INFORMATION_SCHEMA.RECOMMENDATIONS_BY_ORGANIZATION

Google Cloud Data Analytics
1

Our FIM Group has these roles at the ORG level but we cannot see any recommendations from the view – region-us.INFORMATION_SCHEMA.RECOMMENDATIONS_BY_ORGANIZATION.

Any idea why? Is there anything we need to setup before we can see the recommendations?

  • roles/recommender.bigqueryPartitionClusterViewer
  • roles/recommender.bigqueryMaterializedViewViewer

Reference: INFORMATION_SCHEMA.RECOMMENDATIONS_BY_ORGANIZATION view | BigQuery | Google Cloud

2

Hi @mdideles ,

Welcome to Google Cloud Community!

Confirm that you have the following permissions set at the organization level:

Partition & cluster recommender permissions:

  • roles/recommender.bigqueryPartitionClusterViewer
  • recommender.bigqueryPartitionClusterRecommendations.get
  • recommender.bigqueryPartitionClusterRecommendations.list

Materialized view recommendations permissions:

  • roles/recommender.bigqueryMaterializedViewViewer
  • recommender.bigqueryMaterializedViewRecommendations.get
  • recommender.bigqueryMaterializedViewRecommendations.list

Alternatively, you can view “Recommendations” directly in the Google Cloud console. Refer to the documentation for detailed guidance. You can also check the ‘Location’ column to confirm the specified region as shown below:

Screenshot 2024-11-12 12.37.12 AM.png
Screenshot 2024-11-12 12.37.12 AM.png625×121 11 KB

Then update the region name in your syntax accordingly:

region-REGION_NAME.INFORMATION_SCHEMA.RECOMMENDATIONS

If the issue persists, please contact Google Cloud Support. When reaching out, include detailed information and relevant screenshots of the errors you’ve encountered. This will assist them in diagnosing and resolving your issue more efficiently.

I hope the above information is helpful.

3

Hi @caryna ,

Our FIM Group has these roles at the ORG level:

  • roles/recommender.bigqueryPartitionClusterViewer
  • roles/recommender.bigqueryMaterializedViewViewer

These 2 roles have all these permissions:

  • recommender.bigqueryMaterializedViewRecommendations.get
  • recommender.bigqueryMaterializedViewRecommendations.list
  • recommender.bigqueryPartitionClusterRecommendations.get
  • recommender.bigqueryPartitionClusterRecommendations.list

I can see the recommendations in the recommendations hub but it says that I have 1 missing permission. I will add this permission and see if I can get the recommendation from the information schema.

  • recommender.iamPolicyRecommendations.list
4

Hi @mdideles ,

Have you tried adding roles/recommender.viewer? For further details, refer to this documentation for additional insights.

5

I requested it to be added. I will see if this will also allow me to see the data from the information_schema. I doubt but I hope so.