Create a custom IAM role at the project level
Learn how to create a custom role with IAM permissions at the project level.
-
Using the following gcloud command:
gcloud iam roles create reltio.gbq.connector.global --project=<project-id> --title="Reltio GBQ connector Project Level" --permissions=bigquery.jobs.create,bigquery.jobs.get
Using the Google Cloud console.
To create an IAM role using the Google Cloud console:
- In the Google Cloud console, select Roles.
- In the Roles page, select your organization or project from the drop-down list at the top of the page.
- Select the More actions icon at the top of the page.
- Select CREATE ROLE.
- In the Create Role page, provide the following details for your role:
- Title: Enter the role name.
- Description: Enter the role description.
- ID: Enter the role ID.
- Role launch stage: Select the stage that indicates whether the role is ready for widespread use or not from the drop-down list.
- Select + ADD PERMISSIONS.
- In the Add permissions window, select the
bigquery.jobs.create
andbigquery.jobs.get
permissions to include in the role by searching for the permission in the Enter property name or value field. The assigned permissions are displayed in the assigned permissions section. - Select the permissions.
- Select ADD.
- Select CREATE.
See the following table for a description of the permissions:
Permission | Description |
---|---|
bigquery.jobs.create | Used for table or view recreation and compaction operations. |
bigquery.jobs.get | Used for table or view recreation and compaction operations. |