This page lists the IAM roles and permissions for Sensitive Data Protection. To search through all roles and permissions, see the role and permission index.
Sensitive Data Protection roles
| Role | Permissions |
|---|---|
DLP Administrator( Administer DLP including jobs and templates. |
|
DLP Editor( Editor role for DLP |
|
DLP User( Inspect, Redact, and De-identify Content |
|
DLP Viewer( Viewer role for DLP |
|
DLP Analyze Risk Templates Editor( Edit DLP analyze risk templates. |
|
DLP Analyze Risk Templates Reader( Read DLP analyze risk templates. |
|
DLP Column Data Profiles Reader( Read DLP column profiles. |
|
DLP Connections Admin( Manage DLP Connections. |
|
DLP Connections Viewer( View DLP Connections. |
|
DLP Data Profiles Admin( Manage DLP profiles. |
|
DLP Data Profiles Reader( Read DLP profiles. |
|
DLP De-identify Templates Editor( Edit DLP de-identify templates. |
|
DLP De-identify Templates Reader( Read DLP de-identify templates. |
|
DLP Cost Estimation( Manage DLP Cost Estimates. |
|
DLP File Store Data Profiles Admin( Manage DLP file store profiles. |
|
DLP File Store Data Profiles Reader( Read DLP file store profiles. |
|
DLP Inspect Findings Reader( Read DLP stored findings. |
|
DLP Inspect Templates Editor( Edit DLP inspect templates. |
|
DLP Inspect Templates Reader( Read DLP inspect templates. |
|
DLP Job Triggers Editor( Edit job triggers configurations. |
|
DLP Job Triggers Reader( Read job triggers. |
|
DLP Jobs Editor( Edit and create jobs |
|
DLP Jobs Reader( Read jobs |
|
DLP Organization Data Profiles Driver( Permissions needed by the DLP service account to generate data profiles within an organization or folder. Lowest-level resources where you can grant this role:
|
|
DLP Project Data Profiles Reader( Read DLP project profiles. |
|
DLP Project Data Profiles Driver( Permissions needed by the DLP service account to generate data profiles within a project. |
|
DLP Reader( Read DLP entities, such as jobs and templates. |
|
DLP Stored InfoTypes Editor( Edit DLP stored info types. |
|
DLP Stored InfoTypes Reader( Read DLP stored info types. |
|
DLP Subscription Admin( Manage DLP subscriptions. |
|
DLP Subscription Viewer( View DLP subscriptions. |
|
DLP Table Data Profiles Admin( Manage DLP table profiles. |
|
DLP Table Data Profiles Reader( Read DLP table profiles. |
|
Service agent roles
Service agent roles should only be granted to service agents.
| Role | Permissions |
|---|---|
DLP API Service Agent( Gives the Cloud DLP API service agent permissions for BigQuery, Cloud Storage, Datastore, Pub/Sub, and Cloud KMS. |
|
Sensitive Data Protection permissions
| Permission | Included in roles |
|---|---|
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Analyze Risk Templates Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Analyze Risk Templates Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Analyze Risk Templates Editor (
DLP Analyze Risk Templates Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Support User ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Analyze Risk Templates Editor (
DLP Analyze Risk Templates Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Analyze Risk Templates Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Data Profiles Admin (
DLP Data Profiles Reader (
DLP File Store Data Profiles Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
Security Auditor (
Support User (
Security Center Admin Editor (
Security Center Admin Viewer ( |
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Column Data Profiles Reader (
DLP Data Profiles Admin (
DLP Data Profiles Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
Security Auditor (
Support User (
Security Center Admin Editor (
Security Center Admin Viewer ( |
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Column Data Profiles Reader (
DLP Data Profiles Admin (
DLP Data Profiles Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
Security Auditor (
Support User (
Security Center Admin Editor (
Security Center Admin Viewer ( |
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Connections Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Connections Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Connections Admin (
DLP Connections Viewer (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
Support User ( |
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Connections Admin (
DLP Connections Viewer (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
Security Auditor (
Support User ( |
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Connections Admin (
DLP Connections Viewer (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
Support User ( |
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Connections Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP De-identify Templates Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP De-identify Templates Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP De-identify Templates Editor (
DLP De-identify Templates Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Support User ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP De-identify Templates Editor (
DLP De-identify Templates Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP De-identify Templates Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Cost Estimation (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Cost Estimation (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Cost Estimation (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Cost Estimation (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
Support User ( |
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Cost Estimation (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
Security Auditor (
Support User ( |
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Data Profiles Admin (
DLP File Store Data Profiles Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Data Profiles Admin (
DLP Data Profiles Reader (
DLP File Store Data Profiles Admin (
DLP File Store Data Profiles Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
Security Auditor (
Support User (
Security Center Admin Editor (
Security Center Admin Viewer ( |
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Data Profiles Admin (
DLP Data Profiles Reader (
DLP File Store Data Profiles Admin (
DLP File Store Data Profiles Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
Security Auditor (
Support User (
Security Center Admin Editor (
Security Center Admin Viewer ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Inspect Findings Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Inspect Templates Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Inspect Templates Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Inspect Templates Editor (
DLP Inspect Templates Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Support User ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Inspect Templates Editor (
DLP Inspect Templates Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Inspect Templates Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Job Triggers Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Job Triggers Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Job Triggers Editor (
DLP Job Triggers Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Support User ( Service agent roles
|
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Job Triggers Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Job Triggers Editor (
DLP Job Triggers Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Job Triggers Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Jobs Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( Service agent roles
|
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Jobs Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( Service agent roles
|
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Jobs Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Jobs Editor (
DLP Jobs Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Support User ( Service agent roles
|
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Jobs Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Jobs Editor (
DLP Jobs Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
DLP Administrator (
DLP User (
Security Center Admin (
DLP Jobs Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP User (
DLP Viewer (
Security Center Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Support User ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP User (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Data Profiles Admin (
DLP Data Profiles Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Reader (
DLP Project Data Profiles Driver (
Security Auditor (
Support User (
Security Center Admin Editor (
Security Center Admin Viewer ( |
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Data Profiles Admin (
DLP Data Profiles Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Reader (
DLP Project Data Profiles Driver (
Security Auditor (
Support User (
Security Center Admin Editor (
Security Center Admin Viewer ( |
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Stored InfoTypes Editor ( |
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Stored InfoTypes Editor ( |
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
DLP Stored InfoTypes Editor (
DLP Stored InfoTypes Reader (
Support User ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
DLP Stored InfoTypes Editor (
DLP Stored InfoTypes Reader (
Security Auditor (
Support User ( Service agent roles
|
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Stored InfoTypes Editor ( |
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Subscription Admin ( |
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Subscription Admin ( |
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Subscription Admin (
DLP Subscription Viewer (
Support User ( |
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Subscription Admin (
DLP Subscription Viewer (
Security Auditor (
Support User ( |
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Subscription Admin ( |
|
Owner (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Data Profiles Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Table Data Profiles Admin ( |
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Data Profiles Admin (
DLP Data Profiles Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Table Data Profiles Admin (
DLP Table Data Profiles Reader (
Security Auditor (
Support User (
Security Center Admin Editor (
Security Center Admin Viewer ( Service agent roles
|
|
Owner (
Editor (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Data Profiles Admin (
DLP Data Profiles Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Table Data Profiles Admin (
DLP Table Data Profiles Reader (
Security Auditor (
Support User (
Security Center Admin Editor (
Security Center Admin Viewer ( |