This page lists the IAM roles and permissions for AlloyDB for PostgreSQL. To search through all roles and permissions, see the role and permission index .
AlloyDB for PostgreSQL roles
Cloud AlloyDB Admin Beta
( roles/
)
Full access to Cloud AlloyDB all resources.
alloydb.*
-
alloydb.backups.create -
alloydb.backups. createTagBinding -
alloydb.backups.delete -
alloydb.backups. deleteTagBinding -
alloydb.backups.get -
alloydb.backups.list -
alloydb.backups. listEffectiveTags -
alloydb.backups. listTagBindings -
alloydb.backups.update -
alloydb.clusters.create -
alloydb.clusters. createTagBinding -
alloydb.clusters.delete -
alloydb.clusters. deleteTagBinding -
alloydb.clusters.export -
alloydb.clusters. generateClientCertificate -
alloydb.clusters.get -
alloydb.clusters.import -
alloydb.clusters.list -
alloydb.clusters. listEffectiveTags -
alloydb.clusters. listTagBindings -
alloydb.clusters.promote -
alloydb.clusters.switchover -
alloydb.clusters.update -
alloydb.clusters.upgrade -
alloydb.databases.create -
alloydb.databases.get -
alloydb.databases.list -
alloydb.instances.connect -
alloydb.instances.create -
alloydb.instances.delete -
alloydb.instances.executeSql -
alloydb.instances.failover -
alloydb.instances.get -
alloydb.instances.injectFault -
alloydb.instances.list -
alloydb.instances.restart -
alloydb.instances.update -
alloydb.locations.get -
alloydb.locations.list -
alloydb.operations.cancel -
alloydb.operations.delete -
alloydb.operations.get -
alloydb.operations.list -
alloydb.supportedDatabaseFlags. get -
alloydb.supportedDatabaseFlags. list -
alloydb.users.create -
alloydb.users.delete -
alloydb.users.get -
alloydb.users.list -
alloydb.users.login -
alloydb.users.update
cloudaicompanion.
cloudkms.keyHandles.*
-
cloudkms.keyHandles.create -
cloudkms.keyHandles.get -
cloudkms.keyHandles.list
cloudkms.operations.get
cloudkms.
databasesconsole.locations.*
-
databasesconsole.locations.get -
databasesconsole.locations. list
databasesconsole.
-
databasesconsole.studioQueries. create -
databasesconsole.studioQueries. delete -
databasesconsole.studioQueries. get -
databasesconsole.studioQueries. list -
databasesconsole.studioQueries. search -
databasesconsole.studioQueries. update
recommender.
-
recommender.alloydbClusterPerformanceInsights. get -
recommender.alloydbClusterPerformanceInsights. list -
recommender.alloydbClusterPerformanceInsights. update
recommender.
-
recommender.alloydbClusterPerformanceRecommendations. get -
recommender.alloydbClusterPerformanceRecommendations. list -
recommender.alloydbClusterPerformanceRecommendations. update
recommender.
-
recommender.alloydbClusterReliabilityInsights. get -
recommender.alloydbClusterReliabilityInsights. list -
recommender.alloydbClusterReliabilityInsights. update
recommender.
-
recommender.alloydbClusterReliabilityRecommendations. get -
recommender.alloydbClusterReliabilityRecommendations. list -
recommender.alloydbClusterReliabilityRecommendations. update
recommender.
-
recommender.alloydbInstanceSecurityInsights. get -
recommender.alloydbInstanceSecurityInsights. list -
recommender.alloydbInstanceSecurityInsights. update
recommender.
-
recommender.alloydbInstanceSecurityRecommendations. get -
recommender.alloydbInstanceSecurityRecommendations. list -
recommender.alloydbInstanceSecurityRecommendations. update
resourcemanager.projects.get
resourcemanager.projects.list
Cloud AlloyDB Client Beta
( roles/
)
Connectivity access to Cloud AlloyDB instances.
alloydb.
alloydb.clusters.get
alloydb.instances.connect
alloydb.instances.get
monitoring.timeSeries.create
resourcemanager.projects.get
resourcemanager.projects.list
Cloud AlloyDB Database User Beta
( roles/
)
Role allowing access to login as a database user.
alloydb.clusters.get
alloydb.instances.executeSql
alloydb.instances.get
alloydb.users.login
databasesconsole.locations.*
-
databasesconsole.locations.get -
databasesconsole.locations. list
databasesconsole.
resourcemanager.projects.get
resourcemanager.projects.list
AlloyDB Service Agent
( roles/
)
Gives the AlloyDB service account permission to manage customer resources
alloydb.clusters.list
Cloud AlloyDB Viewer Beta
( roles/
)
Read-only access to Cloud AlloyDB all resources.
alloydb.backups.get
alloydb.backups.list
alloydb.
alloydb.
alloydb.clusters.export
alloydb.clusters.get
alloydb.clusters.list
alloydb.
alloydb.
alloydb.databases.get
alloydb.databases.list
alloydb.instances.get
alloydb.instances.list
alloydb.locations.*
-
alloydb.locations.get -
alloydb.locations.list
alloydb.operations.get
alloydb.operations.list
alloydb.
-
alloydb.supportedDatabaseFlags. get -
alloydb.supportedDatabaseFlags. list
alloydb.users.get
alloydb.users.list
cloudaicompanion.
recommender.
recommender.
recommender.
recommender.
recommender.
recommender.
recommender.
recommender.
resourcemanager.projects.get
resourcemanager.projects.list
AlloyDB for PostgreSQL permissions
alloydb.backups.create
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Databases Admin
( roles/
)
alloydb.
Owner
( roles/
)
Cloud AlloyDB Admin
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Databases Admin
( roles/
)
Tag User
( roles/
)
alloydb.backups.delete
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Databases Admin
( roles/
)
alloydb.
Owner
( roles/
)
Cloud AlloyDB Admin
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Databases Admin
( roles/
)
Tag User
( roles/
)
alloydb.backups.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Viewer
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
alloydb.backups.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Viewer
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
alloydb.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Viewer
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Security Auditor
( roles/
)
Support User
( roles/
)
Tag User
( roles/
)
Tag Viewer
( roles/
)
alloydb.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Viewer
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Security Auditor
( roles/
)
Support User
( roles/
)
Tag User
( roles/
)
Tag Viewer
( roles/
)
alloydb.backups.update
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Databases Admin
( roles/
)
alloydb.clusters.create
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Databases Admin
( roles/
)
Service agent roles
- Database Migration Service Agent
(
roles/)datamigration.serviceAgent
alloydb.
Owner
( roles/
)
Cloud AlloyDB Admin
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Databases Admin
( roles/
)
Tag User
( roles/
)
alloydb.clusters.delete
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Databases Admin
( roles/
)
Service agent roles
- Database Migration Service Agent
(
roles/)datamigration.serviceAgent
alloydb.
Owner
( roles/
)
Cloud AlloyDB Admin
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Databases Admin
( roles/
)
Tag User
( roles/
)
alloydb.clusters.export
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Viewer
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
Service agent roles
- Discovery Engine Service Agent
(
roles/)discoveryengine.serviceAgent
alloydb.
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Client
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Databases Admin
( roles/
)
Service agent roles
- Database Migration Service Agent
(
roles/)datamigration.serviceAgent
alloydb.clusters.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Client
( roles/
)
Cloud AlloyDB Database User
( roles/
)
Cloud AlloyDB Viewer
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
Service agent roles
- Database Migration Service Agent
(
roles/)datamigration.serviceAgent
alloydb.clusters.import
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Databases Admin
( roles/
)
alloydb.clusters.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Viewer
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Database Migration Service Agent
(
roles/)datamigration.serviceAgent - AlloyDB Service Agent
(
roles/)alloydb.serviceAgent
alloydb.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Viewer
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Security Auditor
( roles/
)
Support User
( roles/
)
Tag User
( roles/
)
Tag Viewer
( roles/
)
alloydb.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Viewer
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Security Auditor
( roles/
)
Support User
( roles/
)
Tag User
( roles/
)
Tag Viewer
( roles/
)
alloydb.clusters.promote
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Databases Admin
( roles/
)
alloydb.clusters.switchover
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Databases Admin
( roles/
)
alloydb.clusters.update
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Databases Admin
( roles/
)
Service agent roles
- Database Migration Service Agent
(
roles/)datamigration.serviceAgent
alloydb.clusters.upgrade
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Databases Admin
( roles/
)
alloydb.databases.create
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Databases Admin
( roles/
)
alloydb.databases.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Viewer
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
alloydb.databases.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Viewer
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Discovery Engine Service Agent
(
roles/)discoveryengine.serviceAgent
alloydb.instances.connect
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Client
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Databases Admin
( roles/
)
Service agent roles
- Database Migration Service Agent
(
roles/)datamigration.serviceAgent
alloydb.instances.create
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Databases Admin
( roles/
)
Service agent roles
- Database Migration Service Agent
(
roles/)datamigration.serviceAgent
alloydb.instances.delete
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Databases Admin
( roles/
)
Service agent roles
- Database Migration Service Agent
(
roles/)datamigration.serviceAgent
alloydb.instances.executeSql
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Database User
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
alloydb.instances.failover
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Databases Admin
( roles/
)
alloydb.instances.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Client
( roles/
)
Cloud AlloyDB Database User
( roles/
)
Cloud AlloyDB Viewer
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
Service agent roles
- Discovery Engine Service Agent
(
roles/)discoveryengine.serviceAgent - Database Migration Service Agent
(
roles/)datamigration.serviceAgent
alloydb.instances.injectFault
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Databases Admin
( roles/
)
alloydb.instances.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Viewer
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Database Migration Service Agent
(
roles/)datamigration.serviceAgent
alloydb.instances.restart
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Databases Admin
( roles/
)
alloydb.instances.update
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Databases Admin
( roles/
)
Service agent roles
- Database Migration Service Agent
(
roles/)datamigration.serviceAgent
alloydb.locations.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Viewer
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
alloydb.locations.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Viewer
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
alloydb.operations.cancel
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Databases Admin
( roles/
)
alloydb.operations.delete
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Databases Admin
( roles/
)
alloydb.operations.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Viewer
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
Service agent roles
- Database Migration Service Agent
(
roles/)datamigration.serviceAgent - Discovery Engine Service Agent
(
roles/)discoveryengine.serviceAgent - Backup and DR Service Agent
(
roles/)backupdr.serviceAgent
alloydb.operations.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Viewer
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Database Migration Service Agent
(
roles/)datamigration.serviceAgent
alloydb.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Viewer
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
alloydb.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Viewer
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
alloydb.users.create
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Databases Admin
( roles/
)
alloydb.users.delete
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Databases Admin
( roles/
)
alloydb.users.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Viewer
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Support User
( roles/
)
alloydb.users.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Viewer
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
alloydb.users.login
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Cloud AlloyDB Database User
( roles/
)
DLP Organization Data Profiles Driver
( roles/
)
DLP Project Data Profiles Driver
( roles/
)
Data Scientist
( roles/
)
Databases Admin
( roles/
)
alloydb.users.update
Owner
( roles/
)
Editor
( roles/
)
Cloud AlloyDB Admin
( roles/
)
Databases Admin
( roles/
)
