Access to Google Cloud Bigtable is secured with IAM. The following is a list of predefined roles, along with a short description of each:
- Bigtable Admin: This has rights to all Bigtable features, and is where you can create new instances. This role should be used by project administrators.
- Bigtable User: This has Read-Only access to the data stored within tables. This role should be used by application developers or service accounts.
- Bigtable Reader: This has Read-Only access to the data stored within tables. This role should be used by data scientists.
- Bigtable Viewer: This role should be used to grant the minimal set of permissions for Cloud Bigtable.