Permissions for @turbot/gcp-bigquery
Taking a look at permissions and associated grant levels for each permission for BigQuery:
| Permission | Grant Level | Help |
|---|---|---|
| bigquery.capacityCommitments.create | Admin | Create a capacity commitment in the project. |
| bigquery.capacityCommitments.delete | Admin | Delete a capacity commitment. |
| bigquery.capacityCommitments.get | Metadata | Retrieve details about a capacity commitment. |
| bigquery.capacityCommitments.list | Metadata | List all capacity commitments in a project. |
| bigquery.capacityCommitments.update | Admin | Update all capacity commitments in a project. |
| bigquery.config.get | Metadata | |
| bigquery.config.update | Admin | |
| bigquery.connections.create | Admin | Create new connections in a project. |
| bigquery.connections.delegate | Admin | Delegate connection to create authorized external tables and remote functions. |
| bigquery.connections.delete | Admin | Delete a connection. |
| bigquery.connections.get | Metadata | Get connection metadata. Credentials are excluded. |
| bigquery.connections.list | Metadata | List connections in a project. |
| bigquery.connections.update | Admin | Update a connection and its credentials. |
| bigquery.connections.updateTag | Operator | Update tags for a connection. |
| bigquery.connections.use | Operator | Use a connection configuration to connect to a remote data source. |
| bigquery.dataPolicies.create | Admin | Create new data policies. |
| bigquery.dataPolicies.delete | Admin | Delete data policies. |
| bigquery.dataPolicies.get | Metadata | Get metadata about data policies. |
| bigquery.dataPolicies.getIamPolicy | Metadata | Read a data policy's IAM permissions. |
| bigquery.dataPolicies.list | Metadata | List data policies in a project. |
| bigquery.dataPolicies.maskedGet | Metadata | View the masked data of a column that has a policy tag associated with a data policy. |
| bigquery.dataPolicies.setIamPolicy | Admin | Set a data policy's IAM permissions. |
| bigquery.dataPolicies.update | Admin | Update metadata for a data policy. |
| bigquery.datasets.create | Admin | |
| bigquery.datasets.createTagBinding | Admin | Create tag bindings on a dataset. |
| bigquery.datasets.delete | Admin | |
| bigquery.datasets.deleteTagBinding | Admin | Delete tag bindings on a dataset. |
| bigquery.datasets.get | Metadata | |
| bigquery.datasets.getIamPolicy | Metadata | |
| bigquery.datasets.link | Admin | Create a linked dataset. |
| bigquery.datasets.listTagBindings | Metadata | List tag bindings on a dataset. |
| bigquery.datasets.setIamPolicy | Admin | |
| bigquery.datasets.update | Admin | |
| bigquery.datasets.updateTag | Operator | Update tags for a dataset. |
| bigquery.jobs.create | Admin | |
| bigquery.jobs.delete | Admin | Delete metadata for a job. |
| bigquery.jobs.get | Metadata | |
| bigquery.jobs.list | Metadata | |
| bigquery.jobs.listAll | Metadata | |
| bigquery.jobs.listExecutionMetadata | Metadata | List all job execution metadata (without sensitive information) on any job submitted by any user. It can only be applied at the organization level and is used by Admin UI. |
| bigquery.jobs.update | Admin | |
| bigquery.models.create | Admin | Create new models. |
| bigquery.models.delete | Admin | Delete models. |
| bigquery.models.export | Admin | Export a model. |
| bigquery.models.getData | Metadata | "Get model data. To get model metadata |
| bigquery.models.getMetadata | Metadata | "Get model metadata. To get model data |
| bigquery.models.list | Metadata | List models and metadata on models. |
| bigquery.models.updateData | Admin | "Update model data. To update model metadata |
| bigquery.models.updateMetadata | Admin | "Update model metadata. To update model data |
| bigquery.readsessions.create | Admin | |
| bigquery.readsessions.getData | Metadata | Read data from a read session via the Storage Read API. |
| bigquery.readsessions.update | Admin | Update a read session via the Storage Read API. |
| bigquery.reservationAssignments.create | Admin | "Create a reservation assignment. This permission is required on the owner project and assignee resource. To move a reservation assignment |
| bigquery.reservationAssignments.delete | Admin | "Delete a reservation assignment. This permission is required on the owner project and assignee resource. To move a reservation assignment |
| bigquery.reservationAssignments.list | Metadata | List all reservation assignments in a project. |
| bigquery.reservationAssignments.search | Metadata | "Search for a reservation assignment for a given project |
| bigquery.reservations.create | Admin | Create a reservation in a project. |
| bigquery.reservations.delete | Admin | Delete a reservation. |
| bigquery.reservations.get | Metadata | Retrieve details about a reservation. |
| bigquery.reservations.list | Metadata | List all reservations in a project. |
| bigquery.reservations.update | Admin | Update a reservation's properties. |
| bigquery.routines.create | Admin | Create new routines (functions and stored procedures). |
| bigquery.routines.delete | Admin | Delete routines. |
| bigquery.routines.get | Metadata | Get routine definitions and metadata. |
| bigquery.routines.list | Metadata | List routines and metadata on routines. |
| bigquery.routines.update | Admin | Update routine definitions and metadata. |
| bigquery.routines.updateTag | Operator | Update tags for a routine. |
| bigquery.rowAccessPolicies.create | Admin | Create a new row-level access policy on a table. |
| bigquery.rowAccessPolicies.delete | Admin | Delete a row-level access policy from a table. |
| bigquery.rowAccessPolicies.getFilteredData | Metadata | Gets data in a table that you want to be visible only to the principals in a row-level access policy's grantee list. We recommend this permission only be granted on a row-level access policy resource. |
| bigquery.rowAccessPolicies.getIamPolicy | Metadata | Get a row access policy's IAM permissions. |
| bigquery.rowAccessPolicies.list | Metadata | List all row-level access policies on a table. |
| bigquery.rowAccessPolicies.setIamPolicy | Admin | Set the row access policy's IAM permissions. |
| bigquery.rowAccessPolicies.update | Admin | Re-create a row-level access policy. |
| bigquery.savedqueries.create | Admin | |
| bigquery.savedqueries.delete | Admin | |
| bigquery.savedqueries.get | Metadata | |
| bigquery.savedqueries.list | Metadata | |
| bigquery.savedqueries.update | Admin | |
| bigquery.tables.create | Admin | |
| bigquery.tables.createIndex | Admin | Create search indexes on tables. |
| bigquery.tables.createSnapshot | Admin | Create new table snapshots. |
| bigquery.tables.delete | Admin | |
| bigquery.tables.deleteIndex | Admin | Drop search indexes on tables. |
| bigquery.tables.deleteSnapshot | Admin | Delete table snapshots. |
| bigquery.tables.export | Admin | |
| bigquery.tables.get | Metadata | |
| bigquery.tables.getData | Metadata | |
| bigquery.tables.getIamPolicy | Metadata | Read a table's IAM policy. |
| bigquery.tables.list | Metadata | |
| bigquery.tables.restoreSnapshot | Admin | Restore table snapshots. |
| bigquery.tables.setCategory | Admin | Set policy tags in table schema. |
| bigquery.tables.setIamPolicy | Admin | Change a table's IAM policy. |
| bigquery.tables.update | Admin | |
| bigquery.tables.updateData | Admin | |
| bigquery.tables.updateTag | Operator | Update tags for a table. |
| bigquery.transfers.get | Metadata | |
| bigquery.transfers.update | Admin | |
| resourcemanager.projects.get | Metadata | |
| resourcemanager.projects.getIamPolicy | Metadata |