Studio Query roles and permissions

This page lists the IAM roles and permissions for Studio Query. To search through all roles and permissions, see the role and permission index.

Studio Query roles

Role	Permissions
Databasesconsole Editor ^Beta (roles/databasesconsole.editor) Editor role for databasesconsole	databasesconsole.databaseCenterViews.* databasesconsole.databaseCenterViews.create databasesconsole.databaseCenterViews.delete databasesconsole.databaseCenterViews.search databasesconsole.databaseCenterViews.update databasesconsole.locations.* databasesconsole.locations.get databasesconsole.locations.list databasesconsole.operations.* databasesconsole.operations.cancel databasesconsole.operations.delete databasesconsole.operations.get databasesconsole.operations.list databasesconsole.studioQueries.create databasesconsole.studioQueries.delete databasesconsole.studioQueries.search databasesconsole.studioQueries.update resourcemanager.projects.get resourcemanager.projects.list
Databasesconsole Viewer ^Beta (roles/databasesconsole.viewer) Viewer role for databasesconsole	databasesconsole.databaseCenterViews.search databasesconsole.locations.* databasesconsole.locations.get databasesconsole.locations.list databasesconsole.operations.get databasesconsole.operations.list databasesconsole.studioQueries.search resourcemanager.projects.get resourcemanager.projects.list
Studio Query Admin ^Beta (roles/databasesconsole.studioQueryAdmin) Full access to Studio Query resources.	databasesconsole.locations.* databasesconsole.locations.get databasesconsole.locations.list databasesconsole.operations.* databasesconsole.operations.cancel databasesconsole.operations.delete databasesconsole.operations.get databasesconsole.operations.list databasesconsole.studioQueries.* databasesconsole.studioQueries.create databasesconsole.studioQueries.delete databasesconsole.studioQueries.get databasesconsole.studioQueries.list databasesconsole.studioQueries.search databasesconsole.studioQueries.update resourcemanager.projects.get resourcemanager.projects.list
Studio Query User ^Beta (roles/databasesconsole.studioQueryUser) Access to create, update, search and delete studio queries.	databasesconsole.locations.* databasesconsole.locations.get databasesconsole.locations.list databasesconsole.operations.get databasesconsole.operations.list databasesconsole.studioQueries.create databasesconsole.studioQueries.delete databasesconsole.studioQueries.search databasesconsole.studioQueries.update resourcemanager.projects.get resourcemanager.projects.list

Studio Query permissions

Permission	Included in roles
databasesconsole.databaseCenterViews.create	Owner (roles/owner) Editor (roles/editor) Database Center Admin (roles/databasecenter.admin) Databasesconsole Editor (roles/databasesconsole.editor)
databasesconsole.databaseCenterViews.delete	Owner (roles/owner) Editor (roles/editor) Database Center Admin (roles/databasecenter.admin) Databasesconsole Editor (roles/databasesconsole.editor)
databasesconsole.databaseCenterViews.search	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Center Admin (roles/databasecenter.admin) Database Center Viewer (roles/databasecenter.viewer) Databasesconsole Editor (roles/databasesconsole.editor) Databasesconsole Viewer (roles/databasesconsole.viewer) Support User (roles/iam.supportUser)
databasesconsole.databaseCenterViews.update	Owner (roles/owner) Editor (roles/editor) Database Center Admin (roles/databasecenter.admin) Databasesconsole Editor (roles/databasesconsole.editor)
databasesconsole.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AlloyDB Admin (roles/alloydb.admin) Cloud SQL Admin (roles/cloudsql.admin) Database Center Admin (roles/databasecenter.admin) Database Center Viewer (roles/databasecenter.viewer) Databasesconsole Editor (roles/databasesconsole.editor) Databasesconsole Viewer (roles/databasesconsole.viewer) Datastore Admin (roles/datastore.admin) Datastore Editor (roles/datastore.editor) Cloud Datastore User (roles/datastore.user) Cloud Datastore Viewer (roles/datastore.viewer) Firebase Admin (roles/firebase.admin) AlloyDB Database User (roles/alloydb.databaseUser) Cloud SQL Studio User (roles/cloudsql.studioUser) Studio Query Admin (roles/databasesconsole.studioQueryAdmin) Studio Query User (roles/databasesconsole.studioQueryUser) Cloud Datastore Owner (roles/datastore.owner) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Firebase Develop Admin (roles/firebase.developAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) DLP API Service Agent (roles/dlp.serviceAgent) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
databasesconsole.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AlloyDB Admin (roles/alloydb.admin) Cloud SQL Admin (roles/cloudsql.admin) Database Center Admin (roles/databasecenter.admin) Database Center Viewer (roles/databasecenter.viewer) Databasesconsole Editor (roles/databasesconsole.editor) Databasesconsole Viewer (roles/databasesconsole.viewer) Datastore Admin (roles/datastore.admin) Datastore Editor (roles/datastore.editor) Cloud Datastore User (roles/datastore.user) Cloud Datastore Viewer (roles/datastore.viewer) Firebase Admin (roles/firebase.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) AlloyDB Database User (roles/alloydb.databaseUser) Cloud SQL Studio User (roles/cloudsql.studioUser) Studio Query Admin (roles/databasesconsole.studioQueryAdmin) Studio Query User (roles/databasesconsole.studioQueryUser) Cloud Datastore Owner (roles/datastore.owner) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Firebase Develop Admin (roles/firebase.developAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) DLP API Service Agent (roles/dlp.serviceAgent) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
databasesconsole.operations.cancel	Owner (roles/owner) Editor (roles/editor) Databasesconsole Editor (roles/databasesconsole.editor) Studio Query Admin (roles/databasesconsole.studioQueryAdmin)
databasesconsole.operations.delete	Owner (roles/owner) Editor (roles/editor) Databasesconsole Editor (roles/databasesconsole.editor) Studio Query Admin (roles/databasesconsole.studioQueryAdmin)
databasesconsole.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Databasesconsole Editor (roles/databasesconsole.editor) Databasesconsole Viewer (roles/databasesconsole.viewer) Studio Query Admin (roles/databasesconsole.studioQueryAdmin) Studio Query User (roles/databasesconsole.studioQueryUser) Support User (roles/iam.supportUser)
databasesconsole.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Databasesconsole Editor (roles/databasesconsole.editor) Databasesconsole Viewer (roles/databasesconsole.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Studio Query Admin (roles/databasesconsole.studioQueryAdmin) Studio Query User (roles/databasesconsole.studioQueryUser) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
databasesconsole.studioQueries.create	Owner (roles/owner) Editor (roles/editor) AlloyDB Admin (roles/alloydb.admin) Cloud SQL Admin (roles/cloudsql.admin) Databasesconsole Editor (roles/databasesconsole.editor) Cloud Datastore User (roles/datastore.user) Firebase Admin (roles/firebase.admin) Studio Query Admin (roles/databasesconsole.studioQueryAdmin) Studio Query User (roles/databasesconsole.studioQueryUser) Cloud Datastore Owner (roles/datastore.owner) Firebase Develop Admin (roles/firebase.developAdmin) Databases Admin (roles/iam.databasesAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) DLP API Service Agent (roles/dlp.serviceAgent) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
databasesconsole.studioQueries.delete	Owner (roles/owner) Editor (roles/editor) AlloyDB Admin (roles/alloydb.admin) Cloud SQL Admin (roles/cloudsql.admin) Databasesconsole Editor (roles/databasesconsole.editor) Cloud Datastore User (roles/datastore.user) Firebase Admin (roles/firebase.admin) Studio Query Admin (roles/databasesconsole.studioQueryAdmin) Studio Query User (roles/databasesconsole.studioQueryUser) Cloud Datastore Owner (roles/datastore.owner) Firebase Develop Admin (roles/firebase.developAdmin) Databases Admin (roles/iam.databasesAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) DLP API Service Agent (roles/dlp.serviceAgent) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
databasesconsole.studioQueries.get	Owner (roles/owner) AlloyDB Admin (roles/alloydb.admin) Cloud SQL Admin (roles/cloudsql.admin) Firebase Admin (roles/firebase.admin) Studio Query Admin (roles/databasesconsole.studioQueryAdmin) Cloud Datastore Owner (roles/datastore.owner) Firebase Develop Admin (roles/firebase.developAdmin) Databases Admin (roles/iam.databasesAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent)
databasesconsole.studioQueries.list	Owner (roles/owner) AlloyDB Admin (roles/alloydb.admin) Cloud SQL Admin (roles/cloudsql.admin) Firebase Admin (roles/firebase.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Studio Query Admin (roles/databasesconsole.studioQueryAdmin) Cloud Datastore Owner (roles/datastore.owner) Firebase Develop Admin (roles/firebase.developAdmin) Databases Admin (roles/iam.databasesAdmin) Security Auditor (roles/iam.securityAuditor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent)
databasesconsole.studioQueries.search	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AlloyDB Admin (roles/alloydb.admin) Cloud SQL Admin (roles/cloudsql.admin) Databasesconsole Editor (roles/databasesconsole.editor) Databasesconsole Viewer (roles/databasesconsole.viewer) Datastore Admin (roles/datastore.admin) Datastore Editor (roles/datastore.editor) Cloud Datastore User (roles/datastore.user) Cloud Datastore Viewer (roles/datastore.viewer) Firebase Admin (roles/firebase.admin) AlloyDB Database User (roles/alloydb.databaseUser) Cloud SQL Studio User (roles/cloudsql.studioUser) Studio Query Admin (roles/databasesconsole.studioQueryAdmin) Studio Query User (roles/databasesconsole.studioQueryUser) Cloud Datastore Owner (roles/datastore.owner) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Firebase Develop Admin (roles/firebase.developAdmin) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) DLP API Service Agent (roles/dlp.serviceAgent) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
databasesconsole.studioQueries.update	Owner (roles/owner) Editor (roles/editor) AlloyDB Admin (roles/alloydb.admin) Cloud SQL Admin (roles/cloudsql.admin) Databasesconsole Editor (roles/databasesconsole.editor) Cloud Datastore User (roles/datastore.user) Firebase Admin (roles/firebase.admin) Studio Query Admin (roles/databasesconsole.studioQueryAdmin) Studio Query User (roles/databasesconsole.studioQueryUser) Cloud Datastore Owner (roles/datastore.owner) Firebase Develop Admin (roles/firebase.developAdmin) Databases Admin (roles/iam.databasesAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) DLP API Service Agent (roles/dlp.serviceAgent) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)