GCP AppEngine Permissions

Question

I need to grant a GCP project user permissions so he is able to run cron tasks from the app engine console. I've been looking around and could not find suitable permissions for that. Any tip??

roles/appengine.appAdmin – John Hanley Nov 01 '19 at 05:06 — John Hanley, Nov 01 '19 at 05:06
You will need to set one of "Cloud Scheduler" roles. – nsof Jun 08 '21 at 09:10 — nsof, Jun 08 '21 at 09:10

score 1 · Answer 1 · answered Jun 11 '21 at 13:27

1

I believe that the permission required to do this is cloudscheduler.jobs.run, which is provided by the Owner, Editor, roles/cloudscheduler.jobRunner, or roles/cloudscheduler.admin roles.

See the IAM permissions reference

answered Jun 11 '21 at 13:27

Michael Muller

11
1

score 0 · Answer 2 · answered Oct 31 '19 at 08:19

0

According to the official documentation, your account requires one of the following IAM roles: Owner or Editor.

answered Oct 31 '19 at 08:19

Sandro G

52
5

The document is wrong. Owner and Editor are legacy that existed before IAM. Both Owner and Editor will grant the required permission, but this is a huge overkill. The necessary App Engine role is `roles/appengine.appAdmin` – John Hanley Nov 01 '19 at 05:06
John, thanks I will try it! – Luciano César Natale Nov 19 '19 at 15:27
John, did not work... adding this role does not enable the user to run the cron jobs! – Luciano César Natale Nov 27 '19 at 17:58

GCP AppEngine Permissions

2 Answers2