Google Cloud Function无法删除BigQuery数据集，需补充何种权限？

我创建了一个Cloud Function，用于筛选出符合特定条件的BigQuery数据集并将其删除。使用的删除代码如下：

bigquery_client.delete_dataset(
dataset['schema_name'], delete_contents=True, not_found_ok=True
)  # Make an API request.

但执行时出现如下403权限错误：

fn_clean_bq_datasetrrhier7sk4oz Traceback (most recent call last): File "/layers/google.python.pip/pip/lib/python3.9/site-packages/flask/app.py", line 2073, in wsgi_app response = self.full_dispatch_request() 
File "/layers/google.python.pip/pip/lib/python3.9/site-packages/flask/app.py", line 1518, in full_dispatch_request rv = self.handle_user_exception(e) File "/layers/google.python.pip/pip/lib/python3.9/site-packages/flask/app.py", line 1516, in full_dispatch_request rv = self.dispatch_request() 
File "/layers/google.python.pip/pip/lib/python3.9/site-packages/flask/app.py", line 1502, in dispatch_request return self.ensure_sync(self.view_functions[rule.endpoint])(**req.view_args) 
File "/layers/google.python.pip/pip/lib/python3.9/site-packages/functions_framework/__init__.py", line 99, in view_func return function(request._get_current_object()) File "/workspace/main.py", line 76, in clean_bq_dataset bigquery_client.delete_dataset( 
File "/layers/google.python.pip/pip/lib/python3.9/site-packages/google/cloud/bigquery/client.py", line 1571, in delete_dataset self._call_api( File "/layers/google.python.pip/pip/lib/python3.9/site-packages/google/cloud/bigquery/client.py", line 759, in _call_api return call() 
File "/layers/google.python.pip/pip/lib/python3.9/site-packages/google/api_core/retry.py", line 283, in retry_wrapped_func return retry_target( File "/layers/google.python.pip/pip/lib/python3.9/site-packages/google/api_core/retry.py", line 190, in retry_target return target() 
File "/layers/google.python.pip/pip/lib/python3.9/site-packages/google/cloud/_http/__init__.py", line 494, in api_request raise exceptions.from_http_response(response) google.api_core.exceptions.
Forbidden: 403 DELETE https://bigquery.googleapis.com/bigquery/v2/projects/xxxxxxxx/datasets/dataset_v05c248634?deleteContents=true&prettyPrint=false: Access Denied: Dataset xxxxxxxxx:dataset_v05c248634: Permission bigquery.datasets.delete denied on dataset xxxxxxxxxxx:dataset_v05c248634 (or it may not exist).

需要补充的权限 #

• 必须为Cloud Function使用的服务账号添加bigquery.datasets.delete权限，这是删除BigQuery数据集的核心权限。
• 可以选择以下方式绑定权限：
  • 绑定预定义角色：比如BigQuery Data Owner或BigQuery Admin，这两个角色都包含数据集删除权限，适合快速配置。
  • 遵循最小权限原则：创建自定义角色，仅包含bigquery.datasets.delete权限，再将该角色绑定到Cloud Function的服务账号上。

内容的提问来源于stack exchange，提问作者Vibhor Gupta