Create a custom IAM role at the project level
Learn how to create a custom role with IAM permissions at the project level.
There are two ways to create the role:
-
Using the following gcloud command:
gcloud iam roles create reltio.gbq.connector.global --project=<project-id> --title="Reltio GBQ connector Project Level" --permissions=bigquery.jobs.create,bigquery.jobs.get Using the Google Cloud console.
To create an IAM role using the Google Cloud console:
- In the Google Cloud console, select Roles.
- In the Roles page, select your organization or project from the drop-down list at the top of the page.
- Select the More actions icon at the top of the page.
- Select CREATE ROLE.
- In the Create Role page, provide the following details for your role:
- Title: Enter the role name.
- Description: Enter the role description.
- ID: Enter the role ID.
- Role launch stage: Select the stage that indicates whether the role is ready for widespread use or not from the drop-down list.
- Select + ADD PERMISSIONS.
- In the Add permissions window, select the
bigquery.jobs.createandbigquery.jobs.getpermissions to include in the role by searching for the permission in the Enter property name or value field.The assigned permissions are displayed in the assigned permissions section.
- Select the permissions.
- Select ADD.
- Select CREATE.
See the following table for a description of the permissions:
| Permission | Description |
|---|---|
| bigquery.jobs.create | Used for table or view recreation and compaction operations. |
| bigquery.jobs.get | Used for table or view recreation and compaction operations. |