roles.json

{
    "super_admin": {
        "general": [
            "roles/aiplatform.admin",
            "roles/analyticshub.admin",
            "roles/apigateway.admin",
            "roles/apigee.admin",
            "roles/artifactregistry.admin",
            "roles/axt.admin",
            "roles/backupdr.admin",
            "roles/baremetalsolution.admin",
            "roles/baremetalsolution.instancesadmin",
            "roles/baremetalsolution.lunsadmin",
            "roles/baremetalsolution.maintenanceeventsadmin",
            "roles/baremetalsolution.networksadmin",
            "roles/baremetalsolution.nfssharesadmin",
            "roles/baremetalsolution.procurementsadmin",
            "roles/baremetalsolution.storageadmin",
            "roles/baremetalsolution.volumesadmin",
            "roles/baremetalsolution.volumesnapshotsadmin",
            "roles/biglake.admin",
            "roles/bigquery.admin",
            "roles/bigtable.admin",
            "roles/blockchainnodeengine.admin",
            "roles/chronicle.admin",
            "roles/chroniclesm.admin",
            "roles/cloudconfig.admin",
            "roles/clouddeploy.admin",
            "roles/cloudfunctions.admin",
            "roles/cloudiot.admin",
            "roles/cloudjobdiscovery.admin",
            "roles/cloudkms.admin",
            "roles/cloudoptimization.admin",
            "roles/cloudscheduler.admin",
            "roles/cloudsql.admin",
            "roles/cloudtrace.admin",
            "roles/cloudtranslate.admin",
            "roles/composer.admin",
            "roles/compute.admin",
            "roles/connectors.admin",
            "roles/contactcenteraiplatform.admin",
            "roles/container.admin",
            "roles/containeranalysis.admin",
            "roles/contentwarehouse.admin",
            "roles/datacatalog.admin",
            "roles/dataflow.admin",
            "roles/dataform.admin",
            "roles/datafusion.admin",
            "roles/datalineage.admin",
            "roles/datamigration.admin",
            "roles/datapipelines.admin",
            "roles/dataplex.admin",
            "roles/dataproc.admin",
            "roles/dataprocessing.admin",
            "roles/datastream.admin",
            "roles/dialogflow.admin",
            "roles/dlp.admin",
            "roles/dns.admin",
            "roles/domains.admin",
            "roles/edgecontainer.admin",
            "roles/edgenetwork.admin",
            "roles/essentialcontacts.admin",
            "roles/eventarc.admin",
            "roles/file.editor",
            "roles/financialservices.admin",
            "roles/firebase.admin",
            "roles/firebaseappcheck.admin",
            "roles/firebaseappdistro.admin",
            "roles/firebaseauth.admin",
            "roles/firebasecrashlytics.admin",
            "roles/firebasedatabase.admin",
            "roles/firebasedynamiclinks.admin",
            "roles/firebasehosting.admin",
            "roles/firebasenotifications.admin",
            "roles/firebaseperformance.admin",
            "roles/firebaserules.admin",
            "roles/genomics.admin",
            "roles/gkebackup.admin",
            "roles/gkehub.admin",
            "roles/gkemulticloud.admin",
            "roles/gkeonprem.admin",
            "roles/iap.admin",
            "roles/iap.tunnelResourceAccessor",
            "roles/identitytoolkit.admin",
            "roles/krmapihosting.admin",
            "roles/logging.admin",
            "roles/looker.admin",
            "roles/managedidentities.admin",
            "roles/mapsadmin.admin",
            "roles/mapsadmin.viewer",
            "roles/memcache.admin",
            "roles/metastore.admin",
            "roles/ml.admin",
            "roles/monitoring.admin",
            "roles/networkmanagement.admin",
            "roles/notebooks.admin",
            "roles/privateca.admin",
            "roles/pubsub.admin",
            "roles/pubsublite.admin",
            "roles/readerrevenuesubscriptionlinking.admin",
            "roles/redis.admin",
            "roles/retail.admin",
            "roles/rma.admin",
            "roles/run.admin",
            "roles/runtimeconfig.admin",
            "roles/secretmanager.admin",
            "roles/securitycenter.admin",
            "roles/securitycenter.adminEditor",
            "roles/securitycenter.adminViewer",
            "roles/servicedirectory.admin",
            "roles/servicemanagement.admin",
            "roles/source.admin",
            "roles/spanner.admin",
            "roles/speakerid.admin",
            "roles/speech.admin",
            "roles/storage.admin",
            "roles/storageinsights.admin",
            "roles/storagetransfer.admin",
            "roles/stream.admin",
            "roles/tpu.admin",
            "roles/transcoder.admin",
            "roles/videostitcher.admin",
            "roles/vpcaccess.admin",
            "roles/workflows.admin",
            "roles/workstations.admin",
            "roles/advisorynotifications.admin",
            "roles/alloydb.admin",
            "roles/apigeeregistry.admin",
            "roles/apphub.admin",
            "roles/automl.admin",
            "roles/automlrecommendations.admin",
            "roles/automlrecommendations.adminViewer",
            "roles/beyondcorp.admin",
            "roles/cloudprivatecatalogproducer.admin",
            "roles/cloudquotas.admin",
            "roles/cloudtasks.admin",
            "roles/commerceagreementpublishing.admin",
            "roles/commercebusinessenablement.admin",
            "roles/commerceorggovernance.admin",
            "roles/commerceproducer.admin",
            "roles/config.admin",
            "roles/datalabeling.admin",
            "roles/datastudio.admin",
            "roles/dellemccloudonefs.admin",
            "roles/discoveryengine.admin",
            "roles/documentai.admin",
            "roles/earthengine.admin",
            "roles/enterpriseknowledgegraph.admin",
            "roles/errorreporting.admin",
            "roles/firebaseabt.admin",
            "roles/firebasecloudmessaging.admin",
            "roles/firebaseinappmessaging.admin",
            "roles/firebasemessagingcampaigns.admin",
            "roles/firebaseml.admin",
            "roles/firebasestorage.admin",
            "roles/gdchardwaremanagement.admin",
            "roles/identityplatform.admin",
            "roles/ids.admin",
            "roles/issuerswitch.admin",
            "roles/lifesciences.admin",
            "roles/mapsplatformdatasets.admin",
            "roles/meshconfig.admin",
            "roles/migrationcenter.admin",
            "roles/netapp.admin",
            "roles/netappcloudvolumes.admin",
            "roles/ondemandscanning.admin",
            "roles/policysimulator.admin",
            "roles/recaptchaenterprise.admin",
            "roles/redisenterprisecloud.admin",
            "roles/riscconfigs.admin",
            "roles/riskmanager.admin",
            "roles/telcoautomation.admin",
            "roles/transferappliance.admin",
            "roles/translationhub.admin",
            "roles/visionai.admin",
            "roles/vmmigration.admin",
            "roles/workloadcertificate.admin",
            "roles/workloadmanager.admin",
            "roles/autoscaling.sitesAdmin",
            "roles/beyondcorp.clientConnectorAdmin",
            "roles/beyondcorp.partnerServiceDelegateAdmin",
            "roles/bigquery.studioAdmin",
            "roles/clouddeploy.customTargetTypeAdmin",
            "roles/cloudprivatecatalogproducer.orgAdmin",
            "roles/cloudtasks.queueAdmin",
            "roles/commercebusinessenablement.paymentConfigAdmin",
            "roles/commercebusinessenablement.rebatesAdmin",
            "roles/commercebusinessenablement.resellerDiscountAdmin",
            "roles/commercepricemanagement.privateOffersAdmin",
            "roles/compute.futureReservationAdmin",
            "roles/consumerprocurement.orderAdmin",
            "roles/consumerprocurement.procurementAdmin",
            "roles/datacatalog.searchAdmin",
            "roles/dataconnectors.connectorAdmin",
            "roles/firebaseextensionspublisher.extensionsAdmin",
            "roles/iam.workloadIdentityPoolAdmin",
            "roles/integrations.securityIntegrationAdmin",
            "roles/issuerswitch.accountManagerAdmin",
            "roles/issuerswitch.accountManagerTransactionsAdmin",
            "roles/issuerswitch.issuerParticipantsAdmin",
            "roles/issuerswitch.resolutionsAdmin",
            "roles/issuerswitch.rulesAdmin",
            "roles/monitoring.metricsScopesAdmin",
            "roles/networkconnectivity.regionalEndpointAdmin",
            "roles/osconfig.guestPolicyAdmin",
            "roles/paymentsresellersubscription.partnerAdmin",
            "roles/recommender.bigqueryPartitionClusterAdmin",
            "roles/recommender.billingAccountCudAdmin",
            "roles/recommender.cloudCostRecommendationAdmin",
            "roles/recommender.cloudDeprecationRecommendationAdmin",
            "roles/recommender.cloudManageabilityRecommendationAdmin",
            "roles/recommender.cloudPerformanceRecommendationAdmin",
            "roles/recommender.cloudReliabilityRecommendationAdmin",
            "roles/recommender.cloudSecurityRecommendationAdmin",
            "roles/recommender.cloudsqlAdmin",
            "roles/recommender.iampolicychangeriskAdmin",
            "roles/recommender.productSuggestionAdmin",
            "roles/recommender.projectCudAdmin",
            "roles/recommender.serviceLimitAdmin",
            "roles/recommender.serviceaccntchangeriskAdmin",
            "roles/recommender.ucsAdmin",
            "roles/remotebuildexecution.artifactAdmin",
            "roles/remotebuildexecution.configurationAdmin",
            "roles/remotebuildexecution.reservationAdmin",
            "roles/securedlandingzone.overwatchAdmin",
            "roles/securesourcemanager.repoAdmin",
            "roles/serviceconsumermanagement.tenancyUnitsAdmin",
            "roles/servicemanagement.quotaAdmin",
            "roles/servicenetworking.networksAdmin",
            "roles/telcoautomation.deploymentAdmin",
            "roles/telcoautomation.opsAdminTier1",
            "roles/telcoautomation.opsAdminTier4",
            "roles/visionai.corpusAdmin",
            "roles/visionai.indexEndpointAdmin",
            "roles/workloadcertificate.registrationAdmin",
            "roles/workloadmanager.deploymentAdmin",
            "roles/workloadmanager.evaluationAdmin",
            "roles/accesscontextmanager.policyAdmin",
            "roles/actions.Admin",
            "roles/aiplatform.colabEnterpriseAdmin",
            "roles/aiplatform.featurestoreAdmin",
            "roles/aiplatform.notebookRuntimeAdmin",
            "roles/analyticshub.listingAdmin",
            "roles/apigee.apiAdminV2",
            "roles/apigee.developerAdmin",
            "roles/apigee.environmentAdmin",
            "roles/apigee.monetizationAdmin",
            "roles/apigee.portalAdmin",
            "roles/apigee.readOnlyAdmin",
            "roles/apigee.securityAdmin",
            "roles/apigeeconnect.Admin",
            "roles/appengine.appAdmin",
            "roles/appengine.memcacheDataAdmin",
            "roles/appengine.serviceAdmin",
            "roles/artifactregistry.createOnPushRepoAdmin",
            "roles/artifactregistry.repoAdmin",
            "roles/bigquery.connectionAdmin",
            "roles/bigquery.resourceAdmin",
            "roles/binaryauthorization.attestorsAdmin",
            "roles/binaryauthorization.policyAdmin",
            "roles/cloudbuild.connectionAdmin",
            "roles/cloudkms.ekmConnectionsAdmin",
            "roles/cloudtestservice.testAdmin",
            "roles/composer.environmentAndStorageObjectAdmin",
            "roles/compute.instanceAdmin",
            "roles/compute.instanceAdmin.v1",
            "roles/compute.loadBalancerAdmin",
            "roles/compute.networkAdmin",
            "roles/compute.orgFirewallPolicyAdmin",
            "roles/compute.orgSecurityPolicyAdmin",
            "roles/compute.orgSecurityResourceAdmin",
            "roles/compute.osAdminLogin",
            "roles/compute.packetMirroringAdmin",
            "roles/compute.publicIpAdmin",
            "roles/compute.securityAdmin",
            "roles/compute.storageAdmin",
            "roles/connectors.customConnectorAdmin",
            "roles/connectors.endpointAttachmentAdmin",
            "roles/connectors.eventSubscriptionAdmin",
            "roles/connectors.managedZoneAdmin",
            "roles/container.clusterAdmin",
            "roles/contentwarehouse.documentAdmin",
            "roles/datacatalog.categoryAdmin",
            "roles/dataplex.bindingAdmin",
            "roles/dataplex.dataScanAdmin",
            "roles/dataplex.securityAdmin",
            "roles/dataplex.taxonomyAdmin",
            "roles/datastore.backupSchedulesAdmin",
            "roles/datastore.backupsAdmin",
            "roles/datastore.importExportAdmin",
            "roles/datastore.indexAdmin",
            "roles/datastore.restoreAdmin",
            "roles/dialogflow.aamAdmin",
            "roles/dialogflow.entityTypeAdmin",
            "roles/dialogflow.intentAdmin",
            "roles/dialogflow.testCaseAdmin",
            "roles/dialogflow.webhookAdmin",
            "roles/dlp.connectionsAdmin",
            "roles/dlp.dataProfilesAdmin",
            "roles/dlp.estimatesAdmin",
            "roles/dlp.subscriptionsAdmin",
            "roles/dlp.tableDataProfilesAdmin",
            "roles/firebase.analyticsAdmin",
            "roles/firebase.developAdmin",
            "roles/firebase.growthAdmin",
            "roles/firebase.qualityAdmin",
            "roles/firebasecrash.symbolMappingsAdmin",
            "roles/fleetengine.deliveryAdmin",
            "roles/fleetengine.ondemandAdmin",
            "roles/gkebackup.backupAdmin",
            "roles/gkebackup.restoreAdmin",
            "roles/gkehub.gatewayAdmin",
            "roles/healthcare.annotationStoreAdmin",
            "roles/healthcare.consentArtifactAdmin",
            "roles/healthcare.consentStoreAdmin",
            "roles/healthcare.datasetAdmin",
            "roles/healthcare.dicomStoreAdmin",
            "roles/healthcare.fhirStoreAdmin",
            "roles/healthcare.hl7V2StoreAdmin",
            "roles/iam.securityAdmin",
            "roles/iam.serviceAccountAdmin",
            "roles/iam.serviceAccountKeyAdmin",
            "roles/iam.serviceAccountUser",
            "roles/iam.serviceAccountTokenCreator",
            "roles/iam.workloadIdentityUser",
            "roles/iap.settingsAdmin",
            "roles/integrations.apigeeIntegrationAdminRole",
            "roles/integrations.integrationAdmin",
            "roles/integrations.sfdcInstanceAdmin",
            "roles/managedidentities.backupAdmin",
            "roles/managedidentities.domainAdmin",
            "roles/managedidentities.peeringAdmin",
            "roles/metastore.metadataMutateAdmin",
            "roles/metastore.metadataQueryAdmin",
            "roles/nestconsole.homeDeveloperAdmin",
            "roles/networkconnectivity.consumerNetworkAdmin",
            "roles/networkconnectivity.hubAdmin",
            "roles/networkconnectivity.serviceProducerAdmin",
            "roles/networkconnectivity.spokeAdmin",
            "roles/notebooks.legacyAdmin",
            "roles/osconfig.osPolicyAssignmentAdmin",
            "roles/osconfig.patchDeploymentAdmin",
            "roles/recommender.cloudAssetInsightsAdmin",
            "roles/recommender.computeAdmin",
            "roles/recommender.containerDiagnosisAdmin",
            "roles/recommender.dataflowDiagnosticsAdmin",
            "roles/recommender.errorReportingAdmin",
            "roles/recommender.firewallAdmin",
            "roles/recommender.gmpAdmin",
            "roles/recommender.iamAdmin",
            "roles/recommender.networkAnalyzerAdmin",
            "roles/recommender.networkAnalyzerCloudSqlAdmin",
            "roles/recommender.networkAnalyzerDynamicRouteAdmin",
            "roles/recommender.networkAnalyzerGkeConnectivityAdmin",
            "roles/recommender.networkAnalyzerGkeIpAddressAdmin",
            "roles/recommender.networkAnalyzerGkeServiceAccountAdmin",
            "roles/recommender.networkAnalyzerIpAddressAdmin",
            "roles/recommender.networkAnalyzerLoadBalancerAdmin",
            "roles/recommender.networkAnalyzerVpcConnectivityAdmin",
            "roles/recommender.projectUtilAdmin",
            "roles/resourcemanager.tagAdmin",
            "roles/resourcemanager.tagHoldAdmin",
            "roles/securitycenter.settingsAdmin",
            "roles/securitycenter.sourcesAdmin",
            "roles/serviceusage.apiKeysAdmin",
            "roles/serviceusage.serviceUsageAdmin",
            "roles/spanner.backupAdmin",
            "roles/spanner.databaseAdmin",
            "roles/spanner.restoreAdmin",
            "roles/storage.hmacKeyAdmin",
            "roles/storage.objectAdmin",
            "roles/stream.contentAdmin",
            "roles/stream.instanceAdmin",
            "roles/vmwareengine.vmwareengineAdmin",
            "roles/workstations.networkAdmin",
            "roles/resourcemanager.lienModifier",
            "roles/resourcemanager.projectMover"
        ],
        "organization_only": [
            "roles/policysimulator.orgPolicyAdmin",
            "roles/orgpolicy.policyAdmin",
            "roles/iam.organizationRoleAdmin",
            "roles/resourcemanager.organizationAdmin",
            "roles/compute.xpnAdmin",
            "roles/cloudsupport.admin",
            "roles/resourcesettings.admin",
            "roles/beyondcorp.subscriptionAdmin",
            "roles/iam.denyAdmin"
        ],
        "folder_only": [
            "roles/storage.folderAdmin",
            "roles/resourcemanager.folderAdmin",
            "roles/resourcemanager.folderIamAdmin",
            "roles/compute.xpnAdmin",
            "roles/resourcemanager.folderCreator",
            "roles/resourcemanager.folderEditor",
            "roles/resourcemanager.folderMover",
            "roles/resourcemanager.projectCreator",
            "roles/resourcemanager.projectDeleter",
            "roles/resourcemanager.projectMover"
        ],
        "project_only": [
            "roles/resourcemanager.projectIamAdmin",
            "roles/recommender.bigQueryCapacityCommitmentsProjectAdmin",
            "roles/iam.roleAdmin"
        ],
        "other": [
            "roles/gkebackup.delegatedBackupAdmin",
            "roles/gkebackup.delegatedRestoreAdmin",
            "roles/firebase.sdkAdminServiceAgent",
            "roles/billing.admin",
            "roles/iam.workforcePoolAdmin",
            "roles/assuredworkloads.admin",
            "roles/cloudcontrolspartner.admin",
            "roles/recommender.bigQueryCapacityCommitmentsAdmin",
            "roles/accesscontextmanager.gcpAccessAdmin",
            "roles/policyremediatormanager.policyRemediatorAdmin",
            "roles/gkebackup.delegatedBackupAdmin",
            "roles/gkebackup.delegatedRestoreAdmin",
            "roles/recommender.bigQueryCapacityCommitmentsBillingAccountAdmin"
        ]
    },
    "admin": {
        "general": [
            "roles/aiplatform.admin",
            "roles/apigateway.admin",
            "roles/apigee.admin",
            "roles/artifactregistry.admin",
            "roles/bigquery.admin",
            "roles/bigtable.admin",
            "roles/cloudfunctions.admin",
            "roles/cloudkms.admin",
            "roles/cloudsql.admin",
            "roles/composer.admin",
            "roles/compute.admin",
            "roles/connectors.admin",
            "roles/contactcenteraiplatform.admin",
            "roles/container.admin",
            "roles/containeranalysis.admin",
            "roles/contentwarehouse.admin",
            "roles/datacatalog.admin",
            "roles/dataflow.admin",
            "roles/dataform.admin",
            "roles/datafusion.admin",
            "roles/datalineage.admin",
            "roles/datamigration.admin",
            "roles/datapipelines.admin",
            "roles/dataplex.admin",
            "roles/dataproc.admin",
            "roles/dataprocessing.admin",
            "roles/datastream.admin",
            "roles/dialogflow.admin",
            "roles/dns.admin",
            "roles/domains.admin",
            "roles/essentialcontacts.admin",
            "roles/file.editor",
            "roles/firebase.admin",
            "roles/firebaseappcheck.admin",
            "roles/firebaseappdistro.admin",
            "roles/firebaseauth.admin",
            "roles/firebasecrashlytics.admin",
            "roles/firebasedatabase.admin",
            "roles/firebasedynamiclinks.admin",
            "roles/firebasehosting.admin",
            "roles/firebasenotifications.admin",
            "roles/firebaseperformance.admin",
            "roles/firebaserules.admin",
            "roles/iap.admin",
            "roles/iap.tunnelResourceAccessor",
            "roles/logging.admin",
            "roles/looker.admin",
            "roles/memcache.admin",
            "roles/metastore.admin",
            "roles/ml.admin",
            "roles/monitoring.admin",
            "roles/networkmanagement.admin",
            "roles/notebooks.admin",
            "roles/privateca.admin",
            "roles/pubsub.admin",
            "roles/pubsublite.admin",
            "roles/redis.admin",
            "roles/run.admin",
            "roles/secretmanager.admin",
            "roles/securitycenter.admin",
            "roles/servicedirectory.admin",
            "roles/source.admin",
            "roles/spanner.admin",
            "roles/storage.admin",
            "roles/storagetransfer.admin",
            "roles/tpu.admin",
            "roles/alloydb.admin",
            "roles/apigeeregistry.admin",
            "roles/automl.admin",
            "roles/config.admin",
            "roles/discoveryengine.admin",
            "roles/documentai.admin",
            "roles/firebaseabt.admin",
            "roles/firebasecloudmessaging.admin",
            "roles/firebaseinappmessaging.admin",
            "roles/firebasemessagingcampaigns.admin",
            "roles/firebaseml.admin",
            "roles/firebasestorage.admin",
            "roles/identityplatform.admin",
            "roles/ids.admin",
            "roles/policysimulator.admin",
            "roles/vmmigration.admin",
            "roles/iam.workloadIdentityPoolAdmin",
            "roles/networkconnectivity.regionalEndpointAdmin",
            "roles/securesourcemanager.repoAdmin",
            "roles/servicenetworking.networksAdmin",
            "roles/apigee.apiAdminV2",
            "roles/apigee.developerAdmin",
            "roles/apigee.environmentAdmin",
            "roles/apigee.monetizationAdmin",
            "roles/apigee.portalAdmin",
            "roles/apigee.readOnlyAdmin",
            "roles/apigee.securityAdmin",
            "roles/apigeeconnect.Admin",
            "roles/appengine.appAdmin",
            "roles/appengine.memcacheDataAdmin",
            "roles/appengine.serviceAdmin",
            "roles/artifactregistry.createOnPushRepoAdmin",
            "roles/artifactregistry.repoAdmin",
            "roles/binaryauthorization.attestorsAdmin",
            "roles/binaryauthorization.policyAdmin",
            "roles/networkconnectivity.consumerNetworkAdmin",
            "roles/networkconnectivity.hubAdmin",
            "roles/networkconnectivity.serviceProducerAdmin",
            "roles/networkconnectivity.spokeAdmin",
            "roles/notebooks.legacyAdmin",
            "roles/osconfig.osPolicyAssignmentAdmin",
            "roles/osconfig.patchDeploymentAdmin",
            "roles/resourcemanager.tagAdmin",
            "roles/resourcemanager.tagHoldAdmin",
            "roles/securitycenter.settingsAdmin",
            "roles/securitycenter.sourcesAdmin",
            "roles/serviceusage.apiKeysAdmin",
            "roles/serviceusage.serviceUsageAdmin",
            "roles/spanner.backupAdmin",
            "roles/spanner.databaseAdmin",
            "roles/spanner.restoreAdmin",
            "roles/storage.hmacKeyAdmin",
            "roles/storage.objectAdmin",
            "roles/stream.contentAdmin",
            "roles/stream.instanceAdmin",
            "roles/resourcemanager.lienModifier",
            "roles/resourcemanager.projectMover"
        ],
        "organization_only": [
            "roles/policysimulator.orgPolicyAdmin",
            "roles/orgpolicy.policyAdmin",
            "roles/iam.organizationRoleAdmin",
            "roles/resourcemanager.organizationAdmin",
            "roles/compute.xpnAdmin",
            "roles/cloudsupport.admin",
            "roles/resourcesettings.admin",
            "roles/iam.denyAdmin"
        ],
        "folder_only": [
            "roles/storage.folderAdmin",
            "roles/resourcemanager.folderAdmin",
            "roles/resourcemanager.folderIamAdmin",
            "roles/compute.xpnAdmin",
            "roles/resourcemanager.folderCreator",
            "roles/resourcemanager.folderEditor",
            "roles/resourcemanager.folderMover",
            "roles/resourcemanager.projectCreator",
            "roles/resourcemanager.projectDeleter",
            "roles/resourcemanager.projectMover"
        ],
        "project_only": [
            "roles/resourcemanager.projectIamAdmin",
            "roles/iam.roleAdmin"
        ],
        "other": [
            "roles/gkebackup.delegatedBackupAdmin",
            "roles/gkebackup.delegatedRestoreAdmin",
            "roles/firebase.sdkAdminServiceAgent",
            "roles/billing.admin",
            "roles/iam.workforcePoolAdmin",
            "roles/assuredworkloads.admin",
            "roles/cloudcontrolspartner.admin",
            "roles/recommender.bigQueryCapacityCommitmentsAdmin",
            "roles/accesscontextmanager.gcpAccessAdmin",
            "roles/policyremediatormanager.policyRemediatorAdmin",
            "roles/gkebackup.delegatedBackupAdmin",
            "roles/gkebackup.delegatedRestoreAdmin",
            "roles/recommender.bigQueryCapacityCommitmentsBillingAccountAdmin"
        ]
    }
}