Review the permissions required to connect Data Integrity Suite to Google Cloud Spanner.
Note: Metadata extraction is available only with the Advanced Connectivity Bundle (ACB) entitlement.
Required Google Cloud IAM permissions
The service account used for authentication must have the roles/spanner.databaseReader IAM role on the target Spanner database, which grants the following permissions:
spanner.databases.getspanner.databases.listspanner.databases.selectspanner.sessions.createspanner.sessions.get
Creating the service account
- In the Google Cloud Console, navigate to IAM & Admin > Service Accounts.
- Create a new service account and grant it the Cloud Spanner Database Reader role.
- Create and download a JSON key for the service account.
- Paste the contents of the JSON key file in the Service account key field of the connection.