Road Management Insights uses the Roads Selection API as a core component that
provides road data to BigQuery and Pub/Sub.

To create and manage selected routes in a Google Cloud project, the Roads Selection API must be enabled on the project. You must hold either the
[Owner or Editor IAM role](https://cloud.google.com/iam/docs/roles-overview#role-types)
on the project.

> [!NOTE]
> **Note:** If you created the project, then you have the Owner role on the project. The [**IAM** page](https://console.cloud.google.com/iam-admin/iam) of the Google Cloud console shows the project owners and editors.

Alternatively, you can assign the following IAM roles to a user account or
service account that you use to manage selected routes:

- The `Roads Selection Admin` role grants the user or services account read/write access to selected routes in the project. This role lets the user perform all operations on a selected-route.

  You can run the following command for granting admin access to a principal:

  ```
  gcloud auth login

    gcloud projects add-iam-policy-binding PROJECT_ID \
      --member user:user_email \
      --role roles/roads.roadsSelectionAdmin
    
  ```
- The `Roads Selection Viewer` role grants read-only access to selected routes in the project. This role lets you perform a list or get operation on a selected-route.

  You can run the following command for granting viewer access to a principal:

  ```
  gcloud auth login

    gcloud projects add-iam-policy-binding PROJECT_ID \
      --member user:user_email \
      --role roles/roads.roadsSelectionViewer
    
  ```

Additionally, the user must have at least `serviceusage.services.use` permission on
the project. Provide that permission through the project Owner or Editor roles, or through
the specific Service Usage Consumer role. The service throws an error if the user does not have
required Roads Selection permissions and Service Usage permissions on the selected project.

For more information, see
[Grant an IAM role by using the Google Cloud console](https://cloud.google.com/iam/docs/grant-role-console).

## What's next

After configuring roles, you must create an OAuth token:

[Use OAuth](https://developers.google.com/maps/documentation/roads-management-insights/use-oauth.md.txt)