Studio Query roles and permissions

This page lists the IAM roles and permissions for Studio Query. To search through all roles and permissions, see the role and permission index.

Studio Query roles

Role Permissions

Role	Permissions
Databasesconsole Editor ^Beta (`roles/databasesconsole.editor`) Editor role for databasesconsole	`databasesconsole.databaseCenterViews.` `databasesconsole.databaseCenterViews.create` `databasesconsole.databaseCenterViews.delete` `databasesconsole.databaseCenterViews.search` `databasesconsole.databaseCenterViews.update` `databasesconsole.locations.` `databasesconsole.locations.get` `databasesconsole.locations.list` `databasesconsole.operations.*` `databasesconsole.operations.cancel` `databasesconsole.operations.delete` `databasesconsole.operations.get` `databasesconsole.operations.list` `databasesconsole.studioQueries.create` `databasesconsole.studioQueries.delete` `databasesconsole.studioQueries.search` `databasesconsole.studioQueries.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Studio Query Admin ^Beta (`roles/databasesconsole.studioQueryAdmin`) Full access to Studio Query resources.	`databasesconsole.locations.` `databasesconsole.locations.get` `databasesconsole.locations.list` `databasesconsole.operations.` `databasesconsole.operations.cancel` `databasesconsole.operations.delete` `databasesconsole.operations.get` `databasesconsole.operations.list` `databasesconsole.studioQueries.*` `databasesconsole.studioQueries.create` `databasesconsole.studioQueries.delete` `databasesconsole.studioQueries.get` `databasesconsole.studioQueries.list` `databasesconsole.studioQueries.search` `databasesconsole.studioQueries.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Studio Query User ^Beta (`roles/databasesconsole.studioQueryUser`) Access to create, update, search and delete studio queries.	`databasesconsole.locations.*` `databasesconsole.locations.get` `databasesconsole.locations.list` `databasesconsole.operations.get` `databasesconsole.operations.list` `databasesconsole.studioQueries.create` `databasesconsole.studioQueries.delete` `databasesconsole.studioQueries.search` `databasesconsole.studioQueries.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Databasesconsole Viewer ^Beta (`roles/databasesconsole.viewer`) Viewer role for databasesconsole	`databasesconsole.databaseCenterViews.search` `databasesconsole.locations.*` `databasesconsole.locations.get` `databasesconsole.locations.list` `databasesconsole.operations.get` `databasesconsole.operations.list` `databasesconsole.studioQueries.search` `resourcemanager.projects.get` `resourcemanager.projects.list`

Databasesconsole Editor ^Beta

(roles/databasesconsole.editor)

Editor role for databasesconsole

databasesconsole.databaseCenterViews.*

databasesconsole.databaseCenterViews.create
databasesconsole.databaseCenterViews.delete
databasesconsole.databaseCenterViews.search
databasesconsole.databaseCenterViews.update

databasesconsole.locations.*

databasesconsole.locations.get
databasesconsole.locations.list

databasesconsole.operations.*

databasesconsole.operations.cancel
databasesconsole.operations.delete
databasesconsole.operations.get
databasesconsole.operations.list

databasesconsole.studioQueries.create

databasesconsole.studioQueries.delete

databasesconsole.studioQueries.search

databasesconsole.studioQueries.update

resourcemanager.projects.get

resourcemanager.projects.list

Studio Query Admin ^Beta

(roles/databasesconsole.studioQueryAdmin)

Full access to Studio Query resources.

databasesconsole.locations.*

databasesconsole.locations.get
databasesconsole.locations.list

databasesconsole.operations.*

databasesconsole.operations.cancel
databasesconsole.operations.delete
databasesconsole.operations.get
databasesconsole.operations.list

databasesconsole.studioQueries.*

databasesconsole.studioQueries.create
databasesconsole.studioQueries.delete
databasesconsole.studioQueries.get
databasesconsole.studioQueries.list
databasesconsole.studioQueries.search
databasesconsole.studioQueries.update

resourcemanager.projects.get

resourcemanager.projects.list

Studio Query User ^Beta

(roles/databasesconsole.studioQueryUser)

Access to create, update, search and delete studio queries.

databasesconsole.locations.*

databasesconsole.locations.get
databasesconsole.locations.list

databasesconsole.operations.get

databasesconsole.operations.list

databasesconsole.studioQueries.create

databasesconsole.studioQueries.delete

databasesconsole.studioQueries.search

databasesconsole.studioQueries.update

resourcemanager.projects.get

resourcemanager.projects.list

Databasesconsole Viewer ^Beta

(roles/databasesconsole.viewer)

Viewer role for databasesconsole

databasesconsole.databaseCenterViews.search

databasesconsole.locations.*

databasesconsole.locations.get
databasesconsole.locations.list

databasesconsole.operations.get

databasesconsole.operations.list

databasesconsole.studioQueries.search

resourcemanager.projects.get

resourcemanager.projects.list

Studio Query permissions

Permission	Included in roles
`databasesconsole.databaseCenterViews.create`	Owner (`roles/owner`) Editor (`roles/editor`) Database Center Admin (`roles/databasecenter.admin`) Databasesconsole Editor (`roles/databasesconsole.editor`)
`databasesconsole.databaseCenterViews.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Database Center Admin (`roles/databasecenter.admin`) Databasesconsole Editor (`roles/databasesconsole.editor`)
`databasesconsole.databaseCenterViews.search`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Database Center Admin (`roles/databasecenter.admin`) Database Center Viewer (`roles/databasecenter.viewer`) Databasesconsole Editor (`roles/databasesconsole.editor`) Databasesconsole Viewer (`roles/databasesconsole.viewer`) Support User (`roles/iam.supportUser`)
`databasesconsole.databaseCenterViews.update`	Owner (`roles/owner`) Editor (`roles/editor`) Database Center Admin (`roles/databasecenter.admin`) Databasesconsole Editor (`roles/databasesconsole.editor`)
`databasesconsole.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AlloyDB Admin (`roles/alloydb.admin`) AlloyDB Database User (`roles/alloydb.databaseUser`) Cloud SQL Admin (`roles/cloudsql.admin`) Cloud SQL Studio User (`roles/cloudsql.studioUser`) Database Center Admin (`roles/databasecenter.admin`) Database Center Viewer (`roles/databasecenter.viewer`) Databasesconsole Editor (`roles/databasesconsole.editor`) Studio Query Admin (`roles/databasesconsole.studioQueryAdmin`) Studio Query User (`roles/databasesconsole.studioQueryUser`) Databasesconsole Viewer (`roles/databasesconsole.viewer`) Datastore Admin (`roles/datastore.admin`) Datastore Editor (`roles/datastore.editor`) Cloud Datastore Owner (`roles/datastore.owner`) Cloud Datastore User (`roles/datastore.user`) Cloud Datastore Viewer (`roles/datastore.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. DLP API Service Agent (`roles/dlp.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`)
`databasesconsole.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AlloyDB Admin (`roles/alloydb.admin`) AlloyDB Database User (`roles/alloydb.databaseUser`) Cloud SQL Admin (`roles/cloudsql.admin`) Cloud SQL Studio User (`roles/cloudsql.studioUser`) Database Center Admin (`roles/databasecenter.admin`) Database Center Viewer (`roles/databasecenter.viewer`) Databasesconsole Editor (`roles/databasesconsole.editor`) Studio Query Admin (`roles/databasesconsole.studioQueryAdmin`) Studio Query User (`roles/databasesconsole.studioQueryUser`) Databasesconsole Viewer (`roles/databasesconsole.viewer`) Datastore Admin (`roles/datastore.admin`) Datastore Editor (`roles/datastore.editor`) Cloud Datastore Owner (`roles/datastore.owner`) Cloud Datastore User (`roles/datastore.user`) Cloud Datastore Viewer (`roles/datastore.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. DLP API Service Agent (`roles/dlp.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`)
`databasesconsole.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Databasesconsole Editor (`roles/databasesconsole.editor`) Studio Query Admin (`roles/databasesconsole.studioQueryAdmin`)
`databasesconsole.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Databasesconsole Editor (`roles/databasesconsole.editor`) Studio Query Admin (`roles/databasesconsole.studioQueryAdmin`)
`databasesconsole.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Databasesconsole Editor (`roles/databasesconsole.editor`) Studio Query Admin (`roles/databasesconsole.studioQueryAdmin`) Studio Query User (`roles/databasesconsole.studioQueryUser`) Databasesconsole Viewer (`roles/databasesconsole.viewer`) Support User (`roles/iam.supportUser`)
`databasesconsole.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Databasesconsole Editor (`roles/databasesconsole.editor`) Studio Query Admin (`roles/databasesconsole.studioQueryAdmin`) Studio Query User (`roles/databasesconsole.studioQueryUser`) Databasesconsole Viewer (`roles/databasesconsole.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`databasesconsole.studioQueries.create`	Owner (`roles/owner`) Editor (`roles/editor`) AlloyDB Admin (`roles/alloydb.admin`) Cloud SQL Admin (`roles/cloudsql.admin`) Databasesconsole Editor (`roles/databasesconsole.editor`) Studio Query Admin (`roles/databasesconsole.studioQueryAdmin`) Studio Query User (`roles/databasesconsole.studioQueryUser`) Cloud Datastore Owner (`roles/datastore.owner`) Cloud Datastore User (`roles/datastore.user`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Databases Admin (`roles/iam.databasesAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. DLP API Service Agent (`roles/dlp.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`)
`databasesconsole.studioQueries.delete`	Owner (`roles/owner`) Editor (`roles/editor`) AlloyDB Admin (`roles/alloydb.admin`) Cloud SQL Admin (`roles/cloudsql.admin`) Databasesconsole Editor (`roles/databasesconsole.editor`) Studio Query Admin (`roles/databasesconsole.studioQueryAdmin`) Studio Query User (`roles/databasesconsole.studioQueryUser`) Cloud Datastore Owner (`roles/datastore.owner`) Cloud Datastore User (`roles/datastore.user`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Databases Admin (`roles/iam.databasesAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. DLP API Service Agent (`roles/dlp.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`)
`databasesconsole.studioQueries.get`	Owner (`roles/owner`) AlloyDB Admin (`roles/alloydb.admin`) Cloud SQL Admin (`roles/cloudsql.admin`) Studio Query Admin (`roles/databasesconsole.studioQueryAdmin`) Cloud Datastore Owner (`roles/datastore.owner`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Databases Admin (`roles/iam.databasesAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`)
`databasesconsole.studioQueries.list`	Owner (`roles/owner`) AlloyDB Admin (`roles/alloydb.admin`) Cloud SQL Admin (`roles/cloudsql.admin`) Studio Query Admin (`roles/databasesconsole.studioQueryAdmin`) Cloud Datastore Owner (`roles/datastore.owner`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Databases Admin (`roles/iam.databasesAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`)
`databasesconsole.studioQueries.search`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AlloyDB Admin (`roles/alloydb.admin`) AlloyDB Database User (`roles/alloydb.databaseUser`) Cloud SQL Admin (`roles/cloudsql.admin`) Cloud SQL Studio User (`roles/cloudsql.studioUser`) Databasesconsole Editor (`roles/databasesconsole.editor`) Studio Query Admin (`roles/databasesconsole.studioQueryAdmin`) Studio Query User (`roles/databasesconsole.studioQueryUser`) Databasesconsole Viewer (`roles/databasesconsole.viewer`) Datastore Admin (`roles/datastore.admin`) Datastore Editor (`roles/datastore.editor`) Cloud Datastore Owner (`roles/datastore.owner`) Cloud Datastore User (`roles/datastore.user`) Cloud Datastore Viewer (`roles/datastore.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Data Scientist (`roles/iam.dataScientist`) Databases Admin (`roles/iam.databasesAdmin`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. DLP API Service Agent (`roles/dlp.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`)
`databasesconsole.studioQueries.update`	Owner (`roles/owner`) Editor (`roles/editor`) AlloyDB Admin (`roles/alloydb.admin`) Cloud SQL Admin (`roles/cloudsql.admin`) Databasesconsole Editor (`roles/databasesconsole.editor`) Studio Query Admin (`roles/databasesconsole.studioQueryAdmin`) Studio Query User (`roles/databasesconsole.studioQueryUser`) Cloud Datastore Owner (`roles/datastore.owner`) Cloud Datastore User (`roles/datastore.user`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Databases Admin (`roles/iam.databasesAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. DLP API Service Agent (`roles/dlp.serviceAgent`) Cloud Composer API Service Agent (`roles/composer.serviceAgent`)

Studio Query roles and permissions