BigQuery Migration API roles and permissions

This page lists the IAM roles and permissions for BigQuery Migration API. To search through all roles and permissions, see the role and permission index.

BigQuery Migration API roles

Role	Permissions
MigrationWorkflow Editor (roles/bigquerymigration.editor) Editor of EDW migration workflows.	bigquerymigration.subtasks.* bigquerymigration.subtasks.get bigquerymigration.subtasks.list bigquerymigration.workflows.create bigquerymigration.workflows.delete bigquerymigration.workflows.enableAiOutputTypes bigquerymigration.workflows.enableLineageOutputTypes bigquerymigration.workflows.enableOutputTypePermissions bigquerymigration.workflows.get bigquerymigration.workflows.list bigquerymigration.workflows.update
Task Orchestrator (roles/bigquerymigration.orchestrator) Orchestrator of EDW migration tasks.	bigquerymigration.workflows.orchestrateTask storage.objects.list
Migration Translation User (roles/bigquerymigration.translationUser) User of EDW migration interactive SQL translation service.	bigquerymigration.translation.translate
MigrationWorkflow Viewer (roles/bigquerymigration.viewer) Viewer of EDW migration MigrationWorkflow.	bigquerymigration.subtasks.* bigquerymigration.subtasks.get bigquerymigration.subtasks.list bigquerymigration.workflows.get bigquerymigration.workflows.list
Task Worker (roles/bigquerymigration.worker) Worker that executes EDW migration subtasks.	storage.objects.create storage.objects.get storage.objects.list

BigQuery Migration API permissions

Permission	Included in roles
bigquerymigration.subtasks.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) MigrationWorkflow Editor (roles/bigquerymigration.editor) MigrationWorkflow Viewer (roles/bigquerymigration.viewer) Support User (roles/iam.supportUser)
bigquerymigration.subtasks.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) MigrationWorkflow Editor (roles/bigquerymigration.editor) MigrationWorkflow Viewer (roles/bigquerymigration.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
bigquerymigration.translation.translate	Owner (roles/owner) Editor (roles/editor) BigQuery Admin (roles/bigquery.admin) BigQuery Studio Admin (roles/bigquery.studioAdmin) BigQuery User (roles/bigquery.user) Migration Translation User (roles/bigquerymigration.translationUser) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Databases Admin (roles/iam.databasesAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Dataplex Service Agent (roles/dataplex.serviceAgent) Dataprep Service Agent (roles/dataprep.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent)
bigquerymigration.workflows.create	Owner (roles/owner) Editor (roles/editor) MigrationWorkflow Editor (roles/bigquerymigration.editor)
bigquerymigration.workflows.delete	Owner (roles/owner) Editor (roles/editor) MigrationWorkflow Editor (roles/bigquerymigration.editor)
bigquerymigration.workflows.enableAiOutputTypes	Owner (roles/owner) Editor (roles/editor) MigrationWorkflow Editor (roles/bigquerymigration.editor)
bigquerymigration.workflows.enableLineageOutputTypes	Owner (roles/owner) Editor (roles/editor) MigrationWorkflow Editor (roles/bigquerymigration.editor)
bigquerymigration.workflows.enableOutputTypePermissions	Owner (roles/owner) Editor (roles/editor) MigrationWorkflow Editor (roles/bigquerymigration.editor)
bigquerymigration.workflows.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) MigrationWorkflow Editor (roles/bigquerymigration.editor) MigrationWorkflow Viewer (roles/bigquerymigration.viewer) Support User (roles/iam.supportUser)
bigquerymigration.workflows.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) MigrationWorkflow Editor (roles/bigquerymigration.editor) MigrationWorkflow Viewer (roles/bigquerymigration.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
bigquerymigration.workflows.orchestrateTask	Owner (roles/owner) Task Orchestrator (roles/bigquerymigration.orchestrator)
bigquerymigration.workflows.update	Owner (roles/owner) Editor (roles/editor) MigrationWorkflow Editor (roles/bigquerymigration.editor)