BigQuery roles and permissions

`bigquery.bireservations.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Resource Editor (roles/bigquery.resourceEditor)

BigQuery Resource Viewer (roles/bigquery.resourceViewer)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery User (roles/bigquery.user)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.bireservations.update`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.capacityCommitments.create`

Owner (roles/owner)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.capacityCommitments.delete`

Owner (roles/owner)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.capacityCommitments.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Resource Editor (roles/bigquery.resourceEditor)

BigQuery Resource Viewer (roles/bigquery.resourceViewer)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery User (roles/bigquery.user)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.capacityCommitments.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Resource Editor (roles/bigquery.resourceEditor)

BigQuery Resource Viewer (roles/bigquery.resourceViewer)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery User (roles/bigquery.user)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.capacityCommitments.update`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.config.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Job User (roles/bigquery.jobUser)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery Studio User (roles/bigquery.studioUser)

BigQuery User (roles/bigquery.user)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Enterprise Knowledge Graph Service Agent (roles/enterpriseknowledgegraph.serviceAgent)
FleetEngine Service Agent (roles/fleetengine.serviceAgent)
Looker Service Agent (roles/looker.serviceAgent)
BigQuery Data Transfer Service Agent (roles/bigquerydatatransfer.serviceAgent)

`bigquery.config.update`

Owner (roles/owner)

Editor (roles/editor)

Assured Workloads Administrator (roles/assuredworkloads.admin)

Assured Workloads Editor (roles/assuredworkloads.editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.connections.create`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Connection Admin (roles/bigquery.connectionAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Chronicle Service Agent (roles/chronicle.serviceAgent)

`bigquery.connections.delegate`

Owner (roles/owner)

BigQuery Admin (roles/bigquery.admin)

BigQuery Connection Admin (roles/bigquery.connectionAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Datastream Bigquery Writer (roles/datastream.bigqueryWriter)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Chronicle Service Agent (roles/chronicle.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Dataplex Discovery BigLake Publishing Service Agent (roles/dataplex.discoveryBigLakePublishingServiceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Datastream Service Agent (roles/datastream.serviceAgent)
BigQuery Data Transfer Service Agent (roles/bigquerydatatransfer.serviceAgent)

`bigquery.connections.delete`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Connection Admin (roles/bigquery.connectionAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Chronicle Service Agent (roles/chronicle.serviceAgent)

`bigquery.connections.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Connection Admin (roles/bigquery.connectionAdmin)

BigQuery Connection User (roles/bigquery.connectionUser)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Data Catalog Admin (roles/datacatalog.admin)

Data Catalog Viewer (roles/datacatalog.viewer)

Datastream Bigquery Writer (roles/datastream.bigqueryWriter)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Datastream Service Agent (roles/datastream.serviceAgent)
Chronicle Service Agent (roles/chronicle.serviceAgent)

`bigquery.connections.getIamPolicy`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Connection Admin (roles/bigquery.connectionAdmin)

BigQuery Connection User (roles/bigquery.connectionUser)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Chronicle Service Agent (roles/chronicle.serviceAgent)

`bigquery.connections.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Connection Admin (roles/bigquery.connectionAdmin)

BigQuery Connection User (roles/bigquery.connectionUser)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Chronicle Service Agent (roles/chronicle.serviceAgent)

`bigquery.connections.setIamPolicy`

Owner (roles/owner)

BigQuery Admin (roles/bigquery.admin)

BigQuery Connection Admin (roles/bigquery.connectionAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.connections.update`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Connection Admin (roles/bigquery.connectionAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Chronicle Service Agent (roles/chronicle.serviceAgent)

`bigquery.connections.updateTag`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Connection Admin (roles/bigquery.connectionAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Data Catalog Admin (roles/datacatalog.admin)

Data Catalog Tag Editor (roles/datacatalog.tagEditor)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Chronicle Service Agent (roles/chronicle.serviceAgent)

`bigquery.connections.use`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Connection Admin (roles/bigquery.connectionAdmin)

BigQuery Connection User (roles/bigquery.connectionUser)

BigQuery Authorized Routine Admin (roles/bigquery.routineAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Dataplex Discovery BigLake Publishing Service Agent (roles/dataplex.discoveryBigLakePublishingServiceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Chronicle Service Agent (roles/chronicle.serviceAgent)

`bigquery.dataPolicies.attach`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery Data Policy Admin (roles/bigquerydatapolicy.admin)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.dataPolicies.create`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery Data Policy Admin (roles/bigquerydatapolicy.admin)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.dataPolicies.delete`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery Data Policy Admin (roles/bigquerydatapolicy.admin)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.dataPolicies.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery Data Policy Admin (roles/bigquerydatapolicy.admin)

BigQuery Data Policy Viewer (roles/bigquerydatapolicy.viewer)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.dataPolicies.getIamPolicy`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery Data Policy Admin (roles/bigquerydatapolicy.admin)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.dataPolicies.getRawData`

Raw Data Reader (roles/bigquerydatapolicy.rawDataReader)

`bigquery.dataPolicies.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery Data Policy Admin (roles/bigquerydatapolicy.admin)

BigQuery Data Policy Viewer (roles/bigquerydatapolicy.viewer)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.dataPolicies.maskedGet`

Masked Reader (roles/bigquerydatapolicy.maskedReader)

`bigquery.dataPolicies.setIamPolicy`

Owner (roles/owner)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery Data Policy Admin (roles/bigquerydatapolicy.admin)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Admin (roles/iam.securityAdmin)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.dataPolicies.update`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery Data Policy Admin (roles/bigquerydatapolicy.admin)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.datasets.create`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery User (roles/bigquery.user)

Commerce Business Enablement Configuration Admin (roles/commercebusinessenablement.admin)

Datastream Bigquery Writer (roles/datastream.bigqueryWriter)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
Vertex AI Model Monitoring Service Agent (roles/aiplatform.modelMonitoringServiceAgent)
Vertex AI RAG Data Service Agent (roles/aiplatform.ragServiceAgent)
Vertex AI Service Agent (roles/aiplatform.serviceAgent)
Vertex AI Tuning Service Agent (roles/aiplatform.tuningServiceAgent)
AutoML Service Agent (roles/automl.serviceAgent)
Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
Chronicle Service Agent (roles/chronicle.serviceAgent)
Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
Contact Center AI Insights Service Agent (roles/contactcenterinsights.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Data Labeling Service Agent (roles/datalabeling.serviceAgent)
Dataplex Discovery Publishing Service Agent (roles/dataplex.discoveryPublishingServiceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Datastream Service Agent (roles/datastream.serviceAgent)
Dialogflow Service Agent (roles/dialogflow.serviceAgent)
Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Enterprise Knowledge Graph Service Agent (roles/enterpriseknowledgegraph.serviceAgent)
Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
Firebase Crashlytics Service Agent (roles/firebasecrashlytics.serviceAgent)
FleetEngine Service Agent (roles/fleetengine.serviceAgent)
Cloud Logging Service Agent (roles/logging.serviceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Observability Service Agent (roles/observability.serviceAgent)
Retail Service Agent (roles/retail.serviceAgent)
Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
StorageInsights Service Agent (roles/storageinsights.serviceAgent)
Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)

`bigquery.datasets.createTagBinding`

Owner (roles/owner)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Tag User (roles/resourcemanager.tagUser)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
DSPM Service Agent (roles/dspm.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.datasets.delete`

Owner (roles/owner)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

`bigquery.datasets.deleteTagBinding`

Owner (roles/owner)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Tag User (roles/resourcemanager.tagUser)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
DSPM Service Agent (roles/dspm.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.datasets.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Data Viewer (roles/bigquery.dataViewer)

BigQuery Metadata Viewer (roles/bigquery.metadataViewer)

BigQuery Authorized Routine Admin (roles/bigquery.routineAdmin)

BigQuery Authorized Routine Data Editor (roles/bigquery.routineDataEditor)

BigQuery Authorized Routine Data Viewer (roles/bigquery.routineDataViewer)

BigQuery Authorized Routine Metadata Viewer (roles/bigquery.routineMetadataViewer)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery User (roles/bigquery.user)

Commerce Business Enablement Configuration Admin (roles/commercebusinessenablement.admin)

Data Catalog Admin (roles/datacatalog.admin)

Data Catalog Viewer (roles/datacatalog.viewer)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

Dataplex Storage Data Reader (roles/dataplex.storageDataReader)

Datastream Bigquery Writer (roles/datastream.bigqueryWriter)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

SLZ BQDW Blueprint Project Level Remediator (roles/securedlandingzone.bqdwProjectRemediator)

Service agent roles

Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
Vertex AI Model Monitoring Service Agent (roles/aiplatform.modelMonitoringServiceAgent)
Vertex AI RAG Data Service Agent (roles/aiplatform.ragServiceAgent)
Vertex AI Service Agent (roles/aiplatform.serviceAgent)
Vertex AI Tuning Service Agent (roles/aiplatform.tuningServiceAgent)
Audit Manager Auditing Service Agent (roles/auditmanager.serviceAgent)
AutoML Service Agent (roles/automl.serviceAgent)
Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
Connected Sheets Service Agent (roles/bigquery.connectedSheetsServiceAgent)
Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
Cloud Asset Service Agent (roles/cloudasset.serviceAgent)
Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
Cloud Security Compliance Service Agent (roles/cloudsecuritycompliance.serviceAgent)
Contact Center AI Insights Service Agent (roles/contactcenterinsights.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Data Labeling Service Agent (roles/datalabeling.serviceAgent)
Dataplex Discovery Publishing Service Agent (roles/dataplex.discoveryPublishingServiceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Datastream Service Agent (roles/datastream.serviceAgent)
Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Enterprise Knowledge Graph Service Agent (roles/enterpriseknowledgegraph.serviceAgent)
Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
Firebase Crashlytics Service Agent (roles/firebasecrashlytics.serviceAgent)
FleetEngine Service Agent (roles/fleetengine.serviceAgent)
Cloud Logging Service Agent (roles/logging.serviceAgent)
Looker Service Agent (roles/looker.serviceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Observability Service Agent (roles/observability.serviceAgent)
Retail Service Agent (roles/retail.serviceAgent)
Security Center Control Service Agent (roles/securitycenter.controlServiceAgent)
Security Health Analytics Service Agent (roles/securitycenter.securityHealthAnalyticsServiceAgent)
Security Center Service Agent (roles/securitycenter.serviceAgent)
Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)

`bigquery.datasets.getIamPolicy`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Data Viewer (roles/bigquery.dataViewer)

BigQuery Metadata Viewer (roles/bigquery.metadataViewer)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery User (roles/bigquery.user)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

SLZ BQDW Blueprint Project Level Remediator (roles/securedlandingzone.bqdwProjectRemediator)

Service agent roles

Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

`bigquery.datasets.link`

Owner (roles/owner)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Logging Service Agent (roles/logging.serviceAgent)
Observability Service Agent (roles/observability.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.datasets.listEffectiveTags`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
DSPM Service Agent (roles/dspm.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.datasets.listSharedDatasetUsage`

Owner (roles/owner)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.datasets.listTagBindings`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
DSPM Service Agent (roles/dspm.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.datasets.setIamPolicy`

Owner (roles/owner)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Admin (roles/iam.securityAdmin)

SLZ BQDW Blueprint Project Level Remediator (roles/securedlandingzone.bqdwProjectRemediator)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.datasets.update`

Owner (roles/owner)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Commerce Business Enablement Configuration Admin (roles/commercebusinessenablement.admin)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

SLZ BQDW Blueprint Project Level Remediator (roles/securedlandingzone.bqdwProjectRemediator)

Service agent roles

Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

`bigquery.datasets.updateTag`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Data Catalog Admin (roles/datacatalog.admin)

Data Catalog Tag Editor (roles/datacatalog.tagEditor)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Customer Engagement Suite Service Agent (roles/ces.serviceAgent)

`bigquery.jobs.create`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Job User (roles/bigquery.jobUser)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery Studio User (roles/bigquery.studioUser)

BigQuery User (roles/bigquery.user)

Datastream Bigquery Writer (roles/datastream.bigqueryWriter)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Service agent roles

Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
Vertex AI Model Monitoring Service Agent (roles/aiplatform.modelMonitoringServiceAgent)
Vertex AI RAG Data Service Agent (roles/aiplatform.ragServiceAgent)
Vertex AI Service Agent (roles/aiplatform.serviceAgent)
Vertex AI Tuning Service Agent (roles/aiplatform.tuningServiceAgent)
AutoML Service Agent (roles/automl.serviceAgent)
Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
Connected Sheets Service Agent (roles/bigquery.connectedSheetsServiceAgent)
BigQuery Data Transfer Service Agent (roles/bigquerydatatransfer.serviceAgent)
BigQuery Omni Service Agent (roles/bigqueryomni.serviceAgent)
Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
Chronicle Service Agent (roles/chronicle.serviceAgent)
Cloud Asset Service Agent (roles/cloudasset.serviceAgent)
Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
Contact Center AI Insights Service Agent (roles/contactcenterinsights.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Data Labeling Service Agent (roles/datalabeling.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Datastream Service Agent (roles/datastream.serviceAgent)
Data Studio Service Agent (roles/datastudio.serviceAgent)
Dialogflow Service Agent (roles/dialogflow.serviceAgent)
Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
DSPM Service Agent (roles/dspm.serviceAgent)
Enterprise Knowledge Graph Service Agent (roles/enterpriseknowledgegraph.serviceAgent)
FleetEngine Service Agent (roles/fleetengine.serviceAgent)
Looker Service Agent (roles/looker.serviceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Monitoring Service Agent (roles/monitoring.notificationServiceAgent)
Retail Service Agent (roles/retail.serviceAgent)
Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)

`bigquery.jobs.createGlobalQuery`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.jobs.delete`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Datastream Bigquery Writer (roles/datastream.bigqueryWriter)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Datastream Service Agent (roles/datastream.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.jobs.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Resource Editor (roles/bigquery.resourceEditor)

BigQuery Resource Viewer (roles/bigquery.resourceViewer)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Datastream Bigquery Writer (roles/datastream.bigqueryWriter)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Service agent roles

Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
Vertex AI Model Monitoring Service Agent (roles/aiplatform.modelMonitoringServiceAgent)
Vertex AI RAG Data Service Agent (roles/aiplatform.ragServiceAgent)
Vertex AI Service Agent (roles/aiplatform.serviceAgent)
Vertex AI Tuning Service Agent (roles/aiplatform.tuningServiceAgent)
Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
Chronicle Service Agent (roles/chronicle.serviceAgent)
Cloud Asset Service Agent (roles/cloudasset.serviceAgent)
Contact Center AI Insights Service Agent (roles/contactcenterinsights.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Data Labeling Service Agent (roles/datalabeling.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Datastream Service Agent (roles/datastream.serviceAgent)
Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Retail Service Agent (roles/retail.serviceAgent)
Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)

`bigquery.jobs.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Resource Editor (roles/bigquery.resourceEditor)

BigQuery Resource Viewer (roles/bigquery.resourceViewer)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery User (roles/bigquery.user)

Datastream Bigquery Writer (roles/datastream.bigqueryWriter)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Datastream Service Agent (roles/datastream.serviceAgent)
Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Retail Service Agent (roles/retail.serviceAgent)
Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

`bigquery.jobs.listAll`

Owner (roles/owner)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Resource Editor (roles/bigquery.resourceEditor)

BigQuery Resource Viewer (roles/bigquery.resourceViewer)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.jobs.listExecutionMetadata`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Resource Editor (roles/bigquery.resourceEditor)

BigQuery Resource Viewer (roles/bigquery.resourceViewer)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.jobs.update`

Owner (roles/owner)

BigQuery Admin (roles/bigquery.admin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Datastream Bigquery Writer (roles/datastream.bigqueryWriter)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Datastream Service Agent (roles/datastream.serviceAgent)
Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Retail Service Agent (roles/retail.serviceAgent)
Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)

`bigquery.models.create`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Vertex AI Service Agent (roles/aiplatform.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)

`bigquery.models.delete`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.models.export`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Data Viewer (roles/bigquery.dataViewer)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

Dataplex Storage Data Reader (roles/dataplex.storageDataReader)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Service agent roles

Vertex AI Service Agent (roles/aiplatform.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Looker Service Agent (roles/looker.serviceAgent)
Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)

`bigquery.models.getData`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Data Viewer (roles/bigquery.dataViewer)

BigQuery Authorized Routine Admin (roles/bigquery.routineAdmin)

BigQuery Authorized Routine Data Editor (roles/bigquery.routineDataEditor)

BigQuery Authorized Routine Data Viewer (roles/bigquery.routineDataViewer)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

Dataplex Storage Data Reader (roles/dataplex.storageDataReader)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Service agent roles

Vertex AI Service Agent (roles/aiplatform.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Looker Service Agent (roles/looker.serviceAgent)
Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)

`bigquery.models.getMetadata`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Data Viewer (roles/bigquery.dataViewer)

BigQuery Metadata Viewer (roles/bigquery.metadataViewer)

BigQuery Authorized Routine Admin (roles/bigquery.routineAdmin)

BigQuery Authorized Routine Data Editor (roles/bigquery.routineDataEditor)

BigQuery Authorized Routine Data Viewer (roles/bigquery.routineDataViewer)

BigQuery Authorized Routine Metadata Viewer (roles/bigquery.routineMetadataViewer)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Data Catalog Admin (roles/datacatalog.admin)

Data Catalog Viewer (roles/datacatalog.viewer)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

Dataplex Storage Data Reader (roles/dataplex.storageDataReader)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Looker Service Agent (roles/looker.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.models.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Data Viewer (roles/bigquery.dataViewer)

BigQuery Metadata Viewer (roles/bigquery.metadataViewer)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery User (roles/bigquery.user)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

Dataplex Storage Data Reader (roles/dataplex.storageDataReader)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Looker Service Agent (roles/looker.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.models.updateData`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.models.updateMetadata`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.models.updateTag`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Data Catalog Admin (roles/datacatalog.admin)

Data Catalog Tag Editor (roles/datacatalog.tagEditor)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.objectRefs.read`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery ObjectRef Admin (roles/bigquery.objectRefAdmin)

BigQuery ObjectRef Reader (roles/bigquery.objectRefReader)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Vertex AI Service Agent (roles/aiplatform.serviceAgent)

`bigquery.objectRefs.write`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery ObjectRef Admin (roles/bigquery.objectRefAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.readsessions.create`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Read Session User (roles/bigquery.readSessionUser)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery Studio User (roles/bigquery.studioUser)

BigQuery User (roles/bigquery.user)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Service agent roles

Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
Vertex AI RAG Data Service Agent (roles/aiplatform.ragServiceAgent)
Vertex AI Service Agent (roles/aiplatform.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Enterprise Knowledge Graph Service Agent (roles/enterpriseknowledgegraph.serviceAgent)
Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)

`bigquery.readsessions.getData`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Read Session User (roles/bigquery.readSessionUser)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery Studio User (roles/bigquery.studioUser)

BigQuery User (roles/bigquery.user)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Service agent roles

Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
Vertex AI RAG Data Service Agent (roles/aiplatform.ragServiceAgent)
Vertex AI Service Agent (roles/aiplatform.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Enterprise Knowledge Graph Service Agent (roles/enterpriseknowledgegraph.serviceAgent)
Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)

`bigquery.readsessions.update`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Read Session User (roles/bigquery.readSessionUser)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery Studio User (roles/bigquery.studioUser)

BigQuery User (roles/bigquery.user)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.reservationAssignments.create`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Resource Editor (roles/bigquery.resourceEditor)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.reservationAssignments.delete`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Resource Editor (roles/bigquery.resourceEditor)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.reservationAssignments.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Resource Editor (roles/bigquery.resourceEditor)

BigQuery Resource Viewer (roles/bigquery.resourceViewer)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery User (roles/bigquery.user)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.reservationAssignments.search`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Resource Editor (roles/bigquery.resourceEditor)

BigQuery Resource Viewer (roles/bigquery.resourceViewer)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery User (roles/bigquery.user)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.reservationGroups.create`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Resource Editor (roles/bigquery.resourceEditor)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.reservationGroups.delete`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Resource Editor (roles/bigquery.resourceEditor)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.reservationGroups.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Resource Editor (roles/bigquery.resourceEditor)

BigQuery Resource Viewer (roles/bigquery.resourceViewer)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery User (roles/bigquery.user)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.reservationGroups.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Resource Editor (roles/bigquery.resourceEditor)

BigQuery Resource Viewer (roles/bigquery.resourceViewer)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery User (roles/bigquery.user)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.reservations.create`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Resource Editor (roles/bigquery.resourceEditor)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.reservations.delete`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Resource Editor (roles/bigquery.resourceEditor)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.reservations.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Resource Editor (roles/bigquery.resourceEditor)

BigQuery Resource Viewer (roles/bigquery.resourceViewer)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery User (roles/bigquery.user)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.reservations.getIamPolicy`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.reservations.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Resource Editor (roles/bigquery.resourceEditor)

BigQuery Resource Viewer (roles/bigquery.resourceViewer)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery User (roles/bigquery.user)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.reservations.listFailoverDatasets`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Resource Editor (roles/bigquery.resourceEditor)

BigQuery Resource Viewer (roles/bigquery.resourceViewer)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery User (roles/bigquery.user)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.reservations.setIamPolicy`

Owner (roles/owner)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.reservations.update`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Resource Editor (roles/bigquery.resourceEditor)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.reservations.use`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Resource Admin (roles/bigquery.resourceAdmin)

BigQuery Resource Editor (roles/bigquery.resourceEditor)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery User (roles/bigquery.user)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.routines.create`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

`bigquery.routines.delete`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.routines.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Data Viewer (roles/bigquery.dataViewer)

BigQuery Metadata Viewer (roles/bigquery.metadataViewer)

BigQuery Authorized Routine Admin (roles/bigquery.routineAdmin)

BigQuery Authorized Routine Data Editor (roles/bigquery.routineDataEditor)

BigQuery Authorized Routine Data Viewer (roles/bigquery.routineDataViewer)

BigQuery Authorized Routine Metadata Viewer (roles/bigquery.routineMetadataViewer)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Data Catalog Admin (roles/datacatalog.admin)

Data Catalog Viewer (roles/datacatalog.viewer)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

Dataplex Storage Data Reader (roles/dataplex.storageDataReader)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Datastream Service Agent (roles/datastream.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

`bigquery.routines.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Data Viewer (roles/bigquery.dataViewer)

BigQuery Metadata Viewer (roles/bigquery.metadataViewer)

BigQuery Authorized Routine Admin (roles/bigquery.routineAdmin)

BigQuery Authorized Routine Data Editor (roles/bigquery.routineDataEditor)

BigQuery Authorized Routine Data Viewer (roles/bigquery.routineDataViewer)

BigQuery Authorized Routine Metadata Viewer (roles/bigquery.routineMetadataViewer)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery User (roles/bigquery.user)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

Dataplex Storage Data Reader (roles/dataplex.storageDataReader)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Datastream Service Agent (roles/datastream.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.routines.update`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

`bigquery.routines.updateTag`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Data Catalog Admin (roles/datacatalog.admin)

Data Catalog Tag Editor (roles/datacatalog.tagEditor)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.rowAccessPolicies.create`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.rowAccessPolicies.delete`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.rowAccessPolicies.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.rowAccessPolicies.getFilteredData`

BigQuery Filtered Data Viewer (roles/bigquery.filteredDataViewer)

`bigquery.rowAccessPolicies.getIamPolicy`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.rowAccessPolicies.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.rowAccessPolicies.overrideTimeTravelRestrictions`

BigQuery Admin (roles/bigquery.admin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.rowAccessPolicies.setIamPolicy`

Owner (roles/owner)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Admin (roles/iam.securityAdmin)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.rowAccessPolicies.update`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.savedqueries.create`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.savedqueries.delete`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.savedqueries.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery User (roles/bigquery.user)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.savedqueries.list`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery User (roles/bigquery.user)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.savedqueries.update`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.tables.create`

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Authorized Routine Admin (roles/bigquery.routineAdmin)

BigQuery Authorized Routine Data Editor (roles/bigquery.routineDataEditor)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

Datastream Bigquery Writer (roles/datastream.bigqueryWriter)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
Vertex AI Model Monitoring Service Agent (roles/aiplatform.modelMonitoringServiceAgent)
Vertex AI RAG Data Service Agent (roles/aiplatform.ragServiceAgent)
Vertex AI Service Agent (roles/aiplatform.serviceAgent)
Vertex AI Tuning Service Agent (roles/aiplatform.tuningServiceAgent)
AutoML Service Agent (roles/automl.serviceAgent)
Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
Connected Sheets Service Agent (roles/bigquery.connectedSheetsServiceAgent)
Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
Chronicle Service Agent (roles/chronicle.serviceAgent)
Cloud Asset Service Agent (roles/cloudasset.serviceAgent)
Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
Contact Center AI Insights Service Agent (roles/contactcenterinsights.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Data Labeling Service Agent (roles/datalabeling.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Datastream Service Agent (roles/datastream.serviceAgent)
Dialogflow Service Agent (roles/dialogflow.serviceAgent)
Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Enterprise Knowledge Graph Service Agent (roles/enterpriseknowledgegraph.serviceAgent)
Firebase Crashlytics Service Agent (roles/firebasecrashlytics.serviceAgent)
Looker Service Agent (roles/looker.serviceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Retail Service Agent (roles/retail.serviceAgent)
Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)

`bigquery.tables.createIndex`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.tables.createSnapshot`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Data Viewer (roles/bigquery.dataViewer)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Service agent roles

Vertex AI RAG Data Service Agent (roles/aiplatform.ragServiceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Looker Service Agent (roles/looker.serviceAgent)
Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)

`bigquery.tables.createTagBinding`

Owner (roles/owner)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Tag User (roles/resourcemanager.tagUser)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
DSPM Service Agent (roles/dspm.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.tables.delete`

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Authorized Routine Admin (roles/bigquery.routineAdmin)

BigQuery Authorized Routine Data Editor (roles/bigquery.routineDataEditor)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Chronicle Service Agent (roles/chronicle.serviceAgent)
Cloud Asset Service Agent (roles/cloudasset.serviceAgent)
Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Vertex AI Tuning Service Agent (roles/aiplatform.tuningServiceAgent)

`bigquery.tables.deleteIndex`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.tables.deleteSnapshot`

Owner (roles/owner)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Vertex AI RAG Data Service Agent (roles/aiplatform.ragServiceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)

`bigquery.tables.deleteTagBinding`

Owner (roles/owner)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Tag User (roles/resourcemanager.tagUser)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
DSPM Service Agent (roles/dspm.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.tables.export`

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Data Viewer (roles/bigquery.dataViewer)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

Dataplex Storage Data Reader (roles/dataplex.storageDataReader)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Service agent roles

Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
Vertex AI Model Monitoring Service Agent (roles/aiplatform.modelMonitoringServiceAgent)
Vertex AI RAG Data Service Agent (roles/aiplatform.ragServiceAgent)
Vertex AI Service Agent (roles/aiplatform.serviceAgent)
AutoML Service Agent (roles/automl.serviceAgent)
Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Looker Service Agent (roles/looker.serviceAgent)
Retail Service Agent (roles/retail.serviceAgent)
Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)

`bigquery.tables.get`

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Data Viewer (roles/bigquery.dataViewer)

BigQuery Metadata Viewer (roles/bigquery.metadataViewer)

BigQuery Authorized Routine Admin (roles/bigquery.routineAdmin)

BigQuery Authorized Routine Data Editor (roles/bigquery.routineDataEditor)

BigQuery Authorized Routine Data Viewer (roles/bigquery.routineDataViewer)

BigQuery Authorized Routine Metadata Viewer (roles/bigquery.routineMetadataViewer)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Data Catalog Admin (roles/datacatalog.admin)

Data Catalog Viewer (roles/datacatalog.viewer)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

Dataplex Storage Data Reader (roles/dataplex.storageDataReader)

Datastream Bigquery Writer (roles/datastream.bigqueryWriter)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Service agent roles

Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
Vertex AI Model Monitoring Service Agent (roles/aiplatform.modelMonitoringServiceAgent)
Vertex AI RAG Data Service Agent (roles/aiplatform.ragServiceAgent)
Vertex AI Service Agent (roles/aiplatform.serviceAgent)
Vertex AI Tuning Service Agent (roles/aiplatform.tuningServiceAgent)
AutoML Service Agent (roles/automl.serviceAgent)
Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
Chronicle Service Agent (roles/chronicle.serviceAgent)
Cloud Asset Service Agent (roles/cloudasset.serviceAgent)
Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
Contact Center AI Insights Service Agent (roles/contactcenterinsights.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Data Labeling Service Agent (roles/datalabeling.serviceAgent)
Datapipelines Service Agent (roles/datapipelines.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Datastream Service Agent (roles/datastream.serviceAgent)
Dialogflow Service Agent (roles/dialogflow.serviceAgent)
Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Enterprise Knowledge Graph Service Agent (roles/enterpriseknowledgegraph.serviceAgent)
Firebase Crashlytics Service Agent (roles/firebasecrashlytics.serviceAgent)
Looker Service Agent (roles/looker.serviceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Retail Service Agent (roles/retail.serviceAgent)
Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)

`bigquery.tables.getData`

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Data Viewer (roles/bigquery.dataViewer)

BigQuery Authorized Routine Admin (roles/bigquery.routineAdmin)

BigQuery Authorized Routine Data Editor (roles/bigquery.routineDataEditor)

BigQuery Authorized Routine Data Viewer (roles/bigquery.routineDataViewer)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

Dataplex Storage Data Reader (roles/dataplex.storageDataReader)

Datastream Bigquery Writer (roles/datastream.bigqueryWriter)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Service agent roles

Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
Vertex AI Model Monitoring Service Agent (roles/aiplatform.modelMonitoringServiceAgent)
Vertex AI RAG Data Service Agent (roles/aiplatform.ragServiceAgent)
Vertex AI Service Agent (roles/aiplatform.serviceAgent)
Vertex AI Tuning Service Agent (roles/aiplatform.tuningServiceAgent)
AutoML Service Agent (roles/automl.serviceAgent)
Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Data Labeling Service Agent (roles/datalabeling.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Datastream Service Agent (roles/datastream.serviceAgent)
Dialogflow Service Agent (roles/dialogflow.serviceAgent)
Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
DSPM Service Agent (roles/dspm.serviceAgent)
Enterprise Knowledge Graph Service Agent (roles/enterpriseknowledgegraph.serviceAgent)
Firebase Crashlytics Service Agent (roles/firebasecrashlytics.serviceAgent)
FleetEngine Service Agent (roles/fleetengine.serviceAgent)
Looker Service Agent (roles/looker.serviceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Retail Service Agent (roles/retail.serviceAgent)
Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)

`bigquery.tables.getIamPolicy`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Data Viewer (roles/bigquery.dataViewer)

BigQuery Metadata Viewer (roles/bigquery.metadataViewer)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.tables.list`

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Data Viewer (roles/bigquery.dataViewer)

BigQuery Metadata Viewer (roles/bigquery.metadataViewer)

BigQuery Authorized Routine Admin (roles/bigquery.routineAdmin)

BigQuery Authorized Routine Data Editor (roles/bigquery.routineDataEditor)

BigQuery Authorized Routine Data Viewer (roles/bigquery.routineDataViewer)

BigQuery Authorized Routine Metadata Viewer (roles/bigquery.routineMetadataViewer)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery User (roles/bigquery.user)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

Dataplex Storage Data Reader (roles/dataplex.storageDataReader)

Datastream Bigquery Writer (roles/datastream.bigqueryWriter)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Service agent roles

Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Datastream Service Agent (roles/datastream.serviceAgent)
Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
DSPM Service Agent (roles/dspm.serviceAgent)
Enterprise Knowledge Graph Service Agent (roles/enterpriseknowledgegraph.serviceAgent)
Looker Service Agent (roles/looker.serviceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Retail Service Agent (roles/retail.serviceAgent)
Vertex AI Tuning Service Agent (roles/aiplatform.tuningServiceAgent)

`bigquery.tables.listEffectiveTags`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
DSPM Service Agent (roles/dspm.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.tables.listTagBindings`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
DSPM Service Agent (roles/dspm.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.tables.replicateData`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Data Viewer (roles/bigquery.dataViewer)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.tables.restoreSnapshot`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Vertex AI RAG Data Service Agent (roles/aiplatform.ragServiceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)

`bigquery.tables.setCategory`

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

`bigquery.tables.setColumnDataPolicy`

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.tables.setIamPolicy`

Owner (roles/owner)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Security Admin (roles/iam.securityAdmin)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.tables.update`

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Authorized Routine Admin (roles/bigquery.routineAdmin)

BigQuery Authorized Routine Data Editor (roles/bigquery.routineDataEditor)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

Datastream Bigquery Writer (roles/datastream.bigqueryWriter)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
Vertex AI Model Monitoring Service Agent (roles/aiplatform.modelMonitoringServiceAgent)
Vertex AI RAG Data Service Agent (roles/aiplatform.ragServiceAgent)
Vertex AI Service Agent (roles/aiplatform.serviceAgent)
Vertex AI Tuning Service Agent (roles/aiplatform.tuningServiceAgent)
AutoML Service Agent (roles/automl.serviceAgent)
Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
Connected Sheets Service Agent (roles/bigquery.connectedSheetsServiceAgent)
Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
Chronicle Service Agent (roles/chronicle.serviceAgent)
Cloud Asset Service Agent (roles/cloudasset.serviceAgent)
Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
Contact Center AI Insights Service Agent (roles/contactcenterinsights.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Datastream Service Agent (roles/datastream.serviceAgent)
Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Enterprise Knowledge Graph Service Agent (roles/enterpriseknowledgegraph.serviceAgent)
Firebase Crashlytics Service Agent (roles/firebasecrashlytics.serviceAgent)
Retail Service Agent (roles/retail.serviceAgent)
Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)

`bigquery.tables.updateData`

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Authorized Routine Admin (roles/bigquery.routineAdmin)

BigQuery Authorized Routine Data Editor (roles/bigquery.routineDataEditor)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Dataplex Storage Data Owner (roles/dataplex.storageDataOwner)

Dataplex Storage Data Writer (roles/dataplex.storageDataWriter)

Datastream Bigquery Writer (roles/datastream.bigqueryWriter)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent)
Vertex AI Model Monitoring Service Agent (roles/aiplatform.modelMonitoringServiceAgent)
Vertex AI RAG Data Service Agent (roles/aiplatform.ragServiceAgent)
Vertex AI Service Agent (roles/aiplatform.serviceAgent)
Vertex AI Tuning Service Agent (roles/aiplatform.tuningServiceAgent)
AutoML Service Agent (roles/automl.serviceAgent)
Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent)
Connected Sheets Service Agent (roles/bigquery.connectedSheetsServiceAgent)
BigQuery Omni Service Agent (roles/bigqueryomni.serviceAgent)
Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
Chronicle Service Agent (roles/chronicle.serviceAgent)
Cloud Asset Service Agent (roles/cloudasset.serviceAgent)
Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
Contact Center AI Insights Service Agent (roles/contactcenterinsights.serviceAgent)
Kubernetes Engine Service Agent (roles/container.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Datastream Service Agent (roles/datastream.serviceAgent)
Dialogflow Service Agent (roles/dialogflow.serviceAgent)
Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Enterprise Knowledge Graph Service Agent (roles/enterpriseknowledgegraph.serviceAgent)
Firebase Crashlytics Service Agent (roles/firebasecrashlytics.serviceAgent)
AI Platform Service Agent (roles/ml.serviceAgent)
Retail Service Agent (roles/retail.serviceAgent)
Spectrum SAS Service Agent (roles/spectrumsas.serviceAgent)
Cloud Vision AI Service Agent (roles/visionai.serviceAgent)
Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent)

`bigquery.tables.updateIndex`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.tables.updateTag`

BigQuery Admin (roles/bigquery.admin)

BigQuery Data Editor (roles/bigquery.dataEditor)

BigQuery Data Owner (roles/bigquery.dataOwner)

BigQuery Security Admin (roles/bigquery.securityAdmin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Data Catalog Admin (roles/datacatalog.admin)

Data Catalog Tag Editor (roles/datacatalog.tagEditor)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

ML Engineer (roles/iam.mlEngineer)

Service agent roles

Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
DLP API Service Agent (roles/dlp.serviceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.transfers.get`

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

BigQuery Admin (roles/bigquery.admin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery User (roles/bigquery.user)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Dataprep Service Agent (roles/dataprep.serviceAgent)
Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)

`bigquery.transfers.update`

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)