BigQuery sharing roles and permissions

This page lists the IAM roles and permissions for BigQuery sharing. To search through all roles and permissions, see the role and permission index.

BigQuery sharing roles

Role	Permissions
Analytics Hub Admin (roles/analyticshub.admin) Administer Data Exchanges and Listings	analyticshub.dataExchanges.create analyticshub.dataExchanges.delete analyticshub.dataExchanges.get analyticshub.dataExchanges.getIamPolicy analyticshub.dataExchanges.list analyticshub.dataExchanges.setIamPolicy analyticshub.dataExchanges.update analyticshub.dataExchanges.viewSubscriptions analyticshub.listings.create analyticshub.listings.delete analyticshub.listings.get analyticshub.listings.getIamPolicy analyticshub.listings.list analyticshub.listings.setIamPolicy analyticshub.listings.update analyticshub.listings.viewSubscriptions analyticshub.subscriptions.* analyticshub.subscriptions.create analyticshub.subscriptions.delete analyticshub.subscriptions.get analyticshub.subscriptions.list analyticshub.subscriptions.update resourcemanager.projects.get resourcemanager.projects.list
Analytics Hub Listing Admin (roles/analyticshub.listingAdmin) Grants full control over the Listing, including updating, deleting and setting ACLs	analyticshub.dataExchanges.get analyticshub.dataExchanges.getIamPolicy analyticshub.dataExchanges.list analyticshub.listings.delete analyticshub.listings.get analyticshub.listings.getIamPolicy analyticshub.listings.list analyticshub.listings.setIamPolicy analyticshub.listings.update analyticshub.listings.viewSubscriptions resourcemanager.projects.get resourcemanager.projects.list
Analytics Hub Publisher (roles/analyticshub.publisher) Can publish to Data Exchanges thus creating Listings	analyticshub.dataExchanges.get analyticshub.dataExchanges.getIamPolicy analyticshub.dataExchanges.list analyticshub.listings.create analyticshub.listings.get analyticshub.listings.getIamPolicy analyticshub.listings.list resourcemanager.projects.get resourcemanager.projects.list
Analytics Hub Subscriber (roles/analyticshub.subscriber) Can browse Data Exchanges and subscribe to Listings	analyticshub.dataExchanges.get analyticshub.dataExchanges.getIamPolicy analyticshub.dataExchanges.list analyticshub.dataExchanges.subscribe analyticshub.listings.get analyticshub.listings.getIamPolicy analyticshub.listings.list analyticshub.listings.subscribe resourcemanager.projects.get resourcemanager.projects.list
Analytics Hub Subscription Owner (roles/analyticshub.subscriptionOwner) Grants full control over the Subscription, including updating and deleting	analyticshub.dataExchanges.get analyticshub.dataExchanges.getIamPolicy analyticshub.dataExchanges.list analyticshub.listings.get analyticshub.listings.getIamPolicy analyticshub.listings.list analyticshub.subscriptions.* analyticshub.subscriptions.create analyticshub.subscriptions.delete analyticshub.subscriptions.get analyticshub.subscriptions.list analyticshub.subscriptions.update resourcemanager.projects.get resourcemanager.projects.list
Analytics Hub Viewer (roles/analyticshub.viewer) Can browse Data Exchanges and Listings	analyticshub.dataExchanges.get analyticshub.dataExchanges.getIamPolicy analyticshub.dataExchanges.list analyticshub.listings.get analyticshub.listings.getIamPolicy analyticshub.listings.list resourcemanager.projects.get resourcemanager.projects.list

BigQuery sharing permissions

Permission	Included in roles
analyticshub.dataExchanges.create	Owner (roles/owner) Editor (roles/editor) Analytics Hub Admin (roles/analyticshub.admin)
analyticshub.dataExchanges.delete	Owner (roles/owner) Editor (roles/editor) Analytics Hub Admin (roles/analyticshub.admin)
analyticshub.dataExchanges.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Analytics Hub Admin (roles/analyticshub.admin) Analytics Hub Listing Admin (roles/analyticshub.listingAdmin) Analytics Hub Publisher (roles/analyticshub.publisher) Analytics Hub Subscriber (roles/analyticshub.subscriber) Analytics Hub Subscription Owner (roles/analyticshub.subscriptionOwner) Analytics Hub Viewer (roles/analyticshub.viewer) Support User (roles/iam.supportUser)
analyticshub.dataExchanges.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Analytics Hub Admin (roles/analyticshub.admin) Analytics Hub Listing Admin (roles/analyticshub.listingAdmin) Analytics Hub Publisher (roles/analyticshub.publisher) Analytics Hub Subscriber (roles/analyticshub.subscriber) Analytics Hub Subscription Owner (roles/analyticshub.subscriptionOwner) Analytics Hub Viewer (roles/analyticshub.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
analyticshub.dataExchanges.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Analytics Hub Admin (roles/analyticshub.admin) Analytics Hub Listing Admin (roles/analyticshub.listingAdmin) Analytics Hub Publisher (roles/analyticshub.publisher) Analytics Hub Subscriber (roles/analyticshub.subscriber) Analytics Hub Subscription Owner (roles/analyticshub.subscriptionOwner) Analytics Hub Viewer (roles/analyticshub.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
analyticshub.dataExchanges.setIamPolicy	Owner (roles/owner) Analytics Hub Admin (roles/analyticshub.admin) Security Admin (roles/iam.securityAdmin)
analyticshub.dataExchanges.subscribe	Owner (roles/owner) Analytics Hub Subscriber (roles/analyticshub.subscriber)
analyticshub.dataExchanges.update	Owner (roles/owner) Editor (roles/editor) Analytics Hub Admin (roles/analyticshub.admin)
analyticshub.dataExchanges.viewSubscriptions	Owner (roles/owner) Analytics Hub Admin (roles/analyticshub.admin)
analyticshub.listings.create	Owner (roles/owner) Editor (roles/editor) Analytics Hub Admin (roles/analyticshub.admin) Analytics Hub Publisher (roles/analyticshub.publisher)
analyticshub.listings.delete	Owner (roles/owner) Editor (roles/editor) Analytics Hub Admin (roles/analyticshub.admin) Analytics Hub Listing Admin (roles/analyticshub.listingAdmin)
analyticshub.listings.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Analytics Hub Admin (roles/analyticshub.admin) Analytics Hub Listing Admin (roles/analyticshub.listingAdmin) Analytics Hub Publisher (roles/analyticshub.publisher) Analytics Hub Subscriber (roles/analyticshub.subscriber) Analytics Hub Subscription Owner (roles/analyticshub.subscriptionOwner) Analytics Hub Viewer (roles/analyticshub.viewer) Support User (roles/iam.supportUser)
analyticshub.listings.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Analytics Hub Admin (roles/analyticshub.admin) Analytics Hub Listing Admin (roles/analyticshub.listingAdmin) Analytics Hub Publisher (roles/analyticshub.publisher) Analytics Hub Subscriber (roles/analyticshub.subscriber) Analytics Hub Subscription Owner (roles/analyticshub.subscriptionOwner) Analytics Hub Viewer (roles/analyticshub.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
analyticshub.listings.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Analytics Hub Admin (roles/analyticshub.admin) Analytics Hub Listing Admin (roles/analyticshub.listingAdmin) Analytics Hub Publisher (roles/analyticshub.publisher) Analytics Hub Subscriber (roles/analyticshub.subscriber) Analytics Hub Subscription Owner (roles/analyticshub.subscriptionOwner) Analytics Hub Viewer (roles/analyticshub.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
analyticshub.listings.setIamPolicy	Owner (roles/owner) Analytics Hub Admin (roles/analyticshub.admin) Analytics Hub Listing Admin (roles/analyticshub.listingAdmin) Security Admin (roles/iam.securityAdmin)
analyticshub.listings.subscribe	Owner (roles/owner) Analytics Hub Subscriber (roles/analyticshub.subscriber)
analyticshub.listings.update	Owner (roles/owner) Editor (roles/editor) Analytics Hub Admin (roles/analyticshub.admin) Analytics Hub Listing Admin (roles/analyticshub.listingAdmin)
analyticshub.listings.viewSubscriptions	Owner (roles/owner) Analytics Hub Admin (roles/analyticshub.admin) Analytics Hub Listing Admin (roles/analyticshub.listingAdmin)
analyticshub.subscriptions.create	Owner (roles/owner) Editor (roles/editor) Analytics Hub Admin (roles/analyticshub.admin) Analytics Hub Subscription Owner (roles/analyticshub.subscriptionOwner)
analyticshub.subscriptions.delete	Owner (roles/owner) Editor (roles/editor) Analytics Hub Admin (roles/analyticshub.admin) Analytics Hub Subscription Owner (roles/analyticshub.subscriptionOwner)
analyticshub.subscriptions.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Analytics Hub Admin (roles/analyticshub.admin) Analytics Hub Subscription Owner (roles/analyticshub.subscriptionOwner) Support User (roles/iam.supportUser)
analyticshub.subscriptions.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Analytics Hub Admin (roles/analyticshub.admin) Analytics Hub Subscription Owner (roles/analyticshub.subscriptionOwner) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
analyticshub.subscriptions.update	Owner (roles/owner) Editor (roles/editor) Analytics Hub Admin (roles/analyticshub.admin) Analytics Hub Subscription Owner (roles/analyticshub.subscriptionOwner)