BigQuery Data Transfer Service roles and permissions

This page lists the IAM roles and permissions for BigQuery Data Transfer Service. To search through all roles and permissions, see the role and permission index.

BigQuery Data Transfer Service roles

BigQuery Data Transfer Service offers the following service agent roles. Service agent roles should only be granted to service agents.

Role Permissions

(roles/bigquerydatatransfer.serviceAgent)

Gives BigQuery Data Transfer Service access to start BigQuery jobs in consumer project.

bigquery.config.get

bigquery.connections.delegate

bigquery.jobs.create

compute.networkAttachments.get

compute.networkAttachments.update

compute.regionOperations.get

compute.subnetworks.use

dataform.folders.create

dataform.locations.*

  • dataform.locations.get
  • dataform.locations.list

dataform.repositories.create

dataform.repositories.list

dataplex.entryGroups.useContactsAspect

dataplex.entryGroups.useDataProfileAspect

dataplex.entryGroups.useDatabaseDataPolicyAspect

dataplex.entryGroups.useMySQLConnectorTypes

dataplex.entryGroups.useOracleConnectorTypes

dataplex.entryGroups.useOverviewAspect

dataplex.entryGroups.usePostgreSQLConnectorTypes

dataplex.entryGroups.useSQLAccessAspect

dataplex.entryGroups.useSQLServerConnectorTypes

dataplex.entryGroups.useSQLTriggersAspect

dataplex.entryGroups.useSchemaAspect

dataplex.entryGroups.useSecondaryIndexesAspect

dataplex.entryGroups.useStorageAspect

dataplex.metadataJobs.create

dataplex.metadataJobs.get

dataplex.metadataJobs.list

iam.serviceAccounts.getAccessToken

logging.logEntries.create

logging.logEntries.route

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.services.use

BigQuery Data Transfer Service permissions

There are no IAM permissions for this service.