Roles Data

Name Description Title Included Permissions Copy Stage
roles/dataprocessing.dataSourceManager Data processing controls data source manager who can get, list, and update the underlying data. Data Processing Controls Data Source Manager ['dataprocessing.datasources.list', 'dataprocessing.datasources.update'] GA
roles/dataproc.worker Worker access to Dataproc. Intended for service accounts. Dataproc Worker ['cloudprofiler.profiles.create', 'cloudprofiler.profiles.update', 'dataproc.agents.create', 'dataproc.agents.delete', 'dataproc.agents.get', 'dataproc.agents.list', 'dataproc.agents.update', 'dataproc.batches.sparkApplicationWrite', 'dataproc.sessions.sparkApplicationWrite', 'dataproc.tasks.lease', 'dataproc.tasks.listInvalidatedLeases', 'dataproc.tasks.reportStatus', 'dataprocrm.nodes.mintOAuthToken', 'logging.logEntries.create', 'logging.logEntries.route', 'monitoring.metricDescriptors.create', 'monitoring.metricDescriptors.get', 'monitoring.metricDescriptors.list', 'monitoring.monitoredResourceDescriptors.get', 'monitoring.monitoredResourceDescriptors.list', 'monitoring.timeSeries.create', 'storage.buckets.get', 'storage.folders.create', 'storage.folders.delete', 'storage.folders.get', 'storage.folders.list', 'storage.folders.rename', 'storage.managedFolders.create', 'storage.managedFolders.delete', 'storage.managedFolders.get', 'storage.managedFolders.list', 'storage.multipartUploads.abort', 'storage.multipartUploads.create', 'storage.multipartUploads.list', 'storage.multipartUploads.listParts', 'storage.objects.create', 'storage.objects.delete', 'storage.objects.get', 'storage.objects.getIamPolicy', 'storage.objects.list', 'storage.objects.overrideUnlockedRetention', 'storage.objects.restore', 'storage.objects.setIamPolicy', 'storage.objects.setRetention', 'storage.objects.update'] GA
roles/dataprocrm.viewer Grants read access to all Dataproc Resource Manager resources. Intended for users that need read-only access to Dataproc Resource Manager resources. Dataproc Resource Manager Viewer ['dataprocrm.locations.get', 'dataprocrm.locations.list', 'dataprocrm.nodePools.get', 'dataprocrm.nodePools.list', 'dataprocrm.nodes.get', 'dataprocrm.nodes.list', 'dataprocrm.nodes.mintOAuthToken', 'dataprocrm.operations.get', 'dataprocrm.operations.list', 'dataprocrm.workloads.get', 'dataprocrm.workloads.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] BETA
roles/dataproc.admin Full control of Dataproc resources. Dataproc Administrator ['compute.machineTypes.get', 'compute.machineTypes.list', 'compute.networks.get', 'compute.networks.list', 'compute.projects.get', 'compute.regions.get', 'compute.regions.list', 'compute.zones.get', 'compute.zones.list', 'dataproc.autoscalingPolicies.create', 'dataproc.autoscalingPolicies.delete', 'dataproc.autoscalingPolicies.get', 'dataproc.autoscalingPolicies.getIamPolicy', 'dataproc.autoscalingPolicies.list', 'dataproc.autoscalingPolicies.setIamPolicy', 'dataproc.autoscalingPolicies.update', 'dataproc.autoscalingPolicies.use', 'dataproc.batches.analyze', 'dataproc.batches.cancel', 'dataproc.batches.create', 'dataproc.batches.delete', 'dataproc.batches.get', 'dataproc.batches.list', 'dataproc.batches.sparkApplicationRead', 'dataproc.clusters.create', 'dataproc.clusters.delete', 'dataproc.clusters.get', 'dataproc.clusters.getIamPolicy', 'dataproc.clusters.list', 'dataproc.clusters.setIamPolicy', 'dataproc.clusters.start', 'dataproc.clusters.stop', 'dataproc.clusters.update', 'dataproc.clusters.use', 'dataproc.jobs.cancel', 'dataproc.jobs.create', 'dataproc.jobs.delete', 'dataproc.jobs.get', 'dataproc.jobs.getIamPolicy', 'dataproc.jobs.list', 'dataproc.jobs.setIamPolicy', 'dataproc.jobs.update', 'dataproc.nodeGroups.create', 'dataproc.nodeGroups.get', 'dataproc.nodeGroups.update', 'dataproc.operations.cancel', 'dataproc.operations.delete', 'dataproc.operations.get', 'dataproc.operations.getIamPolicy', 'dataproc.operations.list', 'dataproc.operations.setIamPolicy', 'dataproc.sessionTemplates.create', 'dataproc.sessionTemplates.delete', 'dataproc.sessionTemplates.get', 'dataproc.sessionTemplates.list', 'dataproc.sessionTemplates.update', 'dataproc.sessions.create', 'dataproc.sessions.delete', 'dataproc.sessions.get', 'dataproc.sessions.list', 'dataproc.sessions.sparkApplicationRead', 'dataproc.sessions.terminate', 'dataproc.workflowTemplates.create', 'dataproc.workflowTemplates.delete', 'dataproc.workflowTemplates.get', 'dataproc.workflowTemplates.getIamPolicy', 'dataproc.workflowTemplates.instantiate', 'dataproc.workflowTemplates.instantiateInline', 'dataproc.workflowTemplates.list', 'dataproc.workflowTemplates.setIamPolicy', 'dataproc.workflowTemplates.update', 'dataprocrm.nodePools.create', 'dataprocrm.nodePools.delete', 'dataprocrm.nodePools.deleteNodes', 'dataprocrm.nodePools.get', 'dataprocrm.nodePools.list', 'dataprocrm.nodePools.resize', 'dataprocrm.nodes.get', 'dataprocrm.nodes.heartbeat', 'dataprocrm.nodes.list', 'dataprocrm.nodes.update', 'dataprocrm.operations.get', 'dataprocrm.operations.list', 'dataprocrm.workloads.cancel', 'dataprocrm.workloads.create', 'dataprocrm.workloads.delete', 'dataprocrm.workloads.get', 'dataprocrm.workloads.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] GA
roles/dataproc.editor Full control of Dataproc resources. Allows viewing all networks. Dataproc Editor ['compute.machineTypes.get', 'compute.machineTypes.list', 'compute.networks.get', 'compute.networks.list', 'compute.projects.get', 'compute.regions.get', 'compute.regions.list', 'compute.zones.get', 'compute.zones.list', 'dataproc.autoscalingPolicies.create', 'dataproc.autoscalingPolicies.delete', 'dataproc.autoscalingPolicies.get', 'dataproc.autoscalingPolicies.list', 'dataproc.autoscalingPolicies.update', 'dataproc.autoscalingPolicies.use', 'dataproc.batches.analyze', 'dataproc.batches.cancel', 'dataproc.batches.create', 'dataproc.batches.delete', 'dataproc.batches.get', 'dataproc.batches.list', 'dataproc.batches.sparkApplicationRead', 'dataproc.clusters.create', 'dataproc.clusters.delete', 'dataproc.clusters.get', 'dataproc.clusters.list', 'dataproc.clusters.start', 'dataproc.clusters.stop', 'dataproc.clusters.update', 'dataproc.clusters.use', 'dataproc.jobs.cancel', 'dataproc.jobs.create', 'dataproc.jobs.delete', 'dataproc.jobs.get', 'dataproc.jobs.list', 'dataproc.jobs.update', 'dataproc.nodeGroups.create', 'dataproc.nodeGroups.get', 'dataproc.nodeGroups.update', 'dataproc.operations.cancel', 'dataproc.operations.delete', 'dataproc.operations.get', 'dataproc.operations.list', 'dataproc.sessionTemplates.create', 'dataproc.sessionTemplates.delete', 'dataproc.sessionTemplates.get', 'dataproc.sessionTemplates.list', 'dataproc.sessionTemplates.update', 'dataproc.sessions.create', 'dataproc.sessions.delete', 'dataproc.sessions.get', 'dataproc.sessions.list', 'dataproc.sessions.sparkApplicationRead', 'dataproc.sessions.terminate', 'dataproc.workflowTemplates.create', 'dataproc.workflowTemplates.delete', 'dataproc.workflowTemplates.get', 'dataproc.workflowTemplates.instantiate', 'dataproc.workflowTemplates.instantiateInline', 'dataproc.workflowTemplates.list', 'dataproc.workflowTemplates.update', 'dataprocrm.nodePools.create', 'dataprocrm.nodePools.delete', 'dataprocrm.nodePools.deleteNodes', 'dataprocrm.nodePools.get', 'dataprocrm.nodePools.list', 'dataprocrm.nodePools.resize', 'dataprocrm.nodes.get', 'dataprocrm.nodes.heartbeat', 'dataprocrm.nodes.list', 'dataprocrm.nodes.update', 'dataprocrm.operations.get', 'dataprocrm.operations.list', 'dataprocrm.workloads.cancel', 'dataprocrm.workloads.create', 'dataprocrm.workloads.delete', 'dataprocrm.workloads.get', 'dataprocrm.workloads.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] GA
roles/dataproc.serviceAgent Gives Dataproc Service Account access to service accounts, compute resources, storage resources, and kubernetes resources. Includes access to service accounts. Dataproc Service Agent ['backupdr.backupPlanAssociations.createForComputeInstance', 'backupdr.backupPlanAssociations.deleteForComputeInstance', 'backupdr.backupPlanAssociations.list', 'backupdr.backupPlanAssociations.triggerBackupForComputeInstance', 'backupdr.backupPlans.useForComputeInstance', 'compute.acceleratorTypes.get', 'compute.acceleratorTypes.list', 'compute.addresses.createInternal', 'compute.addresses.deleteInternal', 'compute.addresses.get', 'compute.addresses.list', 'compute.addresses.listEffectiveTags', 'compute.addresses.listTagBindings', 'compute.addresses.use', 'compute.addresses.useInternal', 'compute.autoscalers.create', 'compute.autoscalers.delete', 'compute.autoscalers.get', 'compute.autoscalers.list', 'compute.autoscalers.update', 'compute.diskTypes.get', 'compute.diskTypes.list', 'compute.disks.create', 'compute.disks.createSnapshot', 'compute.disks.createTagBinding', 'compute.disks.delete', 'compute.disks.get', 'compute.disks.list', 'compute.disks.resize', 'compute.disks.setLabels', 'compute.disks.startAsyncReplication', 'compute.disks.stopAsyncReplication', 'compute.disks.stopGroupAsyncReplication', 'compute.disks.update', 'compute.disks.use', 'compute.disks.useReadOnly', 'compute.firewalls.get', 'compute.firewalls.list', 'compute.globalAddresses.get', 'compute.globalAddresses.list', 'compute.globalAddresses.listEffectiveTags', 'compute.globalAddresses.listTagBindings', 'compute.globalAddresses.use', 'compute.globalNetworkEndpointGroups.attachNetworkEndpoints', 'compute.globalNetworkEndpointGroups.create', 'compute.globalNetworkEndpointGroups.createTagBinding', 'compute.globalNetworkEndpointGroups.delete', 'compute.globalNetworkEndpointGroups.deleteTagBinding', 'compute.globalNetworkEndpointGroups.detachNetworkEndpoints', 'compute.globalNetworkEndpointGroups.get', 'compute.globalNetworkEndpointGroups.list', 'compute.globalNetworkEndpointGroups.listEffectiveTags', 'compute.globalNetworkEndpointGroups.listTagBindings', 'compute.globalNetworkEndpointGroups.use', 'compute.globalOperations.get', 'compute.globalOperations.list', 'compute.images.get', 'compute.images.getFromFamily', 'compute.images.list', 'compute.images.useReadOnly', 'compute.instanceGroupManagers.create', 'compute.instanceGroupManagers.createTagBinding', 'compute.instanceGroupManagers.delete', 'compute.instanceGroupManagers.deleteTagBinding', 'compute.instanceGroupManagers.get', 'compute.instanceGroupManagers.list', 'compute.instanceGroupManagers.listEffectiveTags', 'compute.instanceGroupManagers.listTagBindings', 'compute.instanceGroupManagers.update', 'compute.instanceGroupManagers.use', 'compute.instanceGroups.create', 'compute.instanceGroups.createTagBinding', 'compute.instanceGroups.delete', 'compute.instanceGroups.deleteTagBinding', 'compute.instanceGroups.get', 'compute.instanceGroups.list', 'compute.instanceGroups.listEffectiveTags', 'compute.instanceGroups.listTagBindings', 'compute.instanceGroups.update', 'compute.instanceGroups.use', 'compute.instanceSettings.get', 'compute.instanceTemplates.create', 'compute.instanceTemplates.delete', 'compute.instanceTemplates.get', 'compute.instanceTemplates.getIamPolicy', 'compute.instanceTemplates.list', 'compute.instanceTemplates.setIamPolicy', 'compute.instanceTemplates.useReadOnly', 'compute.instances.addAccessConfig', 'compute.instances.addResourcePolicies', 'compute.instances.attachDisk', 'compute.instances.create', 'compute.instances.createTagBinding', 'compute.instances.delete', 'compute.instances.deleteAccessConfig', 'compute.instances.deleteTagBinding', 'compute.instances.detachDisk', 'compute.instances.get', 'compute.instances.getEffectiveFirewalls', 'compute.instances.getGuestAttributes', 'compute.instances.getIamPolicy', 'compute.instances.getScreenshot', 'compute.instances.getSerialPortOutput', 'compute.instances.getShieldedInstanceIdentity', 'compute.instances.getShieldedVmIdentity', 'compute.instances.list', 'compute.instances.listEffectiveTags', 'compute.instances.listReferrers', 'compute.instances.listTagBindings', 'compute.instances.osAdminLogin', 'compute.instances.osLogin', 'compute.instances.pscInterfaceCreate', 'compute.instances.removeResourcePolicies', 'compute.instances.reset', 'compute.instances.resume', 'compute.instances.sendDiagnosticInterrupt', 'compute.instances.setDeletionProtection', 'compute.instances.setDiskAutoDelete', 'compute.instances.setIamPolicy', 'compute.instances.setLabels', 'compute.instances.setMachineResources', 'compute.instances.setMachineType', 'compute.instances.setMetadata', 'compute.instances.setMinCpuPlatform', 'compute.instances.setName', 'compute.instances.setScheduling', 'compute.instances.setSecurityPolicy', 'compute.instances.setServiceAccount', 'compute.instances.setShieldedInstanceIntegrityPolicy', 'compute.instances.setShieldedVmIntegrityPolicy', 'compute.instances.setTags', 'compute.instances.simulateMaintenanceEvent', 'compute.instances.start', 'compute.instances.startWithEncryptionKey', 'compute.instances.stop', 'compute.instances.suspend', 'compute.instances.update', 'compute.instances.updateAccessConfig', 'compute.instances.updateDisplayDevice', 'compute.instances.updateNetworkInterface', 'compute.instances.updateSecurity', 'compute.instances.updateShieldedInstanceConfig', 'compute.instances.updateShieldedVmConfig', 'compute.instances.use', 'compute.instances.useReadOnly', 'compute.licenses.get', 'compute.licenses.list', 'compute.machineImages.create', 'compute.machineImages.delete', 'compute.machineImages.get', 'compute.machineImages.getIamPolicy', 'compute.machineImages.list', 'compute.machineImages.setIamPolicy', 'compute.machineImages.useReadOnly', 'compute.machineTypes.get', 'compute.machineTypes.list', 'compute.networkEndpointGroups.attachNetworkEndpoints', 'compute.networkEndpointGroups.create', 'compute.networkEndpointGroups.createTagBinding', 'compute.networkEndpointGroups.delete', 'compute.networkEndpointGroups.deleteTagBinding', 'compute.networkEndpointGroups.detachNetworkEndpoints', 'compute.networkEndpointGroups.get', 'compute.networkEndpointGroups.list', 'compute.networkEndpointGroups.listEffectiveTags', 'compute.networkEndpointGroups.listTagBindings', 'compute.networkEndpointGroups.use', 'compute.networks.get', 'compute.networks.getEffectiveFirewalls', 'compute.networks.list', 'compute.networks.listEffectiveTags', 'compute.networks.listTagBindings', 'compute.networks.use', 'compute.networks.useExternalIp', 'compute.nodeGroups.get', 'compute.nodeTypes.get', 'compute.projects.get', 'compute.regionNetworkEndpointGroups.attachNetworkEndpoints', 'compute.regionNetworkEndpointGroups.create', 'compute.regionNetworkEndpointGroups.createTagBinding', 'compute.regionNetworkEndpointGroups.delete', 'compute.regionNetworkEndpointGroups.deleteTagBinding', 'compute.regionNetworkEndpointGroups.detachNetworkEndpoints', 'compute.regionNetworkEndpointGroups.get', 'compute.regionNetworkEndpointGroups.list', 'compute.regionNetworkEndpointGroups.listEffectiveTags', 'compute.regionNetworkEndpointGroups.listTagBindings', 'compute.regionNetworkEndpointGroups.use', 'compute.regionOperations.get', 'compute.regionOperations.list', 'compute.regions.get', 'compute.regions.list', 'compute.reservations.get', 'compute.reservations.list', 'compute.resourcePolicies.list', 'compute.resourcePolicies.useReadOnly', 'compute.storagePools.get', 'compute.storagePools.list', 'compute.storagePools.use', 'compute.subnetworks.get', 'compute.subnetworks.list', 'compute.subnetworks.listEffectiveTags', 'compute.subnetworks.listTagBindings', 'compute.subnetworks.use', 'compute.subnetworks.useExternalIp', 'compute.targetPools.get', 'compute.targetPools.list', 'compute.targetPools.listEffectiveTags', 'compute.targetPools.listTagBindings', 'compute.zoneOperations.get', 'compute.zoneOperations.list', 'compute.zones.get', 'compute.zones.list', 'container.clusterRoleBindings.create', 'container.clusterRoleBindings.delete', 'container.clusterRoleBindings.get', 'container.clusterRoleBindings.list', 'container.clusterRoleBindings.update', 'container.clusterRoles.bind', 'container.clusterRoles.create', 'container.clusterRoles.delete', 'container.clusterRoles.escalate', 'container.clusterRoles.get', 'container.clusterRoles.list', 'container.clusterRoles.update', 'container.clusters.get', 'container.clusters.update', 'container.customResourceDefinitions.create', 'container.customResourceDefinitions.delete', 'container.customResourceDefinitions.get', 'container.customResourceDefinitions.list', 'container.customResourceDefinitions.update', 'container.namespaces.create', 'container.namespaces.delete', 'container.namespaces.get', 'container.namespaces.list', 'container.namespaces.update', 'container.operations.get', 'container.roleBindings.create', 'container.roleBindings.delete', 'container.roleBindings.get', 'container.roleBindings.list', 'container.roleBindings.update', 'container.roles.bind', 'container.roles.escalate', 'dataproc.autoscalingPolicies.create', 'dataproc.autoscalingPolicies.delete', 'dataproc.autoscalingPolicies.get', 'dataproc.autoscalingPolicies.getIamPolicy', 'dataproc.autoscalingPolicies.list', 'dataproc.autoscalingPolicies.update', 'dataproc.autoscalingPolicies.use', 'dataproc.clusters.create', 'dataproc.clusters.delete', 'dataproc.clusters.get', 'dataproc.clusters.getIamPolicy', 'dataproc.clusters.list', 'dataproc.clusters.setIamPolicy', 'dataproc.clusters.start', 'dataproc.clusters.stop', 'dataproc.clusters.update', 'dataproc.clusters.use', 'dataproc.jobs.cancel', 'dataproc.jobs.create', 'dataproc.jobs.delete', 'dataproc.jobs.get', 'dataproc.jobs.getIamPolicy', 'dataproc.jobs.list', 'dataproc.jobs.setIamPolicy', 'dataproc.jobs.update', 'dataproc.nodeGroups.create', 'dataproc.nodeGroups.get', 'dataproc.nodeGroups.update', 'dataproc.operations.cancel', 'dataproc.sessionTemplates.get', 'dataproc.sessions.create', 'dataproc.sessions.delete', 'dataproc.sessions.get', 'dataproc.sessions.list', 'dataproc.sessions.sparkApplicationRead', 'dataproc.sessions.sparkApplicationWrite', 'dataproc.sessions.terminate', 'dataprocrm.nodePools.create', 'dataprocrm.nodePools.delete', 'dataprocrm.nodePools.deleteNodes', 'dataprocrm.nodePools.get', 'dataprocrm.nodePools.list', 'dataprocrm.nodePools.resize', 'dataprocrm.nodes.get', 'dataprocrm.nodes.heartbeat', 'dataprocrm.nodes.list', 'dataprocrm.nodes.mintOAuthToken', 'dataprocrm.nodes.update', 'dataprocrm.operations.cancel', 'dataprocrm.operations.get', 'dataprocrm.operations.list', 'dataprocrm.workloads.cancel', 'dataprocrm.workloads.create', 'dataprocrm.workloads.delete', 'dataprocrm.workloads.get', 'dataprocrm.workloads.list', 'firebase.projects.get', 'iam.serviceAccounts.actAs', 'iam.serviceAccounts.getAccessToken', 'metastore.services.get', 'orgpolicy.policy.get', 'recommender.iamPolicyInsights.get', 'recommender.iamPolicyInsights.list', 'recommender.iamPolicyInsights.update', 'recommender.iamPolicyRecommendations.get', 'recommender.iamPolicyRecommendations.list', 'recommender.iamPolicyRecommendations.update', 'recommender.storageBucketSoftDeleteInsights.get', 'recommender.storageBucketSoftDeleteInsights.list', 'recommender.storageBucketSoftDeleteInsights.update', 'recommender.storageBucketSoftDeleteRecommendations.get', 'recommender.storageBucketSoftDeleteRecommendations.list', 'recommender.storageBucketSoftDeleteRecommendations.update', 'resourcemanager.hierarchyNodes.listEffectiveTags', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'servicemanagement.services.bind', 'serviceusage.quotas.get', 'serviceusage.services.enable', 'serviceusage.services.get', 'serviceusage.services.list', 'serviceusage.services.use', 'storage.anywhereCaches.create', 'storage.anywhereCaches.disable', 'storage.anywhereCaches.get', 'storage.anywhereCaches.list', 'storage.anywhereCaches.pause', 'storage.anywhereCaches.resume', 'storage.anywhereCaches.update', 'storage.bucketOperations.cancel', 'storage.bucketOperations.get', 'storage.bucketOperations.list', 'storage.buckets.create', 'storage.buckets.createTagBinding', 'storage.buckets.delete', 'storage.buckets.deleteTagBinding', 'storage.buckets.enableObjectRetention', 'storage.buckets.get', 'storage.buckets.getIamPolicy', 'storage.buckets.getObjectInsights', 'storage.buckets.list', 'storage.buckets.listEffectiveTags', 'storage.buckets.listTagBindings', 'storage.buckets.restore', 'storage.buckets.setIamPolicy', 'storage.buckets.update', 'storage.folders.create', 'storage.folders.delete', 'storage.folders.get', 'storage.folders.list', 'storage.folders.rename', 'storage.managedFolders.create', 'storage.managedFolders.delete', 'storage.managedFolders.get', 'storage.managedFolders.getIamPolicy', 'storage.managedFolders.list', 'storage.managedFolders.setIamPolicy', 'storage.managementHubs.get', 'storage.managementHubs.update', 'storage.multipartUploads.abort', 'storage.multipartUploads.create', 'storage.multipartUploads.list', 'storage.multipartUploads.listParts', 'storage.objects.create', 'storage.objects.delete', 'storage.objects.get', 'storage.objects.getIamPolicy', 'storage.objects.list', 'storage.objects.overrideUnlockedRetention', 'storage.objects.restore', 'storage.objects.setIamPolicy', 'storage.objects.setRetention', 'storage.objects.update'] GA
roles/dataproc.viewer Read-only access to Dataproc resources. Dataproc Viewer ['compute.machineTypes.get', 'compute.regions.get', 'compute.regions.list', 'compute.zones.get', 'compute.zones.list', 'dataproc.autoscalingPolicies.get', 'dataproc.autoscalingPolicies.list', 'dataproc.batches.analyze', 'dataproc.batches.get', 'dataproc.batches.list', 'dataproc.batches.sparkApplicationRead', 'dataproc.clusters.get', 'dataproc.clusters.list', 'dataproc.jobs.get', 'dataproc.jobs.list', 'dataproc.nodeGroups.get', 'dataproc.operations.get', 'dataproc.operations.list', 'dataproc.sessionTemplates.get', 'dataproc.sessionTemplates.list', 'dataproc.sessions.get', 'dataproc.sessions.list', 'dataproc.sessions.sparkApplicationRead', 'dataproc.workflowTemplates.get', 'dataproc.workflowTemplates.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] GA
roles/dataprocrm.nodeServiceAgent Dataproc Resource Manager Node Service Agent used to run managed resources in user project with restricted permissions. Dataproc Resource Manager Node Service Agent ['dataprocrm.nodes.get', 'dataprocrm.nodes.heartbeat', 'dataprocrm.nodes.mintOAuthToken', 'logging.logEntries.create', 'logging.logEntries.route', 'monitoring.metricDescriptors.create', 'monitoring.metricDescriptors.get', 'monitoring.metricDescriptors.list', 'monitoring.monitoredResourceDescriptors.get', 'monitoring.monitoredResourceDescriptors.list', 'monitoring.timeSeries.create'] GA
roles/dataproc.hubAgent Allows management of Dataproc resources. Intended for service accounts running Dataproc Hub instances. Dataproc Hub Agent ['compute.instances.get', 'compute.instances.setMetadata', 'compute.instances.setTags', 'compute.zoneOperations.get', 'compute.zones.list', 'dataproc.autoscalingPolicies.get', 'dataproc.autoscalingPolicies.list', 'dataproc.autoscalingPolicies.use', 'dataproc.clusters.create', 'dataproc.clusters.delete', 'dataproc.clusters.get', 'dataproc.clusters.list', 'dataproc.clusters.update', 'dataproc.operations.cancel', 'dataproc.operations.delete', 'dataproc.operations.get', 'dataproc.operations.list', 'iam.serviceAccounts.actAs', 'iam.serviceAccounts.get', 'iam.serviceAccounts.list', 'logging.buckets.get', 'logging.buckets.list', 'logging.exclusions.get', 'logging.exclusions.list', 'logging.links.get', 'logging.links.list', 'logging.locations.get', 'logging.locations.list', 'logging.logEntries.create', 'logging.logEntries.list', 'logging.logEntries.route', 'logging.logMetrics.get', 'logging.logMetrics.list', 'logging.logServiceIndexes.list', 'logging.logServices.list', 'logging.logs.list', 'logging.operations.get', 'logging.operations.list', 'logging.queries.getShared', 'logging.queries.listShared', 'logging.queries.usePrivate', 'logging.sinks.get', 'logging.sinks.list', 'logging.usage.get', 'logging.views.get', 'logging.views.list', 'observability.scopes.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'storage.buckets.get', 'storage.objects.get', 'storage.objects.list'] GA
roles/dataprocessing.admin Data processing controls admin who can fully manage data processing controls settings and view all datasource data. Data Processing Controls Resource Admin ['billing.accounts.get', 'billing.accounts.list', 'dataprocessing.datasources.get', 'dataprocessing.datasources.list', 'dataprocessing.datasources.update', 'dataprocessing.featurecontrols.list', 'dataprocessing.featurecontrols.update', 'dataprocessing.groupcontrols.get', 'dataprocessing.groupcontrols.list', 'dataprocessing.groupcontrols.update'] GA
roles/dataprocrm.admin Grants full access to all Dataproc Resource Manager resources. Intended for users that need to create and delete any Dataproc Resource Manager resources. Dataproc Resource Manager Admin ['dataprocrm.locations.get', 'dataprocrm.locations.list', 'dataprocrm.nodePools.create', 'dataprocrm.nodePools.delete', 'dataprocrm.nodePools.deleteNodes', 'dataprocrm.nodePools.get', 'dataprocrm.nodePools.list', 'dataprocrm.nodePools.resize', 'dataprocrm.nodes.get', 'dataprocrm.nodes.heartbeat', 'dataprocrm.nodes.list', 'dataprocrm.nodes.mintOAuthToken', 'dataprocrm.nodes.update', 'dataprocrm.operations.cancel', 'dataprocrm.operations.delete', 'dataprocrm.operations.get', 'dataprocrm.operations.list', 'dataprocrm.workloads.cancel', 'dataprocrm.workloads.create', 'dataprocrm.workloads.delete', 'dataprocrm.workloads.get', 'dataprocrm.workloads.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] BETA