Glossary: Cloud Deployment
Also written: roles
A named bundle of permissions in IAM, such as `roles/cloudsql.client`.
IAMservice accountleast privilege