySchemaDefinitions.delete
chronicle.propertySchemaDefinitions.update
|
|
Cloud Data Fusion
|
The following permissions have been added to the Cloud Data Fusion API Service Agent role (roles/datafusion.serviceAgent):
geminidataanalytics.locations.chat
monitoring.dashboards.get
monitoring.dashboards.list
monitoring.groups.get
monitoring.groups.list
stackdriver.projects.get
stackdriver.resourceMetadata.list
|
