VM Migration roles and permissions

This page lists the IAM roles and permissions for VM Migration. To search through all roles and permissions, see the role and permission index.

VM Migration roles

Role	Permissions
VM Migration Administrator (roles/vmmigration.admin) Ability to view and edit all VM Migration objects	resourcemanager.projects.get resourcemanager.projects.list vmmigration.* vmmigration.cloneJobs.create vmmigration.cloneJobs.get vmmigration.cloneJobs.list vmmigration.cloneJobs.update vmmigration.cutoverJobs.create vmmigration.cutoverJobs.get vmmigration.cutoverJobs.list vmmigration.cutoverJobs.update vmmigration.datacenterConnectors.create vmmigration.datacenterConnectors.delete vmmigration.datacenterConnectors.get vmmigration.datacenterConnectors.list vmmigration.datacenterConnectors.update vmmigration.deployments.create vmmigration.deployments.get vmmigration.deployments.list vmmigration.groups.create vmmigration.groups.delete vmmigration.groups.get vmmigration.groups.list vmmigration.groups.update vmmigration.imageImportJobs.cancel vmmigration.imageImportJobs.get vmmigration.imageImportJobs.list vmmigration.imageImports.create vmmigration.imageImports.delete vmmigration.imageImports.get vmmigration.imageImports.list vmmigration.locations.get vmmigration.locations.list vmmigration.migratingVms.create vmmigration.migratingVms.delete vmmigration.migratingVms.get vmmigration.migratingVms.list vmmigration.migratingVms.update vmmigration.operations.cancel vmmigration.operations.delete vmmigration.operations.get vmmigration.operations.list vmmigration.replicationCycles.get vmmigration.replicationCycles.list vmmigration.sources.create vmmigration.sources.delete vmmigration.sources.get vmmigration.sources.list vmmigration.sources.update vmmigration.targets.create vmmigration.targets.delete vmmigration.targets.get vmmigration.targets.list vmmigration.targets.update vmmigration.utilizationReports.create vmmigration.utilizationReports.delete vmmigration.utilizationReports.get vmmigration.utilizationReports.list
VM Migration Viewer (roles/vmmigration.viewer) Ability to view all VM Migration objects	resourcemanager.projects.get resourcemanager.projects.list vmmigration.cloneJobs.get vmmigration.cloneJobs.list vmmigration.cutoverJobs.get vmmigration.cutoverJobs.list vmmigration.datacenterConnectors.get vmmigration.datacenterConnectors.list vmmigration.deployments.get vmmigration.deployments.list vmmigration.groups.get vmmigration.groups.list vmmigration.imageImportJobs.get vmmigration.imageImportJobs.list vmmigration.imageImports.get vmmigration.imageImports.list vmmigration.locations.* vmmigration.locations.get vmmigration.locations.list vmmigration.migratingVms.get vmmigration.migratingVms.list vmmigration.operations.get vmmigration.operations.list vmmigration.replicationCycles.* vmmigration.replicationCycles.get vmmigration.replicationCycles.list vmmigration.sources.get vmmigration.sources.list vmmigration.targets.get vmmigration.targets.list vmmigration.utilizationReports.get vmmigration.utilizationReports.list

Service agent roles

Service agent roles should only be granted to service agents.

Role

Permissions

VM Migration Service Agent (roles/vmmigration.serviceAgent) Grants VM Migration Service Account access to create migrated VMs, disks and images in the user project. Warning: Do not grant service agent roles to any principals except service agents.

compute.addresses.get compute.addresses.list compute.addresses.use compute.addresses.useInternal compute.disks.create compute.disks.createSnapshot compute.disks.delete compute.disks.get compute.disks.setLabels compute.disks.use compute.disks.useReadOnly compute.globalOperations.get compute.globalOperations.list compute.images.create compute.images.get compute.images.setLabels compute.images.useReadOnly compute.instances.create compute.instances.delete compute.instances.get compute.instances.setLabels compute.instances.setMetadata compute.instances.setServiceAccount compute.instances.setTags compute.instances.stop compute.instances.update compute.instances.useReadOnly compute.machineImages.create compute.machineImages.get compute.machineTypes.list compute.networks.get compute.networks.use compute.networks.useExternalIp compute.storagePools.get compute.storagePools.use compute.subnetworks.use compute.subnetworks.useExternalIp compute.zoneOperations.get compute.zoneOperations.list compute.zones.list

VM Migration permissions

Permission	Included in roles
vmmigration.cloneJobs.create	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.cloneJobs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Support User (roles/iam.supportUser)
vmmigration.cloneJobs.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
vmmigration.cloneJobs.update	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.cutoverJobs.create	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.cutoverJobs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Support User (roles/iam.supportUser)
vmmigration.cutoverJobs.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
vmmigration.cutoverJobs.update	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.datacenterConnectors.create	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.datacenterConnectors.delete	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.datacenterConnectors.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Support User (roles/iam.supportUser)
vmmigration.datacenterConnectors.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
vmmigration.datacenterConnectors.update	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.deployments.create	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.deployments.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Support User (roles/iam.supportUser)
vmmigration.deployments.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
vmmigration.groups.create	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.groups.delete	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.groups.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Support User (roles/iam.supportUser)
vmmigration.groups.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
vmmigration.groups.update	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.imageImportJobs.cancel	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.imageImportJobs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Support User (roles/iam.supportUser)
vmmigration.imageImportJobs.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
vmmigration.imageImports.create	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.imageImports.delete	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.imageImports.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Support User (roles/iam.supportUser)
vmmigration.imageImports.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
vmmigration.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Support User (roles/iam.supportUser)
vmmigration.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
vmmigration.migratingVms.create	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Migration Center Service Agent (roles/migrationcenter.serviceAgent)
vmmigration.migratingVms.delete	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.migratingVms.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Support User (roles/iam.supportUser)
vmmigration.migratingVms.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
vmmigration.migratingVms.update	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.operations.cancel	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.operations.delete	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Support User (roles/iam.supportUser)
vmmigration.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
vmmigration.replicationCycles.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Support User (roles/iam.supportUser)
vmmigration.replicationCycles.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
vmmigration.sources.create	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.sources.delete	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.sources.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Support User (roles/iam.supportUser)
vmmigration.sources.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
vmmigration.sources.update	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.targets.create	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.targets.delete	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.targets.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Support User (roles/iam.supportUser)
vmmigration.targets.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
vmmigration.targets.update	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.utilizationReports.create	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.utilizationReports.delete	Owner (roles/owner) Editor (roles/editor) VM Migration Administrator (roles/vmmigration.admin)
vmmigration.utilizationReports.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Support User (roles/iam.supportUser)
vmmigration.utilizationReports.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) VM Migration Administrator (roles/vmmigration.admin) VM Migration Viewer (roles/vmmigration.viewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)