Controllo dell'accesso a Bigtable con IAM

Identity and Access Management (IAM) ti consente di gestire autorizzazioni granulari per le tue risorse Bigtable. IAM ti aiuta ad applicare il principio del privilegio minimo e a proteggere i tuoi dati in progetti, istanze e tabelle.

Bigtable utilizza IAM per controllo dell'accesso. Per controllare chi ha accesso a una risorsa, imposta le policy IAM sulla risorsa.

Le risorse Bigtable sono organizzate in una gerarchia. Un progettoGoogle Cloud è l'elemento principale di un'istanza Bigtable, che a sua volta è l'elemento principale dei relativi cluster e tabelle. Una tabella è l'elemento principale delle sue visualizzazioni autorizzate, mentre un cluster è l'elemento principale dei suoi backup. Puoi configurare controllo dell'accesso a ogni livello.

Se disponi delle autorizzazioni a un livello, disponi automaticamente delle autorizzazioni al di sotto di quel livello. Ad esempio, se hai accesso a livello di progetto, hai accesso alle istanze, ai cluster, alle tabelle, alle viste autorizzate e alle viste materializzate continue di quel progetto. Se ti viene concesso l'accesso a una vista autorizzata o a una vista materializzata continua, non hai automaticamente accesso alle risorse di livello superiore che sono principali della vista autorizzata o della vista materializzata continua, come la tabella e l'istanza. Questo comportamento è chiamato ereditarietà delle policy.

Per saperne di più sulla gerarchia IAM, consulta Ereditarietà delle policy IAM.

Esempi di controllo degli accessi

Ecco alcuni esempi di utilizzo controllo dell'accesso a livello di progetto:

  • Consente a un utente di leggere, ma non di scrivere, in qualsiasi tabella all'interno del progetto.
  • Consente a un utente di leggere e scrivere in qualsiasi tabella all'interno del progetto, ma non di gestire le istanze.
  • Consente a un utente di leggere e scrivere in qualsiasi tabella all'interno del progetto e di gestire le istanze.

Ecco alcuni esempi di utilizzo controllo dell'accesso a livello di istanza:

  • Consenti a un utente di leggere da qualsiasi tabella in una sola istanza di un progetto con più istanze.
  • Consentire a un utente di gestire una sola istanza in un progetto con più istanze.

Ecco alcuni esempi di utilizzo controllo dell'accesso a livello di tabella:

  • Consentire a un utente di scrivere in una tabella, ma non di leggerla.
  • Consentire a un utente di leggere da una tabella, ma non di scrivere nella tabella.

Ecco alcuni esempi di utilizzo controllo dell'accesso a livello di backup:

  • Impedisci a un utente di eliminare un backup.
  • Impedire a un utente di eseguire il ripristino dal backup.

Ecco alcuni esempi di utilizzo controllo dell'accesso a livello di vista autorizzata:

  • Consente a un utente di leggere una vista autorizzata, ma non di modificarla.
  • Consentire a un utente di visualizzare i dati di una sola delle più viste autorizzate di una tabella.

Ecco alcuni esempi di utilizzo controllo dell'accesso a livello di vista materializzata continua:

  • Consenti a un utente di leggere da una vista materializzata continua, ma non di modificare la tabella sottostante.

Per saperne di più su IAM e sulle sue funzionalità, consulta la guida per gli sviluppatori di IAM. In particolare, consulta Concessione, modifica e revoca dell'accesso.

In Bigtable, non puoi concedere l'accesso ai seguenti tipi di entità:

Per gli elenchi delle autorizzazioni e dei ruoli supportati da Bigtable, consulta le sezioni seguenti.

Abilitazione dell'API Bigtable

Per visualizzare e assegnare i ruoli IAM di Bigtable, devi abilitare l'API Bigtable per il tuo progetto. Finché non attivi l'API, i ruoli Bigtable non vengono visualizzati nella consoleGoogle Cloud .

Ruoli richiesti per abilitare le API

Per abilitare le API, devi disporre dell'autorizzazione serviceusage.services.enable. Se hai creato il progetto, probabilmente hai già questa autorizzazione tramite il ruolo Proprietario (roles/owner). In caso contrario, puoi ottenere questa autorizzazione tramite il ruolo Amministratore Service Usage (roles/serviceusage.serviceUsageAdmin). Scopri come concedere i ruoli.

Abilitare l'API

Autorizzazioni

Questa sezione riassume le autorizzazioni supportate da Bigtable.

Le autorizzazioni consentono agli utenti di eseguire azioni specifiche sulle risorse Bigtable. Ad esempio, le autorizzazioni bigtable.instances.list consentono agli utenti di elencare tutte le istanze Bigtable all'interno di un progetto. Non concedi le autorizzazioni direttamente agli utenti, ma assegni a ciascun utente un ruolo predefinito o un ruolo personalizzato, che concede una o più autorizzazioni.

La tabella seguente elenca le autorizzazioni IAM associate a Bigtable.

Autorizzazione Incluso nei ruoli

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Security Admin (roles/iam.securityAdmin)

Revisore della sicurezza (roles/iam.securityReviewer)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Bigtable Administrator (roles/bigtable.admin)

Tag User (roles/resourcemanager.tagUser)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Bigtable Administrator (roles/bigtable.admin)

Tag User (roles/resourcemanager.tagUser)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable Viewer (roles/bigtable.viewer)

Security Admin (roles/iam.securityAdmin)

Revisore della sicurezza (roles/iam.securityReviewer)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Security Admin (roles/iam.securityAdmin)

Revisore della sicurezza (roles/iam.securityReviewer)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable Viewer (roles/bigtable.viewer)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable Viewer (roles/bigtable.viewer)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Bigtable Administrator (roles/bigtable.admin)

Security Admin (roles/iam.securityAdmin)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable Viewer (roles/bigtable.viewer)

Security Admin (roles/iam.securityAdmin)

Revisore della sicurezza (roles/iam.securityReviewer)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Security Admin (roles/iam.securityAdmin)

Revisore della sicurezza (roles/iam.securityReviewer)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Wiz Cloud Inventory Viewer (roles/wiz.cloudInventoryViewer)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Bigtable Administrator (roles/bigtable.admin)

Security Admin (roles/iam.securityAdmin)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Security Admin (roles/iam.securityAdmin)

Revisore della sicurezza (roles/iam.securityReviewer)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Wiz Cloud Inventory Viewer (roles/wiz.cloudInventoryViewer)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Security Admin (roles/iam.securityAdmin)

Revisore della sicurezza (roles/iam.securityReviewer)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Bigtable Administrator (roles/bigtable.admin)

Tag User (roles/resourcemanager.tagUser)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Bigtable Administrator (roles/bigtable.admin)

Tag User (roles/resourcemanager.tagUser)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable Viewer (roles/bigtable.viewer)

Security Admin (roles/iam.securityAdmin)

Revisore della sicurezza (roles/iam.securityReviewer)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Wiz Cloud Inventory Viewer (roles/wiz.cloudInventoryViewer)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Security Admin (roles/iam.securityAdmin)

Revisore della sicurezza (roles/iam.securityReviewer)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Wiz Cloud Inventory Viewer (roles/wiz.cloudInventoryViewer)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable Viewer (roles/bigtable.viewer)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable Viewer (roles/bigtable.viewer)

Tag User (roles/resourcemanager.tagUser)

Tag Viewer (roles/resourcemanager.tagViewer)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Bigtable Administrator (roles/bigtable.admin)

Security Admin (roles/iam.securityAdmin)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Security Admin (roles/iam.securityAdmin)

Revisore della sicurezza (roles/iam.securityReviewer)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Security Admin (roles/iam.securityAdmin)

Revisore della sicurezza (roles/iam.securityReviewer)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable Viewer (roles/bigtable.viewer)

Security Admin (roles/iam.securityAdmin)

Revisore della sicurezza (roles/iam.securityReviewer)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Security Admin (roles/iam.securityAdmin)

Revisore della sicurezza (roles/iam.securityReviewer)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Bigtable Administrator (roles/bigtable.admin)

Security Admin (roles/iam.securityAdmin)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable Viewer (roles/bigtable.viewer)

Security Admin (roles/iam.securityAdmin)

Revisore della sicurezza (roles/iam.securityReviewer)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Security Admin (roles/iam.securityAdmin)

Revisore della sicurezza (roles/iam.securityReviewer)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Bigtable Administrator (roles/bigtable.admin)

Security Admin (roles/iam.securityAdmin)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Security Admin (roles/iam.securityAdmin)

Revisore della sicurezza (roles/iam.securityReviewer)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable Viewer (roles/bigtable.viewer)

Security Admin (roles/iam.securityAdmin)

Revisore della sicurezza (roles/iam.securityReviewer)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Security Admin (roles/iam.securityAdmin)

Revisore della sicurezza (roles/iam.securityReviewer)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Bigtable Administrator (roles/bigtable.admin)

Security Admin (roles/iam.securityAdmin)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Wiz Cloud Inventory Viewer (roles/wiz.cloudInventoryViewer)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable Viewer (roles/bigtable.viewer)

Security Admin (roles/iam.securityAdmin)

Revisore della sicurezza (roles/iam.securityReviewer)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Wiz Cloud Inventory Viewer (roles/wiz.cloudInventoryViewer)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Viewer (roles/bigtable.viewer)

Security Admin (roles/iam.securityAdmin)

Revisore della sicurezza (roles/iam.securityReviewer)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Security Auditor (roles/iam.securityAuditor)

Site Reliability Engineer (roles/iam.siteReliabilityEngineer)

Support User (roles/iam.supportUser)

Wiz Cloud Inventory Viewer (roles/wiz.cloudInventoryViewer)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Lettore (roles/reader)

Viewer (Legacy) (roles/viewer)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Bigtable User (roles/bigtable.user)

Bigtable Reader (roles/bigtable.reader)

Data Scientist (roles/iam.dataScientist)

Databases Admin (roles/iam.databasesAdmin)

Support User (roles/iam.supportUser)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Bigtable Administrator (roles/bigtable.admin)

Security Admin (roles/iam.securityAdmin)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Admin (roles/admin)

Owner (Legacy) (roles/owner)

Writer (roles/writer)

Editor (Legacy) (roles/editor)

Bigtable Administrator (roles/bigtable.admin)

Bigtable Editor (roles/bigtable.editor)

Databases Admin (roles/iam.databasesAdmin)

Ruoli degli agenti di servizio

Ruoli predefiniti

Ogni ruolo predefinito è un bundle di una o più autorizzazioni. Ad esempio, roles/bigtable.reader fornisce l'accesso di sola lettura alle informazioni su istanze, cluster, tabelle e famiglie di colonne Bigtable, nonché ai dati contenuti nelle tabelle. Assegni i ruoli a utenti o gruppi, consentendo loro di eseguire azioni sulle risorse del tuo progetto.

La tabella seguente elenca i ruoli predefiniti per Bigtable, incluso un elenco delle autorizzazioni associate a ciascun ruolo:

Role Permissions

(roles/bigtable.admin)

Administers all Bigtable instances within a project, including the data stored within tables. Can create new instances. Intended for project administrators.

Lowest-level resources where you can grant this role:

  • Table

bigtable.*

  • bigtable.appProfiles.create
  • bigtable.appProfiles.delete
  • bigtable.appProfiles.get
  • bigtable.appProfiles.list
  • bigtable.appProfiles.update
  • bigtable.authorizedViews.create
  • bigtable.authorizedViews.createTagBinding
  • bigtable.authorizedViews.delete
  • bigtable.authorizedViews.deleteTagBinding
  • bigtable.authorizedViews.get
  • bigtable.authorizedViews.getIamPolicy
  • bigtable.authorizedViews.list
  • bigtable.authorizedViews.listEffectiveTags
  • bigtable.authorizedViews.listTagBindings
  • bigtable.authorizedViews.mutateRows
  • bigtable.authorizedViews.readRows
  • bigtable.authorizedViews.sampleRowKeys
  • bigtable.authorizedViews.setIamPolicy
  • bigtable.authorizedViews.update
  • bigtable.backups.create
  • bigtable.backups.delete
  • bigtable.backups.get
  • bigtable.backups.getIamPolicy
  • bigtable.backups.list
  • bigtable.backups.read
  • bigtable.backups.restore
  • bigtable.backups.setIamPolicy
  • bigtable.backups.update
  • bigtable.clusters.create
  • bigtable.clusters.delete
  • bigtable.clusters.get
  • bigtable.clusters.list
  • bigtable.clusters.update
  • bigtable.hotTablets.list
  • bigtable.instances.create
  • bigtable.instances.createTagBinding
  • bigtable.instances.delete
  • bigtable.instances.deleteTagBinding
  • bigtable.instances.executeQuery
  • bigtable.instances.get
  • bigtable.instances.getIamPolicy
  • bigtable.instances.list
  • bigtable.instances.listEffectiveTags
  • bigtable.instances.listTagBindings
  • bigtable.instances.ping
  • bigtable.instances.setIamPolicy
  • bigtable.instances.update
  • bigtable.keyvisualizer.get
  • bigtable.keyvisualizer.list
  • bigtable.locations.list
  • bigtable.logicalViews.create
  • bigtable.logicalViews.delete
  • bigtable.logicalViews.get
  • bigtable.logicalViews.getIamPolicy
  • bigtable.logicalViews.list
  • bigtable.logicalViews.readRows
  • bigtable.logicalViews.setIamPolicy
  • bigtable.logicalViews.update
  • bigtable.materializedViews.create
  • bigtable.materializedViews.delete
  • bigtable.materializedViews.get
  • bigtable.materializedViews.getIamPolicy
  • bigtable.materializedViews.list
  • bigtable.materializedViews.readRows
  • bigtable.materializedViews.sampleRowKeys
  • bigtable.materializedViews.setIamPolicy
  • bigtable.materializedViews.update
  • bigtable.memoryLayers.get
  • bigtable.memoryLayers.list
  • bigtable.memoryLayers.update
  • bigtable.schemaBundles.create
  • bigtable.schemaBundles.delete
  • bigtable.schemaBundles.get
  • bigtable.schemaBundles.getIamPolicy
  • bigtable.schemaBundles.list
  • bigtable.schemaBundles.setIamPolicy
  • bigtable.schemaBundles.update
  • bigtable.tables.checkConsistency
  • bigtable.tables.create
  • bigtable.tables.delete
  • bigtable.tables.generateConsistencyToken
  • bigtable.tables.get
  • bigtable.tables.getIamPolicy
  • bigtable.tables.list
  • bigtable.tables.mutateRows
  • bigtable.tables.readRows
  • bigtable.tables.sampleRowKeys
  • bigtable.tables.setIamPolicy
  • bigtable.tables.undelete
  • bigtable.tables.update

cloudkms.keyHandles.*

  • cloudkms.keyHandles.create
  • cloudkms.keyHandles.get
  • cloudkms.keyHandles.list

cloudkms.operations.get

cloudkms.projects.showEffectiveAutokeyConfig

monitoring.metricDescriptors.get

monitoring.metricDescriptors.list

monitoring.timeSeries.*

  • monitoring.timeSeries.create
  • monitoring.timeSeries.list

resourcemanager.projects.get

(roles/bigtable.editor)

Editor role for bigtable

bigtable.appProfiles.*

  • bigtable.appProfiles.create
  • bigtable.appProfiles.delete
  • bigtable.appProfiles.get
  • bigtable.appProfiles.list
  • bigtable.appProfiles.update

bigtable.authorizedViews.create

bigtable.authorizedViews.delete

bigtable.authorizedViews.get

bigtable.authorizedViews.getIamPolicy

bigtable.authorizedViews.list

bigtable.authorizedViews.listEffectiveTags

bigtable.authorizedViews.listTagBindings

bigtable.authorizedViews.mutateRows

bigtable.authorizedViews.readRows

bigtable.authorizedViews.sampleRowKeys

bigtable.authorizedViews.update

bigtable.backups.create

bigtable.backups.delete

bigtable.backups.get

bigtable.backups.getIamPolicy

bigtable.backups.list

bigtable.backups.read

bigtable.backups.restore

bigtable.backups.update

bigtable.clusters.*

  • bigtable.clusters.create
  • bigtable.clusters.delete
  • bigtable.clusters.get
  • bigtable.clusters.list
  • bigtable.clusters.update

bigtable.hotTablets.list

bigtable.instances.create

bigtable.instances.delete

bigtable.instances.executeQuery

bigtable.instances.get

bigtable.instances.getIamPolicy

bigtable.instances.list

bigtable.instances.listEffectiveTags

bigtable.instances.listTagBindings

bigtable.instances.ping

bigtable.instances.update

bigtable.keyvisualizer.*

  • bigtable.keyvisualizer.get
  • bigtable.keyvisualizer.list

bigtable.locations.list

bigtable.logicalViews.create

bigtable.logicalViews.delete

bigtable.logicalViews.get

bigtable.logicalViews.getIamPolicy

bigtable.logicalViews.list

bigtable.logicalViews.readRows

bigtable.logicalViews.update

bigtable.materializedViews.create

bigtable.materializedViews.delete

bigtable.materializedViews.get

bigtable.materializedViews.getIamPolicy

bigtable.materializedViews.list

bigtable.materializedViews.readRows

bigtable.materializedViews.sampleRowKeys

bigtable.materializedViews.update

bigtable.memoryLayers.*

  • bigtable.memoryLayers.get
  • bigtable.memoryLayers.list
  • bigtable.memoryLayers.update

bigtable.schemaBundles.create

bigtable.schemaBundles.delete

bigtable.schemaBundles.get

bigtable.schemaBundles.getIamPolicy

bigtable.schemaBundles.list

bigtable.schemaBundles.update

bigtable.tables.checkConsistency

bigtable.tables.create

bigtable.tables.delete

bigtable.tables.generateConsistencyToken

bigtable.tables.get

bigtable.tables.getIamPolicy

bigtable.tables.list

bigtable.tables.mutateRows

bigtable.tables.readRows

bigtable.tables.sampleRowKeys

bigtable.tables.undelete

bigtable.tables.update

monitoring.metricDescriptors.get

monitoring.metricDescriptors.list

monitoring.timeSeries.list

resourcemanager.projects.get

resourcemanager.projects.list

(roles/bigtable.user)

Provides read-write access to the data stored within Bigtable tables. Intended for application developers or service accounts.

Lowest-level resources where you can grant this role:

  • Table

bigtable.appProfiles.get

bigtable.appProfiles.list

bigtable.authorizedViews.get

bigtable.authorizedViews.list

bigtable.authorizedViews.mutateRows

bigtable.authorizedViews.readRows

bigtable.authorizedViews.sampleRowKeys

bigtable.backups.get

bigtable.backups.list

bigtable.clusters.get

bigtable.clusters.list

bigtable.hotTablets.list

bigtable.instances.executeQuery

bigtable.instances.get

bigtable.instances.list

bigtable.instances.ping

bigtable.keyvisualizer.*

  • bigtable.keyvisualizer.get
  • bigtable.keyvisualizer.list

bigtable.locations.list

bigtable.logicalViews.get

bigtable.logicalViews.list

bigtable.logicalViews.readRows

bigtable.materializedViews.get

bigtable.materializedViews.list

bigtable.materializedViews.readRows

bigtable.materializedViews.sampleRowKeys

bigtable.memoryLayers.get

bigtable.memoryLayers.list

bigtable.schemaBundles.get

bigtable.schemaBundles.list

bigtable.tables.checkConsistency

bigtable.tables.generateConsistencyToken

bigtable.tables.get

bigtable.tables.list

bigtable.tables.mutateRows

bigtable.tables.readRows

bigtable.tables.sampleRowKeys

monitoring.metricDescriptors.get

monitoring.metricDescriptors.list

monitoring.timeSeries.*

  • monitoring.timeSeries.create
  • monitoring.timeSeries.list

resourcemanager.projects.get

(roles/bigtable.viewer)

Provides no data access. Intended as a minimal set of permissions to access the Google Cloud console for Bigtable.

Lowest-level resources where you can grant this role:

  • Table

bigtable.appProfiles.get

bigtable.appProfiles.list

bigtable.authorizedViews.get

bigtable.authorizedViews.getIamPolicy

bigtable.authorizedViews.list

bigtable.authorizedViews.listEffectiveTags

bigtable.authorizedViews.listTagBindings

bigtable.backups.get

bigtable.backups.getIamPolicy

bigtable.backups.list

bigtable.clusters.get

bigtable.clusters.list

bigtable.hotTablets.list

bigtable.instances.get

bigtable.instances.getIamPolicy

bigtable.instances.list

bigtable.instances.listEffectiveTags

bigtable.instances.listTagBindings

bigtable.locations.list

bigtable.logicalViews.get

bigtable.logicalViews.getIamPolicy

bigtable.logicalViews.list

bigtable.materializedViews.get

bigtable.materializedViews.getIamPolicy

bigtable.materializedViews.list

bigtable.memoryLayers.get

bigtable.memoryLayers.list

bigtable.schemaBundles.get

bigtable.schemaBundles.getIamPolicy

bigtable.schemaBundles.list

bigtable.tables.checkConsistency

bigtable.tables.generateConsistencyToken

bigtable.tables.get

bigtable.tables.getIamPolicy

bigtable.tables.list

monitoring.metricDescriptors.get

monitoring.metricDescriptors.list

monitoring.timeSeries.list

resourcemanager.projects.get

(roles/bigtable.reader)

Provides read-only access to the data stored within Bigtable tables. Intended for data scientists, dashboard generators, and other data-analysis scenarios.

Lowest-level resources where you can grant this role:

  • Table

bigtable.appProfiles.get

bigtable.appProfiles.list

bigtable.authorizedViews.get

bigtable.authorizedViews.list

bigtable.authorizedViews.readRows

bigtable.authorizedViews.sampleRowKeys

bigtable.backups.get

bigtable.backups.list

bigtable.clusters.get

bigtable.clusters.list

bigtable.hotTablets.list

bigtable.instances.executeQuery

bigtable.instances.get

bigtable.instances.list

bigtable.instances.ping

bigtable.keyvisualizer.*

  • bigtable.keyvisualizer.get
  • bigtable.keyvisualizer.list

bigtable.locations.list

bigtable.logicalViews.get

bigtable.logicalViews.list

bigtable.logicalViews.readRows

bigtable.materializedViews.get

bigtable.materializedViews.list

bigtable.materializedViews.readRows

bigtable.materializedViews.sampleRowKeys

bigtable.memoryLayers.get

bigtable.memoryLayers.list

bigtable.schemaBundles.get

bigtable.schemaBundles.list

bigtable.tables.checkConsistency

bigtable.tables.generateConsistencyToken

bigtable.tables.get

bigtable.tables.list

bigtable.tables.readRows

bigtable.tables.sampleRowKeys

monitoring.metricDescriptors.get

monitoring.metricDescriptors.list

monitoring.timeSeries.*

  • monitoring.timeSeries.create
  • monitoring.timeSeries.list

resourcemanager.projects.get

Ruoli personalizzati

Se i ruoli predefiniti per Bigtable non soddisfano i tuoi requisiti aziendali, puoi definire ruoli personalizzati con le autorizzazioni da te specificate.

Se il tuo ruolo personalizzato deve supportare l'accesso alla console Google Cloud , devi identificare le attività che gli utenti eseguiranno, quindi assicurarti che il ruolo personalizzato disponga delle autorizzazioni richieste per ogni attività, come mostrato nella tabella seguente. Se un ruolo personalizzato non dispone di tutte le autorizzazioni richieste per un'attività e un utente tenta di eseguirla, la console Google Cloud non funzionerà correttamente.

Google Cloud attività della console Autorizzazioni obbligatorie
Accesso di base alla console Google Cloud
  • bigtable.appProfiles.get
  • bigtable.appProfiles.list
  • bigtable.clusters.get
  • bigtable.clusters.list
  • bigtable.instances.get
  • bigtable.instances.list
  • bigtable.locations.list
  • bigtable.tables.get
  • bigtable.tables.list
  • resourcemanager.projects.get
Crea un'istanza o un cluster

Autorizzazioni di accesso di base, più:

  • bigtable.clusters.create
  • bigtable.instances.create
Modifica un'istanza o un cluster

Autorizzazioni di accesso di base, più:

  • bigtable.clusters.update
  • bigtable.instances.update
Gestisci la configurazione della replica

Autorizzazioni di accesso di base, più:

  • bigtable.appProfiles.create
  • bigtable.appProfiles.delete
  • bigtable.appProfiles.update
Elimina un'istanza o un cluster

Autorizzazioni di accesso di base, più:

  • bigtable.clusters.delete
  • bigtable.instances.delete
Monitora un'istanza visualizzando i grafici

Autorizzazioni di accesso di base, più:

  • monitoring.metricDescriptors.get
  • monitoring.metricDescriptors.list
  • monitoring.timeSeries.list
Crea e aggiorna una tabella

Autorizzazioni di accesso di base, più:

  • bigtable.tables.create
  • bigtable.tables.update
Ripristina un backup

Autorizzazioni di accesso di base, più:

  • bigtable.backups.list
  • bigtable.tables.create
  • bigtable.backups.restore

Gestione IAM

Questa sezione spiega come gestire i ruoli IAM e le relative autorizzazioni a livello di progetto, istanza, tabella e backup.

Gestione di IAM a livello di progetto

A livello di progetto, puoi concedere, modificare e revocare i ruoli IAM utilizzando la console Google Cloud , l'API IAM o Google Cloud CLI. Per saperne di più, consulta Concessione, modifica e revoca dell'accesso.

Dopo aver creato un progetto, puoi concedere agli utenti i ruoli IAM a livello di progetto in base ai livelli di accesso specifici.

Ruoli obbligatori

Prima di impostare i ruoli IAM a livello di istanza, a livello di tabella, a livello di backup, a livello di vista autorizzata o a livello di vista materializzata continua per un utente, assicurati che l'utente disponga di almeno uno dei seguenti ruoli IAM a livello di progetto:

  • Visualizzatore Bigtable (consigliato)
  • Bigtable Reader
  • Bigtable User
  • Bigtable Administrator

Scegli un ruolo a livello di progetto che non disponga di più autorizzazioni di quelle effettivamente necessarie all'utente per tutte le istanze, le tabelle, i backup, le viste autorizzate o le viste materializzate continue nel progetto. Per questo motivo, nella maggior parte dei casi dovresti concedere il ruolo Visualizzatore Bigtable.

Se l'utente non dispone di almeno uno di questi ruoli a livello di progetto, non avrà accesso a Bigtable tramite la console Google Cloud . La console Google Cloud richiede uno di questi ruoli a livello di progetto per poter recuperare informazioni su istanze, cluster, tabelle o backup per conto dell'utente.

Concedi ruoli IAM a livello di istanza

A livello di istanza, puoi concedere uno dei ruoli predefiniti di Bigtable a un utente o a un account di servizio. Puoi anche concedere i ruoli personalizzati che hai definito.

Per concedere un ruolo predefinito o personalizzato a un utente o a un account di servizio a livello di istanza:

Console

  1. Vai alla pagina Istanze Bigtable nella consoleGoogle Cloud .

    Vai alla pagina delle istanze

  2. Seleziona le caselle accanto alle istanze di cui vuoi gestire i ruoli. Viene visualizzato un riquadro informativo.

  3. Nel riquadro delle informazioni, fai clic su Autorizzazioni.

  4. In Aggiungi entità, inizia a digitare l'indirizzo email dell'utente o del account di servizio che vuoi aggiungere, quindi fai clic sull'indirizzo email dell'utente o del account di servizio.

  5. Fai clic sull'elenco Seleziona un ruolo, quindi fai clic su Bigtable per selezionare un ruolo predefinito o su Personalizzato per selezionare un ruolo personalizzato.

  6. Fai clic sul nome di ogni ruolo che vuoi assegnare.

  7. Fai clic su Aggiungi. All'utente o al account di servizio vengono concessi i ruoli che hai specificato a livello di istanza.

gcloud

  1. Se non conosci l'ID istanza, utilizza il comando bigtable instances list per visualizzare un elenco delle istanze del progetto: 

    gcloud bigtable instances list

  2. Utilizza il comando bigtable instances set-iam-policy:

    gcloud bigtable instances set-iam-policy \
  INSTANCE_ID \
  POLICY_FILE

    Fornisci quanto segue:

    • INSTANCE_ID: l'identificatore permanente dell'istanza.
    • POLICY_FILE: il percorso di un file JSON o YAML locale che contiene una policy IAM valida.

Concedi ruoli IAM a livello di tabella

A livello di tabella, puoi concedere uno dei ruoli predefiniti di Bigtable a un utente o a un account di servizio. Puoi anche concedere i ruoli personalizzati che hai definito.

Per concedere un ruolo predefinito o personalizzato a un utente o a un account di servizio a livello di tabella:

Console

  1. Vai alla pagina Istanze Bigtable nella consoleGoogle Cloud .

    Vai alla pagina delle istanze

  2. Fai clic sul nome dell'istanza contenente la tabella con i ruoli IAM che stai impostando.

  3. Seleziona Tabelle nel riquadro di navigazione a sinistra.

  4. Seleziona le caselle accanto alle tabelle di cui vuoi gestire i ruoli. Viene visualizzato un riquadro informativo.

  5. Nel riquadro delle informazioni, fai clic su Autorizzazioni.

  6. In Aggiungi entità, inizia a digitare l'indirizzo email dell'utente o del account di servizio che vuoi aggiungere, quindi fai clic sull'indirizzo email dell'utente o del account di servizio.

  7. Fai clic sull'elenco a discesa Seleziona un ruolo, quindi fai clic su Bigtable per selezionare un ruolo predefinito o su Personalizzato per selezionare un ruolo personalizzato.

  8. Fai clic sul nome di ogni ruolo che vuoi assegnare.

  9. Fai clic su Aggiungi. All'utente o al account di servizio vengono concessi i ruoli che hai specificato a livello di tabella.

gcloud

  1. Se non conosci l'ID istanza, utilizza il comando bigtable instances list per visualizzare un elenco delle istanze del progetto: 

    gcloud bigtable instances list

  2. Se non conosci gli ID tabella dell'istanza, utilizza il comando bigtable instances tables list per visualizzare un elenco di tabelle nell'istanza.

    gcloud bigtable instances tables list --instances=INSTANCE_ID

    Fornisci quanto segue:

    • INSTANCE_ID: l'identificatore permanente dell'istanza.

  3. Utilizza il comando bigtable instances tables set-iam-policy:

    gcloud bigtable instances tables set-iam-policy \
  TABLE_ID \
  --instance=INSTANCE_ID \
  POLICY_FILE

    Fornisci quanto segue:

    • TABLE_ID: l'identificatore permanente della tabella.
    • INSTANCE_ID: l'identificatore permanente dell'istanza.
    • POLICY_FILE: il percorso di un file JSON o YAML locale che contiene una policy IAM valida.

Concedi ruoli IAM a livello di backup

A livello di backup, puoi concedere uno dei ruoli predefiniti di Bigtable a un utente o a un account di servizio. Puoi anche concedere i ruoli personalizzati che hai definito.

Per concedere un ruolo predefinito o personalizzato a un utente o a un account di servizio a livello di backup:

gcloud

  1. Se non conosci l'ID istanza, utilizza il comando bigtable instances list per visualizzare un elenco delle istanze del progetto: 

    gcloud bigtable instances list

  2. Se non conosci gli ID backup di un'istanza, utilizza il comando bigtable instances backups list per visualizzare un elenco dei backup nell'istanza.

    gcloud bigtable backups list --instances=INSTANCE_ID

    Fornisci quanto segue:

    • INSTANCE_ID: l'identificatore permanente dell'istanza.

  3. Utilizza il comando gcloud bigtable backups set-iam-policy:

    gcloud bigtable backups set-iam-policy BACKUP_ID \
  --instance=INSTANCE_ID \
  --cluster=CLUSTER_ID \
  POLICY_FILE

    Fornisci quanto segue:

    • BACKUP_ID: l'identificatore permanente del backup.
    • INSTANCE_ID: l'identificatore permanente dell'istanza.
    • TABLE_ID: l'identificatore permanente della tabella.
    • POLICY_FILE: il percorso di un file JSON o YAML locale contenente una policy IAM valida.

Concedi ruoli IAM a livello di visualizzazione autorizzata

A livello di visualizzazione autorizzata, puoi concedere uno qualsiasi dei ruoli predefiniti di Bigtable a un utente o a un account di servizio. Puoi anche concedere i ruoli personalizzati che hai definito.

Per concedere un ruolo predefinito o personalizzato a un utente o a un account di servizio a livello di visualizzazione autorizzata, segui questi passaggi:

Console

  1. Nella console Google Cloud , apri l'elenco delle istanze Bigtable.

    Apri l'elenco delle istanze

  2. Fai clic sull'istanza che contiene la vista autorizzata.

  3. Nel riquadro di navigazione, fai clic su Bigtable Studio.

  4. In Explorer, espandi la tabella e Viste autorizzate.

  5. Accanto alla vista autorizzata che vuoi modificare, fai clic sul menu Azioni more_vert e poi su Concedi accesso.

  6. Aggiungi almeno un'entità e seleziona il ruolo a cui assegnare l'entità o il gruppo di entità.

  7. (Facoltativo) Per concedere l'accesso per altri ruoli, fai clic su Aggiungi un altro ruolo, quindi inserisci l'entità e il ruolo per ogni ruolo aggiuntivo.

  8. Fai clic su Salva.

gcloud

  1. Se non conosci l'ID istanza, utilizza il comando bigtable instances list per visualizzare un elenco delle istanze del progetto: 

    gcloud bigtable instances list

  2. Se non conosci gli ID tabella dell'istanza, utilizza il comando bigtable instances tables list per visualizzare un elenco di tabelle nell'istanza.

    gcloud bigtable instances tables list --instances=INSTANCE_ID

  3. Se non conosci l'ID della vista, utilizza il comando bigtable authorized-views list per visualizzare un elenco di tutte le viste autorizzate della tabella.

    gcloud bigtable instances tables authorized-views list \
  --instance=INSTANCE_ID \
  --table=TABLE_ID

  4. Utilizza il comando bigtable authorized-views set-iam-policy:

    gcloud bigtable authorized-views set-iam-policy TABLE_ID{"</var>"}} \
  AUTHORIZED_VIEW_ID{"</var>"}} --instance=INSTANCE_ID{"</var>"}} POLICY_FILE{"</var>"}}

    Fornisci quanto segue:

    • INSTANCE_ID: l'identificatore permanente dell'istanza.
    • TABLE_ID: l'identificatore permanente della tabella.
    • AUTHORIZED_VIEW_ID: l'identificatore permanente della vista.
    • POLICY_FILE: il percorso di un file JSON o YAML locale contenente una policy IAM valida.

Condizioni IAM

Le condizioni IAM consentono di definire e applicare il controllo dell'accesso condizionale basato su attributi per alcune risorse Google Cloud, incluse le risorse Bigtable.

In Bigtable, puoi applicare l'accesso condizionale in base ai seguenti attributi:

  • Attributi di data/ora: utilizzali per impostare l'accesso temporaneo (in scadenza), programmato o di durata limitata alle risorse Bigtable. Ad esempio, puoi consentire a un utente di accedere a una tabella fino a una data specificata.
  • Attributi delle risorse: utilizzali per configurare l'accesso condizionale in base al nome, al tipo o agli attributi del servizio della risorsa. In Bigtable, puoi utilizzare gli attributi di istanze, cluster, tabelle, backup e viste autorizzate per configurare l'accesso condizionale. Ad esempio, puoi consentire a un utente di gestire solo le tabelle che iniziano con un prefisso specifico o di accedere solo a una tabella specifica.

Per saperne di più sulle condizioni IAM, consulta la panoramica delle condizioni.

Passaggi successivi

Scopri di più su IAM.