Some or all of the information on this page might not apply to Trusted Cloud by S3NS. See Differences from Google Cloud for more details.

BigLake roles and permissions

This page lists the IAM roles and permissions for BigLake. To search through all roles and permissions, see the role and permission index.

BigLake roles

Role Permissions

Role	Permissions
BigLake Admin (`roles/biglake.admin`) Provides full access to all BigLake resources.	`biglake.*` `biglake.catalogs.create` `biglake.catalogs.delete` `biglake.catalogs.get` `biglake.catalogs.getIamPolicy` `biglake.catalogs.list` `biglake.catalogs.setIamPolicy` `biglake.databases.create` `biglake.databases.delete` `biglake.databases.get` `biglake.databases.list` `biglake.databases.update` `biglake.locks.check` `biglake.locks.create` `biglake.locks.delete` `biglake.locks.list` `biglake.namespaces.create` `biglake.namespaces.delete` `biglake.namespaces.get` `biglake.namespaces.getIamPolicy` `biglake.namespaces.list` `biglake.namespaces.setIamPolicy` `biglake.namespaces.update` `biglake.tables.create` `biglake.tables.delete` `biglake.tables.get` `biglake.tables.getData` `biglake.tables.getIamPolicy` `biglake.tables.list` `biglake.tables.lock` `biglake.tables.setIamPolicy` `biglake.tables.update` `biglake.tables.updateData` `resourcemanager.projects.get` `resourcemanager.projects.list`
BigLake Editor ^Beta (`roles/biglake.editor`) Provides read and write access to all BigLake resources.	`biglake.catalogs.create` `biglake.catalogs.delete` `biglake.catalogs.get` `biglake.catalogs.getIamPolicy` `biglake.catalogs.list` `biglake.namespaces.create` `biglake.namespaces.delete` `biglake.namespaces.get` `biglake.namespaces.getIamPolicy` `biglake.namespaces.list` `biglake.namespaces.update` `biglake.tables.create` `biglake.tables.delete` `biglake.tables.get` `biglake.tables.getData` `biglake.tables.getIamPolicy` `biglake.tables.list` `biglake.tables.update` `biglake.tables.updateData` `resourcemanager.projects.get` `resourcemanager.projects.list`
BigLake Metadata Viewer ^Beta (`roles/biglake.metadataViewer`) Provides read-only metadata access to all BigLake resources.	`biglake.catalogs.get` `biglake.catalogs.getIamPolicy` `biglake.catalogs.list` `biglake.namespaces.get` `biglake.namespaces.getIamPolicy` `biglake.namespaces.list` `biglake.tables.get` `biglake.tables.getIamPolicy` `biglake.tables.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
BigLake Viewer (`roles/biglake.viewer`) Provides read-only access to all BigLake resources.	`biglake.catalogs.get` `biglake.catalogs.getIamPolicy` `biglake.catalogs.list` `biglake.databases.get` `biglake.databases.list` `biglake.locks.list` `biglake.namespaces.get` `biglake.namespaces.getIamPolicy` `biglake.namespaces.list` `biglake.tables.get` `biglake.tables.getData` `biglake.tables.getIamPolicy` `biglake.tables.list` `resourcemanager.projects.get` `resourcemanager.projects.list`

BigLake Admin

(roles/biglake.admin)

Provides full access to all BigLake resources.

biglake.*

biglake.catalogs.create
biglake.catalogs.delete
biglake.catalogs.get
biglake.catalogs.getIamPolicy
biglake.catalogs.list
biglake.catalogs.setIamPolicy
biglake.databases.create
biglake.databases.delete
biglake.databases.get
biglake.databases.list
biglake.databases.update
biglake.locks.check
biglake.locks.create
biglake.locks.delete
biglake.locks.list
biglake.namespaces.create
biglake.namespaces.delete
biglake.namespaces.get
biglake.namespaces.getIamPolicy
biglake.namespaces.list
biglake.namespaces.setIamPolicy
biglake.namespaces.update
biglake.tables.create
biglake.tables.delete
biglake.tables.get
biglake.tables.getData
biglake.tables.getIamPolicy
biglake.tables.list
biglake.tables.lock
biglake.tables.setIamPolicy
biglake.tables.update
biglake.tables.updateData

resourcemanager.projects.get

resourcemanager.projects.list

BigLake Editor ^Beta

(roles/biglake.editor)

Provides read and write access to all BigLake resources.

biglake.catalogs.create

biglake.catalogs.delete

biglake.catalogs.get

biglake.catalogs.getIamPolicy

biglake.catalogs.list

biglake.namespaces.create

biglake.namespaces.delete

biglake.namespaces.get

biglake.namespaces.getIamPolicy

biglake.namespaces.list

biglake.namespaces.update

biglake.tables.create

biglake.tables.delete

biglake.tables.get

biglake.tables.getData

biglake.tables.getIamPolicy

biglake.tables.list

biglake.tables.update

biglake.tables.updateData

resourcemanager.projects.get

resourcemanager.projects.list

BigLake Metadata Viewer ^Beta

(roles/biglake.metadataViewer)

Provides read-only metadata access to all BigLake resources.

biglake.catalogs.get

biglake.catalogs.getIamPolicy

biglake.catalogs.list

biglake.namespaces.get

biglake.namespaces.getIamPolicy

biglake.namespaces.list

biglake.tables.get

biglake.tables.getIamPolicy

biglake.tables.list

resourcemanager.projects.get

resourcemanager.projects.list

BigLake Viewer

(roles/biglake.viewer)

Provides read-only access to all BigLake resources.

biglake.catalogs.get

biglake.catalogs.getIamPolicy

biglake.catalogs.list

biglake.databases.get

biglake.databases.list

biglake.locks.list

biglake.namespaces.get

biglake.namespaces.getIamPolicy

biglake.namespaces.list

biglake.tables.get

biglake.tables.getData

biglake.tables.getIamPolicy

biglake.tables.list

resourcemanager.projects.get

resourcemanager.projects.list

BigLake permissions

Permission	Included in roles
`biglake.catalogs.create`	Owner (`roles/owner`) Editor (`roles/editor`) BigLake Admin (`roles/biglake.admin`) BigLake Editor (`roles/biglake.editor`) Databases Admin (`roles/iam.databasesAdmin`)
`biglake.catalogs.delete`	Owner (`roles/owner`) Editor (`roles/editor`) BigLake Admin (`roles/biglake.admin`) BigLake Editor (`roles/biglake.editor`) Databases Admin (`roles/iam.databasesAdmin`)
`biglake.catalogs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) BigLake Admin (`roles/biglake.admin`) BigLake Editor (`roles/biglake.editor`) BigLake Metadata Viewer (`roles/biglake.metadataViewer`) BigLake Viewer (`roles/biglake.viewer`) Databases Admin (`roles/iam.databasesAdmin`) Support User (`roles/iam.supportUser`)
`biglake.catalogs.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) BigLake Admin (`roles/biglake.admin`) BigLake Editor (`roles/biglake.editor`) BigLake Metadata Viewer (`roles/biglake.metadataViewer`) BigLake Viewer (`roles/biglake.viewer`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`biglake.catalogs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) BigLake Admin (`roles/biglake.admin`) BigLake Editor (`roles/biglake.editor`) BigLake Metadata Viewer (`roles/biglake.metadataViewer`) BigLake Viewer (`roles/biglake.viewer`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`biglake.catalogs.setIamPolicy`	Owner (`roles/owner`) BigLake Admin (`roles/biglake.admin`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`)
`biglake.databases.create`	Owner (`roles/owner`) Editor (`roles/editor`) BigLake Admin (`roles/biglake.admin`) Databases Admin (`roles/iam.databasesAdmin`)
`biglake.databases.delete`	Owner (`roles/owner`) Editor (`roles/editor`) BigLake Admin (`roles/biglake.admin`) Databases Admin (`roles/iam.databasesAdmin`)
`biglake.databases.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) BigLake Admin (`roles/biglake.admin`) BigLake Viewer (`roles/biglake.viewer`) Databases Admin (`roles/iam.databasesAdmin`) Support User (`roles/iam.supportUser`)
`biglake.databases.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) BigLake Admin (`roles/biglake.admin`) BigLake Viewer (`roles/biglake.viewer`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`biglake.databases.update`	Owner (`roles/owner`) Editor (`roles/editor`) BigLake Admin (`roles/biglake.admin`) Databases Admin (`roles/iam.databasesAdmin`)
`biglake.locks.check`	Owner (`roles/owner`) Editor (`roles/editor`) BigLake Admin (`roles/biglake.admin`) Databases Admin (`roles/iam.databasesAdmin`)
`biglake.locks.create`	Owner (`roles/owner`) Editor (`roles/editor`) BigLake Admin (`roles/biglake.admin`) Databases Admin (`roles/iam.databasesAdmin`)
`biglake.locks.delete`	Owner (`roles/owner`) Editor (`roles/editor`) BigLake Admin (`roles/biglake.admin`) Databases Admin (`roles/iam.databasesAdmin`)
`biglake.locks.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) BigLake Admin (`roles/biglake.admin`) BigLake Viewer (`roles/biglake.viewer`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`biglake.namespaces.create`	Owner (`roles/owner`) Editor (`roles/editor`) BigLake Admin (`roles/biglake.admin`) BigLake Editor (`roles/biglake.editor`) Databases Admin (`roles/iam.databasesAdmin`)
`biglake.namespaces.delete`	Owner (`roles/owner`) Editor (`roles/editor`) BigLake Admin (`roles/biglake.admin`) BigLake Editor (`roles/biglake.editor`) Databases Admin (`roles/iam.databasesAdmin`)
`biglake.namespaces.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) BigLake Admin (`roles/biglake.admin`) BigLake Editor (`roles/biglake.editor`) BigLake Metadata Viewer (`roles/biglake.metadataViewer`) BigLake Viewer (`roles/biglake.viewer`) Databases Admin (`roles/iam.databasesAdmin`) Support User (`roles/iam.supportUser`)
`biglake.namespaces.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) BigLake Admin (`roles/biglake.admin`) BigLake Editor (`roles/biglake.editor`) BigLake Metadata Viewer (`roles/biglake.metadataViewer`) BigLake Viewer (`roles/biglake.viewer`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`biglake.namespaces.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) BigLake Admin (`roles/biglake.admin`) BigLake Editor (`roles/biglake.editor`) BigLake Metadata Viewer (`roles/biglake.metadataViewer`) BigLake Viewer (`roles/biglake.viewer`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`biglake.namespaces.setIamPolicy`	Owner (`roles/owner`) BigLake Admin (`roles/biglake.admin`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`)
`biglake.namespaces.update`	Owner (`roles/owner`) Editor (`roles/editor`) BigLake Admin (`roles/biglake.admin`) BigLake Editor (`roles/biglake.editor`) Databases Admin (`roles/iam.databasesAdmin`)
`biglake.tables.create`	Owner (`roles/owner`) Editor (`roles/editor`) BigLake Admin (`roles/biglake.admin`) BigLake Editor (`roles/biglake.editor`) Databases Admin (`roles/iam.databasesAdmin`)
`biglake.tables.delete`	Owner (`roles/owner`) Editor (`roles/editor`) BigLake Admin (`roles/biglake.admin`) BigLake Editor (`roles/biglake.editor`) Databases Admin (`roles/iam.databasesAdmin`)
`biglake.tables.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) BigLake Admin (`roles/biglake.admin`) BigLake Editor (`roles/biglake.editor`) BigLake Metadata Viewer (`roles/biglake.metadataViewer`) BigLake Viewer (`roles/biglake.viewer`) Databases Admin (`roles/iam.databasesAdmin`) Support User (`roles/iam.supportUser`)
`biglake.tables.getData`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) BigLake Admin (`roles/biglake.admin`) BigLake Editor (`roles/biglake.editor`) BigLake Viewer (`roles/biglake.viewer`) Databases Admin (`roles/iam.databasesAdmin`) Support User (`roles/iam.supportUser`)
`biglake.tables.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) BigLake Admin (`roles/biglake.admin`) BigLake Editor (`roles/biglake.editor`) BigLake Metadata Viewer (`roles/biglake.metadataViewer`) BigLake Viewer (`roles/biglake.viewer`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`biglake.tables.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) BigLake Admin (`roles/biglake.admin`) BigLake Editor (`roles/biglake.editor`) BigLake Metadata Viewer (`roles/biglake.metadataViewer`) BigLake Viewer (`roles/biglake.viewer`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`biglake.tables.lock`	Owner (`roles/owner`) Editor (`roles/editor`) BigLake Admin (`roles/biglake.admin`) Databases Admin (`roles/iam.databasesAdmin`)
`biglake.tables.setIamPolicy`	Owner (`roles/owner`) BigLake Admin (`roles/biglake.admin`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`)
`biglake.tables.update`	Owner (`roles/owner`) Editor (`roles/editor`) BigLake Admin (`roles/biglake.admin`) BigLake Editor (`roles/biglake.editor`) Databases Admin (`roles/iam.databasesAdmin`)
`biglake.tables.updateData`	Owner (`roles/owner`) Editor (`roles/editor`) BigLake Admin (`roles/biglake.admin`) BigLake Editor (`roles/biglake.editor`) Databases Admin (`roles/iam.databasesAdmin`)

BigLake roles and permissions

BigLake roles

BigLake Admin

BigLake Editor ^Beta

BigLake Metadata Viewer ^Beta

BigLake Viewer

BigLake permissions

`biglake.catalogs.create`

`biglake.catalogs.delete`

`biglake.catalogs.get`

`biglake.catalogs.getIamPolicy`

`biglake.catalogs.list`

`biglake.catalogs.setIamPolicy`

`biglake.databases.create`

`biglake.databases.delete`

`biglake.databases.get`

`biglake.databases.list`

`biglake.databases.update`

`biglake.locks.check`

`biglake.locks.create`

`biglake.locks.delete`

`biglake.locks.list`

`biglake.namespaces.create`

`biglake.namespaces.delete`

`biglake.namespaces.get`

`biglake.namespaces.getIamPolicy`

`biglake.namespaces.list`

`biglake.namespaces.setIamPolicy`

`biglake.namespaces.update`

`biglake.tables.create`

`biglake.tables.delete`

`biglake.tables.get`

`biglake.tables.getData`

`biglake.tables.getIamPolicy`

`biglake.tables.list`

`biglake.tables.lock`

`biglake.tables.setIamPolicy`

`biglake.tables.update`

`biglake.tables.updateData`

BigLake roles and permissions

BigLake roles

BigLake Admin

BigLake Editor Beta

BigLake Metadata Viewer Beta

BigLake Viewer

BigLake permissions

biglake.catalogs.create

biglake.catalogs.delete

biglake.catalogs.get

biglake.catalogs.getIamPolicy

biglake.catalogs.list

biglake.catalogs.setIamPolicy

biglake.databases.create

biglake.databases.delete

biglake.databases.get

biglake.databases.list

biglake.databases.update

biglake.locks.check

biglake.locks.create

biglake.locks.delete

biglake.locks.list

biglake.namespaces.create

biglake.namespaces.delete

biglake.namespaces.get

biglake.namespaces.getIamPolicy

biglake.namespaces.list

biglake.namespaces.setIamPolicy

biglake.namespaces.update

biglake.tables.create

biglake.tables.delete

biglake.tables.get

biglake.tables.getData

biglake.tables.getIamPolicy

biglake.tables.list

biglake.tables.lock

biglake.tables.setIamPolicy

biglake.tables.update

biglake.tables.updateData

BigLake Editor ^Beta

BigLake Metadata Viewer ^Beta

`biglake.catalogs.create`

`biglake.catalogs.delete`

`biglake.catalogs.get`

`biglake.catalogs.getIamPolicy`

`biglake.catalogs.list`

`biglake.catalogs.setIamPolicy`

`biglake.databases.create`

`biglake.databases.delete`

`biglake.databases.get`

`biglake.databases.list`

`biglake.databases.update`

`biglake.locks.check`

`biglake.locks.create`

`biglake.locks.delete`

`biglake.locks.list`

`biglake.namespaces.create`

`biglake.namespaces.delete`

`biglake.namespaces.get`

`biglake.namespaces.getIamPolicy`

`biglake.namespaces.list`

`biglake.namespaces.setIamPolicy`

`biglake.namespaces.update`

`biglake.tables.create`

`biglake.tables.delete`

`biglake.tables.get`

`biglake.tables.getData`

`biglake.tables.getIamPolicy`

`biglake.tables.list`

`biglake.tables.lock`

`biglake.tables.setIamPolicy`

`biglake.tables.update`

`biglake.tables.updateData`