Access to BigQuery is secured with IAM. Let's have a look at the list of predefined roles together with a short description for each:
- BigQuery User: This has rights to run jobs within the project. It can also create new datasets. Most individuals in an organization should be a user.
- BigQuery Job User: This has rights to run jobs within the project.
- BigQuery Read Sessions User: This has rights to create and read sessions within the project via the BigQuery storage API.
- BigQuery Data Viewer: This has rights to read the dataset metadata and list tables in the dataset. It can also read data and metadata from the dataset tables.
- BigQuery Metadata Viewer: This has rights to list all datasets and read metadata for all datasets in the project. ...