Permissions and APIs

To work with Google Cloud data resources in Google Cloud Data Agent Kit, you need certain permissions and APIs enabled.

Data Agent Kit notifies you when you are missing a permission required to accomplish a task. You only need permissions for the services that you use, and the permissions that you need depend on the action that you want to perform.

To gain these permissions, ask your administrator to grant you a role on the project that you are working in that includes the permissions that you need. For more information about granting roles, see Manage access to projects, folders, and organizations. You might also be able to get the required permissions through custom roles or other predefined roles.

Similarly, you must enable the APIs for the services that you use. For more information about enabling APIs, see Enable APIs.

Data analytics

The following roles let you work with Google Cloud data analytics services.

BigQuery
Knowledge Catalog
- Dataplex Catalog Viewer (roles/dataplex.catalogViewer)
Dataflow
- Dataflow Viewer (roles/dataflow.viewer)
BigLake Iceberg catalog
- BigLake Viewer (roles/biglake.viewer)
Managed Service for Apache Spark
- Dataproc Viewer (roles/dataproc.viewer)
- Dataproc Editor (roles/dataproc.editor)

Depending on your use case, you must enable the following data analytics APIs:

BigLake API
BigQuery API
BigQuery Data Transfer Service API
Cloud Composer API
Cloud Resource Manager API
Dataplex API
Dataflow API
Data Lineage API
Dataproc API
Dataproc Release Manager API

Databases

The following roles let you work with Google Cloud databases in Data Agent Kit.

Depending on your use case, you must enable the following database APIs:

AlloyDB API
Cloud Bigtable Admin API
Cloud Bigtable Data API
Cloud Spanner API
Cloud SQL
Cloud SQL Admin API

Other services

The following role lets you work with Google Cloud storage services in Data Agent Kit.

Cloud Storage
- Storage Viewer (roles/storage.viewer)

Depending on your use case, you'll need to enable the following APIs:

Cloud Storage API
Secret Manager API
Vertex AI API

View APIs that you need to enable (extension only)

If you're using the Data Agent Kit extension in your IDE, the extension checks which required APIs are enabled when you select services.

In the activity bar, click the Google Cloud Data Agent Kit icon.
Expand Settings, and then click Settings.
Click Service Integrations.
Select the services that you want to use, and then click Next.

If any required APIs are disabled, the Missing permissions page lists them under APIs to enable.