Reputation: 129
I'm curious about is there a way to restrict a user the use of DELETE statement; I've read a less specific but similar doubt here and consulted the related documentation there, besides swimming on row-level security, however the first two are focused on restrictions over deleting tables or datasets, and the third only works to let the user view rows under certain condition.
Do I have to define a condition on the IAM section, specifically for the user?
Thanks in advance.
Upvotes: 1
Views: 1706
Reputation: 75900
In BigQuery, you can read or update the data. You can find the roles here.
Update means update the meta-data (the schema), update data, add data and.... DELETE
data.
Therefore, you can only give a READER
permission to BigQuery -> DataViewer role. If you allow to change the data, you also allow to delete the data.
Upvotes: 3