Permissões necessárias para tarefas comuns no Google Cloud console
Para ver uma lista de papéis e as permissões associadas, consulte Papéis do Cloud SQL.
| Tarefa | Permissões adicionais necessárias | 
|---|---|
| Exibir a página de listagem de instâncias | 
      cloudsql.instances.listresourcemanager.projects.get
      | 
  
| Criar uma instância | 
    cloudsql.instances.createcloudsql.instances.getcloudsql.instances.listresourcemanager.projects.getcompute.machineTypes.listcompute.machineTypes.getcompute.projects.get
    roles/compute.viewer | 
  
| Conectar-se a uma instância do Cloud Shell | 
      cloudsql.instances.getcloudsql.instances.listcloudsql.instances.updateresourcemanager.projects.get
   | 
| Criar um usuário | 
      cloudsql.instances.getcloudsql.instances.listcloudsql.users.createcloudsql.users.listresourcemanager.projects.get
   | 
  
| Ver informações da instância | 
      cloudsql.databases.listcloudsql.instances.getcloudsql.instances.listcloudsql.users.listmonitoring.timeSeries.listresourcemanager.projects.get
   | 
  
| Listar as operações de uma instância | 
      cloudsql.instances.list
   | 
  
| Acessar as operações de uma instância | 
      cloudsql.instances.get
   | 
  
| Receber as operações de um projeto | 
      cloudsql.instances.get
   | 
  
| Visualizar metadados de instância no Dataplex Universal Catalog | 
      cloudsql.schemas.view
   | 
  
| Listar backups finais | 
      cloudsql.backupRuns.list
   | 
  
| Descrever um backup final | 
      cloudsql.backupRuns.get
   | 
  
| Atualizar um backup final | 
      cloudsql.backupRuns.update
   | 
  
| Restaurar um backup final para uma nova instância | 
      cloudsql.backupRuns.getcloudsql.instances.restoreBackupcloudsql.instances.create
   | 
  
| Restaurar um backup final para uma instância atual | 
      cloudsql.backupRuns.getcloudsql.instances.restoreBackup
   | 
  
| Excluir um backup final | 
      cloudsql.backupRuns.delete
   | 
  
Permissões necessárias para comandos do gcloud sql
| Comando | Permissões necessárias | 
|---|---|
gcloud sql backups create | 
     cloudsql.backupRuns.create | 
gcloud sql backups delete | 
  cloudsql.backupRuns.delete | 
  
gcloud sql backups describe | 
  cloudsql.backupRuns.get | 
  
gcloud sql backups list | 
  cloudsql.backupRuns.list | 
  
gcloud sql backups restore | 
  cloudsql.backupRuns.getcloudsql.instances.restoreBackup | 
  
gcloud sql connect | 
  cloudsql.instances.getcloudsql.instances.update | 
  
gcloud sql databases create | 
  cloudsql.databases.create | 
  
gcloud sql databases delete | 
  cloudsql.databases.delete | 
  
gcloud sql databases describe | 
  cloudsql.databases.get | 
  
gcloud sql databases list | 
  cloudsql.databases.list | 
  
gcloud sql databases patch | 
  cloudsql.databases.getcloudsql.databases.update | 
  
gcloud sql export | 
  cloudsql.instances.exportcloudsql.instances.get | 
gcloud sql flags list | 
  Nenhum | 
gcloud sql import | 
  cloudsql.instances.import | 
  
gcloud sql instances clone | 
  cloudsql.instances.clone | 
  
gcloud sql instances create | 
  cloudsql.instances.create | 
  
gcloud sql instances delete | 
  cloudsql.instances.delete | 
  
gcloud sql instances describe | 
  cloudsql.instances.get | 
  
gcloud sql instances failover | 
  cloudsql.instances.failover | 
  
gcloud sql instances import | 
  cloudsql.instances.import | 
  
gcloud sql instances list | 
  cloudsql.instances.list | 
  
gcloud sql instances patch | 
  cloudsql.instances.getcloudsql.instances.update | 
  
gcloud sql instances promote-replica | 
  cloudsql.instances.promoteReplica | 
  
gcloud sql instances reset-ssl-config | 
  cloudsql.instances.resetSslConfig | 
  
gcloud sql instances restart | 
  cloudsql.instances.restart | 
  
gcloud sql instances restore-backup | 
  cloudsql.backupRuns.getcloudsql.instances.restoreBackup | 
  
gcloud sql operations describe | 
  cloudsql.instances.get | 
  
gcloud sql operations list | 
  cloudsql.instances.get | 
  
gcloud sql operations wait | 
  cloudsql.instances.get | 
  
gcloud sql ssl client-certs create | 
  cloudsql.sslCerts.create | 
  
gcloud sql ssl client-certs delete | 
  cloudsql.sslCerts.delete | 
  
gcloud sql ssl client-certs describe | 
  cloudsql.sslCerts.list | 
  
gcloud sql ssl client-certs list | 
  cloudsql.sslCerts.list | 
  
gcloud sql tiers list | 
  Nenhum | 
gcloud sql users create | 
  cloudsql.users.create | 
  
gcloud sql users delete | 
  cloudsql.users.delete | 
  
gcloud sql users list | 
  cloudsql.users.list | 
  
gcloud sql users set-password | 
  cloudsql.users.update | 
  
gcloud sql operations list | 
  cloudsql.instances.list | 
  
gcloud sql operations get | 
  cloudsql.instances.get | 
  
Permissões necessárias para métodos da API Cloud SQL Admin
Na tabela a seguir, estão listadas as permissões que o autor da chamada
precisa ter para chamar cada método na API Cloud SQL Admin ou para executar
tarefas usando ferramentas do Google Cloud que utilizam a API (como o
console doGoogle Cloud ou a ferramenta de linha de comando gcloud).
Para mais informações, consulte Como autorizar solicitações com o OAuth 2.0. Todas as permissões são aplicadas ao projeto. Não é possível aplicar permissões diferentes com base na instância ou em outro objeto de nível inferior.
| Método | Permissões necessárias | 
|---|---|
backups.deleteBackup | 
cloudsql.backupRuns.delete | 
backups.getBackup | 
cloudsql.backupRuns.get | 
 backups.updateBackup | 
cloudsql.backupRuns.update | 
 backups.listBackups | 
cloudsql.backupRuns.list | 
 backups.createBackup | 
cloudsql.backupRuns.create | 
databases.delete | 
cloudsql.databases.delete | 
databases.get | 
cloudsql.databases.get | 
databases.insert | 
cloudsql.databases.create | 
databases.list | 
cloudsql.databases.list | 
databases.patch | 
cloudsql.databases.update, cloudsql.databases.get | 
databases.update | 
cloudsql.databases.update | 
flags.list | 
Nenhum | 
instances.clone | 
cloudsql.instances.clone | 
instances.delete | 
cloudsql.instances.delete | 
instances.export | 
cloudsql.instances.export | 
instances.failover | 
cloudsql.instances.failover | 
instances.get | 
cloudsql.instances.get | 
instances.import | 
cloudsql.instances.import | 
instances.insert | 
cloudsql.instances.create | 
instances.list | 
cloudsql.instances.list | 
instances.patch | 
cloudsql.instances.get, cloudsql.instances.update | 
instances.promoteReplica | 
cloudsql.instances.promoteReplica | 
instances.resetSslConfig | 
cloudsql.instances.resetSslConfig | 
instances.restart | 
cloudsql.instances.restart | 
instances.restoreBackup | 
cloudsql.instances.restoreBackup, cloudsql.backupRuns.get | 
instances.startReplica | 
cloudsql.instances.startReplica | 
instances.stopReplica | 
cloudsql.instances.stopReplica | 
instances.truncateLog | 
cloudsql.instances.truncateLog | 
instances.update | 
cloudsql.instances.update | 
operations.get | 
cloudsql.instances.get | 
operations.get | 
cloudsql.instances.get | 
operations.list | 
cloudsql.instances.get | 
operations.list | 
cloudsql.instances.list | 
sslCerts.delete | 
cloudsql.sslCerts.delete | 
sslCerts.get | 
cloudsql.sslCerts.get | 
sslCerts.insert | 
cloudsql.sslCerts.create | 
sslCerts.list | 
cloudsql.sslCerts.list | 
users.delete | 
cloudsql.users.delete | 
users.insert | 
cloudsql.users.create | 
users.list | 
cloudsql.users.list | 
users.update | 
cloudsql.users.update |