BigQuery Engine for Apache Flink roles and permissions

This page lists the IAM roles and permissions for BigQuery Engine for Apache Flink. To search through all roles and permissions, see the role and permission index.

BigQuery Engine for Apache Flink roles

Role	Permissions
Managed Flink Admin ^Beta (roles/managedflink.admin) Full access to Managed Flink resources.	managedflink.* managedflink.deployments.create managedflink.deployments.delete managedflink.deployments.get managedflink.deployments.list managedflink.deployments.update managedflink.jobs.create managedflink.jobs.delete managedflink.jobs.get managedflink.jobs.list managedflink.jobs.update managedflink.locations.get managedflink.locations.list managedflink.operations.cancel managedflink.operations.delete managedflink.operations.get managedflink.operations.list managedflink.sessions.create managedflink.sessions.delete managedflink.sessions.get managedflink.sessions.list managedflink.sessions.update resourcemanager.projects.get resourcemanager.projects.list
Managed Flink Viewer ^Beta (roles/managedflink.viewer) Readonly access to Managed Flink resources.	managedflink.deployments.get managedflink.deployments.list managedflink.jobs.get managedflink.jobs.list managedflink.locations.* managedflink.locations.get managedflink.locations.list managedflink.operations.get managedflink.operations.list managedflink.sessions.get managedflink.sessions.list resourcemanager.projects.get resourcemanager.projects.list
Managed Flink Developer ^Beta (roles/managedflink.developer) Full access to Managed Flink Jobs and Sessions and read access to Deployments.	managedflink.deployments.get managedflink.deployments.list managedflink.jobs.* managedflink.jobs.create managedflink.jobs.delete managedflink.jobs.get managedflink.jobs.list managedflink.jobs.update managedflink.locations.* managedflink.locations.get managedflink.locations.list managedflink.operations.get managedflink.operations.list managedflink.sessions.* managedflink.sessions.create managedflink.sessions.delete managedflink.sessions.get managedflink.sessions.list managedflink.sessions.update resourcemanager.projects.get resourcemanager.projects.list

Service agent roles

Service agent roles should only be granted to service agents.

Role

Permissions

Managed Flink Service Agent (roles/managedflink.serviceAgent) Gives Managed Flink Service Agent access to Cloud Platform resources. Warning: Do not grant service agent roles to any principals except service agents.

compute.networkAttachments.create compute.networkAttachments.delete compute.networkAttachments.get compute.networkAttachments.list compute.networkAttachments.update compute.networks.get compute.networks.list compute.regionOperations.get compute.subnetworks.get compute.subnetworks.list compute.subnetworks.use dns.networks.targetWithPeeringZone managedkafka.clusters.get managedkafka.clusters.list managedkafka.clusters.update monitoring.metricDescriptors.create monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list monitoring.timeSeries.create serviceusage.services.use storage.objects.get

BigQuery Engine for Apache Flink permissions

Permission	Included in roles
managedflink.deployments.create	Owner (roles/owner) Editor (roles/editor) Managed Flink Admin (roles/managedflink.admin)
managedflink.deployments.delete	Owner (roles/owner) Editor (roles/editor) Managed Flink Admin (roles/managedflink.admin)
managedflink.deployments.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Managed Flink Admin (roles/managedflink.admin) Managed Flink Viewer (roles/managedflink.viewer) Support User (roles/iam.supportUser) Managed Flink Developer (roles/managedflink.developer)
managedflink.deployments.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Managed Flink Admin (roles/managedflink.admin) Managed Flink Viewer (roles/managedflink.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Managed Flink Developer (roles/managedflink.developer)
managedflink.deployments.update	Owner (roles/owner) Editor (roles/editor) Managed Flink Admin (roles/managedflink.admin)
managedflink.jobs.create	Owner (roles/owner) Editor (roles/editor) Managed Flink Admin (roles/managedflink.admin) Managed Flink Developer (roles/managedflink.developer)
managedflink.jobs.delete	Owner (roles/owner) Editor (roles/editor) Managed Flink Admin (roles/managedflink.admin) Managed Flink Developer (roles/managedflink.developer)
managedflink.jobs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Managed Flink Admin (roles/managedflink.admin) Managed Flink Viewer (roles/managedflink.viewer) Support User (roles/iam.supportUser) Managed Flink Developer (roles/managedflink.developer)
managedflink.jobs.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Managed Flink Admin (roles/managedflink.admin) Managed Flink Viewer (roles/managedflink.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Managed Flink Developer (roles/managedflink.developer)
managedflink.jobs.update	Owner (roles/owner) Editor (roles/editor) Managed Flink Admin (roles/managedflink.admin) Managed Flink Developer (roles/managedflink.developer)
managedflink.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Managed Flink Admin (roles/managedflink.admin) Managed Flink Viewer (roles/managedflink.viewer) Support User (roles/iam.supportUser) Managed Flink Developer (roles/managedflink.developer)
managedflink.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Managed Flink Admin (roles/managedflink.admin) Managed Flink Viewer (roles/managedflink.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Managed Flink Developer (roles/managedflink.developer)
managedflink.operations.cancel	Owner (roles/owner) Editor (roles/editor) Managed Flink Admin (roles/managedflink.admin)
managedflink.operations.delete	Owner (roles/owner) Editor (roles/editor) Managed Flink Admin (roles/managedflink.admin)
managedflink.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Managed Flink Admin (roles/managedflink.admin) Managed Flink Viewer (roles/managedflink.viewer) Support User (roles/iam.supportUser) Managed Flink Developer (roles/managedflink.developer)
managedflink.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Managed Flink Admin (roles/managedflink.admin) Managed Flink Viewer (roles/managedflink.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Managed Flink Developer (roles/managedflink.developer)
managedflink.sessions.create	Owner (roles/owner) Editor (roles/editor) Managed Flink Admin (roles/managedflink.admin) Managed Flink Developer (roles/managedflink.developer)
managedflink.sessions.delete	Owner (roles/owner) Editor (roles/editor) Managed Flink Admin (roles/managedflink.admin) Managed Flink Developer (roles/managedflink.developer)
managedflink.sessions.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Managed Flink Admin (roles/managedflink.admin) Managed Flink Viewer (roles/managedflink.viewer) Support User (roles/iam.supportUser) Managed Flink Developer (roles/managedflink.developer)
managedflink.sessions.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Managed Flink Admin (roles/managedflink.admin) Managed Flink Viewer (roles/managedflink.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Managed Flink Developer (roles/managedflink.developer)
managedflink.sessions.update	Owner (roles/owner) Editor (roles/editor) Managed Flink Admin (roles/managedflink.admin) Managed Flink Developer (roles/managedflink.developer)