BigLake audit logging

This document describes audit logging for BigLake. Google Cloud services write audit logs that record administrative activities and accesses within your Google Cloud resources. For more information, see Cloud Audit Logs overview.

This page was last generated on 2024-05-20 19:37:50 UTC.

Service name

BigLake audit logs use the service name biglake.googleapis.com.

Methods by permission type

Methods that check DATA_READ, DATA_WRITE, and ADMIN_READ permission types are Data Access audit logs. Methods that check ADMIN_WRITE permission types are Admin Activity audit logs.

Permission type	Methods
ADMIN_READ	google.cloud.bigquery.biglake.v1.MetastoreService.GetCatalog google.cloud.bigquery.biglake.v1.MetastoreService.GetDatabase google.cloud.bigquery.biglake.v1.MetastoreService.GetTable google.cloud.bigquery.biglake.v1.MetastoreService.ListCatalogs google.cloud.bigquery.biglake.v1.MetastoreService.ListDatabases google.cloud.bigquery.biglake.v1.MetastoreService.ListTables google.cloud.bigquery.biglake.v1alpha1.MetastoreService.GetCatalog google.cloud.bigquery.biglake.v1alpha1.MetastoreService.GetDatabase google.cloud.bigquery.biglake.v1alpha1.MetastoreService.GetTable google.cloud.bigquery.biglake.v1alpha1.MetastoreService.ListCatalogs google.cloud.bigquery.biglake.v1alpha1.MetastoreService.ListDatabases google.cloud.bigquery.biglake.v1alpha1.MetastoreService.ListLocks google.cloud.bigquery.biglake.v1alpha1.MetastoreService.ListTables
ADMIN_WRITE	google.cloud.bigquery.biglake.v1.MetastoreService.CreateCatalog google.cloud.bigquery.biglake.v1.MetastoreService.CreateDatabase google.cloud.bigquery.biglake.v1.MetastoreService.CreateTable google.cloud.bigquery.biglake.v1.MetastoreService.DeleteCatalog google.cloud.bigquery.biglake.v1.MetastoreService.DeleteDatabase google.cloud.bigquery.biglake.v1.MetastoreService.DeleteTable google.cloud.bigquery.biglake.v1.MetastoreService.RenameTable google.cloud.bigquery.biglake.v1.MetastoreService.UpdateDatabase google.cloud.bigquery.biglake.v1.MetastoreService.UpdateTable google.cloud.bigquery.biglake.v1alpha1.MetastoreService.CheckLock google.cloud.bigquery.biglake.v1alpha1.MetastoreService.CreateCatalog google.cloud.bigquery.biglake.v1alpha1.MetastoreService.CreateDatabase google.cloud.bigquery.biglake.v1alpha1.MetastoreService.CreateLock google.cloud.bigquery.biglake.v1alpha1.MetastoreService.CreateTable google.cloud.bigquery.biglake.v1alpha1.MetastoreService.DeleteCatalog google.cloud.bigquery.biglake.v1alpha1.MetastoreService.DeleteDatabase google.cloud.bigquery.biglake.v1alpha1.MetastoreService.DeleteLock google.cloud.bigquery.biglake.v1alpha1.MetastoreService.DeleteTable google.cloud.bigquery.biglake.v1alpha1.MetastoreService.RenameTable google.cloud.bigquery.biglake.v1alpha1.MetastoreService.UpdateDatabase google.cloud.bigquery.biglake.v1alpha1.MetastoreService.UpdateTable

Permission type

Methods

ADMIN_READ

google.cloud.bigquery.biglake.v1.MetastoreService.GetCatalog
google.cloud.bigquery.biglake.v1.MetastoreService.GetDatabase
google.cloud.bigquery.biglake.v1.MetastoreService.GetTable
google.cloud.bigquery.biglake.v1.MetastoreService.ListCatalogs
google.cloud.bigquery.biglake.v1.MetastoreService.ListDatabases
google.cloud.bigquery.biglake.v1.MetastoreService.ListTables
google.cloud.bigquery.biglake.v1alpha1.MetastoreService.GetCatalog
google.cloud.bigquery.biglake.v1alpha1.MetastoreService.GetDatabase
google.cloud.bigquery.biglake.v1alpha1.MetastoreService.GetTable
google.cloud.bigquery.biglake.v1alpha1.MetastoreService.ListCatalogs
google.cloud.bigquery.biglake.v1alpha1.MetastoreService.ListDatabases
google.cloud.bigquery.biglake.v1alpha1.MetastoreService.ListLocks
google.cloud.bigquery.biglake.v1alpha1.MetastoreService.ListTables

ADMIN_WRITE

google.cloud.bigquery.biglake.v1.MetastoreService.CreateCatalog
google.cloud.bigquery.biglake.v1.MetastoreService.CreateDatabase
google.cloud.bigquery.biglake.v1.MetastoreService.CreateTable
google.cloud.bigquery.biglake.v1.MetastoreService.DeleteCatalog
google.cloud.bigquery.biglake.v1.MetastoreService.DeleteDatabase
google.cloud.bigquery.biglake.v1.MetastoreService.DeleteTable
google.cloud.bigquery.biglake.v1.MetastoreService.RenameTable
google.cloud.bigquery.biglake.v1.MetastoreService.UpdateDatabase
google.cloud.bigquery.biglake.v1.MetastoreService.UpdateTable
google.cloud.bigquery.biglake.v1alpha1.MetastoreService.CheckLock
google.cloud.bigquery.biglake.v1alpha1.MetastoreService.CreateCatalog
google.cloud.bigquery.biglake.v1alpha1.MetastoreService.CreateDatabase
google.cloud.bigquery.biglake.v1alpha1.MetastoreService.CreateLock
google.cloud.bigquery.biglake.v1alpha1.MetastoreService.CreateTable
google.cloud.bigquery.biglake.v1alpha1.MetastoreService.DeleteCatalog
google.cloud.bigquery.biglake.v1alpha1.MetastoreService.DeleteDatabase
google.cloud.bigquery.biglake.v1alpha1.MetastoreService.DeleteLock
google.cloud.bigquery.biglake.v1alpha1.MetastoreService.DeleteTable
google.cloud.bigquery.biglake.v1alpha1.MetastoreService.RenameTable
google.cloud.bigquery.biglake.v1alpha1.MetastoreService.UpdateDatabase
google.cloud.bigquery.biglake.v1alpha1.MetastoreService.UpdateTable

Audit logs per API interface

For information about which permissions are evaluated and how for each method, see the Identity and Access Management documentation for BigLake.

google.cloud.bigquery.biglake.v1.MetastoreService

Details about audit logs associated with methods belonging to google.cloud.bigquery.biglake.v1.MetastoreService.

google.cloud.bigquery.biglake.v1.MetastoreService.CreateCatalog

Method: google.cloud.bigquery.biglake.v1.MetastoreService.CreateCatalog
Audit log Type: Admin Activity
Permissions:
- biglake.catalogs.create - ADMIN_WRITE
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1.MetastoreService.CreateCatalog"

google.cloud.bigquery.biglake.v1.MetastoreService.CreateDatabase

Method: google.cloud.bigquery.biglake.v1.MetastoreService.CreateDatabase
Audit log Type: Admin Activity
Permissions:
- biglake.databases.create - ADMIN_WRITE
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1.MetastoreService.CreateDatabase"

google.cloud.bigquery.biglake.v1.MetastoreService.CreateTable

Method: google.cloud.bigquery.biglake.v1.MetastoreService.CreateTable
Audit log Type: Admin Activity
Permissions:
- biglake.tables.create - ADMIN_WRITE
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1.MetastoreService.CreateTable"

google.cloud.bigquery.biglake.v1.MetastoreService.DeleteCatalog

Method: google.cloud.bigquery.biglake.v1.MetastoreService.DeleteCatalog
Audit log Type: Admin Activity
Permissions:
- biglake.catalogs.delete - ADMIN_WRITE
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1.MetastoreService.DeleteCatalog"

google.cloud.bigquery.biglake.v1.MetastoreService.DeleteDatabase

Method: google.cloud.bigquery.biglake.v1.MetastoreService.DeleteDatabase
Audit log Type: Admin Activity
Permissions:
- biglake.databases.delete - ADMIN_WRITE
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1.MetastoreService.DeleteDatabase"

google.cloud.bigquery.biglake.v1.MetastoreService.DeleteTable

Method: google.cloud.bigquery.biglake.v1.MetastoreService.DeleteTable
Audit log Type: Admin Activity
Permissions:
- biglake.tables.delete - ADMIN_WRITE
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1.MetastoreService.DeleteTable"

google.cloud.bigquery.biglake.v1.MetastoreService.GetCatalog

Method: google.cloud.bigquery.biglake.v1.MetastoreService.GetCatalog
Audit log Type: Data Access
Permissions:
- biglake.catalogs.get - ADMIN_READ
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1.MetastoreService.GetCatalog"

google.cloud.bigquery.biglake.v1.MetastoreService.GetDatabase

Method: google.cloud.bigquery.biglake.v1.MetastoreService.GetDatabase
Audit log Type: Data Access
Permissions:
- biglake.databases.get - ADMIN_READ
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1.MetastoreService.GetDatabase"

google.cloud.bigquery.biglake.v1.MetastoreService.GetTable

Method: google.cloud.bigquery.biglake.v1.MetastoreService.GetTable
Audit log Type: Data Access
Permissions:
- biglake.tables.get - ADMIN_READ
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1.MetastoreService.GetTable"

google.cloud.bigquery.biglake.v1.MetastoreService.ListCatalogs

Method: google.cloud.bigquery.biglake.v1.MetastoreService.ListCatalogs
Audit log Type: Data Access
Permissions:
- biglake.catalogs.list - ADMIN_READ
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1.MetastoreService.ListCatalogs"

google.cloud.bigquery.biglake.v1.MetastoreService.ListDatabases

Method: google.cloud.bigquery.biglake.v1.MetastoreService.ListDatabases
Audit log Type: Data Access
Permissions:
- biglake.databases.list - ADMIN_READ
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1.MetastoreService.ListDatabases"

google.cloud.bigquery.biglake.v1.MetastoreService.ListTables

Method: google.cloud.bigquery.biglake.v1.MetastoreService.ListTables
Audit log Type: Data Access
Permissions:
- biglake.tables.list - ADMIN_READ
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1.MetastoreService.ListTables"

google.cloud.bigquery.biglake.v1.MetastoreService.RenameTable

Method: google.cloud.bigquery.biglake.v1.MetastoreService.RenameTable
Audit log Type: Admin Activity
Permissions:
- biglake.tables.update - ADMIN_WRITE
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1.MetastoreService.RenameTable"

google.cloud.bigquery.biglake.v1.MetastoreService.UpdateDatabase

Method: google.cloud.bigquery.biglake.v1.MetastoreService.UpdateDatabase
Audit log Type: Admin Activity
Permissions:
- biglake.databases.update - ADMIN_WRITE
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1.MetastoreService.UpdateDatabase"

google.cloud.bigquery.biglake.v1.MetastoreService.UpdateTable

Method: google.cloud.bigquery.biglake.v1.MetastoreService.UpdateTable
Audit log Type: Admin Activity
Permissions:
- biglake.tables.update - ADMIN_WRITE
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1.MetastoreService.UpdateTable"

google.cloud.bigquery.biglake.v1alpha1.MetastoreService

Details about audit logs associated with methods belonging to google.cloud.bigquery.biglake.v1alpha1.MetastoreService.

google.cloud.bigquery.biglake.v1alpha1.MetastoreService.CheckLock

Method: google.cloud.bigquery.biglake.v1alpha1.MetastoreService.CheckLock
Audit log Type: Admin Activity
Permissions:
- biglake.locks.check - ADMIN_WRITE
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1alpha1.MetastoreService.CheckLock"

google.cloud.bigquery.biglake.v1alpha1.MetastoreService.CreateCatalog

Method: google.cloud.bigquery.biglake.v1alpha1.MetastoreService.CreateCatalog
Audit log Type: Admin Activity
Permissions:
- biglake.catalogs.create - ADMIN_WRITE
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1alpha1.MetastoreService.CreateCatalog"

google.cloud.bigquery.biglake.v1alpha1.MetastoreService.CreateDatabase

Method: google.cloud.bigquery.biglake.v1alpha1.MetastoreService.CreateDatabase
Audit log Type: Admin Activity
Permissions:
- biglake.databases.create - ADMIN_WRITE
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1alpha1.MetastoreService.CreateDatabase"

google.cloud.bigquery.biglake.v1alpha1.MetastoreService.CreateLock

Method: google.cloud.bigquery.biglake.v1alpha1.MetastoreService.CreateLock
Audit log Type: Admin Activity
Permissions:
- biglake.locks.create - ADMIN_WRITE
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1alpha1.MetastoreService.CreateLock"

google.cloud.bigquery.biglake.v1alpha1.MetastoreService.CreateTable

Method: google.cloud.bigquery.biglake.v1alpha1.MetastoreService.CreateTable
Audit log Type: Admin Activity
Permissions:
- biglake.tables.create - ADMIN_WRITE
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1alpha1.MetastoreService.CreateTable"

google.cloud.bigquery.biglake.v1alpha1.MetastoreService.DeleteCatalog

Method: google.cloud.bigquery.biglake.v1alpha1.MetastoreService.DeleteCatalog
Audit log Type: Admin Activity
Permissions:
- biglake.catalogs.delete - ADMIN_WRITE
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1alpha1.MetastoreService.DeleteCatalog"

google.cloud.bigquery.biglake.v1alpha1.MetastoreService.DeleteDatabase

Method: google.cloud.bigquery.biglake.v1alpha1.MetastoreService.DeleteDatabase
Audit log Type: Admin Activity
Permissions:
- biglake.databases.delete - ADMIN_WRITE
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1alpha1.MetastoreService.DeleteDatabase"

google.cloud.bigquery.biglake.v1alpha1.MetastoreService.DeleteLock

Method: google.cloud.bigquery.biglake.v1alpha1.MetastoreService.DeleteLock
Audit log Type: Admin Activity
Permissions:
- biglake.locks.delete - ADMIN_WRITE
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1alpha1.MetastoreService.DeleteLock"

google.cloud.bigquery.biglake.v1alpha1.MetastoreService.DeleteTable

Method: google.cloud.bigquery.biglake.v1alpha1.MetastoreService.DeleteTable
Audit log Type: Admin Activity
Permissions:
- biglake.tables.delete - ADMIN_WRITE
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1alpha1.MetastoreService.DeleteTable"

google.cloud.bigquery.biglake.v1alpha1.MetastoreService.GetCatalog

Method: google.cloud.bigquery.biglake.v1alpha1.MetastoreService.GetCatalog
Audit log Type: Data Access
Permissions:
- biglake.catalogs.get - ADMIN_READ
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1alpha1.MetastoreService.GetCatalog"

google.cloud.bigquery.biglake.v1alpha1.MetastoreService.GetDatabase

Method: google.cloud.bigquery.biglake.v1alpha1.MetastoreService.GetDatabase
Audit log Type: Data Access
Permissions:
- biglake.databases.get - ADMIN_READ
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1alpha1.MetastoreService.GetDatabase"

google.cloud.bigquery.biglake.v1alpha1.MetastoreService.GetTable

Method: google.cloud.bigquery.biglake.v1alpha1.MetastoreService.GetTable
Audit log Type: Data Access
Permissions:
- biglake.tables.get - ADMIN_READ
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1alpha1.MetastoreService.GetTable"

google.cloud.bigquery.biglake.v1alpha1.MetastoreService.ListCatalogs

Method: google.cloud.bigquery.biglake.v1alpha1.MetastoreService.ListCatalogs
Audit log Type: Data Access
Permissions:
- biglake.catalogs.list - ADMIN_READ
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1alpha1.MetastoreService.ListCatalogs"

google.cloud.bigquery.biglake.v1alpha1.MetastoreService.ListDatabases

Method: google.cloud.bigquery.biglake.v1alpha1.MetastoreService.ListDatabases
Audit log Type: Data Access
Permissions:
- biglake.databases.list - ADMIN_READ
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1alpha1.MetastoreService.ListDatabases"

google.cloud.bigquery.biglake.v1alpha1.MetastoreService.ListLocks

Method: google.cloud.bigquery.biglake.v1alpha1.MetastoreService.ListLocks
Audit log Type: Data Access
Permissions:
- biglake.locks.list - ADMIN_READ
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1alpha1.MetastoreService.ListLocks"

google.cloud.bigquery.biglake.v1alpha1.MetastoreService.ListTables

Method: google.cloud.bigquery.biglake.v1alpha1.MetastoreService.ListTables
Audit log Type: Data Access
Permissions:
- biglake.tables.list - ADMIN_READ
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1alpha1.MetastoreService.ListTables"

google.cloud.bigquery.biglake.v1alpha1.MetastoreService.RenameTable

Method: google.cloud.bigquery.biglake.v1alpha1.MetastoreService.RenameTable
Audit log Type: Admin Activity
Permissions:
- biglake.tables.update - ADMIN_WRITE
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1alpha1.MetastoreService.RenameTable"

google.cloud.bigquery.biglake.v1alpha1.MetastoreService.UpdateDatabase

Method: google.cloud.bigquery.biglake.v1alpha1.MetastoreService.UpdateDatabase
Audit log Type: Admin Activity
Permissions:
- biglake.databases.update - ADMIN_WRITE
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1alpha1.MetastoreService.UpdateDatabase"

google.cloud.bigquery.biglake.v1alpha1.MetastoreService.UpdateTable

Method: google.cloud.bigquery.biglake.v1alpha1.MetastoreService.UpdateTable
Audit log Type: Admin Activity
Permissions:
- biglake.tables.update - ADMIN_WRITE
Method is a Long Running Operation or Streaming: No.
Filter for this method: protoPayload.methodName="google.cloud.bigquery.biglake.v1alpha1.MetastoreService.UpdateTable"