Google Analytics(分析4 BigQuery链接)的最低角色是什么

发布于 2025-01-28 12:18:45 字数 4582 浏览 4 评论 0 原文

我想在我的客户端GA4属性上设置GA4 BigQuery链接,并将数据导出到我的GCP项目。

作为 提到,我将项目“编辑器”授予了我的客户帐户,我的客户端创建了GA4链接到我的GCP项目,然后它正常工作。 但是我认为“编辑”权限太多了,GA4 BigQuery链接是否有最低许可?

谢谢,

Project role for client user is

  • bigquery.bireservations.get
  • bigquery.bireservations.update
  • bigquery.capacityCommitments.create
  • bigquery.capacityCommitments.delete
  • bigquery.capacityCommitments.get
  • bigquery.capacityCommitments.list
  • bigquery.capacityCommitments. update
  • bigquery.config.get
  • bigquery.config.update
  • bigquery.connections.create
  • bigquery.connections.delegate
  • bigquery.connections.delete
  • bigquery.connections.get
  • bigquery.connections.getIamPolicy
  • bigquery.connections.list
  • bigquery.connections.setIamPolicy
  • bigquery.connections. update
  • bigquery.connections.updateTag
  • bigquery.connections.use
  • bigquery.dataPolicies.create
  • bigquery.dataPolicies.delete
  • bigquery.dataPolicies.get
  • bigquery.dataPolicies.getIamPolicy
  • bigquery.dataPolicies.list
  • bigquery.dataPolicies.setIamPolicy
  • bigquery.dataPolicies.update
  • bigquery.datasets. create
  • bigquery.datasets.createTagBinding
  • bigquery.datasets.delete
  • bigquery.datasets.deleteTagBinding
  • bigquery.datasets.get
  • bigquery.datasets.getIamPolicy
  • bigquery.datasets.listTagBindings
  • bigquery.datasets.setIamPolicy
  • bigquery.datasets.update
  • bigquery.datasets.updateTag
  • bigquery.jobs. create
  • bigquery.jobs.delete
  • bigquery.jobs.get
  • bigquery.jobs.list
  • bigquery.jobs.listAll
  • bigquery.jobs.listExecutionMetadata
  • bigquery.jobs.update
  • bigquery.models.create
  • bigquery.models.delete
  • bigquery.models.export
  • bigquery.models. getData
  • bigquery.models.getMetadata
  • bigquery.models.list
  • bigquery.models.updatedata
  • bigquery.models.updatemetadata
  • 安排
  • bigquery.models.updatetag
  • 精神
  • 。 删除
  • bigquery.reservationAssignments.list
  • bigquery.reservationAssignments.search
  • bigquery.reservations.create
  • bigquery.reservations.delete
  • bigquery.reservations.get
  • bigquery.Reservations.list
  • bigquery.reservations.uservations.update
  • bigquery.routines.routines.routines.deletine.delete.delete.delete.deletequerten.deletequerte
  • bigquery.routines.routines.routines.routines.create
  • 。获取
  • bigquery.routines.list
  • bigquery.routines.update
  • bigquery.routines.updatetag
  • bigquery.rowaccesspolicies.create
  • bigquery.rowaccesspolicies.delete
  • bigquery.rowaccesspolicies.getiampolicy
  • bigiccesspolice.rowccespolice.policy.policy.polist.list.list
  • bigquery.savedqueries
  • AccessPolicies.update
  • 。 create
  • bigquery.savedqueries.delete
  • bigquery.savedqueries.get
  • bigquery.savedqueries.list
  • bigquery.savedqueries.update
  • bigquery.tables.create
  • bigquery.tables.createIndex
  • bigquery.tables.createSnapshot
  • bigquery.tables.delete
  • bigquery.tables.deleteIndex
  • bigquery.tables. deleteSnapshot
  • bigquery.tables.export
  • bigquery.tables.get
  • bigquery.tables.getData
  • bigquery.tables.getIamPolicy
  • bigquery.tables.list
  • bigquery.tables.restoreSnapshot
  • bigquery.tables.setCategory
  • bigquery.tables.setIamPolicy
  • bigquery.tables.update
  • bigquery.tables. updateData
  • bigquery.tables.updatetag
  • bigquery.transfers.get
  • bigquery.transfers.update
  • bigquerymigration.translation.translate
  • resourcemanager.project.projects.get
  • resourcemanager.project.project.projects.setiampolicysices.services.servisees.service.service.servise.serbable.serable.enable.enable.enable.enable

I want to set GA4 Bigquery Linking on my client GA4 Property, and Export data to My GCP Project.

As
https://support.google.com/analytics/answer/3416092?hl=en#zippy=%2Cin-this-article
mentioned, I gave Project "Editor" permission to my client account, and my client created GA4 link to My GCP Project, then It works correctly.
But I think "Editor" permission is too much, is there minimum permission for GA4 bigquery link?

Thanks,

enter image description here

Project role for client user is

  • bigquery.bireservations.get
  • bigquery.bireservations.update
  • bigquery.capacityCommitments.create
  • bigquery.capacityCommitments.delete
  • bigquery.capacityCommitments.get
  • bigquery.capacityCommitments.list
  • bigquery.capacityCommitments.update
  • bigquery.config.get
  • bigquery.config.update
  • bigquery.connections.create
  • bigquery.connections.delegate
  • bigquery.connections.delete
  • bigquery.connections.get
  • bigquery.connections.getIamPolicy
  • bigquery.connections.list
  • bigquery.connections.setIamPolicy
  • bigquery.connections.update
  • bigquery.connections.updateTag
  • bigquery.connections.use
  • bigquery.dataPolicies.create
  • bigquery.dataPolicies.delete
  • bigquery.dataPolicies.get
  • bigquery.dataPolicies.getIamPolicy
  • bigquery.dataPolicies.list
  • bigquery.dataPolicies.setIamPolicy
  • bigquery.dataPolicies.update
  • bigquery.datasets.create
  • bigquery.datasets.createTagBinding
  • bigquery.datasets.delete
  • bigquery.datasets.deleteTagBinding
  • bigquery.datasets.get
  • bigquery.datasets.getIamPolicy
  • bigquery.datasets.listTagBindings
  • bigquery.datasets.setIamPolicy
  • bigquery.datasets.update
  • bigquery.datasets.updateTag
  • bigquery.jobs.create
  • bigquery.jobs.delete
  • bigquery.jobs.get
  • bigquery.jobs.list
  • bigquery.jobs.listAll
  • bigquery.jobs.listExecutionMetadata
  • bigquery.jobs.update
  • bigquery.models.create
  • bigquery.models.delete
  • bigquery.models.export
  • bigquery.models.getData
  • bigquery.models.getMetadata
  • bigquery.models.list
  • bigquery.models.updateData
  • bigquery.models.updateMetadata
  • bigquery.models.updateTag
  • bigquery.readsessions.create
  • bigquery.readsessions.getData
  • bigquery.readsessions.update
  • bigquery.reservationAssignments.create
  • bigquery.reservationAssignments.delete
  • bigquery.reservationAssignments.list
  • bigquery.reservationAssignments.search
  • bigquery.reservations.create
  • bigquery.reservations.delete
  • bigquery.reservations.get
  • bigquery.reservations.list
  • bigquery.reservations.update
  • bigquery.routines.create
  • bigquery.routines.delete
  • bigquery.routines.get
  • bigquery.routines.list
  • bigquery.routines.update
  • bigquery.routines.updateTag
  • bigquery.rowAccessPolicies.create
  • bigquery.rowAccessPolicies.delete
  • bigquery.rowAccessPolicies.getIamPolicy
  • bigquery.rowAccessPolicies.list
  • bigquery.rowAccessPolicies.setIamPolicy
  • bigquery.rowAccessPolicies.update
  • bigquery.savedqueries.create
  • bigquery.savedqueries.delete
  • bigquery.savedqueries.get
  • bigquery.savedqueries.list
  • bigquery.savedqueries.update
  • bigquery.tables.create
  • bigquery.tables.createIndex
  • bigquery.tables.createSnapshot
  • bigquery.tables.delete
  • bigquery.tables.deleteIndex
  • bigquery.tables.deleteSnapshot
  • bigquery.tables.export
  • bigquery.tables.get
  • bigquery.tables.getData
  • bigquery.tables.getIamPolicy
  • bigquery.tables.list
  • bigquery.tables.restoreSnapshot
  • bigquery.tables.setCategory
  • bigquery.tables.setIamPolicy
  • bigquery.tables.update
  • bigquery.tables.updateData
  • bigquery.tables.updateTag
  • bigquery.transfers.get
  • bigquery.transfers.update
  • bigquerymigration.translation.translate
  • resourcemanager.projects.get
  • resourcemanager.projects.setIamPolicy
  • serviceusage.services.enable

如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

扫码二维码加入Web技术交流群

发布评论

需要 登录 才能够评论, 你可以免费 注册 一个本站的账号。

评论(2

姜生凉生 2025-02-04 12:18:45

经过几次尝试,我找到了此燃烧文档和您需要的角色:

firebase许可

因此,我要做的是添加自定义角色

serviceusage.services.enable
resourcemanager.projects.get
resourcemanager.projects.getIamPolicy
resourcemanager.projects.setIamPolicy

并附加,将IAM控制台添加到执行绑定权限的用户:

Service Usage Viewer (roles/serviceusage.serviceUsageViewer).

只能具有:

serviceusage.services.enable
resourcemanager.projects.setIamPolicy

另一件事是自定义角色 :

Project IAM Admin (roles/resourcemanager.projectIamAdmin)
Service Usage Viewer (roles/serviceusage.serviceUsageViewer)

希望您发现它有用。

After several attempts I found this firebase documentation and the roles you need:

Firebase Permission

So what I did was to add a custom role with

serviceusage.services.enable
resourcemanager.projects.get
resourcemanager.projects.getIamPolicy
resourcemanager.projects.setIamPolicy

And additional, add in the IAM console to the user that performs the binding the permissions of:

Service Usage Viewer (roles/serviceusage.serviceUsageViewer).

The other thing is that the custom role can have only the role of:

serviceusage.services.enable
resourcemanager.projects.setIamPolicy

and add the roles of:

Project IAM Admin (roles/resourcemanager.projectIamAdmin)
Service Usage Viewer (roles/serviceusage.serviceUsageViewer)

I hope you find it useful.

不必了 2025-02-04 12:18:45

您可以提供以下角色(在项目或数据集上)

  1. 角色/bigquery.admin

  2. (角色/bigquery.dataeditor)

  3. bigquery数据所有者(仅在目标数据集上)
    (角色/bigquery.dataowner)

You can provide below roles ( On Project or Dataset)

  1. roles/bigquery.admin

  2. (roles/bigquery.dataEditor)

  3. BigQuery Data Owner ( Only on target Dataset )
    (roles/bigquery.dataOwner)

~没有更多了~
我们使用 Cookies 和其他技术来定制您的体验包括您的登录状态等。通过阅读我们的 隐私政策 了解更多相关信息。 单击 接受 或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
原文