BigQuery Data Transfer Service roles and permissions

This page lists the IAM roles and permissions for BigQuery Data Transfer Service. Tosearch through all roles and permissions, see therole andpermission index.

BigQuery Data Transfer Service roles

RolePermissions

BigQuery Data Transfer Service Agent

(roles/bigquerydatatransfer.serviceAgent)

Gives BigQuery Data Transfer Service access to start BigQuery jobs in consumer project.

Warning: Do not grant service agent roles to any principals exceptservice agents.

bigquery.config.get

bigquery.connections.delegate

bigquery.jobs.create

compute.networkAttachments.get

compute.networkAttachments.update

compute.regionOperations.get

compute.subnetworks.use

dataform.folders.create

dataform.locations.*

  • dataform.locations.get
  • dataform.locations.list

dataform.repositories.create

dataform.repositories.list

iam.serviceAccounts.getAccessToken

logging.logEntries.create

logging.logEntries.route

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.services.use

BigQuery Data Transfer Service permissions

There are no IAM permissions for this service.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-02-18 UTC.