roles/datafusion.serviceAgent
Title: Cloud Data Fusion API Service Agent
Description: Gives Cloud Data Fusion service account access to Service Networking, Cloud Dataproc, Cloud Storage, BigQuery, Cloud Spanner, and Cloud Bigtable resources.
Stage: GA
618 Assigned Permissions:
- bigquery.config.get
- bigquery.dataPolicies.create
- bigquery.dataPolicies.delete
- bigquery.dataPolicies.get
- bigquery.dataPolicies.getIamPolicy
- bigquery.dataPolicies.list
- bigquery.dataPolicies.setIamPolicy
- bigquery.dataPolicies.update
- bigquery.datasets.create
- bigquery.datasets.createTagBinding
- bigquery.datasets.delete
- bigquery.datasets.deleteTagBinding
- bigquery.datasets.get
- bigquery.datasets.getIamPolicy
- bigquery.datasets.link
- bigquery.datasets.listEffectiveTags
- bigquery.datasets.listSharedDatasetUsage
- bigquery.datasets.listTagBindings
- bigquery.datasets.setIamPolicy
- bigquery.datasets.update
- bigquery.datasets.updateTag
- bigquery.jobs.create
- bigquery.models.create
- bigquery.models.delete
- bigquery.models.export
- bigquery.models.getData
- bigquery.models.getMetadata
- bigquery.models.list
- bigquery.models.updateData
- bigquery.models.updateMetadata
- bigquery.models.updateTag
- bigquery.routines.create
- bigquery.routines.delete
- bigquery.routines.get
- bigquery.routines.list
- bigquery.routines.update
- bigquery.routines.updateTag
- bigquery.rowAccessPolicies.create
- bigquery.rowAccessPolicies.delete
- bigquery.rowAccessPolicies.getIamPolicy
- bigquery.rowAccessPolicies.list
- bigquery.rowAccessPolicies.setIamPolicy
- bigquery.rowAccessPolicies.update
- bigquery.tables.create
- bigquery.tables.createIndex
- bigquery.tables.createSnapshot
- bigquery.tables.createTagBinding
- bigquery.tables.delete
- bigquery.tables.deleteIndex
- bigquery.tables.deleteSnapshot
- bigquery.tables.deleteTagBinding
- bigquery.tables.export
- bigquery.tables.get
- bigquery.tables.getData
- bigquery.tables.getIamPolicy
- bigquery.tables.list
- bigquery.tables.listEffectiveTags
- bigquery.tables.listTagBindings
- bigquery.tables.replicateData
- bigquery.tables.restoreSnapshot
- bigquery.tables.setCategory
- bigquery.tables.setColumnDataPolicy
- bigquery.tables.setIamPolicy
- bigquery.tables.update
- bigquery.tables.updateData
- bigquery.tables.updateIndex
- bigquery.tables.updateTag
- bigtable.appProfiles.create
- bigtable.appProfiles.delete
- bigtable.appProfiles.get
- bigtable.appProfiles.list
- bigtable.appProfiles.update
- bigtable.authorizedViews.create
- bigtable.authorizedViews.createTagBinding
- bigtable.authorizedViews.delete
- bigtable.authorizedViews.deleteTagBinding
- bigtable.authorizedViews.get
- bigtable.authorizedViews.getIamPolicy
- bigtable.authorizedViews.list
- bigtable.authorizedViews.listEffectiveTags
- bigtable.authorizedViews.listTagBindings
- bigtable.authorizedViews.mutateRows
- bigtable.authorizedViews.readRows
- bigtable.authorizedViews.sampleRowKeys
- bigtable.authorizedViews.setIamPolicy
- bigtable.authorizedViews.update
- bigtable.backups.create
- bigtable.backups.delete
- bigtable.backups.get
- bigtable.backups.getIamPolicy
- bigtable.backups.list
- bigtable.backups.read
- bigtable.backups.restore
- bigtable.backups.setIamPolicy
- bigtable.backups.update
- bigtable.clusters.create
- bigtable.clusters.delete
- bigtable.clusters.get
- bigtable.clusters.list
- bigtable.clusters.update
- bigtable.hotTablets.list
- bigtable.instances.create
- bigtable.instances.createTagBinding
- bigtable.instances.delete
- bigtable.instances.deleteTagBinding
- bigtable.instances.executeQuery
- bigtable.instances.get
- bigtable.instances.getIamPolicy
- bigtable.instances.list
- bigtable.instances.listEffectiveTags
- bigtable.instances.listTagBindings
- bigtable.instances.ping
- bigtable.instances.setIamPolicy
- bigtable.instances.update
- bigtable.keyvisualizer.get
- bigtable.keyvisualizer.list
- bigtable.locations.list
- bigtable.tables.checkConsistency
- bigtable.tables.create
- bigtable.tables.delete
- bigtable.tables.generateConsistencyToken
- bigtable.tables.get
- bigtable.tables.getIamPolicy
- bigtable.tables.list
- bigtable.tables.mutateRows
- bigtable.tables.readRows
- bigtable.tables.sampleRowKeys
- bigtable.tables.setIamPolicy
- bigtable.tables.undelete
- bigtable.tables.update
- compute.acceleratorTypes.get
- compute.acceleratorTypes.list
- compute.addresses.get
- compute.addresses.list
- compute.addresses.listEffectiveTags
- compute.addresses.listTagBindings
- compute.autoscalers.get
- compute.autoscalers.list
- compute.backendBuckets.get
- compute.backendBuckets.list
- compute.backendBuckets.listEffectiveTags
- compute.backendBuckets.listTagBindings
- compute.backendServices.get
- compute.backendServices.list
- compute.backendServices.listEffectiveTags
- compute.backendServices.listTagBindings
- compute.disks.listEffectiveTags
- compute.disks.listTagBindings
- compute.externalVpnGateways.get
- compute.externalVpnGateways.list
- compute.externalVpnGateways.listEffectiveTags
- compute.externalVpnGateways.listTagBindings
- compute.firewalls.get
- compute.firewalls.list
- compute.firewalls.listEffectiveTags
- compute.firewalls.listTagBindings
- compute.forwardingRules.get
- compute.forwardingRules.list
- compute.forwardingRules.listEffectiveTags
- compute.forwardingRules.listTagBindings
- compute.globalAddresses.get
- compute.globalAddresses.list
- compute.globalAddresses.listEffectiveTags
- compute.globalAddresses.listTagBindings
- compute.globalForwardingRules.get
- compute.globalForwardingRules.list
- compute.globalForwardingRules.listEffectiveTags
- compute.globalForwardingRules.listTagBindings
- compute.globalForwardingRules.pscGet
- compute.globalOperations.get
- compute.healthChecks.get
- compute.healthChecks.list
- compute.healthChecks.listEffectiveTags
- compute.healthChecks.listTagBindings
- compute.httpHealthChecks.get
- compute.httpHealthChecks.list
- compute.httpHealthChecks.listEffectiveTags
- compute.httpHealthChecks.listTagBindings
- compute.httpsHealthChecks.get
- compute.httpsHealthChecks.list
- compute.httpsHealthChecks.listEffectiveTags
- compute.httpsHealthChecks.listTagBindings
- compute.images.listEffectiveTags
- compute.images.listTagBindings
- compute.instanceGroupManagers.get
- compute.instanceGroupManagers.list
- compute.instanceGroupManagers.listEffectiveTags
- compute.instanceGroupManagers.listTagBindings
- compute.instanceGroups.get
- compute.instanceGroups.list
- compute.instanceGroups.listEffectiveTags
- compute.instanceGroups.listTagBindings
- compute.instanceSettings.get
- compute.instances.get
- compute.instances.getGuestAttributes
- compute.instances.getScreenshot
- compute.instances.getSerialPortOutput
- compute.instances.list
- compute.instances.listEffectiveTags
- compute.instances.listReferrers
- compute.instances.listTagBindings
- compute.interconnectAttachments.get
- compute.interconnectAttachments.list
- compute.interconnectAttachments.listEffectiveTags
- compute.interconnectAttachments.listTagBindings
- compute.interconnectLocations.get
- compute.interconnectLocations.list
- compute.interconnectRemoteLocations.get
- compute.interconnectRemoteLocations.list
- compute.interconnects.get
- compute.interconnects.list
- compute.interconnects.listEffectiveTags
- compute.interconnects.listTagBindings
- compute.machineTypes.get
- compute.machineTypes.list
- compute.networkAttachments.get
- compute.networkAttachments.list
- compute.networkAttachments.listEffectiveTags
- compute.networkAttachments.listTagBindings
- compute.networkAttachments.update
- compute.networkProfiles.get
- compute.networkProfiles.list
- compute.networks.addPeering
- compute.networks.get
- compute.networks.getEffectiveFirewalls
- compute.networks.getRegionEffectiveFirewalls
- compute.networks.list
- compute.networks.listEffectiveTags
- compute.networks.listPeeringRoutes
- compute.networks.listTagBindings
- compute.networks.removePeering
- compute.networks.update
- compute.packetMirrorings.get
- compute.packetMirrorings.list
- compute.packetMirrorings.listEffectiveTags
- compute.packetMirrorings.listTagBindings
- compute.projects.get
- compute.regionBackendServices.get
- compute.regionBackendServices.list
- compute.regionBackendServices.listEffectiveTags
- compute.regionBackendServices.listTagBindings
- compute.regionHealthCheckServices.get
- compute.regionHealthCheckServices.list
- compute.regionHealthChecks.get
- compute.regionHealthChecks.list
- compute.regionHealthChecks.listEffectiveTags
- compute.regionHealthChecks.listTagBindings
- compute.regionNotificationEndpoints.get
- compute.regionNotificationEndpoints.list
- compute.regionSslCertificates.get
- compute.regionSslCertificates.list
- compute.regionSslCertificates.listEffectiveTags
- compute.regionSslCertificates.listTagBindings
- compute.regionSslPolicies.get
- compute.regionSslPolicies.list
- compute.regionSslPolicies.listAvailableFeatures
- compute.regionSslPolicies.listEffectiveTags
- compute.regionSslPolicies.listTagBindings
- compute.regionTargetHttpProxies.get
- compute.regionTargetHttpProxies.list
- compute.regionTargetHttpProxies.listEffectiveTags
- compute.regionTargetHttpProxies.listTagBindings
- compute.regionTargetHttpsProxies.get
- compute.regionTargetHttpsProxies.list
- compute.regionTargetHttpsProxies.listEffectiveTags
- compute.regionTargetHttpsProxies.listTagBindings
- compute.regionTargetTcpProxies.get
- compute.regionTargetTcpProxies.list
- compute.regionTargetTcpProxies.listEffectiveTags
- compute.regionTargetTcpProxies.listTagBindings
- compute.regionUrlMaps.get
- compute.regionUrlMaps.list
- compute.regionUrlMaps.listEffectiveTags
- compute.regionUrlMaps.listTagBindings
- compute.regions.get
- compute.regions.list
- compute.routers.get
- compute.routers.getRoutePolicy
- compute.routers.list
- compute.routers.listBgpRoutes
- compute.routers.listEffectiveTags
- compute.routers.listRoutePolicies
- compute.routers.listTagBindings
- compute.routes.get
- compute.routes.list
- compute.routes.listEffectiveTags
- compute.routes.listTagBindings
- compute.serviceAttachments.get
- compute.serviceAttachments.list
- compute.serviceAttachments.listEffectiveTags
- compute.serviceAttachments.listTagBindings
- compute.snapshots.listEffectiveTags
- compute.snapshots.listTagBindings
- compute.sslCertificates.get
- compute.sslCertificates.list
- compute.sslCertificates.listEffectiveTags
- compute.sslCertificates.listTagBindings
- compute.sslPolicies.get
- compute.sslPolicies.list
- compute.sslPolicies.listAvailableFeatures
- compute.sslPolicies.listEffectiveTags
- compute.sslPolicies.listTagBindings
- compute.subnetworks.get
- compute.subnetworks.list
- compute.subnetworks.listEffectiveTags
- compute.subnetworks.listTagBindings
- compute.targetGrpcProxies.get
- compute.targetGrpcProxies.list
- compute.targetGrpcProxies.listEffectiveTags
- compute.targetGrpcProxies.listTagBindings
- compute.targetHttpProxies.get
- compute.targetHttpProxies.list
- compute.targetHttpProxies.listEffectiveTags
- compute.targetHttpProxies.listTagBindings
- compute.targetHttpsProxies.get
- compute.targetHttpsProxies.list
- compute.targetHttpsProxies.listEffectiveTags
- compute.targetHttpsProxies.listTagBindings
- compute.targetInstances.get
- compute.targetInstances.list
- compute.targetInstances.listEffectiveTags
- compute.targetInstances.listTagBindings
- compute.targetPools.get
- compute.targetPools.list
- compute.targetPools.listEffectiveTags
- compute.targetPools.listTagBindings
- compute.targetSslProxies.get
- compute.targetSslProxies.list
- compute.targetSslProxies.listEffectiveTags
- compute.targetSslProxies.listTagBindings
- compute.targetTcpProxies.get
- compute.targetTcpProxies.list
- compute.targetTcpProxies.listEffectiveTags
- compute.targetTcpProxies.listTagBindings
- compute.targetVpnGateways.get
- compute.targetVpnGateways.list
- compute.targetVpnGateways.listEffectiveTags
- compute.targetVpnGateways.listTagBindings
- compute.urlMaps.get
- compute.urlMaps.list
- compute.urlMaps.listEffectiveTags
- compute.urlMaps.listTagBindings
- compute.vpnGateways.get
- compute.vpnGateways.list
- compute.vpnGateways.listEffectiveTags
- compute.vpnGateways.listTagBindings
- compute.vpnTunnels.get
- compute.vpnTunnels.list
- compute.vpnTunnels.listEffectiveTags
- compute.vpnTunnels.listTagBindings
- compute.zones.get
- compute.zones.list
- dataform.locations.get
- dataform.locations.list
- dataform.repositories.create
- dataform.repositories.list
- dataproc.autoscalingPolicies.create
- dataproc.autoscalingPolicies.delete
- dataproc.autoscalingPolicies.get
- dataproc.autoscalingPolicies.list
- dataproc.autoscalingPolicies.update
- dataproc.autoscalingPolicies.use
- dataproc.batches.analyze
- dataproc.batches.cancel
- dataproc.batches.create
- dataproc.batches.delete
- dataproc.batches.get
- dataproc.batches.list
- dataproc.batches.sparkApplicationRead
- dataproc.clusters.create
- dataproc.clusters.delete
- dataproc.clusters.get
- dataproc.clusters.list
- dataproc.clusters.start
- dataproc.clusters.stop
- dataproc.clusters.update
- dataproc.clusters.use
- dataproc.jobs.cancel
- dataproc.jobs.create
- dataproc.jobs.delete
- dataproc.jobs.get
- dataproc.jobs.list
- dataproc.jobs.update
- dataproc.nodeGroups.create
- dataproc.nodeGroups.get
- dataproc.nodeGroups.update
- dataproc.operations.cancel
- dataproc.operations.delete
- dataproc.operations.get
- dataproc.operations.list
- dataproc.sessionTemplates.create
- dataproc.sessionTemplates.delete
- dataproc.sessionTemplates.get
- dataproc.sessionTemplates.list
- dataproc.sessionTemplates.update
- dataproc.sessions.create
- dataproc.sessions.delete
- dataproc.sessions.get
- dataproc.sessions.list
- dataproc.sessions.sparkApplicationRead
- dataproc.sessions.terminate
- dataproc.workflowTemplates.create
- dataproc.workflowTemplates.delete
- dataproc.workflowTemplates.get
- dataproc.workflowTemplates.instantiate
- dataproc.workflowTemplates.instantiateInline
- dataproc.workflowTemplates.list
- dataproc.workflowTemplates.update
- dataprocrm.nodePools.create
- dataprocrm.nodePools.delete
- dataprocrm.nodePools.deleteNodes
- dataprocrm.nodePools.get
- dataprocrm.nodePools.list
- dataprocrm.nodePools.resize
- dataprocrm.nodes.get
- dataprocrm.nodes.heartbeat
- dataprocrm.nodes.list
- dataprocrm.nodes.update
- dataprocrm.operations.get
- dataprocrm.operations.list
- dataprocrm.workloads.cancel
- dataprocrm.workloads.create
- dataprocrm.workloads.delete
- dataprocrm.workloads.get
- dataprocrm.workloads.list
- dns.managedZones.create
- dns.managedZones.delete
- dns.managedZones.get
- dns.managedZones.list
- dns.networks.bindPrivateDNSZone
- dns.networks.targetWithPeeringZone
- firebase.projects.get
- monitoring.metricDescriptors.create
- monitoring.metricDescriptors.get
- monitoring.metricDescriptors.list
- monitoring.monitoredResourceDescriptors.get
- monitoring.monitoredResourceDescriptors.list
- monitoring.timeSeries.create
- monitoring.timeSeries.list
- networkconnectivity.internalRanges.get
- networkconnectivity.internalRanges.list
- networkconnectivity.locations.get
- networkconnectivity.locations.list
- networkconnectivity.operations.get
- networkconnectivity.operations.list
- networkconnectivity.policyBasedRoutes.get
- networkconnectivity.policyBasedRoutes.list
- networkmanagement.connectivitytests.get
- networkmanagement.connectivitytests.list
- networksecurity.addressGroups.get
- networksecurity.addressGroups.list
- networksecurity.authorizationPolicies.get
- networksecurity.authorizationPolicies.list
- networksecurity.authzPolicies.get
- networksecurity.authzPolicies.list
- networksecurity.clientTlsPolicies.get
- networksecurity.clientTlsPolicies.list
- networksecurity.firewallEndpointAssociations.get
- networksecurity.firewallEndpointAssociations.list
- networksecurity.firewallEndpoints.get
- networksecurity.firewallEndpoints.list
- networksecurity.gatewaySecurityPolicies.get
- networksecurity.gatewaySecurityPolicies.list
- networksecurity.gatewaySecurityPolicyRules.get
- networksecurity.gatewaySecurityPolicyRules.list
- networksecurity.locations.get
- networksecurity.locations.list
- networksecurity.operations.get
- networksecurity.operations.list
- networksecurity.securityProfileGroups.get
- networksecurity.securityProfileGroups.list
- networksecurity.securityProfiles.get
- networksecurity.securityProfiles.list
- networksecurity.serverTlsPolicies.get
- networksecurity.serverTlsPolicies.list
- networksecurity.tlsInspectionPolicies.get
- networksecurity.tlsInspectionPolicies.list
- networksecurity.urlLists.get
- networksecurity.urlLists.list
- networkservices.authzExtensions.get
- networkservices.authzExtensions.list
- networkservices.endpointPolicies.get
- networkservices.endpointPolicies.list
- networkservices.gateways.get
- networkservices.gateways.list
- networkservices.grpcRoutes.get
- networkservices.grpcRoutes.list
- networkservices.httpFilters.get
- networkservices.httpFilters.list
- networkservices.httpRoutes.get
- networkservices.httpRoutes.list
- networkservices.httpfilters.get
- networkservices.httpfilters.list
- networkservices.lbRouteExtensions.get
- networkservices.lbRouteExtensions.list
- networkservices.lbTrafficExtensions.get
- networkservices.lbTrafficExtensions.list
- networkservices.locations.get
- networkservices.locations.list
- networkservices.meshes.get
- networkservices.meshes.list
- networkservices.operations.get
- networkservices.operations.list
- networkservices.route_views.get
- networkservices.route_views.list
- networkservices.serviceBindings.get
- networkservices.serviceBindings.list
- networkservices.serviceLbPolicies.get
- networkservices.serviceLbPolicies.list
- networkservices.tcpRoutes.get
- networkservices.tcpRoutes.list
- networkservices.tlsRoutes.get
- networkservices.tlsRoutes.list
- networkservices.wasmPlugins.get
- networkservices.wasmPlugins.list
- orgpolicy.policy.get
- recommender.iamPolicyInsights.get
- recommender.iamPolicyInsights.list
- recommender.iamPolicyInsights.update
- recommender.iamPolicyRecommendations.get
- recommender.iamPolicyRecommendations.list
- recommender.iamPolicyRecommendations.update
- recommender.storageBucketSoftDeleteInsights.get
- recommender.storageBucketSoftDeleteInsights.list
- recommender.storageBucketSoftDeleteInsights.update
- recommender.storageBucketSoftDeleteRecommendations.get
- recommender.storageBucketSoftDeleteRecommendations.list
- recommender.storageBucketSoftDeleteRecommendations.update
- resourcemanager.hierarchyNodes.listEffectiveTags
- resourcemanager.projects.get
- resourcemanager.projects.list
- servicenetworking.services.get
- serviceusage.quotas.get
- serviceusage.services.get
- serviceusage.services.list
- spanner.databaseOperations.cancel
- spanner.databaseOperations.get
- spanner.databaseOperations.list
- spanner.databases.beginOrRollbackReadWriteTransaction
- spanner.databases.beginPartitionedDmlTransaction
- spanner.databases.beginReadOnlyTransaction
- spanner.databases.changequorum
- spanner.databases.getDdl
- spanner.databases.list
- spanner.databases.partitionQuery
- spanner.databases.partitionRead
- spanner.databases.read
- spanner.databases.select
- spanner.databases.updateDdl
- spanner.databases.updateTag
- spanner.databases.write
- spanner.instanceConfigs.get
- spanner.instanceConfigs.list
- spanner.instancePartitions.get
- spanner.instancePartitions.list
- spanner.instances.get
- spanner.instances.list
- spanner.instances.listEffectiveTags
- spanner.instances.listTagBindings
- spanner.sessions.create
- spanner.sessions.delete
- spanner.sessions.get
- spanner.sessions.list
- storage.anywhereCaches.create
- storage.anywhereCaches.disable
- storage.anywhereCaches.get
- storage.anywhereCaches.list
- storage.anywhereCaches.pause
- storage.anywhereCaches.resume
- storage.anywhereCaches.update
- storage.bucketOperations.cancel
- storage.bucketOperations.get
- storage.bucketOperations.list
- storage.buckets.create
- storage.buckets.createTagBinding
- storage.buckets.delete
- storage.buckets.deleteTagBinding
- storage.buckets.enableObjectRetention
- storage.buckets.get
- storage.buckets.getIamPolicy
- storage.buckets.getIpFilter
- storage.buckets.getObjectInsights
- storage.buckets.list
- storage.buckets.listEffectiveTags
- storage.buckets.listTagBindings
- storage.buckets.restore
- storage.buckets.setIamPolicy
- storage.buckets.setIpFilter
- storage.buckets.update
- storage.folders.create
- storage.folders.delete
- storage.folders.get
- storage.folders.list
- storage.folders.rename
- storage.managedFolders.create
- storage.managedFolders.delete
- storage.managedFolders.get
- storage.managedFolders.getIamPolicy
- storage.managedFolders.list
- storage.managedFolders.setIamPolicy
- storage.managementHubs.get
- storage.managementHubs.update
- storage.multipartUploads.abort
- storage.multipartUploads.create
- storage.multipartUploads.list
- storage.multipartUploads.listParts
- storage.objects.create
- storage.objects.delete
- storage.objects.get
- storage.objects.getIamPolicy
- storage.objects.list
- storage.objects.overrideUnlockedRetention
- storage.objects.restore
- storage.objects.setIamPolicy
- storage.objects.setRetention
- storage.objects.update
- trafficdirector.networks.getConfigs
- trafficdirector.networks.reportMetrics