gcloud sql --help
gcloud sql instances --help
gcloud sql instances create --help

Cloud SQL permissions

For a list of roles and their associated permissions, see Cloud SQL roles.

TaskRequired additional permissions
Displaying the instance listing pagecloudsql.instances.list
resourcemanager.projects.get
Creating an instancecloudsql.instances.create
cloudsql.instances.get
cloudsql.instances.list
resourcemanager.projects.get
Connecting to an instance from the Cloud Shellcloudsql.instances.get
cloudsql.instances.list
cloudsql.instances.update
resourcemanager.projects.get
Creating a usercloudsql.instances.get
cloudsql.instances.list
cloudsql.users.create
cloudsql.users.list
resourcemanager.projects.get
Viewing instance informationcloudsql.databases.list
cloudsql.instances.get
cloudsql.instances.list
cloudsql.users.list
monitoring.timeSeries.list
resourcemanager.projects.get
Viewing instance metadata in Dataplex Catalogcloudsql.schemas.view

Required permissions for gcloud sql commands

CommandRequired permissions
gcloud sql backups createcloudsql.backupRuns.create
gcloud sql backups deletecloudsql.backupRuns.delete
gcloud sql backups describecloudsql.backupRuns.get
gcloud sql backups listcloudsql.backupRuns.list
gcloud sql backups restorecloudsql.backupRuns.get
cloudsql.instances.restoreBackup
gcloud sql connectcloudsql.instances.get
cloudsql.instances.update
gcloud sql databases createcloudsql.databases.create
gcloud sql databases deletecloudsql.databases.delete
gcloud sql databases describecloudsql.databases.get
gcloud sql databases listcloudsql.databases.list
gcloud sql databases patchcloudsql.databases.get
cloudsql.databases.update
gcloud sql exportcloudsql.instances.export
cloudsql.instances.get
gcloud sql flags listNone
gcloud sql importcloudsql.instances.import
gcloud sql instances clonecloudsql.instances.clone
gcloud sql instances createcloudsql.instances.create
gcloud sql instances deletecloudsql.instances.delete
gcloud sql instances describecloudsql.instances.get
gcloud sql instances failovercloudsql.instances.failover
gcloud sql instances importcloudsql.instances.import
gcloud sql instances listcloudsql.instances.list
gcloud sql instances patchcloudsql.instances.get
cloudsql.instances.update
gcloud sql instances promote-replicacloudsql.instances.promoteReplica
gcloud sql instances reset-ssl-configcloudsql.instances.resetSslConfig
gcloud sql instances restartcloudsql.instances.restart
gcloud sql instances restore-backupcloudsql.backupRuns.get
cloudsql.instances.restoreBackup
gcloud sql operations describecloudsql.instances.get
gcloud sql operations listcloudsql.instances.get
gcloud sql operations waitcloudsql.instances.get
gcloud sql ssl client-certs createcloudsql.sslCerts.create
gcloud sql ssl client-certs deletecloudsql.sslCerts.delete
gcloud sql ssl client-certs describecloudsql.sslCerts.list
gcloud sql ssl client-certs listcloudsql.sslCerts.list
gcloud sql tiers listNone
gcloud sql users createcloudsql.users.create
gcloud sql users deletecloudsql.users.delete
gcloud sql users listcloudsql.users.list
gcloud sql users set-passwordcloudsql.users.update