This page lists the IAM roles and permissions for Spanner. To search through all roles and permissions, see the role and permission index .
Spanner roles
Cloud Spanner Admin
( roles/
)
Has complete access to all Spanner resources in a Google Cloud project. A principal with this role can:
- Grant and revoke permissions to other principals for all Spanner resources in the project.
- Allocate and delete chargeable Spanner resources.
- Issue get/list/modify operations on Cloud Spanner resources.
- Read from and write to all Cloud Spanner databases in the project.
- Fetch project metadata.
Lowest-level resources where you can grant this role:
- Instance
- Database
cloudkms.keyHandles.*
-
cloudkms.keyHandles.create -
cloudkms.keyHandles.get -
cloudkms.keyHandles.list
cloudkms.operations.get
cloudkms.
monitoring.timeSeries.*
-
monitoring.timeSeries.create -
monitoring.timeSeries.list
resourcemanager.projects.get
resourcemanager.projects.list
spanner.*
-
spanner.backupOperations. cancel -
spanner.backupOperations.get -
spanner.backupOperations.list -
spanner.backupSchedules.create -
spanner.backupSchedules.delete -
spanner.backupSchedules.get -
spanner.backupSchedules. getIamPolicy -
spanner.backupSchedules.list -
spanner.backupSchedules. setIamPolicy -
spanner.backupSchedules.update -
spanner.backups.copy -
spanner.backups.create -
spanner.backups.delete -
spanner.backups.get -
spanner.backups.getIamPolicy -
spanner.backups.list -
spanner.backups. restoreDatabase -
spanner.backups.setIamPolicy -
spanner.backups.update -
spanner.databaseOperations. cancel -
spanner.databaseOperations.get -
spanner.databaseOperations. list -
spanner.databaseRoles.list -
spanner.databases.adapt -
spanner.databases. addSplitPoints -
spanner.databases. beginOrRollbackReadWriteTransaction -
spanner.databases. beginPartitionedDmlTransaction -
spanner.databases. beginReadOnlyTransaction -
spanner.databases.changequorum -
spanner.databases.create -
spanner.databases.createBackup -
spanner.databases.drop -
spanner.databases.get -
spanner.databases.getDdl -
spanner.databases.getIamPolicy -
spanner.databases.list -
spanner.databases. partitionQuery -
spanner.databases. partitionRead -
spanner.databases.read -
spanner.databases. runGraphAlgorithms -
spanner.databases.select -
spanner.databases.setIamPolicy -
spanner.databases.update -
spanner.databases.updateDdl -
spanner.databases.useDataBoost -
spanner.databases. useRoleBasedAccess -
spanner.databases.write -
spanner.instanceConfigOperations. cancel -
spanner.instanceConfigOperations. delete -
spanner.instanceConfigOperations. get -
spanner.instanceConfigOperations. list -
spanner.instanceConfigs.create -
spanner.instanceConfigs.delete -
spanner.instanceConfigs.get -
spanner.instanceConfigs.list -
spanner.instanceConfigs.update -
spanner.instanceOperations. cancel -
spanner.instanceOperations. delete -
spanner.instanceOperations.get -
spanner.instanceOperations. list -
spanner.instancePartitionOperations. cancel -
spanner.instancePartitionOperations. delete -
spanner.instancePartitionOperations. get -
spanner.instancePartitionOperations. list -
spanner.instancePartitions. create -
spanner.instancePartitions. delete -
spanner.instancePartitions.get -
spanner.instancePartitions. list -
spanner.instancePartitions. update -
spanner.instances.create -
spanner.instances. createTagBinding -
spanner.instances.delete -
spanner.instances. deleteTagBinding -
spanner.instances.get -
spanner.instances.getIamPolicy -
spanner.instances.list -
spanner.instances. listEffectiveTags -
spanner.instances. listTagBindings -
spanner.instances.setIamPolicy -
spanner.instances.update -
spanner.sessions.create -
spanner.sessions.delete -
spanner.sessions.get -
spanner.sessions.list
Spanner Editor
( roles/
)
Editor role for spanner
monitoring.timeSeries.list
resourcemanager.projects.get
resourcemanager.projects.list
spanner.backupOperations.*
-
spanner.backupOperations. cancel -
spanner.backupOperations.get -
spanner.backupOperations.list
spanner.backupSchedules.create
spanner.backupSchedules.delete
spanner.backupSchedules.get
spanner.
spanner.backupSchedules.list
spanner.backupSchedules.update
spanner.backups.copy
spanner.backups.create
spanner.backups.delete
spanner.backups.get
spanner.backups.getIamPolicy
spanner.backups.list
spanner.
spanner.backups.update
spanner.databaseOperations.*
-
spanner.databaseOperations. cancel -
spanner.databaseOperations.get -
spanner.databaseOperations. list
spanner.databaseRoles.list
spanner.databases.adapt
spanner.
spanner.
spanner.
spanner.
spanner.databases.changequorum
spanner.databases.create
spanner.databases.createBackup
spanner.databases.drop
spanner.databases.get
spanner.databases.getDdl
spanner.databases.getIamPolicy
spanner.databases.list
spanner.
spanner.
spanner.databases.read
spanner.
spanner.databases.select
spanner.databases.update
spanner.databases.updateDdl
spanner.databases.useDataBoost
spanner.
spanner.databases.write
spanner.
-
spanner.instanceConfigOperations. cancel -
spanner.instanceConfigOperations. delete -
spanner.instanceConfigOperations. get -
spanner.instanceConfigOperations. list
spanner.instanceConfigs.*
-
spanner.instanceConfigs.create -
spanner.instanceConfigs.delete -
spanner.instanceConfigs.get -
spanner.instanceConfigs.list -
spanner.instanceConfigs.update
spanner.instanceOperations.*
-
spanner.instanceOperations. cancel -
spanner.instanceOperations. delete -
spanner.instanceOperations.get -
spanner.instanceOperations. list
spanner.
-
spanner.instancePartitionOperations. cancel -
spanner.instancePartitionOperations. delete -
spanner.instancePartitionOperations. get -
spanner.instancePartitionOperations. list
spanner.instancePartitions.*
-
spanner.instancePartitions. create -
spanner.instancePartitions. delete -
spanner.instancePartitions.get -
spanner.instancePartitions. list -
spanner.instancePartitions. update
spanner.instances.create
spanner.instances.delete
spanner.instances.get
spanner.instances.getIamPolicy
spanner.instances.list
spanner.
spanner.
spanner.instances.update
spanner.sessions.*
-
spanner.sessions.create -
spanner.sessions.delete -
spanner.sessions.get -
spanner.sessions.list
Cloud Spanner Viewer
( roles/
)
A principal with this role can:
- View all Spanner instances (but cannot modify instances).
- View all Spanner databases (but cannot modify or read from databases).
For example, you can combine this role with the roles/spanner.databaseUser
role to
grant a user with access to a specific database, but only view access to other instances and
databases.
This role is recommended at the Google Cloud project level for users interacting with Cloud Spanner resources in the Google Cloud console.
Lowest-level resources where you can grant this role:
- Instance
- Database
monitoring.timeSeries.list
resourcemanager.projects.get
resourcemanager.projects.list
spanner.databases.get
spanner.databases.list
spanner.instanceConfigs.get
spanner.instanceConfigs.list
spanner.instancePartitions.get
spanner.
spanner.instances.get
spanner.instances.list
spanner.
spanner.
Cloud Spanner Backup Admin
( roles/
)
A principal with this role can:
- Create, view, update, and delete backups.
- View and manage a backup's allow policy.
This role cannot restore a database from a backup.
Lowest-level resources where you can grant this role:
- Instance
- Database
monitoring.timeSeries.list
resourcemanager.projects.get
resourcemanager.projects.list
spanner.backupOperations.*
-
spanner.backupOperations. cancel -
spanner.backupOperations.get -
spanner.backupOperations.list
spanner.backupSchedules.create
spanner.backupSchedules.delete
spanner.backupSchedules.get
spanner.backupSchedules.list
spanner.backupSchedules.update
spanner.backups.copy
spanner.backups.create
spanner.backups.delete
spanner.backups.get
spanner.backups.getIamPolicy
spanner.backups.list
spanner.backups.setIamPolicy
spanner.backups.update
spanner.databases.createBackup
spanner.databases.get
spanner.databases.list
spanner.instancePartitions.get
spanner.
spanner.
spanner.
spanner.instances.get
spanner.instances.list
spanner.
spanner.
Cloud Spanner Backup Writer
( roles/
)
This role is intended to be used by scripts that automate backup creation. A principal with this role can create backups, but cannot update or delete them.
Lowest-level resources where you can grant this role:
- Instance
- Database
spanner.backupOperations.get
spanner.backupOperations.list
spanner.backupSchedules.create
spanner.backupSchedules.get
spanner.backupSchedules.list
spanner.backups.copy
spanner.backups.create
spanner.backups.get
spanner.backups.list
spanner.databases.createBackup
spanner.databases.get
spanner.databases.list
spanner.instancePartitions.get
spanner.instances.get
Cloud Spanner Database Admin
( roles/
)
A principal with this role can:
- Get/list all Spanner instances in the project.
- Create/list/drop databases in an instance.
- Grant/revoke access to databases in the project.
- Read from and write to all Cloud Spanner databases in the project.
Lowest-level resources where you can grant this role:
- Instance
- Database
cloudkms.keyHandles.*
-
cloudkms.keyHandles.create -
cloudkms.keyHandles.get -
cloudkms.keyHandles.list
cloudkms.operations.get
cloudkms.
monitoring.timeSeries.*
-
monitoring.timeSeries.create -
monitoring.timeSeries.list
resourcemanager.projects.get
resourcemanager.projects.list
spanner.databaseOperations.*
-
spanner.databaseOperations. cancel -
spanner.databaseOperations.get -
spanner.databaseOperations. list
spanner.databaseRoles.list
spanner.databases.adapt
spanner.
spanner.
spanner.
spanner.
spanner.databases.changequorum
spanner.databases.create
spanner.databases.drop
spanner.databases.get
spanner.databases.getDdl
spanner.databases.getIamPolicy
spanner.databases.list
spanner.
spanner.
spanner.databases.read
spanner.
spanner.databases.select
spanner.databases.setIamPolicy
spanner.databases.update
spanner.databases.updateDdl
spanner.databases.useDataBoost
spanner.
spanner.databases.write
spanner.instancePartitions.get
spanner.
spanner.
spanner.
spanner.instances.get
spanner.instances.getIamPolicy
spanner.instances.list
spanner.
spanner.
spanner.sessions.*
-
spanner.sessions.create -
spanner.sessions.delete -
spanner.sessions.get -
spanner.sessions.list
Cloud Spanner Database Reader
( roles/
)
A principal with this role can:
- Read from the Spanner database.
- Execute SQL queries on the database.
- View schema for the database.
Lowest-level resources where you can grant this role:
- Instance
- Database
monitoring.timeSeries.create
spanner.
spanner.databases.get
spanner.databases.getDdl
spanner.
spanner.
spanner.databases.read
spanner.databases.select
spanner.instancePartitions.get
spanner.instances.get
spanner.sessions.*
-
spanner.sessions.create -
spanner.sessions.delete -
spanner.sessions.get -
spanner.sessions.list
Cloud Spanner Database Reader with DataBoost
( roles/
)
Includes all permissions in the spanner.databaseReader role enabling access to read and/or query a Cloud Spanner database using instance resources, as well as the permission to access the database with Data Boost, a fully managed serverless service that provides independent compute resources.
Lowest-level resources where you can grant this role:
- Instance
- Database
monitoring.timeSeries.create
spanner.
spanner.databases.get
spanner.databases.getDdl
spanner.
spanner.
spanner.databases.read
spanner.databases.select
spanner.databases.useDataBoost
spanner.instancePartitions.get
spanner.instances.get
spanner.sessions.*
-
spanner.sessions.create -
spanner.sessions.delete -
spanner.sessions.get -
spanner.sessions.list
Cloud Spanner Database Role User
( roles/
)
In conjunction with the IAM role Cloud Spanner Fine-grained Access User, grants permissions to individual Spanner database roles. Add a condition for each desired Spanner database role that includes the resource type of `spanner.googleapis.com/DatabaseRole` and the resource name ending with `/YOUR_SPANNER_DATABASE_ROLE`.
Lowest-level resources where you can grant this role:
- Instance
- Database
Cloud Spanner Database User
( roles/
)
A principal with this role can:
- Read from and write to the Spanner database.
- Execute SQL queries on the database, including DML and Partitioned DML.
- View and update schema for the database.
Lowest-level resources where you can grant this role:
- Instance
- Database
monitoring.timeSeries.create
spanner.databaseOperations.*
-
spanner.databaseOperations. cancel -
spanner.databaseOperations.get -
spanner.databaseOperations. list
spanner.databases.adapt
spanner.
spanner.
spanner.
spanner.databases.changequorum
spanner.databases.get
spanner.databases.getDdl
spanner.
spanner.
spanner.databases.read
spanner.databases.select
spanner.databases.updateDdl
spanner.databases.write
spanner.instancePartitions.get
spanner.instances.get
spanner.sessions.*
-
spanner.sessions.create -
spanner.sessions.delete -
spanner.sessions.get -
spanner.sessions.list
Cloud Spanner Fine-grained Access User
( roles/
)
Grants permissions to use Spanner's fine-grained access control framework. To grant access to specific database roles, also add the `roles/spanner.databaseRoleUser` IAM role and its necessary conditions.
Lowest-level resources where you can grant this role:
- Instance
- Database
spanner.databaseRoles.list
spanner.
Cloud Spanner Database Graph Intelligence features user
( roles/
)
Access to Graph Intelligence features.
monitoring.timeSeries.create
spanner.
spanner.databases.get
spanner.databases.getDdl
spanner.
spanner.
spanner.databases.read
spanner.
spanner.databases.select
spanner.databases.useDataBoost
spanner.instancePartitions.get
spanner.instances.get
spanner.sessions.*
-
spanner.sessions.create -
spanner.sessions.delete -
spanner.sessions.get -
spanner.sessions.list
Cloud Spanner Restore Admin
( roles/
)
A principal with this role can restore databases from backups.
If you need to restore a backup to a different instance, apply this role at the project level or to both instances. This role cannot create backups.
Lowest-level resources where you can grant this role:
- Instance
- Database
monitoring.timeSeries.list
resourcemanager.projects.get
resourcemanager.projects.list
spanner.backups.get
spanner.backups.list
spanner.
spanner.databaseOperations.*
-
spanner.databaseOperations. cancel -
spanner.databaseOperations.get -
spanner.databaseOperations. list
spanner.databases.create
spanner.databases.get
spanner.databases.list
spanner.instancePartitions.get
spanner.
spanner.
spanner.
spanner.instances.get
spanner.instances.list
spanner.
spanner.
Service agent roles
Service agent roles should only be granted to service agents .
| Role | Permissions |
|---|---|
Cloud Spanner API Service Agent( Cloud Spanner API Service Agent |
|
Spanner permissions
spanner.
backupOperations.
cancel
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
spanner.backupOperations.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
Cloud Spanner Backup Writer
( roles/
)
spanner.backupOperations.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Reviewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Security Auditor
( roles/
)
Support User
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
Cloud Spanner Backup Writer
( roles/
)
spanner.backupSchedules.create
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
Cloud Spanner Backup Writer
( roles/
)
spanner.backupSchedules.delete
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
spanner.backupSchedules.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
Cloud Spanner Backup Writer
( roles/
)
spanner.
backupSchedules.
getIamPolicy
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Reviewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Security Auditor
( roles/
)
Support User
( roles/
)
spanner.backupSchedules.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Reviewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Security Auditor
( roles/
)
Support User
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
Cloud Spanner Backup Writer
( roles/
)
spanner.
backupSchedules.
setIamPolicy
Owner
( roles/
)
Security Admin
( roles/
)
Cloud Spanner Admin
( roles/
)
Databases Admin
( roles/
)
spanner.backupSchedules.update
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
spanner.backups.copy
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
Cloud Spanner Backup Writer
( roles/
)
spanner.backups.create
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
Cloud Spanner Backup Writer
( roles/
)
spanner.backups.delete
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
spanner.backups.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
Cloud Spanner Backup Writer
( roles/
)
Cloud Spanner Restore Admin
( roles/
)
spanner.backups.getIamPolicy
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Reviewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Security Auditor
( roles/
)
Support User
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
spanner.backups.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Reviewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Security Auditor
( roles/
)
Support User
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
Cloud Spanner Backup Writer
( roles/
)
Cloud Spanner Restore Admin
( roles/
)
spanner.
backups.
restoreDatabase
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Restore Admin
( roles/
)
spanner.backups.setIamPolicy
Owner
( roles/
)
Security Admin
( roles/
)
Cloud Spanner Admin
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
spanner.backups.update
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
spanner.
databaseOperations.
cancel
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Database User
( roles/
)
Cloud Spanner Restore Admin
( roles/
)
Service agent roles
- Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent
spanner.databaseOperations.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Database User
( roles/
)
Cloud Spanner Restore Admin
( roles/
)
Service agent roles
- Cloud Deployment Manager Service Agent
(
roles/)clouddeploymentmanager.serviceAgent - Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent
spanner.
databaseOperations.
list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Reviewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Security Auditor
( roles/
)
Support User
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Database User
( roles/
)
Cloud Spanner Restore Admin
( roles/
)
Service agent roles
- Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent
spanner.databaseRoles.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Reviewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Security Auditor
( roles/
)
Support User
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Fine-grained Access User
( roles/
)
spanner.databases.adapt
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Database User
( roles/
)
Service agent roles
- Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent
spanner.
databases.
addSplitPoints
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Database Admin
( roles/
)
spanner.
databases.
beginOrRollbackReadWriteTransaction
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Database User
( roles/
)
Service agent roles
- Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent - Cloud Spanner API Service Agent
(
roles/)spanner.serviceAgent
spanner.
databases.
beginPartitionedDmlTransaction
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Database User
( roles/
)
Service agent roles
- Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent
spanner.
databases.
beginReadOnlyTransaction
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Database Reader
( roles/
)
Cloud Spanner Database Reader with DataBoost
( roles/
)
Cloud Spanner Database User
( roles/
)
Cloud Spanner Database Graph Intelligence features user
( roles/
)
Service agent roles
- Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent - Datastream Service Agent
(
roles/)datastream.serviceAgent - Discovery Engine Service Agent
(
roles/)discoveryengine.serviceAgent - Cloud Spanner API Service Agent
(
roles/)spanner.serviceAgent
spanner.databases.changequorum
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Database User
( roles/
)
Service agent roles
- Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent
spanner.databases.create
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Restore Admin
( roles/
)
Service agent roles
- Cloud Deployment Manager Service Agent
(
roles/)clouddeploymentmanager.serviceAgent
spanner.databases.createBackup
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
Cloud Spanner Backup Writer
( roles/
)
spanner.databases.drop
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Service agent roles
- Cloud Deployment Manager Service Agent
(
roles/)clouddeploymentmanager.serviceAgent
spanner.databases.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Cloud Spanner Viewer
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Site Reliability Engineer
( roles/
)
Support User
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
Cloud Spanner Backup Writer
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Database Reader
( roles/
)
Cloud Spanner Database Reader with DataBoost
( roles/
)
Cloud Spanner Database User
( roles/
)
Cloud Spanner Database Graph Intelligence features user
( roles/
)
Cloud Spanner Restore Admin
( roles/
)
Service agent roles
- Cloud Deployment Manager Service Agent
(
roles/)clouddeploymentmanager.serviceAgent - Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent
spanner.databases.getDdl
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Database Reader
( roles/
)
Cloud Spanner Database Reader with DataBoost
( roles/
)
Cloud Spanner Database User
( roles/
)
Cloud Spanner Database Graph Intelligence features user
( roles/
)
Service agent roles
- Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent - Datastream Service Agent
(
roles/)datastream.serviceAgent
spanner.databases.getIamPolicy
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Reviewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Security Auditor
( roles/
)
Support User
( roles/
)
Cloud Spanner Database Admin
( roles/
)
spanner.databases.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Reviewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Cloud Spanner Viewer
( roles/
)
Databases Admin
( roles/
)
Security Auditor
( roles/
)
Site Reliability Engineer
( roles/
)
Support User
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
Cloud Spanner Backup Writer
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Restore Admin
( roles/
)
Service agent roles
- Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent
spanner.
databases.
partitionQuery
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Database Reader
( roles/
)
Cloud Spanner Database Reader with DataBoost
( roles/
)
Cloud Spanner Database User
( roles/
)
Cloud Spanner Database Graph Intelligence features user
( roles/
)
Service agent roles
- Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent - Datastream Service Agent
(
roles/)datastream.serviceAgent - Discovery Engine Service Agent
(
roles/)discoveryengine.serviceAgent - Cloud Spanner API Service Agent
(
roles/)spanner.serviceAgent
spanner.
databases.
partitionRead
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Database Reader
( roles/
)
Cloud Spanner Database Reader with DataBoost
( roles/
)
Cloud Spanner Database User
( roles/
)
Cloud Spanner Database Graph Intelligence features user
( roles/
)
Service agent roles
- Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent - Datastream Service Agent
(
roles/)datastream.serviceAgent
spanner.databases.read
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Database Reader
( roles/
)
Cloud Spanner Database Reader with DataBoost
( roles/
)
Cloud Spanner Database User
( roles/
)
Cloud Spanner Database Graph Intelligence features user
( roles/
)
Service agent roles
- Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent - Datastream Service Agent
(
roles/)datastream.serviceAgent
spanner.
databases.
runGraphAlgorithms
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Database Graph Intelligence features user
( roles/
)
spanner.databases.select
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Database Reader
( roles/
)
Cloud Spanner Database Reader with DataBoost
( roles/
)
Cloud Spanner Database User
( roles/
)
Cloud Spanner Database Graph Intelligence features user
( roles/
)
Service agent roles
- Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent - Datastream Service Agent
(
roles/)datastream.serviceAgent - Discovery Engine Service Agent
(
roles/)discoveryengine.serviceAgent - Cloud Spanner API Service Agent
(
roles/)spanner.serviceAgent
spanner.databases.setIamPolicy
Owner
( roles/
)
Security Admin
( roles/
)
Cloud Spanner Admin
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Database Admin
( roles/
)
spanner.databases.update
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Database Admin
( roles/
)
spanner.databases.updateDdl
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Database User
( roles/
)
Service agent roles
- Cloud Deployment Manager Service Agent
(
roles/)clouddeploymentmanager.serviceAgent - Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent
spanner.databases.useDataBoost
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Database Reader with DataBoost
( roles/
)
Cloud Spanner Database Graph Intelligence features user
( roles/
)
Service agent roles
- Datastream Service Agent
(
roles/)datastream.serviceAgent - Discovery Engine Service Agent
(
roles/)discoveryengine.serviceAgent - Cloud Spanner API Service Agent
(
roles/)spanner.serviceAgent
spanner.
databases.
useRoleBasedAccess
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Fine-grained Access User
( roles/
)
Service agent roles
- Datastream Service Agent
(
roles/)datastream.serviceAgent
spanner.databases.write
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Database User
( roles/
)
Service agent roles
- Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent - Cloud Spanner API Service Agent
(
roles/)spanner.serviceAgent
spanner.
instanceConfigOperations.
cancel
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
spanner.
instanceConfigOperations.
delete
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
spanner.
instanceConfigOperations.
get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
spanner.
instanceConfigOperations.
list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Reviewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Security Auditor
( roles/
)
Support User
( roles/
)
spanner.instanceConfigs.create
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
spanner.instanceConfigs.delete
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
spanner.instanceConfigs.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Cloud Spanner Viewer
( roles/
)
Databases Admin
( roles/
)
Site Reliability Engineer
( roles/
)
Support User
( roles/
)
Service agent roles
- Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent
spanner.instanceConfigs.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Reviewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Cloud Spanner Viewer
( roles/
)
Databases Admin
( roles/
)
Security Auditor
( roles/
)
Site Reliability Engineer
( roles/
)
Support User
( roles/
)
Service agent roles
- Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent
spanner.instanceConfigs.update
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
spanner.
instanceOperations.
cancel
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
spanner.
instanceOperations.
delete
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
spanner.instanceOperations.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
Service agent roles
- Cloud Deployment Manager Service Agent
(
roles/)clouddeploymentmanager.serviceAgent
spanner.
instanceOperations.
list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Reviewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Security Auditor
( roles/
)
Support User
( roles/
)
spanner.
instancePartitionOperations.
cancel
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
spanner.
instancePartitionOperations.
delete
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
spanner.
instancePartitionOperations.
get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
spanner.
instancePartitionOperations.
list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Reviewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Security Auditor
( roles/
)
Support User
( roles/
)
spanner.
instancePartitions.
create
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
spanner.
instancePartitions.
delete
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
spanner.instancePartitions.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Cloud Spanner Viewer
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Site Reliability Engineer
( roles/
)
Support User
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
Cloud Spanner Backup Writer
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Database Reader
( roles/
)
Cloud Spanner Database Reader with DataBoost
( roles/
)
Cloud Spanner Database User
( roles/
)
Cloud Spanner Database Graph Intelligence features user
( roles/
)
Cloud Spanner Restore Admin
( roles/
)
Service agent roles
- Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent
spanner.
instancePartitions.
list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Reviewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Cloud Spanner Viewer
( roles/
)
Databases Admin
( roles/
)
Security Auditor
( roles/
)
Site Reliability Engineer
( roles/
)
Support User
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Restore Admin
( roles/
)
Service agent roles
- Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent
spanner.
instancePartitions.
update
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
spanner.instances.create
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Service agent roles
- Cloud Deployment Manager Service Agent
(
roles/)clouddeploymentmanager.serviceAgent
spanner.
instances.
createTagBinding
Owner
( roles/
)
Tag User
( roles/
)
Cloud Spanner Admin
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Restore Admin
( roles/
)
spanner.instances.delete
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Service agent roles
- Cloud Deployment Manager Service Agent
(
roles/)clouddeploymentmanager.serviceAgent
spanner.
instances.
deleteTagBinding
Owner
( roles/
)
Tag User
( roles/
)
Cloud Spanner Admin
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Databases Admin
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Restore Admin
( roles/
)
spanner.instances.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Cloud Spanner Viewer
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Site Reliability Engineer
( roles/
)
Support User
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
Cloud Spanner Backup Writer
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Database Reader
( roles/
)
Cloud Spanner Database Reader with DataBoost
( roles/
)
Cloud Spanner Database User
( roles/
)
Cloud Spanner Database Graph Intelligence features user
( roles/
)
Cloud Spanner Restore Admin
( roles/
)
Service agent roles
- Cloud Deployment Manager Service Agent
(
roles/)clouddeploymentmanager.serviceAgent - Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent
spanner.instances.getIamPolicy
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Reviewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Security Auditor
( roles/
)
Support User
( roles/
)
Cloud Spanner Database Admin
( roles/
)
spanner.instances.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Reviewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Cloud Spanner Viewer
( roles/
)
Databases Admin
( roles/
)
Security Auditor
( roles/
)
Site Reliability Engineer
( roles/
)
Support User
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Restore Admin
( roles/
)
Service agent roles
- Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent
spanner.
instances.
listEffectiveTags
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Tag User
( roles/
)
Tag Viewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Cloud Spanner Viewer
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Databases Admin
( roles/
)
Security Auditor
( roles/
)
Site Reliability Engineer
( roles/
)
Support User
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Restore Admin
( roles/
)
Service agent roles
- Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent
spanner.
instances.
listTagBindings
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Tag User
( roles/
)
Tag Viewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Cloud Spanner Viewer
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Databases Admin
( roles/
)
Security Auditor
( roles/
)
Site Reliability Engineer
( roles/
)
Support User
( roles/
)
Cloud Spanner Backup Admin
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Restore Admin
( roles/
)
Service agent roles
- Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent
spanner.instances.setIamPolicy
Owner
( roles/
)
Security Admin
( roles/
)
Cloud Spanner Admin
( roles/
)
Databases Admin
( roles/
)
spanner.instances.update
Owner
( roles/
)
Editor
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Databases Admin
( roles/
)
Service agent roles
- Cloud Deployment Manager Service Agent
(
roles/)clouddeploymentmanager.serviceAgent
spanner.sessions.create
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Database Reader
( roles/
)
Cloud Spanner Database Reader with DataBoost
( roles/
)
Cloud Spanner Database User
( roles/
)
Cloud Spanner Database Graph Intelligence features user
( roles/
)
Service agent roles
- Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent - Datastream Service Agent
(
roles/)datastream.serviceAgent - Discovery Engine Service Agent
(
roles/)discoveryengine.serviceAgent - Cloud Spanner API Service Agent
(
roles/)spanner.serviceAgent
spanner.sessions.delete
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Database Reader
( roles/
)
Cloud Spanner Database Reader with DataBoost
( roles/
)
Cloud Spanner Database User
( roles/
)
Cloud Spanner Database Graph Intelligence features user
( roles/
)
Service agent roles
- Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent - Datastream Service Agent
(
roles/)datastream.serviceAgent
spanner.sessions.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Database Reader
( roles/
)
Cloud Spanner Database Reader with DataBoost
( roles/
)
Cloud Spanner Database User
( roles/
)
Cloud Spanner Database Graph Intelligence features user
( roles/
)
Service agent roles
- Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent - Datastream Service Agent
(
roles/)datastream.serviceAgent
spanner.sessions.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Reviewer
( roles/
)
Cloud Spanner Admin
( roles/
)
Spanner Editor
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Security Auditor
( roles/
)
Support User
( roles/
)
Cloud Spanner Database Admin
( roles/
)
Cloud Spanner Database Reader
( roles/
)
Cloud Spanner Database Reader with DataBoost
( roles/
)
Cloud Spanner Database User
( roles/
)
Cloud Spanner Database Graph Intelligence features user
( roles/
)
Service agent roles
- Cloud Data Fusion API Service Agent
(
roles/)datafusion.serviceAgent

