Datastream roles and permissions

This page lists the IAM roles and permissions for Datastream. To search through all roles and permissions, see the role and permission index.

Datastream roles

Role Permissions

Role	Permissions
Datastream Admin (`roles/datastream.admin`) Full access to all Datastream resources.	`cloudkms.keyHandles.` `cloudkms.keyHandles.create` `cloudkms.keyHandles.get` `cloudkms.keyHandles.list` `cloudkms.operations.get` `cloudkms.projects.showEffectiveAutokeyConfig` `compute.networkAttachments.use` `datastream.` `datastream.connectionProfiles.create` `datastream.connectionProfiles.createTagBinding` `datastream.connectionProfiles.delete` `datastream.connectionProfiles.deleteTagBinding` `datastream.connectionProfiles.deriveDestinationSchema` `datastream.connectionProfiles.destinationTypes` `datastream.connectionProfiles.discover` `datastream.connectionProfiles.get` `datastream.connectionProfiles.getIamPolicy` `datastream.connectionProfiles.list` `datastream.connectionProfiles.listEffectiveTags` `datastream.connectionProfiles.listStaticServiceIps` `datastream.connectionProfiles.listTagBindings` `datastream.connectionProfiles.setIamPolicy` `datastream.connectionProfiles.sourceTypes` `datastream.connectionProfiles.update` `datastream.locations.fetchStaticIps` `datastream.locations.get` `datastream.locations.list` `datastream.objects.get` `datastream.objects.list` `datastream.objects.startBackfillJob` `datastream.objects.stopBackfillJob` `datastream.operations.cancel` `datastream.operations.delete` `datastream.operations.get` `datastream.operations.list` `datastream.privateConnections.create` `datastream.privateConnections.createTagBinding` `datastream.privateConnections.delete` `datastream.privateConnections.deleteTagBinding` `datastream.privateConnections.get` `datastream.privateConnections.getIamPolicy` `datastream.privateConnections.list` `datastream.privateConnections.listEffectiveTags` `datastream.privateConnections.listTagBindings` `datastream.privateConnections.setIamPolicy` `datastream.routes.create` `datastream.routes.delete` `datastream.routes.get` `datastream.routes.getIamPolicy` `datastream.routes.list` `datastream.routes.setIamPolicy` `datastream.streams.computeState` `datastream.streams.create` `datastream.streams.createTagBinding` `datastream.streams.delete` `datastream.streams.deleteTagBinding` `datastream.streams.fetchErrors` `datastream.streams.get` `datastream.streams.getIamPolicy` `datastream.streams.list` `datastream.streams.listEffectiveTags` `datastream.streams.listTagBindings` `datastream.streams.pause` `datastream.streams.resume` `datastream.streams.setIamPolicy` `datastream.streams.start` `datastream.streams.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Datastream Viewer (`roles/datastream.viewer`) Read-only access to all Datastream resources.	`datastream.connectionProfiles.deriveDestinationSchema` `datastream.connectionProfiles.destinationTypes` `datastream.connectionProfiles.discover` `datastream.connectionProfiles.get` `datastream.connectionProfiles.getIamPolicy` `datastream.connectionProfiles.list` `datastream.connectionProfiles.listEffectiveTags` `datastream.connectionProfiles.listStaticServiceIps` `datastream.connectionProfiles.listTagBindings` `datastream.connectionProfiles.sourceTypes` `datastream.locations.*` `datastream.locations.fetchStaticIps` `datastream.locations.get` `datastream.locations.list` `datastream.objects.get` `datastream.objects.list` `datastream.operations.get` `datastream.operations.list` `datastream.privateConnections.get` `datastream.privateConnections.getIamPolicy` `datastream.privateConnections.list` `datastream.privateConnections.listEffectiveTags` `datastream.privateConnections.listTagBindings` `datastream.routes.get` `datastream.routes.getIamPolicy` `datastream.routes.list` `datastream.streams.fetchErrors` `datastream.streams.get` `datastream.streams.getIamPolicy` `datastream.streams.list` `datastream.streams.listEffectiveTags` `datastream.streams.listTagBindings` `resourcemanager.projects.get` `resourcemanager.projects.list`
Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Permissions needed for datastream to write to BigQuery.	`bigquery.connections.delegate` `bigquery.connections.get` `bigquery.datasets.create` `bigquery.datasets.get` `bigquery.jobs.create` `bigquery.jobs.delete` `bigquery.jobs.get` `bigquery.jobs.list` `bigquery.jobs.update` `bigquery.tables.create` `bigquery.tables.get` `bigquery.tables.getData` `bigquery.tables.list` `bigquery.tables.update` `bigquery.tables.updateData` `datastream.connectionProfiles.create` `datastream.connectionProfiles.delete` `datastream.connectionProfiles.deriveDestinationSchema` `datastream.connectionProfiles.destinationTypes` `datastream.connectionProfiles.discover` `datastream.connectionProfiles.get` `datastream.connectionProfiles.getIamPolicy` `datastream.connectionProfiles.list` `datastream.connectionProfiles.listEffectiveTags` `datastream.connectionProfiles.listStaticServiceIps` `datastream.connectionProfiles.listTagBindings` `datastream.connectionProfiles.sourceTypes` `datastream.connectionProfiles.update` `datastream.locations.` `datastream.locations.fetchStaticIps` `datastream.locations.get` `datastream.locations.list` `datastream.objects.` `datastream.objects.get` `datastream.objects.list` `datastream.objects.startBackfillJob` `datastream.objects.stopBackfillJob` `datastream.operations.*` `datastream.operations.cancel` `datastream.operations.delete` `datastream.operations.get` `datastream.operations.list` `datastream.privateConnections.create` `datastream.privateConnections.delete` `datastream.privateConnections.get` `datastream.privateConnections.getIamPolicy` `datastream.privateConnections.list` `datastream.privateConnections.listEffectiveTags` `datastream.privateConnections.listTagBindings` `datastream.routes.create` `datastream.routes.delete` `datastream.routes.get` `datastream.routes.getIamPolicy` `datastream.routes.list` `datastream.streams.computeState` `datastream.streams.create` `datastream.streams.delete` `datastream.streams.fetchErrors` `datastream.streams.get` `datastream.streams.getIamPolicy` `datastream.streams.list` `datastream.streams.listEffectiveTags` `datastream.streams.listTagBindings` `datastream.streams.pause` `datastream.streams.resume` `datastream.streams.start` `datastream.streams.update`

Datastream Admin

(roles/datastream.admin)

Full access to all Datastream resources.

cloudkms.keyHandles.*

cloudkms.keyHandles.create
cloudkms.keyHandles.get
cloudkms.keyHandles.list

cloudkms.operations.get

cloudkms.projects.showEffectiveAutokeyConfig

compute.networkAttachments.use

datastream.*

datastream.connectionProfiles.create
datastream.connectionProfiles.createTagBinding
datastream.connectionProfiles.delete
datastream.connectionProfiles.deleteTagBinding
datastream.connectionProfiles.deriveDestinationSchema
datastream.connectionProfiles.destinationTypes
datastream.connectionProfiles.discover
datastream.connectionProfiles.get
datastream.connectionProfiles.getIamPolicy
datastream.connectionProfiles.list
datastream.connectionProfiles.listEffectiveTags
datastream.connectionProfiles.listStaticServiceIps
datastream.connectionProfiles.listTagBindings
datastream.connectionProfiles.setIamPolicy
datastream.connectionProfiles.sourceTypes
datastream.connectionProfiles.update
datastream.locations.fetchStaticIps
datastream.locations.get
datastream.locations.list
datastream.objects.get
datastream.objects.list
datastream.objects.startBackfillJob
datastream.objects.stopBackfillJob
datastream.operations.cancel
datastream.operations.delete
datastream.operations.get
datastream.operations.list
datastream.privateConnections.create
datastream.privateConnections.createTagBinding
datastream.privateConnections.delete
datastream.privateConnections.deleteTagBinding
datastream.privateConnections.get
datastream.privateConnections.getIamPolicy
datastream.privateConnections.list
datastream.privateConnections.listEffectiveTags
datastream.privateConnections.listTagBindings
datastream.privateConnections.setIamPolicy
datastream.routes.create
datastream.routes.delete
datastream.routes.get
datastream.routes.getIamPolicy
datastream.routes.list
datastream.routes.setIamPolicy
datastream.streams.computeState
datastream.streams.create
datastream.streams.createTagBinding
datastream.streams.delete
datastream.streams.deleteTagBinding
datastream.streams.fetchErrors
datastream.streams.get
datastream.streams.getIamPolicy
datastream.streams.list
datastream.streams.listEffectiveTags
datastream.streams.listTagBindings
datastream.streams.pause
datastream.streams.resume
datastream.streams.setIamPolicy
datastream.streams.start
datastream.streams.update

resourcemanager.projects.get

resourcemanager.projects.list

Datastream Viewer

(roles/datastream.viewer)

Read-only access to all Datastream resources.

datastream.connectionProfiles.deriveDestinationSchema

datastream.connectionProfiles.destinationTypes

datastream.connectionProfiles.discover

datastream.connectionProfiles.get

datastream.connectionProfiles.getIamPolicy

datastream.connectionProfiles.list

datastream.connectionProfiles.listEffectiveTags

datastream.connectionProfiles.listStaticServiceIps

datastream.connectionProfiles.listTagBindings

datastream.connectionProfiles.sourceTypes

datastream.locations.*

datastream.locations.fetchStaticIps
datastream.locations.get
datastream.locations.list

datastream.objects.get

datastream.objects.list

datastream.operations.get

datastream.operations.list

datastream.privateConnections.get

datastream.privateConnections.getIamPolicy

datastream.privateConnections.list

datastream.privateConnections.listEffectiveTags

datastream.privateConnections.listTagBindings

datastream.routes.get

datastream.routes.getIamPolicy

datastream.routes.list

datastream.streams.fetchErrors

datastream.streams.get

datastream.streams.getIamPolicy

datastream.streams.list

datastream.streams.listEffectiveTags

datastream.streams.listTagBindings

resourcemanager.projects.get

resourcemanager.projects.list

Datastream Bigquery Writer

(roles/datastream.bigqueryWriter)

Permissions needed for datastream to write to BigQuery.

bigquery.connections.delegate

bigquery.connections.get

bigquery.datasets.create

bigquery.datasets.get

bigquery.jobs.create

bigquery.jobs.delete

bigquery.jobs.get

bigquery.jobs.list

bigquery.jobs.update

bigquery.tables.create

bigquery.tables.get

bigquery.tables.getData

bigquery.tables.list

bigquery.tables.update

bigquery.tables.updateData

datastream.connectionProfiles.create

datastream.connectionProfiles.delete

datastream.connectionProfiles.deriveDestinationSchema

datastream.connectionProfiles.destinationTypes

datastream.connectionProfiles.discover

datastream.connectionProfiles.get

datastream.connectionProfiles.getIamPolicy

datastream.connectionProfiles.list

datastream.connectionProfiles.listEffectiveTags

datastream.connectionProfiles.listStaticServiceIps

datastream.connectionProfiles.listTagBindings

datastream.connectionProfiles.sourceTypes

datastream.connectionProfiles.update

datastream.locations.*

datastream.locations.fetchStaticIps
datastream.locations.get
datastream.locations.list

datastream.objects.*

datastream.objects.get
datastream.objects.list
datastream.objects.startBackfillJob
datastream.objects.stopBackfillJob

datastream.operations.*

datastream.operations.cancel
datastream.operations.delete
datastream.operations.get
datastream.operations.list

datastream.privateConnections.create

datastream.privateConnections.delete

datastream.privateConnections.get

datastream.privateConnections.getIamPolicy

datastream.privateConnections.list

datastream.privateConnections.listEffectiveTags

datastream.privateConnections.listTagBindings

datastream.routes.create

datastream.routes.delete

datastream.routes.get

datastream.routes.getIamPolicy

datastream.routes.list

datastream.streams.computeState

datastream.streams.create

datastream.streams.delete

datastream.streams.fetchErrors

datastream.streams.get

datastream.streams.getIamPolicy

datastream.streams.list

datastream.streams.listEffectiveTags

datastream.streams.listTagBindings

datastream.streams.pause

datastream.streams.resume

datastream.streams.start

datastream.streams.update

Service agent roles

Service agent roles should only be granted to service agents.

Role Permissions

Role	Permissions
Datastream Service Agent (`roles/datastream.serviceAgent`) Grants Cloud Datastream permissions to write data in the user project. Warning: Do not grant service agent roles to any principals except service agents.	`bigquery.connections.delegate` `bigquery.connections.get` `bigquery.datasets.create` `bigquery.datasets.get` `bigquery.jobs.create` `bigquery.jobs.delete` `bigquery.jobs.get` `bigquery.jobs.list` `bigquery.jobs.update` `bigquery.routines.get` `bigquery.routines.list` `bigquery.tables.create` `bigquery.tables.get` `bigquery.tables.getData` `bigquery.tables.list` `bigquery.tables.update` `bigquery.tables.updateData` `compute.globalAddresses.create` `compute.globalAddresses.createInternal` `compute.globalAddresses.delete` `compute.globalAddresses.deleteInternal` `compute.globalAddresses.get` `compute.globalOperations.get` `compute.networkAttachments.get` `compute.networkAttachments.list` `compute.networks.addPeering` `compute.networks.get` `compute.networks.listPeeringRoutes` `compute.networks.removePeering` `compute.networks.use` `compute.routes.get` `compute.routes.list` `compute.subnetworks.get` `compute.subnetworks.list` `monitoring.timeSeries.list` `pubsub.topics.publish` `spanner.databases.beginReadOnlyTransaction` `spanner.databases.getDdl` `spanner.databases.partitionQuery` `spanner.databases.partitionRead` `spanner.databases.read` `spanner.databases.select` `spanner.databases.useDataBoost` `spanner.databases.useRoleBasedAccess` `spanner.sessions.create` `spanner.sessions.delete` `spanner.sessions.get` `storage.buckets.get` `storage.objects.create` `storage.objects.get` `storage.objects.list`

Datastream Service Agent

(roles/datastream.serviceAgent)

Grants Cloud Datastream permissions to write data in the user project.

bigquery.connections.delegate

bigquery.connections.get

bigquery.datasets.create

bigquery.datasets.get

bigquery.jobs.create

bigquery.jobs.delete

bigquery.jobs.get

bigquery.jobs.list

bigquery.jobs.update

bigquery.routines.get

bigquery.routines.list

bigquery.tables.create

bigquery.tables.get

bigquery.tables.getData

bigquery.tables.list

bigquery.tables.update

bigquery.tables.updateData

compute.globalAddresses.create

compute.globalAddresses.createInternal

compute.globalAddresses.delete

compute.globalAddresses.deleteInternal

compute.globalAddresses.get

compute.globalOperations.get

compute.networkAttachments.get

compute.networkAttachments.list

compute.networks.addPeering

compute.networks.get

compute.networks.listPeeringRoutes

compute.networks.removePeering

compute.networks.use

compute.routes.get

compute.routes.list

compute.subnetworks.get

compute.subnetworks.list

monitoring.timeSeries.list

pubsub.topics.publish

spanner.databases.beginReadOnlyTransaction

spanner.databases.getDdl

spanner.databases.partitionQuery

spanner.databases.partitionRead

spanner.databases.read

spanner.databases.select

spanner.databases.useDataBoost

spanner.databases.useRoleBasedAccess

spanner.sessions.create

spanner.sessions.delete

spanner.sessions.get

storage.buckets.get

storage.objects.create

storage.objects.get

storage.objects.list

Datastream permissions

Permission	Included in roles
`datastream.connectionProfiles.create`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`) Writer (`roles/writer`)
`datastream.connectionProfiles.createTagBinding`	Owner (`roles/owner`) Datastream Admin (`roles/datastream.admin`) Tag User (`roles/resourcemanager.tagUser`) Admin (`roles/admin`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`)
`datastream.connectionProfiles.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`) Writer (`roles/writer`)
`datastream.connectionProfiles.deleteTagBinding`	Owner (`roles/owner`) Datastream Admin (`roles/datastream.admin`) Tag User (`roles/resourcemanager.tagUser`) Admin (`roles/admin`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`)
`datastream.connectionProfiles.deriveDestinationSchema`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.connectionProfiles.destinationTypes`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.connectionProfiles.discover`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.connectionProfiles.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.connectionProfiles.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.connectionProfiles.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.connectionProfiles.listEffectiveTags`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.connectionProfiles.listStaticServiceIps`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.connectionProfiles.listTagBindings`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.connectionProfiles.setIamPolicy`	Owner (`roles/owner`) Datastream Admin (`roles/datastream.admin`) Security Admin (`roles/iam.securityAdmin`) Admin (`roles/admin`)
`datastream.connectionProfiles.sourceTypes`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.connectionProfiles.update`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Writer (`roles/writer`)
`datastream.locations.fetchStaticIps`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.objects.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Support User (`roles/iam.supportUser`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.objects.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.objects.startBackfillJob`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`) Writer (`roles/writer`)
`datastream.objects.stopBackfillJob`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`) Writer (`roles/writer`)
`datastream.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Writer (`roles/writer`)
`datastream.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Writer (`roles/writer`)
`datastream.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Support User (`roles/iam.supportUser`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.privateConnections.create`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`) Writer (`roles/writer`)
`datastream.privateConnections.createTagBinding`	Owner (`roles/owner`) Datastream Admin (`roles/datastream.admin`) Tag User (`roles/resourcemanager.tagUser`) Admin (`roles/admin`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`)
`datastream.privateConnections.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`) Writer (`roles/writer`)
`datastream.privateConnections.deleteTagBinding`	Owner (`roles/owner`) Datastream Admin (`roles/datastream.admin`) Tag User (`roles/resourcemanager.tagUser`) Admin (`roles/admin`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`)
`datastream.privateConnections.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.privateConnections.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.privateConnections.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.privateConnections.listEffectiveTags`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.privateConnections.listTagBindings`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.privateConnections.setIamPolicy`	Owner (`roles/owner`) Datastream Admin (`roles/datastream.admin`) Security Admin (`roles/iam.securityAdmin`) Admin (`roles/admin`)
`datastream.routes.create`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Writer (`roles/writer`)
`datastream.routes.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Writer (`roles/writer`)
`datastream.routes.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.routes.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.routes.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.routes.setIamPolicy`	Owner (`roles/owner`) Datastream Admin (`roles/datastream.admin`) Security Admin (`roles/iam.securityAdmin`) Admin (`roles/admin`)
`datastream.streams.computeState`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Writer (`roles/writer`)
`datastream.streams.create`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`) Writer (`roles/writer`)
`datastream.streams.createTagBinding`	Owner (`roles/owner`) Datastream Admin (`roles/datastream.admin`) Tag User (`roles/resourcemanager.tagUser`) Admin (`roles/admin`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`)
`datastream.streams.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`) Writer (`roles/writer`)
`datastream.streams.deleteTagBinding`	Owner (`roles/owner`) Datastream Admin (`roles/datastream.admin`) Tag User (`roles/resourcemanager.tagUser`) Admin (`roles/admin`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`)
`datastream.streams.fetchErrors`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.streams.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Support User (`roles/iam.supportUser`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.streams.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.streams.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.streams.listEffectiveTags`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.streams.listTagBindings`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Datastream Admin (`roles/datastream.admin`) Datastream Viewer (`roles/datastream.viewer`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Reader (`roles/reader`) Writer (`roles/writer`)
`datastream.streams.pause`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Writer (`roles/writer`)
`datastream.streams.resume`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Writer (`roles/writer`)
`datastream.streams.setIamPolicy`	Owner (`roles/owner`) Datastream Admin (`roles/datastream.admin`) Security Admin (`roles/iam.securityAdmin`) Admin (`roles/admin`)
`datastream.streams.start`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Writer (`roles/writer`)
`datastream.streams.update`	Owner (`roles/owner`) Editor (`roles/editor`) Datastream Admin (`roles/datastream.admin`) Admin (`roles/admin`) Datastream Bigquery Writer (`roles/datastream.bigqueryWriter`) Dataproc Metastore Managed Migration Admin (`roles/metastore.migrationAdmin`) Writer (`roles/writer`)

Datastream roles and permissions Stay organized with collections Save and categorize content based on your preferences.