Datastream roles and permissions
Stay organized with collections Save and categorize content based on your preferences.

This page lists the IAM roles and permissions for Datastream. To search through all roles and permissions, see the role and permission index.

Datastream roles

Role Permissions

Role	Permissions
Datastream Admin (`roles/datastream.admin`) Full access to all Datastream resources.	`datastream.*` `datastream.connectionProfiles.create` `datastream.connectionProfiles.createTagBinding` `datastream.connectionProfiles.delete` `datastream.connectionProfiles.deleteTagBinding` `datastream.connectionProfiles.destinationTypes` `datastream.connectionProfiles.discover` `datastream.connectionProfiles.get` `datastream.connectionProfiles.getIamPolicy` `datastream.connectionProfiles.list` `datastream.connectionProfiles.listEffectiveTags` `datastream.connectionProfiles.listStaticServiceIps` `datastream.connectionProfiles.listTagBindings` `datastream.connectionProfiles.setIamPolicy` `datastream.connectionProfiles.sourceTypes` `datastream.connectionProfiles.update` `datastream.locations.fetchStaticIps` `datastream.locations.get` `datastream.locations.list` `datastream.objects.get` `datastream.objects.list` `datastream.objects.startBackfillJob` `datastream.objects.stopBackfillJob` `datastream.operations.cancel` `datastream.operations.delete` `datastream.operations.get` `datastream.operations.list` `datastream.privateConnections.create` `datastream.privateConnections.createTagBinding` `datastream.privateConnections.delete` `datastream.privateConnections.deleteTagBinding` `datastream.privateConnections.get` `datastream.privateConnections.getIamPolicy` `datastream.privateConnections.list` `datastream.privateConnections.listEffectiveTags` `datastream.privateConnections.listTagBindings` `datastream.privateConnections.setIamPolicy` `datastream.routes.create` `datastream.routes.delete` `datastream.routes.get` `datastream.routes.getIamPolicy` `datastream.routes.list` `datastream.routes.setIamPolicy` `datastream.streams.computeState` `datastream.streams.create` `datastream.streams.createTagBinding` `datastream.streams.delete` `datastream.streams.deleteTagBinding` `datastream.streams.fetchErrors` `datastream.streams.get` `datastream.streams.getIamPolicy` `datastream.streams.list` `datastream.streams.listEffectiveTags` `datastream.streams.listTagBindings` `datastream.streams.pause` `datastream.streams.resume` `datastream.streams.setIamPolicy` `datastream.streams.start` `datastream.streams.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Datastream Service Agent (`roles/datastream.serviceAgent`) Grants Cloud Datastream permissions to write data in the user project. Warning: Do not grant service agent roles to any principals except service agents.	`bigquery.connections.delegate` `bigquery.connections.get` `bigquery.datasets.create` `bigquery.datasets.get` `bigquery.jobs.create` `bigquery.jobs.delete` `bigquery.jobs.get` `bigquery.jobs.list` `bigquery.jobs.update` `bigquery.tables.create` `bigquery.tables.get` `bigquery.tables.getData` `bigquery.tables.list` `bigquery.tables.update` `bigquery.tables.updateData` `compute.globalAddresses.create` `compute.globalAddresses.createInternal` `compute.globalAddresses.delete` `compute.globalAddresses.deleteInternal` `compute.globalAddresses.get` `compute.globalOperations.get` `compute.networkAttachments.get` `compute.networkAttachments.list` `compute.networks.addPeering` `compute.networks.get` `compute.networks.listPeeringRoutes` `compute.networks.removePeering` `compute.networks.use` `compute.routes.get` `compute.routes.list` `compute.subnetworks.get` `compute.subnetworks.list` `pubsub.topics.publish` `storage.buckets.get` `storage.objects.create` `storage.objects.get` `storage.objects.list`
Datastream Viewer (`roles/datastream.viewer`) Read-only access to all Datastream resources.	`datastream.connectionProfiles.destinationTypes` `datastream.connectionProfiles.discover` `datastream.connectionProfiles.get` `datastream.connectionProfiles.getIamPolicy` `datastream.connectionProfiles.list` `datastream.connectionProfiles.listEffectiveTags` `datastream.connectionProfiles.listStaticServiceIps` `datastream.connectionProfiles.listTagBindings` `datastream.connectionProfiles.sourceTypes` `datastream.locations.*` `datastream.locations.fetchStaticIps` `datastream.locations.get` `datastream.locations.list` `datastream.objects.get` `datastream.objects.list` `datastream.operations.get` `datastream.operations.list` `datastream.privateConnections.get` `datastream.privateConnections.getIamPolicy` `datastream.privateConnections.list` `datastream.privateConnections.listEffectiveTags` `datastream.privateConnections.listTagBindings` `datastream.routes.get` `datastream.routes.getIamPolicy` `datastream.routes.list` `datastream.streams.fetchErrors` `datastream.streams.get` `datastream.streams.getIamPolicy` `datastream.streams.list` `datastream.streams.listEffectiveTags` `datastream.streams.listTagBindings` `resourcemanager.projects.get` `resourcemanager.projects.list`

Datastream Admin

(roles/datastream.admin)

Full access to all Datastream resources.

datastream.*

datastream.connectionProfiles.create
datastream.connectionProfiles.createTagBinding
datastream.connectionProfiles.delete
datastream.connectionProfiles.deleteTagBinding
datastream.connectionProfiles.destinationTypes
datastream.connectionProfiles.discover
datastream.connectionProfiles.get
datastream.connectionProfiles.getIamPolicy
datastream.connectionProfiles.list
datastream.connectionProfiles.listEffectiveTags
datastream.connectionProfiles.listStaticServiceIps
datastream.connectionProfiles.listTagBindings
datastream.connectionProfiles.setIamPolicy
datastream.connectionProfiles.sourceTypes
datastream.connectionProfiles.update
datastream.locations.fetchStaticIps
datastream.locations.get
datastream.locations.list
datastream.objects.get
datastream.objects.list
datastream.objects.startBackfillJob
datastream.objects.stopBackfillJob
datastream.operations.cancel
datastream.operations.delete
datastream.operations.get
datastream.operations.list
datastream.privateConnections.create
datastream.privateConnections.createTagBinding
datastream.privateConnections.delete
datastream.privateConnections.deleteTagBinding
datastream.privateConnections.get
datastream.privateConnections.getIamPolicy
datastream.privateConnections.list
datastream.privateConnections.listEffectiveTags
datastream.privateConnections.listTagBindings
datastream.privateConnections.setIamPolicy
datastream.routes.create
datastream.routes.delete
datastream.routes.get
datastream.routes.getIamPolicy
datastream.routes.list
datastream.routes.setIamPolicy
datastream.streams.computeState
datastream.streams.create
datastream.streams.createTagBinding
datastream.streams.delete
datastream.streams.deleteTagBinding
datastream.streams.fetchErrors
datastream.streams.get
datastream.streams.getIamPolicy
datastream.streams.list
datastream.streams.listEffectiveTags
datastream.streams.listTagBindings
datastream.streams.pause
datastream.streams.resume
datastream.streams.setIamPolicy
datastream.streams.start
datastream.streams.update

resourcemanager.projects.get

resourcemanager.projects.list

Datastream Service Agent

(roles/datastream.serviceAgent)

Grants Cloud Datastream permissions to write data in the user project.

bigquery.connections.delegate

bigquery.connections.get

bigquery.datasets.create

bigquery.datasets.get

bigquery.jobs.create

bigquery.jobs.delete

bigquery.jobs.get

bigquery.jobs.list

bigquery.jobs.update

bigquery.tables.create

bigquery.tables.get

bigquery.tables.getData

bigquery.tables.list

bigquery.tables.update

bigquery.tables.updateData

compute.globalAddresses.create

compute.globalAddresses.createInternal

compute.globalAddresses.delete

compute.globalAddresses.deleteInternal

compute.globalAddresses.get

compute.globalOperations.get

compute.networkAttachments.get

compute.networkAttachments.list

compute.networks.addPeering

compute.networks.get

compute.networks.listPeeringRoutes

compute.networks.removePeering

compute.networks.use

compute.routes.get

compute.routes.list

compute.subnetworks.get

compute.subnetworks.list

pubsub.topics.publish

storage.buckets.get

storage.objects.create

storage.objects.get

storage.objects.list

Datastream Viewer

(roles/datastream.viewer)

Read-only access to all Datastream resources.

datastream.connectionProfiles.destinationTypes

datastream.connectionProfiles.discover

datastream.connectionProfiles.get

datastream.connectionProfiles.getIamPolicy

datastream.connectionProfiles.list

datastream.connectionProfiles.listEffectiveTags

datastream.connectionProfiles.listStaticServiceIps

datastream.connectionProfiles.listTagBindings

datastream.connectionProfiles.sourceTypes

datastream.locations.*

datastream.locations.fetchStaticIps
datastream.locations.get
datastream.locations.list

datastream.objects.get

datastream.objects.list

datastream.operations.get

datastream.operations.list

datastream.privateConnections.get

datastream.privateConnections.getIamPolicy

datastream.privateConnections.list

datastream.privateConnections.listEffectiveTags

datastream.privateConnections.listTagBindings

datastream.routes.get

datastream.routes.getIamPolicy

datastream.routes.list

datastream.streams.fetchErrors

datastream.streams.get

datastream.streams.getIamPolicy

datastream.streams.list

datastream.streams.listEffectiveTags

datastream.streams.listTagBindings

resourcemanager.projects.get

resourcemanager.projects.list

Datastream permissions

Permission	Included in roles
`datastream.connectionProfiles.create`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`)
`datastream.connectionProfiles.createTagBinding`	Owner (`roles/owner`) Datastream Admin (`roles/datastream.admin`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`)
`datastream.connectionProfiles.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`)
`datastream.connectionProfiles.deleteTagBinding`	Owner (`roles/owner`) Datastream Admin (`roles/datastream.admin`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`)
`datastream.connectionProfiles.destinationTypes`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`)
`datastream.connectionProfiles.discover`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`)
`datastream.connectionProfiles.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`)
`datastream.connectionProfiles.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`datastream.connectionProfiles.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`datastream.connectionProfiles.listEffectiveTags`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`)
`datastream.connectionProfiles.listStaticServiceIps`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`)
`datastream.connectionProfiles.listTagBindings`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`)
`datastream.connectionProfiles.setIamPolicy`	Owner (`roles/owner`) Datastream Admin (`roles/datastream.admin`) Security Admin (`roles/iam.securityAdmin`)
`datastream.connectionProfiles.sourceTypes`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`)
`datastream.connectionProfiles.update`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`)
`datastream.locations.fetchStaticIps`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`)
`datastream.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`)
`datastream.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`datastream.objects.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`)
`datastream.objects.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`)
`datastream.objects.startBackfillJob`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`)
`datastream.objects.stopBackfillJob`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`)
`datastream.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`)
`datastream.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`)
`datastream.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`)
`datastream.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`datastream.privateConnections.create`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`)
`datastream.privateConnections.createTagBinding`	Owner (`roles/owner`) Datastream Admin (`roles/datastream.admin`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`)
`datastream.privateConnections.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`)
`datastream.privateConnections.deleteTagBinding`	Owner (`roles/owner`) Datastream Admin (`roles/datastream.admin`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`)
`datastream.privateConnections.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`)
`datastream.privateConnections.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`datastream.privateConnections.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`datastream.privateConnections.listEffectiveTags`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`)
`datastream.privateConnections.listTagBindings`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`)
`datastream.privateConnections.setIamPolicy`	Owner (`roles/owner`) Datastream Admin (`roles/datastream.admin`) Security Admin (`roles/iam.securityAdmin`)
`datastream.routes.create`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`)
`datastream.routes.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`)
`datastream.routes.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`)
`datastream.routes.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`datastream.routes.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`datastream.routes.setIamPolicy`	Owner (`roles/owner`) Datastream Admin (`roles/datastream.admin`) Security Admin (`roles/iam.securityAdmin`)
`datastream.streams.computeState`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`)
`datastream.streams.create`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`)
`datastream.streams.createTagBinding`	Owner (`roles/owner`) Datastream Admin (`roles/datastream.admin`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`)
`datastream.streams.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`)
`datastream.streams.deleteTagBinding`	Owner (`roles/owner`) Datastream Admin (`roles/datastream.admin`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`)
`datastream.streams.fetchErrors`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`)
`datastream.streams.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`)
`datastream.streams.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`datastream.streams.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`datastream.streams.listEffectiveTags`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`)
`datastream.streams.listTagBindings`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`)
`datastream.streams.pause`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`)
`datastream.streams.resume`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`)
`datastream.streams.setIamPolicy`	Owner (`roles/owner`) Datastream Admin (`roles/datastream.admin`) Security Admin (`roles/iam.securityAdmin`)
`datastream.streams.start`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`)
`datastream.streams.update`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`)

Datastream roles and permissions Stay organized with collections Save and categorize content based on your preferences.