This page lists the IAM roles and permissions for Studio Query. To search through all roles and permissions, see the role and permission index .
Studio Query roles
Studio Query Admin Beta
( roles/
)
Full access to Studio Query resources.
databasesconsole.locations.*
-
databasesconsole.locations.get
-
databasesconsole.
locations. list
databasesconsole.operations.*
-
databasesconsole.
operations. cancel -
databasesconsole.
operations. delete -
databasesconsole.
operations. get -
databasesconsole.
operations. list
databasesconsole.
-
databasesconsole.
studioQueries. create -
databasesconsole.
studioQueries. delete -
databasesconsole.
studioQueries. get -
databasesconsole.
studioQueries. list -
databasesconsole.
studioQueries. search -
databasesconsole.
studioQueries. update
resourcemanager.projects.get
resourcemanager.projects.list
Studio Query User Beta
( roles/
)
Access to create, update, search and delete studio queries.
databasesconsole.locations.*
-
databasesconsole.locations.get
-
databasesconsole.
locations. list
databasesconsole.
databasesconsole.
databasesconsole.
databasesconsole.
databasesconsole.
databasesconsole.
resourcemanager.projects.get
resourcemanager.projects.list
Studio Query permissions
databasesconsole.
databaseCenterViews.
create
Owner
( roles/
)
Editor
( roles/
)
Database Center Admin
( roles/
)
databasesconsole.
databaseCenterViews.
delete
Owner
( roles/
)
Editor
( roles/
)
Database Center Admin
( roles/
)
databasesconsole.
databaseCenterViews.
search
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Database Center Admin
( roles/
)
Database Center Viewer
( roles/
)
Support User
( roles/
)
databasesconsole.
databaseCenterViews.
update
Owner
( roles/
)
Editor
( roles/
)
Database Center Admin
( roles/
)
databasesconsole.locations.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Database User
( roles/
)
Cloud SQL Admin
( roles/
)
Cloud SQL Studio User
( roles/
)
Database Center Admin
( roles/
)
Database Center Viewer
( roles/
)
Studio Query Admin
( roles/
)
Studio Query User
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
Service agent roles
- Cloud Composer API Service Agent
(
roles/
)composer.serviceAgent
databasesconsole.
locations.
list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Database User
( roles/
)
Cloud SQL Admin
( roles/
)
Cloud SQL Studio User
( roles/
)
Database Center Admin
( roles/
)
Database Center Viewer
( roles/
)
Studio Query Admin
( roles/
)
Studio Query User
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Cloud Composer API Service Agent
(
roles/
)composer.serviceAgent
databasesconsole.
operations.
cancel
Owner
( roles/
)
Editor
( roles/
)
Studio Query Admin
( roles/
)
databasesconsole.
operations.
delete
Owner
( roles/
)
Editor
( roles/
)
Studio Query Admin
( roles/
)
databasesconsole.
operations.
get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Studio Query Admin
( roles/
)
Studio Query User
( roles/
)
Support User
( roles/
)
databasesconsole.
operations.
list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Studio Query Admin
( roles/
)
Studio Query User
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
databasesconsole.
studioQueries.
create
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud SQL Admin
( roles/
)
Studio Query Admin
( roles/
)
Studio Query User
( roles/
)
Databases Admin
( roles/
)
Service agent roles
- Cloud Composer API Service Agent
(
roles/
)composer.serviceAgent
databasesconsole.
studioQueries.
delete
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud SQL Admin
( roles/
)
Studio Query Admin
( roles/
)
Studio Query User
( roles/
)
Databases Admin
( roles/
)
Service agent roles
- Cloud Composer API Service Agent
(
roles/
)composer.serviceAgent
databasesconsole.
studioQueries.
get
Owner
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud SQL Admin
( roles/
)
Studio Query Admin
( roles/
)
Databases Admin
( roles/
)
Service agent roles
- Cloud Composer API Service Agent
(
roles/
)composer.serviceAgent
databasesconsole.
studioQueries.
list
Owner
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud SQL Admin
( roles/
)
Studio Query Admin
( roles/
)
Databases Admin
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Service agent roles
- Cloud Composer API Service Agent
(
roles/
)composer.serviceAgent
databasesconsole.
studioQueries.
search
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Database User
( roles/
)
Cloud SQL Admin
( roles/
)
Cloud SQL Studio User
( roles/
)
Studio Query Admin
( roles/
)
Studio Query User
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
Service agent roles
- Cloud Composer API Service Agent
(
roles/
)composer.serviceAgent
databasesconsole.
studioQueries.
update
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud SQL Admin
( roles/
)
Studio Query Admin
( roles/
)
Studio Query User
( roles/
)
Databases Admin
( roles/
)
Service agent roles
- Cloud Composer API Service Agent
(
roles/
)composer.serviceAgent