Access to Google Cloud Datastore is secured with IAM. Let's have a look at the list of predefined roles and their details:
- Datastore owner with appengine app admin: Has full access to Datastore mode.
- Datastore owner without appengine app admin: Has access to Datastore mode but cannot enable admin access, check whether Datastore mode admin is enabled, disable Datastore mode writes, or check whether Datastore mode writes are disabled.
- Datastore user: Has read/write access to data in a Datastore mode database. Mainly used by developers or service accounts.
- Datastore viewer: Has rights to read all Datastore mode resources.
- Datastore import export admin: Has full access to manage imports and exports.
- Datastore index admin: Has full access ...