Database Migration Service roles and permissions

This page lists the IAM roles and permissions for Database Migration Service. To search through all roles and permissions, see the role and permission index.

Database Migration Service roles

Role Permissions

(roles/datamigration.admin)

Full access to all resources of Database Migration.

cloudaicompanion.entitlements.get

datamigration.*

  • datamigration.connectionprofiles.create
  • datamigration.connectionprofiles.delete
  • datamigration.connectionprofiles.get
  • datamigration.connectionprofiles.getIamPolicy
  • datamigration.connectionprofiles.list
  • datamigration.connectionprofiles.setIamPolicy
  • datamigration.connectionprofiles.update
  • datamigration.conversionworkspaces.apply
  • datamigration.conversionworkspaces.commit
  • datamigration.conversionworkspaces.convert
  • datamigration.conversionworkspaces.create
  • datamigration.conversionworkspaces.delete
  • datamigration.conversionworkspaces.get
  • datamigration.conversionworkspaces.getIamPolicy
  • datamigration.conversionworkspaces.list
  • datamigration.conversionworkspaces.rollback
  • datamigration.conversionworkspaces.seed
  • datamigration.conversionworkspaces.setIamPolicy
  • datamigration.conversionworkspaces.update
  • datamigration.locations.fetchStaticIps
  • datamigration.locations.get
  • datamigration.locations.list
  • datamigration.mappingrules.getIamPolicy
  • datamigration.mappingrules.import
  • datamigration.mappingrules.setIamPolicy
  • datamigration.migrationjobs.create
  • datamigration.migrationjobs.delete
  • datamigration.migrationjobs.demoteDestination
  • datamigration.migrationjobs.fetchSourceObjects
  • datamigration.migrationjobs.generateSshScript
  • datamigration.migrationjobs.generateTcpProxyScript
  • datamigration.migrationjobs.get
  • datamigration.migrationjobs.getIamPolicy
  • datamigration.migrationjobs.list
  • datamigration.migrationjobs.promote
  • datamigration.migrationjobs.restart
  • datamigration.migrationjobs.resume
  • datamigration.migrationjobs.setIamPolicy
  • datamigration.migrationjobs.start
  • datamigration.migrationjobs.stop
  • datamigration.migrationjobs.update
  • datamigration.migrationjobs.verify
  • datamigration.objects.get
  • datamigration.objects.list
  • datamigration.operations.cancel
  • datamigration.operations.delete
  • datamigration.operations.get
  • datamigration.operations.list
  • datamigration.privateconnections.create
  • datamigration.privateconnections.delete
  • datamigration.privateconnections.get
  • datamigration.privateconnections.getIamPolicy
  • datamigration.privateconnections.list
  • datamigration.privateconnections.setIamPolicy

resourcemanager.projects.get

resourcemanager.projects.list

(roles/datamigration.serviceAgent)

Gives Cloud Database Migration service account access to Cloud SQL resources.

alloydb.clusters.create

alloydb.clusters.delete

alloydb.clusters.generateClientCertificate

alloydb.clusters.get

alloydb.clusters.list

alloydb.clusters.update

alloydb.instances.connect

alloydb.instances.create

alloydb.instances.delete

alloydb.instances.executeSql

alloydb.instances.get

alloydb.instances.list

alloydb.instances.update

alloydb.operations.get

alloydb.operations.list

alloydb.users.login

cloudsql.databases.delete

cloudsql.databases.get

cloudsql.databases.list

cloudsql.instances.connect

cloudsql.instances.create

cloudsql.instances.delete

cloudsql.instances.demoteMaster

cloudsql.instances.executeSql

cloudsql.instances.export

cloudsql.instances.get

cloudsql.instances.import

cloudsql.instances.list

cloudsql.instances.login

cloudsql.instances.migrate

cloudsql.instances.promoteReplica

cloudsql.instances.restart

cloudsql.instances.startReplica

cloudsql.instances.stopReplica

cloudsql.instances.update

compute.forwardingRules.use

compute.globalAddresses.create

compute.globalAddresses.createInternal

compute.globalAddresses.delete

compute.globalAddresses.deleteInternal

compute.globalAddresses.get

compute.globalOperations.get

compute.networkAttachments.get

compute.networkAttachments.list

compute.networks.addPeering

compute.networks.get

compute.networks.list

compute.networks.listPeeringRoutes

compute.networks.removePeering

compute.networks.use

compute.regionOperations.get

compute.regionOperations.list

compute.routers.list

compute.routes.get

compute.routes.list

compute.serviceAttachments.get

compute.serviceAttachments.list

compute.serviceAttachments.update

compute.subnetworks.get

compute.subnetworks.list

compute.subnetworks.use

networkmanagement.connectivitytests.list

serviceusage.services.use

storage.folders.delete

storage.objects.get

storage.objects.list

Database Migration Service permissions

Permission Included in roles

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Database Migration Admin (roles/datamigration.admin)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Database Migration Admin (roles/datamigration.admin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Database Migration Admin (roles/datamigration.admin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Database Migration Admin (roles/datamigration.admin)

Security Admin (roles/iam.securityAdmin)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Database Migration Admin (roles/datamigration.admin)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Database Migration Admin (roles/datamigration.admin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Database Migration Admin (roles/datamigration.admin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Database Migration Admin (roles/datamigration.admin)

Security Admin (roles/iam.securityAdmin)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Database Migration Admin (roles/datamigration.admin)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Database Migration Admin (roles/datamigration.admin)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Database Migration Admin (roles/datamigration.admin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Database Migration Admin (roles/datamigration.admin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Database Migration Admin (roles/datamigration.admin)

Security Admin (roles/iam.securityAdmin)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Database Migration Admin (roles/datamigration.admin)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Database Migration Admin (roles/datamigration.admin)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Database Migration Admin (roles/datamigration.admin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Database Migration Admin (roles/datamigration.admin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Database Migration Admin (roles/datamigration.admin)

Security Admin (roles/iam.securityAdmin)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Database Migration Admin (roles/datamigration.admin)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Database Migration Admin (roles/datamigration.admin)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Database Migration Admin (roles/datamigration.admin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Database Migration Admin (roles/datamigration.admin)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Database Migration Admin (roles/datamigration.admin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Editor (roles/editor)

Database Migration Admin (roles/datamigration.admin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Database Migration Admin (roles/datamigration.admin)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Database Migration Admin (roles/datamigration.admin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Database Migration Admin (roles/datamigration.admin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Database Migration Admin (roles/datamigration.admin)

Security Admin (roles/iam.securityAdmin)