Storage Insights roles and permissions

This page lists the IAM roles and permissions for Storage Insights. To search through all roles and permissions, see the role and permission index.

Storage Insights roles

Role	Permissions
Storage Insights Admin (roles/storageinsights.admin) Full access to Storage Insights resources.	resourcemanager.projects.get resourcemanager.projects.list storageinsights.* storageinsights.datasetConfigs.create storageinsights.datasetConfigs.delete storageinsights.datasetConfigs.get storageinsights.datasetConfigs.linkDataset storageinsights.datasetConfigs.list storageinsights.datasetConfigs.unlinkDataset storageinsights.datasetConfigs.update storageinsights.locations.get storageinsights.locations.list storageinsights.operations.cancel storageinsights.operations.delete storageinsights.operations.get storageinsights.operations.list storageinsights.reportConfigs.create storageinsights.reportConfigs.delete storageinsights.reportConfigs.get storageinsights.reportConfigs.list storageinsights.reportConfigs.update storageinsights.reportDetails.get storageinsights.reportDetails.list
Storage Insights Analyst (roles/storageinsights.analyst) Data access to Storage Insights.	resourcemanager.projects.get resourcemanager.projects.list storageinsights.datasetConfigs.get storageinsights.datasetConfigs.linkDataset storageinsights.datasetConfigs.list storageinsights.datasetConfigs.unlinkDataset storageinsights.locations.* storageinsights.locations.get storageinsights.locations.list storageinsights.operations.get storageinsights.operations.list storageinsights.reportConfigs.get storageinsights.reportConfigs.list storageinsights.reportDetails.* storageinsights.reportDetails.get storageinsights.reportDetails.list
StorageInsights Service Agent (roles/storageinsights.serviceAgent) Permissions for Insights to write reports into customer project Warning: Do not grant service agent roles to any principals except service agents.	bigquery.datasets.create serviceusage.services.use storageinsights.reportDetails.list
Storage Insights Viewer (roles/storageinsights.viewer) Read-only access to Storage Insights resources.	resourcemanager.projects.get resourcemanager.projects.list storageinsights.datasetConfigs.get storageinsights.datasetConfigs.list storageinsights.locations.* storageinsights.locations.get storageinsights.locations.list storageinsights.operations.get storageinsights.operations.list storageinsights.reportConfigs.get storageinsights.reportConfigs.list storageinsights.reportDetails.* storageinsights.reportDetails.get storageinsights.reportDetails.list

Storage Insights permissions

Permission	Included in roles
storageinsights.datasetConfigs.create	Owner (roles/owner) Editor (roles/editor) Storage Insights Admin (roles/storageinsights.admin)
storageinsights.datasetConfigs.delete	Owner (roles/owner) Editor (roles/editor) Storage Insights Admin (roles/storageinsights.admin)
storageinsights.datasetConfigs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Support User (roles/iam.supportUser) Storage Insights Admin (roles/storageinsights.admin) Storage Insights Analyst (roles/storageinsights.analyst) Storage Insights Viewer (roles/storageinsights.viewer)
storageinsights.datasetConfigs.linkDataset	Owner (roles/owner) Editor (roles/editor) Storage Insights Admin (roles/storageinsights.admin) Storage Insights Analyst (roles/storageinsights.analyst)
storageinsights.datasetConfigs.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Storage Insights Admin (roles/storageinsights.admin) Storage Insights Analyst (roles/storageinsights.analyst) Storage Insights Viewer (roles/storageinsights.viewer)
storageinsights.datasetConfigs.unlinkDataset	Owner (roles/owner) Editor (roles/editor) Storage Insights Admin (roles/storageinsights.admin) Storage Insights Analyst (roles/storageinsights.analyst)
storageinsights.datasetConfigs.update	Owner (roles/owner) Editor (roles/editor) Storage Insights Admin (roles/storageinsights.admin)
storageinsights.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Support User (roles/iam.supportUser) Storage Insights Admin (roles/storageinsights.admin) Storage Insights Analyst (roles/storageinsights.analyst) Storage Insights Viewer (roles/storageinsights.viewer)
storageinsights.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Storage Insights Admin (roles/storageinsights.admin) Storage Insights Analyst (roles/storageinsights.analyst) Storage Insights Viewer (roles/storageinsights.viewer)
storageinsights.operations.cancel	Owner (roles/owner) Editor (roles/editor) Storage Insights Admin (roles/storageinsights.admin)
storageinsights.operations.delete	Owner (roles/owner) Editor (roles/editor) Storage Insights Admin (roles/storageinsights.admin)
storageinsights.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Support User (roles/iam.supportUser) Storage Insights Admin (roles/storageinsights.admin) Storage Insights Analyst (roles/storageinsights.analyst) Storage Insights Viewer (roles/storageinsights.viewer)
storageinsights.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Storage Insights Admin (roles/storageinsights.admin) Storage Insights Analyst (roles/storageinsights.analyst) Storage Insights Viewer (roles/storageinsights.viewer)
storageinsights.reportConfigs.create	Owner (roles/owner) Editor (roles/editor) Storage Insights Admin (roles/storageinsights.admin)
storageinsights.reportConfigs.delete	Owner (roles/owner) Editor (roles/editor) Storage Insights Admin (roles/storageinsights.admin)
storageinsights.reportConfigs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Support User (roles/iam.supportUser) Storage Insights Admin (roles/storageinsights.admin) Storage Insights Analyst (roles/storageinsights.analyst) Storage Insights Viewer (roles/storageinsights.viewer)
storageinsights.reportConfigs.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Storage Insights Admin (roles/storageinsights.admin) Storage Insights Analyst (roles/storageinsights.analyst) Storage Insights Viewer (roles/storageinsights.viewer)
storageinsights.reportConfigs.update	Owner (roles/owner) Editor (roles/editor) Storage Insights Admin (roles/storageinsights.admin)
storageinsights.reportDetails.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Support User (roles/iam.supportUser) Storage Insights Admin (roles/storageinsights.admin) Storage Insights Analyst (roles/storageinsights.analyst) Storage Insights Viewer (roles/storageinsights.viewer)
storageinsights.reportDetails.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Storage Insights Admin (roles/storageinsights.admin) Storage Insights Analyst (roles/storageinsights.analyst) Storage Insights Viewer (roles/storageinsights.viewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. StorageInsights Service Agent (roles/storageinsights.serviceAgent)