Search code examples
google-cloud-platformgoogle-bigquerygoogle-iam

How to limit Google Cloud Platform "BigQuery Metadata Viewer" permission?


I have 10 tables under my dataset. I need to create "BigQuery Metadata Viewer" permission but would like to neglect 2 tables under my dataset. So that BigQuery Metadata Viewer policy only will be able to access 8 tables.

I see that there is "condition" tab but could not figure out how to apply such a condition here.

enter image description here


Solution

  • IAM condition is a nice way to solve that issue, but it's not available for BigQuery resources.

    The solution here is to have 2 datasets

    • One with the 8 tables and the permission to view the metadata
    • one with the 2 other tables without the permission to view the metadata.