Dataplex roles and permissions
Stay organized with collections Save and categorize content based on your preferences.

This page lists the IAM roles and permissions for Dataplex. To search through all roles and permissions, see the role and permission index.

Dataplex roles

Role Permissions

Role	Permissions
Dataplex Administrator (`roles/dataplex.admin`) Full access to Dataplex resources, except Dataplex Catalog.	`cloudasset.assets.analyzeIamPolicy` `cloudasset.assets.searchAllIamPolicies` `cloudasset.assets.searchAllResources` `dataplex.assetActions.list` `dataplex.assets.create` `dataplex.assets.delete` `dataplex.assets.get` `dataplex.assets.getIamPolicy` `dataplex.assets.list` `dataplex.assets.setIamPolicy` `dataplex.assets.update` `dataplex.content.` `dataplex.content.create` `dataplex.content.delete` `dataplex.content.get` `dataplex.content.getIamPolicy` `dataplex.content.list` `dataplex.content.setIamPolicy` `dataplex.content.update` `dataplex.dataAttributeBindings.` `dataplex.dataAttributeBindings.create` `dataplex.dataAttributeBindings.delete` `dataplex.dataAttributeBindings.get` `dataplex.dataAttributeBindings.getIamPolicy` `dataplex.dataAttributeBindings.list` `dataplex.dataAttributeBindings.setIamPolicy` `dataplex.dataAttributeBindings.update` `dataplex.dataAttributes.` `dataplex.dataAttributes.bind` `dataplex.dataAttributes.create` `dataplex.dataAttributes.delete` `dataplex.dataAttributes.get` `dataplex.dataAttributes.getIamPolicy` `dataplex.dataAttributes.list` `dataplex.dataAttributes.setIamPolicy` `dataplex.dataAttributes.update` `dataplex.dataTaxonomies.` `dataplex.dataTaxonomies.configureDataAccess` `dataplex.dataTaxonomies.configureResourceAccess` `dataplex.dataTaxonomies.create` `dataplex.dataTaxonomies.delete` `dataplex.dataTaxonomies.get` `dataplex.dataTaxonomies.getIamPolicy` `dataplex.dataTaxonomies.list` `dataplex.dataTaxonomies.setIamPolicy` `dataplex.dataTaxonomies.update` `dataplex.datascans.` `dataplex.datascans.create` `dataplex.datascans.delete` `dataplex.datascans.get` `dataplex.datascans.getData` `dataplex.datascans.getIamPolicy` `dataplex.datascans.list` `dataplex.datascans.run` `dataplex.datascans.setIamPolicy` `dataplex.datascans.update` `dataplex.entities.` `dataplex.entities.create` `dataplex.entities.delete` `dataplex.entities.get` `dataplex.entities.list` `dataplex.entities.update` `dataplex.entries.link` `dataplex.entryGroups.export` `dataplex.entryGroups.import` `dataplex.entryGroups.useDefinitionEntryLink` `dataplex.entryGroups.useRelatedEntryLink` `dataplex.entryGroups.useSynonymEntryLink` `dataplex.entryLinks.` `dataplex.entryLinks.create` `dataplex.entryLinks.delete` `dataplex.entryLinks.get` `dataplex.entryLinks.reference` `dataplex.environments.` `dataplex.environments.create` `dataplex.environments.delete` `dataplex.environments.execute` `dataplex.environments.get` `dataplex.environments.getIamPolicy` `dataplex.environments.list` `dataplex.environments.setIamPolicy` `dataplex.environments.update` `dataplex.glossaries.` `dataplex.glossaries.create` `dataplex.glossaries.delete` `dataplex.glossaries.get` `dataplex.glossaries.getIamPolicy` `dataplex.glossaries.import` `dataplex.glossaries.list` `dataplex.glossaries.setIamPolicy` `dataplex.glossaries.update` `dataplex.glossaryCategories.` `dataplex.glossaryCategories.create` `dataplex.glossaryCategories.delete` `dataplex.glossaryCategories.get` `dataplex.glossaryCategories.list` `dataplex.glossaryCategories.update` `dataplex.glossaryTerms.` `dataplex.glossaryTerms.create` `dataplex.glossaryTerms.delete` `dataplex.glossaryTerms.get` `dataplex.glossaryTerms.list` `dataplex.glossaryTerms.update` `dataplex.glossaryTerms.use` `dataplex.lakeActions.list` `dataplex.lakes.` `dataplex.lakes.create` `dataplex.lakes.delete` `dataplex.lakes.get` `dataplex.lakes.getIamPolicy` `dataplex.lakes.list` `dataplex.lakes.setIamPolicy` `dataplex.lakes.update` `dataplex.locations.` `dataplex.locations.get` `dataplex.locations.list` `dataplex.metadataJobs.` `dataplex.metadataJobs.cancel` `dataplex.metadataJobs.create` `dataplex.metadataJobs.get` `dataplex.metadataJobs.list` `dataplex.operations.` `dataplex.operations.cancel` `dataplex.operations.delete` `dataplex.operations.get` `dataplex.operations.list` `dataplex.partitions.` `dataplex.partitions.create` `dataplex.partitions.delete` `dataplex.partitions.get` `dataplex.partitions.list` `dataplex.partitions.update` `dataplex.tasks.` `dataplex.tasks.cancel` `dataplex.tasks.create` `dataplex.tasks.delete` `dataplex.tasks.get` `dataplex.tasks.getIamPolicy` `dataplex.tasks.list` `dataplex.tasks.run` `dataplex.tasks.setIamPolicy` `dataplex.tasks.update` `dataplex.zoneActions.list` `dataplex.zones.` `dataplex.zones.create` `dataplex.zones.delete` `dataplex.zones.get` `dataplex.zones.getIamPolicy` `dataplex.zones.list` `dataplex.zones.setIamPolicy` `dataplex.zones.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Dataplex Aspect Type Owner (`roles/dataplex.aspectTypeOwner`) Grants access to creating and managing Aspect Types. Does not give the right to create/modify Entries.	`datacatalog.migrationConfig.get` `dataplex.aspectTypes.*` `dataplex.aspectTypes.create` `dataplex.aspectTypes.delete` `dataplex.aspectTypes.get` `dataplex.aspectTypes.getIamPolicy` `dataplex.aspectTypes.list` `dataplex.aspectTypes.setIamPolicy` `dataplex.aspectTypes.update` `dataplex.aspectTypes.use` `dataplex.operations.get` `dataplex.projects.search` `resourcemanager.projects.get` `resourcemanager.projects.list`
Dataplex Aspect Type User (`roles/dataplex.aspectTypeUser`) Grants access to use Aspect Types to create/modify Entries with the corresponding aspects.	`datacatalog.migrationConfig.get` `dataplex.aspectTypes.get` `dataplex.aspectTypes.list` `dataplex.aspectTypes.use` `dataplex.projects.search` `resourcemanager.projects.get` `resourcemanager.projects.list`
Dataplex Binding Administrator (`roles/dataplex.bindingAdmin`) Full access on DataAttribute Bindig resources.	`dataplex.dataAttributeBindings.*` `dataplex.dataAttributeBindings.create` `dataplex.dataAttributeBindings.delete` `dataplex.dataAttributeBindings.get` `dataplex.dataAttributeBindings.getIamPolicy` `dataplex.dataAttributeBindings.list` `dataplex.dataAttributeBindings.setIamPolicy` `dataplex.dataAttributeBindings.update`
Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Has full access to Catalog resources.	`datacatalog.migrationConfig.get` `dataplex.aspectTypes.` `dataplex.aspectTypes.create` `dataplex.aspectTypes.delete` `dataplex.aspectTypes.get` `dataplex.aspectTypes.getIamPolicy` `dataplex.aspectTypes.list` `dataplex.aspectTypes.setIamPolicy` `dataplex.aspectTypes.update` `dataplex.aspectTypes.use` `dataplex.entries.` `dataplex.entries.create` `dataplex.entries.delete` `dataplex.entries.get` `dataplex.entries.link` `dataplex.entries.list` `dataplex.entries.update` `dataplex.entryGroups.` `dataplex.entryGroups.create` `dataplex.entryGroups.delete` `dataplex.entryGroups.export` `dataplex.entryGroups.get` `dataplex.entryGroups.getIamPolicy` `dataplex.entryGroups.import` `dataplex.entryGroups.list` `dataplex.entryGroups.setIamPolicy` `dataplex.entryGroups.update` `dataplex.entryGroups.useContactsAspect` `dataplex.entryGroups.useDefinitionEntryLink` `dataplex.entryGroups.useGenericAspect` `dataplex.entryGroups.useGenericEntry` `dataplex.entryGroups.useOverviewAspect` `dataplex.entryGroups.useRelatedEntryLink` `dataplex.entryGroups.useSchemaAspect` `dataplex.entryGroups.useSynonymEntryLink` `dataplex.entryLinks.` `dataplex.entryLinks.create` `dataplex.entryLinks.delete` `dataplex.entryLinks.get` `dataplex.entryLinks.reference` `dataplex.entryTypes.` `dataplex.entryTypes.create` `dataplex.entryTypes.delete` `dataplex.entryTypes.get` `dataplex.entryTypes.getIamPolicy` `dataplex.entryTypes.list` `dataplex.entryTypes.setIamPolicy` `dataplex.entryTypes.update` `dataplex.entryTypes.use` `dataplex.glossaries.` `dataplex.glossaries.create` `dataplex.glossaries.delete` `dataplex.glossaries.get` `dataplex.glossaries.getIamPolicy` `dataplex.glossaries.import` `dataplex.glossaries.list` `dataplex.glossaries.setIamPolicy` `dataplex.glossaries.update` `dataplex.glossaryCategories.` `dataplex.glossaryCategories.create` `dataplex.glossaryCategories.delete` `dataplex.glossaryCategories.get` `dataplex.glossaryCategories.list` `dataplex.glossaryCategories.update` `dataplex.glossaryTerms.` `dataplex.glossaryTerms.create` `dataplex.glossaryTerms.delete` `dataplex.glossaryTerms.get` `dataplex.glossaryTerms.list` `dataplex.glossaryTerms.update` `dataplex.glossaryTerms.use` `dataplex.operations.get` `dataplex.projects.search` `resourcemanager.projects.get` `resourcemanager.projects.list`
Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Has write access to Catalog resources. Cannot set IAM policies on resources	`datacatalog.migrationConfig.get` `dataplex.aspectTypes.create` `dataplex.aspectTypes.delete` `dataplex.aspectTypes.get` `dataplex.aspectTypes.getIamPolicy` `dataplex.aspectTypes.list` `dataplex.aspectTypes.update` `dataplex.aspectTypes.use` `dataplex.entries.` `dataplex.entries.create` `dataplex.entries.delete` `dataplex.entries.get` `dataplex.entries.link` `dataplex.entries.list` `dataplex.entries.update` `dataplex.entryGroups.create` `dataplex.entryGroups.delete` `dataplex.entryGroups.get` `dataplex.entryGroups.getIamPolicy` `dataplex.entryGroups.list` `dataplex.entryGroups.update` `dataplex.entryGroups.useContactsAspect` `dataplex.entryGroups.useDefinitionEntryLink` `dataplex.entryGroups.useGenericAspect` `dataplex.entryGroups.useGenericEntry` `dataplex.entryGroups.useOverviewAspect` `dataplex.entryGroups.useRelatedEntryLink` `dataplex.entryGroups.useSchemaAspect` `dataplex.entryGroups.useSynonymEntryLink` `dataplex.entryLinks.create` `dataplex.entryLinks.delete` `dataplex.entryLinks.get` `dataplex.entryTypes.create` `dataplex.entryTypes.delete` `dataplex.entryTypes.get` `dataplex.entryTypes.getIamPolicy` `dataplex.entryTypes.list` `dataplex.entryTypes.update` `dataplex.entryTypes.use` `dataplex.glossaries.create` `dataplex.glossaries.delete` `dataplex.glossaries.get` `dataplex.glossaries.getIamPolicy` `dataplex.glossaries.list` `dataplex.glossaries.update` `dataplex.glossaryCategories.` `dataplex.glossaryCategories.create` `dataplex.glossaryCategories.delete` `dataplex.glossaryCategories.get` `dataplex.glossaryCategories.list` `dataplex.glossaryCategories.update` `dataplex.glossaryTerms.*` `dataplex.glossaryTerms.create` `dataplex.glossaryTerms.delete` `dataplex.glossaryTerms.get` `dataplex.glossaryTerms.list` `dataplex.glossaryTerms.update` `dataplex.glossaryTerms.use` `dataplex.operations.get` `dataplex.projects.search` `resourcemanager.projects.get` `resourcemanager.projects.list`
Dataplex Catalog Viewer (`roles/dataplex.catalogViewer`) Has read access to Catalog resources: Entry Groups, Entry Types, Aspect Types, Entry Link Types, Entries and Entry Links. Can view IAM policies on Catalog resources.	`datacatalog.migrationConfig.get` `dataplex.aspectTypes.get` `dataplex.aspectTypes.getIamPolicy` `dataplex.aspectTypes.list` `dataplex.entries.get` `dataplex.entries.list` `dataplex.entryGroups.get` `dataplex.entryGroups.getIamPolicy` `dataplex.entryGroups.list` `dataplex.entryLinks.get` `dataplex.entryTypes.get` `dataplex.entryTypes.getIamPolicy` `dataplex.entryTypes.list` `dataplex.glossaries.get` `dataplex.glossaries.getIamPolicy` `dataplex.glossaries.list` `dataplex.glossaryCategories.get` `dataplex.glossaryCategories.list` `dataplex.glossaryTerms.get` `dataplex.glossaryTerms.list` `dataplex.projects.search` `resourcemanager.projects.get` `resourcemanager.projects.list`
Dataplex Data Owner (`roles/dataplex.dataOwner`) Owner access to data. To be granted to Dataplex resources Lake, Zone or Asset only.	`dataplex.assets.ownData` `dataplex.assets.readData` `dataplex.assets.writeData`
Dataplex Data Reader (`roles/dataplex.dataReader`) Read only access to data. To be granted to Dataplex resources Lake, Zone or Asset only.	`dataplex.assets.readData`
Dataplex DataScan Administrator (`roles/dataplex.dataScanAdmin`) Full access to DataScan resources.	`dataplex.datascans.*` `dataplex.datascans.create` `dataplex.datascans.delete` `dataplex.datascans.get` `dataplex.datascans.getData` `dataplex.datascans.getIamPolicy` `dataplex.datascans.list` `dataplex.datascans.run` `dataplex.datascans.setIamPolicy` `dataplex.datascans.update` `dataplex.operations.get` `dataplex.operations.list`
Dataplex DataScan Creator (`roles/dataplex.dataScanCreator`) Access to create new DataScan resources.	`dataplex.datascans.create` `dataplex.datascans.get` `dataplex.datascans.list` `dataplex.operations.get`
Dataplex DataScan DataViewer (`roles/dataplex.dataScanDataViewer`) Read access to DataScan resources and additional contents.	`dataplex.datascans.get` `dataplex.datascans.getData` `dataplex.datascans.getIamPolicy` `dataplex.datascans.list`
Dataplex DataScan Editor (`roles/dataplex.dataScanEditor`) Write access to DataScan resources.	`dataplex.datascans.create` `dataplex.datascans.delete` `dataplex.datascans.get` `dataplex.datascans.getData` `dataplex.datascans.getIamPolicy` `dataplex.datascans.list` `dataplex.datascans.run` `dataplex.datascans.update` `dataplex.operations.get` `dataplex.operations.list`
Dataplex DataScan Viewer (`roles/dataplex.dataScanViewer`) Read access to DataScan resources.	`dataplex.datascans.get` `dataplex.datascans.getIamPolicy` `dataplex.datascans.list`
Dataplex Data Writer (`roles/dataplex.dataWriter`) Write access to data. To be granted to Dataplex resources Lake, Zone or Asset only.	`dataplex.assets.writeData`
Dataplex Developer (`roles/dataplex.developer`) Allows running data analytics workloads in a lake.	`dataplex.content.*` `dataplex.content.create` `dataplex.content.delete` `dataplex.content.get` `dataplex.content.getIamPolicy` `dataplex.content.list` `dataplex.content.setIamPolicy` `dataplex.content.update` `dataplex.environments.execute` `dataplex.environments.get` `dataplex.environments.list` `dataplex.tasks.cancel` `dataplex.tasks.create` `dataplex.tasks.delete` `dataplex.tasks.get` `dataplex.tasks.list` `dataplex.tasks.run` `dataplex.tasks.update`
Dataplex Discovery BigLake Publishing Service Agent (`roles/dataplex.discoveryBigLakePublishingServiceAgent`) Gives the Dataplex Discovery Service Agent permissions to use bigquery connection. Warning: Do not grant service agent roles to any principals except service agents.	`bigquery.connections.delegate` `bigquery.connections.use`
Dataplex Discovery Publishing Service Agent (`roles/dataplex.discoveryPublishingServiceAgent`) Gives the Dataplex Discovery Service Agent dataset create and get permissions. Warning: Do not grant service agent roles to any principals except service agents.	`bigquery.datasets.create` `bigquery.datasets.get`
Dataplex Discovery Service Agent (`roles/dataplex.discoveryServiceAgent`) Gives the Dataplex Discovery Service Agent bucket read permissions. Warning: Do not grant service agent roles to any principals except service agents.	`storage.buckets.get` `storage.objects.get` `storage.objects.list`
Dataplex Editor (`roles/dataplex.editor`) Write access to Dataplex resources.	`cloudasset.assets.analyzeIamPolicy` `dataplex.assetActions.list` `dataplex.assets.create` `dataplex.assets.delete` `dataplex.assets.get` `dataplex.assets.getIamPolicy` `dataplex.assets.list` `dataplex.assets.update` `dataplex.content.delete` `dataplex.content.get` `dataplex.content.getIamPolicy` `dataplex.content.list` `dataplex.dataAttributeBindings.create` `dataplex.dataAttributeBindings.delete` `dataplex.dataAttributeBindings.get` `dataplex.dataAttributeBindings.getIamPolicy` `dataplex.dataAttributeBindings.list` `dataplex.dataAttributeBindings.update` `dataplex.dataAttributes.bind` `dataplex.dataAttributes.create` `dataplex.dataAttributes.delete` `dataplex.dataAttributes.get` `dataplex.dataAttributes.getIamPolicy` `dataplex.dataAttributes.list` `dataplex.dataAttributes.update` `dataplex.dataTaxonomies.configureDataAccess` `dataplex.dataTaxonomies.configureResourceAccess` `dataplex.dataTaxonomies.create` `dataplex.dataTaxonomies.delete` `dataplex.dataTaxonomies.get` `dataplex.dataTaxonomies.getIamPolicy` `dataplex.dataTaxonomies.list` `dataplex.dataTaxonomies.update` `dataplex.datascans.create` `dataplex.datascans.delete` `dataplex.datascans.get` `dataplex.datascans.getIamPolicy` `dataplex.datascans.list` `dataplex.datascans.run` `dataplex.datascans.update` `dataplex.environments.create` `dataplex.environments.delete` `dataplex.environments.get` `dataplex.environments.getIamPolicy` `dataplex.environments.list` `dataplex.environments.update` `dataplex.lakeActions.list` `dataplex.lakes.create` `dataplex.lakes.delete` `dataplex.lakes.get` `dataplex.lakes.getIamPolicy` `dataplex.lakes.list` `dataplex.lakes.update` `dataplex.operations.*` `dataplex.operations.cancel` `dataplex.operations.delete` `dataplex.operations.get` `dataplex.operations.list` `dataplex.tasks.cancel` `dataplex.tasks.create` `dataplex.tasks.delete` `dataplex.tasks.get` `dataplex.tasks.getIamPolicy` `dataplex.tasks.list` `dataplex.tasks.run` `dataplex.tasks.update` `dataplex.zoneActions.list` `dataplex.zones.create` `dataplex.zones.delete` `dataplex.zones.get` `dataplex.zones.getIamPolicy` `dataplex.zones.list` `dataplex.zones.update`
Dataplex Encryption Admin (`roles/dataplex.encryptionAdmin`) Gives user permissions to manage encryption config.	`dataplex.encryptionConfig.*` `dataplex.encryptionConfig.create` `dataplex.encryptionConfig.delete` `dataplex.encryptionConfig.get` `dataplex.encryptionConfig.list` `dataplex.encryptionConfig.update` `dataplex.operations.get` `dataplex.operations.list`
Dataplex Entry Group Exporter (`roles/dataplex.entryGroupExporter`) Grants access to export this entry group for Metadata Job processing.	`dataplex.entryGroups.export` `dataplex.entryGroups.get` `resourcemanager.projects.get` `resourcemanager.projects.list`
Dataplex Entry Group Importer (`roles/dataplex.entryGroupImporter`) Grants access to import this entry group for Metadata Job processing.	`dataplex.entryGroups.get` `dataplex.entryGroups.import` `resourcemanager.projects.get` `resourcemanager.projects.list`
Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Owns Entry Groups and Entries inside of them.	`datacatalog.migrationConfig.get` `dataplex.aspectTypes.get` `dataplex.aspectTypes.list` `dataplex.aspectTypes.use` `dataplex.entries.` `dataplex.entries.create` `dataplex.entries.delete` `dataplex.entries.get` `dataplex.entries.link` `dataplex.entries.list` `dataplex.entries.update` `dataplex.entryGroups.` `dataplex.entryGroups.create` `dataplex.entryGroups.delete` `dataplex.entryGroups.export` `dataplex.entryGroups.get` `dataplex.entryGroups.getIamPolicy` `dataplex.entryGroups.import` `dataplex.entryGroups.list` `dataplex.entryGroups.setIamPolicy` `dataplex.entryGroups.update` `dataplex.entryGroups.useContactsAspect` `dataplex.entryGroups.useDefinitionEntryLink` `dataplex.entryGroups.useGenericAspect` `dataplex.entryGroups.useGenericEntry` `dataplex.entryGroups.useOverviewAspect` `dataplex.entryGroups.useRelatedEntryLink` `dataplex.entryGroups.useSchemaAspect` `dataplex.entryGroups.useSynonymEntryLink` `dataplex.entryLinks.*` `dataplex.entryLinks.create` `dataplex.entryLinks.delete` `dataplex.entryLinks.get` `dataplex.entryLinks.reference` `dataplex.entryTypes.get` `dataplex.entryTypes.list` `dataplex.entryTypes.use` `dataplex.operations.get` `dataplex.projects.search` `resourcemanager.projects.get` `resourcemanager.projects.list`
Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`) Owns Metadata Entries and EntryLinks.	`datacatalog.migrationConfig.get` `dataplex.aspectTypes.get` `dataplex.aspectTypes.list` `dataplex.aspectTypes.use` `dataplex.entries.` `dataplex.entries.create` `dataplex.entries.delete` `dataplex.entries.get` `dataplex.entries.link` `dataplex.entries.list` `dataplex.entries.update` `dataplex.entryGroups.get` `dataplex.entryGroups.useContactsAspect` `dataplex.entryGroups.useDefinitionEntryLink` `dataplex.entryGroups.useGenericAspect` `dataplex.entryGroups.useGenericEntry` `dataplex.entryGroups.useOverviewAspect` `dataplex.entryGroups.useRelatedEntryLink` `dataplex.entryGroups.useSchemaAspect` `dataplex.entryGroups.useSynonymEntryLink` `dataplex.entryLinks.` `dataplex.entryLinks.create` `dataplex.entryLinks.delete` `dataplex.entryLinks.get` `dataplex.entryLinks.reference` `dataplex.entryTypes.get` `dataplex.entryTypes.list` `dataplex.entryTypes.use` `dataplex.projects.search` `resourcemanager.projects.get` `resourcemanager.projects.list`
Dataplex Entry Type Owner (`roles/dataplex.entryTypeOwner`) Grants access to creating and managing Entry Types. Does not give the right to create/modify Entries.	`datacatalog.migrationConfig.get` `dataplex.entryTypes.*` `dataplex.entryTypes.create` `dataplex.entryTypes.delete` `dataplex.entryTypes.get` `dataplex.entryTypes.getIamPolicy` `dataplex.entryTypes.list` `dataplex.entryTypes.setIamPolicy` `dataplex.entryTypes.update` `dataplex.entryTypes.use` `dataplex.operations.get` `dataplex.projects.search` `resourcemanager.projects.get` `resourcemanager.projects.list`
Dataplex Entry Type User (`roles/dataplex.entryTypeUser`) Grants access to use Entry Types to create/modify Entries of those types.	`datacatalog.migrationConfig.get` `dataplex.entryTypes.get` `dataplex.entryTypes.list` `dataplex.entryTypes.use` `dataplex.projects.search` `resourcemanager.projects.get` `resourcemanager.projects.list`
Dataplex Metadata Job Owner (`roles/dataplex.metadataJobOwner`) Grants access to creating and managing Metadata Jobs. Does not give the right to create/modify Entry Groups.	`dataplex.metadataJobs.*` `dataplex.metadataJobs.cancel` `dataplex.metadataJobs.create` `dataplex.metadataJobs.get` `dataplex.metadataJobs.list` `dataplex.operations.get` `resourcemanager.projects.get` `resourcemanager.projects.list`
Dataplex Metadata Job Viewer (`roles/dataplex.metadataJobViewer`) Read access to Metadata Job resources.	`dataplex.metadataJobs.get` `dataplex.metadataJobs.list` `dataplex.operations.get` `resourcemanager.projects.get` `resourcemanager.projects.list`
Dataplex Metadata Reader (`roles/dataplex.metadataReader`) Read only access to metadata.	`dataplex.assets.get` `dataplex.assets.list` `dataplex.entities.get` `dataplex.entities.list` `dataplex.partitions.get` `dataplex.partitions.list` `dataplex.zones.get` `dataplex.zones.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Dataplex Metadata Writer (`roles/dataplex.metadataWriter`) Write and Read access to metadata.	`dataplex.assets.get` `dataplex.assets.list` `dataplex.entities.` `dataplex.entities.create` `dataplex.entities.delete` `dataplex.entities.get` `dataplex.entities.list` `dataplex.entities.update` `dataplex.partitions.` `dataplex.partitions.create` `dataplex.partitions.delete` `dataplex.partitions.get` `dataplex.partitions.list` `dataplex.partitions.update` `dataplex.zones.get` `dataplex.zones.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Dataplex Security Administrator (`roles/dataplex.securityAdmin`) Permissions configure ResourceAccess and DataAccess Specs on Data Attributes.	`dataplex.dataTaxonomies.configureDataAccess` `dataplex.dataTaxonomies.configureResourceAccess`
Cloud Dataplex Service Agent (`roles/dataplex.serviceAgent`) Gives the Dataplex service account access to project resources. This access will be used in data discovery, data management and data workload management. Warning: Do not grant service agent roles to any principals except service agents.	`bigquery.bireservations.` `bigquery.bireservations.get` `bigquery.bireservations.update` `bigquery.capacityCommitments.` `bigquery.capacityCommitments.create` `bigquery.capacityCommitments.delete` `bigquery.capacityCommitments.get` `bigquery.capacityCommitments.list` `bigquery.capacityCommitments.update` `bigquery.config.` `bigquery.config.get` `bigquery.config.update` `bigquery.connections.` `bigquery.connections.create` `bigquery.connections.delegate` `bigquery.connections.delete` `bigquery.connections.get` `bigquery.connections.getIamPolicy` `bigquery.connections.list` `bigquery.connections.setIamPolicy` `bigquery.connections.update` `bigquery.connections.updateTag` `bigquery.connections.use` `bigquery.dataPolicies.create` `bigquery.dataPolicies.delete` `bigquery.dataPolicies.get` `bigquery.dataPolicies.getIamPolicy` `bigquery.dataPolicies.list` `bigquery.dataPolicies.setIamPolicy` `bigquery.dataPolicies.update` `bigquery.datasets.` `bigquery.datasets.create` `bigquery.datasets.createTagBinding` `bigquery.datasets.delete` `bigquery.datasets.deleteTagBinding` `bigquery.datasets.get` `bigquery.datasets.getIamPolicy` `bigquery.datasets.link` `bigquery.datasets.listEffectiveTags` `bigquery.datasets.listSharedDatasetUsage` `bigquery.datasets.listTagBindings` `bigquery.datasets.setIamPolicy` `bigquery.datasets.update` `bigquery.datasets.updateTag` `bigquery.jobs.` `bigquery.jobs.create` `bigquery.jobs.delete` `bigquery.jobs.get` `bigquery.jobs.list` `bigquery.jobs.listAll` `bigquery.jobs.listExecutionMetadata` `bigquery.jobs.update` `bigquery.models.` `bigquery.models.create` `bigquery.models.delete` `bigquery.models.export` `bigquery.models.getData` `bigquery.models.getMetadata` `bigquery.models.list` `bigquery.models.updateData` `bigquery.models.updateMetadata` `bigquery.models.updateTag` `bigquery.objectRefs.` `bigquery.objectRefs.read` `bigquery.objectRefs.write` `bigquery.readsessions.` `bigquery.readsessions.create` `bigquery.readsessions.getData` `bigquery.readsessions.update` `bigquery.reservationAssignments.` `bigquery.reservationAssignments.create` `bigquery.reservationAssignments.delete` `bigquery.reservationAssignments.list` `bigquery.reservationAssignments.search` `bigquery.reservations.` `bigquery.reservations.create` `bigquery.reservations.delete` `bigquery.reservations.get` `bigquery.reservations.list` `bigquery.reservations.listFailoverDatasets` `bigquery.reservations.update` `bigquery.reservations.use` `bigquery.routines.` `bigquery.routines.create` `bigquery.routines.delete` `bigquery.routines.get` `bigquery.routines.list` `bigquery.routines.update` `bigquery.routines.updateTag` `bigquery.rowAccessPolicies.create` `bigquery.rowAccessPolicies.delete` `bigquery.rowAccessPolicies.get` `bigquery.rowAccessPolicies.getIamPolicy` `bigquery.rowAccessPolicies.list` `bigquery.rowAccessPolicies.overrideTimeTravelRestrictions` `bigquery.rowAccessPolicies.setIamPolicy` `bigquery.rowAccessPolicies.update` `bigquery.savedqueries.` `bigquery.savedqueries.create` `bigquery.savedqueries.delete` `bigquery.savedqueries.get` `bigquery.savedqueries.list` `bigquery.savedqueries.update` `bigquery.tables.` `bigquery.tables.create` `bigquery.tables.createIndex` `bigquery.tables.createSnapshot` `bigquery.tables.createTagBinding` `bigquery.tables.delete` `bigquery.tables.deleteIndex` `bigquery.tables.deleteSnapshot` `bigquery.tables.deleteTagBinding` `bigquery.tables.export` `bigquery.tables.get` `bigquery.tables.getData` `bigquery.tables.getIamPolicy` `bigquery.tables.list` `bigquery.tables.listEffectiveTags` `bigquery.tables.listTagBindings` `bigquery.tables.replicateData` `bigquery.tables.restoreSnapshot` `bigquery.tables.setCategory` `bigquery.tables.setColumnDataPolicy` `bigquery.tables.setIamPolicy` `bigquery.tables.update` `bigquery.tables.updateData` `bigquery.tables.updateIndex` `bigquery.tables.updateTag` `bigquery.transfers.` `bigquery.transfers.get` `bigquery.transfers.update` `bigquerymigration.translation.translate` `datacatalog.catalogs.searchAll` `datacatalog.categories.getIamPolicy` `datacatalog.categories.setIamPolicy` `datacatalog.entries.get` `datacatalog.taxonomies.create` `datacatalog.taxonomies.delete` `datacatalog.taxonomies.get` `datacatalog.taxonomies.list` `datacatalog.taxonomies.update` `dataform.` `dataform.commentThreads.create` `dataform.commentThreads.delete` `dataform.commentThreads.get` `dataform.commentThreads.list` `dataform.commentThreads.update` `dataform.comments.create` `dataform.comments.delete` `dataform.comments.get` `dataform.comments.list` `dataform.comments.update` `dataform.compilationResults.create` `dataform.compilationResults.get` `dataform.compilationResults.list` `dataform.compilationResults.query` `dataform.config.get` `dataform.config.update` `dataform.locations.get` `dataform.locations.list` `dataform.releaseConfigs.create` `dataform.releaseConfigs.delete` `dataform.releaseConfigs.get` `dataform.releaseConfigs.list` `dataform.releaseConfigs.update` `dataform.repositories.commit` `dataform.repositories.computeAccessTokenStatus` `dataform.repositories.create` `dataform.repositories.delete` `dataform.repositories.fetchHistory` `dataform.repositories.fetchRemoteBranches` `dataform.repositories.get` `dataform.repositories.getIamPolicy` `dataform.repositories.list` `dataform.repositories.queryDirectoryContents` `dataform.repositories.readFile` `dataform.repositories.setIamPolicy` `dataform.repositories.update` `dataform.workflowConfigs.create` `dataform.workflowConfigs.delete` `dataform.workflowConfigs.get` `dataform.workflowConfigs.list` `dataform.workflowConfigs.update` `dataform.workflowInvocations.cancel` `dataform.workflowInvocations.create` `dataform.workflowInvocations.delete` `dataform.workflowInvocations.get` `dataform.workflowInvocations.list` `dataform.workflowInvocations.query` `dataform.workspaces.commit` `dataform.workspaces.create` `dataform.workspaces.delete` `dataform.workspaces.fetchFileDiff` `dataform.workspaces.fetchFileGitStatuses` `dataform.workspaces.fetchGitAheadBehind` `dataform.workspaces.get` `dataform.workspaces.getIamPolicy` `dataform.workspaces.installNpmPackages` `dataform.workspaces.list` `dataform.workspaces.makeDirectory` `dataform.workspaces.moveDirectory` `dataform.workspaces.moveFile` `dataform.workspaces.pull` `dataform.workspaces.push` `dataform.workspaces.queryDirectoryContents` `dataform.workspaces.readFile` `dataform.workspaces.removeDirectory` `dataform.workspaces.removeFile` `dataform.workspaces.reset` `dataform.workspaces.searchFiles` `dataform.workspaces.setIamPolicy` `dataform.workspaces.writeFile` `dataplex.assets.getIamPolicy` `dataplex.environments.execute` `dataplex.environments.get` `dataplex.environments.list` `dataplex.lakes.get` `dataplex.lakes.getIamPolicy` `dataplex.projects.search` `dataplex.zones.getIamPolicy` `dataproc.batches.cancel` `dataproc.batches.create` `dataproc.batches.get` `dataproc.operations.cancel` `dataproc.operations.get` `dataproc.operations.list` `firebase.projects.get` `iam.serviceAccounts.actAs` `logging.logEntries.create` `logging.logEntries.route` `metastore.services.get` `monitoring.metricDescriptors.create` `monitoring.metricDescriptors.get` `monitoring.metricDescriptors.list` `monitoring.monitoredResourceDescriptors.` `monitoring.monitoredResourceDescriptors.get` `monitoring.monitoredResourceDescriptors.list` `monitoring.timeSeries.create` `orgpolicy.policy.get` `recommender.iamPolicyInsights.` `recommender.iamPolicyInsights.get` `recommender.iamPolicyInsights.list` `recommender.iamPolicyInsights.update` `recommender.iamPolicyRecommendations.` `recommender.iamPolicyRecommendations.get` `recommender.iamPolicyRecommendations.list` `recommender.iamPolicyRecommendations.update` `recommender.storageBucketSoftDeleteInsights.` `recommender.storageBucketSoftDeleteInsights.get` `recommender.storageBucketSoftDeleteInsights.list` `recommender.storageBucketSoftDeleteInsights.update` `recommender.storageBucketSoftDeleteRecommendations.` `recommender.storageBucketSoftDeleteRecommendations.get` `recommender.storageBucketSoftDeleteRecommendations.list` `recommender.storageBucketSoftDeleteRecommendations.update` `resourcemanager.hierarchyNodes.listEffectiveTags` `resourcemanager.projects.get` `resourcemanager.projects.list` `servicemanagement.services.report` `serviceusage.services.use` `storage.anywhereCaches.` `storage.anywhereCaches.create` `storage.anywhereCaches.disable` `storage.anywhereCaches.get` `storage.anywhereCaches.list` `storage.anywhereCaches.pause` `storage.anywhereCaches.resume` `storage.anywhereCaches.update` `storage.bucketOperations.` `storage.bucketOperations.cancel` `storage.bucketOperations.get` `storage.bucketOperations.list` `storage.buckets.` `storage.buckets.create` `storage.buckets.createTagBinding` `storage.buckets.delete` `storage.buckets.deleteTagBinding` `storage.buckets.enableObjectRetention` `storage.buckets.get` `storage.buckets.getIamPolicy` `storage.buckets.getIpFilter` `storage.buckets.getObjectInsights` `storage.buckets.list` `storage.buckets.listEffectiveTags` `storage.buckets.listTagBindings` `storage.buckets.relocate` `storage.buckets.restore` `storage.buckets.setIamPolicy` `storage.buckets.setIpFilter` `storage.buckets.update` `storage.folders.` `storage.folders.create` `storage.folders.delete` `storage.folders.get` `storage.folders.list` `storage.folders.rename` `storage.intelligenceConfigs.` `storage.intelligenceConfigs.get` `storage.intelligenceConfigs.update` `storage.managedFolders.` `storage.managedFolders.create` `storage.managedFolders.delete` `storage.managedFolders.get` `storage.managedFolders.getIamPolicy` `storage.managedFolders.list` `storage.managedFolders.setIamPolicy` `storage.multipartUploads.` `storage.multipartUploads.abort` `storage.multipartUploads.create` `storage.multipartUploads.list` `storage.multipartUploads.listParts` `storage.objects.*` `storage.objects.create` `storage.objects.delete` `storage.objects.get` `storage.objects.getIamPolicy` `storage.objects.list` `storage.objects.move` `storage.objects.overrideUnlockedRetention` `storage.objects.restore` `storage.objects.setIamPolicy` `storage.objects.setRetention` `storage.objects.update`
Dataplex Storage Data Owner (`roles/dataplex.storageDataOwner`) Owner access to data. Should not be used directly. This role is granted by Dataplex to managed resources like Cloud Storage buckets, BigQuery datasets etc.	`bigquery.datasets.get` `bigquery.models.create` `bigquery.models.delete` `bigquery.models.export` `bigquery.models.getData` `bigquery.models.getMetadata` `bigquery.models.list` `bigquery.models.updateData` `bigquery.models.updateMetadata` `bigquery.routines.create` `bigquery.routines.delete` `bigquery.routines.get` `bigquery.routines.list` `bigquery.routines.update` `bigquery.tables.create` `bigquery.tables.createSnapshot` `bigquery.tables.delete` `bigquery.tables.deleteSnapshot` `bigquery.tables.export` `bigquery.tables.get` `bigquery.tables.getData` `bigquery.tables.list` `bigquery.tables.restoreSnapshot` `bigquery.tables.update` `bigquery.tables.updateData` `storage.buckets.get` `storage.objects.create` `storage.objects.delete` `storage.objects.get` `storage.objects.list` `storage.objects.update`
Dataplex Storage Data Reader (`roles/dataplex.storageDataReader`) Read only access to data. Should not be used directly. This role is granted by Dataplex to managed resources like Cloud Storage buckets, BigQuery datasets etc.	`bigquery.datasets.get` `bigquery.models.export` `bigquery.models.getData` `bigquery.models.getMetadata` `bigquery.models.list` `bigquery.routines.get` `bigquery.routines.list` `bigquery.tables.export` `bigquery.tables.get` `bigquery.tables.getData` `bigquery.tables.list` `storage.buckets.get` `storage.objects.get` `storage.objects.list`
Dataplex Storage Data Writer (`roles/dataplex.storageDataWriter`) Write access to data. Should not be used directly. This role is granted by Dataplex to managed resources like Cloud Storage buckets, BigQuery datasets etc.	`bigquery.tables.updateData` `storage.objects.create` `storage.objects.delete` `storage.objects.update`
Dataplex Taxonomy Administrator (`roles/dataplex.taxonomyAdmin`) Full access to DataTaxonomy, DataAttribute resources.	`dataplex.dataAttributes.*` `dataplex.dataAttributes.bind` `dataplex.dataAttributes.create` `dataplex.dataAttributes.delete` `dataplex.dataAttributes.get` `dataplex.dataAttributes.getIamPolicy` `dataplex.dataAttributes.list` `dataplex.dataAttributes.setIamPolicy` `dataplex.dataAttributes.update` `dataplex.dataTaxonomies.create` `dataplex.dataTaxonomies.delete` `dataplex.dataTaxonomies.get` `dataplex.dataTaxonomies.getIamPolicy` `dataplex.dataTaxonomies.list` `dataplex.dataTaxonomies.setIamPolicy` `dataplex.dataTaxonomies.update`
Dataplex Taxonomy Viewer (`roles/dataplex.taxonomyViewer`) Read access on DataTaxonomy, DataAttribute resources.	`dataplex.dataAttributes.get` `dataplex.dataAttributes.getIamPolicy` `dataplex.dataAttributes.list` `dataplex.dataTaxonomies.get` `dataplex.dataTaxonomies.getIamPolicy` `dataplex.dataTaxonomies.list`
Dataplex Viewer (`roles/dataplex.viewer`) Read access to Dataplex resources.	`cloudasset.assets.analyzeIamPolicy` `dataplex.assetActions.list` `dataplex.assets.get` `dataplex.assets.getIamPolicy` `dataplex.assets.list` `dataplex.content.get` `dataplex.content.getIamPolicy` `dataplex.content.list` `dataplex.dataAttributeBindings.get` `dataplex.dataAttributeBindings.getIamPolicy` `dataplex.dataAttributeBindings.list` `dataplex.dataAttributes.get` `dataplex.dataAttributes.getIamPolicy` `dataplex.dataAttributes.list` `dataplex.dataTaxonomies.get` `dataplex.dataTaxonomies.getIamPolicy` `dataplex.dataTaxonomies.list` `dataplex.datascans.get` `dataplex.datascans.getIamPolicy` `dataplex.datascans.list` `dataplex.environments.get` `dataplex.environments.getIamPolicy` `dataplex.environments.list` `dataplex.lakeActions.list` `dataplex.lakes.get` `dataplex.lakes.getIamPolicy` `dataplex.lakes.list` `dataplex.operations.get` `dataplex.operations.list` `dataplex.tasks.get` `dataplex.tasks.getIamPolicy` `dataplex.tasks.list` `dataplex.zoneActions.list` `dataplex.zones.get` `dataplex.zones.getIamPolicy` `dataplex.zones.list`

Dataplex Administrator

(roles/dataplex.admin)

Full access to Dataplex resources, except Dataplex Catalog.

cloudasset.assets.analyzeIamPolicy

cloudasset.assets.searchAllIamPolicies

cloudasset.assets.searchAllResources

dataplex.assetActions.list

dataplex.assets.create

dataplex.assets.delete

dataplex.assets.get

dataplex.assets.getIamPolicy

dataplex.assets.list

dataplex.assets.setIamPolicy

dataplex.assets.update

dataplex.content.*

dataplex.content.create
dataplex.content.delete
dataplex.content.get
dataplex.content.getIamPolicy
dataplex.content.list
dataplex.content.setIamPolicy
dataplex.content.update

dataplex.dataAttributeBindings.*

dataplex.dataAttributeBindings.create
dataplex.dataAttributeBindings.delete
dataplex.dataAttributeBindings.get
dataplex.dataAttributeBindings.getIamPolicy
dataplex.dataAttributeBindings.list
dataplex.dataAttributeBindings.setIamPolicy
dataplex.dataAttributeBindings.update

dataplex.dataAttributes.*

dataplex.dataAttributes.bind
dataplex.dataAttributes.create
dataplex.dataAttributes.delete
dataplex.dataAttributes.get
dataplex.dataAttributes.getIamPolicy
dataplex.dataAttributes.list
dataplex.dataAttributes.setIamPolicy
dataplex.dataAttributes.update

dataplex.dataTaxonomies.*

dataplex.dataTaxonomies.configureDataAccess
dataplex.dataTaxonomies.configureResourceAccess
dataplex.dataTaxonomies.create
dataplex.dataTaxonomies.delete
dataplex.dataTaxonomies.get
dataplex.dataTaxonomies.getIamPolicy
dataplex.dataTaxonomies.list
dataplex.dataTaxonomies.setIamPolicy
dataplex.dataTaxonomies.update

dataplex.datascans.*

dataplex.datascans.create
dataplex.datascans.delete
dataplex.datascans.get
dataplex.datascans.getData
dataplex.datascans.getIamPolicy
dataplex.datascans.list
dataplex.datascans.run
dataplex.datascans.setIamPolicy
dataplex.datascans.update

dataplex.entities.*

dataplex.entities.create
dataplex.entities.delete
dataplex.entities.get
dataplex.entities.list
dataplex.entities.update

dataplex.entries.link

dataplex.entryGroups.export

dataplex.entryGroups.import

dataplex.entryGroups.useDefinitionEntryLink

dataplex.entryGroups.useRelatedEntryLink

dataplex.entryGroups.useSynonymEntryLink

dataplex.entryLinks.*

dataplex.entryLinks.create
dataplex.entryLinks.delete
dataplex.entryLinks.get
dataplex.entryLinks.reference

dataplex.environments.*

dataplex.environments.create
dataplex.environments.delete
dataplex.environments.execute
dataplex.environments.get
dataplex.environments.getIamPolicy
dataplex.environments.list
dataplex.environments.setIamPolicy
dataplex.environments.update

dataplex.glossaries.*

dataplex.glossaries.create
dataplex.glossaries.delete
dataplex.glossaries.get
dataplex.glossaries.getIamPolicy
dataplex.glossaries.import
dataplex.glossaries.list
dataplex.glossaries.setIamPolicy
dataplex.glossaries.update

dataplex.glossaryCategories.*

dataplex.glossaryCategories.create
dataplex.glossaryCategories.delete
dataplex.glossaryCategories.get
dataplex.glossaryCategories.list
dataplex.glossaryCategories.update

dataplex.glossaryTerms.*

dataplex.glossaryTerms.create
dataplex.glossaryTerms.delete
dataplex.glossaryTerms.get
dataplex.glossaryTerms.list
dataplex.glossaryTerms.update
dataplex.glossaryTerms.use

dataplex.lakeActions.list

dataplex.lakes.*

dataplex.lakes.create
dataplex.lakes.delete
dataplex.lakes.get
dataplex.lakes.getIamPolicy
dataplex.lakes.list
dataplex.lakes.setIamPolicy
dataplex.lakes.update

dataplex.locations.*

dataplex.locations.get
dataplex.locations.list

dataplex.metadataJobs.*

dataplex.metadataJobs.cancel
dataplex.metadataJobs.create
dataplex.metadataJobs.get
dataplex.metadataJobs.list

dataplex.operations.*

dataplex.operations.cancel
dataplex.operations.delete
dataplex.operations.get
dataplex.operations.list

dataplex.partitions.*

dataplex.partitions.create
dataplex.partitions.delete
dataplex.partitions.get
dataplex.partitions.list
dataplex.partitions.update

dataplex.tasks.*

dataplex.tasks.cancel
dataplex.tasks.create
dataplex.tasks.delete
dataplex.tasks.get
dataplex.tasks.getIamPolicy
dataplex.tasks.list
dataplex.tasks.run
dataplex.tasks.setIamPolicy
dataplex.tasks.update

dataplex.zoneActions.list

dataplex.zones.*

dataplex.zones.create
dataplex.zones.delete
dataplex.zones.get
dataplex.zones.getIamPolicy
dataplex.zones.list
dataplex.zones.setIamPolicy
dataplex.zones.update

resourcemanager.projects.get

resourcemanager.projects.list

Dataplex Aspect Type Owner

(roles/dataplex.aspectTypeOwner)

Grants access to creating and managing Aspect Types. Does not give the right to create/modify Entries.

datacatalog.migrationConfig.get

dataplex.aspectTypes.*

dataplex.aspectTypes.create
dataplex.aspectTypes.delete
dataplex.aspectTypes.get
dataplex.aspectTypes.getIamPolicy
dataplex.aspectTypes.list
dataplex.aspectTypes.setIamPolicy
dataplex.aspectTypes.update
dataplex.aspectTypes.use

dataplex.operations.get

dataplex.projects.search

resourcemanager.projects.get

resourcemanager.projects.list

Dataplex Aspect Type User

(roles/dataplex.aspectTypeUser)

Grants access to use Aspect Types to create/modify Entries with the corresponding aspects.

datacatalog.migrationConfig.get

dataplex.aspectTypes.get

dataplex.aspectTypes.list

dataplex.aspectTypes.use

dataplex.projects.search

resourcemanager.projects.get

resourcemanager.projects.list

Dataplex Binding Administrator

(roles/dataplex.bindingAdmin)

Full access on DataAttribute Bindig resources.

dataplex.dataAttributeBindings.*

dataplex.dataAttributeBindings.create
dataplex.dataAttributeBindings.delete
dataplex.dataAttributeBindings.get
dataplex.dataAttributeBindings.getIamPolicy
dataplex.dataAttributeBindings.list
dataplex.dataAttributeBindings.setIamPolicy
dataplex.dataAttributeBindings.update

Dataplex Catalog Admin

(roles/dataplex.catalogAdmin)

Has full access to Catalog resources.

datacatalog.migrationConfig.get

dataplex.aspectTypes.*

dataplex.aspectTypes.create
dataplex.aspectTypes.delete
dataplex.aspectTypes.get
dataplex.aspectTypes.getIamPolicy
dataplex.aspectTypes.list
dataplex.aspectTypes.setIamPolicy
dataplex.aspectTypes.update
dataplex.aspectTypes.use

dataplex.entries.*

dataplex.entries.create
dataplex.entries.delete
dataplex.entries.get
dataplex.entries.link
dataplex.entries.list
dataplex.entries.update

dataplex.entryGroups.*

dataplex.entryGroups.create
dataplex.entryGroups.delete
dataplex.entryGroups.export
dataplex.entryGroups.get
dataplex.entryGroups.getIamPolicy
dataplex.entryGroups.import
dataplex.entryGroups.list
dataplex.entryGroups.setIamPolicy
dataplex.entryGroups.update
dataplex.entryGroups.useContactsAspect
dataplex.entryGroups.useDefinitionEntryLink
dataplex.entryGroups.useGenericAspect
dataplex.entryGroups.useGenericEntry
dataplex.entryGroups.useOverviewAspect
dataplex.entryGroups.useRelatedEntryLink
dataplex.entryGroups.useSchemaAspect
dataplex.entryGroups.useSynonymEntryLink

dataplex.entryLinks.*

dataplex.entryLinks.create
dataplex.entryLinks.delete
dataplex.entryLinks.get
dataplex.entryLinks.reference

dataplex.entryTypes.*

dataplex.entryTypes.create
dataplex.entryTypes.delete
dataplex.entryTypes.get
dataplex.entryTypes.getIamPolicy
dataplex.entryTypes.list
dataplex.entryTypes.setIamPolicy
dataplex.entryTypes.update
dataplex.entryTypes.use

dataplex.glossaries.*

dataplex.glossaries.create
dataplex.glossaries.delete
dataplex.glossaries.get
dataplex.glossaries.getIamPolicy
dataplex.glossaries.import
dataplex.glossaries.list
dataplex.glossaries.setIamPolicy
dataplex.glossaries.update

dataplex.glossaryCategories.*

dataplex.glossaryCategories.create
dataplex.glossaryCategories.delete
dataplex.glossaryCategories.get
dataplex.glossaryCategories.list
dataplex.glossaryCategories.update

dataplex.glossaryTerms.*

dataplex.glossaryTerms.create
dataplex.glossaryTerms.delete
dataplex.glossaryTerms.get
dataplex.glossaryTerms.list
dataplex.glossaryTerms.update
dataplex.glossaryTerms.use

dataplex.operations.get

dataplex.projects.search

resourcemanager.projects.get

resourcemanager.projects.list

Dataplex Catalog Editor

(roles/dataplex.catalogEditor)

Has write access to Catalog resources. Cannot set IAM policies on resources

datacatalog.migrationConfig.get

dataplex.aspectTypes.create

dataplex.aspectTypes.delete

dataplex.aspectTypes.get

dataplex.aspectTypes.getIamPolicy

dataplex.aspectTypes.list

dataplex.aspectTypes.update

dataplex.aspectTypes.use

dataplex.entries.*

dataplex.entries.create
dataplex.entries.delete
dataplex.entries.get
dataplex.entries.link
dataplex.entries.list
dataplex.entries.update

dataplex.entryGroups.create

dataplex.entryGroups.delete

dataplex.entryGroups.get

dataplex.entryGroups.getIamPolicy

dataplex.entryGroups.list

dataplex.entryGroups.update

dataplex.entryGroups.useContactsAspect

dataplex.entryGroups.useDefinitionEntryLink

dataplex.entryGroups.useGenericAspect

dataplex.entryGroups.useGenericEntry

dataplex.entryGroups.useOverviewAspect

dataplex.entryGroups.useRelatedEntryLink

dataplex.entryGroups.useSchemaAspect

dataplex.entryGroups.useSynonymEntryLink

dataplex.entryLinks.create

dataplex.entryLinks.delete

dataplex.entryLinks.get

dataplex.entryTypes.create

dataplex.entryTypes.delete

dataplex.entryTypes.get

dataplex.entryTypes.getIamPolicy

dataplex.entryTypes.list

dataplex.entryTypes.update

dataplex.entryTypes.use

dataplex.glossaries.create

dataplex.glossaries.delete

dataplex.glossaries.get

dataplex.glossaries.getIamPolicy

dataplex.glossaries.list

dataplex.glossaries.update

dataplex.glossaryCategories.*

dataplex.glossaryCategories.create
dataplex.glossaryCategories.delete
dataplex.glossaryCategories.get
dataplex.glossaryCategories.list
dataplex.glossaryCategories.update

dataplex.glossaryTerms.*

dataplex.glossaryTerms.create
dataplex.glossaryTerms.delete
dataplex.glossaryTerms.get
dataplex.glossaryTerms.list
dataplex.glossaryTerms.update
dataplex.glossaryTerms.use

dataplex.operations.get

dataplex.projects.search

resourcemanager.projects.get

resourcemanager.projects.list

Dataplex Catalog Viewer

(roles/dataplex.catalogViewer)

Has read access to Catalog resources: Entry Groups, Entry Types, Aspect Types, Entry Link Types, Entries and Entry Links. Can view IAM policies on Catalog resources.

datacatalog.migrationConfig.get

dataplex.aspectTypes.get

dataplex.aspectTypes.getIamPolicy

dataplex.aspectTypes.list

dataplex.entries.get

dataplex.entries.list

dataplex.entryGroups.get

dataplex.entryGroups.getIamPolicy

dataplex.entryGroups.list

dataplex.entryLinks.get

dataplex.entryTypes.get

dataplex.entryTypes.getIamPolicy

dataplex.entryTypes.list

dataplex.glossaries.get

dataplex.glossaries.getIamPolicy

dataplex.glossaries.list

dataplex.glossaryCategories.get

dataplex.glossaryCategories.list

dataplex.glossaryTerms.get

dataplex.glossaryTerms.list

dataplex.projects.search

resourcemanager.projects.get

resourcemanager.projects.list

Dataplex Data Owner

(roles/dataplex.dataOwner)

Owner access to data. To be granted to Dataplex resources Lake, Zone or Asset only.

dataplex.assets.ownData

dataplex.assets.readData

dataplex.assets.writeData

Dataplex Data Reader

(roles/dataplex.dataReader)

Read only access to data. To be granted to Dataplex resources Lake, Zone or Asset only.

dataplex.assets.readData

Dataplex DataScan Administrator

(roles/dataplex.dataScanAdmin)

Full access to DataScan resources.

dataplex.datascans.*

dataplex.datascans.create
dataplex.datascans.delete
dataplex.datascans.get
dataplex.datascans.getData
dataplex.datascans.getIamPolicy
dataplex.datascans.list
dataplex.datascans.run
dataplex.datascans.setIamPolicy
dataplex.datascans.update

dataplex.operations.get

dataplex.operations.list

Dataplex DataScan Creator

(roles/dataplex.dataScanCreator)

Access to create new DataScan resources.

dataplex.datascans.create

dataplex.datascans.get

dataplex.datascans.list

dataplex.operations.get

Dataplex DataScan DataViewer

(roles/dataplex.dataScanDataViewer)

Read access to DataScan resources and additional contents.

dataplex.datascans.get

dataplex.datascans.getData

dataplex.datascans.getIamPolicy

dataplex.datascans.list

Dataplex DataScan Editor

(roles/dataplex.dataScanEditor)

Write access to DataScan resources.

dataplex.datascans.create

dataplex.datascans.delete

dataplex.datascans.get

dataplex.datascans.getData

dataplex.datascans.getIamPolicy

dataplex.datascans.list

dataplex.datascans.run

dataplex.datascans.update

dataplex.operations.get

dataplex.operations.list

Dataplex DataScan Viewer

(roles/dataplex.dataScanViewer)

Read access to DataScan resources.

dataplex.datascans.get

dataplex.datascans.getIamPolicy

dataplex.datascans.list

Dataplex Data Writer

(roles/dataplex.dataWriter)

Write access to data. To be granted to Dataplex resources Lake, Zone or Asset only.

dataplex.assets.writeData

Dataplex Developer

(roles/dataplex.developer)

Allows running data analytics workloads in a lake.

dataplex.content.*

dataplex.content.create
dataplex.content.delete
dataplex.content.get
dataplex.content.getIamPolicy
dataplex.content.list
dataplex.content.setIamPolicy
dataplex.content.update

dataplex.environments.execute

dataplex.environments.get

dataplex.environments.list

dataplex.tasks.cancel

dataplex.tasks.create

dataplex.tasks.delete

dataplex.tasks.get

dataplex.tasks.list

dataplex.tasks.run

dataplex.tasks.update

Dataplex Discovery BigLake Publishing Service Agent

(roles/dataplex.discoveryBigLakePublishingServiceAgent)

Gives the Dataplex Discovery Service Agent permissions to use bigquery connection.

bigquery.connections.delegate

bigquery.connections.use

Dataplex Discovery Publishing Service Agent

(roles/dataplex.discoveryPublishingServiceAgent)

Gives the Dataplex Discovery Service Agent dataset create and get permissions.

bigquery.datasets.create

bigquery.datasets.get

Dataplex Discovery Service Agent

(roles/dataplex.discoveryServiceAgent)

Gives the Dataplex Discovery Service Agent bucket read permissions.

storage.buckets.get

storage.objects.get

storage.objects.list

Dataplex Editor

(roles/dataplex.editor)

Write access to Dataplex resources.

cloudasset.assets.analyzeIamPolicy

dataplex.assetActions.list

dataplex.assets.create

dataplex.assets.delete

dataplex.assets.get

dataplex.assets.getIamPolicy

dataplex.assets.list

dataplex.assets.update

dataplex.content.delete

dataplex.content.get

dataplex.content.getIamPolicy

dataplex.content.list

dataplex.dataAttributeBindings.create

dataplex.dataAttributeBindings.delete

dataplex.dataAttributeBindings.get

dataplex.dataAttributeBindings.getIamPolicy

dataplex.dataAttributeBindings.list

dataplex.dataAttributeBindings.update

dataplex.dataAttributes.bind

dataplex.dataAttributes.create

dataplex.dataAttributes.delete

dataplex.dataAttributes.get

dataplex.dataAttributes.getIamPolicy

dataplex.dataAttributes.list

dataplex.dataAttributes.update

dataplex.dataTaxonomies.configureDataAccess

dataplex.dataTaxonomies.configureResourceAccess

dataplex.dataTaxonomies.create

dataplex.dataTaxonomies.delete

dataplex.dataTaxonomies.get

dataplex.dataTaxonomies.getIamPolicy

dataplex.dataTaxonomies.list

dataplex.dataTaxonomies.update

dataplex.datascans.create

dataplex.datascans.delete

dataplex.datascans.get

dataplex.datascans.getIamPolicy

dataplex.datascans.list

dataplex.datascans.run

dataplex.datascans.update

dataplex.environments.create

dataplex.environments.delete

dataplex.environments.get

dataplex.environments.getIamPolicy

dataplex.environments.list

dataplex.environments.update

dataplex.lakeActions.list

dataplex.lakes.create

dataplex.lakes.delete

dataplex.lakes.get

dataplex.lakes.getIamPolicy

dataplex.lakes.list

dataplex.lakes.update

dataplex.operations.*

dataplex.operations.cancel
dataplex.operations.delete
dataplex.operations.get
dataplex.operations.list

dataplex.tasks.cancel

dataplex.tasks.create

dataplex.tasks.delete

dataplex.tasks.get

dataplex.tasks.getIamPolicy

dataplex.tasks.list

dataplex.tasks.run

dataplex.tasks.update

dataplex.zoneActions.list

dataplex.zones.create

dataplex.zones.delete

dataplex.zones.get

dataplex.zones.getIamPolicy

dataplex.zones.list

dataplex.zones.update

Dataplex Encryption Admin

(roles/dataplex.encryptionAdmin)

Gives user permissions to manage encryption config.

dataplex.encryptionConfig.*

dataplex.encryptionConfig.create
dataplex.encryptionConfig.delete
dataplex.encryptionConfig.get
dataplex.encryptionConfig.list
dataplex.encryptionConfig.update

dataplex.operations.get

dataplex.operations.list

Dataplex Entry Group Exporter

(roles/dataplex.entryGroupExporter)

Grants access to export this entry group for Metadata Job processing.

dataplex.entryGroups.export

dataplex.entryGroups.get

resourcemanager.projects.get

resourcemanager.projects.list

Dataplex Entry Group Importer

(roles/dataplex.entryGroupImporter)

Grants access to import this entry group for Metadata Job processing.

dataplex.entryGroups.get

dataplex.entryGroups.import

resourcemanager.projects.get

resourcemanager.projects.list

Dataplex Entry Group Owner

(roles/dataplex.entryGroupOwner)

Owns Entry Groups and Entries inside of them.

datacatalog.migrationConfig.get

dataplex.aspectTypes.get

dataplex.aspectTypes.list

dataplex.aspectTypes.use

dataplex.entries.*

dataplex.entries.create
dataplex.entries.delete
dataplex.entries.get
dataplex.entries.link
dataplex.entries.list
dataplex.entries.update

dataplex.entryGroups.*

dataplex.entryGroups.create
dataplex.entryGroups.delete
dataplex.entryGroups.export
dataplex.entryGroups.get
dataplex.entryGroups.getIamPolicy
dataplex.entryGroups.import
dataplex.entryGroups.list
dataplex.entryGroups.setIamPolicy
dataplex.entryGroups.update
dataplex.entryGroups.useContactsAspect
dataplex.entryGroups.useDefinitionEntryLink
dataplex.entryGroups.useGenericAspect
dataplex.entryGroups.useGenericEntry
dataplex.entryGroups.useOverviewAspect
dataplex.entryGroups.useRelatedEntryLink
dataplex.entryGroups.useSchemaAspect
dataplex.entryGroups.useSynonymEntryLink

dataplex.entryLinks.*

dataplex.entryLinks.create
dataplex.entryLinks.delete
dataplex.entryLinks.get
dataplex.entryLinks.reference

dataplex.entryTypes.get

dataplex.entryTypes.list

dataplex.entryTypes.use

dataplex.operations.get

dataplex.projects.search

resourcemanager.projects.get

resourcemanager.projects.list

Dataplex Entry and EntryLink Owner

(roles/dataplex.entryOwner)

Owns Metadata Entries and EntryLinks.

datacatalog.migrationConfig.get

dataplex.aspectTypes.get

dataplex.aspectTypes.list

dataplex.aspectTypes.use

dataplex.entries.*

dataplex.entries.create
dataplex.entries.delete
dataplex.entries.get
dataplex.entries.link
dataplex.entries.list
dataplex.entries.update

dataplex.entryGroups.get

dataplex.entryGroups.useContactsAspect

dataplex.entryGroups.useDefinitionEntryLink

dataplex.entryGroups.useGenericAspect

dataplex.entryGroups.useGenericEntry

dataplex.entryGroups.useOverviewAspect

dataplex.entryGroups.useRelatedEntryLink

dataplex.entryGroups.useSchemaAspect

dataplex.entryGroups.useSynonymEntryLink

dataplex.entryLinks.*

dataplex.entryLinks.create
dataplex.entryLinks.delete
dataplex.entryLinks.get
dataplex.entryLinks.reference

dataplex.entryTypes.get

dataplex.entryTypes.list

dataplex.entryTypes.use

dataplex.projects.search

resourcemanager.projects.get

resourcemanager.projects.list

Dataplex Entry Type Owner

(roles/dataplex.entryTypeOwner)

Grants access to creating and managing Entry Types. Does not give the right to create/modify Entries.

datacatalog.migrationConfig.get

dataplex.entryTypes.*

dataplex.entryTypes.create
dataplex.entryTypes.delete
dataplex.entryTypes.get
dataplex.entryTypes.getIamPolicy
dataplex.entryTypes.list
dataplex.entryTypes.setIamPolicy
dataplex.entryTypes.update
dataplex.entryTypes.use

dataplex.operations.get

dataplex.projects.search

resourcemanager.projects.get

resourcemanager.projects.list

Dataplex Entry Type User

(roles/dataplex.entryTypeUser)

Grants access to use Entry Types to create/modify Entries of those types.

datacatalog.migrationConfig.get

dataplex.entryTypes.get

dataplex.entryTypes.list

dataplex.entryTypes.use

dataplex.projects.search

resourcemanager.projects.get

resourcemanager.projects.list

Dataplex Metadata Job Owner

(roles/dataplex.metadataJobOwner)

Grants access to creating and managing Metadata Jobs. Does not give the right to create/modify Entry Groups.

dataplex.metadataJobs.*

dataplex.metadataJobs.cancel
dataplex.metadataJobs.create
dataplex.metadataJobs.get
dataplex.metadataJobs.list

dataplex.operations.get

resourcemanager.projects.get

resourcemanager.projects.list

Dataplex Metadata Job Viewer

(roles/dataplex.metadataJobViewer)

Read access to Metadata Job resources.

dataplex.metadataJobs.get

dataplex.metadataJobs.list

dataplex.operations.get

resourcemanager.projects.get

resourcemanager.projects.list

Dataplex Metadata Reader

(roles/dataplex.metadataReader)

Read only access to metadata.

dataplex.assets.get

dataplex.assets.list

dataplex.entities.get

dataplex.entities.list

dataplex.partitions.get

dataplex.partitions.list

dataplex.zones.get

dataplex.zones.list

resourcemanager.projects.get

resourcemanager.projects.list

Dataplex Metadata Writer

(roles/dataplex.metadataWriter)

Write and Read access to metadata.

dataplex.assets.get

dataplex.assets.list

dataplex.entities.*

dataplex.entities.create
dataplex.entities.delete
dataplex.entities.get
dataplex.entities.list
dataplex.entities.update

dataplex.partitions.*

dataplex.partitions.create
dataplex.partitions.delete
dataplex.partitions.get
dataplex.partitions.list
dataplex.partitions.update

dataplex.zones.get

dataplex.zones.list

resourcemanager.projects.get

resourcemanager.projects.list

Dataplex Security Administrator

(roles/dataplex.securityAdmin)

Permissions configure ResourceAccess and DataAccess Specs on Data Attributes.

dataplex.dataTaxonomies.configureDataAccess

dataplex.dataTaxonomies.configureResourceAccess

Cloud Dataplex Service Agent

(roles/dataplex.serviceAgent)

Gives the Dataplex service account access to project resources. This access will be used in data discovery, data management and data workload management.

bigquery.bireservations.*

bigquery.bireservations.get
bigquery.bireservations.update

bigquery.capacityCommitments.*

bigquery.capacityCommitments.create
bigquery.capacityCommitments.delete
bigquery.capacityCommitments.get
bigquery.capacityCommitments.list
bigquery.capacityCommitments.update

bigquery.config.*

bigquery.config.get
bigquery.config.update

bigquery.connections.*

bigquery.connections.create
bigquery.connections.delegate
bigquery.connections.delete
bigquery.connections.get
bigquery.connections.getIamPolicy
bigquery.connections.list
bigquery.connections.setIamPolicy
bigquery.connections.update
bigquery.connections.updateTag
bigquery.connections.use

bigquery.dataPolicies.create

bigquery.dataPolicies.delete

bigquery.dataPolicies.get

bigquery.dataPolicies.getIamPolicy

bigquery.dataPolicies.list

bigquery.dataPolicies.setIamPolicy

bigquery.dataPolicies.update

bigquery.datasets.*

bigquery.datasets.create
bigquery.datasets.createTagBinding
bigquery.datasets.delete
bigquery.datasets.deleteTagBinding
bigquery.datasets.get
bigquery.datasets.getIamPolicy
bigquery.datasets.link
bigquery.datasets.listEffectiveTags
bigquery.datasets.listSharedDatasetUsage
bigquery.datasets.listTagBindings
bigquery.datasets.setIamPolicy
bigquery.datasets.update
bigquery.datasets.updateTag

bigquery.jobs.*

bigquery.jobs.create
bigquery.jobs.delete
bigquery.jobs.get
bigquery.jobs.list
bigquery.jobs.listAll
bigquery.jobs.listExecutionMetadata
bigquery.jobs.update

bigquery.models.*

bigquery.models.create
bigquery.models.delete
bigquery.models.export
bigquery.models.getData
bigquery.models.getMetadata
bigquery.models.list
bigquery.models.updateData
bigquery.models.updateMetadata
bigquery.models.updateTag

bigquery.objectRefs.*

bigquery.objectRefs.read
bigquery.objectRefs.write

bigquery.readsessions.*

bigquery.readsessions.create
bigquery.readsessions.getData
bigquery.readsessions.update

bigquery.reservationAssignments.*

bigquery.reservationAssignments.create
bigquery.reservationAssignments.delete
bigquery.reservationAssignments.list
bigquery.reservationAssignments.search

bigquery.reservations.*

bigquery.reservations.create
bigquery.reservations.delete
bigquery.reservations.get
bigquery.reservations.list
bigquery.reservations.listFailoverDatasets
bigquery.reservations.update
bigquery.reservations.use

bigquery.routines.*

bigquery.routines.create
bigquery.routines.delete
bigquery.routines.get
bigquery.routines.list
bigquery.routines.update
bigquery.routines.updateTag

bigquery.rowAccessPolicies.create

bigquery.rowAccessPolicies.delete

bigquery.rowAccessPolicies.get

bigquery.rowAccessPolicies.getIamPolicy

bigquery.rowAccessPolicies.list

bigquery.rowAccessPolicies.overrideTimeTravelRestrictions

bigquery.rowAccessPolicies.setIamPolicy

bigquery.rowAccessPolicies.update

bigquery.savedqueries.*

bigquery.savedqueries.create
bigquery.savedqueries.delete
bigquery.savedqueries.get
bigquery.savedqueries.list
bigquery.savedqueries.update

bigquery.tables.*

bigquery.tables.create
bigquery.tables.createIndex
bigquery.tables.createSnapshot
bigquery.tables.createTagBinding
bigquery.tables.delete
bigquery.tables.deleteIndex
bigquery.tables.deleteSnapshot
bigquery.tables.deleteTagBinding
bigquery.tables.export
bigquery.tables.get
bigquery.tables.getData
bigquery.tables.getIamPolicy
bigquery.tables.list
bigquery.tables.listEffectiveTags
bigquery.tables.listTagBindings
bigquery.tables.replicateData
bigquery.tables.restoreSnapshot
bigquery.tables.setCategory
bigquery.tables.setColumnDataPolicy
bigquery.tables.setIamPolicy
bigquery.tables.update
bigquery.tables.updateData
bigquery.tables.updateIndex
bigquery.tables.updateTag

bigquery.transfers.*

bigquery.transfers.get
bigquery.transfers.update

bigquerymigration.translation.translate

datacatalog.catalogs.searchAll

datacatalog.categories.getIamPolicy

datacatalog.categories.setIamPolicy

datacatalog.entries.get

datacatalog.taxonomies.create

datacatalog.taxonomies.delete

datacatalog.taxonomies.get

datacatalog.taxonomies.list

datacatalog.taxonomies.update

dataform.*

dataform.commentThreads.create
dataform.commentThreads.delete
dataform.commentThreads.get
dataform.commentThreads.list
dataform.commentThreads.update
dataform.comments.create
dataform.comments.delete
dataform.comments.get
dataform.comments.list
dataform.comments.update
dataform.compilationResults.create
dataform.compilationResults.get
dataform.compilationResults.list
dataform.compilationResults.query
dataform.config.get
dataform.config.update
dataform.locations.get
dataform.locations.list
dataform.releaseConfigs.create
dataform.releaseConfigs.delete
dataform.releaseConfigs.get
dataform.releaseConfigs.list
dataform.releaseConfigs.update
dataform.repositories.commit
dataform.repositories.computeAccessTokenStatus
dataform.repositories.create
dataform.repositories.delete
dataform.repositories.fetchHistory
dataform.repositories.fetchRemoteBranches
dataform.repositories.get
dataform.repositories.getIamPolicy
dataform.repositories.list
dataform.repositories.queryDirectoryContents
dataform.repositories.readFile
dataform.repositories.setIamPolicy
dataform.repositories.update
dataform.workflowConfigs.create
dataform.workflowConfigs.delete
dataform.workflowConfigs.get
dataform.workflowConfigs.list
dataform.workflowConfigs.update
dataform.workflowInvocations.cancel
dataform.workflowInvocations.create
dataform.workflowInvocations.delete
dataform.workflowInvocations.get
dataform.workflowInvocations.list
dataform.workflowInvocations.query
dataform.workspaces.commit
dataform.workspaces.create
dataform.workspaces.delete
dataform.workspaces.fetchFileDiff
dataform.workspaces.fetchFileGitStatuses
dataform.workspaces.fetchGitAheadBehind
dataform.workspaces.get
dataform.workspaces.getIamPolicy
dataform.workspaces.installNpmPackages
dataform.workspaces.list
dataform.workspaces.makeDirectory
dataform.workspaces.moveDirectory
dataform.workspaces.moveFile
dataform.workspaces.pull
dataform.workspaces.push
dataform.workspaces.queryDirectoryContents
dataform.workspaces.readFile
dataform.workspaces.removeDirectory
dataform.workspaces.removeFile
dataform.workspaces.reset
dataform.workspaces.searchFiles
dataform.workspaces.setIamPolicy
dataform.workspaces.writeFile

dataplex.assets.getIamPolicy

dataplex.environments.execute

dataplex.environments.get

dataplex.environments.list

dataplex.lakes.get

dataplex.lakes.getIamPolicy

dataplex.projects.search

dataplex.zones.getIamPolicy

dataproc.batches.cancel

dataproc.batches.create

dataproc.batches.get

dataproc.operations.cancel

dataproc.operations.get

dataproc.operations.list

firebase.projects.get

iam.serviceAccounts.actAs

logging.logEntries.create

logging.logEntries.route

metastore.services.get

monitoring.metricDescriptors.create

monitoring.metricDescriptors.get

monitoring.metricDescriptors.list

monitoring.monitoredResourceDescriptors.*

monitoring.monitoredResourceDescriptors.get
monitoring.monitoredResourceDescriptors.list

monitoring.timeSeries.create

orgpolicy.policy.get

recommender.iamPolicyInsights.*

recommender.iamPolicyInsights.get
recommender.iamPolicyInsights.list
recommender.iamPolicyInsights.update

recommender.iamPolicyRecommendations.*

recommender.iamPolicyRecommendations.get
recommender.iamPolicyRecommendations.list
recommender.iamPolicyRecommendations.update

recommender.storageBucketSoftDeleteInsights.*

recommender.storageBucketSoftDeleteInsights.get
recommender.storageBucketSoftDeleteInsights.list
recommender.storageBucketSoftDeleteInsights.update

recommender.storageBucketSoftDeleteRecommendations.*

recommender.storageBucketSoftDeleteRecommendations.get
recommender.storageBucketSoftDeleteRecommendations.list
recommender.storageBucketSoftDeleteRecommendations.update

resourcemanager.hierarchyNodes.listEffectiveTags

resourcemanager.projects.get

resourcemanager.projects.list

servicemanagement.services.report

serviceusage.services.use

storage.anywhereCaches.*

storage.anywhereCaches.create
storage.anywhereCaches.disable
storage.anywhereCaches.get
storage.anywhereCaches.list
storage.anywhereCaches.pause
storage.anywhereCaches.resume
storage.anywhereCaches.update

storage.bucketOperations.*

storage.bucketOperations.cancel
storage.bucketOperations.get
storage.bucketOperations.list

storage.buckets.*

storage.buckets.create
storage.buckets.createTagBinding
storage.buckets.delete
storage.buckets.deleteTagBinding
storage.buckets.enableObjectRetention
storage.buckets.get
storage.buckets.getIamPolicy
storage.buckets.getIpFilter
storage.buckets.getObjectInsights
storage.buckets.list
storage.buckets.listEffectiveTags
storage.buckets.listTagBindings
storage.buckets.relocate
storage.buckets.restore
storage.buckets.setIamPolicy
storage.buckets.setIpFilter
storage.buckets.update

storage.folders.*

storage.folders.create
storage.folders.delete
storage.folders.get
storage.folders.list
storage.folders.rename

storage.intelligenceConfigs.*

storage.intelligenceConfigs.get
storage.intelligenceConfigs.update

storage.managedFolders.*

storage.managedFolders.create
storage.managedFolders.delete
storage.managedFolders.get
storage.managedFolders.getIamPolicy
storage.managedFolders.list
storage.managedFolders.setIamPolicy

storage.multipartUploads.*

storage.multipartUploads.abort
storage.multipartUploads.create
storage.multipartUploads.list
storage.multipartUploads.listParts

storage.objects.*

storage.objects.create
storage.objects.delete
storage.objects.get
storage.objects.getIamPolicy
storage.objects.list
storage.objects.move
storage.objects.overrideUnlockedRetention
storage.objects.restore
storage.objects.setIamPolicy
storage.objects.setRetention
storage.objects.update

Dataplex Storage Data Owner

(roles/dataplex.storageDataOwner)

Owner access to data. Should not be used directly. This role is granted by Dataplex to managed resources like Cloud Storage buckets, BigQuery datasets etc.

bigquery.datasets.get

bigquery.models.create

bigquery.models.delete

bigquery.models.export

bigquery.models.getData

bigquery.models.getMetadata

bigquery.models.list

bigquery.models.updateData

bigquery.models.updateMetadata

bigquery.routines.create

bigquery.routines.delete

bigquery.routines.get

bigquery.routines.list

bigquery.routines.update

bigquery.tables.create

bigquery.tables.createSnapshot

bigquery.tables.delete

bigquery.tables.deleteSnapshot

bigquery.tables.export

bigquery.tables.get

bigquery.tables.getData

bigquery.tables.list

bigquery.tables.restoreSnapshot

bigquery.tables.update

bigquery.tables.updateData

storage.buckets.get

storage.objects.create

storage.objects.delete

storage.objects.get

storage.objects.list

storage.objects.update

Dataplex Storage Data Reader

(roles/dataplex.storageDataReader)

Read only access to data. Should not be used directly. This role is granted by Dataplex to managed resources like Cloud Storage buckets, BigQuery datasets etc.

bigquery.datasets.get

bigquery.models.export

bigquery.models.getData

bigquery.models.getMetadata

bigquery.models.list

bigquery.routines.get

bigquery.routines.list

bigquery.tables.export

bigquery.tables.get

bigquery.tables.getData

bigquery.tables.list

storage.buckets.get

storage.objects.get

storage.objects.list

Dataplex Storage Data Writer

(roles/dataplex.storageDataWriter)

Write access to data. Should not be used directly. This role is granted by Dataplex to managed resources like Cloud Storage buckets, BigQuery datasets etc.

bigquery.tables.updateData

storage.objects.create

storage.objects.delete

storage.objects.update

Dataplex Taxonomy Administrator

(roles/dataplex.taxonomyAdmin)

Full access to DataTaxonomy, DataAttribute resources.

dataplex.dataAttributes.*

dataplex.dataAttributes.bind
dataplex.dataAttributes.create
dataplex.dataAttributes.delete
dataplex.dataAttributes.get
dataplex.dataAttributes.getIamPolicy
dataplex.dataAttributes.list
dataplex.dataAttributes.setIamPolicy
dataplex.dataAttributes.update

dataplex.dataTaxonomies.create

dataplex.dataTaxonomies.delete

dataplex.dataTaxonomies.get

dataplex.dataTaxonomies.getIamPolicy

dataplex.dataTaxonomies.list

dataplex.dataTaxonomies.setIamPolicy

dataplex.dataTaxonomies.update

Dataplex Taxonomy Viewer

(roles/dataplex.taxonomyViewer)

Read access on DataTaxonomy, DataAttribute resources.

dataplex.dataAttributes.get

dataplex.dataAttributes.getIamPolicy

dataplex.dataAttributes.list

dataplex.dataTaxonomies.get

dataplex.dataTaxonomies.getIamPolicy

dataplex.dataTaxonomies.list

Dataplex Viewer

(roles/dataplex.viewer)

Read access to Dataplex resources.

cloudasset.assets.analyzeIamPolicy

dataplex.assetActions.list

dataplex.assets.get

dataplex.assets.getIamPolicy

dataplex.assets.list

dataplex.content.get

dataplex.content.getIamPolicy

dataplex.content.list

dataplex.dataAttributeBindings.get

dataplex.dataAttributeBindings.getIamPolicy

dataplex.dataAttributeBindings.list

dataplex.dataAttributes.get

dataplex.dataAttributes.getIamPolicy

dataplex.dataAttributes.list

dataplex.dataTaxonomies.get

dataplex.dataTaxonomies.getIamPolicy

dataplex.dataTaxonomies.list

dataplex.datascans.get

dataplex.datascans.getIamPolicy

dataplex.datascans.list

dataplex.environments.get

dataplex.environments.getIamPolicy

dataplex.environments.list

dataplex.lakeActions.list

dataplex.lakes.get

dataplex.lakes.getIamPolicy

dataplex.lakes.list

dataplex.operations.get

dataplex.operations.list

dataplex.tasks.get

dataplex.tasks.getIamPolicy

dataplex.tasks.list

dataplex.zoneActions.list

dataplex.zones.get

dataplex.zones.getIamPolicy

dataplex.zones.list

Dataplex permissions

Permission	Included in roles
`dataplex.aspectTypes.create`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Aspect Type Owner (`roles/dataplex.aspectTypeOwner`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`)
`dataplex.aspectTypes.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Aspect Type Owner (`roles/dataplex.aspectTypeOwner`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`)
`dataplex.aspectTypes.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Aspect Type Owner (`roles/dataplex.aspectTypeOwner`) Dataplex Aspect Type User (`roles/dataplex.aspectTypeUser`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Catalog Viewer (`roles/dataplex.catalogViewer`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`)
`dataplex.aspectTypes.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Aspect Type Owner (`roles/dataplex.aspectTypeOwner`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Catalog Viewer (`roles/dataplex.catalogViewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.aspectTypes.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Aspect Type Owner (`roles/dataplex.aspectTypeOwner`) Dataplex Aspect Type User (`roles/dataplex.aspectTypeUser`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Catalog Viewer (`roles/dataplex.catalogViewer`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.aspectTypes.setIamPolicy`	Owner (`roles/owner`) Dataplex Aspect Type Owner (`roles/dataplex.aspectTypeOwner`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Security Admin (`roles/iam.securityAdmin`)
`dataplex.aspectTypes.update`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Aspect Type Owner (`roles/dataplex.aspectTypeOwner`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`)
`dataplex.aspectTypes.use`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Aspect Type Owner (`roles/dataplex.aspectTypeOwner`) Dataplex Aspect Type User (`roles/dataplex.aspectTypeUser`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`)
`dataplex.assetActions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Viewer (`roles/dataplex.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.assets.create`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.assets.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.assets.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Metadata Reader (`roles/dataplex.metadataReader`) Dataplex Metadata Writer (`roles/dataplex.metadataWriter`) Dataplex Viewer (`roles/dataplex.viewer`)
`dataplex.assets.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Viewer (`roles/dataplex.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Dataplex Service Agent (`roles/dataplex.serviceAgent`)
`dataplex.assets.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Metadata Reader (`roles/dataplex.metadataReader`) Dataplex Metadata Writer (`roles/dataplex.metadataWriter`) Dataplex Viewer (`roles/dataplex.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.assets.ownData`	Owner (`roles/owner`) Dataplex Data Owner (`roles/dataplex.dataOwner`)
`dataplex.assets.readData`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Data Owner (`roles/dataplex.dataOwner`) Dataplex Data Reader (`roles/dataplex.dataReader`)
`dataplex.assets.setIamPolicy`	Owner (`roles/owner`) Dataplex Administrator (`roles/dataplex.admin`) Security Admin (`roles/iam.securityAdmin`)
`dataplex.assets.update`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.assets.writeData`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Data Owner (`roles/dataplex.dataOwner`) Dataplex Data Writer (`roles/dataplex.dataWriter`)
`dataplex.content.create`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Developer (`roles/dataplex.developer`)
`dataplex.content.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Developer (`roles/dataplex.developer`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.content.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Developer (`roles/dataplex.developer`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Viewer (`roles/dataplex.viewer`)
`dataplex.content.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Developer (`roles/dataplex.developer`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Viewer (`roles/dataplex.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.content.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Developer (`roles/dataplex.developer`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Viewer (`roles/dataplex.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.content.setIamPolicy`	Owner (`roles/owner`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Developer (`roles/dataplex.developer`) Security Admin (`roles/iam.securityAdmin`)
`dataplex.content.update`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Developer (`roles/dataplex.developer`)
`dataplex.dataAttributeBindings.create`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Binding Administrator (`roles/dataplex.bindingAdmin`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.dataAttributeBindings.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Binding Administrator (`roles/dataplex.bindingAdmin`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.dataAttributeBindings.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Binding Administrator (`roles/dataplex.bindingAdmin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Viewer (`roles/dataplex.viewer`)
`dataplex.dataAttributeBindings.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Binding Administrator (`roles/dataplex.bindingAdmin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Viewer (`roles/dataplex.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.dataAttributeBindings.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Binding Administrator (`roles/dataplex.bindingAdmin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Viewer (`roles/dataplex.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.dataAttributeBindings.setIamPolicy`	Owner (`roles/owner`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Binding Administrator (`roles/dataplex.bindingAdmin`) Security Admin (`roles/iam.securityAdmin`)
`dataplex.dataAttributeBindings.update`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Binding Administrator (`roles/dataplex.bindingAdmin`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.dataAttributes.bind`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Taxonomy Administrator (`roles/dataplex.taxonomyAdmin`)
`dataplex.dataAttributes.create`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Taxonomy Administrator (`roles/dataplex.taxonomyAdmin`)
`dataplex.dataAttributes.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Taxonomy Administrator (`roles/dataplex.taxonomyAdmin`)
`dataplex.dataAttributes.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Taxonomy Administrator (`roles/dataplex.taxonomyAdmin`) Dataplex Taxonomy Viewer (`roles/dataplex.taxonomyViewer`) Dataplex Viewer (`roles/dataplex.viewer`)
`dataplex.dataAttributes.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Taxonomy Administrator (`roles/dataplex.taxonomyAdmin`) Dataplex Taxonomy Viewer (`roles/dataplex.taxonomyViewer`) Dataplex Viewer (`roles/dataplex.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.dataAttributes.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Taxonomy Administrator (`roles/dataplex.taxonomyAdmin`) Dataplex Taxonomy Viewer (`roles/dataplex.taxonomyViewer`) Dataplex Viewer (`roles/dataplex.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.dataAttributes.setIamPolicy`	Owner (`roles/owner`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Taxonomy Administrator (`roles/dataplex.taxonomyAdmin`) Security Admin (`roles/iam.securityAdmin`)
`dataplex.dataAttributes.update`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Taxonomy Administrator (`roles/dataplex.taxonomyAdmin`)
`dataplex.dataTaxonomies.configureDataAccess`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Security Administrator (`roles/dataplex.securityAdmin`)
`dataplex.dataTaxonomies.configureResourceAccess`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Security Administrator (`roles/dataplex.securityAdmin`)
`dataplex.dataTaxonomies.create`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Taxonomy Administrator (`roles/dataplex.taxonomyAdmin`)
`dataplex.dataTaxonomies.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Taxonomy Administrator (`roles/dataplex.taxonomyAdmin`)
`dataplex.dataTaxonomies.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Taxonomy Administrator (`roles/dataplex.taxonomyAdmin`) Dataplex Taxonomy Viewer (`roles/dataplex.taxonomyViewer`) Dataplex Viewer (`roles/dataplex.viewer`)
`dataplex.dataTaxonomies.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Taxonomy Administrator (`roles/dataplex.taxonomyAdmin`) Dataplex Taxonomy Viewer (`roles/dataplex.taxonomyViewer`) Dataplex Viewer (`roles/dataplex.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.dataTaxonomies.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Taxonomy Administrator (`roles/dataplex.taxonomyAdmin`) Dataplex Taxonomy Viewer (`roles/dataplex.taxonomyViewer`) Dataplex Viewer (`roles/dataplex.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.dataTaxonomies.setIamPolicy`	Owner (`roles/owner`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Taxonomy Administrator (`roles/dataplex.taxonomyAdmin`) Security Admin (`roles/iam.securityAdmin`)
`dataplex.dataTaxonomies.update`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Taxonomy Administrator (`roles/dataplex.taxonomyAdmin`)
`dataplex.datascans.create`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex DataScan Administrator (`roles/dataplex.dataScanAdmin`) Dataplex DataScan Creator (`roles/dataplex.dataScanCreator`) Dataplex DataScan Editor (`roles/dataplex.dataScanEditor`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.datascans.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex DataScan Administrator (`roles/dataplex.dataScanAdmin`) Dataplex DataScan Editor (`roles/dataplex.dataScanEditor`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.datascans.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex DataScan Administrator (`roles/dataplex.dataScanAdmin`) Dataplex DataScan Creator (`roles/dataplex.dataScanCreator`) Dataplex DataScan DataViewer (`roles/dataplex.dataScanDataViewer`) Dataplex DataScan Editor (`roles/dataplex.dataScanEditor`) Dataplex DataScan Viewer (`roles/dataplex.dataScanViewer`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Viewer (`roles/dataplex.viewer`)
`dataplex.datascans.getData`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex DataScan Administrator (`roles/dataplex.dataScanAdmin`) Dataplex DataScan DataViewer (`roles/dataplex.dataScanDataViewer`) Dataplex DataScan Editor (`roles/dataplex.dataScanEditor`)
`dataplex.datascans.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex DataScan Administrator (`roles/dataplex.dataScanAdmin`) Dataplex DataScan DataViewer (`roles/dataplex.dataScanDataViewer`) Dataplex DataScan Editor (`roles/dataplex.dataScanEditor`) Dataplex DataScan Viewer (`roles/dataplex.dataScanViewer`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Viewer (`roles/dataplex.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.datascans.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex DataScan Administrator (`roles/dataplex.dataScanAdmin`) Dataplex DataScan Creator (`roles/dataplex.dataScanCreator`) Dataplex DataScan DataViewer (`roles/dataplex.dataScanDataViewer`) Dataplex DataScan Editor (`roles/dataplex.dataScanEditor`) Dataplex DataScan Viewer (`roles/dataplex.dataScanViewer`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Viewer (`roles/dataplex.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.datascans.run`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex DataScan Administrator (`roles/dataplex.dataScanAdmin`) Dataplex DataScan Editor (`roles/dataplex.dataScanEditor`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.datascans.setIamPolicy`	Owner (`roles/owner`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex DataScan Administrator (`roles/dataplex.dataScanAdmin`) Security Admin (`roles/iam.securityAdmin`)
`dataplex.datascans.update`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex DataScan Administrator (`roles/dataplex.dataScanAdmin`) Dataplex DataScan Editor (`roles/dataplex.dataScanEditor`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.encryptionConfig.create`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Encryption Admin (`roles/dataplex.encryptionAdmin`)
`dataplex.encryptionConfig.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Encryption Admin (`roles/dataplex.encryptionAdmin`)
`dataplex.encryptionConfig.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Encryption Admin (`roles/dataplex.encryptionAdmin`)
`dataplex.encryptionConfig.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Encryption Admin (`roles/dataplex.encryptionAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.encryptionConfig.update`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Encryption Admin (`roles/dataplex.encryptionAdmin`)
`dataplex.entities.create`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Metadata Writer (`roles/dataplex.metadataWriter`)
`dataplex.entities.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Metadata Writer (`roles/dataplex.metadataWriter`)
`dataplex.entities.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Metadata Reader (`roles/dataplex.metadataReader`) Dataplex Metadata Writer (`roles/dataplex.metadataWriter`)
`dataplex.entities.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Metadata Reader (`roles/dataplex.metadataReader`) Dataplex Metadata Writer (`roles/dataplex.metadataWriter`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.entities.update`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Metadata Writer (`roles/dataplex.metadataWriter`)
`dataplex.entries.create`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`)
`dataplex.entries.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`)
`dataplex.entries.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Catalog Viewer (`roles/dataplex.catalogViewer`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`)
`dataplex.entries.link`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`)
`dataplex.entries.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Catalog Viewer (`roles/dataplex.catalogViewer`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.entries.update`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`)
`dataplex.entryGroups.create`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`)
`dataplex.entryGroups.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`)
`dataplex.entryGroups.export`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Entry Group Exporter (`roles/dataplex.entryGroupExporter`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`)
`dataplex.entryGroups.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Catalog Viewer (`roles/dataplex.catalogViewer`) Dataplex Entry Group Exporter (`roles/dataplex.entryGroupExporter`) Dataplex Entry Group Importer (`roles/dataplex.entryGroupImporter`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`)
`dataplex.entryGroups.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Catalog Viewer (`roles/dataplex.catalogViewer`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.entryGroups.import`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Entry Group Importer (`roles/dataplex.entryGroupImporter`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`)
`dataplex.entryGroups.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Catalog Viewer (`roles/dataplex.catalogViewer`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.entryGroups.setIamPolicy`	Owner (`roles/owner`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Security Admin (`roles/iam.securityAdmin`)
`dataplex.entryGroups.update`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`)
`dataplex.entryGroups.useContactsAspect`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`)
`dataplex.entryGroups.useDefinitionEntryLink`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`)
`dataplex.entryGroups.useGenericAspect`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`)
`dataplex.entryGroups.useGenericEntry`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`)
`dataplex.entryGroups.useOverviewAspect`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`)
`dataplex.entryGroups.useRelatedEntryLink`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`)
`dataplex.entryGroups.useSchemaAspect`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`)
`dataplex.entryGroups.useSynonymEntryLink`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`)
`dataplex.entryLinks.create`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`)
`dataplex.entryLinks.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`)
`dataplex.entryLinks.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Catalog Viewer (`roles/dataplex.catalogViewer`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`)
`dataplex.entryLinks.reference`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`)
`dataplex.entryTypes.create`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Entry Type Owner (`roles/dataplex.entryTypeOwner`)
`dataplex.entryTypes.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Entry Type Owner (`roles/dataplex.entryTypeOwner`)
`dataplex.entryTypes.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Catalog Viewer (`roles/dataplex.catalogViewer`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`) Dataplex Entry Type Owner (`roles/dataplex.entryTypeOwner`) Dataplex Entry Type User (`roles/dataplex.entryTypeUser`)
`dataplex.entryTypes.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Catalog Viewer (`roles/dataplex.catalogViewer`) Dataplex Entry Type Owner (`roles/dataplex.entryTypeOwner`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.entryTypes.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Catalog Viewer (`roles/dataplex.catalogViewer`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`) Dataplex Entry Type Owner (`roles/dataplex.entryTypeOwner`) Dataplex Entry Type User (`roles/dataplex.entryTypeUser`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.entryTypes.setIamPolicy`	Owner (`roles/owner`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Entry Type Owner (`roles/dataplex.entryTypeOwner`) Security Admin (`roles/iam.securityAdmin`)
`dataplex.entryTypes.update`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Entry Type Owner (`roles/dataplex.entryTypeOwner`)
`dataplex.entryTypes.use`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`) Dataplex Entry Type Owner (`roles/dataplex.entryTypeOwner`) Dataplex Entry Type User (`roles/dataplex.entryTypeUser`)
`dataplex.environments.create`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.environments.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.environments.execute`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Developer (`roles/dataplex.developer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Dataplex Service Agent (`roles/dataplex.serviceAgent`)
`dataplex.environments.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Developer (`roles/dataplex.developer`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Viewer (`roles/dataplex.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Dataplex Service Agent (`roles/dataplex.serviceAgent`)
`dataplex.environments.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Viewer (`roles/dataplex.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.environments.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Developer (`roles/dataplex.developer`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Viewer (`roles/dataplex.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Dataplex Service Agent (`roles/dataplex.serviceAgent`)
`dataplex.environments.setIamPolicy`	Owner (`roles/owner`) Dataplex Administrator (`roles/dataplex.admin`) Security Admin (`roles/iam.securityAdmin`)
`dataplex.environments.update`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.glossaries.create`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`)
`dataplex.glossaries.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`)
`dataplex.glossaries.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Catalog Viewer (`roles/dataplex.catalogViewer`)
`dataplex.glossaries.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Catalog Viewer (`roles/dataplex.catalogViewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.glossaries.import`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`)
`dataplex.glossaries.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Catalog Viewer (`roles/dataplex.catalogViewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.glossaries.setIamPolicy`	Owner (`roles/owner`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Security Admin (`roles/iam.securityAdmin`)
`dataplex.glossaries.update`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`)
`dataplex.glossaryCategories.create`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`)
`dataplex.glossaryCategories.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`)
`dataplex.glossaryCategories.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Catalog Viewer (`roles/dataplex.catalogViewer`)
`dataplex.glossaryCategories.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Catalog Viewer (`roles/dataplex.catalogViewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.glossaryCategories.update`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`)
`dataplex.glossaryTerms.create`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`)
`dataplex.glossaryTerms.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`)
`dataplex.glossaryTerms.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Catalog Viewer (`roles/dataplex.catalogViewer`)
`dataplex.glossaryTerms.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Catalog Viewer (`roles/dataplex.catalogViewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.glossaryTerms.update`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`)
`dataplex.glossaryTerms.use`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`)
`dataplex.lakeActions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Viewer (`roles/dataplex.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.lakes.create`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.lakes.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.lakes.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Viewer (`roles/dataplex.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Dataplex Service Agent (`roles/dataplex.serviceAgent`)
`dataplex.lakes.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Viewer (`roles/dataplex.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Dataplex Service Agent (`roles/dataplex.serviceAgent`)
`dataplex.lakes.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Viewer (`roles/dataplex.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.lakes.setIamPolicy`	Owner (`roles/owner`) Dataplex Administrator (`roles/dataplex.admin`) Security Admin (`roles/iam.securityAdmin`)
`dataplex.lakes.update`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`)
`dataplex.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.metadataJobs.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Metadata Job Owner (`roles/dataplex.metadataJobOwner`)
`dataplex.metadataJobs.create`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Metadata Job Owner (`roles/dataplex.metadataJobOwner`)
`dataplex.metadataJobs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Metadata Job Owner (`roles/dataplex.metadataJobOwner`) Dataplex Metadata Job Viewer (`roles/dataplex.metadataJobViewer`)
`dataplex.metadataJobs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Metadata Job Owner (`roles/dataplex.metadataJobOwner`) Dataplex Metadata Job Viewer (`roles/dataplex.metadataJobViewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Aspect Type Owner (`roles/dataplex.aspectTypeOwner`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex DataScan Administrator (`roles/dataplex.dataScanAdmin`) Dataplex DataScan Creator (`roles/dataplex.dataScanCreator`) Dataplex DataScan Editor (`roles/dataplex.dataScanEditor`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Encryption Admin (`roles/dataplex.encryptionAdmin`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry Type Owner (`roles/dataplex.entryTypeOwner`) Dataplex Metadata Job Owner (`roles/dataplex.metadataJobOwner`) Dataplex Metadata Job Viewer (`roles/dataplex.metadataJobViewer`) Dataplex Viewer (`roles/dataplex.viewer`)
`dataplex.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex DataScan Administrator (`roles/dataplex.dataScanAdmin`) Dataplex DataScan Editor (`roles/dataplex.dataScanEditor`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Encryption Admin (`roles/dataplex.encryptionAdmin`) Dataplex Viewer (`roles/dataplex.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.partitions.create`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Metadata Writer (`roles/dataplex.metadataWriter`)
`dataplex.partitions.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Metadata Writer (`roles/dataplex.metadataWriter`)
`dataplex.partitions.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Metadata Reader (`roles/dataplex.metadataReader`) Dataplex Metadata Writer (`roles/dataplex.metadataWriter`)
`dataplex.partitions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Metadata Reader (`roles/dataplex.metadataReader`) Dataplex Metadata Writer (`roles/dataplex.metadataWriter`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.partitions.update`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Metadata Writer (`roles/dataplex.metadataWriter`)
`dataplex.projects.search`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) BigQuery Admin (`roles/bigquery.admin`) BigQuery Metadata Viewer (`roles/bigquery.metadataViewer`) BigQuery Studio Admin (`roles/bigquery.studioAdmin`) BigQuery Studio User (`roles/bigquery.studioUser`) BigQuery User (`roles/bigquery.user`) Data Catalog Admin (`roles/datacatalog.admin`) DataCatalog Data Steward (`roles/datacatalog.dataSteward`) DataCatalog EntryGroup Creator (`roles/datacatalog.entryGroupCreator`) DataCatalog EntryGroup Owner (`roles/datacatalog.entryGroupOwner`) DataCatalog Entry Owner (`roles/datacatalog.entryOwner`) DataCatalog Entry Viewer (`roles/datacatalog.entryViewer`) DataCatalog Glossary Owner (`roles/datacatalog.glossaryOwner`) DataCatalog Glossary User (`roles/datacatalog.glossaryUser`) DataCatalog Search Admin (`roles/datacatalog.searchAdmin`) Data Catalog TagTemplate Creator (`roles/datacatalog.tagTemplateCreator`) Data Catalog TagTemplate Owner (`roles/datacatalog.tagTemplateOwner`) Data Catalog TagTemplate User (`roles/datacatalog.tagTemplateUser`) Data Catalog TagTemplate Viewer (`roles/datacatalog.tagTemplateViewer`) Data Catalog Viewer (`roles/datacatalog.viewer`) Dataplex Aspect Type Owner (`roles/dataplex.aspectTypeOwner`) Dataplex Aspect Type User (`roles/dataplex.aspectTypeUser`) Dataplex Catalog Admin (`roles/dataplex.catalogAdmin`) Dataplex Catalog Editor (`roles/dataplex.catalogEditor`) Dataplex Catalog Viewer (`roles/dataplex.catalogViewer`) Dataplex Entry Group Owner (`roles/dataplex.entryGroupOwner`) Dataplex Entry and EntryLink Owner (`roles/dataplex.entryOwner`) Dataplex Entry Type Owner (`roles/dataplex.entryTypeOwner`) Dataplex Entry Type User (`roles/dataplex.entryTypeUser`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Dataplex Service Agent (`roles/dataplex.serviceAgent`) Dataprep Service Agent (`roles/dataprep.serviceAgent`) DLP API Service Agent (`roles/dlp.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`)
`dataplex.tasks.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Developer (`roles/dataplex.developer`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.tasks.create`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Developer (`roles/dataplex.developer`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.tasks.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Developer (`roles/dataplex.developer`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.tasks.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Developer (`roles/dataplex.developer`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Viewer (`roles/dataplex.viewer`)
`dataplex.tasks.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Viewer (`roles/dataplex.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.tasks.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Developer (`roles/dataplex.developer`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Viewer (`roles/dataplex.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.tasks.run`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Developer (`roles/dataplex.developer`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.tasks.setIamPolicy`	Owner (`roles/owner`) Dataplex Administrator (`roles/dataplex.admin`) Security Admin (`roles/iam.securityAdmin`)
`dataplex.tasks.update`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Developer (`roles/dataplex.developer`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.zoneActions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Viewer (`roles/dataplex.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.zones.create`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.zones.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`)
`dataplex.zones.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Metadata Reader (`roles/dataplex.metadataReader`) Dataplex Metadata Writer (`roles/dataplex.metadataWriter`) Dataplex Viewer (`roles/dataplex.viewer`)
`dataplex.zones.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Viewer (`roles/dataplex.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Dataplex Service Agent (`roles/dataplex.serviceAgent`)
`dataplex.zones.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`) Dataplex Metadata Reader (`roles/dataplex.metadataReader`) Dataplex Metadata Writer (`roles/dataplex.metadataWriter`) Dataplex Viewer (`roles/dataplex.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`dataplex.zones.setIamPolicy`	Owner (`roles/owner`) Dataplex Administrator (`roles/dataplex.admin`) Security Admin (`roles/iam.securityAdmin`)
`dataplex.zones.update`	Owner (`roles/owner`) Editor (`roles/editor`) Dataplex Administrator (`roles/dataplex.admin`) Dataplex Editor (`roles/dataplex.editor`)

Dataplex roles and permissions Stay organized with collections Save and categorize content based on your preferences.

Dataplex roles

Dataplex Administrator

Dataplex Aspect Type Owner

Dataplex Aspect Type User

Dataplex Binding Administrator

Dataplex Catalog Admin

Dataplex Catalog Editor

Dataplex Catalog Viewer

Dataplex Data Owner

Dataplex Data Reader

Dataplex DataScan Administrator

Dataplex DataScan Creator

Dataplex DataScan DataViewer

Dataplex DataScan Editor

Dataplex DataScan Viewer

Dataplex Data Writer

Dataplex Developer

Dataplex Discovery BigLake Publishing Service Agent

Dataplex Discovery Publishing Service Agent

Dataplex Discovery Service Agent

Dataplex Editor

Dataplex Encryption Admin

Dataplex Entry Group Exporter

Dataplex Entry Group Importer

Dataplex Entry Group Owner

Dataplex Entry and EntryLink Owner

Dataplex Entry Type Owner

Dataplex Entry Type User

Dataplex Metadata Job Owner

Dataplex Metadata Job Viewer

Dataplex Metadata Reader

Dataplex Metadata Writer

Dataplex Security Administrator

Cloud Dataplex Service Agent

Dataplex Storage Data Owner

Dataplex Storage Data Reader

Dataplex Storage Data Writer

Dataplex Taxonomy Administrator

Dataplex Taxonomy Viewer

Dataplex Viewer

Dataplex permissions

dataplex.aspectTypes.create

dataplex.aspectTypes.delete

dataplex.aspectTypes.get

dataplex.aspectTypes.getIamPolicy

dataplex.aspectTypes.list

dataplex.aspectTypes.setIamPolicy

dataplex.aspectTypes.update

dataplex.aspectTypes.use

dataplex.assetActions.list

dataplex.assets.create

dataplex.assets.delete

dataplex.assets.get

dataplex.assets.getIamPolicy

dataplex.assets.list

dataplex.assets.ownData

dataplex.assets.readData

dataplex.assets.setIamPolicy

dataplex.assets.update

dataplex.assets.writeData

dataplex.content.create

dataplex.content.delete

dataplex.content.get

dataplex.content.getIamPolicy

dataplex.content.list

dataplex.content.setIamPolicy

dataplex.content.update

dataplex.dataAttributeBindings.create

dataplex.dataAttributeBindings.delete

dataplex.dataAttributeBindings.get

dataplex.dataAttributeBindings.getIamPolicy

dataplex.dataAttributeBindings.list

dataplex.dataAttributeBindings.setIamPolicy

dataplex.dataAttributeBindings.update

dataplex.dataAttributes.bind

dataplex.dataAttributes.create

dataplex.dataAttributes.delete

dataplex.dataAttributes.get

dataplex.dataAttributes.getIamPolicy

Dataplex roles and permissions
Stay organized with collections Save and categorize content based on your preferences.

`dataplex.aspectTypes.create`

`dataplex.aspectTypes.delete`

`dataplex.aspectTypes.get`

`dataplex.aspectTypes.getIamPolicy`

`dataplex.aspectTypes.list`

`dataplex.aspectTypes.setIamPolicy`

`dataplex.aspectTypes.update`

`dataplex.aspectTypes.use`

`dataplex.assetActions.list`

`dataplex.assets.create`

`dataplex.assets.delete`

`dataplex.assets.get`

`dataplex.assets.getIamPolicy`

`dataplex.assets.list`

`dataplex.assets.ownData`

`dataplex.assets.readData`

`dataplex.assets.setIamPolicy`

`dataplex.assets.update`

`dataplex.assets.writeData`

`dataplex.content.create`

`dataplex.content.delete`

`dataplex.content.get`

`dataplex.content.getIamPolicy`

`dataplex.content.list`

`dataplex.content.setIamPolicy`

`dataplex.content.update`

`dataplex.dataAttributeBindings.create`

`dataplex.dataAttributeBindings.delete`

`dataplex.dataAttributeBindings.get`

`dataplex.dataAttributeBindings.getIamPolicy`

`dataplex.dataAttributeBindings.list`

`dataplex.dataAttributeBindings.setIamPolicy`

`dataplex.dataAttributeBindings.update`

`dataplex.dataAttributes.bind`

`dataplex.dataAttributes.create`

`dataplex.dataAttributes.delete`

`dataplex.dataAttributes.get`

`dataplex.dataAttributes.getIamPolicy`

`dataplex.dataAttributes.list`

`dataplex.dataAttributes.setIamPolicy`

`dataplex.dataAttributes.update`

`dataplex.dataTaxonomies.configureDataAccess`

`dataplex.dataTaxonomies.configureResourceAccess`

`dataplex.dataTaxonomies.create`

`dataplex.dataTaxonomies.delete`

`dataplex.dataTaxonomies.get`

`dataplex.dataTaxonomies.getIamPolicy`

`dataplex.dataTaxonomies.list`

`dataplex.dataTaxonomies.setIamPolicy`

`dataplex.dataTaxonomies.update`

`dataplex.datascans.create`

`dataplex.datascans.delete`

`dataplex.datascans.get`

`dataplex.datascans.getData`

`dataplex.datascans.getIamPolicy`

`dataplex.datascans.list`

`dataplex.datascans.run`

`dataplex.datascans.setIamPolicy`

`dataplex.datascans.update`

`dataplex.encryptionConfig.create`

`dataplex.encryptionConfig.delete`

`dataplex.encryptionConfig.get`

`dataplex.encryptionConfig.list`

`dataplex.encryptionConfig.update`

`dataplex.entities.create`

`dataplex.entities.delete`

`dataplex.entities.get`

`dataplex.entities.list`

`dataplex.entities.update`

`dataplex.entries.create`

`dataplex.entries.delete`

`dataplex.entries.get`

`dataplex.entries.link`

`dataplex.entries.list`

`dataplex.entries.update`

`dataplex.entryGroups.create`

`dataplex.entryGroups.delete`

`dataplex.entryGroups.export`

`dataplex.entryGroups.get`