spanner.backupOperations.cancel

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

spanner.backupOperations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

Cloud Spanner Backup Writer (roles/spanner.backupWriter)

spanner.backupOperations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

Cloud Spanner Backup Writer (roles/spanner.backupWriter)

spanner.backupSchedules.create

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

Cloud Spanner Backup Writer (roles/spanner.backupWriter)

spanner.backupSchedules.delete

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

spanner.backupSchedules.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

Cloud Spanner Backup Writer (roles/spanner.backupWriter)

spanner.backupSchedules.getIamPolicy

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

spanner.backupSchedules.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

Cloud Spanner Backup Writer (roles/spanner.backupWriter)

spanner.backupSchedules.setIamPolicy

Owner (roles/owner)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Cloud Spanner Admin (roles/spanner.admin)

spanner.backupSchedules.update

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

spanner.backups.copy

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

Cloud Spanner Backup Writer (roles/spanner.backupWriter)

spanner.backups.create

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

Cloud Spanner Backup Writer (roles/spanner.backupWriter)

spanner.backups.delete

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

spanner.backups.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

Cloud Spanner Backup Writer (roles/spanner.backupWriter)

Cloud Spanner Restore Admin (roles/spanner.restoreAdmin)

spanner.backups.getIamPolicy

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

spanner.backups.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

Cloud Spanner Backup Writer (roles/spanner.backupWriter)

Cloud Spanner Restore Admin (roles/spanner.restoreAdmin)

spanner.backups.restoreDatabase

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Restore Admin (roles/spanner.restoreAdmin)

spanner.backups.setIamPolicy

Owner (roles/owner)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

spanner.backups.update

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

spanner.databaseOperations.cancel

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Database User (roles/spanner.databaseUser)

Cloud Spanner Restore Admin (roles/spanner.restoreAdmin)

Service agent roles

• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)

spanner.databaseOperations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Database User (roles/spanner.databaseUser)

Cloud Spanner Restore Admin (roles/spanner.restoreAdmin)

Service agent roles

• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

spanner.databaseOperations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Database User (roles/spanner.databaseUser)

Cloud Spanner Restore Admin (roles/spanner.restoreAdmin)

Service agent roles

• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)

spanner.databaseRoles.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Fine-grained Access User (roles/spanner.fineGrainedAccessUser)

spanner.databases.adapt

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Database User (roles/spanner.databaseUser)

Service agent roles

• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)

spanner.databases.addSplitPoints

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

spanner.databases.beginOrRollbackReadWriteTransaction

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Database User (roles/spanner.databaseUser)

Service agent roles

• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)

spanner.databases.beginPartitionedDmlTransaction

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Database User (roles/spanner.databaseUser)

Service agent roles

• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)

spanner.databases.beginReadOnlyTransaction

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Database Reader (roles/spanner.databaseReader)

Cloud Spanner Database Reader with DataBoost (roles/spanner.databaseReaderWithDataBoost)

Cloud Spanner Database User (roles/spanner.databaseUser)

Service agent roles

• Datastream Service Agent (roles/datastream.serviceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• Cloud Spanner API Service Agent (roles/spanner.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)

spanner.databases.changequorum

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Database User (roles/spanner.databaseUser)

Service agent roles

• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)

spanner.databases.create

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Restore Admin (roles/spanner.restoreAdmin)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

spanner.databases.createBackup

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

Cloud Spanner Backup Writer (roles/spanner.backupWriter)

spanner.databases.drop

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

spanner.databases.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

Cloud Spanner Backup Writer (roles/spanner.backupWriter)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Database Reader (roles/spanner.databaseReader)

Cloud Spanner Database Reader with DataBoost (roles/spanner.databaseReaderWithDataBoost)

Cloud Spanner Database User (roles/spanner.databaseUser)

Cloud Spanner Restore Admin (roles/spanner.restoreAdmin)

Cloud Spanner Viewer (roles/spanner.viewer)

Service agent roles

• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

spanner.databases.getDdl

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Database Reader (roles/spanner.databaseReader)

Cloud Spanner Database Reader with DataBoost (roles/spanner.databaseReaderWithDataBoost)

Cloud Spanner Database User (roles/spanner.databaseUser)

Service agent roles

• Datastream Service Agent (roles/datastream.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)

spanner.databases.getIamPolicy

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

spanner.databases.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

Cloud Spanner Backup Writer (roles/spanner.backupWriter)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Restore Admin (roles/spanner.restoreAdmin)

Cloud Spanner Viewer (roles/spanner.viewer)

Service agent roles

• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)

spanner.databases.partitionQuery

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Database Reader (roles/spanner.databaseReader)

Cloud Spanner Database Reader with DataBoost (roles/spanner.databaseReaderWithDataBoost)

Cloud Spanner Database User (roles/spanner.databaseUser)

Service agent roles

• Datastream Service Agent (roles/datastream.serviceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• Cloud Spanner API Service Agent (roles/spanner.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)

spanner.databases.partitionRead

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Database Reader (roles/spanner.databaseReader)

Cloud Spanner Database Reader with DataBoost (roles/spanner.databaseReaderWithDataBoost)

Cloud Spanner Database User (roles/spanner.databaseUser)

Service agent roles

• Datastream Service Agent (roles/datastream.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)

spanner.databases.read

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Database Reader (roles/spanner.databaseReader)

Cloud Spanner Database Reader with DataBoost (roles/spanner.databaseReaderWithDataBoost)

Cloud Spanner Database User (roles/spanner.databaseUser)

Service agent roles

• Datastream Service Agent (roles/datastream.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)

spanner.databases.select

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Database Reader (roles/spanner.databaseReader)

Cloud Spanner Database Reader with DataBoost (roles/spanner.databaseReaderWithDataBoost)

Cloud Spanner Database User (roles/spanner.databaseUser)

Service agent roles

• Datastream Service Agent (roles/datastream.serviceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• Cloud Spanner API Service Agent (roles/spanner.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)

spanner.databases.setIamPolicy

Owner (roles/owner)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

spanner.databases.update

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

spanner.databases.updateDdl

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Database User (roles/spanner.databaseUser)

Service agent roles

• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

spanner.databases.useDataBoost

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Database Reader with DataBoost (roles/spanner.databaseReaderWithDataBoost)

Service agent roles

• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• Cloud Spanner API Service Agent (roles/spanner.serviceAgent)
• Datastream Service Agent (roles/datastream.serviceAgent)

spanner.databases.useRoleBasedAccess

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Fine-grained Access User (roles/spanner.fineGrainedAccessUser)

Service agent roles

• Datastream Service Agent (roles/datastream.serviceAgent)

spanner.databases.write

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Database User (roles/spanner.databaseUser)

Service agent roles

• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)

spanner.instanceConfigOperations.cancel

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

spanner.instanceConfigOperations.delete

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

spanner.instanceConfigOperations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

spanner.instanceConfigOperations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

spanner.instanceConfigs.create

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

spanner.instanceConfigs.delete

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

spanner.instanceConfigs.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Databases Admin (roles/iam.databasesAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Viewer (roles/spanner.viewer)

Service agent roles

• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)

spanner.instanceConfigs.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Viewer (roles/spanner.viewer)

Service agent roles

• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)

spanner.instanceConfigs.update

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

spanner.instanceOperations.cancel

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

spanner.instanceOperations.delete

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

spanner.instanceOperations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

spanner.instanceOperations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

spanner.instancePartitionOperations.cancel

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

spanner.instancePartitionOperations.delete

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

spanner.instancePartitionOperations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

spanner.instancePartitionOperations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

spanner.instancePartitions.create

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

spanner.instancePartitions.delete

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

spanner.instancePartitions.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

Cloud Spanner Backup Writer (roles/spanner.backupWriter)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Database Reader (roles/spanner.databaseReader)

Cloud Spanner Database Reader with DataBoost (roles/spanner.databaseReaderWithDataBoost)

Cloud Spanner Database User (roles/spanner.databaseUser)

Cloud Spanner Restore Admin (roles/spanner.restoreAdmin)

Cloud Spanner Viewer (roles/spanner.viewer)

Service agent roles

• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)

spanner.instancePartitions.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Restore Admin (roles/spanner.restoreAdmin)

Cloud Spanner Viewer (roles/spanner.viewer)

Service agent roles

• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)

spanner.instancePartitions.update

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

spanner.instances.create

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

spanner.instances.createTagBinding

Owner (roles/owner)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Tag User (roles/resourcemanager.tagUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Restore Admin (roles/spanner.restoreAdmin)

spanner.instances.delete

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

spanner.instances.deleteTagBinding

Owner (roles/owner)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Tag User (roles/resourcemanager.tagUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Restore Admin (roles/spanner.restoreAdmin)

spanner.instances.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

Cloud Spanner Backup Writer (roles/spanner.backupWriter)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Database Reader (roles/spanner.databaseReader)

Cloud Spanner Database Reader with DataBoost (roles/spanner.databaseReaderWithDataBoost)

Cloud Spanner Database User (roles/spanner.databaseUser)

Cloud Spanner Restore Admin (roles/spanner.restoreAdmin)

Cloud Spanner Viewer (roles/spanner.viewer)

Service agent roles

• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)
• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

spanner.instances.getIamPolicy

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

spanner.instances.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Restore Admin (roles/spanner.restoreAdmin)

Cloud Spanner Viewer (roles/spanner.viewer)

Service agent roles

• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)

spanner.instances.listEffectiveTags

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Restore Admin (roles/spanner.restoreAdmin)

Cloud Spanner Viewer (roles/spanner.viewer)

Service agent roles

• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)

spanner.instances.listTagBindings

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Backup Admin (roles/spanner.backupAdmin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Restore Admin (roles/spanner.restoreAdmin)

Cloud Spanner Viewer (roles/spanner.viewer)

Service agent roles

• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)

spanner.instances.setIamPolicy

Owner (roles/owner)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Cloud Spanner Admin (roles/spanner.admin)

spanner.instances.update

Owner (roles/owner)

Editor (roles/editor)

Databases Admin (roles/iam.databasesAdmin)

Cloud Spanner Admin (roles/spanner.admin)

Service agent roles

• Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)

spanner.sessions.create

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Database Reader (roles/spanner.databaseReader)

Cloud Spanner Database Reader with DataBoost (roles/spanner.databaseReaderWithDataBoost)

Cloud Spanner Database User (roles/spanner.databaseUser)

Service agent roles

• Datastream Service Agent (roles/datastream.serviceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• Cloud Spanner API Service Agent (roles/spanner.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)

spanner.sessions.delete

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Database Reader (roles/spanner.databaseReader)

Cloud Spanner Database Reader with DataBoost (roles/spanner.databaseReaderWithDataBoost)

Cloud Spanner Database User (roles/spanner.databaseUser)

Service agent roles

• Datastream Service Agent (roles/datastream.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)

spanner.sessions.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Database Reader (roles/spanner.databaseReader)

Cloud Spanner Database Reader with DataBoost (roles/spanner.databaseReaderWithDataBoost)

Cloud Spanner Database User (roles/spanner.databaseUser)

Service agent roles

• Datastream Service Agent (roles/datastream.serviceAgent)
• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)

spanner.sessions.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Cloud Spanner Admin (roles/spanner.admin)

Cloud Spanner Database Admin (roles/spanner.databaseAdmin)

Cloud Spanner Database Reader (roles/spanner.databaseReader)

Cloud Spanner Database Reader with DataBoost (roles/spanner.databaseReaderWithDataBoost)

Cloud Spanner Database User (roles/spanner.databaseUser)

Service agent roles

• Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent)