Studio Query roles and permissions

This page lists the IAM roles and permissions for Studio Query. To search through all roles and permissions, see the role and permission index.

Studio Query roles

Role Permissions

Role	Permissions
Studio Query Admin ^Beta (`roles/databasesconsole.studioQueryAdmin`) Full access to Studio Query resources.	`databasesconsole.locations.` `databasesconsole.locations.get` `databasesconsole.locations.list` `databasesconsole.operations.` `databasesconsole.operations.cancel` `databasesconsole.operations.delete` `databasesconsole.operations.get` `databasesconsole.operations.list` `databasesconsole.studioQueries.*` `databasesconsole.studioQueries.create` `databasesconsole.studioQueries.delete` `databasesconsole.studioQueries.get` `databasesconsole.studioQueries.list` `databasesconsole.studioQueries.search` `databasesconsole.studioQueries.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Studio Query User ^Beta (`roles/databasesconsole.studioQueryUser`) Access to create, update, search and delete studio queries.	`databasesconsole.locations.*` `databasesconsole.locations.get` `databasesconsole.locations.list` `databasesconsole.operations.get` `databasesconsole.operations.list` `databasesconsole.studioQueries.create` `databasesconsole.studioQueries.delete` `databasesconsole.studioQueries.search` `databasesconsole.studioQueries.update` `resourcemanager.projects.get` `resourcemanager.projects.list`

Studio Query Admin ^Beta

(roles/databasesconsole.studioQueryAdmin)

Full access to Studio Query resources.

databasesconsole.locations.*

databasesconsole.locations.get
databasesconsole.locations.list

databasesconsole.operations.*

databasesconsole.operations.cancel
databasesconsole.operations.delete
databasesconsole.operations.get
databasesconsole.operations.list

databasesconsole.studioQueries.*

databasesconsole.studioQueries.create
databasesconsole.studioQueries.delete
databasesconsole.studioQueries.get
databasesconsole.studioQueries.list
databasesconsole.studioQueries.search
databasesconsole.studioQueries.update

resourcemanager.projects.get

resourcemanager.projects.list

Studio Query User ^Beta

(roles/databasesconsole.studioQueryUser)

Access to create, update, search and delete studio queries.

databasesconsole.locations.*

databasesconsole.locations.get
databasesconsole.locations.list

databasesconsole.operations.get

databasesconsole.operations.list

databasesconsole.studioQueries.create

databasesconsole.studioQueries.delete

databasesconsole.studioQueries.search

databasesconsole.studioQueries.update

resourcemanager.projects.get

resourcemanager.projects.list

Studio Query permissions

Permission	Included in roles
`databasesconsole.databaseCenterViews.create`	Owner (`roles/owner`) Editor (`roles/editor`) Database Center Admin (`roles/databasecenter.admin`)
`databasesconsole.databaseCenterViews.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Database Center Admin (`roles/databasecenter.admin`)
`databasesconsole.databaseCenterViews.search`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Database Center Admin (`roles/databasecenter.admin`) Database Center Viewer (`roles/databasecenter.viewer`) Support User (`roles/iam.supportUser`)
`databasesconsole.databaseCenterViews.update`	Owner (`roles/owner`) Editor (`roles/editor`) Database Center Admin (`roles/databasecenter.admin`)
`databasesconsole.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AlloyDB Admin (`roles/alloydb.admin`) AlloyDB Database User (`roles/alloydb.databaseUser`) Cloud SQL Admin (`roles/cloudsql.admin`) Cloud SQL Studio User (`roles/cloudsql.studioUser`) Database Center Admin (`roles/databasecenter.admin`) Database Center Viewer (`roles/databasecenter.viewer`) Studio Query Admin (`roles/databasesconsole.studioQueryAdmin`) Studio Query User (`roles/databasesconsole.studioQueryUser`) Cloud Datastore Owner (`roles/datastore.owner`) Cloud Datastore User (`roles/datastore.user`) Cloud Datastore Viewer (`roles/datastore.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. DLP API Service Agent (`roles/dlp.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`)
`databasesconsole.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AlloyDB Admin (`roles/alloydb.admin`) AlloyDB Database User (`roles/alloydb.databaseUser`) Cloud SQL Admin (`roles/cloudsql.admin`) Cloud SQL Studio User (`roles/cloudsql.studioUser`) Database Center Admin (`roles/databasecenter.admin`) Database Center Viewer (`roles/databasecenter.viewer`) Studio Query Admin (`roles/databasesconsole.studioQueryAdmin`) Studio Query User (`roles/databasesconsole.studioQueryUser`) Cloud Datastore Owner (`roles/datastore.owner`) Cloud Datastore User (`roles/datastore.user`) Cloud Datastore Viewer (`roles/datastore.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. DLP API Service Agent (`roles/dlp.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`)
`databasesconsole.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Studio Query Admin (`roles/databasesconsole.studioQueryAdmin`)
`databasesconsole.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Studio Query Admin (`roles/databasesconsole.studioQueryAdmin`)
`databasesconsole.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Studio Query Admin (`roles/databasesconsole.studioQueryAdmin`) Studio Query User (`roles/databasesconsole.studioQueryUser`) Support User (`roles/iam.supportUser`)
`databasesconsole.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Studio Query Admin (`roles/databasesconsole.studioQueryAdmin`) Studio Query User (`roles/databasesconsole.studioQueryUser`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`databasesconsole.studioQueries.create`	Owner (`roles/owner`) Editor (`roles/editor`) AlloyDB Admin (`roles/alloydb.admin`) Cloud SQL Admin (`roles/cloudsql.admin`) Studio Query Admin (`roles/databasesconsole.studioQueryAdmin`) Studio Query User (`roles/databasesconsole.studioQueryUser`) Cloud Datastore Owner (`roles/datastore.owner`) Cloud Datastore User (`roles/datastore.user`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Databases Admin (`roles/iam.databasesAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. DLP API Service Agent (`roles/dlp.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`)
`databasesconsole.studioQueries.delete`	Owner (`roles/owner`) Editor (`roles/editor`) AlloyDB Admin (`roles/alloydb.admin`) Cloud SQL Admin (`roles/cloudsql.admin`) Studio Query Admin (`roles/databasesconsole.studioQueryAdmin`) Studio Query User (`roles/databasesconsole.studioQueryUser`) Cloud Datastore Owner (`roles/datastore.owner`) Cloud Datastore User (`roles/datastore.user`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Databases Admin (`roles/iam.databasesAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. DLP API Service Agent (`roles/dlp.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`)
`databasesconsole.studioQueries.get`	Owner (`roles/owner`) AlloyDB Admin (`roles/alloydb.admin`) Cloud SQL Admin (`roles/cloudsql.admin`) Studio Query Admin (`roles/databasesconsole.studioQueryAdmin`) Cloud Datastore Owner (`roles/datastore.owner`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Databases Admin (`roles/iam.databasesAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`)
`databasesconsole.studioQueries.list`	Owner (`roles/owner`) AlloyDB Admin (`roles/alloydb.admin`) Cloud SQL Admin (`roles/cloudsql.admin`) Studio Query Admin (`roles/databasesconsole.studioQueryAdmin`) Cloud Datastore Owner (`roles/datastore.owner`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`)
`databasesconsole.studioQueries.search`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AlloyDB Admin (`roles/alloydb.admin`) AlloyDB Database User (`roles/alloydb.databaseUser`) Cloud SQL Admin (`roles/cloudsql.admin`) Cloud SQL Studio User (`roles/cloudsql.studioUser`) Studio Query Admin (`roles/databasesconsole.studioQueryAdmin`) Studio Query User (`roles/databasesconsole.studioQueryUser`) Cloud Datastore Owner (`roles/datastore.owner`) Cloud Datastore User (`roles/datastore.user`) Cloud Datastore Viewer (`roles/datastore.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. DLP API Service Agent (`roles/dlp.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`)
`databasesconsole.studioQueries.update`	Owner (`roles/owner`) Editor (`roles/editor`) AlloyDB Admin (`roles/alloydb.admin`) Cloud SQL Admin (`roles/cloudsql.admin`) Studio Query Admin (`roles/databasesconsole.studioQueryAdmin`) Studio Query User (`roles/databasesconsole.studioQueryUser`) Cloud Datastore Owner (`roles/datastore.owner`) Cloud Datastore User (`roles/datastore.user`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Databases Admin (`roles/iam.databasesAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. DLP API Service Agent (`roles/dlp.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`)

Studio Query roles and permissions