BigLake roles and permissions

This page lists the IAM roles and permissions for BigLake. To search through all roles and permissions, see the role and permission index.

BigLake roles

Role	Permissions
BigLake Admin (roles/biglake.admin) Provides full access to all BigLake resources.	biglake.* biglake.catalogs.create biglake.catalogs.delete biglake.catalogs.get biglake.catalogs.getIamPolicy biglake.catalogs.list biglake.catalogs.setIamPolicy biglake.catalogs.update biglake.databases.create biglake.databases.delete biglake.databases.get biglake.databases.list biglake.databases.update biglake.locks.check biglake.locks.create biglake.locks.delete biglake.locks.list biglake.namespaces.create biglake.namespaces.delete biglake.namespaces.get biglake.namespaces.getIamPolicy biglake.namespaces.list biglake.namespaces.setIamPolicy biglake.namespaces.update biglake.tables.create biglake.tables.createPartitions biglake.tables.delete biglake.tables.deletePartitions biglake.tables.get biglake.tables.getData biglake.tables.getIamPolicy biglake.tables.list biglake.tables.listPartitions biglake.tables.lock biglake.tables.register biglake.tables.setIamPolicy biglake.tables.update biglake.tables.updateData biglake.tables.updatePartitions resourcemanager.projects.get resourcemanager.projects.list
BigLake Editor ^Beta (roles/biglake.editor) Provides read and write access to all BigLake resources.	biglake.catalogs.create biglake.catalogs.delete biglake.catalogs.get biglake.catalogs.getIamPolicy biglake.catalogs.list biglake.catalogs.update biglake.namespaces.create biglake.namespaces.delete biglake.namespaces.get biglake.namespaces.getIamPolicy biglake.namespaces.list biglake.namespaces.update biglake.tables.create biglake.tables.createPartitions biglake.tables.delete biglake.tables.deletePartitions biglake.tables.get biglake.tables.getData biglake.tables.getIamPolicy biglake.tables.list biglake.tables.listPartitions biglake.tables.update biglake.tables.updateData biglake.tables.updatePartitions resourcemanager.projects.get resourcemanager.projects.list
BigLake Viewer (roles/biglake.viewer) Provides read-only access to all BigLake resources.	biglake.catalogs.get biglake.catalogs.getIamPolicy biglake.catalogs.list biglake.databases.get biglake.databases.list biglake.locks.list biglake.namespaces.get biglake.namespaces.getIamPolicy biglake.namespaces.list biglake.tables.get biglake.tables.getData biglake.tables.getIamPolicy biglake.tables.list biglake.tables.listPartitions resourcemanager.projects.get resourcemanager.projects.list
BigLake Metadata Viewer ^Beta (roles/biglake.metadataViewer) Provides read-only metadata access to all BigLake resources.	biglake.catalogs.get biglake.catalogs.getIamPolicy biglake.catalogs.list biglake.namespaces.get biglake.namespaces.getIamPolicy biglake.namespaces.list biglake.tables.get biglake.tables.getIamPolicy biglake.tables.list biglake.tables.listPartitions resourcemanager.projects.get resourcemanager.projects.list

BigLake permissions

Permission	Included in roles
biglake.catalogs.create	Owner (roles/owner) Editor (roles/editor) BigLake Admin (roles/biglake.admin) BigLake Editor (roles/biglake.editor) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin) Writer (roles/writer)
biglake.catalogs.delete	Owner (roles/owner) Editor (roles/editor) BigLake Admin (roles/biglake.admin) BigLake Editor (roles/biglake.editor) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin) Writer (roles/writer)
biglake.catalogs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigLake Admin (roles/biglake.admin) BigLake Editor (roles/biglake.editor) BigLake Viewer (roles/biglake.viewer) Admin (roles/admin) BigLake Metadata Viewer (roles/biglake.metadataViewer) Databases Admin (roles/iam.databasesAdmin) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Dataplex Service Agent (roles/dataplex.serviceAgent) Dataproc Service Agent (roles/dataproc.serviceAgent)
biglake.catalogs.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigLake Admin (roles/biglake.admin) BigLake Editor (roles/biglake.editor) BigLake Viewer (roles/biglake.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Admin (roles/admin) BigLake Metadata Viewer (roles/biglake.metadataViewer) Databases Admin (roles/iam.databasesAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
biglake.catalogs.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigLake Admin (roles/biglake.admin) BigLake Editor (roles/biglake.editor) BigLake Viewer (roles/biglake.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Admin (roles/admin) BigLake Metadata Viewer (roles/biglake.metadataViewer) Databases Admin (roles/iam.databasesAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
biglake.catalogs.setIamPolicy	Owner (roles/owner) BigLake Admin (roles/biglake.admin) Security Admin (roles/iam.securityAdmin) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin)
biglake.catalogs.update	Owner (roles/owner) Editor (roles/editor) BigLake Admin (roles/biglake.admin) BigLake Editor (roles/biglake.editor) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin) Writer (roles/writer)
biglake.databases.create	Owner (roles/owner) Editor (roles/editor) BigLake Admin (roles/biglake.admin) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin) Writer (roles/writer)
biglake.databases.delete	Owner (roles/owner) Editor (roles/editor) BigLake Admin (roles/biglake.admin) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin) Writer (roles/writer)
biglake.databases.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigLake Admin (roles/biglake.admin) BigLake Viewer (roles/biglake.viewer) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
biglake.databases.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigLake Admin (roles/biglake.admin) BigLake Viewer (roles/biglake.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
biglake.databases.update	Owner (roles/owner) Editor (roles/editor) BigLake Admin (roles/biglake.admin) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin) Writer (roles/writer)
biglake.locks.check	Owner (roles/owner) Editor (roles/editor) BigLake Admin (roles/biglake.admin) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin) Writer (roles/writer)
biglake.locks.create	Owner (roles/owner) Editor (roles/editor) BigLake Admin (roles/biglake.admin) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin) Writer (roles/writer)
biglake.locks.delete	Owner (roles/owner) Editor (roles/editor) BigLake Admin (roles/biglake.admin) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin) Writer (roles/writer)
biglake.locks.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigLake Admin (roles/biglake.admin) BigLake Viewer (roles/biglake.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
biglake.namespaces.create	Owner (roles/owner) Editor (roles/editor) BigLake Admin (roles/biglake.admin) BigLake Editor (roles/biglake.editor) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin) Writer (roles/writer)
biglake.namespaces.delete	Owner (roles/owner) Editor (roles/editor) BigLake Admin (roles/biglake.admin) BigLake Editor (roles/biglake.editor) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin) Writer (roles/writer)
biglake.namespaces.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigLake Admin (roles/biglake.admin) BigLake Editor (roles/biglake.editor) BigLake Viewer (roles/biglake.viewer) Admin (roles/admin) BigLake Metadata Viewer (roles/biglake.metadataViewer) Databases Admin (roles/iam.databasesAdmin) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
biglake.namespaces.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigLake Admin (roles/biglake.admin) BigLake Editor (roles/biglake.editor) BigLake Viewer (roles/biglake.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Admin (roles/admin) BigLake Metadata Viewer (roles/biglake.metadataViewer) Databases Admin (roles/iam.databasesAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
biglake.namespaces.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigLake Admin (roles/biglake.admin) BigLake Editor (roles/biglake.editor) BigLake Viewer (roles/biglake.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Admin (roles/admin) BigLake Metadata Viewer (roles/biglake.metadataViewer) Databases Admin (roles/iam.databasesAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
biglake.namespaces.setIamPolicy	Owner (roles/owner) BigLake Admin (roles/biglake.admin) Security Admin (roles/iam.securityAdmin) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin)
biglake.namespaces.update	Owner (roles/owner) Editor (roles/editor) BigLake Admin (roles/biglake.admin) BigLake Editor (roles/biglake.editor) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin) Writer (roles/writer)
biglake.tables.create	Owner (roles/owner) Editor (roles/editor) BigLake Admin (roles/biglake.admin) BigLake Editor (roles/biglake.editor) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin) Writer (roles/writer)
biglake.tables.createPartitions	Owner (roles/owner) Editor (roles/editor) BigLake Admin (roles/biglake.admin) BigLake Editor (roles/biglake.editor) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin) Writer (roles/writer)
biglake.tables.delete	Owner (roles/owner) Editor (roles/editor) BigLake Admin (roles/biglake.admin) BigLake Editor (roles/biglake.editor) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin) Writer (roles/writer)
biglake.tables.deletePartitions	Owner (roles/owner) Editor (roles/editor) BigLake Admin (roles/biglake.admin) BigLake Editor (roles/biglake.editor) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin) Writer (roles/writer)
biglake.tables.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigLake Admin (roles/biglake.admin) BigLake Editor (roles/biglake.editor) BigLake Viewer (roles/biglake.viewer) Admin (roles/admin) BigLake Metadata Viewer (roles/biglake.metadataViewer) Databases Admin (roles/iam.databasesAdmin) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
biglake.tables.getData	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigLake Admin (roles/biglake.admin) BigLake Editor (roles/biglake.editor) BigLake Viewer (roles/biglake.viewer) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
biglake.tables.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigLake Admin (roles/biglake.admin) BigLake Editor (roles/biglake.editor) BigLake Viewer (roles/biglake.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Admin (roles/admin) BigLake Metadata Viewer (roles/biglake.metadataViewer) Databases Admin (roles/iam.databasesAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
biglake.tables.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigLake Admin (roles/biglake.admin) BigLake Editor (roles/biglake.editor) BigLake Viewer (roles/biglake.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Admin (roles/admin) BigLake Metadata Viewer (roles/biglake.metadataViewer) Databases Admin (roles/iam.databasesAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Dataplex Service Agent (roles/dataplex.serviceAgent)
biglake.tables.listPartitions	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigLake Admin (roles/biglake.admin) BigLake Editor (roles/biglake.editor) BigLake Viewer (roles/biglake.viewer) Admin (roles/admin) BigLake Metadata Viewer (roles/biglake.metadataViewer) Databases Admin (roles/iam.databasesAdmin) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
biglake.tables.lock	Owner (roles/owner) Editor (roles/editor) BigLake Admin (roles/biglake.admin) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin) Writer (roles/writer)
biglake.tables.register	Owner (roles/owner) BigLake Admin (roles/biglake.admin) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin)
biglake.tables.setIamPolicy	Owner (roles/owner) BigLake Admin (roles/biglake.admin) Security Admin (roles/iam.securityAdmin) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin)
biglake.tables.update	Owner (roles/owner) Editor (roles/editor) BigLake Admin (roles/biglake.admin) BigLake Editor (roles/biglake.editor) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin) Writer (roles/writer)
biglake.tables.updateData	Owner (roles/owner) Editor (roles/editor) BigLake Admin (roles/biglake.admin) BigLake Editor (roles/biglake.editor) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin) Writer (roles/writer)
biglake.tables.updatePartitions	Owner (roles/owner) Editor (roles/editor) BigLake Admin (roles/biglake.admin) BigLake Editor (roles/biglake.editor) Admin (roles/admin) Databases Admin (roles/iam.databasesAdmin) Writer (roles/writer)