BigQuery Admin
(roles/bigquery.admin)
Provides permissions to manage all resources within the project. Can manage
all data within the project, and can cancel jobs from other users running
within the project.
Lowest-level resources where you can grant this role:
-
Datasets
-
Row access policies
-
Tables
-
Views
|
bigquery.bireservations.*
bigquery.bireservations.getbigquery.bireservations.update
bigquery.capacityCommitments.*
bigquery.capacityCommitments.createbigquery.capacityCommitments.deletebigquery.capacityCommitments.getbigquery.capacityCommitments.listbigquery.capacityCommitments.update
bigquery.config.*
bigquery.config.getbigquery.config.update
bigquery.connections.*
bigquery.connections.createbigquery.connections.delegatebigquery.connections.deletebigquery.connections.getbigquery.connections.getIamPolicybigquery.connections.listbigquery.connections.setIamPolicybigquery.connections.updatebigquery.connections.updateTagbigquery.connections.use
bigquery.dataPolicies.create
bigquery.dataPolicies.delete
bigquery.dataPolicies.get
bigquery.dataPolicies.getIamPolicy
bigquery.dataPolicies.list
bigquery.dataPolicies.setIamPolicy
bigquery.dataPolicies.update
bigquery.datasets.*
bigquery.datasets.createbigquery.datasets.createTagBindingbigquery.datasets.deletebigquery.datasets.deleteTagBindingbigquery.datasets.getbigquery.datasets.getIamPolicybigquery.datasets.linkbigquery.datasets.listEffectiveTagsbigquery.datasets.listSharedDatasetUsagebigquery.datasets.listTagBindingsbigquery.datasets.setIamPolicybigquery.datasets.updatebigquery.datasets.updateTag
bigquery.jobs.*
bigquery.jobs.createbigquery.jobs.deletebigquery.jobs.getbigquery.jobs.listbigquery.jobs.listAllbigquery.jobs.listExecutionMetadatabigquery.jobs.update
bigquery.models.*
bigquery.models.createbigquery.models.deletebigquery.models.exportbigquery.models.getDatabigquery.models.getMetadatabigquery.models.listbigquery.models.updateDatabigquery.models.updateMetadatabigquery.models.updateTag
bigquery.readsessions.*
bigquery.readsessions.createbigquery.readsessions.getDatabigquery.readsessions.update
bigquery.reservationAssignments.*
bigquery.reservationAssignments.createbigquery.reservationAssignments.deletebigquery.reservationAssignments.listbigquery.reservationAssignments.search
bigquery.reservations.*
bigquery.reservations.createbigquery.reservations.deletebigquery.reservations.getbigquery.reservations.listbigquery.reservations.listFailoverDatasetsbigquery.reservations.update
bigquery.routines.*
bigquery.routines.createbigquery.routines.deletebigquery.routines.getbigquery.routines.listbigquery.routines.updatebigquery.routines.updateTag
bigquery.rowAccessPolicies.create
bigquery.rowAccessPolicies.delete
bigquery.rowAccessPolicies.getIamPolicy
bigquery.rowAccessPolicies.list
bigquery.rowAccessPolicies.overrideTimeTravelRestrictions
bigquery.rowAccessPolicies.setIamPolicy
bigquery.rowAccessPolicies.update
bigquery.savedqueries.*
bigquery.savedqueries.createbigquery.savedqueries.deletebigquery.savedqueries.getbigquery.savedqueries.listbigquery.savedqueries.update
bigquery.tables.*
bigquery.tables.createbigquery.tables.createIndexbigquery.tables.createSnapshotbigquery.tables.createTagBindingbigquery.tables.deletebigquery.tables.deleteIndexbigquery.tables.deleteSnapshotbigquery.tables.deleteTagBindingbigquery.tables.exportbigquery.tables.getbigquery.tables.getDatabigquery.tables.getIamPolicybigquery.tables.listbigquery.tables.listEffectiveTagsbigquery.tables.listTagBindingsbigquery.tables.replicateDatabigquery.tables.restoreSnapshotbigquery.tables.setCategorybigquery.tables.setColumnDataPolicybigquery.tables.setIamPolicybigquery.tables.updatebigquery.tables.updateDatabigquery.tables.updateTag
bigquery.transfers.*
bigquery.transfers.getbigquery.transfers.update
bigquerymigration.translation.translate
dataform.*
dataform.compilationResults.createdataform.compilationResults.getdataform.compilationResults.listdataform.compilationResults.querydataform.config.getdataform.config.updatedataform.locations.getdataform.locations.listdataform.releaseConfigs.createdataform.releaseConfigs.deletedataform.releaseConfigs.getdataform.releaseConfigs.listdataform.releaseConfigs.updatedataform.repositories.commitdataform.repositories.computeAccessTokenStatusdataform.repositories.createdataform.repositories.deletedataform.repositories.fetchHistorydataform.repositories.fetchRemoteBranchesdataform.repositories.getdataform.repositories.getIamPolicydataform.repositories.listdataform.repositories.queryDirectoryContentsdataform.repositories.readFiledataform.repositories.setIamPolicydataform.repositories.updatedataform.workflowConfigs.createdataform.workflowConfigs.deletedataform.workflowConfigs.getdataform.workflowConfigs.listdataform.workflowConfigs.updatedataform.workflowInvocations.canceldataform.workflowInvocations.createdataform.workflowInvocations.deletedataform.workflowInvocations.getdataform.workflowInvocations.listdataform.workflowInvocations.querydataform.workspaces.commitdataform.workspaces.createdataform.workspaces.deletedataform.workspaces.fetchFileDiffdataform.workspaces.fetchFileGitStatusesdataform.workspaces.fetchGitAheadBehinddataform.workspaces.getdataform.workspaces.getIamPolicydataform.workspaces.installNpmPackagesdataform.workspaces.listdataform.workspaces.makeDirectorydataform.workspaces.moveDirectorydataform.workspaces.moveFiledataform.workspaces.pulldataform.workspaces.pushdataform.workspaces.queryDirectoryContentsdataform.workspaces.readFiledataform.workspaces.removeDirectorydataform.workspaces.removeFiledataform.workspaces.resetdataform.workspaces.searchFilesdataform.workspaces.setIamPolicydataform.workspaces.writeFile
dataplex.projects.search
resourcemanager.projects.get
resourcemanager.projects.list
|
BigQuery Connection Admin
(roles/bigquery.connectionAdmin)
|
bigquery.connections.*
bigquery.connections.createbigquery.connections.delegatebigquery.connections.deletebigquery.connections.getbigquery.connections.getIamPolicybigquery.connections.listbigquery.connections.setIamPolicybigquery.connections.updatebigquery.connections.updateTagbigquery.connections.use
|
BigQuery Connection User
(roles/bigquery.connectionUser)
|
bigquery.connections.get
bigquery.connections.getIamPolicy
bigquery.connections.list
bigquery.connections.use
|
BigQuery Data Editor
(roles/bigquery.dataEditor)
When applied to a table or view, this role provides permissions to:
- Read and update data and metadata for the table or view.
- Delete the table or view.
This role cannot be applied to individual models or routines.
When applied to a dataset, this role provides permissions to:
- Read the dataset's metadata and list tables in the dataset.
- Create, update, get, and delete the dataset's tables.
When applied at the project or organization level, this role can also
create new datasets.
Lowest-level resources where you can grant this role:
|
bigquery.config.get
bigquery.datasets.create
bigquery.datasets.get
bigquery.datasets.getIamPolicy
bigquery.datasets.updateTag
bigquery.models.*
bigquery.models.createbigquery.models.deletebigquery.models.exportbigquery.models.getDatabigquery.models.getMetadatabigquery.models.listbigquery.models.updateDatabigquery.models.updateMetadatabigquery.models.updateTag
bigquery.routines.*
bigquery.routines.createbigquery.routines.deletebigquery.routines.getbigquery.routines.listbigquery.routines.updatebigquery.routines.updateTag
bigquery.tables.create
bigquery.tables.createIndex
bigquery.tables.createSnapshot
bigquery.tables.delete
bigquery.tables.deleteIndex
bigquery.tables.export
bigquery.tables.get
bigquery.tables.getData
bigquery.tables.getIamPolicy
bigquery.tables.list
bigquery.tables.replicateData
bigquery.tables.restoreSnapshot
bigquery.tables.update
bigquery.tables.updateData
bigquery.tables.updateTag
resourcemanager.projects.get
resourcemanager.projects.list
|
BigQuery Data Owner
(roles/bigquery.dataOwner)
When applied to a table or view, this role provides permissions to:
- Read and update data and metadata for the table or view.
- Share the table or view.
- Delete the table or view.
This role cannot be applied to individual models or routines.
When applied to a dataset, this role provides permissions to:
- Read, update, and delete the dataset.
- Create, update, get, and delete the dataset's tables.
When applied at the project or organization level, this role can also
create new datasets.
Lowest-level resources where you can grant this role:
|
bigquery.config.get
bigquery.dataPolicies.create
bigquery.dataPolicies.delete
bigquery.dataPolicies.get
bigquery.dataPolicies.getIamPolicy
bigquery.dataPolicies.list
bigquery.dataPolicies.setIamPolicy
bigquery.dataPolicies.update
bigquery.datasets.*
bigquery.datasets.createbigquery.datasets.createTagBindingbigquery.datasets.deletebigquery.datasets.deleteTagBindingbigquery.datasets.getbigquery.datasets.getIamPolicybigquery.datasets.linkbigquery.datasets.listEffectiveTagsbigquery.datasets.listSharedDatasetUsagebigquery.datasets.listTagBindingsbigquery.datasets.setIamPolicybigquery.datasets.updatebigquery.datasets.updateTag
bigquery.models.*
bigquery.models.createbigquery.models.deletebigquery.models.exportbigquery.models.getDatabigquery.models.getMetadatabigquery.models.listbigquery.models.updateDatabigquery.models.updateMetadatabigquery.models.updateTag
bigquery.routines.*
bigquery.routines.createbigquery.routines.deletebigquery.routines.getbigquery.routines.listbigquery.routines.updatebigquery.routines.updateTag
bigquery.rowAccessPolicies.create
bigquery.rowAccessPolicies.delete
bigquery.rowAccessPolicies.getIamPolicy
bigquery.rowAccessPolicies.list
bigquery.rowAccessPolicies.setIamPolicy
bigquery.rowAccessPolicies.update
bigquery.tables.*
bigquery.tables.createbigquery.tables.createIndexbigquery.tables.createSnapshotbigquery.tables.createTagBindingbigquery.tables.deletebigquery.tables.deleteIndexbigquery.tables.deleteSnapshotbigquery.tables.deleteTagBindingbigquery.tables.exportbigquery.tables.getbigquery.tables.getDatabigquery.tables.getIamPolicybigquery.tables.listbigquery.tables.listEffectiveTagsbigquery.tables.listTagBindingsbigquery.tables.replicateDatabigquery.tables.restoreSnapshotbigquery.tables.setCategorybigquery.tables.setColumnDataPolicybigquery.tables.setIamPolicybigquery.tables.updatebigquery.tables.updateDatabigquery.tables.updateTag
resourcemanager.projects.get
resourcemanager.projects.list
|
BigQuery Data Viewer
(roles/bigquery.dataViewer)
When applied to a table or view, this role provides permissions to:
- Read data and metadata from the table or view.
This role cannot be applied to individual models or routines.
When applied to a dataset, this role provides permissions to list all of the resources in the
dataset (such as tables, views, snapshots, models, and routines) and to read their data and metadata
with applicable APIs and in queries.
When applied at the project or organization level, this role can also
enumerate all datasets in the project. Additional roles, however, are
necessary to allow the running of jobs.
Lowest-level resources where you can grant this role:
|
bigquery.datasets.get
bigquery.datasets.getIamPolicy
bigquery.models.export
bigquery.models.getData
bigquery.models.getMetadata
bigquery.models.list
bigquery.routines.get
bigquery.routines.list
bigquery.tables.createSnapshot
bigquery.tables.export
bigquery.tables.get
bigquery.tables.getData
bigquery.tables.getIamPolicy
bigquery.tables.list
bigquery.tables.replicateData
resourcemanager.projects.get
resourcemanager.projects.list
|
BigQuery Filtered Data Viewer
(roles/bigquery.filteredDataViewer)
Access to view filtered table data defined by a row access policy
|
bigquery.rowAccessPolicies.getFilteredData
|
BigQuery Job User
(roles/bigquery.jobUser)
Provides permissions to run jobs, including queries, within the project.
Lowest-level resources where you can grant this role:
|
bigquery.config.get
bigquery.jobs.create
dataform.locations.*
dataform.locations.getdataform.locations.list
dataform.repositories.create
dataform.repositories.list
resourcemanager.projects.get
resourcemanager.projects.list
|
|
(roles/bigquery.metadataViewer)
When applied to a table or view, this role provides permissions to:
- Read metadata from the table or view.
This role cannot be applied to individual models or routines.
When applied to a dataset, this role provides permissions to:
- List tables and views in the dataset.
- Read metadata from the dataset's tables and views.
When applied at the project or organization level, this role provides permissions to:
- List all datasets and read metadata for all datasets in the project.
- List all tables and views and read metadata for all tables and views
in the project.
Additional roles are necessary to allow the running of jobs.
Lowest-level resources where you can grant this role:
|
bigquery.datasets.get
bigquery.datasets.getIamPolicy
bigquery.models.getMetadata
bigquery.models.list
bigquery.routines.get
bigquery.routines.list
bigquery.tables.get
bigquery.tables.getIamPolicy
bigquery.tables.list
dataplex.projects.search
resourcemanager.projects.get
resourcemanager.projects.list
|
BigQuery Read Session User
(roles/bigquery.readSessionUser)
Provides the ability to create and use read sessions.
Lowest-level resources where you can grant this role:
|
bigquery.readsessions.*
bigquery.readsessions.createbigquery.readsessions.getDatabigquery.readsessions.update
resourcemanager.projects.get
resourcemanager.projects.list
|
BigQuery Resource Admin
(roles/bigquery.resourceAdmin)
Administers BigQuery workloads, including slot assignments, commitments, and reservations.
|
bigquery.bireservations.*
bigquery.bireservations.getbigquery.bireservations.update
bigquery.capacityCommitments.*
bigquery.capacityCommitments.createbigquery.capacityCommitments.deletebigquery.capacityCommitments.getbigquery.capacityCommitments.listbigquery.capacityCommitments.update
bigquery.jobs.get
bigquery.jobs.list
bigquery.jobs.listAll
bigquery.jobs.listExecutionMetadata
bigquery.reservationAssignments.*
bigquery.reservationAssignments.createbigquery.reservationAssignments.deletebigquery.reservationAssignments.listbigquery.reservationAssignments.search
bigquery.reservations.*
bigquery.reservations.createbigquery.reservations.deletebigquery.reservations.getbigquery.reservations.listbigquery.reservations.listFailoverDatasetsbigquery.reservations.update
recommender.bigqueryCapacityCommitmentsInsights.*
recommender.bigqueryCapacityCommitmentsInsights.getrecommender.bigqueryCapacityCommitmentsInsights.listrecommender.bigqueryCapacityCommitmentsInsights.update
recommender.bigqueryCapacityCommitmentsRecommendations.*
recommender.bigqueryCapacityCommitmentsRecommendations.getrecommender.bigqueryCapacityCommitmentsRecommendations.listrecommender.bigqueryCapacityCommitmentsRecommendations.update
resourcemanager.projects.get
resourcemanager.projects.list
|
BigQuery Resource Editor
(roles/bigquery.resourceEditor)
Manages BigQuery workloads, but is unable to create or modify slot commitments.
|
bigquery.bireservations.get
bigquery.capacityCommitments.get
bigquery.capacityCommitments.list
bigquery.jobs.get
bigquery.jobs.list
bigquery.jobs.listAll
bigquery.jobs.listExecutionMetadata
bigquery.reservationAssignments.*
bigquery.reservationAssignments.createbigquery.reservationAssignments.deletebigquery.reservationAssignments.listbigquery.reservationAssignments.search
bigquery.reservations.*
bigquery.reservations.createbigquery.reservations.deletebigquery.reservations.getbigquery.reservations.listbigquery.reservations.listFailoverDatasetsbigquery.reservations.update
resourcemanager.projects.get
resourcemanager.projects.list
|
BigQuery Resource Viewer
(roles/bigquery.resourceViewer)
Can view BigQuery workloads, but cannot create or modify slot reservations or commitments.
|
bigquery.bireservations.get
bigquery.capacityCommitments.get
bigquery.capacityCommitments.list
bigquery.jobs.get
bigquery.jobs.list
bigquery.jobs.listAll
bigquery.jobs.listExecutionMetadata
bigquery.reservationAssignments.list
bigquery.reservationAssignments.search
bigquery.reservations.get
bigquery.reservations.list
bigquery.reservations.listFailoverDatasets
resourcemanager.projects.get
resourcemanager.projects.list
|
BigQuery Studio Admin
(roles/bigquery.studioAdmin)
Combination role of BigQuery Admin, Dataform Admin, Notebook Runtime Admin and Dataproc Serverless Editor.
|
aiplatform.notebookRuntimeTemplates.*
aiplatform.notebookRuntimeTemplates.applyaiplatform.notebookRuntimeTemplates.createaiplatform.notebookRuntimeTemplates.deleteaiplatform.notebookRuntimeTemplates.getaiplatform.notebookRuntimeTemplates.getIamPolicyaiplatform.notebookRuntimeTemplates.listaiplatform.notebookRuntimeTemplates.setIamPolicyaiplatform.notebookRuntimeTemplates.update
aiplatform.notebookRuntimes.*
aiplatform.notebookRuntimes.assignaiplatform.notebookRuntimes.deleteaiplatform.notebookRuntimes.getaiplatform.notebookRuntimes.listaiplatform.notebookRuntimes.startaiplatform.notebookRuntimes.updateaiplatform.notebookRuntimes.upgrade
aiplatform.operations.list
bigquery.bireservations.*
bigquery.bireservations.getbigquery.bireservations.update
bigquery.capacityCommitments.*
bigquery.capacityCommitments.createbigquery.capacityCommitments.deletebigquery.capacityCommitments.getbigquery.capacityCommitments.listbigquery.capacityCommitments.update
bigquery.config.*
bigquery.config.getbigquery.config.update
bigquery.connections.*
bigquery.connections.createbigquery.connections.delegatebigquery.connections.deletebigquery.connections.getbigquery.connections.getIamPolicybigquery.connections.listbigquery.connections.setIamPolicybigquery.connections.updatebigquery.connections.updateTagbigquery.connections.use
bigquery.dataPolicies.create
bigquery.dataPolicies.delete
bigquery.dataPolicies.get
bigquery.dataPolicies.getIamPolicy
bigquery.dataPolicies.list
bigquery.dataPolicies.setIamPolicy
bigquery.dataPolicies.update
bigquery.datasets.*
bigquery.datasets.createbigquery.datasets.createTagBindingbigquery.datasets.deletebigquery.datasets.deleteTagBindingbigquery.datasets.getbigquery.datasets.getIamPolicybigquery.datasets.linkbigquery.datasets.listEffectiveTagsbigquery.datasets.listSharedDatasetUsagebigquery.datasets.listTagBindingsbigquery.datasets.setIamPolicybigquery.datasets.updatebigquery.datasets.updateTag
bigquery.jobs.*
bigquery.jobs.createbigquery.jobs.deletebigquery.jobs.getbigquery.jobs.listbigquery.jobs.listAllbigquery.jobs.listExecutionMetadatabigquery.jobs.update
bigquery.models.*
bigquery.models.createbigquery.models.deletebigquery.models.exportbigquery.models.getDatabigquery.models.getMetadatabigquery.models.listbigquery.models.updateDatabigquery.models.updateMetadatabigquery.models.updateTag
bigquery.readsessions.*
bigquery.readsessions.createbigquery.readsessions.getDatabigquery.readsessions.update
bigquery.reservationAssignments.*
bigquery.reservationAssignments.createbigquery.reservationAssignments.deletebigquery.reservationAssignments.listbigquery.reservationAssignments.search
bigquery.reservations.*
bigquery.reservations.createbigquery.reservations.deletebigquery.reservations.getbigquery.reservations.listbigquery.reservations.listFailoverDatasetsbigquery.reservations.update
bigquery.routines.*
bigquery.routines.createbigquery.routines.deletebigquery.routines.getbigquery.routines.listbigquery.routines.updatebigquery.routines.updateTag
bigquery.rowAccessPolicies.create
bigquery.rowAccessPolicies.delete
bigquery.rowAccessPolicies.getIamPolicy
bigquery.rowAccessPolicies.list
bigquery.rowAccessPolicies.overrideTimeTravelRestrictions
bigquery.rowAccessPolicies.setIamPolicy
bigquery.rowAccessPolicies.update
bigquery.savedqueries.*
bigquery.savedqueries.createbigquery.savedqueries.deletebigquery.savedqueries.getbigquery.savedqueries.listbigquery.savedqueries.update
bigquery.tables.*
bigquery.tables.createbigquery.tables.createIndexbigquery.tables.createSnapshotbigquery.tables.createTagBindingbigquery.tables.deletebigquery.tables.deleteIndexbigquery.tables.deleteSnapshotbigquery.tables.deleteTagBindingbigquery.tables.exportbigquery.tables.getbigquery.tables.getDatabigquery.tables.getIamPolicybigquery.tables.listbigquery.tables.listEffectiveTagsbigquery.tables.listTagBindingsbigquery.tables.replicateDatabigquery.tables.restoreSnapshotbigquery.tables.setCategorybigquery.tables.setColumnDataPolicybigquery.tables.setIamPolicybigquery.tables.updatebigquery.tables.updateDatabigquery.tables.updateTag
bigquery.transfers.*
bigquery.transfers.getbigquery.transfers.update
bigquerymigration.translation.translate
compute.projects.get
compute.regions.*
compute.regions.getcompute.regions.list
compute.reservations.get
compute.reservations.list
compute.zones.*
compute.zones.getcompute.zones.list
dataform.*
dataform.compilationResults.createdataform.compilationResults.getdataform.compilationResults.listdataform.compilationResults.querydataform.config.getdataform.config.updatedataform.locations.getdataform.locations.listdataform.releaseConfigs.createdataform.releaseConfigs.deletedataform.releaseConfigs.getdataform.releaseConfigs.listdataform.releaseConfigs.updatedataform.repositories.commitdataform.repositories.computeAccessTokenStatusdataform.repositories.createdataform.repositories.deletedataform.repositories.fetchHistorydataform.repositories.fetchRemoteBranchesdataform.repositories.getdataform.repositories.getIamPolicydataform.repositories.listdataform.repositories.queryDirectoryContentsdataform.repositories.readFiledataform.repositories.setIamPolicydataform.repositories.updatedataform.workflowConfigs.createdataform.workflowConfigs.deletedataform.workflowConfigs.getdataform.workflowConfigs.listdataform.workflowConfigs.updatedataform.workflowInvocations.canceldataform.workflowInvocations.createdataform.workflowInvocations.deletedataform.workflowInvocations.getdataform.workflowInvocations.listdataform.workflowInvocations.querydataform.workspaces.commitdataform.workspaces.createdataform.workspaces.deletedataform.workspaces.fetchFileDiffdataform.workspaces.fetchFileGitStatusesdataform.workspaces.fetchGitAheadBehinddataform.workspaces.getdataform.workspaces.getIamPolicydataform.workspaces.installNpmPackagesdataform.workspaces.listdataform.workspaces.makeDirectorydataform.workspaces.moveDirectorydataform.workspaces.moveFiledataform.workspaces.pulldataform.workspaces.pushdataform.workspaces.queryDirectoryContentsdataform.workspaces.readFiledataform.workspaces.removeDirectorydataform.workspaces.removeFiledataform.workspaces.resetdataform.workspaces.searchFilesdataform.workspaces.setIamPolicydataform.workspaces.writeFile
dataplex.projects.search
dataproc.batches.analyze
dataproc.batches.cancel
dataproc.batches.create
dataproc.batches.delete
dataproc.batches.get
dataproc.batches.list
dataproc.operations.cancel
dataproc.operations.delete
dataproc.operations.get
dataproc.operations.list
dataproc.sessionTemplates.*
dataproc.sessionTemplates.createdataproc.sessionTemplates.deletedataproc.sessionTemplates.getdataproc.sessionTemplates.listdataproc.sessionTemplates.update
dataproc.sessions.*
dataproc.sessions.createdataproc.sessions.deletedataproc.sessions.getdataproc.sessions.listdataproc.sessions.sparkApplicationReaddataproc.sessions.sparkApplicationWritedataproc.sessions.terminate
dataprocrm.nodePools.*
dataprocrm.nodePools.createdataprocrm.nodePools.deletedataprocrm.nodePools.deleteNodesdataprocrm.nodePools.getdataprocrm.nodePools.listdataprocrm.nodePools.resize
dataprocrm.nodes.get
dataprocrm.nodes.heartbeat
dataprocrm.nodes.list
dataprocrm.nodes.update
dataprocrm.operations.get
dataprocrm.operations.list
dataprocrm.workloads.*
dataprocrm.workloads.canceldataprocrm.workloads.createdataprocrm.workloads.deletedataprocrm.workloads.getdataprocrm.workloads.list
resourcemanager.projects.get
resourcemanager.projects.list
|
BigQuery Studio User
(roles/bigquery.studioUser)
Combination role of BigQuery Job User, BigQuery Read Session User, Dataform Code Creator, Notebook Runtime User and Dataproc Serverless Editor.
|
aiplatform.notebookRuntimeTemplates.apply
aiplatform.notebookRuntimeTemplates.get
aiplatform.notebookRuntimeTemplates.getIamPolicy
aiplatform.notebookRuntimeTemplates.list
aiplatform.notebookRuntimes.assign
aiplatform.notebookRuntimes.get
aiplatform.notebookRuntimes.list
aiplatform.operations.list
bigquery.config.get
bigquery.jobs.create
bigquery.readsessions.*
bigquery.readsessions.createbigquery.readsessions.getDatabigquery.readsessions.update
compute.projects.get
compute.regions.*
compute.regions.getcompute.regions.list
compute.zones.*
compute.zones.getcompute.zones.list
dataform.locations.*
dataform.locations.getdataform.locations.list
dataform.repositories.create
dataform.repositories.list
dataplex.projects.search
dataproc.batches.analyze
dataproc.batches.cancel
dataproc.batches.create
dataproc.batches.delete
dataproc.batches.get
dataproc.batches.list
dataproc.operations.cancel
dataproc.operations.delete
dataproc.operations.get
dataproc.operations.list
dataproc.sessionTemplates.*
dataproc.sessionTemplates.createdataproc.sessionTemplates.deletedataproc.sessionTemplates.getdataproc.sessionTemplates.listdataproc.sessionTemplates.update
dataproc.sessions.*
dataproc.sessions.createdataproc.sessions.deletedataproc.sessions.getdataproc.sessions.listdataproc.sessions.sparkApplicationReaddataproc.sessions.sparkApplicationWritedataproc.sessions.terminate
dataprocrm.nodePools.*
dataprocrm.nodePools.createdataprocrm.nodePools.deletedataprocrm.nodePools.deleteNodesdataprocrm.nodePools.getdataprocrm.nodePools.listdataprocrm.nodePools.resize
dataprocrm.nodes.get
dataprocrm.nodes.heartbeat
dataprocrm.nodes.list
dataprocrm.nodes.update
dataprocrm.operations.get
dataprocrm.operations.list
dataprocrm.workloads.*
dataprocrm.workloads.canceldataprocrm.workloads.createdataprocrm.workloads.deletedataprocrm.workloads.getdataprocrm.workloads.list
resourcemanager.projects.get
resourcemanager.projects.list
|
BigQuery User
(roles/bigquery.user)
When applied to a dataset, this role provides the ability to read the dataset's metadata and list
tables in the dataset.
When applied to a project, this role also provides the ability to run jobs, including queries,
within the project. A principal with this role can enumerate their own jobs, cancel their own jobs, and
enumerate datasets within a project. Additionally, allows the creation of new datasets within the
project; the creator is granted the BigQuery Data Owner role (roles/bigquery.dataOwner)
on these new datasets.
Lowest-level resources where you can grant this role:
|
bigquery.bireservations.get
bigquery.capacityCommitments.get
bigquery.capacityCommitments.list
bigquery.config.get
bigquery.datasets.create
bigquery.datasets.get
bigquery.datasets.getIamPolicy
bigquery.jobs.create
bigquery.jobs.list
bigquery.models.list
bigquery.readsessions.*
bigquery.readsessions.createbigquery.readsessions.getDatabigquery.readsessions.update
bigquery.reservationAssignments.list
bigquery.reservationAssignments.search
bigquery.reservations.get
bigquery.reservations.list
bigquery.reservations.listFailoverDatasets
bigquery.routines.list
bigquery.savedqueries.get
bigquery.savedqueries.list
bigquery.tables.list
bigquery.transfers.get
bigquerymigration.translation.translate
dataform.locations.*
dataform.locations.getdataform.locations.list
dataform.repositories.create
dataform.repositories.list
dataplex.projects.search
resourcemanager.projects.get
resourcemanager.projects.list
|
BigQuery Data Policy Admin
(roles/bigquerydatapolicy.admin)
Role for managing Data Policies in BigQuery
|
bigquery.dataPolicies.create
bigquery.dataPolicies.delete
bigquery.dataPolicies.get
bigquery.dataPolicies.getIamPolicy
bigquery.dataPolicies.list
bigquery.dataPolicies.setIamPolicy
bigquery.dataPolicies.update
|
Masked Reader
(roles/bigquerydatapolicy.maskedReader)
Masked read access to sub-resources tagged by the policy tag associated with a data policy, for example, BigQuery columns
|
bigquery.dataPolicies.maskedGet
|
Raw Data Reader
Beta
(roles/bigquerydatapolicy.rawDataReader)
Raw read access to sub-resources associated with a data policy, for example, BigQuery columns
|
bigquery.dataPolicies.getRawData
|
BigQuery Data Policy Viewer
(roles/bigquerydatapolicy.viewer)
Role for viewing Data Policies in BigQuery
|
bigquery.dataPolicies.get
bigquery.dataPolicies.list
|
