This page lists the IAM roles and permissions for Dataproc Resource Manager. To search through all roles and permissions, see the role and permission index .
Dataproc Resource Manager roles
Dataproc Resource Manager Admin Beta
( roles/  
)
Grants full access to all Dataproc Resource Manager resources. Intended for users that need to create and delete any Dataproc Resource Manager resources.
  dataprocrm.* 
 
-  dataprocrm.locations.get
-  dataprocrm.locations.list
-  dataprocrm.nodePools.create
-  dataprocrm.nodePools.delete
-  dataprocrm.nodePools. deleteNodes 
-  dataprocrm.nodePools.get
-  dataprocrm.nodePools.list
-  dataprocrm.nodePools.resize
-  dataprocrm.nodes.get
-  dataprocrm.nodes.heartbeat
-  dataprocrm.nodes.list
-  dataprocrm.nodes. mintOAuthToken 
-  dataprocrm.nodes.update
-  dataprocrm.operations.cancel
-  dataprocrm.operations.delete
-  dataprocrm.operations.get
-  dataprocrm.operations.list
-  dataprocrm.workloads.cancel
-  dataprocrm.workloads.create
-  dataprocrm.workloads.delete
-  dataprocrm.workloads.get
-  dataprocrm.workloads.list
 resourcemanager.projects.get 
 resourcemanager.projects.list 
Dataproc Resource Manager Node Service Agent
( roles/  
)
Dataproc Resource Manager Node Service Agent used to run managed resources in user project with restricted permissions.
 dataprocrm.nodes.get 
 dataprocrm.nodes.heartbeat 
 dataprocrm.  
 logging.logEntries.create 
 logging.logEntries.route 
 monitoring.  
 monitoring.  
 monitoring.  
  monitoring.  
 
-  monitoring.monitoredResourceDescriptors. get 
-  monitoring.monitoredResourceDescriptors. list 
 monitoring.timeSeries.create 
 serviceusage.services.use 
Dataproc Resource Manager Viewer Beta
( roles/  
)
Grants read access to all Dataproc Resource Manager resources. Intended for users that need read-only access to Dataproc Resource Manager resources.
  dataprocrm.locations.* 
 
-  dataprocrm.locations.get
-  dataprocrm.locations.list
 dataprocrm.nodePools.get 
 dataprocrm.nodePools.list 
 dataprocrm.nodes.get 
 dataprocrm.nodes.list 
 dataprocrm.  
 dataprocrm.operations.get 
 dataprocrm.operations.list 
 dataprocrm.workloads.get 
 dataprocrm.workloads.list 
 resourcemanager.projects.get 
 resourcemanager.projects.list 
Dataproc Resource Manager permissions
 dataprocrm.locations.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Dataproc Resource Manager Admin 
( roles/  
)
 Dataproc Resource Manager Viewer 
( roles/  
)
 Support User 
( roles/  
)
 dataprocrm.locations.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Dataproc Resource Manager Admin 
( roles/  
)
 Dataproc Resource Manager Viewer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
 dataprocrm.nodePools.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 BigQuery Studio Admin 
( roles/  
)
 BigQuery Studio User 
( roles/  
)
 Dataproc Administrator 
( roles/  
)
 Dataproc Editor 
( roles/  
)
 Dataproc Serverless Editor 
( roles/  
)
 Dataproc Serverless Node. 
( roles/  
)
 Dataproc Worker 
( roles/  
)
 Dataproc Resource Manager Admin 
( roles/  
)
 Data Scientist 
( roles/  
)
 ML Engineer 
( roles/  
)
Service agent roles
-  Dataproc Service Agent 
( roles/)dataproc.serviceAgent 
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 dataprocrm.nodePools.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 BigQuery Studio Admin 
( roles/  
)
 BigQuery Studio User 
( roles/  
)
 Dataproc Administrator 
( roles/  
)
 Dataproc Editor 
( roles/  
)
 Dataproc Serverless Editor 
( roles/  
)
 Dataproc Serverless Node. 
( roles/  
)
 Dataproc Worker 
( roles/  
)
 Dataproc Resource Manager Admin 
( roles/  
)
 Data Scientist 
( roles/  
)
 ML Engineer 
( roles/  
)
Service agent roles
-  Dataproc Service Agent 
( roles/)dataproc.serviceAgent 
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 dataprocrm.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 BigQuery Studio Admin 
( roles/  
)
 BigQuery Studio User 
( roles/  
)
 Dataproc Administrator 
( roles/  
)
 Dataproc Editor 
( roles/  
)
 Dataproc Serverless Editor 
( roles/  
)
 Dataproc Serverless Node. 
( roles/  
)
 Dataproc Worker 
( roles/  
)
 Dataproc Resource Manager Admin 
( roles/  
)
 Data Scientist 
( roles/  
)
 ML Engineer 
( roles/  
)
Service agent roles
-  Dataproc Service Agent 
( roles/)dataproc.serviceAgent 
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 dataprocrm.nodePools.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 BigQuery Studio Admin 
( roles/  
)
 BigQuery Studio User 
( roles/  
)
 Dataproc Administrator 
( roles/  
)
 Dataproc Editor 
( roles/  
)
 Dataproc Serverless Editor 
( roles/  
)
 Dataproc Serverless Node. 
( roles/  
)
 Dataproc Worker 
( roles/  
)
 Dataproc Resource Manager Admin 
( roles/  
)
 Dataproc Resource Manager Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 ML Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Dataproc Service Agent 
( roles/)dataproc.serviceAgent 
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 dataprocrm.nodePools.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 BigQuery Studio Admin 
( roles/  
)
 BigQuery Studio User 
( roles/  
)
 Dataproc Administrator 
( roles/  
)
 Dataproc Editor 
( roles/  
)
 Dataproc Serverless Editor 
( roles/  
)
 Dataproc Serverless Node. 
( roles/  
)
 Dataproc Worker 
( roles/  
)
 Dataproc Resource Manager Admin 
( roles/  
)
 Dataproc Resource Manager Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 ML Engineer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Dataproc Service Agent 
( roles/)dataproc.serviceAgent 
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 dataprocrm.nodePools.resize 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 BigQuery Studio Admin 
( roles/  
)
 BigQuery Studio User 
( roles/  
)
 Dataproc Administrator 
( roles/  
)
 Dataproc Editor 
( roles/  
)
 Dataproc Serverless Editor 
( roles/  
)
 Dataproc Serverless Node. 
( roles/  
)
 Dataproc Worker 
( roles/  
)
 Dataproc Resource Manager Admin 
( roles/  
)
 Data Scientist 
( roles/  
)
 ML Engineer 
( roles/  
)
Service agent roles
-  Dataproc Service Agent 
( roles/)dataproc.serviceAgent 
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 dataprocrm.nodes.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 BigQuery Studio Admin 
( roles/  
)
 BigQuery Studio User 
( roles/  
)
 Dataproc Administrator 
( roles/  
)
 Dataproc Editor 
( roles/  
)
 Dataproc Serverless Editor 
( roles/  
)
 Dataproc Worker 
( roles/  
)
 Dataproc Resource Manager Admin 
( roles/  
)
 Dataproc Resource Manager Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 ML Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Dataproc Service Agent 
( roles/)dataproc.serviceAgent 
-  Dataproc Resource Manager Node Service Agent 
( roles/)dataprocrm.nodeServiceAgent 
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 dataprocrm.nodes.heartbeat 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 BigQuery Studio Admin 
( roles/  
)
 BigQuery Studio User 
( roles/  
)
 Dataproc Administrator 
( roles/  
)
 Dataproc Editor 
( roles/  
)
 Dataproc Serverless Editor 
( roles/  
)
 Dataproc Worker 
( roles/  
)
 Dataproc Resource Manager Admin 
( roles/  
)
 Data Scientist 
( roles/  
)
 ML Engineer 
( roles/  
)
Service agent roles
-  Dataproc Service Agent 
( roles/)dataproc.serviceAgent 
-  Dataproc Resource Manager Node Service Agent 
( roles/)dataprocrm.nodeServiceAgent 
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 dataprocrm.nodes.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 BigQuery Studio Admin 
( roles/  
)
 BigQuery Studio User 
( roles/  
)
 Dataproc Administrator 
( roles/  
)
 Dataproc Editor 
( roles/  
)
 Dataproc Serverless Editor 
( roles/  
)
 Dataproc Serverless Node. 
( roles/  
)
 Dataproc Worker 
( roles/  
)
 Dataproc Resource Manager Admin 
( roles/  
)
 Dataproc Resource Manager Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 ML Engineer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Dataproc Service Agent 
( roles/)dataproc.serviceAgent 
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 dataprocrm.  
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 Dataproc Worker 
( roles/  
)
 Dataproc Resource Manager Admin 
( roles/  
)
 Dataproc Resource Manager Viewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Dataproc Resource Manager Node Service Agent 
( roles/)dataprocrm.nodeServiceAgent 
-  Dataproc Service Agent 
( roles/)dataproc.serviceAgent 
 dataprocrm.nodes.update 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 BigQuery Studio Admin 
( roles/  
)
 BigQuery Studio User 
( roles/  
)
 Dataproc Administrator 
( roles/  
)
 Dataproc Editor 
( roles/  
)
 Dataproc Serverless Editor 
( roles/  
)
 Dataproc Resource Manager Admin 
( roles/  
)
 Data Scientist 
( roles/  
)
 ML Engineer 
( roles/  
)
Service agent roles
-  Dataproc Service Agent 
( roles/)dataproc.serviceAgent 
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 dataprocrm.operations.cancel 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Dataproc Resource Manager Admin 
( roles/  
)
Service agent roles
-  Dataproc Service Agent 
( roles/)dataproc.serviceAgent 
 dataprocrm.operations.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Dataproc Resource Manager Admin 
( roles/  
)
 dataprocrm.operations.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 BigQuery Studio Admin 
( roles/  
)
 BigQuery Studio User 
( roles/  
)
 Dataproc Administrator 
( roles/  
)
 Dataproc Editor 
( roles/  
)
 Dataproc Serverless Editor 
( roles/  
)
 Dataproc Resource Manager Admin 
( roles/  
)
 Dataproc Resource Manager Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 ML Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Dataproc Service Agent 
( roles/)dataproc.serviceAgent 
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 dataprocrm.operations.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 BigQuery Studio Admin 
( roles/  
)
 BigQuery Studio User 
( roles/  
)
 Dataproc Administrator 
( roles/  
)
 Dataproc Editor 
( roles/  
)
 Dataproc Serverless Editor 
( roles/  
)
 Dataproc Resource Manager Admin 
( roles/  
)
 Dataproc Resource Manager Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 ML Engineer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Dataproc Service Agent 
( roles/)dataproc.serviceAgent 
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 dataprocrm.workloads.cancel 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 BigQuery Studio Admin 
( roles/  
)
 BigQuery Studio User 
( roles/  
)
 Dataproc Administrator 
( roles/  
)
 Dataproc Editor 
( roles/  
)
 Dataproc Serverless Editor 
( roles/  
)
 Dataproc Resource Manager Admin 
( roles/  
)
 Data Scientist 
( roles/  
)
 ML Engineer 
( roles/  
)
Service agent roles
-  Dataproc Service Agent 
( roles/)dataproc.serviceAgent 
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 dataprocrm.workloads.create 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 BigQuery Studio Admin 
( roles/  
)
 BigQuery Studio User 
( roles/  
)
 Dataproc Administrator 
( roles/  
)
 Dataproc Editor 
( roles/  
)
 Dataproc Serverless Editor 
( roles/  
)
 Dataproc Resource Manager Admin 
( roles/  
)
 Data Scientist 
( roles/  
)
 ML Engineer 
( roles/  
)
Service agent roles
-  Dataproc Service Agent 
( roles/)dataproc.serviceAgent 
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 dataprocrm.workloads.delete 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 BigQuery Studio Admin 
( roles/  
)
 BigQuery Studio User 
( roles/  
)
 Dataproc Administrator 
( roles/  
)
 Dataproc Editor 
( roles/  
)
 Dataproc Serverless Editor 
( roles/  
)
 Dataproc Resource Manager Admin 
( roles/  
)
 Data Scientist 
( roles/  
)
 ML Engineer 
( roles/  
)
Service agent roles
-  Dataproc Service Agent 
( roles/)dataproc.serviceAgent 
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 dataprocrm.workloads.get 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 BigQuery Studio Admin 
( roles/  
)
 BigQuery Studio User 
( roles/  
)
 Dataproc Administrator 
( roles/  
)
 Dataproc Editor 
( roles/  
)
 Dataproc Serverless Editor 
( roles/  
)
 Dataproc Resource Manager Admin 
( roles/  
)
 Dataproc Resource Manager Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 ML Engineer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Dataproc Service Agent 
( roles/)dataproc.serviceAgent 
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 
 dataprocrm.workloads.list 
 
 Owner 
( roles/  
)
 Editor 
( roles/  
)
 Viewer 
( roles/  
)
 BigQuery Studio Admin 
( roles/  
)
 BigQuery Studio User 
( roles/  
)
 Dataproc Administrator 
( roles/  
)
 Dataproc Editor 
( roles/  
)
 Dataproc Serverless Editor 
( roles/  
)
 Dataproc Resource Manager Admin 
( roles/  
)
 Dataproc Resource Manager Viewer 
( roles/  
)
 Data Scientist 
( roles/  
)
 ML Engineer 
( roles/  
)
 Security Admin 
( roles/  
)
 Security Auditor 
( roles/  
)
 Security Reviewer 
( roles/  
)
 Support User 
( roles/  
)
Service agent roles
-  Dataproc Service Agent 
( roles/)dataproc.serviceAgent 
-  Cloud Data Fusion API Service Agent 
( roles/)datafusion.serviceAgent 

