Access to Google Cloud Spanner is secured with IAM. The following is a list of predefined roles, along with a short description for each one:
- Spanner Admin: This has complete rights to all Cloud Spanner resources in a project.
- Spanner Database Admin: This has the right to list all Cloud Spanner instances and create/list/drop databases in the instances it was created in. It can grant and revoke access to a database in the project, and it can also read and write to all Cloud Spanner databases in the project.
- Spanner Database Reader: This has the right to read from the Cloud Spanner database, execute queries on the database, and view the schema for the database.
- Spanner Database User: This has the right to read and write to a Cloud Spanner ...