[[["容易理解","easyToUnderstand","thumb-up"],["確實解決了我的問題","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["難以理解","hardToUnderstand","thumb-down"],["資訊或程式碼範例有誤","incorrectInformationOrSampleCode","thumb-down"],["缺少我需要的資訊/範例","missingTheInformationSamplesINeed","thumb-down"],["翻譯問題","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["上次更新時間：2025-08-17 (世界標準時間)。"],[[["\u003cp\u003eBigQuery uses IAM basic roles for project-level access, but it's strongly advised to use predefined IAM roles instead due to the broad and uneven access granted by basic roles.\u003c/p\u003e\n"],["\u003cp\u003eProject-level basic roles include \u003ccode\u003eViewer\u003c/code\u003e, \u003ccode\u003eEditor\u003c/code\u003e, and \u003ccode\u003eOwner\u003c/code\u003e, each with increasing capabilities such as starting jobs, creating datasets, managing project roles, and deleting datasets.\u003c/p\u003e\n"],["\u003cp\u003eDataset-level basic roles consist of \u003ccode\u003eREADER\u003c/code\u003e, \u003ccode\u003eWRITER\u003c/code\u003e, and \u003ccode\u003eOWNER\u003c/code\u003e, which control abilities to read, modify, and manage data and routines within a specific dataset.\u003c/p\u003e\n"],["\u003cp\u003eCreating a new dataset automatically grants \u003ccode\u003eREADER\u003c/code\u003e, \u003ccode\u003eWRITER\u003c/code\u003e, and \u003ccode\u003eOWNER\u003c/code\u003e roles to project members with corresponding basic roles, unless custom dataset roles are defined, overriding the default ones.\u003c/p\u003e\n"],["\u003cp\u003eWhen running a query, an exception to the role model is that an anonymous dataset is created for cached results, with only the user who ran the query being given \u003ccode\u003eOWNER\u003c/code\u003e access to it.\u003c/p\u003e\n"]]],[],null,["# Basic roles and permissions\n===========================\n\nBigQuery supports IAM\n[basic roles](/iam/docs/understanding-roles#basic) for project-level access.\n| **Caution:** Avoid using basic roles. They predate IAM and grant excessive and uneven access. Use [predefined IAM](/bigquery/docs/access-control) roles instead.\n\nBasic roles for projects\n------------------------\n\nBy default, granting access to a project also grants access to datasets within\nit. Default access can be overridden on a per-dataset basis. The following table\ndescribes what access is granted to members of the basic IAM\nroles.\n\nBasic roles for projects are granted or revoked through the\n[Google Cloud console](https://console.cloud.google.com/). When a project is created,\nthe `Owner` role is granted to the user who created the\nproject.\n\nFor more information about how to grant or revoke access for project roles, see\n[Granting, changing, and revoking access to resources](/iam/docs/granting-changing-revoking-access)\nin the IAM documentation.\n\nBasic roles for datasets\n------------------------\n\nThe following basic roles apply at the dataset level.\n\nFor more information on assigning roles at the dataset level, see\n[Controlling access to datasets](/bigquery/docs/dataset-access-controls).\n\nWhen you create a new dataset, BigQuery adds default dataset access for\nthe following entities. Roles that you specify on dataset creation overwrite the\ndefault values."]]
