Cloud SQL roles and permissions

This page lists the IAM roles and permissions for Cloud SQL. To search through all roles and permissions, see the role and permission index.

Cloud SQL roles

Role Permissions

(roles/cloudsql.admin)

Provides full control of Cloud SQL resources.

Lowest-level resources where you can grant this role:

  • Project

backupdr.backupPlans.get

backupdr.backupPlans.list

backupdr.backupVaults.get

backupdr.backupVaults.list

backupdr.locations.list

backupdr.operations.get

backupdr.serviceConfig.initialize

cloudaicompanion.companions.*

  • cloudaicompanion.companions.generateChat
  • cloudaicompanion.companions.generateCode

cloudaicompanion.entitlements.get

cloudaicompanion.instances.completeCode

cloudaicompanion.instances.generateCode

cloudkms.keyHandles.*

  • cloudkms.keyHandles.create
  • cloudkms.keyHandles.get
  • cloudkms.keyHandles.list

cloudkms.operations.get

cloudkms.projects.showEffectiveAutokeyConfig

cloudsql.*

  • cloudsql.backupRuns.create
  • cloudsql.backupRuns.delete
  • cloudsql.backupRuns.export
  • cloudsql.backupRuns.get
  • cloudsql.backupRuns.list
  • cloudsql.backupRuns.update
  • cloudsql.databases.create
  • cloudsql.databases.delete
  • cloudsql.databases.get
  • cloudsql.databases.list
  • cloudsql.databases.update
  • cloudsql.instances.addServerCa
  • cloudsql.instances.addServerCertificate
  • cloudsql.instances.clone
  • cloudsql.instances.connect
  • cloudsql.instances.create
  • cloudsql.instances.createTagBinding
  • cloudsql.instances.delete
  • cloudsql.instances.deleteTagBinding
  • cloudsql.instances.demoteMaster
  • cloudsql.instances.executeSql
  • cloudsql.instances.export
  • cloudsql.instances.failover
  • cloudsql.instances.get
  • cloudsql.instances.getDiskShrinkConfig
  • cloudsql.instances.import
  • cloudsql.instances.list
  • cloudsql.instances.listEffectiveTags
  • cloudsql.instances.listServerCas
  • cloudsql.instances.listServerCertificates
  • cloudsql.instances.listTagBindings
  • cloudsql.instances.login
  • cloudsql.instances.manageEncryption
  • cloudsql.instances.migrate
  • cloudsql.instances.performDiskShrink
  • cloudsql.instances.promoteReplica
  • cloudsql.instances.reencrypt
  • cloudsql.instances.resetReplicaSize
  • cloudsql.instances.resetSslConfig
  • cloudsql.instances.restart
  • cloudsql.instances.restoreBackup
  • cloudsql.instances.rotateServerCa
  • cloudsql.instances.rotateServerCertificate
  • cloudsql.instances.startReplica
  • cloudsql.instances.stopReplica
  • cloudsql.instances.truncateLog
  • cloudsql.instances.update
  • cloudsql.schemas.view
  • cloudsql.sslCerts.create
  • cloudsql.sslCerts.delete
  • cloudsql.sslCerts.get
  • cloudsql.sslCerts.list
  • cloudsql.users.create
  • cloudsql.users.delete
  • cloudsql.users.get
  • cloudsql.users.list
  • cloudsql.users.update

recommender.cloudsqlIdleInstanceRecommendations.*

  • recommender.cloudsqlIdleInstanceRecommendations.get
  • recommender.cloudsqlIdleInstanceRecommendations.list
  • recommender.cloudsqlIdleInstanceRecommendations.update

recommender.cloudsqlInstanceActivityInsights.*

  • recommender.cloudsqlInstanceActivityInsights.get
  • recommender.cloudsqlInstanceActivityInsights.list
  • recommender.cloudsqlInstanceActivityInsights.update

recommender.cloudsqlInstanceCpuUsageInsights.*

  • recommender.cloudsqlInstanceCpuUsageInsights.get
  • recommender.cloudsqlInstanceCpuUsageInsights.list
  • recommender.cloudsqlInstanceCpuUsageInsights.update

recommender.cloudsqlInstanceDiskUsageTrendInsights.*

  • recommender.cloudsqlInstanceDiskUsageTrendInsights.get
  • recommender.cloudsqlInstanceDiskUsageTrendInsights.list
  • recommender.cloudsqlInstanceDiskUsageTrendInsights.update

recommender.cloudsqlInstanceMemoryUsageInsights.*

  • recommender.cloudsqlInstanceMemoryUsageInsights.get
  • recommender.cloudsqlInstanceMemoryUsageInsights.list
  • recommender.cloudsqlInstanceMemoryUsageInsights.update

recommender.cloudsqlInstanceOomProbabilityInsights.*

  • recommender.cloudsqlInstanceOomProbabilityInsights.get
  • recommender.cloudsqlInstanceOomProbabilityInsights.list
  • recommender.cloudsqlInstanceOomProbabilityInsights.update

recommender.cloudsqlInstanceOutOfDiskRecommendations.*

  • recommender.cloudsqlInstanceOutOfDiskRecommendations.get
  • recommender.cloudsqlInstanceOutOfDiskRecommendations.list
  • recommender.cloudsqlInstanceOutOfDiskRecommendations.update

recommender.cloudsqlInstancePerformanceInsights.*

  • recommender.cloudsqlInstancePerformanceInsights.get
  • recommender.cloudsqlInstancePerformanceInsights.list
  • recommender.cloudsqlInstancePerformanceInsights.update

recommender.cloudsqlInstancePerformanceRecommendations.*

  • recommender.cloudsqlInstancePerformanceRecommendations.get
  • recommender.cloudsqlInstancePerformanceRecommendations.list
  • recommender.cloudsqlInstancePerformanceRecommendations.update

recommender.cloudsqlInstanceReliabilityInsights.*

  • recommender.cloudsqlInstanceReliabilityInsights.get
  • recommender.cloudsqlInstanceReliabilityInsights.list
  • recommender.cloudsqlInstanceReliabilityInsights.update

recommender.cloudsqlInstanceReliabilityRecommendations.*

  • recommender.cloudsqlInstanceReliabilityRecommendations.get
  • recommender.cloudsqlInstanceReliabilityRecommendations.list
  • recommender.cloudsqlInstanceReliabilityRecommendations.update

recommender.cloudsqlInstanceSecurityInsights.*

  • recommender.cloudsqlInstanceSecurityInsights.get
  • recommender.cloudsqlInstanceSecurityInsights.list
  • recommender.cloudsqlInstanceSecurityInsights.update

recommender.cloudsqlInstanceSecurityRecommendations.*

  • recommender.cloudsqlInstanceSecurityRecommendations.get
  • recommender.cloudsqlInstanceSecurityRecommendations.list
  • recommender.cloudsqlInstanceSecurityRecommendations.update

recommender.cloudsqlInstanceUnderprovisionedCpuUsageInsights.*

  • recommender.cloudsqlInstanceUnderprovisionedCpuUsageInsights.get
  • recommender.cloudsqlInstanceUnderprovisionedCpuUsageInsights.list
  • recommender.cloudsqlInstanceUnderprovisionedCpuUsageInsights.update

recommender.cloudsqlInstanceUnderprovisionedMemoryUsageInsights.*

  • recommender.cloudsqlInstanceUnderprovisionedMemoryUsageInsights.get
  • recommender.cloudsqlInstanceUnderprovisionedMemoryUsageInsights.list
  • recommender.cloudsqlInstanceUnderprovisionedMemoryUsageInsights.update

recommender.cloudsqlOverprovisionedInstanceRecommendations.*

  • recommender.cloudsqlOverprovisionedInstanceRecommendations.get
  • recommender.cloudsqlOverprovisionedInstanceRecommendations.list
  • recommender.cloudsqlOverprovisionedInstanceRecommendations.update

recommender.cloudsqlUnderProvisionedInstanceRecommendations.*

  • recommender.cloudsqlUnderProvisionedInstanceRecommendations.get
  • recommender.cloudsqlUnderProvisionedInstanceRecommendations.list
  • recommender.cloudsqlUnderProvisionedInstanceRecommendations.update

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

(roles/cloudsql.client)

Provides connectivity access to Cloud SQL instances.

Lowest-level resources where you can grant this role:

  • Project

cloudsql.instances.connect

cloudsql.instances.get

(roles/cloudsql.editor)

Provides full control of existing Cloud SQL instances excluding modifying users, SSL certificates or deleting resources.

Lowest-level resources where you can grant this role:

  • Project

cloudaicompanion.entitlements.get

cloudsql.backupRuns.create

cloudsql.backupRuns.export

cloudsql.backupRuns.get

cloudsql.backupRuns.list

cloudsql.backupRuns.update

cloudsql.databases.create

cloudsql.databases.get

cloudsql.databases.list

cloudsql.databases.update

cloudsql.instances.addServerCa

cloudsql.instances.addServerCertificate

cloudsql.instances.connect

cloudsql.instances.export

cloudsql.instances.failover

cloudsql.instances.get

cloudsql.instances.getDiskShrinkConfig

cloudsql.instances.list

cloudsql.instances.listEffectiveTags

cloudsql.instances.listServerCas

cloudsql.instances.listServerCertificates

cloudsql.instances.listTagBindings

cloudsql.instances.migrate

cloudsql.instances.performDiskShrink

cloudsql.instances.reencrypt

cloudsql.instances.resetReplicaSize

cloudsql.instances.restart

cloudsql.instances.rotateServerCa

cloudsql.instances.rotateServerCertificate

cloudsql.instances.truncateLog

cloudsql.instances.update

cloudsql.schemas.view

cloudsql.sslCerts.get

cloudsql.sslCerts.list

cloudsql.users.get

cloudsql.users.list

recommender.cloudsqlIdleInstanceRecommendations.*

  • recommender.cloudsqlIdleInstanceRecommendations.get
  • recommender.cloudsqlIdleInstanceRecommendations.list
  • recommender.cloudsqlIdleInstanceRecommendations.update

recommender.cloudsqlInstanceActivityInsights.*

  • recommender.cloudsqlInstanceActivityInsights.get
  • recommender.cloudsqlInstanceActivityInsights.list
  • recommender.cloudsqlInstanceActivityInsights.update

recommender.cloudsqlInstanceCpuUsageInsights.*

  • recommender.cloudsqlInstanceCpuUsageInsights.get
  • recommender.cloudsqlInstanceCpuUsageInsights.list
  • recommender.cloudsqlInstanceCpuUsageInsights.update

recommender.cloudsqlInstanceDiskUsageTrendInsights.*

  • recommender.cloudsqlInstanceDiskUsageTrendInsights.get
  • recommender.cloudsqlInstanceDiskUsageTrendInsights.list
  • recommender.cloudsqlInstanceDiskUsageTrendInsights.update

recommender.cloudsqlInstanceMemoryUsageInsights.*

  • recommender.cloudsqlInstanceMemoryUsageInsights.get
  • recommender.cloudsqlInstanceMemoryUsageInsights.list
  • recommender.cloudsqlInstanceMemoryUsageInsights.update

recommender.cloudsqlInstanceOomProbabilityInsights.*

  • recommender.cloudsqlInstanceOomProbabilityInsights.get
  • recommender.cloudsqlInstanceOomProbabilityInsights.list
  • recommender.cloudsqlInstanceOomProbabilityInsights.update

recommender.cloudsqlInstanceOutOfDiskRecommendations.*

  • recommender.cloudsqlInstanceOutOfDiskRecommendations.get
  • recommender.cloudsqlInstanceOutOfDiskRecommendations.list
  • recommender.cloudsqlInstanceOutOfDiskRecommendations.update

recommender.cloudsqlInstancePerformanceInsights.*

  • recommender.cloudsqlInstancePerformanceInsights.get
  • recommender.cloudsqlInstancePerformanceInsights.list
  • recommender.cloudsqlInstancePerformanceInsights.update

recommender.cloudsqlInstancePerformanceRecommendations.*

  • recommender.cloudsqlInstancePerformanceRecommendations.get
  • recommender.cloudsqlInstancePerformanceRecommendations.list
  • recommender.cloudsqlInstancePerformanceRecommendations.update

recommender.cloudsqlInstanceReliabilityInsights.*

  • recommender.cloudsqlInstanceReliabilityInsights.get
  • recommender.cloudsqlInstanceReliabilityInsights.list
  • recommender.cloudsqlInstanceReliabilityInsights.update

recommender.cloudsqlInstanceReliabilityRecommendations.*

  • recommender.cloudsqlInstanceReliabilityRecommendations.get
  • recommender.cloudsqlInstanceReliabilityRecommendations.list
  • recommender.cloudsqlInstanceReliabilityRecommendations.update

recommender.cloudsqlInstanceUnderprovisionedCpuUsageInsights.*

  • recommender.cloudsqlInstanceUnderprovisionedCpuUsageInsights.get
  • recommender.cloudsqlInstanceUnderprovisionedCpuUsageInsights.list
  • recommender.cloudsqlInstanceUnderprovisionedCpuUsageInsights.update

recommender.cloudsqlInstanceUnderprovisionedMemoryUsageInsights.*

  • recommender.cloudsqlInstanceUnderprovisionedMemoryUsageInsights.get
  • recommender.cloudsqlInstanceUnderprovisionedMemoryUsageInsights.list
  • recommender.cloudsqlInstanceUnderprovisionedMemoryUsageInsights.update

recommender.cloudsqlOverprovisionedInstanceRecommendations.*

  • recommender.cloudsqlOverprovisionedInstanceRecommendations.get
  • recommender.cloudsqlOverprovisionedInstanceRecommendations.list
  • recommender.cloudsqlOverprovisionedInstanceRecommendations.update

recommender.cloudsqlUnderProvisionedInstanceRecommendations.*

  • recommender.cloudsqlUnderProvisionedInstanceRecommendations.get
  • recommender.cloudsqlUnderProvisionedInstanceRecommendations.list
  • recommender.cloudsqlUnderProvisionedInstanceRecommendations.update

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

(roles/cloudsql.instanceUser)

Role allowing access to a Cloud SQL instance

cloudsql.instances.get

cloudsql.instances.login

(roles/cloudsql.schemaViewer)

Role allowing access to the Cloud SQL instance schema on Dataplex

cloudsql.schemas.view

(roles/cloudsql.serviceAgent)

Grants Cloud SQL access to services and APIs in the user project

cloudsql.instances.get

(roles/cloudsql.studioUser)

Role allowing access to Cloud SQL Studio

cloudaicompanion.companions.*

  • cloudaicompanion.companions.generateChat
  • cloudaicompanion.companions.generateCode

cloudaicompanion.instances.completeCode

cloudaicompanion.instances.generateCode

cloudsql.databases.list

cloudsql.instances.executeSql

cloudsql.instances.get

cloudsql.instances.login

cloudsql.users.list

(roles/cloudsql.viewer)

Provides read-only access to Cloud SQL resources.

Lowest-level resources where you can grant this role:

  • Project

cloudaicompanion.entitlements.get

cloudsql.backupRuns.export

cloudsql.backupRuns.get

cloudsql.backupRuns.list

cloudsql.databases.get

cloudsql.databases.list

cloudsql.instances.export

cloudsql.instances.get

cloudsql.instances.getDiskShrinkConfig

cloudsql.instances.list

cloudsql.instances.listEffectiveTags

cloudsql.instances.listServerCas

cloudsql.instances.listServerCertificates

cloudsql.instances.listTagBindings

cloudsql.sslCerts.get

cloudsql.sslCerts.list

cloudsql.users.get

cloudsql.users.list

recommender.cloudsqlIdleInstanceRecommendations.get

recommender.cloudsqlIdleInstanceRecommendations.list

recommender.cloudsqlInstanceActivityInsights.get

recommender.cloudsqlInstanceActivityInsights.list

recommender.cloudsqlInstanceCpuUsageInsights.get

recommender.cloudsqlInstanceCpuUsageInsights.list

recommender.cloudsqlInstanceDiskUsageTrendInsights.get

recommender.cloudsqlInstanceDiskUsageTrendInsights.list

recommender.cloudsqlInstanceMemoryUsageInsights.get

recommender.cloudsqlInstanceMemoryUsageInsights.list

recommender.cloudsqlInstanceOomProbabilityInsights.get

recommender.cloudsqlInstanceOomProbabilityInsights.list

recommender.cloudsqlInstanceOutOfDiskRecommendations.get

recommender.cloudsqlInstanceOutOfDiskRecommendations.list

recommender.cloudsqlInstancePerformanceInsights.get

recommender.cloudsqlInstancePerformanceInsights.list

recommender.cloudsqlInstancePerformanceRecommendations.get

recommender.cloudsqlInstancePerformanceRecommendations.list

recommender.cloudsqlInstanceReliabilityInsights.get

recommender.cloudsqlInstanceReliabilityInsights.list

recommender.cloudsqlInstanceReliabilityRecommendations.get

recommender.cloudsqlInstanceReliabilityRecommendations.list

recommender.cloudsqlInstanceUnderprovisionedCpuUsageInsights.get

recommender.cloudsqlInstanceUnderprovisionedCpuUsageInsights.list

recommender.cloudsqlInstanceUnderprovisionedMemoryUsageInsights.get

recommender.cloudsqlInstanceUnderprovisionedMemoryUsageInsights.list

recommender.cloudsqlOverprovisionedInstanceRecommendations.get

recommender.cloudsqlOverprovisionedInstanceRecommendations.list

recommender.cloudsqlUnderProvisionedInstanceRecommendations.get

recommender.cloudsqlUnderProvisionedInstanceRecommendations.list

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

Cloud SQL permissions

Permission Included in roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Cloud SQL Viewer (roles/cloudsql.viewer)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Cloud SQL Viewer (roles/cloudsql.viewer)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Cloud SQL Viewer (roles/cloudsql.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Cloud SQL Viewer (roles/cloudsql.viewer)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Cloud SQL Studio User (roles/cloudsql.studioUser)

Cloud SQL Viewer (roles/cloudsql.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Client (roles/cloudsql.client)

Cloud SQL Editor (roles/cloudsql.editor)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Dataproc Metastore Managed Migration Admin (roles/metastore.migrationAdmin)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Service agent roles

Owner (roles/owner)

Cloud SQL Admin (roles/cloudsql.admin)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Tag User (roles/resourcemanager.tagUser)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Service agent roles

Owner (roles/owner)

Cloud SQL Admin (roles/cloudsql.admin)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Tag User (roles/resourcemanager.tagUser)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Studio User (roles/cloudsql.studioUser)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Cloud SQL Viewer (roles/cloudsql.viewer)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Client (roles/cloudsql.client)

Cloud SQL Editor (roles/cloudsql.editor)

Cloud SQL Instance User (roles/cloudsql.instanceUser)

Cloud SQL Studio User (roles/cloudsql.studioUser)

Cloud SQL Viewer (roles/cloudsql.viewer)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Dataproc Metastore Managed Migration Admin (roles/metastore.migrationAdmin)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Cloud SQL Viewer (roles/cloudsql.viewer)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Cloud SQL Viewer (roles/cloudsql.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Cloud SQL Viewer (roles/cloudsql.viewer)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Cloud SQL Viewer (roles/cloudsql.viewer)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Cloud SQL Viewer (roles/cloudsql.viewer)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Cloud SQL Viewer (roles/cloudsql.viewer)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Instance User (roles/cloudsql.instanceUser)

Cloud SQL Studio User (roles/cloudsql.studioUser)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Dataproc Metastore Managed Migration Admin (roles/metastore.migrationAdmin)

Service agent roles

Owner (roles/owner)

Cloud SQL Admin (roles/cloudsql.admin)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Cloud SQL Schema Viewer (roles/cloudsql.schemaViewer)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Cloud SQL Viewer (roles/cloudsql.viewer)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Cloud SQL Viewer (roles/cloudsql.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Cloud SQL Viewer (roles/cloudsql.viewer)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud SQL Admin (roles/cloudsql.admin)

Cloud SQL Editor (roles/cloudsql.editor)

Cloud SQL Studio User (roles/cloudsql.studioUser)

Cloud SQL Viewer (roles/cloudsql.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Cloud SQL Admin (roles/cloudsql.admin)

Service agent roles