This page lists all the IAM roles and permissions for Sensitive Data Protection.
Sensitive Data Protection roles
| Role | Permissions |
|---|---|
DLP Administrator( Administer DLP including jobs and templates. |
|
DLP Editor( Editor role for DLP |
|
DLP User( Inspect, Redact, and De-identify Content |
|
DLP Viewer( Viewer role for DLP |
|
DLP Analyze Risk Templates Editor( Edit DLP analyze risk templates. |
|
DLP Analyze Risk Templates Reader( Read DLP analyze risk templates. |
|
DLP Column Data Profiles Reader( Read DLP column profiles. |
|
DLP Connections Admin( Manage DLP Connections. |
|
DLP Connections Viewer( View DLP Connections. |
|
DLP Content Policies Consumer( Apply content policies. |
|
DLP Content Policies Editor( Edit DLP content policies. |
|
DLP Content Policies Reader( Read DLP content policies. |
|
DLP Data Profiles Admin( Manage DLP profiles. |
|
DLP Data Profiles Reader( Read DLP profiles. |
|
DLP De-identify Templates Editor( Edit DLP de-identify templates. |
|
DLP De-identify Templates Reader( Read DLP de-identify templates. |
|
DLP Cost Estimation( Manage DLP Cost Estimates. |
|
DLP File Store Data Profiles Admin( Manage DLP file store profiles. |
|
DLP File Store Data Profiles Reader( Read DLP file store profiles. |
|
DLP Inspect Findings Reader( Read DLP stored findings. |
|
DLP Inspect Templates Editor( Edit DLP inspect templates. |
|
DLP Inspect Templates Reader( Read DLP inspect templates. |
|
DLP Job Triggers Editor( Edit job triggers configurations. |
|
DLP Job Triggers Reader( Read job triggers. |
|
DLP Jobs Editor( Edit and create jobs |
|
DLP Jobs Reader( Read jobs |
|
DLP Organization Data Profiles Driver( Permissions needed by the DLP service account to generate data profiles within an organization or folder. Lowest-level resources where you can grant this role:
|
|
DLP Project Data Profiles Reader( Read DLP project profiles. |
|
DLP Project Data Profiles Driver( Permissions needed by the DLP service account to generate data profiles within a project. |
|
DLP Reader( Read DLP entities, such as jobs and templates. |
|
DLP Stored InfoTypes Editor( Edit DLP stored info types. |
|
DLP Stored InfoTypes Reader( Read DLP stored info types. |
|
DLP Subscription Admin( Manage DLP subscriptions. |
|
DLP Subscription Viewer( View DLP subscriptions. |
|
DLP Table Data Profiles Admin( Manage DLP table profiles. |
|
DLP Table Data Profiles Reader( Read DLP table profiles. |
|
Service agent roles
Service agent roles should only be granted to service agents.
| Role | Permissions |
|---|---|
DLP API Service Agent( Gives the Cloud DLP API service agent permissions for BigQuery, Cloud Storage, Datastore, Pub/Sub, and Cloud KMS. |
|
Sensitive Data Protection permissions
| Permission | Included in roles |
|---|---|
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Analyze Risk Templates Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Analyze Risk Templates Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Analyze Risk Templates Editor (
DLP Analyze Risk Templates Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Support User ( Service agent roles
|
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Analyze Risk Templates Editor (
DLP Analyze Risk Templates Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Security Auditor (
Support User ( Service agent roles
|
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Analyze Risk Templates Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Data Profiles Admin (
DLP Data Profiles Reader (
DLP File Store Data Profiles Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
Security Auditor (
Support User (
Security Center Admin Editor (
Security Center Admin Viewer ( |
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Column Data Profiles Reader (
DLP Data Profiles Admin (
DLP Data Profiles Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
Security Auditor (
Support User (
Security Center Admin Editor (
Security Center Admin Viewer ( |
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Column Data Profiles Reader (
DLP Data Profiles Admin (
DLP Data Profiles Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
Security Auditor (
Support User (
Security Center Admin Editor (
Security Center Admin Viewer ( |
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Connections Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Connections Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Connections Admin (
DLP Connections Viewer (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
Support User ( |
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Connections Admin (
DLP Connections Viewer (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
Security Auditor (
Support User ( |
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Connections Admin (
DLP Connections Viewer (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
Support User ( |
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Connections Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
DLP User (
Security Center Admin (
DLP Content Policies Consumer (
DLP Content Policies Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( Service agent roles
|
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Content Policies Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Content Policies Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Content Policies Consumer (
DLP Content Policies Editor (
DLP Content Policies Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Support User ( Service agent roles
|
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Content Policies Editor (
DLP Content Policies Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Security Auditor (
Support User ( |
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Content Policies Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP De-identify Templates Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP De-identify Templates Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP De-identify Templates Editor (
DLP De-identify Templates Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Support User ( Service agent roles
|
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP De-identify Templates Editor (
DLP De-identify Templates Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Security Auditor (
Support User ( Service agent roles
|
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP De-identify Templates Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Cost Estimation (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Cost Estimation (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Cost Estimation (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Cost Estimation (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
Support User ( |
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Cost Estimation (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
Security Auditor (
Support User ( |
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Data Profiles Admin (
DLP File Store Data Profiles Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Data Profiles Admin (
DLP Data Profiles Reader (
DLP File Store Data Profiles Admin (
DLP File Store Data Profiles Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
Security Auditor (
Support User (
Security Center Admin Editor (
Security Center Admin Viewer ( |
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Data Profiles Admin (
DLP Data Profiles Reader (
DLP File Store Data Profiles Admin (
DLP File Store Data Profiles Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
Security Auditor (
Support User (
Security Center Admin Editor (
Security Center Admin Viewer ( Service agent roles
|
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Inspect Findings Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Security Auditor (
Support User ( Service agent roles
|
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Inspect Templates Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Inspect Templates Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Inspect Templates Editor (
DLP Inspect Templates Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Support User ( Service agent roles
|
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Inspect Templates Editor (
DLP Inspect Templates Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Security Auditor (
Support User ( Service agent roles
|
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Inspect Templates Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Job Triggers Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Job Triggers Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Job Triggers Editor (
DLP Job Triggers Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Support User ( Service agent roles
|
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Job Triggers Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Job Triggers Editor (
DLP Job Triggers Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Security Auditor (
Support User ( Service agent roles
|
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Job Triggers Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( |
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Jobs Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( Service agent roles
|
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Jobs Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( Service agent roles
|
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Jobs Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( Service agent roles
|
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Jobs Editor (
DLP Jobs Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Support User ( Service agent roles
|
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Jobs Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( Service agent roles
|
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Jobs Editor (
DLP Jobs Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Security Auditor (
Support User ( Service agent roles
|
|
Admin (
Owner (
DLP Administrator (
DLP User (
Security Center Admin (
DLP Jobs Editor (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver ( Service agent roles
|
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP User (
DLP Viewer (
Security Center Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Support User ( Service agent roles
|
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP User (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
Security Auditor (
Support User ( Service agent roles
|
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Data Profiles Admin (
DLP Data Profiles Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Reader (
DLP Project Data Profiles Driver (
Security Auditor (
Support User (
Security Center Admin Editor (
Security Center Admin Viewer ( |
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Data Profiles Admin (
DLP Data Profiles Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Reader (
DLP Project Data Profiles Driver (
Security Auditor (
Support User (
Security Center Admin Editor (
Security Center Admin Viewer ( |
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Stored InfoTypes Editor ( |
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Stored InfoTypes Editor ( |
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
DLP Stored InfoTypes Editor (
DLP Stored InfoTypes Reader (
Support User ( Service agent roles
|
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Reader (
DLP Stored InfoTypes Editor (
DLP Stored InfoTypes Reader (
Security Auditor (
Support User ( Service agent roles
|
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Stored InfoTypes Editor ( |
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Subscription Admin ( |
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Subscription Admin ( |
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Subscription Admin (
DLP Subscription Viewer (
Support User ( |
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Subscription Admin (
DLP Subscription Viewer (
Security Auditor (
Support User ( |
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Subscription Admin ( |
|
Admin (
Owner (
Writer (
Editor (
DLP Administrator (
DLP Editor (
Security Center Admin (
DLP Data Profiles Admin (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Table Data Profiles Admin ( |
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Center Admin (
DLP Data Profiles Admin (
DLP Data Profiles Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Table Data Profiles Admin (
DLP Table Data Profiles Reader (
Security Auditor (
Support User (
Security Center Admin Editor (
Security Center Admin Viewer ( Service agent roles
|
|
Admin (
Owner (
Writer (
Editor (
Reader (
Viewer (
DLP Administrator (
DLP Editor (
DLP Viewer (
Security Admin (
Security Reviewer (
Security Center Admin (
DLP Data Profiles Admin (
DLP Data Profiles Reader (
DLP Organization Data Profiles Driver (
DLP Project Data Profiles Driver (
DLP Table Data Profiles Admin (
DLP Table Data Profiles Reader (
Security Auditor (
Support User (
Security Center Admin Editor (
Security Center Admin Viewer ( |
Common permissions
Some
Sensitive Data Protection methods require permissions from other
services. For example, to interact with Cloud Storage or BigQuery,
you need the relevant permissions for those services. Additionally, all billable
methods require that the caller has the serviceusage.services.use
permission on the project being used. This permission is included in
many Sensitive Data Protection roles, such as the DLP User role
(roles/dlp.user).