Cloud SQL roles and permissions Stay organized with collections Save and categorize content based on your preferences.
This page lists the IAM roles and permissions for Cloud SQL. Tosearch through all roles and permissions, see therole andpermission index.
Cloud SQL roles
| Role | Permissions |
|---|---|
Cloud SQL Admin( Provides full control of Cloud SQL resources. Lowest-level resources where you can grant this role:
|
|
Cloud SQL Client( Provides connectivity access to Cloud SQL instances. Lowest-level resources where you can grant this role:
|
|
Cloud SQL Editor( Provides full control of existing Cloud SQL instances excludingmodifying users, SSL certificates or deleting resources. Lowest-level resources where you can grant this role:
|
|
Cloud SQL Instance User( Role allowing access to a Cloud SQL instance |
|
Cloud SQL Schema Viewer( Role allowing access to the Cloud SQL instance schema on Dataplex |
|
Cloud SQL Service Agent( Grants Cloud SQL access to services and APIs in the user project Warning: Do not grant service agent roles to any principals exceptservice agents. |
|
Cloud SQL Studio User( Role allowing access to Cloud SQL Studio |
|
Cloud SQL Viewer( Provides read-only access to Cloud SQL resources. Lowest-level resources where you can grant this role:
|
|
Cloud SQL permissions
| Permission | Included in roles |
|---|---|
| Owner ( Editor ( Cloud SQL Admin ( Cloud SQL Editor ( Databases Admin ( Dev Ops ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Databases Admin ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Viewer ( Cloud SQL Admin ( Cloud SQL Editor ( Cloud SQL Viewer ( Databases Admin ( Dev Ops ( Security Auditor ( Site Reliability Engineer ( Support User ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Viewer ( Cloud SQL Admin ( Cloud SQL Editor ( Cloud SQL Viewer ( Databases Admin ( Dev Ops ( Security Auditor ( Site Reliability Engineer ( Support User ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Viewer ( Cloud SQL Admin ( Cloud SQL Editor ( Cloud SQL Viewer ( Databases Admin ( Dev Ops ( Security Admin ( Security Auditor ( Security Reviewer ( Site Reliability Engineer ( Support User ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Cloud SQL Editor ( Databases Admin ( Dev Ops ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Cloud SQL Editor ( Databases Admin ( Dev Ops ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Databases Admin ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Viewer ( Cloud SQL Admin ( Cloud SQL Editor ( Cloud SQL Viewer ( Databases Admin ( Dev Ops ( Security Auditor ( Site Reliability Engineer ( Support User ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Viewer ( Cloud SQL Admin ( Cloud SQL Editor ( Cloud SQL Studio User ( Cloud SQL Viewer ( Data Scientist ( Databases Admin ( Dev Ops ( Security Admin ( Security Auditor ( Security Reviewer ( Site Reliability Engineer ( Support User ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Cloud SQL Editor ( Databases Admin ( Dev Ops ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Cloud SQL Editor ( Databases Admin ( Dev Ops ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Cloud SQL Editor ( Databases Admin ( Dev Ops ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Databases Admin ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Cloud SQL Client ( Cloud SQL Editor ( DLP Organization Data Profiles Driver ( DLP Project Data Profiles Driver ( Data Scientist ( Databases Admin ( Dev Ops ( Dataproc Metastore Managed Migration Admin ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Databases Admin ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Viewer ( Backup and DR Cloud SQL Operator ( Cloud SQL Admin ( Databases Admin ( Support User ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Cloud SQL Admin ( DLP Organization Data Profiles Driver ( DLP Project Data Profiles Driver ( Databases Admin ( Tag User ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Databases Admin ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Cloud SQL Admin ( DLP Organization Data Profiles Driver ( DLP Project Data Profiles Driver ( Databases Admin ( Tag User ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Databases Admin ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Cloud SQL Instance User ( Cloud SQL Studio User ( DLP Organization Data Profiles Driver ( DLP Project Data Profiles Driver ( Data Scientist ( Databases Admin ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Viewer ( Cloud SQL Admin ( Cloud SQL Editor ( Cloud SQL Viewer ( Databases Admin ( Dev Ops ( Security Auditor ( Site Reliability Engineer ( Support User ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Cloud SQL Editor ( Databases Admin ( Dev Ops ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Viewer ( Backup and DR Cloud SQL Operator ( Cloud SQL Admin ( Cloud SQL Client ( Cloud SQL Editor ( Cloud SQL Instance User ( Cloud SQL Studio User ( Cloud SQL Viewer ( DLP Organization Data Profiles Driver ( DLP Project Data Profiles Driver ( Data Scientist ( Databases Admin ( Dev Ops ( Security Auditor ( Site Reliability Engineer ( Support User ( Dataproc Metastore Managed Migration Admin ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Viewer ( Cloud SQL Admin ( Cloud SQL Editor ( Cloud SQL Viewer ( Databases Admin ( Dev Ops ( Security Auditor ( Site Reliability Engineer ( Support User ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Databases Admin ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Viewer ( Cloud SQL Admin ( Cloud SQL Editor ( Cloud SQL Viewer ( Databases Admin ( Dev Ops ( Security Admin ( Security Auditor ( Security Reviewer ( Site Reliability Engineer ( Support User ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Viewer ( Cloud SQL Admin ( Cloud SQL Editor ( Cloud SQL Viewer ( DLP Organization Data Profiles Driver ( DLP Project Data Profiles Driver ( Databases Admin ( Dev Ops ( Security Auditor ( Site Reliability Engineer ( Support User ( Tag User ( Tag Viewer ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Viewer ( Cloud SQL Admin ( Cloud SQL Editor ( Cloud SQL Viewer ( Databases Admin ( Dev Ops ( Security Auditor ( Site Reliability Engineer ( Support User ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Viewer ( Cloud SQL Admin ( Cloud SQL Editor ( Cloud SQL Viewer ( Databases Admin ( Dev Ops ( Security Auditor ( Site Reliability Engineer ( Support User ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Viewer ( Cloud SQL Admin ( Cloud SQL Editor ( Cloud SQL Viewer ( DLP Organization Data Profiles Driver ( DLP Project Data Profiles Driver ( Databases Admin ( Dev Ops ( Security Auditor ( Site Reliability Engineer ( Support User ( Tag User ( Tag Viewer ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Cloud SQL Instance User ( Cloud SQL Studio User ( DLP Organization Data Profiles Driver ( DLP Project Data Profiles Driver ( Data Scientist ( Databases Admin ( Dataproc Metastore Managed Migration Admin ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Cloud SQL Admin ( Databases Admin ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Cloud SQL Editor ( Databases Admin ( Dev Ops ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Cloud SQL Editor ( Databases Admin ( Dev Ops ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Viewer ( Cloud SQL Admin ( Cloud SQL Editor ( Cloud SQL Viewer ( Databases Admin ( Dev Ops ( Security Auditor ( Site Reliability Engineer ( Support User ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Databases Admin ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Cloud SQL Editor ( Databases Admin ( Dev Ops ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Cloud SQL Editor ( Databases Admin ( Dev Ops ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Databases Admin ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Cloud SQL Editor ( Databases Admin ( Dev Ops ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Databases Admin ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Cloud SQL Editor ( Databases Admin ( Dev Ops ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Cloud SQL Editor ( Databases Admin ( Dev Ops ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Databases Admin ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Databases Admin ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Cloud SQL Editor ( Databases Admin ( Dev Ops ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Cloud SQL Editor ( Databases Admin ( Dev Ops ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Databases Admin ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Viewer ( Cloud SQL Admin ( Cloud SQL Editor ( Cloud SQL Schema Viewer ( Databases Admin ( Dev Ops ( Support User ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Databases Admin ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Databases Admin ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Viewer ( Cloud SQL Admin ( Cloud SQL Editor ( Cloud SQL Viewer ( Databases Admin ( Dev Ops ( Security Auditor ( Site Reliability Engineer ( Support User ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Viewer ( Cloud SQL Admin ( Cloud SQL Editor ( Cloud SQL Viewer ( Databases Admin ( Dev Ops ( Security Admin ( Security Auditor ( Security Reviewer ( Site Reliability Engineer ( Support User ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Databases Admin ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Databases Admin ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Viewer ( Cloud SQL Admin ( Cloud SQL Editor ( Cloud SQL Viewer ( Databases Admin ( Dev Ops ( Security Auditor ( Site Reliability Engineer ( Support User ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Viewer ( Cloud SQL Admin ( Cloud SQL Editor ( Cloud SQL Studio User ( Cloud SQL Viewer ( Data Scientist ( Databases Admin ( Dev Ops ( Security Admin ( Security Auditor ( Security Reviewer ( Site Reliability Engineer ( Support User ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
| Owner ( Editor ( Cloud SQL Admin ( Databases Admin ( Service agent roles Warning: Don't grant service agent roles to any principals exceptservice agents.
|
Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-02-05 UTC.