Roles Data

Name Description Title Included Permissions Copy Stage
roles/datafusion.accessor Read-only access to Cloud Data Fusion Instances. Use it on instance level along with the namespace grants to provide access to the specific namespace. Cloud Data Fusion Accessor ['datafusion.instances.get', 'datafusion.instances.getIamPolicy', 'datafusion.instances.list', 'datafusion.instances.listEffectiveTags', 'datafusion.instances.listTagBindings', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] BETA
roles/datafusion.developer Access Cloud Data Fusion Instances, develop and run pipelines. Cloud Data Fusion Developer ['datafusion.artifacts.get', 'datafusion.artifacts.list', 'datafusion.instances.get', 'datafusion.instances.getIamPolicy', 'datafusion.instances.list', 'datafusion.instances.listEffectiveTags', 'datafusion.instances.listTagBindings', 'datafusion.locations.get', 'datafusion.locations.list', 'datafusion.namespaces.provisionCredential', 'datafusion.namespaces.readRepository', 'datafusion.namespaces.writeRepository', 'datafusion.operations.get', 'datafusion.operations.list', 'datafusion.pipelineConnections.get', 'datafusion.pipelineConnections.list', 'datafusion.pipelineConnections.use', 'datafusion.pipelines.create', 'datafusion.pipelines.delete', 'datafusion.pipelines.execute', 'datafusion.pipelines.get', 'datafusion.pipelines.list', 'datafusion.pipelines.preview', 'datafusion.pipelines.update', 'datafusion.profiles.get', 'datafusion.profiles.list', 'datafusion.secureKeys.create', 'datafusion.secureKeys.delete', 'datafusion.secureKeys.getSecret', 'datafusion.secureKeys.list', 'datafusion.secureKeys.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] BETA
roles/datafusion.serviceAgent Gives Cloud Data Fusion service account access to Service Networking, Cloud Dataproc, Cloud Storage, BigQuery, Cloud Spanner, and Cloud Bigtable resources. Cloud Data Fusion API Service Agent ['bigquery.config.get', 'bigquery.dataPolicies.create', 'bigquery.dataPolicies.delete', 'bigquery.dataPolicies.get', 'bigquery.dataPolicies.getIamPolicy', 'bigquery.dataPolicies.list', 'bigquery.dataPolicies.setIamPolicy', 'bigquery.dataPolicies.update', 'bigquery.datasets.create', 'bigquery.datasets.createTagBinding', 'bigquery.datasets.delete', 'bigquery.datasets.deleteTagBinding', 'bigquery.datasets.get', 'bigquery.datasets.getIamPolicy', 'bigquery.datasets.link', 'bigquery.datasets.listEffectiveTags', 'bigquery.datasets.listSharedDatasetUsage', 'bigquery.datasets.listTagBindings', 'bigquery.datasets.setIamPolicy', 'bigquery.datasets.update', 'bigquery.datasets.updateTag', 'bigquery.jobs.create', 'bigquery.models.create', 'bigquery.models.delete', 'bigquery.models.export', 'bigquery.models.getData', 'bigquery.models.getMetadata', 'bigquery.models.list', 'bigquery.models.updateData', 'bigquery.models.updateMetadata', 'bigquery.models.updateTag', 'bigquery.routines.create', 'bigquery.routines.delete', 'bigquery.routines.get', 'bigquery.routines.list', 'bigquery.routines.update', 'bigquery.routines.updateTag', 'bigquery.rowAccessPolicies.create', 'bigquery.rowAccessPolicies.delete', 'bigquery.rowAccessPolicies.getIamPolicy', 'bigquery.rowAccessPolicies.list', 'bigquery.rowAccessPolicies.setIamPolicy', 'bigquery.rowAccessPolicies.update', 'bigquery.tables.create', 'bigquery.tables.createIndex', 'bigquery.tables.createSnapshot', 'bigquery.tables.createTagBinding', 'bigquery.tables.delete', 'bigquery.tables.deleteIndex', 'bigquery.tables.deleteSnapshot', 'bigquery.tables.deleteTagBinding', 'bigquery.tables.export', 'bigquery.tables.get', 'bigquery.tables.getData', 'bigquery.tables.getIamPolicy', 'bigquery.tables.list', 'bigquery.tables.listEffectiveTags', 'bigquery.tables.listTagBindings', 'bigquery.tables.replicateData', 'bigquery.tables.restoreSnapshot', 'bigquery.tables.setCategory', 'bigquery.tables.setColumnDataPolicy', 'bigquery.tables.setIamPolicy', 'bigquery.tables.update', 'bigquery.tables.updateData', 'bigquery.tables.updateTag', 'bigtable.appProfiles.create', 'bigtable.appProfiles.delete', 'bigtable.appProfiles.get', 'bigtable.appProfiles.list', 'bigtable.appProfiles.update', 'bigtable.authorizedViews.create', 'bigtable.authorizedViews.createTagBinding', 'bigtable.authorizedViews.delete', 'bigtable.authorizedViews.deleteTagBinding', 'bigtable.authorizedViews.get', 'bigtable.authorizedViews.getIamPolicy', 'bigtable.authorizedViews.list', 'bigtable.authorizedViews.listEffectiveTags', 'bigtable.authorizedViews.listTagBindings', 'bigtable.authorizedViews.mutateRows', 'bigtable.authorizedViews.readRows', 'bigtable.authorizedViews.sampleRowKeys', 'bigtable.authorizedViews.setIamPolicy', 'bigtable.authorizedViews.update', 'bigtable.backups.create', 'bigtable.backups.delete', 'bigtable.backups.get', 'bigtable.backups.getIamPolicy', 'bigtable.backups.list', 'bigtable.backups.read', 'bigtable.backups.restore', 'bigtable.backups.setIamPolicy', 'bigtable.backups.update', 'bigtable.clusters.create', 'bigtable.clusters.delete', 'bigtable.clusters.get', 'bigtable.clusters.list', 'bigtable.clusters.update', 'bigtable.hotTablets.list', 'bigtable.instances.create', 'bigtable.instances.createTagBinding', 'bigtable.instances.delete', 'bigtable.instances.deleteTagBinding', 'bigtable.instances.executeQuery', 'bigtable.instances.get', 'bigtable.instances.getIamPolicy', 'bigtable.instances.list', 'bigtable.instances.listEffectiveTags', 'bigtable.instances.listTagBindings', 'bigtable.instances.ping', 'bigtable.instances.setIamPolicy', 'bigtable.instances.update', 'bigtable.keyvisualizer.get', 'bigtable.keyvisualizer.list', 'bigtable.locations.list', 'bigtable.tables.checkConsistency', 'bigtable.tables.create', 'bigtable.tables.delete', 'bigtable.tables.generateConsistencyToken', 'bigtable.tables.get', 'bigtable.tables.getIamPolicy', 'bigtable.tables.list', 'bigtable.tables.mutateRows', 'bigtable.tables.readRows', 'bigtable.tables.sampleRowKeys', 'bigtable.tables.setIamPolicy', 'bigtable.tables.undelete', 'bigtable.tables.update', 'compute.acceleratorTypes.get', 'compute.acceleratorTypes.list', 'compute.addresses.get', 'compute.addresses.list', 'compute.addresses.listEffectiveTags', 'compute.addresses.listTagBindings', 'compute.autoscalers.get', 'compute.autoscalers.list', 'compute.backendBuckets.get', 'compute.backendBuckets.list', 'compute.backendBuckets.listEffectiveTags', 'compute.backendBuckets.listTagBindings', 'compute.backendServices.get', 'compute.backendServices.list', 'compute.backendServices.listEffectiveTags', 'compute.backendServices.listTagBindings', 'compute.disks.listEffectiveTags', 'compute.disks.listTagBindings', 'compute.externalVpnGateways.get', 'compute.externalVpnGateways.list', 'compute.externalVpnGateways.listEffectiveTags', 'compute.externalVpnGateways.listTagBindings', 'compute.firewalls.get', 'compute.firewalls.list', 'compute.firewalls.listEffectiveTags', 'compute.firewalls.listTagBindings', 'compute.forwardingRules.get', 'compute.forwardingRules.list', 'compute.forwardingRules.listEffectiveTags', 'compute.forwardingRules.listTagBindings', 'compute.globalAddresses.get', 'compute.globalAddresses.list', 'compute.globalAddresses.listEffectiveTags', 'compute.globalAddresses.listTagBindings', 'compute.globalForwardingRules.get', 'compute.globalForwardingRules.list', 'compute.globalForwardingRules.listEffectiveTags', 'compute.globalForwardingRules.listTagBindings', 'compute.globalForwardingRules.pscGet', 'compute.globalOperations.get', 'compute.healthChecks.get', 'compute.healthChecks.list', 'compute.healthChecks.listEffectiveTags', 'compute.healthChecks.listTagBindings', 'compute.httpHealthChecks.get', 'compute.httpHealthChecks.list', 'compute.httpHealthChecks.listEffectiveTags', 'compute.httpHealthChecks.listTagBindings', 'compute.httpsHealthChecks.get', 'compute.httpsHealthChecks.list', 'compute.httpsHealthChecks.listEffectiveTags', 'compute.httpsHealthChecks.listTagBindings', 'compute.images.listEffectiveTags', 'compute.images.listTagBindings', 'compute.instanceGroupManagers.get', 'compute.instanceGroupManagers.list', 'compute.instanceGroupManagers.listEffectiveTags', 'compute.instanceGroupManagers.listTagBindings', 'compute.instanceGroups.get', 'compute.instanceGroups.list', 'compute.instanceGroups.listEffectiveTags', 'compute.instanceGroups.listTagBindings', 'compute.instanceSettings.get', 'compute.instances.get', 'compute.instances.getGuestAttributes', 'compute.instances.getScreenshot', 'compute.instances.getSerialPortOutput', 'compute.instances.list', 'compute.instances.listEffectiveTags', 'compute.instances.listReferrers', 'compute.instances.listTagBindings', 'compute.interconnectAttachments.get', 'compute.interconnectAttachments.list', 'compute.interconnectAttachments.listEffectiveTags', 'compute.interconnectAttachments.listTagBindings', 'compute.interconnectLocations.get', 'compute.interconnectLocations.list', 'compute.interconnectRemoteLocations.get', 'compute.interconnectRemoteLocations.list', 'compute.interconnects.get', 'compute.interconnects.list', 'compute.interconnects.listEffectiveTags', 'compute.interconnects.listTagBindings', 'compute.machineTypes.get', 'compute.machineTypes.list', 'compute.networkAttachments.get', 'compute.networkAttachments.list', 'compute.networkAttachments.listEffectiveTags', 'compute.networkAttachments.listTagBindings', 'compute.networkAttachments.update', 'compute.networks.addPeering', 'compute.networks.get', 'compute.networks.getEffectiveFirewalls', 'compute.networks.getRegionEffectiveFirewalls', 'compute.networks.list', 'compute.networks.listEffectiveTags', 'compute.networks.listPeeringRoutes', 'compute.networks.listTagBindings', 'compute.networks.removePeering', 'compute.networks.update', 'compute.packetMirrorings.get', 'compute.packetMirrorings.list', 'compute.packetMirrorings.listEffectiveTags', 'compute.packetMirrorings.listTagBindings', 'compute.projects.get', 'compute.regionBackendServices.get', 'compute.regionBackendServices.list', 'compute.regionBackendServices.listEffectiveTags', 'compute.regionBackendServices.listTagBindings', 'compute.regionHealthCheckServices.get', 'compute.regionHealthCheckServices.list', 'compute.regionHealthChecks.get', 'compute.regionHealthChecks.list', 'compute.regionHealthChecks.listEffectiveTags', 'compute.regionHealthChecks.listTagBindings', 'compute.regionNotificationEndpoints.get', 'compute.regionNotificationEndpoints.list', 'compute.regionSslCertificates.get', 'compute.regionSslCertificates.list', 'compute.regionSslCertificates.listEffectiveTags', 'compute.regionSslCertificates.listTagBindings', 'compute.regionSslPolicies.get', 'compute.regionSslPolicies.list', 'compute.regionSslPolicies.listAvailableFeatures', 'compute.regionSslPolicies.listEffectiveTags', 'compute.regionSslPolicies.listTagBindings', 'compute.regionTargetHttpProxies.get', 'compute.regionTargetHttpProxies.list', 'compute.regionTargetHttpProxies.listEffectiveTags', 'compute.regionTargetHttpProxies.listTagBindings', 'compute.regionTargetHttpsProxies.get', 'compute.regionTargetHttpsProxies.list', 'compute.regionTargetHttpsProxies.listEffectiveTags', 'compute.regionTargetHttpsProxies.listTagBindings', 'compute.regionTargetTcpProxies.get', 'compute.regionTargetTcpProxies.list', 'compute.regionTargetTcpProxies.listEffectiveTags', 'compute.regionTargetTcpProxies.listTagBindings', 'compute.regionUrlMaps.get', 'compute.regionUrlMaps.list', 'compute.regionUrlMaps.listEffectiveTags', 'compute.regionUrlMaps.listTagBindings', 'compute.regions.get', 'compute.regions.list', 'compute.routers.get', 'compute.routers.getRoutePolicy', 'compute.routers.list', 'compute.routers.listBgpRoutes', 'compute.routers.listEffectiveTags', 'compute.routers.listRoutePolicies', 'compute.routers.listTagBindings', 'compute.routes.get', 'compute.routes.list', 'compute.routes.listEffectiveTags', 'compute.routes.listTagBindings', 'compute.serviceAttachments.get', 'compute.serviceAttachments.list', 'compute.serviceAttachments.listEffectiveTags', 'compute.serviceAttachments.listTagBindings', 'compute.snapshots.listEffectiveTags', 'compute.snapshots.listTagBindings', 'compute.sslCertificates.get', 'compute.sslCertificates.list', 'compute.sslCertificates.listEffectiveTags', 'compute.sslCertificates.listTagBindings', 'compute.sslPolicies.get', 'compute.sslPolicies.list', 'compute.sslPolicies.listAvailableFeatures', 'compute.sslPolicies.listEffectiveTags', 'compute.sslPolicies.listTagBindings', 'compute.subnetworks.get', 'compute.subnetworks.list', 'compute.subnetworks.listEffectiveTags', 'compute.subnetworks.listTagBindings', 'compute.targetGrpcProxies.get', 'compute.targetGrpcProxies.list', 'compute.targetGrpcProxies.listEffectiveTags', 'compute.targetGrpcProxies.listTagBindings', 'compute.targetHttpProxies.get', 'compute.targetHttpProxies.list', 'compute.targetHttpProxies.listEffectiveTags', 'compute.targetHttpProxies.listTagBindings', 'compute.targetHttpsProxies.get', 'compute.targetHttpsProxies.list', 'compute.targetHttpsProxies.listEffectiveTags', 'compute.targetHttpsProxies.listTagBindings', 'compute.targetInstances.get', 'compute.targetInstances.list', 'compute.targetInstances.listEffectiveTags', 'compute.targetInstances.listTagBindings', 'compute.targetPools.get', 'compute.targetPools.list', 'compute.targetPools.listEffectiveTags', 'compute.targetPools.listTagBindings', 'compute.targetSslProxies.get', 'compute.targetSslProxies.list', 'compute.targetSslProxies.listEffectiveTags', 'compute.targetSslProxies.listTagBindings', 'compute.targetTcpProxies.get', 'compute.targetTcpProxies.list', 'compute.targetTcpProxies.listEffectiveTags', 'compute.targetTcpProxies.listTagBindings', 'compute.targetVpnGateways.get', 'compute.targetVpnGateways.list', 'compute.targetVpnGateways.listEffectiveTags', 'compute.targetVpnGateways.listTagBindings', 'compute.urlMaps.get', 'compute.urlMaps.list', 'compute.urlMaps.listEffectiveTags', 'compute.urlMaps.listTagBindings', 'compute.vpnGateways.get', 'compute.vpnGateways.list', 'compute.vpnGateways.listEffectiveTags', 'compute.vpnGateways.listTagBindings', 'compute.vpnTunnels.get', 'compute.vpnTunnels.list', 'compute.vpnTunnels.listEffectiveTags', 'compute.vpnTunnels.listTagBindings', 'compute.zones.get', 'compute.zones.list', 'dataform.locations.get', 'dataform.locations.list', 'dataform.repositories.create', 'dataform.repositories.list', 'dataproc.autoscalingPolicies.create', 'dataproc.autoscalingPolicies.delete', 'dataproc.autoscalingPolicies.get', 'dataproc.autoscalingPolicies.list', 'dataproc.autoscalingPolicies.update', 'dataproc.autoscalingPolicies.use', 'dataproc.batches.analyze', 'dataproc.batches.cancel', 'dataproc.batches.create', 'dataproc.batches.delete', 'dataproc.batches.get', 'dataproc.batches.list', 'dataproc.batches.sparkApplicationRead', 'dataproc.clusters.create', 'dataproc.clusters.delete', 'dataproc.clusters.get', 'dataproc.clusters.list', 'dataproc.clusters.start', 'dataproc.clusters.stop', 'dataproc.clusters.update', 'dataproc.clusters.use', 'dataproc.jobs.cancel', 'dataproc.jobs.create', 'dataproc.jobs.delete', 'dataproc.jobs.get', 'dataproc.jobs.list', 'dataproc.jobs.update', 'dataproc.nodeGroups.create', 'dataproc.nodeGroups.get', 'dataproc.nodeGroups.update', 'dataproc.operations.cancel', 'dataproc.operations.delete', 'dataproc.operations.get', 'dataproc.operations.list', 'dataproc.sessionTemplates.create', 'dataproc.sessionTemplates.delete', 'dataproc.sessionTemplates.get', 'dataproc.sessionTemplates.list', 'dataproc.sessionTemplates.update', 'dataproc.sessions.create', 'dataproc.sessions.delete', 'dataproc.sessions.get', 'dataproc.sessions.list', 'dataproc.sessions.sparkApplicationRead', 'dataproc.sessions.terminate', 'dataproc.workflowTemplates.create', 'dataproc.workflowTemplates.delete', 'dataproc.workflowTemplates.get', 'dataproc.workflowTemplates.instantiate', 'dataproc.workflowTemplates.instantiateInline', 'dataproc.workflowTemplates.list', 'dataproc.workflowTemplates.update', 'dataprocrm.nodePools.create', 'dataprocrm.nodePools.delete', 'dataprocrm.nodePools.deleteNodes', 'dataprocrm.nodePools.get', 'dataprocrm.nodePools.list', 'dataprocrm.nodePools.resize', 'dataprocrm.nodes.get', 'dataprocrm.nodes.heartbeat', 'dataprocrm.nodes.list', 'dataprocrm.nodes.update', 'dataprocrm.operations.get', 'dataprocrm.operations.list', 'dataprocrm.workloads.cancel', 'dataprocrm.workloads.create', 'dataprocrm.workloads.delete', 'dataprocrm.workloads.get', 'dataprocrm.workloads.list', 'dns.managedZones.create', 'dns.managedZones.delete', 'dns.managedZones.get', 'dns.managedZones.list', 'dns.networks.bindPrivateDNSZone', 'dns.networks.targetWithPeeringZone', 'firebase.projects.get', 'monitoring.metricDescriptors.create', 'monitoring.metricDescriptors.get', 'monitoring.metricDescriptors.list', 'monitoring.monitoredResourceDescriptors.get', 'monitoring.monitoredResourceDescriptors.list', 'monitoring.timeSeries.create', 'monitoring.timeSeries.list', 'networkconnectivity.internalRanges.get', 'networkconnectivity.internalRanges.list', 'networkconnectivity.locations.get', 'networkconnectivity.locations.list', 'networkconnectivity.operations.get', 'networkconnectivity.operations.list', 'networkconnectivity.policyBasedRoutes.get', 'networkconnectivity.policyBasedRoutes.list', 'networkmanagement.connectivitytests.get', 'networkmanagement.connectivitytests.list', 'networksecurity.addressGroups.get', 'networksecurity.addressGroups.list', 'networksecurity.authorizationPolicies.get', 'networksecurity.authorizationPolicies.list', 'networksecurity.authzPolicies.get', 'networksecurity.authzPolicies.list', 'networksecurity.clientTlsPolicies.get', 'networksecurity.clientTlsPolicies.list', 'networksecurity.firewallEndpointAssociations.get', 'networksecurity.firewallEndpointAssociations.list', 'networksecurity.firewallEndpoints.get', 'networksecurity.firewallEndpoints.list', 'networksecurity.gatewaySecurityPolicies.get', 'networksecurity.gatewaySecurityPolicies.list', 'networksecurity.gatewaySecurityPolicyRules.get', 'networksecurity.gatewaySecurityPolicyRules.list', 'networksecurity.locations.get', 'networksecurity.locations.list', 'networksecurity.operations.get', 'networksecurity.operations.list', 'networksecurity.securityProfileGroups.get', 'networksecurity.securityProfileGroups.list', 'networksecurity.securityProfiles.get', 'networksecurity.securityProfiles.list', 'networksecurity.serverTlsPolicies.get', 'networksecurity.serverTlsPolicies.list', 'networksecurity.tlsInspectionPolicies.get', 'networksecurity.tlsInspectionPolicies.list', 'networksecurity.urlLists.get', 'networksecurity.urlLists.list', 'networkservices.authzExtensions.get', 'networkservices.authzExtensions.list', 'networkservices.endpointPolicies.get', 'networkservices.endpointPolicies.list', 'networkservices.gateways.get', 'networkservices.gateways.list', 'networkservices.grpcRoutes.get', 'networkservices.grpcRoutes.list', 'networkservices.httpFilters.get', 'networkservices.httpFilters.list', 'networkservices.httpRoutes.get', 'networkservices.httpRoutes.list', 'networkservices.httpfilters.get', 'networkservices.httpfilters.list', 'networkservices.lbRouteExtensions.get', 'networkservices.lbRouteExtensions.list', 'networkservices.lbTrafficExtensions.get', 'networkservices.lbTrafficExtensions.list', 'networkservices.locations.get', 'networkservices.locations.list', 'networkservices.meshes.get', 'networkservices.meshes.list', 'networkservices.operations.get', 'networkservices.operations.list', 'networkservices.route_views.get', 'networkservices.route_views.list', 'networkservices.serviceBindings.get', 'networkservices.serviceBindings.list', 'networkservices.serviceLbPolicies.get', 'networkservices.serviceLbPolicies.list', 'networkservices.tcpRoutes.get', 'networkservices.tcpRoutes.list', 'networkservices.tlsRoutes.get', 'networkservices.tlsRoutes.list', 'orgpolicy.policy.get', 'recommender.iamPolicyInsights.get', 'recommender.iamPolicyInsights.list', 'recommender.iamPolicyInsights.update', 'recommender.iamPolicyRecommendations.get', 'recommender.iamPolicyRecommendations.list', 'recommender.iamPolicyRecommendations.update', 'recommender.storageBucketSoftDeleteInsights.get', 'recommender.storageBucketSoftDeleteInsights.list', 'recommender.storageBucketSoftDeleteInsights.update', 'recommender.storageBucketSoftDeleteRecommendations.get', 'recommender.storageBucketSoftDeleteRecommendations.list', 'recommender.storageBucketSoftDeleteRecommendations.update', 'resourcemanager.hierarchyNodes.listEffectiveTags', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'servicenetworking.services.get', 'serviceusage.quotas.get', 'serviceusage.services.get', 'serviceusage.services.list', 'spanner.databaseOperations.cancel', 'spanner.databaseOperations.get', 'spanner.databaseOperations.list', 'spanner.databases.beginOrRollbackReadWriteTransaction', 'spanner.databases.beginPartitionedDmlTransaction', 'spanner.databases.beginReadOnlyTransaction', 'spanner.databases.changequorum', 'spanner.databases.getDdl', 'spanner.databases.list', 'spanner.databases.partitionQuery', 'spanner.databases.partitionRead', 'spanner.databases.read', 'spanner.databases.select', 'spanner.databases.updateDdl', 'spanner.databases.updateTag', 'spanner.databases.write', 'spanner.instanceConfigs.get', 'spanner.instanceConfigs.list', 'spanner.instancePartitions.get', 'spanner.instancePartitions.list', 'spanner.instances.get', 'spanner.instances.list', 'spanner.instances.listEffectiveTags', 'spanner.instances.listTagBindings', 'spanner.sessions.create', 'spanner.sessions.delete', 'spanner.sessions.get', 'spanner.sessions.list', 'storage.anywhereCaches.create', 'storage.anywhereCaches.disable', 'storage.anywhereCaches.get', 'storage.anywhereCaches.list', 'storage.anywhereCaches.pause', 'storage.anywhereCaches.resume', 'storage.anywhereCaches.update', 'storage.bucketOperations.cancel', 'storage.bucketOperations.get', 'storage.bucketOperations.list', 'storage.buckets.create', 'storage.buckets.createTagBinding', 'storage.buckets.delete', 'storage.buckets.deleteTagBinding', 'storage.buckets.enableObjectRetention', 'storage.buckets.get', 'storage.buckets.getIamPolicy', 'storage.buckets.getObjectInsights', 'storage.buckets.list', 'storage.buckets.listEffectiveTags', 'storage.buckets.listTagBindings', 'storage.buckets.restore', 'storage.buckets.setIamPolicy', 'storage.buckets.update', 'storage.folders.create', 'storage.folders.delete', 'storage.folders.get', 'storage.folders.list', 'storage.folders.rename', 'storage.managedFolders.create', 'storage.managedFolders.delete', 'storage.managedFolders.get', 'storage.managedFolders.getIamPolicy', 'storage.managedFolders.list', 'storage.managedFolders.setIamPolicy', 'storage.managementHubs.get', 'storage.managementHubs.update', 'storage.multipartUploads.abort', 'storage.multipartUploads.create', 'storage.multipartUploads.list', 'storage.multipartUploads.listParts', 'storage.objects.create', 'storage.objects.delete', 'storage.objects.get', 'storage.objects.getIamPolicy', 'storage.objects.list', 'storage.objects.overrideUnlockedRetention', 'storage.objects.restore', 'storage.objects.setIamPolicy', 'storage.objects.setRetention', 'storage.objects.update', 'trafficdirector.networks.getConfigs', 'trafficdirector.networks.reportMetrics'] GA
roles/datafusion.admin Full access to Cloud Data Fusion Instances, Namespaces and related resources. Cloud Data Fusion Admin ['datafusion.artifacts.create', 'datafusion.artifacts.delete', 'datafusion.artifacts.get', 'datafusion.artifacts.list', 'datafusion.artifacts.update', 'datafusion.instances.create', 'datafusion.instances.createTagBinding', 'datafusion.instances.delete', 'datafusion.instances.deleteTagBinding', 'datafusion.instances.get', 'datafusion.instances.getIamPolicy', 'datafusion.instances.list', 'datafusion.instances.listEffectiveTags', 'datafusion.instances.listTagBindings', 'datafusion.instances.restart', 'datafusion.instances.runtime', 'datafusion.instances.setIamPolicy', 'datafusion.instances.update', 'datafusion.instances.upgrade', 'datafusion.locations.get', 'datafusion.locations.list', 'datafusion.namespaces.provisionCredential', 'datafusion.namespaces.readRepository', 'datafusion.namespaces.setServiceAccount', 'datafusion.namespaces.unsetServiceAccount', 'datafusion.namespaces.updateRepositoryMetadata', 'datafusion.namespaces.writeRepository', 'datafusion.operations.cancel', 'datafusion.operations.delete', 'datafusion.operations.get', 'datafusion.operations.list', 'datafusion.pipelineConnections.create', 'datafusion.pipelineConnections.delete', 'datafusion.pipelineConnections.get', 'datafusion.pipelineConnections.list', 'datafusion.pipelineConnections.update', 'datafusion.pipelineConnections.use', 'datafusion.pipelines.create', 'datafusion.pipelines.delete', 'datafusion.pipelines.execute', 'datafusion.pipelines.get', 'datafusion.pipelines.list', 'datafusion.pipelines.preview', 'datafusion.pipelines.update', 'datafusion.profiles.create', 'datafusion.profiles.delete', 'datafusion.profiles.get', 'datafusion.profiles.list', 'datafusion.profiles.update', 'datafusion.secureKeys.create', 'datafusion.secureKeys.delete', 'datafusion.secureKeys.getSecret', 'datafusion.secureKeys.list', 'datafusion.secureKeys.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] GA
roles/datafusion.operator Access Cloud Data Fusion Instances, operate namespaces and related resources. Cloud Data Fusion Operator ['datafusion.artifacts.create', 'datafusion.artifacts.delete', 'datafusion.artifacts.get', 'datafusion.artifacts.list', 'datafusion.artifacts.update', 'datafusion.instances.get', 'datafusion.instances.getIamPolicy', 'datafusion.instances.list', 'datafusion.instances.listEffectiveTags', 'datafusion.instances.listTagBindings', 'datafusion.locations.get', 'datafusion.locations.list', 'datafusion.namespaces.provisionCredential', 'datafusion.namespaces.readRepository', 'datafusion.namespaces.setServiceAccount', 'datafusion.namespaces.unsetServiceAccount', 'datafusion.namespaces.updateRepositoryMetadata', 'datafusion.namespaces.writeRepository', 'datafusion.operations.get', 'datafusion.operations.list', 'datafusion.pipelineConnections.get', 'datafusion.pipelineConnections.list', 'datafusion.pipelineConnections.use', 'datafusion.pipelines.create', 'datafusion.pipelines.delete', 'datafusion.pipelines.execute', 'datafusion.pipelines.get', 'datafusion.pipelines.list', 'datafusion.pipelines.update', 'datafusion.profiles.create', 'datafusion.profiles.delete', 'datafusion.profiles.get', 'datafusion.profiles.list', 'datafusion.profiles.update', 'datafusion.secureKeys.create', 'datafusion.secureKeys.delete', 'datafusion.secureKeys.getSecret', 'datafusion.secureKeys.list', 'datafusion.secureKeys.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] BETA
roles/datafusion.viewer Read-only access to Cloud Data Fusion Instances, Namespaces and related resources. Cloud Data Fusion Viewer ['datafusion.artifacts.get', 'datafusion.artifacts.list', 'datafusion.instances.get', 'datafusion.instances.getIamPolicy', 'datafusion.instances.list', 'datafusion.instances.listEffectiveTags', 'datafusion.instances.listTagBindings', 'datafusion.locations.get', 'datafusion.locations.list', 'datafusion.operations.get', 'datafusion.operations.list', 'datafusion.pipelineConnections.get', 'datafusion.pipelineConnections.list', 'datafusion.pipelines.get', 'datafusion.pipelines.list', 'datafusion.profiles.get', 'datafusion.profiles.list', 'datafusion.secureKeys.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] GA
roles/datafusion.runner Access to Cloud Data Fusion runtime resources. Cloud Data Fusion Runner ['datafusion.instances.runtime'] GA