IAM Scope — Referência Multi-Cloud de IAM

Tier

Admin

Categoria

Database

Escopo

project

Privilégios

Role IDroles/bigtable.admin

Esta é uma role privilegiada — concede capacidades de controle elevado. Aplique o princípio do menor privilégio e monitore atribuições via Cloud Audit Logs.

Admin

Administrative control over a service, may include IAM

Descrição

Full control of Cloud Bigtable: instances, clusters, tables, and IAM.

Privilégios / Capacidades(5)

Create and delete Bigtable instances and clusters

Manage tables and column families

Read and write all data

Set IAM policies

Manage backups

Role Definition (JSON)

{
  "name": "roles/bigtable.admin",
  "title": "Bigtable Administrator",
  "description": "Full control of Cloud Bigtable: instances, clusters, tables, and IAM.",
  "stage": "GA",
  "includedPermissions": [
    "Create and delete Bigtable instances and clusters",
    "Manage tables and column families",
    "Read and write all data",
    "Set IAM policies",
    "Manage backups"
  ]

Roles relacionadasDatabase

Cloud SQL Admin

Full control of all Cloud SQL resources including creating and deleting instances.

Cloud SQL Editor

Full access to manage Cloud SQL instances excluding delete and IAM policy changes.

Cloud SQL Viewer

Read-only access to view Cloud SQL instance configurations and metadata.

Cloud SQL Client

Connect to Cloud SQL instances via Cloud SQL Auth Proxy for application connections.

Cloud SQL Instance User

Docs GCP