Get hands-on experience with 20+ free Google Cloud products and $300 in free credit for new customers.

Can't see datasets and tables in the project even though I have admin access

Hello,

I'm wondering why can't I see data in the project even though I have admin access added.

Details:

I am a member of a group which has role roles/bigquery.admin assigned on the folder level. I thought with this role I will be able to manage and view all data in the projects under this folder. However this is not the case, I do not see datasets under those projects. Do I need different permissions or there is some other cause here?

Solved Solved
0 3 4,766
1 ACCEPTED SOLUTION

The roles/bigquery.admin role grants comprehensive permissions for BigQuery, including:

  • bigquery.datasets.create
  • bigquery.datasets.delete
  • bigquery.datasets.get
  • bigquery.datasets.getIamPolicy
  • bigquery.datasets.list
  • bigquery.datasets.setIamPolicy
  • bigquery.datasets.update
  • bigquery.tables.create
  • bigquery.tables.delete
  • bigquery.tables.get
  • bigquery.tables.getIamPolicy
  • bigquery.tables.list
  • bigquery.tables.setIamPolicy
  • bigquery.tables.update
  • bigquery.jobs.create
  • bigquery.jobs.get
  • bigquery.jobs.cancel
  • bigquery.jobs.list

These permissions allow you to manage datasets, tables, and jobs, and also view the metadata and data in those datasets and tables. If you have the roles/bigquery.admin role, you should inherently have the ability to view datasets and their data.

If you're unable to see datasets, the issue might be due to dataset-specific permissions, organization policies, or other factors.

For more granular access, like only viewing data, the bigquery.dataViewer role is appropriate. If you need to run queries but not manage resources, the bigquery.user role might be suitable.

For more information on BigQuery IAM roles and permissions, please refer to the official BigQuery documentation on IAM roles and permissions.

View solution in original post

3 REPLIES 3

The roles/bigquery.admin role grants comprehensive permissions for BigQuery, including:

  • bigquery.datasets.create
  • bigquery.datasets.delete
  • bigquery.datasets.get
  • bigquery.datasets.getIamPolicy
  • bigquery.datasets.list
  • bigquery.datasets.setIamPolicy
  • bigquery.datasets.update
  • bigquery.tables.create
  • bigquery.tables.delete
  • bigquery.tables.get
  • bigquery.tables.getIamPolicy
  • bigquery.tables.list
  • bigquery.tables.setIamPolicy
  • bigquery.tables.update
  • bigquery.jobs.create
  • bigquery.jobs.get
  • bigquery.jobs.cancel
  • bigquery.jobs.list

These permissions allow you to manage datasets, tables, and jobs, and also view the metadata and data in those datasets and tables. If you have the roles/bigquery.admin role, you should inherently have the ability to view datasets and their data.

If you're unable to see datasets, the issue might be due to dataset-specific permissions, organization policies, or other factors.

For more granular access, like only viewing data, the bigquery.dataViewer role is appropriate. If you need to run queries but not manage resources, the bigquery.user role might be suitable.

For more information on BigQuery IAM roles and permissions, please refer to the official BigQuery documentation on IAM roles and permissions.

did not work even after trying all the roles.

If using the bq command to list datasets, the default for max_results is only 50, and it doesn't warn if it truncates the results. 

Also,

"To list all datasets in a project, including hidden datasets, use the --all flag or the -a shortcut."

References:

 

https://cloud.google.com/bigquery/docs/reference/bq-cli-reference