Database Insights roles and permissions

This page lists the IAM roles and permissions for Database Insights. To search through all roles and permissions, see the role and permission index.

Database Insights roles

Role	Permissions
Database Insights Admin (roles/databaseinsights.admin) Admin role for Database Insights	databaseinsights.* databaseinsights.activeQueries.fetch databaseinsights.activeQuery.terminate databaseinsights.activitySummary.fetch databaseinsights.aggregatedEvents.query databaseinsights.aggregatedStats.query databaseinsights.clusterEvents.query databaseinsights.databaseIssues.troubleshoot databaseinsights.dbCenter.query databaseinsights.dbPerformance.query databaseinsights.indexRecommendations.query databaseinsights.instanceEvents.query databaseinsights.locations.get databaseinsights.locations.list databaseinsights.performanceIssues.detect databaseinsights.performanceIssues.investigate databaseinsights.queryMetrics.fetch databaseinsights.queryStats.fetch databaseinsights.queryTimeSeries.fetch databaseinsights.recommendations.query databaseinsights.resourceRecommendations.query databaseinsights.systemMetrics.fetch databaseinsights.timeSeries.query databaseinsights.virtualDbxAgent.query databaseinsights.waitEventStats.fetch databaseinsights.waitEventTimeSeries.fetch databaseinsights.workloadRecommendations.fetch resourcemanager.projects.get resourcemanager.projects.list
Database Insights viewer (roles/databaseinsights.viewer) Viewer role for Database Insights data	databaseinsights.activeQueries.fetch databaseinsights.activitySummary.fetch databaseinsights.aggregatedStats.query databaseinsights.databaseIssues.troubleshoot databaseinsights.dbCenter.query databaseinsights.dbPerformance.query databaseinsights.indexRecommendations.query databaseinsights.locations.* databaseinsights.locations.get databaseinsights.locations.list databaseinsights.performanceIssues.* databaseinsights.performanceIssues.detect databaseinsights.performanceIssues.investigate databaseinsights.queryMetrics.fetch databaseinsights.queryStats.fetch databaseinsights.queryTimeSeries.fetch databaseinsights.recommendations.query databaseinsights.resourceRecommendations.query databaseinsights.systemMetrics.fetch databaseinsights.timeSeries.query databaseinsights.virtualDbxAgent.query databaseinsights.waitEventStats.fetch databaseinsights.waitEventTimeSeries.fetch databaseinsights.workloadRecommendations.fetch resourcemanager.projects.get resourcemanager.projects.list
Database Insights assistant viewer ^Beta (roles/databaseinsights.assistantViewer) Viewer role for Database Insights assistant data	databaseinsights.performanceIssues.* databaseinsights.performanceIssues.detect databaseinsights.performanceIssues.investigate
Events Service viewer (roles/databaseinsights.eventsViewer) Viewer role for Events Service data	databaseinsights.aggregatedEvents.query databaseinsights.clusterEvents.query databaseinsights.instanceEvents.query
Database Insights intelligence viewer ^Beta (roles/databaseinsights.intelligenceViewer) Viewer role for Database Insights intelligence data	databaseinsights.databaseIssues.troubleshoot databaseinsights.dbCenter.query databaseinsights.dbPerformance.query databaseinsights.indexRecommendations.query databaseinsights.queryMetrics.fetch databaseinsights.queryStats.fetch databaseinsights.queryTimeSeries.fetch databaseinsights.systemMetrics.fetch databaseinsights.waitEventStats.fetch databaseinsights.waitEventTimeSeries.fetch
Database Insights monitoring viewer (roles/databaseinsights.monitoringViewer) Viewer role for Database Insights monitoring data	databaseinsights.activeQueries.fetch databaseinsights.activitySummary.fetch databaseinsights.aggregatedStats.query databaseinsights.locations.* databaseinsights.locations.get databaseinsights.locations.list databaseinsights.queryStats.fetch databaseinsights.queryTimeSeries.fetch databaseinsights.timeSeries.query databaseinsights.waitEventStats.fetch databaseinsights.waitEventTimeSeries.fetch databaseinsights.workloadRecommendations.fetch resourcemanager.projects.get resourcemanager.projects.list
Database Insights performing operations (roles/databaseinsights.operationsAdmin) Admin role for performing Database Insights operations	databaseinsights.activeQuery.terminate
Database Insights recommendation viewer (roles/databaseinsights.recommendationViewer) Viewer role for Database Insights recommendation data	databaseinsights.indexRecommendations.query databaseinsights.locations.* databaseinsights.locations.get databaseinsights.locations.list databaseinsights.recommendations.query databaseinsights.resourceRecommendations.query databaseinsights.workloadRecommendations.fetch resourcemanager.projects.get resourcemanager.projects.list
Database Insights virtual Dbx viewer ^Beta (roles/databaseinsights.virtualDbxViewer) Viewer role for Database Insights virtual Dbx data	databaseinsights.virtualDbxAgent.query

Service agent roles

Service agent roles should only be granted to service agents.

Role

Permissions

Database Insights Service Agent (roles/databaseinsights.serviceAgent) Default role for the Database Insights service agent. Warning: Do not grant service agent roles to any principals except service agents.

alloydb.clusters.get alloydb.clusters.list alloydb.databases.list alloydb.instances.get alloydb.instances.list alloydb.locations.* alloydb.locations.get alloydb.locations.list alloydb.operations.get alloydb.operations.list alloydb.supportedDatabaseFlags.list bigtable.appProfiles.list bigtable.backups.list bigtable.clusters.get bigtable.clusters.list bigtable.instances.get bigtable.instances.list bigtable.locations.list bigtable.tables.get bigtable.tables.list cloudsql.backupRuns.list cloudsql.databases.get cloudsql.databases.list cloudsql.instances.get cloudsql.instances.list cloudtrace.traces.patch databasecenter.databaseGroups.list databasecenter.fleetStats.list databasecenter.userLabels.list databasecenter.userTags.list databaseinsights.databaseIssues.troubleshoot databaseinsights.dbCenter.query databaseinsights.dbPerformance.query databaseinsights.indexRecommendations.query databaseinsights.queryMetrics.fetch databaseinsights.queryStats.fetch databaseinsights.queryTimeSeries.fetch databaseinsights.systemMetrics.fetch databaseinsights.virtualDbxAgent.query databaseinsights.waitEventStats.fetch databaseinsights.waitEventTimeSeries.fetch datastore.backupSchedules.list datastore.databases.getMetadata datastore.databases.list datastore.locations.list datastore.operations.get datastore.operations.list discoveryengine.collections.get discoveryengine.dataConnectors.acquireAccessToken discoveryengine.dataConnectors.get logging.logEntries.create logging.logEntries.list logging.logEntries.route monitoring.metricsScopes.link monitoring.timeSeries.list resourcemanager.projects.get serviceusage.operations.get serviceusage.services.get serviceusage.services.list serviceusage.services.use spanner.backupOperations.list spanner.databaseOperations.list spanner.databaseRoles.list spanner.databases.get spanner.databases.list spanner.instanceConfigs.get spanner.instanceConfigs.list spanner.instanceOperations.list spanner.instancePartitions.list spanner.instances.get spanner.instances.list telemetry.traces.write

Database Insights permissions

Permission	Included in roles
databaseinsights.activeQueries.fetch	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Insights Admin (roles/databaseinsights.admin) Database Insights viewer (roles/databaseinsights.viewer) Admin (roles/admin) Database Insights monitoring viewer (roles/databaseinsights.monitoringViewer) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
databaseinsights.activeQuery.terminate	Owner (roles/owner) Editor (roles/editor) Database Insights Admin (roles/databaseinsights.admin) Admin (roles/admin) Database Insights performing operations (roles/databaseinsights.operationsAdmin) Writer (roles/writer)
databaseinsights.activitySummary.fetch	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Insights Admin (roles/databaseinsights.admin) Database Insights viewer (roles/databaseinsights.viewer) Admin (roles/admin) Database Insights monitoring viewer (roles/databaseinsights.monitoringViewer) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
databaseinsights.aggregatedEvents.query	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Insights Admin (roles/databaseinsights.admin) Admin (roles/admin) Events Service viewer (roles/databaseinsights.eventsViewer) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
databaseinsights.aggregatedStats.query	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Insights Admin (roles/databaseinsights.admin) Database Insights viewer (roles/databaseinsights.viewer) Admin (roles/admin) Database Insights monitoring viewer (roles/databaseinsights.monitoringViewer) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
databaseinsights.clusterEvents.query	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Insights Admin (roles/databaseinsights.admin) Admin (roles/admin) Events Service viewer (roles/databaseinsights.eventsViewer) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
databaseinsights.databaseIssues.troubleshoot	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Insights Admin (roles/databaseinsights.admin) Database Insights viewer (roles/databaseinsights.viewer) Admin (roles/admin) Database Insights intelligence viewer (roles/databaseinsights.intelligenceViewer) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Database Insights Service Agent (roles/databaseinsights.serviceAgent)
databaseinsights.dbCenter.query	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Insights Admin (roles/databaseinsights.admin) Database Insights viewer (roles/databaseinsights.viewer) Admin (roles/admin) Database Insights intelligence viewer (roles/databaseinsights.intelligenceViewer) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Database Insights Service Agent (roles/databaseinsights.serviceAgent)
databaseinsights.dbPerformance.query	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Insights Admin (roles/databaseinsights.admin) Database Insights viewer (roles/databaseinsights.viewer) Admin (roles/admin) Database Insights intelligence viewer (roles/databaseinsights.intelligenceViewer) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Database Insights Service Agent (roles/databaseinsights.serviceAgent)
databaseinsights.indexRecommendations.query	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Insights Admin (roles/databaseinsights.admin) Database Insights viewer (roles/databaseinsights.viewer) Admin (roles/admin) Database Insights intelligence viewer (roles/databaseinsights.intelligenceViewer) Database Insights recommendation viewer (roles/databaseinsights.recommendationViewer) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Database Insights Service Agent (roles/databaseinsights.serviceAgent)
databaseinsights.instanceEvents.query	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Insights Admin (roles/databaseinsights.admin) Admin (roles/admin) Events Service viewer (roles/databaseinsights.eventsViewer) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
databaseinsights.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Insights Admin (roles/databaseinsights.admin) Database Insights viewer (roles/databaseinsights.viewer) Admin (roles/admin) Database Insights monitoring viewer (roles/databaseinsights.monitoringViewer) Database Insights recommendation viewer (roles/databaseinsights.recommendationViewer) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
databaseinsights.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Insights Admin (roles/databaseinsights.admin) Database Insights viewer (roles/databaseinsights.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Admin (roles/admin) Database Insights monitoring viewer (roles/databaseinsights.monitoringViewer) Database Insights recommendation viewer (roles/databaseinsights.recommendationViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
databaseinsights.performanceIssues.detect	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Insights Admin (roles/databaseinsights.admin) Database Insights viewer (roles/databaseinsights.viewer) Admin (roles/admin) Database Insights assistant viewer (roles/databaseinsights.assistantViewer) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
databaseinsights.performanceIssues.investigate	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Insights Admin (roles/databaseinsights.admin) Database Insights viewer (roles/databaseinsights.viewer) Admin (roles/admin) Database Insights assistant viewer (roles/databaseinsights.assistantViewer) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
databaseinsights.queryMetrics.fetch	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Insights Admin (roles/databaseinsights.admin) Database Insights viewer (roles/databaseinsights.viewer) Admin (roles/admin) Database Insights intelligence viewer (roles/databaseinsights.intelligenceViewer) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Database Insights Service Agent (roles/databaseinsights.serviceAgent)
databaseinsights.queryStats.fetch	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Insights Admin (roles/databaseinsights.admin) Database Insights viewer (roles/databaseinsights.viewer) Admin (roles/admin) Database Insights intelligence viewer (roles/databaseinsights.intelligenceViewer) Database Insights monitoring viewer (roles/databaseinsights.monitoringViewer) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Database Insights Service Agent (roles/databaseinsights.serviceAgent)
databaseinsights.queryTimeSeries.fetch	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Insights Admin (roles/databaseinsights.admin) Database Insights viewer (roles/databaseinsights.viewer) Admin (roles/admin) Database Insights intelligence viewer (roles/databaseinsights.intelligenceViewer) Database Insights monitoring viewer (roles/databaseinsights.monitoringViewer) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Database Insights Service Agent (roles/databaseinsights.serviceAgent)
databaseinsights.recommendations.query	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Insights Admin (roles/databaseinsights.admin) Database Insights viewer (roles/databaseinsights.viewer) Admin (roles/admin) Database Insights recommendation viewer (roles/databaseinsights.recommendationViewer) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
databaseinsights.resourceRecommendations.query	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Insights Admin (roles/databaseinsights.admin) Database Insights viewer (roles/databaseinsights.viewer) Admin (roles/admin) Database Insights recommendation viewer (roles/databaseinsights.recommendationViewer) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
databaseinsights.systemMetrics.fetch	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Insights Admin (roles/databaseinsights.admin) Database Insights viewer (roles/databaseinsights.viewer) Admin (roles/admin) Database Insights intelligence viewer (roles/databaseinsights.intelligenceViewer) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Database Insights Service Agent (roles/databaseinsights.serviceAgent)
databaseinsights.timeSeries.query	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Insights Admin (roles/databaseinsights.admin) Database Insights viewer (roles/databaseinsights.viewer) Admin (roles/admin) Database Insights monitoring viewer (roles/databaseinsights.monitoringViewer) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)
databaseinsights.virtualDbxAgent.query	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Insights Admin (roles/databaseinsights.admin) Database Insights viewer (roles/databaseinsights.viewer) Admin (roles/admin) Database Insights virtual Dbx viewer (roles/databaseinsights.virtualDbxViewer) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Database Insights Service Agent (roles/databaseinsights.serviceAgent)
databaseinsights.waitEventStats.fetch	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Insights Admin (roles/databaseinsights.admin) Database Insights viewer (roles/databaseinsights.viewer) Admin (roles/admin) Database Insights intelligence viewer (roles/databaseinsights.intelligenceViewer) Database Insights monitoring viewer (roles/databaseinsights.monitoringViewer) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Database Insights Service Agent (roles/databaseinsights.serviceAgent)
databaseinsights.waitEventTimeSeries.fetch	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Insights Admin (roles/databaseinsights.admin) Database Insights viewer (roles/databaseinsights.viewer) Admin (roles/admin) Database Insights intelligence viewer (roles/databaseinsights.intelligenceViewer) Database Insights monitoring viewer (roles/databaseinsights.monitoringViewer) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Database Insights Service Agent (roles/databaseinsights.serviceAgent)
databaseinsights.workloadRecommendations.fetch	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Insights Admin (roles/databaseinsights.admin) Database Insights viewer (roles/databaseinsights.viewer) Admin (roles/admin) Database Insights monitoring viewer (roles/databaseinsights.monitoringViewer) Database Insights recommendation viewer (roles/databaseinsights.recommendationViewer) Support User (roles/iam.supportUser) Reader (roles/reader) Writer (roles/writer)