Storage Insights roles and permissions

This page lists the IAM roles and permissions for Storage Insights. Tosearch through all roles and permissions, see therole andpermission index.

Storage Insights roles

Role Permissions

Role	Permissions
Storage Insights Admin (`roles/storageinsights.admin`) Full access to Storage Insights resources.	`resourcemanager.projects.get` `resourcemanager.projects.list` `storageinsights.*` `storageinsights.datasetConfigs.create` `storageinsights.datasetConfigs.delete` `storageinsights.datasetConfigs.get` `storageinsights.datasetConfigs.linkDataset` `storageinsights.datasetConfigs.list` `storageinsights.datasetConfigs.unlinkDataset` `storageinsights.datasetConfigs.update` `storageinsights.locations.get` `storageinsights.locations.list` `storageinsights.operations.cancel` `storageinsights.operations.delete` `storageinsights.operations.get` `storageinsights.operations.list` `storageinsights.reportConfigs.create` `storageinsights.reportConfigs.delete` `storageinsights.reportConfigs.get` `storageinsights.reportConfigs.list` `storageinsights.reportConfigs.update` `storageinsights.reportDetails.get` `storageinsights.reportDetails.list`
Storage Insights Analyst (`roles/storageinsights.analyst`) Data access to Storage Insights.	`resourcemanager.projects.get` `resourcemanager.projects.list` `storageinsights.datasetConfigs.get` `storageinsights.datasetConfigs.linkDataset` `storageinsights.datasetConfigs.list` `storageinsights.datasetConfigs.unlinkDataset` `storageinsights.locations.` `storageinsights.locations.get` `storageinsights.locations.list` `storageinsights.operations.get` `storageinsights.operations.list` `storageinsights.reportConfigs.get` `storageinsights.reportConfigs.list` `storageinsights.reportDetails.` `storageinsights.reportDetails.get` `storageinsights.reportDetails.list`
StorageInsights Service Agent (`roles/storageinsights.serviceAgent`) Permissions for Insights to write reports into customer project Warning: Do not grant service agent roles to any principals except service agents.	`bigquery.datasets.create` `serviceusage.services.use` `storageinsights.reportDetails.list`
Storage Insights Viewer (`roles/storageinsights.viewer`) Read-only access to Storage Insights resources.	`resourcemanager.projects.get` `resourcemanager.projects.list` `storageinsights.datasetConfigs.get` `storageinsights.datasetConfigs.list` `storageinsights.locations.` `storageinsights.locations.get` `storageinsights.locations.list` `storageinsights.operations.get` `storageinsights.operations.list` `storageinsights.reportConfigs.get` `storageinsights.reportConfigs.list` `storageinsights.reportDetails.` `storageinsights.reportDetails.get` `storageinsights.reportDetails.list`

Storage Insights Admin

(roles/storageinsights.admin)

Full access to Storage Insights resources.

resourcemanager.projects.get

resourcemanager.projects.list

storageinsights.*

storageinsights.datasetConfigs.create
storageinsights.datasetConfigs.delete
storageinsights.datasetConfigs.get
storageinsights.datasetConfigs.linkDataset
storageinsights.datasetConfigs.list
storageinsights.datasetConfigs.unlinkDataset
storageinsights.datasetConfigs.update
storageinsights.locations.get
storageinsights.locations.list
storageinsights.operations.cancel
storageinsights.operations.delete
storageinsights.operations.get
storageinsights.operations.list
storageinsights.reportConfigs.create
storageinsights.reportConfigs.delete
storageinsights.reportConfigs.get
storageinsights.reportConfigs.list
storageinsights.reportConfigs.update
storageinsights.reportDetails.get
storageinsights.reportDetails.list

Storage Insights Analyst

(roles/storageinsights.analyst)

Data access to Storage Insights.

resourcemanager.projects.get

resourcemanager.projects.list

storageinsights.datasetConfigs.get

storageinsights.datasetConfigs.linkDataset

storageinsights.datasetConfigs.list

storageinsights.datasetConfigs.unlinkDataset

storageinsights.locations.*

storageinsights.locations.get
storageinsights.locations.list

storageinsights.operations.get

storageinsights.operations.list

storageinsights.reportConfigs.get

storageinsights.reportConfigs.list

storageinsights.reportDetails.*

storageinsights.reportDetails.get
storageinsights.reportDetails.list

StorageInsights Service Agent

(roles/storageinsights.serviceAgent)

Permissions for Insights to write reports into customer project

Warning: Do not grant service agent roles to any principals except service agents.

bigquery.datasets.create

serviceusage.services.use

storageinsights.reportDetails.list

Storage Insights Viewer

(roles/storageinsights.viewer)

Read-only access to Storage Insights resources.

resourcemanager.projects.get

resourcemanager.projects.list

storageinsights.datasetConfigs.get

storageinsights.datasetConfigs.list

storageinsights.locations.*

storageinsights.locations.get
storageinsights.locations.list

storageinsights.operations.get

storageinsights.operations.list

storageinsights.reportConfigs.get

storageinsights.reportConfigs.list

storageinsights.reportDetails.*

storageinsights.reportDetails.get
storageinsights.reportDetails.list

Storage Insights permissions

Permission	Included in roles
`storageinsights.datasetConfigs.create`	Owner (`roles/owner`) Editor (`roles/editor`) Storage Insights Admin (`roles/storageinsights.admin`)
`storageinsights.datasetConfigs.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Storage Insights Admin (`roles/storageinsights.admin`)
`storageinsights.datasetConfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Storage Insights Admin (`roles/storageinsights.admin`) Storage Insights Analyst (`roles/storageinsights.analyst`) Storage Insights Viewer (`roles/storageinsights.viewer`)
`storageinsights.datasetConfigs.linkDataset`	Owner (`roles/owner`) Editor (`roles/editor`) Storage Insights Admin (`roles/storageinsights.admin`) Storage Insights Analyst (`roles/storageinsights.analyst`)
`storageinsights.datasetConfigs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Storage Insights Admin (`roles/storageinsights.admin`) Storage Insights Analyst (`roles/storageinsights.analyst`) Storage Insights Viewer (`roles/storageinsights.viewer`)
`storageinsights.datasetConfigs.unlinkDataset`	Owner (`roles/owner`) Editor (`roles/editor`) Storage Insights Admin (`roles/storageinsights.admin`) Storage Insights Analyst (`roles/storageinsights.analyst`)
`storageinsights.datasetConfigs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Storage Insights Admin (`roles/storageinsights.admin`)
`storageinsights.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Storage Insights Admin (`roles/storageinsights.admin`) Storage Insights Analyst (`roles/storageinsights.analyst`) Storage Insights Viewer (`roles/storageinsights.viewer`)
`storageinsights.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Storage Insights Admin (`roles/storageinsights.admin`) Storage Insights Analyst (`roles/storageinsights.analyst`) Storage Insights Viewer (`roles/storageinsights.viewer`)
`storageinsights.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Storage Insights Admin (`roles/storageinsights.admin`)
`storageinsights.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Storage Insights Admin (`roles/storageinsights.admin`)
`storageinsights.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Storage Insights Admin (`roles/storageinsights.admin`) Storage Insights Analyst (`roles/storageinsights.analyst`) Storage Insights Viewer (`roles/storageinsights.viewer`)
`storageinsights.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Storage Insights Admin (`roles/storageinsights.admin`) Storage Insights Analyst (`roles/storageinsights.analyst`) Storage Insights Viewer (`roles/storageinsights.viewer`)
`storageinsights.reportConfigs.create`	Owner (`roles/owner`) Editor (`roles/editor`) Storage Insights Admin (`roles/storageinsights.admin`)
`storageinsights.reportConfigs.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Storage Insights Admin (`roles/storageinsights.admin`)
`storageinsights.reportConfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Storage Insights Admin (`roles/storageinsights.admin`) Storage Insights Analyst (`roles/storageinsights.analyst`) Storage Insights Viewer (`roles/storageinsights.viewer`)
`storageinsights.reportConfigs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Storage Insights Admin (`roles/storageinsights.admin`) Storage Insights Analyst (`roles/storageinsights.analyst`) Storage Insights Viewer (`roles/storageinsights.viewer`)
`storageinsights.reportConfigs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Storage Insights Admin (`roles/storageinsights.admin`)
`storageinsights.reportDetails.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) Storage Insights Admin (`roles/storageinsights.admin`) Storage Insights Analyst (`roles/storageinsights.analyst`) Storage Insights Viewer (`roles/storageinsights.viewer`)
`storageinsights.reportDetails.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Storage Insights Admin (`roles/storageinsights.admin`) Storage Insights Analyst (`roles/storageinsights.analyst`) Storage Insights Viewer (`roles/storageinsights.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. StorageInsights Service Agent (`roles/storageinsights.serviceAgent`)

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-02-18 UTC.

Movatterモバイル変換

Storage Insights roles and permissions