This page lists the IAM roles and permissions for Bigtable. To search through all roles and permissions, see the role and permission index .
Bigtable roles
Bigtable Administrator
( roles/  
)
Administers all Bigtable instances within a project, including the data stored within tables. Can create new instances. Intended for project administrators.
Lowest-level resources where you can grant this role:
- Table
  bigtable.* 
 
-  bigtable.appProfiles.create
-  bigtable.appProfiles.delete
-  bigtable.appProfiles.get
-  bigtable.appProfiles.list
-  bigtable.appProfiles.update
-  bigtable.authorizedViews. create 
-  bigtable.authorizedViews. createTagBinding 
-  bigtable.authorizedViews. delete 
-  bigtable.authorizedViews. deleteTagBinding 
-  bigtable.authorizedViews.get
-  bigtable.authorizedViews. getIamPolicy 
-  bigtable.authorizedViews.list
-  bigtable.authorizedViews. listEffectiveTags 
-  bigtable.authorizedViews. listTagBindings 
-  bigtable.authorizedViews. mutateRows 
-  bigtable.authorizedViews. readRows 
-  bigtable.authorizedViews. sampleRowKeys 
-  bigtable.authorizedViews. setIamPolicy 
-  bigtable.authorizedViews. update 
-  bigtable.backups.create
-  bigtable.backups.delete
-  bigtable.backups.get
-  bigtable.backups.getIamPolicy
-  bigtable.backups.list
-  bigtable.backups.read
-  bigtable.backups.restore
-  bigtable.backups.setIamPolicy
-  bigtable.backups.update
-  bigtable.clusters.create
-  bigtable.clusters.delete
-  bigtable.clusters.get
-  bigtable.clusters.list
-  bigtable.clusters.update
-  bigtable.hotTablets.list
-  bigtable.instances.create
-  bigtable.instances. createTagBinding 
-  bigtable.instances.delete
-  bigtable.instances. deleteTagBinding 
-  bigtable.instances. executeQuery 
-  bigtable.instances.get
-  bigtable.instances. getIamPolicy 
-  bigtable.instances.list
-  bigtable.instances. listEffectiveTags 
-  bigtable.instances. listTagBindings 
-  bigtable.instances.ping
-  bigtable.instances. setIamPolicy 
-  bigtable.instances.update
-  bigtable.keyvisualizer.get
-  bigtable.keyvisualizer.list
-  bigtable.locations.list
-  bigtable.logicalViews.create
-  bigtable.logicalViews.delete
-  bigtable.logicalViews.get
-  bigtable.logicalViews. getIamPolicy 
-  bigtable.logicalViews.list
-  bigtable.logicalViews.readRows
-  bigtable.logicalViews. setIamPolicy 
-  bigtable.logicalViews.update
-  bigtable.materializedViews. create 
-  bigtable.materializedViews. delete 
-  bigtable.materializedViews.get
-  bigtable.materializedViews. getIamPolicy 
-  bigtable.materializedViews. list 
-  bigtable.materializedViews. readRows 
-  bigtable.materializedViews. sampleRowKeys 
-  bigtable.materializedViews. setIamPolicy 
-  bigtable.materializedViews. update 
-  bigtable.schemaBundles.create
-  bigtable.schemaBundles.delete
-  bigtable.schemaBundles.get
-  bigtable.schemaBundles. getIamPolicy 
-  bigtable.schemaBundles.list
-  bigtable.schemaBundles. setIamPolicy 
-  bigtable.schemaBundles.update
-  bigtable.tables. checkConsistency 
-  bigtable.tables.create
-  bigtable.tables.delete
-  bigtable.tables. generateConsistencyToken 
-  bigtable.tables.get
-  bigtable.tables.getIamPolicy
-  bigtable.tables.list
-  bigtable.tables.mutateRows
-  bigtable.tables.readRows
-  bigtable.tables.sampleRowKeys
-  bigtable.tables.setIamPolicy
-  bigtable.tables.undelete
-  bigtable.tables.update
  cloudkms.keyHandles.* 
 
-  cloudkms.keyHandles.create
-  cloudkms.keyHandles.get
-  cloudkms.keyHandles.list
 cloudkms.operations.get 
 cloudkms.  
 monitoring.  
 monitoring.  
  monitoring.timeSeries.* 
 
-  monitoring.timeSeries.create
-  monitoring.timeSeries.list
 resourcemanager.projects.get 
Bigtable Reader
( roles/  
)
Provides read-only access to the data stored within Bigtable tables. Intended for data scientists, dashboard generators, and other data-analysis scenarios.
Lowest-level resources where you can grant this role:
- Table
 bigtable.appProfiles.get 
 bigtable.appProfiles.list 
 bigtable.authorizedViews.get 
 bigtable.authorizedViews.list 
 bigtable.  
 bigtable.  
 bigtable.backups.get 
 bigtable.backups.list 
 bigtable.clusters.get 
 bigtable.clusters.list 
 bigtable.hotTablets.list 
 bigtable.  
 bigtable.instances.get 
 bigtable.instances.list 
 bigtable.instances.ping 
  bigtable.keyvisualizer.* 
 
-  bigtable.keyvisualizer.get
-  bigtable.keyvisualizer.list
 bigtable.locations.list 
 bigtable.logicalViews.get 
 bigtable.logicalViews.list 
 bigtable.logicalViews.readRows 
 bigtable.materializedViews.get 
 bigtable.  
 bigtable.  
 bigtable.  
 bigtable.schemaBundles.get 
 bigtable.schemaBundles.list 
 bigtable.  
 bigtable.  
 bigtable.tables.get 
 bigtable.tables.list 
 bigtable.tables.readRows 
 bigtable.tables.sampleRowKeys 
 monitoring.  
 monitoring.  
  monitoring.timeSeries.* 
 
-  monitoring.timeSeries.create
-  monitoring.timeSeries.list
 resourcemanager.projects.get 
Bigtable User
( roles/  
)
Provides read-write access to the data stored within Bigtable tables. Intended for application developers or service accounts.
Lowest-level resources where you can grant this role:
- Table
 bigtable.appProfiles.get 
 bigtable.appProfiles.list 
 bigtable.authorizedViews.get 
 bigtable.authorizedViews.list 
 bigtable.  
 bigtable.  
 bigtable.  
 bigtable.backups.get 
 bigtable.backups.list 
 bigtable.clusters.get 
 bigtable.clusters.list 
 bigtable.hotTablets.list 
 bigtable.  
 bigtable.instances.get 
 bigtable.instances.list 
 bigtable.instances.ping 
  bigtable.keyvisualizer.* 
 
-  bigtable.keyvisualizer.get
-  bigtable.keyvisualizer.list
 bigtable.locations.list 
 bigtable.logicalViews.get 
 bigtable.logicalViews.list 
 bigtable.logicalViews.readRows 
 bigtable.materializedViews.get 
 bigtable.  
 bigtable.  
 bigtable.  
 bigtable.schemaBundles.get 
 bigtable.schemaBundles.list 
 bigtable.  
 bigtable.  
 bigtable.tables.get 
 bigtable.tables.list 
 bigtable.tables.mutateRows 
 bigtable.tables.readRows 
 bigtable.tables.sampleRowKeys 
 monitoring.  
 monitoring.  
  monitoring.timeSeries.* 
 
-  monitoring.timeSeries.create
-  monitoring.timeSeries.list
 resourcemanager.projects.get 
Bigtable Viewer
( roles/  
)
Provides no data access. Intended as a minimal set of permissions to access the Google Cloud console for Bigtable.
Lowest-level resources where you can grant this role:
- Table
 bigtable.appProfiles.get 
 bigtable.appProfiles.list 
 bigtable.authorizedViews.get 
 bigtable.authorizedViews.list 
 bigtable.backups.get 
 bigtable.backups.list 
 bigtable.clusters.get 
 bigtable.clusters.list 
 bigtable.hotTablets.list 
 bigtable.instances.get 
 bigtable.instances.list 
 bigtable.  
 bigtable.  
 bigtable.locations.list 
 bigtable.logicalViews.get 
 bigtable.logicalViews.list 
 bigtable.materializedViews.get 
 bigtable.  
 bigtable.schemaBundles.get 
 bigtable.schemaBundles.list 
 bigtable.  
 bigtable.  
 bigtable.tables.get 
 bigtable.tables.list 
 monitoring.  
 monitoring.  
 monitoring.timeSeries.list 
 resourcemanager.projects.get 
Bigtable permissions
 bigtable.appProfiles.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.appProfiles.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.appProfiles.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Bigtable Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Site Reliability Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.appProfiles.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Bigtable Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Site Reliability Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.appProfiles.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 DLP Organization Data Profiles Driver 
( roles/  
)
 DLP Project Data Profiles Driver 
( roles/  
)
 Databases Admin 
( roles/  
)
 Tag User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 DLP Organization Data Profiles Driver 
( roles/  
)
 DLP Project Data Profiles Driver 
( roles/  
)
 Databases Admin 
( roles/  
)
 Tag User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.authorizedViews.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Bigtable Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Site Reliability Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.authorizedViews.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Bigtable Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Site Reliability Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 DLP Organization Data Profiles Driver 
( roles/  
)
 DLP Project Data Profiles Driver 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Support User 
( roles/  
)
 Tag User 
( roles/  
)
 Tag Viewer 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 DLP Organization Data Profiles Driver 
( roles/  
)
 DLP Project Data Profiles Driver 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Support User 
( roles/  
)
 Tag User 
( roles/  
)
 Tag Viewer 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable User 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.backups.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.backups.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.backups.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Bigtable Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Site Reliability Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.backups.getIamPolicy 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.backups.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Bigtable Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Site Reliability Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.backups.read 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.backups.restore 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.backups.setIamPolicy 
 
 Owner 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.backups.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.clusters.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.clusters.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.clusters.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Bigtable Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Site Reliability Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.clusters.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Bigtable Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Site Reliability Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.clusters.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.hotTablets.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Bigtable Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Site Reliability Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.instances.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
-  Cloud Deployment Manager Service Agent 
( roles/)clouddeploymentmanager.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 DLP Organization Data Profiles Driver 
( roles/  
)
 DLP Project Data Profiles Driver 
( roles/  
)
 Databases Admin 
( roles/  
)
 Tag User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.instances.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
-  Cloud Deployment Manager Service Agent 
( roles/)clouddeploymentmanager.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 DLP Organization Data Profiles Driver 
( roles/  
)
 DLP Project Data Profiles Driver 
( roles/  
)
 Databases Admin 
( roles/  
)
 Tag User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.instances.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Bigtable Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Site Reliability Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
-  Cloud Deployment Manager Service Agent 
( roles/)clouddeploymentmanager.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.instances.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Bigtable Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Site Reliability Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Viewer 
( roles/  
)
 DLP Organization Data Profiles Driver 
( roles/  
)
 DLP Project Data Profiles Driver 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Site Reliability Engineer 
( roles/  
)
 Support User 
( roles/  
)
 Tag User 
( roles/  
)
 Tag Viewer 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Viewer 
( roles/  
)
 DLP Organization Data Profiles Driver 
( roles/  
)
 DLP Project Data Profiles Driver 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Site Reliability Engineer 
( roles/  
)
 Support User 
( roles/  
)
 Tag User 
( roles/  
)
 Tag Viewer 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.instances.ping 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.instances.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
-  Cloud Deployment Manager Service Agent 
( roles/)clouddeploymentmanager.serviceAgent 
 bigtable.keyvisualizer.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.keyvisualizer.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.locations.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Bigtable Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Site Reliability Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.logicalViews.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.logicalViews.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.logicalViews.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Bigtable Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Site Reliability Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.logicalViews.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Bigtable Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Site Reliability Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.logicalViews.readRows 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.logicalViews.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.materializedViews.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Bigtable Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Site Reliability Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Bigtable Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Site Reliability Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.schemaBundles.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.schemaBundles.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.schemaBundles.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Bigtable Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Site Reliability Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.schemaBundles.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Bigtable Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Site Reliability Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.schemaBundles.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Bigtable Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Site Reliability Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.tables.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
-  Cloud Deployment Manager Service Agent 
( roles/)clouddeploymentmanager.serviceAgent 
 bigtable.tables.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
-  Cloud Deployment Manager Service Agent 
( roles/)clouddeploymentmanager.serviceAgent 
 bigtable.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Bigtable Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Site Reliability Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.tables.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Bigtable Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Site Reliability Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  AutoML Service Agent 
( roles/)automl.serviceAgent 
-  Cloud Deployment Manager Service Agent 
( roles/)clouddeploymentmanager.serviceAgent 
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
-  Datapipelines Service Agent 
( roles/)datapipelines.serviceAgent 
-  Cloud Vision AI Service Agent 
( roles/)visionai.serviceAgent 
-  Vertex AI Service Agent 
( roles/)aiplatform.serviceAgent 
 bigtable.tables.getIamPolicy 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.tables.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Bigtable Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Site Reliability Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  AutoML Service Agent 
( roles/)automl.serviceAgent 
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
-  Cloud Vision AI Service Agent 
( roles/)visionai.serviceAgent 
-  Vertex AI Service Agent 
( roles/)aiplatform.serviceAgent 
 bigtable.tables.mutateRows 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable User 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.tables.readRows 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  AutoML Service Agent 
( roles/)automl.serviceAgent 
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
-  Discovery Engine Service Agent 
( roles/)discoveryengine.serviceAgent 
-  Cloud Vision AI Service Agent 
( roles/)visionai.serviceAgent 
-  Vertex AI Service Agent 
( roles/)aiplatform.serviceAgent 
 bigtable.tables.sampleRowKeys 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Bigtable Reader 
( roles/  
)
 Bigtable User 
( roles/  
)
 Data Scientist 
( roles/  
)
 Databases Admin 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Discovery Engine Service Agent 
( roles/)discoveryengine.serviceAgent 
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.tables.setIamPolicy 
 
 Owner 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
 Security Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.tables.undelete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 bigtable.tables.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Bigtable Administrator 
( roles/  
)
 Databases Admin 
( roles/  
)
Service agent roles
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
-  Cloud Deployment Manager Service Agent 
( roles/)clouddeploymentmanager.serviceAgent 

