Its pleasing to see that Google considered the teething trouble what Engineers or Developers face on a day to day basis, as we transform ourselves adopting the new ways of working in the cloud platform.
Everyone agrees, due to security concerns most of the enterprises do not allow to connect to either CloudSQL or AlloyDB instances directly from the engineer's laptop, rather below is how it typically works!!!
Well, it doesn't seem to be the case with the AlloyDB anymore with the introduction of AlloyDB Studio. This is a feature that comes with an embedded GUI Client from the Google Cloud Console that looks and feels very similar to pgAdmin.
Required roles and permissions
To use AlloyDB Studio, you need the following permissions:
alloydb.clusters.get
alloydb.databases.list
alloydb.instances.executeSql
alloydb.instances.list
alloydb.users.list
Cheers,
Balaaji Dhananjayan