Datastream roles and permissions

This page lists the IAM roles and permissions for Datastream. To search through all roles and permissions, see the role and permission index.

Datastream roles

Role	Permissions
Datastream Admin (roles/datastream.admin) Full access to all Datastream resources.	datastream.* datastream.connectionProfiles.create datastream.connectionProfiles.createTagBinding datastream.connectionProfiles.delete datastream.connectionProfiles.deleteTagBinding datastream.connectionProfiles.destinationTypes datastream.connectionProfiles.discover datastream.connectionProfiles.get datastream.connectionProfiles.getIamPolicy datastream.connectionProfiles.list datastream.connectionProfiles.listEffectiveTags datastream.connectionProfiles.listStaticServiceIps datastream.connectionProfiles.listTagBindings datastream.connectionProfiles.setIamPolicy datastream.connectionProfiles.sourceTypes datastream.connectionProfiles.update datastream.locations.fetchStaticIps datastream.locations.get datastream.locations.list datastream.objects.get datastream.objects.list datastream.objects.startBackfillJob datastream.objects.stopBackfillJob datastream.operations.cancel datastream.operations.delete datastream.operations.get datastream.operations.list datastream.privateConnections.create datastream.privateConnections.createTagBinding datastream.privateConnections.delete datastream.privateConnections.deleteTagBinding datastream.privateConnections.get datastream.privateConnections.getIamPolicy datastream.privateConnections.list datastream.privateConnections.listEffectiveTags datastream.privateConnections.listTagBindings datastream.privateConnections.setIamPolicy datastream.routes.create datastream.routes.delete datastream.routes.get datastream.routes.getIamPolicy datastream.routes.list datastream.routes.setIamPolicy datastream.streams.computeState datastream.streams.create datastream.streams.createTagBinding datastream.streams.delete datastream.streams.deleteTagBinding datastream.streams.fetchErrors datastream.streams.get datastream.streams.getIamPolicy datastream.streams.list datastream.streams.listEffectiveTags datastream.streams.listTagBindings datastream.streams.pause datastream.streams.resume datastream.streams.setIamPolicy datastream.streams.start datastream.streams.update resourcemanager.projects.get resourcemanager.projects.list
Datastream Viewer (roles/datastream.viewer) Read-only access to all Datastream resources.	datastream.connectionProfiles.destinationTypes datastream.connectionProfiles.discover datastream.connectionProfiles.get datastream.connectionProfiles.getIamPolicy datastream.connectionProfiles.list datastream.connectionProfiles.listEffectiveTags datastream.connectionProfiles.listStaticServiceIps datastream.connectionProfiles.listTagBindings datastream.connectionProfiles.sourceTypes datastream.locations.* datastream.locations.fetchStaticIps datastream.locations.get datastream.locations.list datastream.objects.get datastream.objects.list datastream.operations.get datastream.operations.list datastream.privateConnections.get datastream.privateConnections.getIamPolicy datastream.privateConnections.list datastream.privateConnections.listEffectiveTags datastream.privateConnections.listTagBindings datastream.routes.get datastream.routes.getIamPolicy datastream.routes.list datastream.streams.fetchErrors datastream.streams.get datastream.streams.getIamPolicy datastream.streams.list datastream.streams.listEffectiveTags datastream.streams.listTagBindings resourcemanager.projects.get resourcemanager.projects.list
Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Permissions needed for datastream to write to BigQuery.	bigquery.connections.delegate bigquery.connections.get bigquery.datasets.create bigquery.datasets.get bigquery.jobs.create bigquery.jobs.delete bigquery.jobs.get bigquery.jobs.list bigquery.jobs.update bigquery.tables.create bigquery.tables.get bigquery.tables.getData bigquery.tables.list bigquery.tables.update bigquery.tables.updateData datastream.connectionProfiles.create datastream.connectionProfiles.delete datastream.connectionProfiles.destinationTypes datastream.connectionProfiles.discover datastream.connectionProfiles.get datastream.connectionProfiles.getIamPolicy datastream.connectionProfiles.list datastream.connectionProfiles.listEffectiveTags datastream.connectionProfiles.listStaticServiceIps datastream.connectionProfiles.listTagBindings datastream.connectionProfiles.sourceTypes datastream.connectionProfiles.update datastream.locations.* datastream.locations.fetchStaticIps datastream.locations.get datastream.locations.list datastream.objects.* datastream.objects.get datastream.objects.list datastream.objects.startBackfillJob datastream.objects.stopBackfillJob datastream.operations.* datastream.operations.cancel datastream.operations.delete datastream.operations.get datastream.operations.list datastream.privateConnections.create datastream.privateConnections.delete datastream.privateConnections.get datastream.privateConnections.getIamPolicy datastream.privateConnections.list datastream.privateConnections.listEffectiveTags datastream.privateConnections.listTagBindings datastream.routes.create datastream.routes.delete datastream.routes.get datastream.routes.getIamPolicy datastream.routes.list datastream.streams.computeState datastream.streams.create datastream.streams.delete datastream.streams.fetchErrors datastream.streams.get datastream.streams.getIamPolicy datastream.streams.list datastream.streams.listEffectiveTags datastream.streams.listTagBindings datastream.streams.pause datastream.streams.resume datastream.streams.start datastream.streams.update

Service agent roles

Service agent roles should only be granted to service agents.

Role

Permissions

Datastream Service Agent (roles/datastream.serviceAgent) Grants Cloud Datastream permissions to write data in the user project. Warning: Do not grant service agent roles to any principals except service agents.

bigquery.connections.delegate bigquery.connections.get bigquery.datasets.create bigquery.datasets.get bigquery.jobs.create bigquery.jobs.delete bigquery.jobs.get bigquery.jobs.list bigquery.jobs.update bigquery.routines.get bigquery.routines.list bigquery.tables.create bigquery.tables.get bigquery.tables.getData bigquery.tables.list bigquery.tables.update bigquery.tables.updateData compute.globalAddresses.create compute.globalAddresses.createInternal compute.globalAddresses.delete compute.globalAddresses.deleteInternal compute.globalAddresses.get compute.globalOperations.get compute.networkAttachments.get compute.networkAttachments.list compute.networks.addPeering compute.networks.get compute.networks.listPeeringRoutes compute.networks.removePeering compute.networks.use compute.routes.get compute.routes.list compute.subnetworks.get compute.subnetworks.list monitoring.timeSeries.list pubsub.topics.publish spanner.databases.beginReadOnlyTransaction spanner.databases.getDdl spanner.databases.partitionQuery spanner.databases.partitionRead spanner.databases.read spanner.databases.select spanner.databases.useDataBoost spanner.databases.useRoleBasedAccess spanner.sessions.create spanner.sessions.delete spanner.sessions.get storage.buckets.get storage.objects.create storage.objects.get storage.objects.list

Datastream permissions

Permission	Included in roles
datastream.connectionProfiles.create	Owner (roles/owner) Editor (roles/editor) Datastream Admin (roles/datastream.admin) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Dataproc Metastore Managed Migration Admin (roles/metastore.migrationAdmin)
datastream.connectionProfiles.createTagBinding	Owner (roles/owner) Datastream Admin (roles/datastream.admin) Tag User (roles/resourcemanager.tagUser) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver)
datastream.connectionProfiles.delete	Owner (roles/owner) Editor (roles/editor) Datastream Admin (roles/datastream.admin) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Dataproc Metastore Managed Migration Admin (roles/metastore.migrationAdmin)
datastream.connectionProfiles.deleteTagBinding	Owner (roles/owner) Datastream Admin (roles/datastream.admin) Tag User (roles/resourcemanager.tagUser) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver)
datastream.connectionProfiles.destinationTypes	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Support User (roles/iam.supportUser)
datastream.connectionProfiles.discover	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Support User (roles/iam.supportUser)
datastream.connectionProfiles.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Support User (roles/iam.supportUser)
datastream.connectionProfiles.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
datastream.connectionProfiles.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
datastream.connectionProfiles.listEffectiveTags	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
datastream.connectionProfiles.listStaticServiceIps	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Support User (roles/iam.supportUser)
datastream.connectionProfiles.listTagBindings	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
datastream.connectionProfiles.setIamPolicy	Owner (roles/owner) Datastream Admin (roles/datastream.admin) Security Admin (roles/iam.securityAdmin)
datastream.connectionProfiles.sourceTypes	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Support User (roles/iam.supportUser)
datastream.connectionProfiles.update	Owner (roles/owner) Editor (roles/editor) Datastream Admin (roles/datastream.admin) Datastream Bigquery Writer (roles/datastream.bigqueryWriter)
datastream.locations.fetchStaticIps	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Support User (roles/iam.supportUser)
datastream.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Support User (roles/iam.supportUser)
datastream.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
datastream.objects.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Support User (roles/iam.supportUser) Dataproc Metastore Managed Migration Admin (roles/metastore.migrationAdmin)
datastream.objects.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Dataproc Metastore Managed Migration Admin (roles/metastore.migrationAdmin)
datastream.objects.startBackfillJob	Owner (roles/owner) Editor (roles/editor) Datastream Admin (roles/datastream.admin) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Dataproc Metastore Managed Migration Admin (roles/metastore.migrationAdmin)
datastream.objects.stopBackfillJob	Owner (roles/owner) Editor (roles/editor) Datastream Admin (roles/datastream.admin) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Dataproc Metastore Managed Migration Admin (roles/metastore.migrationAdmin)
datastream.operations.cancel	Owner (roles/owner) Editor (roles/editor) Datastream Admin (roles/datastream.admin) Datastream Bigquery Writer (roles/datastream.bigqueryWriter)
datastream.operations.delete	Owner (roles/owner) Editor (roles/editor) Datastream Admin (roles/datastream.admin) Datastream Bigquery Writer (roles/datastream.bigqueryWriter)
datastream.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Support User (roles/iam.supportUser) Dataproc Metastore Managed Migration Admin (roles/metastore.migrationAdmin)
datastream.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
datastream.privateConnections.create	Owner (roles/owner) Editor (roles/editor) Datastream Admin (roles/datastream.admin) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Dataproc Metastore Managed Migration Admin (roles/metastore.migrationAdmin)
datastream.privateConnections.createTagBinding	Owner (roles/owner) Datastream Admin (roles/datastream.admin) Tag User (roles/resourcemanager.tagUser) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver)
datastream.privateConnections.delete	Owner (roles/owner) Editor (roles/editor) Datastream Admin (roles/datastream.admin) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Dataproc Metastore Managed Migration Admin (roles/metastore.migrationAdmin)
datastream.privateConnections.deleteTagBinding	Owner (roles/owner) Datastream Admin (roles/datastream.admin) Tag User (roles/resourcemanager.tagUser) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver)
datastream.privateConnections.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Support User (roles/iam.supportUser)
datastream.privateConnections.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
datastream.privateConnections.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
datastream.privateConnections.listEffectiveTags	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
datastream.privateConnections.listTagBindings	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
datastream.privateConnections.setIamPolicy	Owner (roles/owner) Datastream Admin (roles/datastream.admin) Security Admin (roles/iam.securityAdmin)
datastream.routes.create	Owner (roles/owner) Editor (roles/editor) Datastream Admin (roles/datastream.admin) Datastream Bigquery Writer (roles/datastream.bigqueryWriter)
datastream.routes.delete	Owner (roles/owner) Editor (roles/editor) Datastream Admin (roles/datastream.admin) Datastream Bigquery Writer (roles/datastream.bigqueryWriter)
datastream.routes.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Support User (roles/iam.supportUser)
datastream.routes.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
datastream.routes.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
datastream.routes.setIamPolicy	Owner (roles/owner) Datastream Admin (roles/datastream.admin) Security Admin (roles/iam.securityAdmin)
datastream.streams.computeState	Owner (roles/owner) Editor (roles/editor) Datastream Admin (roles/datastream.admin) Datastream Bigquery Writer (roles/datastream.bigqueryWriter)
datastream.streams.create	Owner (roles/owner) Editor (roles/editor) Datastream Admin (roles/datastream.admin) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Dataproc Metastore Managed Migration Admin (roles/metastore.migrationAdmin)
datastream.streams.createTagBinding	Owner (roles/owner) Datastream Admin (roles/datastream.admin) Tag User (roles/resourcemanager.tagUser) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver)
datastream.streams.delete	Owner (roles/owner) Editor (roles/editor) Datastream Admin (roles/datastream.admin) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Dataproc Metastore Managed Migration Admin (roles/metastore.migrationAdmin)
datastream.streams.deleteTagBinding	Owner (roles/owner) Datastream Admin (roles/datastream.admin) Tag User (roles/resourcemanager.tagUser) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver)
datastream.streams.fetchErrors	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Support User (roles/iam.supportUser)
datastream.streams.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Support User (roles/iam.supportUser) Dataproc Metastore Managed Migration Admin (roles/metastore.migrationAdmin)
datastream.streams.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
datastream.streams.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
datastream.streams.listEffectiveTags	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
datastream.streams.listTagBindings	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Datastream Admin (roles/datastream.admin) Datastream Viewer (roles/datastream.viewer) Tag User (roles/resourcemanager.tagUser) Tag Viewer (roles/resourcemanager.tagViewer) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
datastream.streams.pause	Owner (roles/owner) Editor (roles/editor) Datastream Admin (roles/datastream.admin) Datastream Bigquery Writer (roles/datastream.bigqueryWriter)
datastream.streams.resume	Owner (roles/owner) Editor (roles/editor) Datastream Admin (roles/datastream.admin) Datastream Bigquery Writer (roles/datastream.bigqueryWriter)
datastream.streams.setIamPolicy	Owner (roles/owner) Datastream Admin (roles/datastream.admin) Security Admin (roles/iam.securityAdmin)
datastream.streams.start	Owner (roles/owner) Editor (roles/editor) Datastream Admin (roles/datastream.admin) Datastream Bigquery Writer (roles/datastream.bigqueryWriter)
datastream.streams.update	Owner (roles/owner) Editor (roles/editor) Datastream Admin (roles/datastream.admin) Datastream Bigquery Writer (roles/datastream.bigqueryWriter) Dataproc Metastore Managed Migration Admin (roles/metastore.migrationAdmin)