# Bigtable access control with IAM

Identity and Access Management (IAM) lets you manage granular permissions across your
Bigtable resources. IAM helps you enforce the principle
of least privilege and secure your data across projects, instances, and tables.

Bigtable uses [IAM](https://docs.cloud.google.com/iam) for access control. To
control who has access a resource, set IAM policies on the
resource.

Bigtable resources are organized in a hierarchy. A
Google Cloud project is the parent of a Bigtable
instance, which is the parent of its clusters and tables. A table is the parent
of its authorized views while a cluster is the parent of its backups. You
can configure access control at each level.

If you have permissions at a level, then you automatically have permissions
below that level. For example, if you have access at the project level, then you
have access to the instances, clusters, tables, authorized views,
continuous materialized views in that project. If you are granted access to
an authorized view or a continuous materialized view, then you
don't automatically have access to higher-level resources that are parents of
the authorized view or continuous materialized view, such as the
table and instance. This behavior is called *policy inheritance*.

For more information about the IAM hierarchy, see
[IAM policy inheritance](https://docs.cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy.md.txt#inheritance).

## Access control examples

Examples of using access control at the **project** level include the following:

- Allow a user to read from, but not write to, any table within the project.
- Allow a user to read from and write to any table within the project, but not manage instances.
- Allow a user to read from and write to any table within the project, and manage instances.

Examples of using access control at the **instance** level include the
following:

- Allow a user to read from any table in only one instance in a project that has multiple instances.
- Allow a user to manage only one instance in a project that has multiple instances.

Examples of using access control at the **table** level include the following:

- Allow a user to write to a table but not read from the table.
- Allow a user to read from a table but not write to the table.

Examples of using access control at the **backup** level include the following:

- Prevent a user from deleting a backup.
- Prevent a user from restoring from the backup.

Examples of using access control at the **authorized view** level
include the following:

- Let a user read an authorized view but not modify it.
- Let a user view data from only one of multiple authorized views of a table.

Examples of using access control at the **continuous materialized view**
level include the following:

- Let a user read from a continuous materialized view but not modify the underlying table.

For more information about IAM and its features, see the
[IAM](https://docs.cloud.google.com/iam) developer's guide. In particular, see
[Granting, Changing, and Revoking Access](https://docs.cloud.google.com/iam/docs/granting-changing-revoking-access.md.txt).

In Bigtable, you cannot grant access to the following [types of
principals](https://docs.cloud.google.com/iam/docs/principals-overview#principal-types):

- [`allAuthenticatedUsers`](https://docs.cloud.google.com/iam/docs/principals-overview.md.txt#all-authenticated-users)
- [`allUsers`](https://docs.cloud.google.com/iam/docs/principals-overview.md.txt#all-users)

For lists of the permissions and roles that Bigtable supports, see
the following sections.

## Enabling the Bigtable API

To view and assign Bigtable IAM roles, you must
enable the Bigtable API for your project. Until you enable the
API, the Bigtable roles don't appear in the
Google Cloud console.

<br />

**Roles required to enable APIs**


To enable APIs, you need the `serviceusage.services.enable` permission. If you
created the project, then you likely already have this permission through the
Owner role (`roles/owner`). Otherwise, you can get this permission through the
Service Usage Admin role (`roles/serviceusage.serviceUsageAdmin`).
[Learn how to grant roles](https://docs.cloud.google.com/iam/docs/granting-changing-revoking-access.md.txt).

[Enable the API](https://console.cloud.google.com/apis/enableflow?apiid=bigtable&redirect=https://console.cloud.google.com)

## Permissions

This section summarizes the permissions that Bigtable supports.

Permissions allow users to perform specific actions on Bigtable
resources. For example, the `bigtable.instances.list` permissions allows users
to list all of the Bigtable instances within a project. You don't
grant permissions to users directly; instead, you assign each user a [predefined
role](https://docs.cloud.google.com/bigtable/docs/access-control#roles) or [custom role](https://docs.cloud.google.com/bigtable/docs/access-control.md.txt#custom-roles), which grants one or more
permissions.

The following table lists the IAM permissions that are associated
with Bigtable.

> [!NOTE]
> **Note:** Conditional writes (`CheckAndMutateRow`) and read-modify-write operations (`ReadModifyWriteRow`) require the following permissions:
>
> - `bigtable.tables.readRows` or `bigtable.authorizedViews.readRows`
> - `bigtable.tables.mutateRows` or `bigtable.authorizedViews.mutateRows`
>
> The `bigtable.instances.executeQuery` permission lets you send `ExecuteQuery` and `PrepareQuery` requests to an instance.

| Permission | Included in roles |
|---|---|
| #### `bigtable.appProfiles.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.appProfiles.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.appProfiles.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.appProfiles.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Database Insights Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/databaseinsights.md.txt#databaseinsights.serviceAgent) (`roles/databaseinsights.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.appProfiles.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.authorizedViews.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.authorizedViews.createTagBinding` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.authorizedViews.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.authorizedViews.deleteTagBinding` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.authorizedViews.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.authorizedViews.getIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.authorizedViews.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.authorizedViews.listEffectiveTags` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [Tag Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagViewer) (`roles/resourcemanager.tagViewer`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.authorizedViews.listTagBindings` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [Tag Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagViewer) (`roles/resourcemanager.tagViewer`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.authorizedViews.mutateRows` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.authorizedViews.readRows` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.authorizedViews.sampleRowKeys` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.authorizedViews.setIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.authorizedViews.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.backups.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.backups.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.backups.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.backups.getIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.backups.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Database Insights Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/databaseinsights.md.txt#databaseinsights.serviceAgent) (`roles/databaseinsights.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.backups.read` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.backups.restore` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.backups.setIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.backups.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.clusters.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.clusters.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.clusters.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Database Insights Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/databaseinsights.md.txt#databaseinsights.serviceAgent) (`roles/databaseinsights.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.clusters.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Database Insights Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/databaseinsights.md.txt#databaseinsights.serviceAgent) (`roles/databaseinsights.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.clusters.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.hotTablets.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.instances.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.instances.createTagBinding` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.instances.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.instances.deleteTagBinding` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.instances.executeQuery` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.instances.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Database Insights Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/databaseinsights.md.txt#databaseinsights.serviceAgent) (`roles/databaseinsights.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.instances.getIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.instances.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Database Insights Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/databaseinsights.md.txt#databaseinsights.serviceAgent) (`roles/databaseinsights.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.instances.listEffectiveTags` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [Tag Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagViewer) (`roles/resourcemanager.tagViewer`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.instances.listTagBindings` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Tag User](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagUser) (`roles/resourcemanager.tagUser`) [Tag Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/resourcemanager.md.txt#resourcemanager.tagViewer) (`roles/resourcemanager.tagViewer`) [DLP Organization Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.orgdriver) (`roles/dlp.orgdriver`) [DLP Project Data Profiles Driver](https://docs.cloud.google.com/iam/docs/roles-permissions/dlp.md.txt#dlp.projectdriver) (`roles/dlp.projectdriver`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.instances.ping` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.instances.setIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.instances.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.keyvisualizer.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.keyvisualizer.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.locations.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Database Insights Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/databaseinsights.md.txt#databaseinsights.serviceAgent) (`roles/databaseinsights.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.logicalViews.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.logicalViews.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.logicalViews.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.logicalViews.getIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.logicalViews.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.logicalViews.readRows` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.logicalViews.setIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.logicalViews.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.materializedViews.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.materializedViews.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.materializedViews.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.materializedViews.getIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.materializedViews.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.materializedViews.readRows` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.materializedViews.sampleRowKeys` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.materializedViews.setIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.materializedViews.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.memoryLayers.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.memoryLayers.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.memoryLayers.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.schemaBundles.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.schemaBundles.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.schemaBundles.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.schemaBundles.getIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.schemaBundles.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.schemaBundles.setIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.schemaBundles.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.tables.checkConsistency` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.tables.create` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.tables.delete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.tables.generateConsistencyToken` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.tables.get` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Vertex AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.serviceAgent) (`roles/aiplatform.serviceAgent`) - [AutoML Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/automl.md.txt#automl.serviceAgent) (`roles/automl.serviceAgent`) - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Database Insights Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/databaseinsights.md.txt#databaseinsights.serviceAgent) (`roles/databaseinsights.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [Datapipelines Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datapipelines.md.txt#datapipelines.serviceAgent) (`roles/datapipelines.serviceAgent`) - [Cloud Vision AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/visionai.md.txt#visionai.serviceAgent) (`roles/visionai.serviceAgent`) |
| #### `bigtable.tables.getIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.tables.list` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.viewer) (`roles/bigtable.viewer`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Security Reviewer](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityReviewer) (`roles/iam.securityReviewer`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Security Auditor](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.securityAuditor) (`roles/iam.securityAuditor`) [Site Reliability Engineer](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.siteReliabilityEngineer) (`roles/iam.siteReliabilityEngineer`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) [Wiz Cloud Inventory Viewer](https://docs.cloud.google.com/iam/docs/roles-permissions/wiz.md.txt#wiz.cloudInventoryViewer) (`roles/wiz.cloudInventoryViewer`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Vertex AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.serviceAgent) (`roles/aiplatform.serviceAgent`) - [AutoML Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/automl.md.txt#automl.serviceAgent) (`roles/automl.serviceAgent`) - [Database Insights Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/databaseinsights.md.txt#databaseinsights.serviceAgent) (`roles/databaseinsights.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [Cloud Vision AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/visionai.md.txt#visionai.serviceAgent) (`roles/visionai.serviceAgent`) |
| #### `bigtable.tables.mutateRows` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.tables.readRows` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Vertex AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/aiplatform.md.txt#aiplatform.serviceAgent) (`roles/aiplatform.serviceAgent`) - [AutoML Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/automl.md.txt#automl.serviceAgent) (`roles/automl.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [Discovery Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.serviceAgent) (`roles/discoveryengine.serviceAgent`) - [Cloud Vision AI Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/visionai.md.txt#visionai.serviceAgent) (`roles/visionai.serviceAgent`) |
| #### `bigtable.tables.sampleRowKeys` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Reader](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/reader`) [Viewer (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/viewer`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Bigtable User](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.user) (`roles/bigtable.user`) [Bigtable Reader](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.reader) (`roles/bigtable.reader`) [Data Scientist](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.dataScientist) (`roles/iam.dataScientist`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) [Support User](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.supportUser) (`roles/iam.supportUser`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) - [Discovery Engine Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/discoveryengine.md.txt#discoveryengine.serviceAgent) (`roles/discoveryengine.serviceAgent`) |
| #### `bigtable.tables.setIamPolicy` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Security Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/iam.md.txt#iam.securityAdmin) (`roles/iam.securityAdmin`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.tables.undelete` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |
| #### `bigtable.tables.update` | [Admin](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/admin`) [Owner (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/owner`) [Writer](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/writer`) [Editor (Legacy)](https://docs.cloud.google.com/iam/docs/roles-overview.md.txt#basic) (`roles/editor`) [Bigtable Administrator](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.admin) (`roles/bigtable.admin`) [Bigtable Editor](https://docs.cloud.google.com/iam/docs/roles-permissions/bigtable.md.txt#bigtable.editor) (`roles/bigtable.editor`) [Databases Admin](https://docs.cloud.google.com/iam/docs/roles-permissions/jobfunctions.md.txt#iam.databasesAdmin) (`roles/iam.databasesAdmin`) Service agent roles > [!WARNING] > **Warning:** Don't grant service agent roles to any principals except [service agents](https://docs.cloud.google.com/iam/docs/service-agents.md.txt). - [Cloud Deployment Manager Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/deploymentmanager.md.txt#clouddeploymentmanager.serviceAgent) (`roles/clouddeploymentmanager.serviceAgent`) - [Cloud Data Fusion API Service Agent](https://docs.cloud.google.com/iam/docs/roles-permissions/datafusion.md.txt#datafusion.serviceAgent) (`roles/datafusion.serviceAgent`) |

## Predefined roles

Each predefined role is a bundle of one or more [permissions](https://docs.cloud.google.com/bigtable/docs/access-control.md.txt#permissions). For
example, `roles/bigtable.reader` provides read-only access to information about
Bigtable instances, clusters, tables, and column families, as well
as the data contained within your tables. You assign roles to users or groups,
which allows them to perform actions on the resources in your project.

The following table lists the predefined roles for Bigtable,
including a list of the permissions associated with each role:

| Role | Permissions |
|---|---|
| #### Bigtable Administrator (`roles/bigtable.admin`) Administers all Bigtable instances within a project, including the data stored within tables. Can create new instances. Intended for project administrators. Lowest-level resources where you can grant this role: - Table | `bigtable.*` - `bigtable.appProfiles.create` - `bigtable.appProfiles.delete` - `bigtable.appProfiles.get` - `bigtable.appProfiles.list` - `bigtable.appProfiles.update` - `bigtable.authorizedViews.create` - `bigtable.authorizedViews.createTagBinding` - `bigtable.authorizedViews.delete` - `bigtable.authorizedViews.deleteTagBinding` - `bigtable.authorizedViews.get` - `bigtable.authorizedViews.getIamPolicy` - `bigtable.authorizedViews.list` - `bigtable.authorizedViews.listEffectiveTags` - `bigtable.authorizedViews.listTagBindings` - `bigtable.authorizedViews.mutateRows` - `bigtable.authorizedViews.readRows` - `bigtable.authorizedViews.sampleRowKeys` - `bigtable.authorizedViews.setIamPolicy` - `bigtable.authorizedViews.update` - `bigtable.backups.create` - `bigtable.backups.delete` - `bigtable.backups.get` - `bigtable.backups.getIamPolicy` - `bigtable.backups.list` - `bigtable.backups.read` - `bigtable.backups.restore` - `bigtable.backups.setIamPolicy` - `bigtable.backups.update` - `bigtable.clusters.create` - `bigtable.clusters.delete` - `bigtable.clusters.get` - `bigtable.clusters.list` - `bigtable.clusters.update` - `bigtable.hotTablets.list` - `bigtable.instances.create` - `bigtable.instances.createTagBinding` - `bigtable.instances.delete` - `bigtable.instances.deleteTagBinding` - `bigtable.instances.executeQuery` - `bigtable.instances.get` - `bigtable.instances.getIamPolicy` - `bigtable.instances.list` - `bigtable.instances.listEffectiveTags` - `bigtable.instances.listTagBindings` - `bigtable.instances.ping` - `bigtable.instances.setIamPolicy` - `bigtable.instances.update` - `bigtable.keyvisualizer.get` - `bigtable.keyvisualizer.list` - `bigtable.locations.list` - `bigtable.logicalViews.create` - `bigtable.logicalViews.delete` - `bigtable.logicalViews.get` - `bigtable.logicalViews.getIamPolicy` - `bigtable.logicalViews.list` - `bigtable.logicalViews.readRows` - `bigtable.logicalViews.setIamPolicy` - `bigtable.logicalViews.update` - `bigtable.materializedViews.create` - `bigtable.materializedViews.delete` - `bigtable.materializedViews.get` - `bigtable.materializedViews.getIamPolicy` - `bigtable.materializedViews.list` - `bigtable.materializedViews.readRows` - `bigtable.materializedViews.sampleRowKeys` - `bigtable.materializedViews.setIamPolicy` - `bigtable.materializedViews.update` - `bigtable.memoryLayers.get` - `bigtable.memoryLayers.list` - `bigtable.memoryLayers.update` - `bigtable.schemaBundles.create` - `bigtable.schemaBundles.delete` - `bigtable.schemaBundles.get` - `bigtable.schemaBundles.getIamPolicy` - `bigtable.schemaBundles.list` - `bigtable.schemaBundles.setIamPolicy` - `bigtable.schemaBundles.update` - `bigtable.tables.checkConsistency` - `bigtable.tables.create` - `bigtable.tables.delete` - `bigtable.tables.generateConsistencyToken` - `bigtable.tables.get` - `bigtable.tables.getIamPolicy` - `bigtable.tables.list` - `bigtable.tables.mutateRows` - `bigtable.tables.readRows` - `bigtable.tables.sampleRowKeys` - `bigtable.tables.setIamPolicy` - `bigtable.tables.undelete` - `bigtable.tables.update` `cloudkms.keyHandles.*` - `cloudkms.keyHandles.create` - `cloudkms.keyHandles.get` - `cloudkms.keyHandles.list` `cloudkms.operations.get` `cloudkms.projects.showEffectiveAutokeyConfig` `monitoring.metricDescriptors.get` `monitoring.metricDescriptors.list` `monitoring.timeSeries.*` - `monitoring.timeSeries.create` - `monitoring.timeSeries.list` `resourcemanager.projects.get` |
| #### Bigtable Editor (`roles/bigtable.editor`) Editor role for bigtable | `bigtable.appProfiles.*` - `bigtable.appProfiles.create` - `bigtable.appProfiles.delete` - `bigtable.appProfiles.get` - `bigtable.appProfiles.list` - `bigtable.appProfiles.update` `bigtable.authorizedViews.create` `bigtable.authorizedViews.delete` `bigtable.authorizedViews.get` `bigtable.authorizedViews.getIamPolicy` `bigtable.authorizedViews.list` `bigtable.authorizedViews.listEffectiveTags` `bigtable.authorizedViews.listTagBindings` `bigtable.authorizedViews.mutateRows` `bigtable.authorizedViews.readRows` `bigtable.authorizedViews.sampleRowKeys` `bigtable.authorizedViews.update` `bigtable.backups.create` `bigtable.backups.delete` `bigtable.backups.get` `bigtable.backups.getIamPolicy` `bigtable.backups.list` `bigtable.backups.read` `bigtable.backups.restore` `bigtable.backups.update` `bigtable.clusters.*` - `bigtable.clusters.create` - `bigtable.clusters.delete` - `bigtable.clusters.get` - `bigtable.clusters.list` - `bigtable.clusters.update` `bigtable.hotTablets.list` `bigtable.instances.create` `bigtable.instances.delete` `bigtable.instances.executeQuery` `bigtable.instances.get` `bigtable.instances.getIamPolicy` `bigtable.instances.list` `bigtable.instances.listEffectiveTags` `bigtable.instances.listTagBindings` `bigtable.instances.ping` `bigtable.instances.update` `bigtable.keyvisualizer.*` - `bigtable.keyvisualizer.get` - `bigtable.keyvisualizer.list` `bigtable.locations.list` `bigtable.logicalViews.create` `bigtable.logicalViews.delete` `bigtable.logicalViews.get` `bigtable.logicalViews.getIamPolicy` `bigtable.logicalViews.list` `bigtable.logicalViews.readRows` `bigtable.logicalViews.update` `bigtable.materializedViews.create` `bigtable.materializedViews.delete` `bigtable.materializedViews.get` `bigtable.materializedViews.getIamPolicy` `bigtable.materializedViews.list` `bigtable.materializedViews.readRows` `bigtable.materializedViews.sampleRowKeys` `bigtable.materializedViews.update` `bigtable.memoryLayers.*` - `bigtable.memoryLayers.get` - `bigtable.memoryLayers.list` - `bigtable.memoryLayers.update` `bigtable.schemaBundles.create` `bigtable.schemaBundles.delete` `bigtable.schemaBundles.get` `bigtable.schemaBundles.getIamPolicy` `bigtable.schemaBundles.list` `bigtable.schemaBundles.update` `bigtable.tables.checkConsistency` `bigtable.tables.create` `bigtable.tables.delete` `bigtable.tables.generateConsistencyToken` `bigtable.tables.get` `bigtable.tables.getIamPolicy` `bigtable.tables.list` `bigtable.tables.mutateRows` `bigtable.tables.readRows` `bigtable.tables.sampleRowKeys` `bigtable.tables.undelete` `bigtable.tables.update` `monitoring.metricDescriptors.get` `monitoring.metricDescriptors.list` `monitoring.timeSeries.list` `resourcemanager.projects.get` `resourcemanager.projects.list` |
| #### Bigtable User (`roles/bigtable.user`) Provides read-write access to the data stored within Bigtable tables. Intended for application developers or service accounts. Lowest-level resources where you can grant this role: - Table | `bigtable.appProfiles.get` `bigtable.appProfiles.list` `bigtable.authorizedViews.get` `bigtable.authorizedViews.list` `bigtable.authorizedViews.mutateRows` `bigtable.authorizedViews.readRows` `bigtable.authorizedViews.sampleRowKeys` `bigtable.backups.get` `bigtable.backups.list` `bigtable.clusters.get` `bigtable.clusters.list` `bigtable.hotTablets.list` `bigtable.instances.executeQuery` `bigtable.instances.get` `bigtable.instances.list` `bigtable.instances.ping` `bigtable.keyvisualizer.*` - `bigtable.keyvisualizer.get` - `bigtable.keyvisualizer.list` `bigtable.locations.list` `bigtable.logicalViews.get` `bigtable.logicalViews.list` `bigtable.logicalViews.readRows` `bigtable.materializedViews.get` `bigtable.materializedViews.list` `bigtable.materializedViews.readRows` `bigtable.materializedViews.sampleRowKeys` `bigtable.memoryLayers.get` `bigtable.memoryLayers.list` `bigtable.schemaBundles.get` `bigtable.schemaBundles.list` `bigtable.tables.checkConsistency` `bigtable.tables.generateConsistencyToken` `bigtable.tables.get` `bigtable.tables.list` `bigtable.tables.mutateRows` `bigtable.tables.readRows` `bigtable.tables.sampleRowKeys` `monitoring.metricDescriptors.get` `monitoring.metricDescriptors.list` `monitoring.timeSeries.*` - `monitoring.timeSeries.create` - `monitoring.timeSeries.list` `resourcemanager.projects.get` |
| #### Bigtable Viewer (`roles/bigtable.viewer`) Provides no data access. Intended as a minimal set of permissions to access the Google Cloud console for Bigtable. Lowest-level resources where you can grant this role: - Table | `bigtable.appProfiles.get` `bigtable.appProfiles.list` `bigtable.authorizedViews.get` `bigtable.authorizedViews.getIamPolicy` `bigtable.authorizedViews.list` `bigtable.authorizedViews.listEffectiveTags` `bigtable.authorizedViews.listTagBindings` `bigtable.backups.get` `bigtable.backups.getIamPolicy` `bigtable.backups.list` `bigtable.clusters.get` `bigtable.clusters.list` `bigtable.hotTablets.list` `bigtable.instances.get` `bigtable.instances.getIamPolicy` `bigtable.instances.list` `bigtable.instances.listEffectiveTags` `bigtable.instances.listTagBindings` `bigtable.locations.list` `bigtable.logicalViews.get` `bigtable.logicalViews.getIamPolicy` `bigtable.logicalViews.list` `bigtable.materializedViews.get` `bigtable.materializedViews.getIamPolicy` `bigtable.materializedViews.list` `bigtable.memoryLayers.get` `bigtable.memoryLayers.list` `bigtable.schemaBundles.get` `bigtable.schemaBundles.getIamPolicy` `bigtable.schemaBundles.list` `bigtable.tables.checkConsistency` `bigtable.tables.generateConsistencyToken` `bigtable.tables.get` `bigtable.tables.getIamPolicy` `bigtable.tables.list` `monitoring.metricDescriptors.get` `monitoring.metricDescriptors.list` `monitoring.timeSeries.list` `resourcemanager.projects.get` |
| #### Bigtable Reader (`roles/bigtable.reader`) Provides read-only access to the data stored within Bigtable tables. Intended for data scientists, dashboard generators, and other data-analysis scenarios. Lowest-level resources where you can grant this role: - Table | `bigtable.appProfiles.get` `bigtable.appProfiles.list` `bigtable.authorizedViews.get` `bigtable.authorizedViews.list` `bigtable.authorizedViews.readRows` `bigtable.authorizedViews.sampleRowKeys` `bigtable.backups.get` `bigtable.backups.list` `bigtable.clusters.get` `bigtable.clusters.list` `bigtable.hotTablets.list` `bigtable.instances.executeQuery` `bigtable.instances.get` `bigtable.instances.list` `bigtable.instances.ping` `bigtable.keyvisualizer.*` - `bigtable.keyvisualizer.get` - `bigtable.keyvisualizer.list` `bigtable.locations.list` `bigtable.logicalViews.get` `bigtable.logicalViews.list` `bigtable.logicalViews.readRows` `bigtable.materializedViews.get` `bigtable.materializedViews.list` `bigtable.materializedViews.readRows` `bigtable.materializedViews.sampleRowKeys` `bigtable.memoryLayers.get` `bigtable.memoryLayers.list` `bigtable.schemaBundles.get` `bigtable.schemaBundles.list` `bigtable.tables.checkConsistency` `bigtable.tables.generateConsistencyToken` `bigtable.tables.get` `bigtable.tables.list` `bigtable.tables.readRows` `bigtable.tables.sampleRowKeys` `monitoring.metricDescriptors.get` `monitoring.metricDescriptors.list` `monitoring.timeSeries.*` - `monitoring.timeSeries.create` - `monitoring.timeSeries.list` `resourcemanager.projects.get` |

## Custom roles

If the [predefined roles](https://docs.cloud.google.com/bigtable/docs/access-control.md.txt#roles) for Bigtable don't address your
business requirements, you can define your own [custom roles](https://docs.cloud.google.com/iam/docs/creating-custom-roles.md.txt)
with permissions that you specify.

If your custom role needs to support access to the Google Cloud console, you
must identify the tasks that users will perform, then ensure that the custom
role has the required permissions for each task, as shown in the following
table. If a custom role does not have all of the required permissions for a
task, and a user tries to perform that task, the Google Cloud console won't
work correctly.

| Google Cloud console task | Required permissions |
|---|---|
| Basic access to the Google Cloud console | - `bigtable.appProfiles.get` - `bigtable.appProfiles.list` - `bigtable.clusters.get` - `bigtable.clusters.list` - `bigtable.instances.get` - `bigtable.instances.list` - `bigtable.locations.list` - `bigtable.tables.get` - `bigtable.tables.list` - `resourcemanager.projects.get` |
| Create an instance or cluster | Basic access permissions, plus: - `bigtable.clusters.create` - `bigtable.instances.create` |
| Modify an instance or cluster | Basic access permissions, plus: - `bigtable.clusters.update` - `bigtable.instances.update` |
| Manage replication configuration | Basic access permissions, plus: - `bigtable.appProfiles.create` - `bigtable.appProfiles.delete` - `bigtable.appProfiles.update` |
| Delete an instance or cluster | Basic access permissions, plus: - `bigtable.clusters.delete` - `bigtable.instances.delete` |
| Monitor an instance by viewing graphs | Basic access permissions, plus: - `monitoring.metricDescriptors.get` - `monitoring.metricDescriptors.list` - `monitoring.timeSeries.list` |
| Create and update a table | Basic access permissions, plus: - `bigtable.tables.create` - `bigtable.tables.update` |
| Restore a backup | Basic access permissions, plus: - `bigtable.backups.list` - `bigtable.tables.create` - `bigtable.backups.restore` |

## IAM management

This section explains how to manage IAM roles and related
permissions at the project, instance, table, and backup levels.

### Project-level IAM management

At the project level, you can grant, change, and revoke IAM roles
using the Google Cloud console, the IAM API, or the Google Cloud CLI.
For more information, see [Granting, Changing, and Revoking Access](https://docs.cloud.google.com/iam/docs/granting-changing-revoking-access.md.txt).

After you create a project, you can grant the project level IAM
roles to users based on the specific access levels.

### Required roles

Before you set *instance-level* , *table-level* , *backup-level* ,
authorized view-level, or continuous materialized view-level IAM
roles for a user, ensure that the user has at least one of the following
*project-level* IAM roles:

- Bigtable Viewer (recommended)
- Bigtable Reader
- Bigtable User
- Bigtable Administrator

> [!NOTE]
> **Note:** You don't need to grant these project-level roles to service accounts because service accounts are associated with a Google Cloud project as opposed to a specific user.

Choose a project-level role that has no more permissions than the user actually
needs across all instances, tables, backups, authorized views, or
continuous materialized views in the project. For this reason, you should
grant the Bigtable Viewer role in almost all cases.

If the user does not have at least one of these project-level roles, the user
won't have access to Bigtable through the Google Cloud console.
The Google Cloud console requires one of these project-level roles so that it
can retrieve information about instances, clusters, tables, or backups on behalf
of the user.

### Grant instance-level IAM roles

At the instance level, you can grant any of Bigtable's [predefined
roles](https://docs.cloud.google.com/bigtable/docs/access-control#roles) to a user or service account. You can also grant any [custom
roles](https://docs.cloud.google.com/bigtable/docs/access-control#custom-roles) that you have defined.

> [!NOTE]
> **Note:** After you change a user's instance-level roles, it may take up to two minutes for the changes to take effect.

To grant a predefined or custom role to a user or service account at the
instance level:

### Console

1. Go to the Bigtable instances page in the
   Google Cloud console.

   [Go to the instances page](https://console.cloud.google.com/bigtable/instances)
2. Check the boxes next to the instances whose roles you want to manage. An
   information panel appears.

3. In the information panel, click **Permissions**.

4. Under **Add principals**, start typing the email address of the user or
   service account you want to add, then click the email address of the user or
   service account.

5. Click the **Select a role** list, and then click
   **Bigtable** to select a predefined role or **Custom** to
   select a custom role.

6. Click the name of each role that you want to assign.

7. Click **Add**. The user or service account is granted the roles that you
   specified at the instance level.

### gcloud

1.
   If you don't know the instance ID, use the
   [`bigtable instances
   list` command](https://docs.cloud.google.com/sdk/gcloud/reference/bigtable/instances/list) to view a list of your project's instances:

   ```bash
   gcloud bigtable instances list
   ```
2. Use the `bigtable instances set-iam-policy` command:

   ```bash
   gcloud bigtable instances set-iam-policy \
     INSTANCE_ID \
     POLICY_FILE
   ```


   Provide the following:
   - <var translate="no">INSTANCE_ID</var>: the permanent identifier for the instance
   - <var translate="no">POLICY_FILE</var>: The path to a local JSON or YAML file that contains a [valid IAM policy](https://docs.cloud.google.com/iam/reference/rest/v1/Policy).

### Grant table-level IAM roles

At the table level, you can grant any of Bigtable's [predefined
roles](https://docs.cloud.google.com/bigtable/docs/access-control#roles) to a user or service account. You can also grant any [custom
roles](https://docs.cloud.google.com/bigtable/docs/access-control#custom-roles) that you have defined.

> [!NOTE]
> **Note:** After you change a user's table-level roles, it can take up to two minutes for the changes to take effect.

To grant a predefined or custom role to a user or service account at the table
level:

### Console

1. Go to the Bigtable instances page in the
   Google Cloud console.

   [Go to the instances page](https://console.cloud.google.com/bigtable/instances)
2. Click the name of the instance that contains the table, which has
   IAM roles that you're setting.

3. Select **Tables** in the left navigation pane.

4. Check the boxes next to the tables whose roles you want to manage. An
   information panel appears.

5. In the information panel, click **Permissions**.

6. Under **Add principals**, start typing the email address of the user or
   service account you want to add, then click the email address of the user or
   service account.

7. Click the **Select a role** drop-down list, then click
   **Bigtable** to select a predefined role or **Custom** to
   select a custom role.

8. Click the name of each role that you want to assign.

9. Click **Add**. The user or service account is granted the roles that you
   specified at the table level.

### gcloud

1.
   If you don't know the instance ID, use the
   [`bigtable instances
   list` command](https://docs.cloud.google.com/sdk/gcloud/reference/bigtable/instances/list) to view a list of your project's instances:

   ```bash
   gcloud bigtable instances list
   ```
2. If you don't know the instance's table IDs, use the `bigtable instances
   tables list` command to view a list of tables in the instance.

   ```bash
   gcloud bigtable instances tables list --instances=INSTANCE_ID
   ```


   Provide the following:
   - <var translate="no">INSTANCE_ID</var>: the permanent identifier for the instance
3. Use the `bigtable instances tables set-iam-policy` command:

   ```bash
   gcloud bigtable instances tables set-iam-policy \
     TABLE_ID \
     --instance=INSTANCE_ID \
     POLICY_FILE
   ```


   Provide the following:
   - <var translate="no">TABLE_ID</var>: The permanent identifier for the table.
   - <var translate="no">INSTANCE_ID</var>: the permanent identifier for the instance
   - <var translate="no">POLICY_FILE</var>: The path to a local JSON or YAML file that contains a [valid IAM policy](https://docs.cloud.google.com/iam/reference/rest/v1/Policy).

### Grant backup-level IAM roles

At the backup level, you can grant any of Bigtable's [predefined
roles](https://docs.cloud.google.com/bigtable/docs/access-control#roles) to a user or service account. You can also grant any [custom
roles](https://docs.cloud.google.com/bigtable/docs/access-control#custom-roles) that you have defined.

> [!NOTE]
> **Note:** After you change a user's backup-level roles, it can take up to two minutes for the changes to take effect.

To grant a predefined or custom role to a user or service account at the backup
level:

### gcloud

1.
   If you don't know the instance ID, use the
   [`bigtable instances
   list` command](https://docs.cloud.google.com/sdk/gcloud/reference/bigtable/instances/list) to view a list of your project's instances:

   ```bash
   gcloud bigtable instances list
   ```
2. If you don't know the backup IDs in an instance, use the `bigtable
   instances backups list` command to view a list of backups in the
   instance.

   ```bash
   gcloud bigtable backups list --instances=INSTANCE_ID
   ```


   Provide the following:
   - <var translate="no">INSTANCE_ID</var>: the permanent identifier for the instance
3. Use the `gcloud bigtable backups set-iam-policy` command:

   ```bash
   gcloud bigtable backups set-iam-policy BACKUP_ID \
     --instance=INSTANCE_ID \
     --cluster=CLUSTER_ID \
     POLICY_FILE
   ```


   Provide the following:
   - <var translate="no">BACKUP_ID</var>: The permanent identifier for the backup.
   - <var translate="no">INSTANCE_ID</var>: the permanent identifier for the instance
   - <var translate="no">TABLE_ID</var>: The permanent identifier for the table.
   - <var translate="no">POLICY_FILE</var>: Path to a local JSON or YAML file containing a [valid
     IAM policy](https://docs.cloud.google.com/iam/reference/rest/v1/Policy).

### Grant authorized view-level IAM roles

At the authorized view level, you can grant any of
Bigtable's [predefined roles](https://docs.cloud.google.com/bigtable/docs/access-control.md.txt#roles) to a user or service account.
You can also grant any [custom roles](https://docs.cloud.google.com/bigtable/docs/access-control.md.txt#custom-roles) that you have defined.

> [!NOTE]
> **Note:** After you change a user's authorized view-level roles, it can take up to two minutes for the changes to take effect.

To grant a predefined or custom role to a user or service account at the
authorized view level, do the following:

### Console

1.
   In the Google Cloud console, open the list of Bigtable instances.


   [Open the instance list](https://console.cloud.google.com/bigtable/instances)
2. Click the instance that contains the authorized view.

3. In the navigation pane, click **Bigtable Studio**.

4. In the explorer, expand the table and **Authorized views**.

5. Next to the authorized view that you want to modify, click the
   more_vert action menu,
   and then click **Grant access**.

6. Add at least one principal and select the role to which that principal
   or group of principals should be assigned.

7. Optional: To grant access for additional roles, click **Add another
   role** and then enter the principal and role for each additional role.

8. Click **Save**.

### gcloud

1.
   If you don't know the instance ID, use the
   [`bigtable instances
   list` command](https://docs.cloud.google.com/sdk/gcloud/reference/bigtable/instances/list) to view a list of your project's instances:

   ```bash
   gcloud bigtable instances list
   ```
2. If you don't know the instance's table IDs, use the `bigtable instances
   tables list` command to view a list of tables in the instance.

   ```bash
   gcloud bigtable instances tables list --instances=INSTANCE_ID
   ```
3. If you don't know the view ID, use the `bigtable authorized-views list`
   command to see a list of all authorized views of the table.

   ```bash
   gcloud bigtable instances tables authorized-views list \
     --instance=INSTANCE_ID \
     --table=TABLE_ID
   ```
4. Use the `bigtable authorized-views set-iam-policy` command:

   ```bash
   gcloud bigtable authorized-views set-iam-policy TABLE_ID{"</var>"}} \
     AUTHORIZED_VIEW_ID{"</var>"}} --instance=INSTANCE_ID{"</var>"}} POLICY_FILE{"</var>"}}
   ```


   Provide the following:
   - <var translate="no">INSTANCE_ID</var>: the permanent identifier for the instance
   - <var translate="no">TABLE_ID</var>: The permanent identifier for the table.
   - <var translate="no">AUTHORIZED_VIEW_ID</var>: The permanent identifier for the view.
   - <var translate="no">POLICY_FILE</var>: Path to a local JSON or YAML file containing a [valid
     IAM policy](https://docs.cloud.google.com/iam/reference/rest/v1/Policy).

## IAM conditions

[IAM Conditions](https://docs.cloud.google.com/iam/docs/conditions-overview.md.txt) let you define and enforce
conditional, attribute-based access control for some Google Cloud
resources, including Bigtable resources.

In Bigtable, you can enforce conditional access based on the
following attributes:

- **[Date/time attributes](https://docs.cloud.google.com/iam/docs/conditions-attribute-reference.md.txt#date-time)**: Use to set temporary (expiring), scheduled, or limited-duration access to Bigtable resources. For example, you can allow a user to access a table until a specified date.
- **[Resource attributes](https://docs.cloud.google.com/iam/docs/conditions-attribute-reference.md.txt#resource)**: Use to configure conditional access based on a resource name, resource type, or resource service attributes. In Bigtable, you can use attributes of instances, clusters, tables, backups, and authorized views to configure conditional access. For example, you can allow a user to manage tables only on tables that begin with a specific prefix, or you can allow a user to access only a specific table.

For more information about IAM Conditions, see the [Conditions
overview](https://docs.cloud.google.com/iam/docs/conditions-overview).

## What's next

Learn more about [IAM](https://docs.cloud.google.com/iam).