Can I customise permissions granted by Dataplex \"Data Roles\"?答案

【问题标题】：Can I customise permissions granted by Dataplex "Data Roles"?Can I customise permissions granted by Dataplex \"Data Roles\"?
【发布时间】：2022-12-02 09:30:40
【问题描述】：

I'm using Dataplex to grant users permissions to underlying BigQuery tables.

This is done using Dataplex "data roles", which grant some (not very clearly specified?) permissions on the BigQuery tables. For example, roles/dataplex.dataWriter gives some vague "write" permissions to users.

Is it possible to customise which permissions Dataplex will give to a user who is assigned this role, or will I just have to manage the permissions outside of Dataplex?

【问题讨论】：

标签： google-cloud-platform google-bigquery google-dataplex

【解决方案1】：

I've spoken to Google Support and there is no way to customise the permissions that Dataplex gives on underlying resources at this time. Thereisa long-term plan for this functionality.

【讨论】：

【解决方案2】：

The role that is granted on the BigQuery dataset is roles/dataplex.storageDataWriter which contains permissions related to writing data into BigQuery.

Can you describe which permissions you would like to be granted on the Dataset, when you grant a principal the roles/dataplex.dataWriter role?

【讨论】：