diff --git a/roles/cloudfunctions.admin b/roles/cloudfunctions.admin
index 2e96e6ee..0ea5ff06 100644
--- a/roles/cloudfunctions.admin
+++ b/roles/cloudfunctions.admin
@@ -79,12 +79,6 @@
     "recommender.runServiceIdentityRecommendations.get",
     "recommender.runServiceIdentityRecommendations.list",
     "recommender.runServiceIdentityRecommendations.update",
-    "recommender.runServicePerformanceInsights.get",
-    "recommender.runServicePerformanceInsights.list",
-    "recommender.runServicePerformanceInsights.update",
-    "recommender.runServicePerformanceRecommendations.get",
-    "recommender.runServicePerformanceRecommendations.list",
-    "recommender.runServicePerformanceRecommendations.update",
     "recommender.runServiceSecurityInsights.get",
     "recommender.runServiceSecurityInsights.list",
     "recommender.runServiceSecurityInsights.update",
@@ -96,6 +90,7 @@
     "resourcemanager.projects.list",
     "run.configurations.get",
     "run.configurations.list",
+    "run.executions.cancel",
     "run.executions.delete",
     "run.executions.get",
     "run.executions.list",
diff --git a/roles/cloudfunctions.developer b/roles/cloudfunctions.developer
index 1e101d87..e00caffb 100644
--- a/roles/cloudfunctions.developer
+++ b/roles/cloudfunctions.developer
@@ -72,6 +72,12 @@
     "recommender.runServiceIdentityRecommendations.get",
     "recommender.runServiceIdentityRecommendations.list",
     "recommender.runServiceIdentityRecommendations.update",
+    "recommender.runServicePerformanceInsights.get",
+    "recommender.runServicePerformanceInsights.list",
+    "recommender.runServicePerformanceInsights.update",
+    "recommender.runServicePerformanceRecommendations.get",
+    "recommender.runServicePerformanceRecommendations.list",
+    "recommender.runServicePerformanceRecommendations.update",
     "recommender.runServiceSecurityInsights.get",
     "recommender.runServiceSecurityInsights.list",
     "recommender.runServiceSecurityInsights.update",
@@ -83,6 +89,7 @@
     "resourcemanager.projects.list",
     "run.configurations.get",
     "run.configurations.list",
+    "run.executions.cancel",
     "run.executions.delete",
     "run.executions.get",
     "run.executions.list",
diff --git a/roles/cloudfunctions.serviceAgent b/roles/cloudfunctions.serviceAgent
index f7f5df22..44657f99 100644
--- a/roles/cloudfunctions.serviceAgent
+++ b/roles/cloudfunctions.serviceAgent
@@ -125,6 +125,12 @@
     "recommender.runServiceIdentityRecommendations.get",
     "recommender.runServiceIdentityRecommendations.list",
     "recommender.runServiceIdentityRecommendations.update",
+    "recommender.runServicePerformanceInsights.get",
+    "recommender.runServicePerformanceInsights.list",
+    "recommender.runServicePerformanceInsights.update",
+    "recommender.runServicePerformanceRecommendations.get",
+    "recommender.runServicePerformanceRecommendations.list",
+    "recommender.runServicePerformanceRecommendations.update",
     "recommender.runServiceSecurityInsights.get",
     "recommender.runServiceSecurityInsights.list",
     "recommender.runServiceSecurityInsights.update",
@@ -137,6 +143,7 @@
     "resourcemanager.projects.list",
     "run.configurations.get",
     "run.configurations.list",
+    "run.executions.cancel",
     "run.executions.delete",
     "run.executions.get",
     "run.executions.list",
diff --git a/roles/dataplex.admin b/roles/dataplex.admin
index 99330aa2..77156df4 100644
--- a/roles/dataplex.admin
+++ b/roles/dataplex.admin
@@ -5,14 +5,6 @@
     "cloudasset.assets.analyzeIamPolicy",
     "cloudasset.assets.searchAllIamPolicies",
     "cloudasset.assets.searchAllResources",
-    "dataplex.aspectTypes.create",
-    "dataplex.aspectTypes.delete",
-    "dataplex.aspectTypes.get",
-    "dataplex.aspectTypes.getIamPolicy",
-    "dataplex.aspectTypes.list",
-    "dataplex.aspectTypes.setIamPolicy",
-    "dataplex.aspectTypes.update",
-    "dataplex.aspectTypes.use",
     "dataplex.assetActions.list",
     "dataplex.assets.create",
     "dataplex.assets.delete",
@@ -66,31 +58,6 @@
     "dataplex.entities.get",
     "dataplex.entities.list",
     "dataplex.entities.update",
-    "dataplex.entries.create",
-    "dataplex.entries.delete",
-    "dataplex.entries.get",
-    "dataplex.entries.list",
-    "dataplex.entries.update",
-    "dataplex.entryGroups.create",
-    "dataplex.entryGroups.delete",
-    "dataplex.entryGroups.get",
-    "dataplex.entryGroups.getIamPolicy",
-    "dataplex.entryGroups.list",
-    "dataplex.entryGroups.setIamPolicy",
-    "dataplex.entryGroups.update",
-    "dataplex.entryGroups.useContactsAspect",
-    "dataplex.entryGroups.useGenericAspect",
-    "dataplex.entryGroups.useGenericEntry",
-    "dataplex.entryGroups.useOverviewAspect",
-    "dataplex.entryGroups.useSchemaAspect",
-    "dataplex.entryTypes.create",
-    "dataplex.entryTypes.delete",
-    "dataplex.entryTypes.get",
-    "dataplex.entryTypes.getIamPolicy",
-    "dataplex.entryTypes.list",
-    "dataplex.entryTypes.setIamPolicy",
-    "dataplex.entryTypes.update",
-    "dataplex.entryTypes.use",
     "dataplex.environments.create",
     "dataplex.environments.delete",
     "dataplex.environments.execute",
diff --git a/roles/dataplex.entryGroupOwner b/roles/dataplex.entryGroupOwner
index ac88e57f..672d985e 100644
--- a/roles/dataplex.entryGroupOwner
+++ b/roles/dataplex.entryGroupOwner
@@ -29,6 +29,6 @@
     "resourcemanager.projects.list"
   ],
   "name": "roles/dataplex.entryGroupOwner",
-  "stage": "ALPHA",
+  "stage": "GA",
   "title": "Dataplex Entry Group Owner"
 }
diff --git a/roles/dataplex.viewer b/roles/dataplex.viewer
index 9257717b..8ecb5fa3 100644
--- a/roles/dataplex.viewer
+++ b/roles/dataplex.viewer
@@ -3,9 +3,6 @@
   "etag": "AA==",
   "includedPermissions": [
     "cloudasset.assets.analyzeIamPolicy",
-    "dataplex.aspectTypes.get",
-    "dataplex.aspectTypes.getIamPolicy",
-    "dataplex.aspectTypes.list",
     "dataplex.assetActions.list",
     "dataplex.assets.get",
     "dataplex.assets.getIamPolicy",
@@ -25,12 +22,6 @@
     "dataplex.datascans.get",
     "dataplex.datascans.getIamPolicy",
     "dataplex.datascans.list",
-    "dataplex.entryGroups.get",
-    "dataplex.entryGroups.getIamPolicy",
-    "dataplex.entryGroups.list",
-    "dataplex.entryTypes.get",
-    "dataplex.entryTypes.getIamPolicy",
-    "dataplex.entryTypes.list",
     "dataplex.environments.get",
     "dataplex.environments.getIamPolicy",
     "dataplex.environments.list",
diff --git a/roles/editor b/roles/editor
index b9792c95..4c414a80 100644
--- a/roles/editor
+++ b/roles/editor
@@ -7021,6 +7021,7 @@
     "rma.operations.list",
     "run.configurations.get",
     "run.configurations.list",
+    "run.executions.cancel",
     "run.executions.delete",
     "run.executions.get",
     "run.executions.list",
diff --git a/roles/firebase.admin b/roles/firebase.admin
index 053cec0c..c30c65c1 100644
--- a/roles/firebase.admin
+++ b/roles/firebase.admin
@@ -377,6 +377,12 @@
     "recommender.runServiceIdentityRecommendations.get",
     "recommender.runServiceIdentityRecommendations.list",
     "recommender.runServiceIdentityRecommendations.update",
+    "recommender.runServicePerformanceInsights.get",
+    "recommender.runServicePerformanceInsights.list",
+    "recommender.runServicePerformanceInsights.update",
+    "recommender.runServicePerformanceRecommendations.get",
+    "recommender.runServicePerformanceRecommendations.list",
+    "recommender.runServicePerformanceRecommendations.update",
     "recommender.runServiceSecurityInsights.get",
     "recommender.runServiceSecurityInsights.list",
     "recommender.runServiceSecurityInsights.update",
@@ -389,6 +395,7 @@
     "resourcemanager.projects.list",
     "run.configurations.get",
     "run.configurations.list",
+    "run.executions.cancel",
     "run.executions.delete",
     "run.executions.get",
     "run.executions.list",
diff --git a/roles/firebase.developAdmin b/roles/firebase.developAdmin
index 4bfba86f..52bae09a 100644
--- a/roles/firebase.developAdmin
+++ b/roles/firebase.developAdmin
@@ -281,6 +281,12 @@
     "recommender.runServiceIdentityRecommendations.get",
     "recommender.runServiceIdentityRecommendations.list",
     "recommender.runServiceIdentityRecommendations.update",
+    "recommender.runServicePerformanceInsights.get",
+    "recommender.runServicePerformanceInsights.list",
+    "recommender.runServicePerformanceInsights.update",
+    "recommender.runServicePerformanceRecommendations.get",
+    "recommender.runServicePerformanceRecommendations.list",
+    "recommender.runServicePerformanceRecommendations.update",
     "recommender.runServiceSecurityInsights.get",
     "recommender.runServiceSecurityInsights.list",
     "recommender.runServiceSecurityInsights.update",
@@ -293,6 +299,7 @@
     "resourcemanager.projects.list",
     "run.configurations.get",
     "run.configurations.list",
+    "run.executions.cancel",
     "run.executions.delete",
     "run.executions.get",
     "run.executions.list",
diff --git a/roles/firebase.developViewer b/roles/firebase.developViewer
index 418440d7..95f435c1 100644
--- a/roles/firebase.developViewer
+++ b/roles/firebase.developViewer
@@ -119,6 +119,10 @@
     "recommender.runServiceIdentityInsights.list",
     "recommender.runServiceIdentityRecommendations.get",
     "recommender.runServiceIdentityRecommendations.list",
+    "recommender.runServicePerformanceInsights.get",
+    "recommender.runServicePerformanceInsights.list",
+    "recommender.runServicePerformanceRecommendations.get",
+    "recommender.runServicePerformanceRecommendations.list",
     "recommender.runServiceSecurityInsights.get",
     "recommender.runServiceSecurityInsights.list",
     "recommender.runServiceSecurityRecommendations.get",
diff --git a/roles/owner b/roles/owner
index 6780d362..8045befb 100644
--- a/roles/owner
+++ b/roles/owner
@@ -8102,6 +8102,7 @@
     "rma.operations.list",
     "run.configurations.get",
     "run.configurations.list",
+    "run.executions.cancel",
     "run.executions.delete",
     "run.executions.get",
     "run.executions.list",
diff --git a/roles/run.admin b/roles/run.admin
index a77a39f9..95d953ea 100644
--- a/roles/run.admin
+++ b/roles/run.admin
@@ -26,6 +26,7 @@
     "resourcemanager.projects.list",
     "run.configurations.get",
     "run.configurations.list",
+    "run.executions.cancel",
     "run.executions.delete",
     "run.executions.get",
     "run.executions.list",
diff --git a/roles/run.developer b/roles/run.developer
index 8c3bff1f..179f5fb4 100644
--- a/roles/run.developer
+++ b/roles/run.developer
@@ -16,6 +16,12 @@
     "recommender.runServiceIdentityRecommendations.get",
     "recommender.runServiceIdentityRecommendations.list",
     "recommender.runServiceIdentityRecommendations.update",
+    "recommender.runServicePerformanceInsights.get",
+    "recommender.runServicePerformanceInsights.list",
+    "recommender.runServicePerformanceInsights.update",
+    "recommender.runServicePerformanceRecommendations.get",
+    "recommender.runServicePerformanceRecommendations.list",
+    "recommender.runServicePerformanceRecommendations.update",
     "recommender.runServiceSecurityInsights.get",
     "recommender.runServiceSecurityInsights.list",
     "recommender.runServiceSecurityInsights.update",
diff --git a/roles/run.invoker b/roles/run.invoker
index b5a26fb2..430e239d 100644
--- a/roles/run.invoker
+++ b/roles/run.invoker
@@ -2,6 +2,7 @@
   "description": "Can invoke a Cloud Run service.",
   "etag": "AA==",
   "includedPermissions": [
+    "run.executions.cancel",
     "run.jobs.run",
     "run.routes.invoke"
   ],
diff --git a/roles/run.viewer b/roles/run.viewer
index 6a381bcf..65f546ba 100644
--- a/roles/run.viewer
+++ b/roles/run.viewer
@@ -12,10 +12,6 @@
     "recommender.runServiceIdentityInsights.list",
     "recommender.runServiceIdentityRecommendations.get",
     "recommender.runServiceIdentityRecommendations.list",
-    "recommender.runServicePerformanceInsights.get",
-    "recommender.runServicePerformanceInsights.list",
-    "recommender.runServicePerformanceRecommendations.get",
-    "recommender.runServicePerformanceRecommendations.list",
     "recommender.runServiceSecurityInsights.get",
     "recommender.runServiceSecurityInsights.list",
     "recommender.runServiceSecurityRecommendations.get",