Database Insights roles and permissions

This page lists the IAM roles and permissions for Database Insights. To search through all roles and permissions, see the role and permission index.

Database Insights roles

Role Permissions

(roles/databaseinsights.viewer)

Viewer role for Database Insights data

databaseinsights.activeQueries.fetch

databaseinsights.activitySummary.fetch

databaseinsights.aggregatedEvents.query

databaseinsights.aggregatedStats.query

databaseinsights.clusterEvents.query

databaseinsights.databaseIssues.troubleshoot

databaseinsights.dbCenter.query

databaseinsights.dbPerformance.query

databaseinsights.indexRecommendations.query

databaseinsights.instanceEvents.query

databaseinsights.locations.*

  • databaseinsights.locations.get
  • databaseinsights.locations.list

databaseinsights.performanceIssues.*

  • databaseinsights.performanceIssues.detect
  • databaseinsights.performanceIssues.investigate

databaseinsights.queryMetrics.fetch

databaseinsights.queryStats.fetch

databaseinsights.queryTimeSeries.fetch

databaseinsights.recommendations.query

databaseinsights.resourceRecommendations.query

databaseinsights.systemMetrics.fetch

databaseinsights.timeSeries.query

databaseinsights.virtualDbxAgent.query

databaseinsights.waitEventStats.fetch

databaseinsights.waitEventTimeSeries.fetch

databaseinsights.workloadRecommendations.fetch

resourcemanager.projects.get

resourcemanager.projects.list

(roles/databaseinsights.assistantViewer)

Viewer role for Database Insights assistant data

databaseinsights.performanceIssues.*

  • databaseinsights.performanceIssues.detect
  • databaseinsights.performanceIssues.investigate

(roles/databaseinsights.eventsViewer)

Viewer role for Events Service data

databaseinsights.aggregatedEvents.query

databaseinsights.clusterEvents.query

databaseinsights.instanceEvents.query

(roles/databaseinsights.intelligenceViewer)

Viewer role for Database Insights intelligence data

databaseinsights.databaseIssues.troubleshoot

databaseinsights.dbCenter.query

databaseinsights.dbPerformance.query

databaseinsights.indexRecommendations.query

databaseinsights.queryMetrics.fetch

databaseinsights.queryStats.fetch

databaseinsights.queryTimeSeries.fetch

databaseinsights.systemMetrics.fetch

databaseinsights.waitEventStats.fetch

databaseinsights.waitEventTimeSeries.fetch

(roles/databaseinsights.monitoringViewer)

Viewer role for Database Insights monitoring data

databaseinsights.activeQueries.fetch

databaseinsights.activitySummary.fetch

databaseinsights.aggregatedStats.query

databaseinsights.locations.*

  • databaseinsights.locations.get
  • databaseinsights.locations.list

databaseinsights.queryStats.fetch

databaseinsights.queryTimeSeries.fetch

databaseinsights.timeSeries.query

databaseinsights.waitEventStats.fetch

databaseinsights.waitEventTimeSeries.fetch

databaseinsights.workloadRecommendations.fetch

resourcemanager.projects.get

resourcemanager.projects.list

(roles/databaseinsights.operationsAdmin)

Admin role for performing Database Insights operations

databaseinsights.activeQuery.terminate

(roles/databaseinsights.recommendationViewer)

Viewer role for Database Insights recommendation data

databaseinsights.indexRecommendations.query

databaseinsights.locations.*

  • databaseinsights.locations.get
  • databaseinsights.locations.list

databaseinsights.recommendations.query

databaseinsights.resourceRecommendations.query

databaseinsights.workloadRecommendations.fetch

resourcemanager.projects.get

resourcemanager.projects.list

(roles/databaseinsights.virtualDbxViewer)

Viewer role for Database Insights virtual Dbx data

databaseinsights.virtualDbxAgent.query

Service agent roles

Service agent roles should only be granted to service agents.

Role Permissions

(roles/databaseinsights.serviceAgent)

Default role for the Database Insights service agent.

alloydb.clusters.get

alloydb.clusters.list

alloydb.databases.list

alloydb.instances.get

alloydb.instances.list

alloydb.locations.*

  • alloydb.locations.get
  • alloydb.locations.list

alloydb.operations.get

alloydb.operations.list

alloydb.supportedDatabaseFlags.list

bigtable.appProfiles.list

bigtable.backups.list

bigtable.clusters.get

bigtable.clusters.list

bigtable.instances.get

bigtable.instances.list

bigtable.locations.list

bigtable.tables.get

bigtable.tables.list

cloudsql.backupRuns.list

cloudsql.databases.get

cloudsql.databases.list

cloudsql.instances.get

cloudsql.instances.list

cloudtrace.traces.patch

databasecenter.databaseGroups.list

databasecenter.fleetStats.list

databasecenter.userLabels.list

databasecenter.userTags.list

databaseinsights.databaseIssues.troubleshoot

databaseinsights.dbCenter.query

databaseinsights.dbPerformance.query

databaseinsights.indexRecommendations.query

databaseinsights.queryMetrics.fetch

databaseinsights.queryStats.fetch

databaseinsights.queryTimeSeries.fetch

databaseinsights.systemMetrics.fetch

databaseinsights.virtualDbxAgent.query

databaseinsights.waitEventStats.fetch

databaseinsights.waitEventTimeSeries.fetch

datastore.backupSchedules.list

datastore.databases.getMetadata

datastore.databases.list

datastore.locations.list

datastore.operations.get

datastore.operations.list

discoveryengine.collections.get

discoveryengine.dataConnectors.acquireAccessToken

discoveryengine.dataConnectors.get

logging.logEntries.create

logging.logEntries.list

logging.logEntries.route

monitoring.metricsScopes.link

monitoring.timeSeries.list

resourcemanager.projects.get

serviceusage.operations.get

serviceusage.services.get

serviceusage.services.list

serviceusage.services.use

spanner.backupOperations.list

spanner.databaseOperations.list

spanner.databaseRoles.list

spanner.databases.get

spanner.databases.list

spanner.instanceConfigs.get

spanner.instanceConfigs.list

spanner.instanceOperations.list

spanner.instancePartitions.list

spanner.instances.get

spanner.instances.list

telemetry.traces.write

Database Insights permissions

Permission Included in roles

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Reader (roles/reader)

Viewer (roles/viewer)

Database Insights Viewer (roles/databaseinsights.viewer)

Database Insights monitoring viewer (roles/databaseinsights.monitoringViewer)

Support User (roles/iam.supportUser)

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Database Insights performing operations (roles/databaseinsights.operationsAdmin)

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Reader (roles/reader)

Viewer (roles/viewer)

Database Insights Viewer (roles/databaseinsights.viewer)

Database Insights monitoring viewer (roles/databaseinsights.monitoringViewer)

Support User (roles/iam.supportUser)

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Reader (roles/reader)

Viewer (roles/viewer)

Database Insights Viewer (roles/databaseinsights.viewer)

Events Service viewer (roles/databaseinsights.eventsViewer)

Support User (roles/iam.supportUser)

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Reader (roles/reader)

Viewer (roles/viewer)

Database Insights Viewer (roles/databaseinsights.viewer)

Database Insights monitoring viewer (roles/databaseinsights.monitoringViewer)

Support User (roles/iam.supportUser)

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Reader (roles/reader)

Viewer (roles/viewer)

Database Insights Viewer (roles/databaseinsights.viewer)

Events Service viewer (roles/databaseinsights.eventsViewer)

Support User (roles/iam.supportUser)

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Reader (roles/reader)

Viewer (roles/viewer)

Database Insights Viewer (roles/databaseinsights.viewer)

Database Insights intelligence viewer (roles/databaseinsights.intelligenceViewer)

Support User (roles/iam.supportUser)

Service agent roles

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Reader (roles/reader)

Viewer (roles/viewer)

Database Insights Viewer (roles/databaseinsights.viewer)

Database Insights intelligence viewer (roles/databaseinsights.intelligenceViewer)

Support User (roles/iam.supportUser)

Service agent roles

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Reader (roles/reader)

Viewer (roles/viewer)

Database Insights Viewer (roles/databaseinsights.viewer)

Database Insights intelligence viewer (roles/databaseinsights.intelligenceViewer)

Support User (roles/iam.supportUser)

Service agent roles

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Reader (roles/reader)

Viewer (roles/viewer)

Database Insights Viewer (roles/databaseinsights.viewer)

Database Insights intelligence viewer (roles/databaseinsights.intelligenceViewer)

Database Insights recommendation viewer (roles/databaseinsights.recommendationViewer)

Support User (roles/iam.supportUser)

Service agent roles

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Reader (roles/reader)

Viewer (roles/viewer)

Database Insights Viewer (roles/databaseinsights.viewer)

Events Service viewer (roles/databaseinsights.eventsViewer)

Support User (roles/iam.supportUser)

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Reader (roles/reader)

Viewer (roles/viewer)

Database Insights Viewer (roles/databaseinsights.viewer)

Database Insights monitoring viewer (roles/databaseinsights.monitoringViewer)

Database Insights recommendation viewer (roles/databaseinsights.recommendationViewer)

Support User (roles/iam.supportUser)

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Reader (roles/reader)

Viewer (roles/viewer)

Database Insights Viewer (roles/databaseinsights.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Database Insights monitoring viewer (roles/databaseinsights.monitoringViewer)

Database Insights recommendation viewer (roles/databaseinsights.recommendationViewer)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Reader (roles/reader)

Viewer (roles/viewer)

Database Insights Viewer (roles/databaseinsights.viewer)

Database Insights assistant viewer (roles/databaseinsights.assistantViewer)

Support User (roles/iam.supportUser)

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Reader (roles/reader)

Viewer (roles/viewer)

Database Insights Viewer (roles/databaseinsights.viewer)

Database Insights assistant viewer (roles/databaseinsights.assistantViewer)

Support User (roles/iam.supportUser)

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Reader (roles/reader)

Viewer (roles/viewer)

Database Insights Viewer (roles/databaseinsights.viewer)

Database Insights intelligence viewer (roles/databaseinsights.intelligenceViewer)

Support User (roles/iam.supportUser)

Service agent roles

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Reader (roles/reader)

Viewer (roles/viewer)

Database Insights Viewer (roles/databaseinsights.viewer)

Database Insights intelligence viewer (roles/databaseinsights.intelligenceViewer)

Database Insights monitoring viewer (roles/databaseinsights.monitoringViewer)

Support User (roles/iam.supportUser)

Service agent roles

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Reader (roles/reader)

Viewer (roles/viewer)

Database Insights Viewer (roles/databaseinsights.viewer)

Database Insights intelligence viewer (roles/databaseinsights.intelligenceViewer)

Database Insights monitoring viewer (roles/databaseinsights.monitoringViewer)

Support User (roles/iam.supportUser)

Service agent roles

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Reader (roles/reader)

Viewer (roles/viewer)

Database Insights Viewer (roles/databaseinsights.viewer)

Database Insights recommendation viewer (roles/databaseinsights.recommendationViewer)

Support User (roles/iam.supportUser)

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Reader (roles/reader)

Viewer (roles/viewer)

Database Insights Viewer (roles/databaseinsights.viewer)

Database Insights recommendation viewer (roles/databaseinsights.recommendationViewer)

Support User (roles/iam.supportUser)

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Reader (roles/reader)

Viewer (roles/viewer)

Database Insights Viewer (roles/databaseinsights.viewer)

Database Insights intelligence viewer (roles/databaseinsights.intelligenceViewer)

Support User (roles/iam.supportUser)

Service agent roles

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Reader (roles/reader)

Viewer (roles/viewer)

Database Insights Viewer (roles/databaseinsights.viewer)

Database Insights monitoring viewer (roles/databaseinsights.monitoringViewer)

Support User (roles/iam.supportUser)

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Reader (roles/reader)

Viewer (roles/viewer)

Database Insights Viewer (roles/databaseinsights.viewer)

Database Insights virtual Dbx viewer (roles/databaseinsights.virtualDbxViewer)

Support User (roles/iam.supportUser)

Service agent roles

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Reader (roles/reader)

Viewer (roles/viewer)

Database Insights Viewer (roles/databaseinsights.viewer)

Database Insights intelligence viewer (roles/databaseinsights.intelligenceViewer)

Database Insights monitoring viewer (roles/databaseinsights.monitoringViewer)

Support User (roles/iam.supportUser)

Service agent roles

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Reader (roles/reader)

Viewer (roles/viewer)

Database Insights Viewer (roles/databaseinsights.viewer)

Database Insights intelligence viewer (roles/databaseinsights.intelligenceViewer)

Database Insights monitoring viewer (roles/databaseinsights.monitoringViewer)

Support User (roles/iam.supportUser)

Service agent roles

Admin (roles/admin)

Owner (roles/owner)

Writer (roles/writer)

Editor (roles/editor)

Reader (roles/reader)

Viewer (roles/viewer)

Database Insights Viewer (roles/databaseinsights.viewer)

Database Insights monitoring viewer (roles/databaseinsights.monitoringViewer)

Database Insights recommendation viewer (roles/databaseinsights.recommendationViewer)

Support User (roles/iam.supportUser)