BigQuery Migration API roles and permissions

This page lists the IAM roles and permissions for BigQuery Migration API. Tosearch through all roles and permissions, see therole andpermission index.

BigQuery Migration API roles

RolePermissions

MigrationWorkflow Editor

(roles/bigquerymigration.editor)

Editor of EDW migration workflows.

bigquerymigration.subtasks.*

  • bigquerymigration.subtasks.get
  • bigquerymigration.subtasks.list

bigquerymigration.workflows.create

bigquerymigration.workflows.delete

bigquerymigration.workflows.enableAiOutputTypes

bigquerymigration.workflows.enableLineageOutputTypes

bigquerymigration.workflows.enableOutputTypePermissions

bigquerymigration.workflows.get

bigquerymigration.workflows.list

bigquerymigration.workflows.update

Task Orchestrator

(roles/bigquerymigration.orchestrator)

Orchestrator of EDW migration tasks.

bigquerymigration.workflows.orchestrateTask

storage.objects.list

Migration Translation User

(roles/bigquerymigration.translationUser)

User of EDW migration interactive SQL translation service.

bigquerymigration.translation.translate

MigrationWorkflow Viewer

(roles/bigquerymigration.viewer)

Viewer of EDW migration MigrationWorkflow.

bigquerymigration.subtasks.*

  • bigquerymigration.subtasks.get
  • bigquerymigration.subtasks.list

bigquerymigration.workflows.get

bigquerymigration.workflows.list

Task Worker

(roles/bigquerymigration.worker)

Worker that executes EDW migration subtasks.

storage.objects.create

storage.objects.get

storage.objects.list

BigQuery Migration API permissions

PermissionIncluded in roles

bigquerymigration.subtasks.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

MigrationWorkflow Editor (roles/bigquerymigration.editor)

MigrationWorkflow Viewer (roles/bigquerymigration.viewer)

Support User (roles/iam.supportUser)

bigquerymigration.subtasks.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

MigrationWorkflow Editor (roles/bigquerymigration.editor)

MigrationWorkflow Viewer (roles/bigquerymigration.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

bigquerymigration.translation.translate

Owner (roles/owner)

Editor (roles/editor)

BigQuery Admin (roles/bigquery.admin)

BigQuery Studio Admin (roles/bigquery.studioAdmin)

BigQuery User (roles/bigquery.user)

Migration Translation User (roles/bigquerymigration.translationUser)

DLP Organization Data Profiles Driver (roles/dlp.orgdriver)

DLP Project Data Profiles Driver (roles/dlp.projectdriver)

Databases Admin (roles/iam.databasesAdmin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

bigquerymigration.workflows.create

Owner (roles/owner)

Editor (roles/editor)

MigrationWorkflow Editor (roles/bigquerymigration.editor)

bigquerymigration.workflows.delete

Owner (roles/owner)

Editor (roles/editor)

MigrationWorkflow Editor (roles/bigquerymigration.editor)

bigquerymigration.workflows.enableAiOutputTypes

Owner (roles/owner)

Editor (roles/editor)

MigrationWorkflow Editor (roles/bigquerymigration.editor)

bigquerymigration.workflows.enableLineageOutputTypes

Owner (roles/owner)

Editor (roles/editor)

MigrationWorkflow Editor (roles/bigquerymigration.editor)

bigquerymigration.workflows.enableOutputTypePermissions

Owner (roles/owner)

Editor (roles/editor)

MigrationWorkflow Editor (roles/bigquerymigration.editor)

bigquerymigration.workflows.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

MigrationWorkflow Editor (roles/bigquerymigration.editor)

MigrationWorkflow Viewer (roles/bigquerymigration.viewer)

Support User (roles/iam.supportUser)

bigquerymigration.workflows.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

MigrationWorkflow Editor (roles/bigquerymigration.editor)

MigrationWorkflow Viewer (roles/bigquerymigration.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

bigquerymigration.workflows.orchestrateTask

Owner (roles/owner)

Task Orchestrator (roles/bigquerymigration.orchestrator)

bigquerymigration.workflows.update

Owner (roles/owner)

Editor (roles/editor)

MigrationWorkflow Editor (roles/bigquerymigration.editor)

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-12-15 UTC.