BigQuery Data Policy roles and permissions

This page lists the IAM roles and permissions for BigQuery Data Policy. Tosearch through all roles and permissions, see therole andpermission index.

BigQuery Data Policy roles

RolePermissions

BigQuery Data Policy Admin

(roles/bigquerydatapolicy.admin)

Role for managing Data Policies in BigQuery

This role can only be granted on Resource Manager resources (projects, folders, andorganizations).

bigquery.dataPolicies.attach

bigquery.dataPolicies.create

bigquery.dataPolicies.delete

bigquery.dataPolicies.get

bigquery.dataPolicies.getIamPolicy

bigquery.dataPolicies.list

bigquery.dataPolicies.setIamPolicy

bigquery.dataPolicies.update

Masked Reader

(roles/bigquerydatapolicy.maskedReader)

Masked read access to sub-resources tagged by the policy tag associated with a data policy, forexample, BigQuery columns

This role can only be granted on Resource Manager resources (projects, folders, andorganizations).

bigquery.dataPolicies.maskedGet

Raw Data ReaderBeta

(roles/bigquerydatapolicy.rawDataReader)

Raw read access to sub-resources associated with a data policy, for example, BigQuery columns

This role can only be granted on Resource Manager resources (projects, folders, andorganizations).

bigquery.dataPolicies.getRawData

BigQuery Data Policy Viewer

(roles/bigquerydatapolicy.viewer)

Role for viewing Data Policies in BigQuery

This role can only be granted on Resource Manager resources (projects, folders, andorganizations).

bigquery.dataPolicies.get

bigquery.dataPolicies.list

BigQuery Data Policy permissions

There are no IAM permissions for this service.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-02-18 UTC.