Studio Query roles and permissions

This page lists the IAM roles and permissions for Studio Query. To search through all roles and permissions, see the role and permission index.

Studio Query roles

Role	Permissions
Studio Query Admin ^Beta (roles/databasesconsole.studioQueryAdmin) Full access to Studio Query resources.	databasesconsole.locations.* databasesconsole.locations.get databasesconsole.locations.list databasesconsole.operations.* databasesconsole.operations.cancel databasesconsole.operations.delete databasesconsole.operations.get databasesconsole.operations.list databasesconsole.studioQueries.* databasesconsole.studioQueries.create databasesconsole.studioQueries.delete databasesconsole.studioQueries.get databasesconsole.studioQueries.list databasesconsole.studioQueries.search databasesconsole.studioQueries.update resourcemanager.projects.get resourcemanager.projects.list
Studio Query User ^Beta (roles/databasesconsole.studioQueryUser) Access to create, update, search and delete studio queries.	databasesconsole.locations.* databasesconsole.locations.get databasesconsole.locations.list databasesconsole.operations.get databasesconsole.operations.list databasesconsole.studioQueries.create databasesconsole.studioQueries.delete databasesconsole.studioQueries.search databasesconsole.studioQueries.update resourcemanager.projects.get resourcemanager.projects.list

Studio Query permissions

Permission	Included in roles
databasesconsole.databaseCenterViews.create	Owner (roles/owner) Editor (roles/editor) Database Center Admin (roles/databasecenter.admin)
databasesconsole.databaseCenterViews.delete	Owner (roles/owner) Editor (roles/editor) Database Center Admin (roles/databasecenter.admin)
databasesconsole.databaseCenterViews.search	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Database Center Admin (roles/databasecenter.admin) Database Center Viewer (roles/databasecenter.viewer) Support User (roles/iam.supportUser)
databasesconsole.databaseCenterViews.update	Owner (roles/owner) Editor (roles/editor) Database Center Admin (roles/databasecenter.admin)
databasesconsole.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AlloyDB Admin (roles/alloydb.admin) AlloyDB Database User (roles/alloydb.databaseUser) Cloud SQL Admin (roles/cloudsql.admin) Cloud SQL Studio User (roles/cloudsql.studioUser) Database Center Admin (roles/databasecenter.admin) Database Center Viewer (roles/databasecenter.viewer) Studio Query Admin (roles/databasesconsole.studioQueryAdmin) Studio Query User (roles/databasesconsole.studioQueryUser) Cloud Datastore Owner (roles/datastore.owner) Cloud Datastore User (roles/datastore.user) Cloud Datastore Viewer (roles/datastore.viewer) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. DLP API Service Agent (roles/dlp.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent)
databasesconsole.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AlloyDB Admin (roles/alloydb.admin) AlloyDB Database User (roles/alloydb.databaseUser) Cloud SQL Admin (roles/cloudsql.admin) Cloud SQL Studio User (roles/cloudsql.studioUser) Database Center Admin (roles/databasecenter.admin) Database Center Viewer (roles/databasecenter.viewer) Studio Query Admin (roles/databasesconsole.studioQueryAdmin) Studio Query User (roles/databasesconsole.studioQueryUser) Cloud Datastore Owner (roles/datastore.owner) Cloud Datastore User (roles/datastore.user) Cloud Datastore Viewer (roles/datastore.viewer) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. DLP API Service Agent (roles/dlp.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent)
databasesconsole.operations.cancel	Owner (roles/owner) Editor (roles/editor) Studio Query Admin (roles/databasesconsole.studioQueryAdmin)
databasesconsole.operations.delete	Owner (roles/owner) Editor (roles/editor) Studio Query Admin (roles/databasesconsole.studioQueryAdmin)
databasesconsole.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Studio Query Admin (roles/databasesconsole.studioQueryAdmin) Studio Query User (roles/databasesconsole.studioQueryUser) Support User (roles/iam.supportUser)
databasesconsole.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Studio Query Admin (roles/databasesconsole.studioQueryAdmin) Studio Query User (roles/databasesconsole.studioQueryUser) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
databasesconsole.studioQueries.create	Owner (roles/owner) Editor (roles/editor) AlloyDB Admin (roles/alloydb.admin) Cloud SQL Admin (roles/cloudsql.admin) Studio Query Admin (roles/databasesconsole.studioQueryAdmin) Studio Query User (roles/databasesconsole.studioQueryUser) Cloud Datastore Owner (roles/datastore.owner) Cloud Datastore User (roles/datastore.user) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Databases Admin (roles/iam.databasesAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. DLP API Service Agent (roles/dlp.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent)
databasesconsole.studioQueries.delete	Owner (roles/owner) Editor (roles/editor) AlloyDB Admin (roles/alloydb.admin) Cloud SQL Admin (roles/cloudsql.admin) Studio Query Admin (roles/databasesconsole.studioQueryAdmin) Studio Query User (roles/databasesconsole.studioQueryUser) Cloud Datastore Owner (roles/datastore.owner) Cloud Datastore User (roles/datastore.user) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Databases Admin (roles/iam.databasesAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. DLP API Service Agent (roles/dlp.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent)
databasesconsole.studioQueries.get	Owner (roles/owner) AlloyDB Admin (roles/alloydb.admin) Cloud SQL Admin (roles/cloudsql.admin) Studio Query Admin (roles/databasesconsole.studioQueryAdmin) Cloud Datastore Owner (roles/datastore.owner) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Databases Admin (roles/iam.databasesAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent)
databasesconsole.studioQueries.list	Owner (roles/owner) AlloyDB Admin (roles/alloydb.admin) Cloud SQL Admin (roles/cloudsql.admin) Studio Query Admin (roles/databasesconsole.studioQueryAdmin) Cloud Datastore Owner (roles/datastore.owner) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Databases Admin (roles/iam.databasesAdmin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent)
databasesconsole.studioQueries.search	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AlloyDB Admin (roles/alloydb.admin) AlloyDB Database User (roles/alloydb.databaseUser) Cloud SQL Admin (roles/cloudsql.admin) Cloud SQL Studio User (roles/cloudsql.studioUser) Studio Query Admin (roles/databasesconsole.studioQueryAdmin) Studio Query User (roles/databasesconsole.studioQueryUser) Cloud Datastore Owner (roles/datastore.owner) Cloud Datastore User (roles/datastore.user) Cloud Datastore Viewer (roles/datastore.viewer) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. DLP API Service Agent (roles/dlp.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent)
databasesconsole.studioQueries.update	Owner (roles/owner) Editor (roles/editor) AlloyDB Admin (roles/alloydb.admin) Cloud SQL Admin (roles/cloudsql.admin) Studio Query Admin (roles/databasesconsole.studioQueryAdmin) Studio Query User (roles/databasesconsole.studioQueryUser) Cloud Datastore Owner (roles/datastore.owner) Cloud Datastore User (roles/datastore.user) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Databases Admin (roles/iam.databasesAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. DLP API Service Agent (roles/dlp.serviceAgent) Cloud Composer API Service Agent (roles/composer.serviceAgent)