Page tree




This section covers the recommended IAM role that you must create and assign in Google Cloud Platform to enable users to access  Dataprep by Trifacta® through their projects.
  • IAM stands for Identity and Access Management. An IAM role contains a set of permissions to use cloud-based resources. Users can be assigned default or customized IAM roles, which enable access to the required cloud services to use the product.  Managing the individual permissions without an IAM role is not recommended.
  • For more information, see  

Required Permissions

To use any edition of  Dataprep by Trifacta, a specific set of permissions is required.

  • For  Dataprep by Trifacta and Dataprep by Trifacta Standard editions, these permissions are contained in the roles/Dataprep.User role, which is available when the product is licensed for a project. See below. 
  • For  Dataprep by Trifacta Premium, an additional set of permissions is required to perform actions on the data and gain access to the data.  For a list of required permissions, see Required Dataprep User Permissions.

Assign roles/Dataprep.User

When you have enabled  Dataprep by Trifacta in a project, the roles/Dataprep.User IAM role is available through the Google Cloud Platform console. IAM Roles can be assigned through the Roles page. For more information, see

Create Custom IAM Role

Feature Availability: This feature may not be available in all product editions. For more information on available features, see Compare Editions.

For  Dataprep by Trifacta Premium, additional permissions are required. 

Tip: The easiest way to manage these additional permissions is to create a separate custom IAM role containing the permissions. This new role and the roles/Dataprep.User can be assigned to any user who is granted access to the Dataprep by Trifacta Premium project.


Please complete the following steps to create a custom IAM role called, roles/Dataprep.Premium.Full, which contains the additional required permissions for the product. 

  1. To open the Google Cloud Platform console from the product, click the Console icon at the bottom of the left nav bar.
  2. In the console, select the project that was enabled for  Dataprep by Trifacta Premium.
  3. In the left nav bar of the console, click IAM & Admin > Roles. See
  4. In the Roles page, select + Create Role.
  5. In the Create Role panel, enter the following:
    1. Title: This value identifies the role in the console. Suggested title: Dataprep Trifacta Premium Full
    2. Description: Enter a meaningful text description.
    3. ID: Set this value to an internal identifier for this role. Suggested value: DataprepTrifactaPremiumFull
    4. Role launch stage: Set this value based on your enterprise task requirements.
  6. Permissions: If there are additional permissions listed below, then these permissions need to be added to a role. 

    Tip: You may wish to copy these roles to a text editor to assist in searching for them in the next step.

    1. Click + ADD PERMISSIONS.
    2. Select all of the permissions that need to be added. For more information, see Required Dataprep User Permissions.
    3. Click ADD.
    4. The permissions are added to the role.
  7. If all looks good in the role definition, click Create

Assign Role

You can now assign the custom role to users of the  Dataprep by Trifacta Premium project. 


  1. In the left nav bar of the console, click IAM.
  2. In the IAM manager, select the Members tab.

    Tip: If you need to add members to the Dataprep by Trifacta Premium project, you can do so now. Click +ADD.

  3. For each member who needs the additional role:
    1. For a project member, click the Pencil icon.
    2. In the Edit Permissions window, click +ADD ANOTHER ROLE.
    3. In the Select a role textbox, type the name of the role you created. For the above example, you would type: Dataprep Trifacta Premium Full

      NOTE: The role may not be available in the drop-down. You may need to manually type the name of your custom role.

    4. Click SAVE.
  4. Repeat the previous steps for other members of the project.

This page has no comments.