VM Migration roles and permissions

This page lists the IAM roles and permissions for VM Migration. Tosearch through all roles and permissions, see therole andpermission index.

VM Migration roles

RolePermissions

VM Migration AdministratorBeta

(roles/vmmigration.admin)

Ability to view and edit all VM Migration objects

resourcemanager.projects.get

resourcemanager.projects.list

vmmigration.*

  • vmmigration.cloneJobs.create
  • vmmigration.cloneJobs.get
  • vmmigration.cloneJobs.list
  • vmmigration.cloneJobs.update
  • vmmigration.cutoverJobs.create
  • vmmigration.cutoverJobs.get
  • vmmigration.cutoverJobs.list
  • vmmigration.cutoverJobs.update
  • vmmigration.datacenterConnectors.create
  • vmmigration.datacenterConnectors.delete
  • vmmigration.datacenterConnectors.get
  • vmmigration.datacenterConnectors.list
  • vmmigration.datacenterConnectors.update
  • vmmigration.deployments.create
  • vmmigration.deployments.get
  • vmmigration.deployments.list
  • vmmigration.groups.create
  • vmmigration.groups.delete
  • vmmigration.groups.get
  • vmmigration.groups.list
  • vmmigration.groups.update
  • vmmigration.imageImportJobs.cancel
  • vmmigration.imageImportJobs.get
  • vmmigration.imageImportJobs.list
  • vmmigration.imageImports.create
  • vmmigration.imageImports.delete
  • vmmigration.imageImports.get
  • vmmigration.imageImports.list
  • vmmigration.locations.get
  • vmmigration.locations.list
  • vmmigration.migratingVms.create
  • vmmigration.migratingVms.delete
  • vmmigration.migratingVms.get
  • vmmigration.migratingVms.list
  • vmmigration.migratingVms.update
  • vmmigration.operations.cancel
  • vmmigration.operations.delete
  • vmmigration.operations.get
  • vmmigration.operations.list
  • vmmigration.replicationCycles.get
  • vmmigration.replicationCycles.list
  • vmmigration.sources.create
  • vmmigration.sources.delete
  • vmmigration.sources.get
  • vmmigration.sources.list
  • vmmigration.sources.update
  • vmmigration.targets.create
  • vmmigration.targets.delete
  • vmmigration.targets.get
  • vmmigration.targets.list
  • vmmigration.targets.update
  • vmmigration.utilizationReports.create
  • vmmigration.utilizationReports.delete
  • vmmigration.utilizationReports.get
  • vmmigration.utilizationReports.list

VM Migration Service Agent

(roles/vmmigration.serviceAgent)

Grants VM Migration Service Account access to create migrated VMs, disks and images in the user project.

Warning: Do not grant service agent roles to any principals exceptservice agents.

compute.addresses.get

compute.addresses.list

compute.addresses.use

compute.addresses.useInternal

compute.disks.create

compute.disks.createSnapshot

compute.disks.delete

compute.disks.get

compute.disks.setLabels

compute.disks.use

compute.disks.useReadOnly

compute.globalOperations.get

compute.globalOperations.list

compute.images.create

compute.images.get

compute.images.setLabels

compute.images.useReadOnly

compute.instances.create

compute.instances.delete

compute.instances.get

compute.instances.setLabels

compute.instances.setMetadata

compute.instances.setServiceAccount

compute.instances.setTags

compute.instances.stop

compute.instances.update

compute.instances.useReadOnly

compute.machineImages.create

compute.machineImages.get

compute.machineTypes.list

compute.networks.get

compute.networks.use

compute.networks.useExternalIp

compute.storagePools.get

compute.storagePools.use

compute.subnetworks.use

compute.subnetworks.useExternalIp

compute.zoneOperations.get

compute.zoneOperations.list

compute.zones.list

VM Migration ViewerBeta

(roles/vmmigration.viewer)

Ability to view all VM Migration objects

resourcemanager.projects.get

resourcemanager.projects.list

vmmigration.cloneJobs.get

vmmigration.cloneJobs.list

vmmigration.cutoverJobs.get

vmmigration.cutoverJobs.list

vmmigration.datacenterConnectors.get

vmmigration.datacenterConnectors.list

vmmigration.deployments.get

vmmigration.deployments.list

vmmigration.groups.get

vmmigration.groups.list

vmmigration.imageImportJobs.get

vmmigration.imageImportJobs.list

vmmigration.imageImports.get

vmmigration.imageImports.list

vmmigration.locations.*

  • vmmigration.locations.get
  • vmmigration.locations.list

vmmigration.migratingVms.get

vmmigration.migratingVms.list

vmmigration.operations.get

vmmigration.operations.list

vmmigration.replicationCycles.*

  • vmmigration.replicationCycles.get
  • vmmigration.replicationCycles.list

vmmigration.sources.get

vmmigration.sources.list

vmmigration.targets.get

vmmigration.targets.list

vmmigration.utilizationReports.get

vmmigration.utilizationReports.list

VM Migration permissions

PermissionIncluded in roles

vmmigration.cloneJobs.create

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.cloneJobs.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.cloneJobs.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.cloneJobs.update

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.cutoverJobs.create

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.cutoverJobs.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.cutoverJobs.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.cutoverJobs.update

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.datacenterConnectors.create

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.datacenterConnectors.delete

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.datacenterConnectors.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.datacenterConnectors.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.datacenterConnectors.update

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.deployments.create

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.deployments.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.deployments.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.groups.create

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.groups.delete

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.groups.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.groups.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.groups.update

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.imageImportJobs.cancel

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.imageImportJobs.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.imageImportJobs.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.imageImports.create

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.imageImports.delete

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.imageImports.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.imageImports.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.locations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.locations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.migratingVms.create

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

vmmigration.migratingVms.delete

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.migratingVms.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.migratingVms.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.migratingVms.update

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.operations.cancel

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.operations.delete

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.operations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.operations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.replicationCycles.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.replicationCycles.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.sources.create

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.sources.delete

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.sources.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.sources.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.sources.update

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.targets.create

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.targets.delete

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.targets.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.targets.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.targets.update

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.utilizationReports.create

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.utilizationReports.delete

Owner (roles/owner)

Editor (roles/editor)

VM Migration Administrator (roles/vmmigration.admin)

vmmigration.utilizationReports.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

vmmigration.utilizationReports.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

VM Migration Administrator (roles/vmmigration.admin)

VM Migration Viewer (roles/vmmigration.viewer)

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-12-15 UTC.