BigQuery Migration API roles and permissions

This page lists the IAM roles and permissions for BigQuery Migration API. To search through all roles and permissions, see the role and permission index.

BigQuery Migration API roles

Role Permissions

Role	Permissions
MigrationWorkflow Editor (`roles/bigquerymigration.editor`) Editor of EDW migration workflows.	`bigquerymigration.subtasks.*` `bigquerymigration.subtasks.get` `bigquerymigration.subtasks.list` `bigquerymigration.workflows.create` `bigquerymigration.workflows.delete` `bigquerymigration.workflows.enableAiOutputTypes` `bigquerymigration.workflows.enableLineageOutputTypes` `bigquerymigration.workflows.enableOutputTypePermissions` `bigquerymigration.workflows.get` `bigquerymigration.workflows.list` `bigquerymigration.workflows.update`
Task Orchestrator (`roles/bigquerymigration.orchestrator`) Orchestrator of EDW migration tasks.	`bigquerymigration.workflows.orchestrateTask` `storage.objects.list`
Migration Translation User (`roles/bigquerymigration.translationUser`) User of EDW migration interactive SQL translation service.	`bigquerymigration.translation.translate`
MigrationWorkflow Viewer (`roles/bigquerymigration.viewer`) Viewer of EDW migration MigrationWorkflow.	`bigquerymigration.subtasks.*` `bigquerymigration.subtasks.get` `bigquerymigration.subtasks.list` `bigquerymigration.workflows.get` `bigquerymigration.workflows.list`
Task Worker (`roles/bigquerymigration.worker`) Worker that executes EDW migration subtasks.	`storage.objects.create` `storage.objects.get` `storage.objects.list`

MigrationWorkflow Editor

(roles/bigquerymigration.editor)

Editor of EDW migration workflows.

bigquerymigration.subtasks.*

bigquerymigration.subtasks.get
bigquerymigration.subtasks.list

bigquerymigration.workflows.create

bigquerymigration.workflows.delete

bigquerymigration.workflows.enableAiOutputTypes

bigquerymigration.workflows.enableLineageOutputTypes

bigquerymigration.workflows.enableOutputTypePermissions

bigquerymigration.workflows.get

bigquerymigration.workflows.list

bigquerymigration.workflows.update

Task Orchestrator

(roles/bigquerymigration.orchestrator)

Orchestrator of EDW migration tasks.

bigquerymigration.workflows.orchestrateTask

storage.objects.list

Migration Translation User

(roles/bigquerymigration.translationUser)

User of EDW migration interactive SQL translation service.

bigquerymigration.translation.translate

MigrationWorkflow Viewer

(roles/bigquerymigration.viewer)

Viewer of EDW migration MigrationWorkflow.

bigquerymigration.subtasks.*

bigquerymigration.subtasks.get
bigquerymigration.subtasks.list

bigquerymigration.workflows.get

bigquerymigration.workflows.list

Task Worker

(roles/bigquerymigration.worker)

Worker that executes EDW migration subtasks.

storage.objects.create

storage.objects.get

storage.objects.list

BigQuery Migration API permissions

Permission	Included in roles
`bigquerymigration.subtasks.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) MigrationWorkflow Editor (`roles/bigquerymigration.editor`) MigrationWorkflow Viewer (`roles/bigquerymigration.viewer`) Support User (`roles/iam.supportUser`)
`bigquerymigration.subtasks.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) MigrationWorkflow Editor (`roles/bigquerymigration.editor`) MigrationWorkflow Viewer (`roles/bigquerymigration.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`bigquerymigration.translation.translate`	Owner (`roles/owner`) Editor (`roles/editor`) BigQuery Admin (`roles/bigquery.admin`) BigQuery Studio Admin (`roles/bigquery.studioAdmin`) BigQuery User (`roles/bigquery.user`) Migration Translation User (`roles/bigquerymigration.translationUser`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Databases Admin (`roles/iam.databasesAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Dataplex Service Agent (`roles/dataplex.serviceAgent`) Dataprep Service Agent (`roles/dataprep.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`)
`bigquerymigration.workflows.create`	Owner (`roles/owner`) Editor (`roles/editor`) MigrationWorkflow Editor (`roles/bigquerymigration.editor`)
`bigquerymigration.workflows.delete`	Owner (`roles/owner`) Editor (`roles/editor`) MigrationWorkflow Editor (`roles/bigquerymigration.editor`)
`bigquerymigration.workflows.enableAiOutputTypes`	Owner (`roles/owner`) Editor (`roles/editor`) MigrationWorkflow Editor (`roles/bigquerymigration.editor`)
`bigquerymigration.workflows.enableLineageOutputTypes`	Owner (`roles/owner`) Editor (`roles/editor`) MigrationWorkflow Editor (`roles/bigquerymigration.editor`)
`bigquerymigration.workflows.enableOutputTypePermissions`	Owner (`roles/owner`) Editor (`roles/editor`) MigrationWorkflow Editor (`roles/bigquerymigration.editor`)
`bigquerymigration.workflows.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) MigrationWorkflow Editor (`roles/bigquerymigration.editor`) MigrationWorkflow Viewer (`roles/bigquerymigration.viewer`) Support User (`roles/iam.supportUser`)
`bigquerymigration.workflows.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) MigrationWorkflow Editor (`roles/bigquerymigration.editor`) MigrationWorkflow Viewer (`roles/bigquerymigration.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`bigquerymigration.workflows.orchestrateTask`	Owner (`roles/owner`) Task Orchestrator (`roles/bigquerymigration.orchestrator`)
`bigquerymigration.workflows.update`	Owner (`roles/owner`) Editor (`roles/editor`) MigrationWorkflow Editor (`roles/bigquerymigration.editor`)

BigQuery Migration API roles and permissions