BigQuery sharing roles and permissions

This page lists the IAM roles and permissions for BigQuery sharing. Tosearch through all roles and permissions, see therole andpermission index.

BigQuery sharing roles

RolePermissions

Analytics Hub Admin

(roles/analyticshub.admin)

Administer Data Exchanges and Listings

analyticshub.dataExchanges.create

analyticshub.dataExchanges.delete

analyticshub.dataExchanges.get

analyticshub.dataExchanges.getIamPolicy

analyticshub.dataExchanges.list

analyticshub.dataExchanges.setIamPolicy

analyticshub.dataExchanges.update

analyticshub.dataExchanges.viewSubscriptions

analyticshub.listings.create

analyticshub.listings.delete

analyticshub.listings.get

analyticshub.listings.getIamPolicy

analyticshub.listings.list

analyticshub.listings.setIamPolicy

analyticshub.listings.update

analyticshub.listings.viewSubscriptions

analyticshub.subscriptions.*

  • analyticshub.subscriptions.create
  • analyticshub.subscriptions.delete
  • analyticshub.subscriptions.get
  • analyticshub.subscriptions.list
  • analyticshub.subscriptions.update

resourcemanager.projects.get

resourcemanager.projects.list

Analytics Hub Listing Admin

(roles/analyticshub.listingAdmin)

Grants full control over the Listing, including updating, deleting and setting ACLs

analyticshub.dataExchanges.get

analyticshub.dataExchanges.getIamPolicy

analyticshub.dataExchanges.list

analyticshub.listings.delete

analyticshub.listings.get

analyticshub.listings.getIamPolicy

analyticshub.listings.list

analyticshub.listings.setIamPolicy

analyticshub.listings.update

analyticshub.listings.viewSubscriptions

resourcemanager.projects.get

resourcemanager.projects.list

Analytics Hub Publisher

(roles/analyticshub.publisher)

Can publish to Data Exchanges thus creating Listings

analyticshub.dataExchanges.get

analyticshub.dataExchanges.getIamPolicy

analyticshub.dataExchanges.list

analyticshub.listings.create

analyticshub.listings.get

analyticshub.listings.getIamPolicy

analyticshub.listings.list

resourcemanager.projects.get

resourcemanager.projects.list

Analytics Hub Subscriber

(roles/analyticshub.subscriber)

Can browse Data Exchanges and subscribe to Listings

analyticshub.dataExchanges.get

analyticshub.dataExchanges.getIamPolicy

analyticshub.dataExchanges.list

analyticshub.dataExchanges.subscribe

analyticshub.listings.get

analyticshub.listings.getIamPolicy

analyticshub.listings.list

analyticshub.listings.subscribe

resourcemanager.projects.get

resourcemanager.projects.list

Analytics Hub Subscription Owner

(roles/analyticshub.subscriptionOwner)

Grants full control over the Subscription, including updating and deleting

analyticshub.dataExchanges.get

analyticshub.dataExchanges.getIamPolicy

analyticshub.dataExchanges.list

analyticshub.listings.get

analyticshub.listings.getIamPolicy

analyticshub.listings.list

analyticshub.subscriptions.*

  • analyticshub.subscriptions.create
  • analyticshub.subscriptions.delete
  • analyticshub.subscriptions.get
  • analyticshub.subscriptions.list
  • analyticshub.subscriptions.update

resourcemanager.projects.get

resourcemanager.projects.list

Analytics Hub Viewer

(roles/analyticshub.viewer)

Can browse Data Exchanges and Listings

analyticshub.dataExchanges.get

analyticshub.dataExchanges.getIamPolicy

analyticshub.dataExchanges.list

analyticshub.listings.get

analyticshub.listings.getIamPolicy

analyticshub.listings.list

resourcemanager.projects.get

resourcemanager.projects.list

BigQuery sharing permissions

PermissionIncluded in roles

analyticshub.dataExchanges.create

Owner (roles/owner)

Editor (roles/editor)

Analytics Hub Admin (roles/analyticshub.admin)

analyticshub.dataExchanges.delete

Owner (roles/owner)

Editor (roles/editor)

Analytics Hub Admin (roles/analyticshub.admin)

analyticshub.dataExchanges.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Analytics Hub Admin (roles/analyticshub.admin)

Analytics Hub Listing Admin (roles/analyticshub.listingAdmin)

Analytics Hub Publisher (roles/analyticshub.publisher)

Analytics Hub Subscriber (roles/analyticshub.subscriber)

Analytics Hub Subscription Owner (roles/analyticshub.subscriptionOwner)

Analytics Hub Viewer (roles/analyticshub.viewer)

Support User (roles/iam.supportUser)

analyticshub.dataExchanges.getIamPolicy

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Analytics Hub Admin (roles/analyticshub.admin)

Analytics Hub Listing Admin (roles/analyticshub.listingAdmin)

Analytics Hub Publisher (roles/analyticshub.publisher)

Analytics Hub Subscriber (roles/analyticshub.subscriber)

Analytics Hub Subscription Owner (roles/analyticshub.subscriptionOwner)

Analytics Hub Viewer (roles/analyticshub.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

analyticshub.dataExchanges.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Analytics Hub Admin (roles/analyticshub.admin)

Analytics Hub Listing Admin (roles/analyticshub.listingAdmin)

Analytics Hub Publisher (roles/analyticshub.publisher)

Analytics Hub Subscriber (roles/analyticshub.subscriber)

Analytics Hub Subscription Owner (roles/analyticshub.subscriptionOwner)

Analytics Hub Viewer (roles/analyticshub.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

analyticshub.dataExchanges.setIamPolicy

Owner (roles/owner)

Analytics Hub Admin (roles/analyticshub.admin)

Security Admin (roles/iam.securityAdmin)

analyticshub.dataExchanges.subscribe

Owner (roles/owner)

Analytics Hub Subscriber (roles/analyticshub.subscriber)

analyticshub.dataExchanges.update

Owner (roles/owner)

Editor (roles/editor)

Analytics Hub Admin (roles/analyticshub.admin)

analyticshub.dataExchanges.viewSubscriptions

Owner (roles/owner)

Analytics Hub Admin (roles/analyticshub.admin)

analyticshub.listings.create

Owner (roles/owner)

Editor (roles/editor)

Analytics Hub Admin (roles/analyticshub.admin)

Analytics Hub Publisher (roles/analyticshub.publisher)

analyticshub.listings.delete

Owner (roles/owner)

Editor (roles/editor)

Analytics Hub Admin (roles/analyticshub.admin)

Analytics Hub Listing Admin (roles/analyticshub.listingAdmin)

analyticshub.listings.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Analytics Hub Admin (roles/analyticshub.admin)

Analytics Hub Listing Admin (roles/analyticshub.listingAdmin)

Analytics Hub Publisher (roles/analyticshub.publisher)

Analytics Hub Subscriber (roles/analyticshub.subscriber)

Analytics Hub Subscription Owner (roles/analyticshub.subscriptionOwner)

Analytics Hub Viewer (roles/analyticshub.viewer)

Support User (roles/iam.supportUser)

analyticshub.listings.getIamPolicy

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Analytics Hub Admin (roles/analyticshub.admin)

Analytics Hub Listing Admin (roles/analyticshub.listingAdmin)

Analytics Hub Publisher (roles/analyticshub.publisher)

Analytics Hub Subscriber (roles/analyticshub.subscriber)

Analytics Hub Subscription Owner (roles/analyticshub.subscriptionOwner)

Analytics Hub Viewer (roles/analyticshub.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

analyticshub.listings.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Analytics Hub Admin (roles/analyticshub.admin)

Analytics Hub Listing Admin (roles/analyticshub.listingAdmin)

Analytics Hub Publisher (roles/analyticshub.publisher)

Analytics Hub Subscriber (roles/analyticshub.subscriber)

Analytics Hub Subscription Owner (roles/analyticshub.subscriptionOwner)

Analytics Hub Viewer (roles/analyticshub.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

analyticshub.listings.setIamPolicy

Owner (roles/owner)

Analytics Hub Admin (roles/analyticshub.admin)

Analytics Hub Listing Admin (roles/analyticshub.listingAdmin)

Security Admin (roles/iam.securityAdmin)

analyticshub.listings.subscribe

Owner (roles/owner)

Analytics Hub Subscriber (roles/analyticshub.subscriber)

analyticshub.listings.update

Owner (roles/owner)

Editor (roles/editor)

Analytics Hub Admin (roles/analyticshub.admin)

Analytics Hub Listing Admin (roles/analyticshub.listingAdmin)

analyticshub.listings.viewSubscriptions

Owner (roles/owner)

Analytics Hub Admin (roles/analyticshub.admin)

Analytics Hub Listing Admin (roles/analyticshub.listingAdmin)

analyticshub.subscriptions.create

Owner (roles/owner)

Editor (roles/editor)

Analytics Hub Admin (roles/analyticshub.admin)

Analytics Hub Subscription Owner (roles/analyticshub.subscriptionOwner)

analyticshub.subscriptions.delete

Owner (roles/owner)

Editor (roles/editor)

Analytics Hub Admin (roles/analyticshub.admin)

Analytics Hub Subscription Owner (roles/analyticshub.subscriptionOwner)

analyticshub.subscriptions.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Analytics Hub Admin (roles/analyticshub.admin)

Analytics Hub Subscription Owner (roles/analyticshub.subscriptionOwner)

Support User (roles/iam.supportUser)

analyticshub.subscriptions.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Analytics Hub Admin (roles/analyticshub.admin)

Analytics Hub Subscription Owner (roles/analyticshub.subscriptionOwner)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

analyticshub.subscriptions.update

Owner (roles/owner)

Editor (roles/editor)

Analytics Hub Admin (roles/analyticshub.admin)

Analytics Hub Subscription Owner (roles/analyticshub.subscriptionOwner)

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-12-15 UTC.