BigQuery Data Policy roles and permissions

This page lists the IAM roles and permissions for BigQuery Data Policy. To search through all roles and permissions, see the role and permission index .

BigQuery Data Policy roles

Role Permissions

Role	Permissions
BigQuery Data Policy Admin ( `roles/ bigquerydatapolicy.admin` ) Role for managing Data Policies in BigQuery This role can only be granted on Resource Manager resources (projects, folders, and organizations).	`bigquery.dataPolicies.create` `bigquery.dataPolicies.delete` `bigquery.dataPolicies.get` `bigquery. dataPolicies. getIamPolicy` `bigquery.dataPolicies.list` `bigquery. dataPolicies. setIamPolicy` `bigquery.dataPolicies.update`
Masked Reader ( `roles/ bigquerydatapolicy.maskedReader` ) Masked read access to sub-resources tagged by the policy tag associated with a data policy, for example, BigQuery columns This role can only be granted on Resource Manager resources (projects, folders, and organizations).	`bigquery. dataPolicies. maskedGet`
Raw Data Reader ^Beta ( `roles/ bigquerydatapolicy.rawDataReader` ) Raw read access to sub-resources associated with a data policy, for example, BigQuery columns This role can only be granted on Resource Manager resources (projects, folders, and organizations).	`bigquery. dataPolicies. getRawData`
BigQuery Data Policy Viewer ( `roles/ bigquerydatapolicy.viewer` ) Role for viewing Data Policies in BigQuery This role can only be granted on Resource Manager resources (projects, folders, and organizations).	`bigquery.dataPolicies.get` `bigquery.dataPolicies.list`

BigQuery Data Policy Admin

( roles/ bigquerydatapolicy.admin )

Role for managing Data Policies in BigQuery

This role can only be granted on Resource Manager resources (projects, folders, and organizations).

bigquery.dataPolicies.create

bigquery.dataPolicies.delete

bigquery.dataPolicies.get

bigquery. dataPolicies. getIamPolicy

bigquery.dataPolicies.list

bigquery. dataPolicies. setIamPolicy

bigquery.dataPolicies.update

Masked Reader

( roles/ bigquerydatapolicy.maskedReader )

Masked read access to sub-resources tagged by the policy tag associated with a data policy, for example, BigQuery columns

This role can only be granted on Resource Manager resources (projects, folders, and organizations).

bigquery. dataPolicies. maskedGet

Raw Data Reader ^Beta

( roles/ bigquerydatapolicy.rawDataReader )

Raw read access to sub-resources associated with a data policy, for example, BigQuery columns

This role can only be granted on Resource Manager resources (projects, folders, and organizations).

bigquery. dataPolicies. getRawData

BigQuery Data Policy Viewer

( roles/ bigquerydatapolicy.viewer )

Role for viewing Data Policies in BigQuery

This role can only be granted on Resource Manager resources (projects, folders, and organizations).

bigquery.dataPolicies.get

bigquery.dataPolicies.list

BigQuery Data Policy permissions

There are no IAM permissions for this service.

BigQuery Data Policy roles and permissions