Configure roles

Road Management Insights uses the Roads Selection API as a core component that provides road data to BigQuery and Pub/Sub.

To create and manage selected routes in a Google Cloud project, the Roads Selection API must be enabled on the project. You must hold either the Owner or Editor IAM role on the project.

Note: If you created the project, then you have the Owner role on the project. The IAM page of the Google Cloud console shows the project owners and editors.

Alternatively, you can assign the following IAM roles to a user account or service account that you use to manage selected routes:

• The Roads Selection Admin role grants the user or services account read/write access to selected routes in the project. This role lets the user perform all operations on a selected-route.

  You can run the following command for granting admin access to a principal:

  gcloud auth login
  
    gcloud projects add-iam-policy-binding PROJECT_ID \
      --member user:user_email \
      --role roles/roads.roadsSelectionAdmin
    

• The Roads Selection Viewer role grants read-only access to selected routes in the project. This role lets you perform a list or get operation on a selected-route.

  You can run the following command for granting viewer access to a principal:

  gcloud auth login
  
    gcloud projects add-iam-policy-binding PROJECT_ID \
      --member user:user_email \
      --role roles/roads.roadsSelectionViewer
    

Additionally, the user must have at least serviceusage.services.use permission on the project. Provide that permission through the project Owner or Editor roles, or through the specific Service Usage Consumer role. The service throws an error if the user does not have required Roads Selection permissions and Service Usage permissions on the selected project.

For more information, see Grant an IAM role by using the Google Cloud console.

What's next

After configuring roles, you must create an OAuth token:

Use OAuth