BigQuery Migration API roles and permissions

This page lists the IAM roles and permissions for BigQuery Migration API. To search through all roles and permissions, see the role and permission index.

BigQuery Migration API roles

Role	Permissions
Bigquerymigration Admin (roles/bigquerymigration.admin) Admin role for bigquerymigration	bigquerymigration.* bigquerymigration.subtasks.get bigquerymigration.subtasks.list bigquerymigration.translation.translate bigquerymigration.workflows.create bigquerymigration.workflows.delete bigquerymigration.workflows.enableAiOutputTypes bigquerymigration.workflows.enableLineageOutputTypes bigquerymigration.workflows.enableOutputTypePermissions bigquerymigration.workflows.get bigquerymigration.workflows.list bigquerymigration.workflows.orchestrateTask bigquerymigration.workflows.update resourcemanager.projects.get resourcemanager.projects.list
MigrationWorkflow Editor (roles/bigquerymigration.editor) Editor of EDW migration workflows.	bigquerymigration.subtasks.* bigquerymigration.subtasks.get bigquerymigration.subtasks.list bigquerymigration.workflows.create bigquerymigration.workflows.delete bigquerymigration.workflows.enableAiOutputTypes bigquerymigration.workflows.enableLineageOutputTypes bigquerymigration.workflows.enableOutputTypePermissions bigquerymigration.workflows.get bigquerymigration.workflows.list bigquerymigration.workflows.update
MigrationWorkflow Viewer (roles/bigquerymigration.viewer) Viewer of EDW migration MigrationWorkflow.	bigquerymigration.subtasks.* bigquerymigration.subtasks.get bigquerymigration.subtasks.list bigquerymigration.workflows.get bigquerymigration.workflows.list
Task Orchestrator (roles/bigquerymigration.orchestrator) Orchestrator of EDW migration tasks.	bigquerymigration.workflows.orchestrateTask storage.objects.list
Migration Translation User (roles/bigquerymigration.translationUser) User of EDW migration interactive SQL translation service.	bigquerymigration.translation.translate
Task Worker (roles/bigquerymigration.worker) Worker that executes EDW migration subtasks.	storage.objects.create storage.objects.get storage.objects.list

BigQuery Migration API permissions

Permission	Included in roles
bigquerymigration.subtasks.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Bigquerymigration Admin (roles/bigquerymigration.admin) MigrationWorkflow Editor (roles/bigquerymigration.editor) MigrationWorkflow Viewer (roles/bigquerymigration.viewer) Support User (roles/iam.supportUser)
bigquerymigration.subtasks.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Bigquerymigration Admin (roles/bigquerymigration.admin) MigrationWorkflow Editor (roles/bigquerymigration.editor) MigrationWorkflow Viewer (roles/bigquerymigration.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
bigquerymigration.translation.translate	Owner (roles/owner) Editor (roles/editor) BigQuery Admin (roles/bigquery.admin) Bigquerymigration Admin (roles/bigquerymigration.admin) BigQuery Studio Admin (roles/bigquery.studioAdmin) BigQuery User (roles/bigquery.user) Migration Translation User (roles/bigquerymigration.translationUser) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Databases Admin (roles/iam.databasesAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Dataplex Service Agent (roles/dataplex.serviceAgent) Dataprep Service Agent (roles/dataprep.serviceAgent)
bigquerymigration.workflows.create	Owner (roles/owner) Editor (roles/editor) Bigquerymigration Admin (roles/bigquerymigration.admin) MigrationWorkflow Editor (roles/bigquerymigration.editor)
bigquerymigration.workflows.delete	Owner (roles/owner) Editor (roles/editor) Bigquerymigration Admin (roles/bigquerymigration.admin) MigrationWorkflow Editor (roles/bigquerymigration.editor)
bigquerymigration.workflows.enableAiOutputTypes	Owner (roles/owner) Editor (roles/editor) Bigquerymigration Admin (roles/bigquerymigration.admin) MigrationWorkflow Editor (roles/bigquerymigration.editor)
bigquerymigration.workflows.enableLineageOutputTypes	Owner (roles/owner) Editor (roles/editor) Bigquerymigration Admin (roles/bigquerymigration.admin) MigrationWorkflow Editor (roles/bigquerymigration.editor)
bigquerymigration.workflows.enableOutputTypePermissions	Owner (roles/owner) Editor (roles/editor) Bigquerymigration Admin (roles/bigquerymigration.admin) MigrationWorkflow Editor (roles/bigquerymigration.editor)
bigquerymigration.workflows.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Bigquerymigration Admin (roles/bigquerymigration.admin) MigrationWorkflow Editor (roles/bigquerymigration.editor) MigrationWorkflow Viewer (roles/bigquerymigration.viewer) Support User (roles/iam.supportUser)
bigquerymigration.workflows.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Bigquerymigration Admin (roles/bigquerymigration.admin) MigrationWorkflow Editor (roles/bigquerymigration.editor) MigrationWorkflow Viewer (roles/bigquerymigration.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
bigquerymigration.workflows.orchestrateTask	Owner (roles/owner) Bigquerymigration Admin (roles/bigquerymigration.admin) Task Orchestrator (roles/bigquerymigration.orchestrator)
bigquerymigration.workflows.update	Owner (roles/owner) Editor (roles/editor) Bigquerymigration Admin (roles/bigquerymigration.admin) MigrationWorkflow Editor (roles/bigquerymigration.editor)