BigQuery sharing roles and permissions
Stay organized with collections Save and categorize content based on your preferences.

This page lists the IAM roles and permissions for BigQuery sharing. To search through all roles and permissions, see the role and permission index.

Role Permissions

Analytics Hub Admin

(roles/analyticshub.admin)

Administer Data Exchanges and Listings

analyticshub.dataExchanges.create

analyticshub.dataExchanges.delete

analyticshub.dataExchanges.get

analyticshub.dataExchanges.getIamPolicy

analyticshub.dataExchanges.list

analyticshub.dataExchanges.setIamPolicy

analyticshub.dataExchanges.update

analyticshub.dataExchanges.viewSubscriptions

analyticshub.listings.create

analyticshub.listings.delete

analyticshub.listings.get

analyticshub.listings.getIamPolicy

analyticshub.listings.list

analyticshub.listings.setIamPolicy

analyticshub.listings.update

analyticshub.listings.viewSubscriptions

analyticshub.subscriptions.*

analyticshub.subscriptions.create
analyticshub.subscriptions.delete
analyticshub.subscriptions.get
analyticshub.subscriptions.list
analyticshub.subscriptions.update

resourcemanager.projects.get

resourcemanager.projects.list

Analytics Hub Listing Admin

(roles/analyticshub.listingAdmin)

Grants full control over the Listing, including updating, deleting and setting ACLs

analyticshub.dataExchanges.get

analyticshub.dataExchanges.getIamPolicy

analyticshub.dataExchanges.list

analyticshub.listings.delete

analyticshub.listings.get

analyticshub.listings.getIamPolicy

analyticshub.listings.list

analyticshub.listings.setIamPolicy

analyticshub.listings.update

analyticshub.listings.viewSubscriptions

resourcemanager.projects.get

resourcemanager.projects.list

Analytics Hub Publisher

(roles/analyticshub.publisher)

Can publish to Data Exchanges thus creating Listings

analyticshub.dataExchanges.get

analyticshub.dataExchanges.getIamPolicy

analyticshub.dataExchanges.list

analyticshub.listings.create

analyticshub.listings.get

analyticshub.listings.getIamPolicy

analyticshub.listings.list

resourcemanager.projects.get

resourcemanager.projects.list

Analytics Hub Subscriber

(roles/analyticshub.subscriber)

Can browse Data Exchanges and subscribe to Listings

analyticshub.dataExchanges.get

analyticshub.dataExchanges.getIamPolicy

analyticshub.dataExchanges.list

analyticshub.dataExchanges.subscribe

analyticshub.listings.get

analyticshub.listings.getIamPolicy

analyticshub.listings.list

analyticshub.listings.subscribe

resourcemanager.projects.get

resourcemanager.projects.list

Analytics Hub Subscription Owner

(roles/analyticshub.subscriptionOwner)

Grants full control over the Subscription, including updating and deleting

analyticshub.dataExchanges.get

analyticshub.dataExchanges.getIamPolicy

analyticshub.dataExchanges.list

analyticshub.listings.get

analyticshub.listings.getIamPolicy

analyticshub.listings.list

analyticshub.subscriptions.*

analyticshub.subscriptions.create
analyticshub.subscriptions.delete
analyticshub.subscriptions.get
analyticshub.subscriptions.list
analyticshub.subscriptions.update

resourcemanager.projects.get

resourcemanager.projects.list

Analytics Hub Viewer

(roles/analyticshub.viewer)

Can browse Data Exchanges and Listings

analyticshub.dataExchanges.get

analyticshub.dataExchanges.getIamPolicy

analyticshub.dataExchanges.list

analyticshub.listings.get

analyticshub.listings.getIamPolicy

analyticshub.listings.list

resourcemanager.projects.get

resourcemanager.projects.list

Permission	Included in roles
`analyticshub.dataExchanges.create`	Owner (`roles/owner`) Editor (`roles/editor`) Analytics Hub Admin (`roles/analyticshub.admin`)
`analyticshub.dataExchanges.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Analytics Hub Admin (`roles/analyticshub.admin`)
`analyticshub.dataExchanges.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Analytics Hub Admin (`roles/analyticshub.admin`) Analytics Hub Listing Admin (`roles/analyticshub.listingAdmin`) Analytics Hub Publisher (`roles/analyticshub.publisher`) Analytics Hub Subscriber (`roles/analyticshub.subscriber`) Analytics Hub Subscription Owner (`roles/analyticshub.subscriptionOwner`) Analytics Hub Viewer (`roles/analyticshub.viewer`)
`analyticshub.dataExchanges.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Analytics Hub Admin (`roles/analyticshub.admin`) Analytics Hub Listing Admin (`roles/analyticshub.listingAdmin`) Analytics Hub Publisher (`roles/analyticshub.publisher`) Analytics Hub Subscriber (`roles/analyticshub.subscriber`) Analytics Hub Subscription Owner (`roles/analyticshub.subscriptionOwner`) Analytics Hub Viewer (`roles/analyticshub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`analyticshub.dataExchanges.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Analytics Hub Admin (`roles/analyticshub.admin`) Analytics Hub Listing Admin (`roles/analyticshub.listingAdmin`) Analytics Hub Publisher (`roles/analyticshub.publisher`) Analytics Hub Subscriber (`roles/analyticshub.subscriber`) Analytics Hub Subscription Owner (`roles/analyticshub.subscriptionOwner`) Analytics Hub Viewer (`roles/analyticshub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`analyticshub.dataExchanges.setIamPolicy`	Owner (`roles/owner`) Analytics Hub Admin (`roles/analyticshub.admin`) Security Admin (`roles/iam.securityAdmin`)
`analyticshub.dataExchanges.subscribe`	Owner (`roles/owner`) Analytics Hub Subscriber (`roles/analyticshub.subscriber`)
`analyticshub.dataExchanges.update`	Owner (`roles/owner`) Editor (`roles/editor`) Analytics Hub Admin (`roles/analyticshub.admin`)
`analyticshub.dataExchanges.viewSubscriptions`	Owner (`roles/owner`) Analytics Hub Admin (`roles/analyticshub.admin`)
`analyticshub.listings.create`	Owner (`roles/owner`) Editor (`roles/editor`) Analytics Hub Admin (`roles/analyticshub.admin`) Analytics Hub Publisher (`roles/analyticshub.publisher`)
`analyticshub.listings.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Analytics Hub Admin (`roles/analyticshub.admin`) Analytics Hub Listing Admin (`roles/analyticshub.listingAdmin`)
`analyticshub.listings.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Analytics Hub Admin (`roles/analyticshub.admin`) Analytics Hub Listing Admin (`roles/analyticshub.listingAdmin`) Analytics Hub Publisher (`roles/analyticshub.publisher`) Analytics Hub Subscriber (`roles/analyticshub.subscriber`) Analytics Hub Subscription Owner (`roles/analyticshub.subscriptionOwner`) Analytics Hub Viewer (`roles/analyticshub.viewer`)
`analyticshub.listings.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Analytics Hub Admin (`roles/analyticshub.admin`) Analytics Hub Listing Admin (`roles/analyticshub.listingAdmin`) Analytics Hub Publisher (`roles/analyticshub.publisher`) Analytics Hub Subscriber (`roles/analyticshub.subscriber`) Analytics Hub Subscription Owner (`roles/analyticshub.subscriptionOwner`) Analytics Hub Viewer (`roles/analyticshub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`analyticshub.listings.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Analytics Hub Admin (`roles/analyticshub.admin`) Analytics Hub Listing Admin (`roles/analyticshub.listingAdmin`) Analytics Hub Publisher (`roles/analyticshub.publisher`) Analytics Hub Subscriber (`roles/analyticshub.subscriber`) Analytics Hub Subscription Owner (`roles/analyticshub.subscriptionOwner`) Analytics Hub Viewer (`roles/analyticshub.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`analyticshub.listings.setIamPolicy`	Owner (`roles/owner`) Analytics Hub Admin (`roles/analyticshub.admin`) Analytics Hub Listing Admin (`roles/analyticshub.listingAdmin`) Security Admin (`roles/iam.securityAdmin`)
`analyticshub.listings.subscribe`	Owner (`roles/owner`) Analytics Hub Subscriber (`roles/analyticshub.subscriber`)
`analyticshub.listings.update`	Owner (`roles/owner`) Editor (`roles/editor`) Analytics Hub Admin (`roles/analyticshub.admin`) Analytics Hub Listing Admin (`roles/analyticshub.listingAdmin`)
`analyticshub.listings.viewSubscriptions`	Owner (`roles/owner`) Analytics Hub Admin (`roles/analyticshub.admin`) Analytics Hub Listing Admin (`roles/analyticshub.listingAdmin`)
`analyticshub.subscriptions.create`	Owner (`roles/owner`) Editor (`roles/editor`) Analytics Hub Admin (`roles/analyticshub.admin`) Analytics Hub Subscription Owner (`roles/analyticshub.subscriptionOwner`)
`analyticshub.subscriptions.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Analytics Hub Admin (`roles/analyticshub.admin`) Analytics Hub Subscription Owner (`roles/analyticshub.subscriptionOwner`)
`analyticshub.subscriptions.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Analytics Hub Admin (`roles/analyticshub.admin`) Analytics Hub Subscription Owner (`roles/analyticshub.subscriptionOwner`)
`analyticshub.subscriptions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Analytics Hub Admin (`roles/analyticshub.admin`) Analytics Hub Subscription Owner (`roles/analyticshub.subscriptionOwner`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`analyticshub.subscriptions.update`	Owner (`roles/owner`) Editor (`roles/editor`) Analytics Hub Admin (`roles/analyticshub.admin`) Analytics Hub Subscription Owner (`roles/analyticshub.subscriptionOwner`)

BigQuery sharing roles and permissions
Stay organized with collections Save and categorize content based on your preferences.

Analytics Hub Admin

Analytics Hub Listing Admin

Analytics Hub Publisher

Analytics Hub Subscriber

Analytics Hub Subscription Owner

Analytics Hub Viewer

`analyticshub.dataExchanges.create`

`analyticshub.dataExchanges.delete`

`analyticshub.dataExchanges.get`

`analyticshub.dataExchanges.getIamPolicy`

`analyticshub.dataExchanges.list`

`analyticshub.dataExchanges.setIamPolicy`

`analyticshub.dataExchanges.update`

`analyticshub.dataExchanges.viewSubscriptions`

`analyticshub.listings.create`

`analyticshub.listings.delete`

`analyticshub.listings.get`

`analyticshub.listings.getIamPolicy`

`analyticshub.listings.list`

`analyticshub.listings.setIamPolicy`

`analyticshub.listings.update`

`analyticshub.listings.viewSubscriptions`

`analyticshub.subscriptions.create`

`analyticshub.subscriptions.delete`

`analyticshub.subscriptions.get`

`analyticshub.subscriptions.list`

`analyticshub.subscriptions.update`

BigQuery sharing roles and permissions Stay organized with collections Save and categorize content based on your preferences.