VM Migration roles and permissions
Stay organized with collections Save and categorize content based on your preferences.

This page lists the IAM roles and permissions for VM Migration. To search through all roles and permissions, see the role and permission index.

VM Migration roles

Role Permissions

VM Migration Administrator ^Beta

(roles/vmmigration.admin)

Ability to view and edit all VM Migration objects

resourcemanager.projects.get

resourcemanager.projects.list

vmmigration.*

vmmigration.cloneJobs.create
vmmigration.cloneJobs.get
vmmigration.cloneJobs.list
vmmigration.cloneJobs.update
vmmigration.cutoverJobs.create
vmmigration.cutoverJobs.get
vmmigration.cutoverJobs.list
vmmigration.cutoverJobs.update
vmmigration.datacenterConnectors.create
vmmigration.datacenterConnectors.delete
vmmigration.datacenterConnectors.get
vmmigration.datacenterConnectors.list
vmmigration.datacenterConnectors.update
vmmigration.deployments.create
vmmigration.deployments.get
vmmigration.deployments.list
vmmigration.groups.create
vmmigration.groups.delete
vmmigration.groups.get
vmmigration.groups.list
vmmigration.groups.update
vmmigration.locations.get
vmmigration.locations.list
vmmigration.migratingVms.create
vmmigration.migratingVms.delete
vmmigration.migratingVms.get
vmmigration.migratingVms.list
vmmigration.migratingVms.update
vmmigration.operations.cancel
vmmigration.operations.delete
vmmigration.operations.get
vmmigration.operations.list
vmmigration.replicationCycles.get
vmmigration.replicationCycles.list
vmmigration.sources.create
vmmigration.sources.delete
vmmigration.sources.get
vmmigration.sources.list
vmmigration.sources.update
vmmigration.targets.create
vmmigration.targets.delete
vmmigration.targets.get
vmmigration.targets.list
vmmigration.targets.update
vmmigration.utilizationReports.create
vmmigration.utilizationReports.delete
vmmigration.utilizationReports.get
vmmigration.utilizationReports.list

VM Migration Service Agent

(roles/vmmigration.serviceAgent)

Grants VM Migration Service Account access to create migrated VMs, disks and images in the user project.

compute.addresses.get

compute.addresses.list

compute.addresses.use

compute.addresses.useInternal

compute.disks.create

compute.disks.createSnapshot

compute.disks.delete

compute.disks.get

compute.disks.setLabels

compute.disks.use

compute.disks.useReadOnly

compute.globalOperations.get

compute.globalOperations.list

compute.images.create

compute.images.get

compute.images.setLabels

compute.images.useReadOnly

compute.instances.create

compute.instances.delete

compute.instances.get

compute.instances.setLabels

compute.instances.setMetadata

compute.instances.setServiceAccount

compute.instances.setTags

compute.instances.stop

compute.instances.update

compute.instances.useReadOnly

compute.machineImages.create

compute.machineImages.get

compute.machineTypes.list

compute.networks.use

compute.networks.useExternalIp

compute.subnetworks.use

compute.subnetworks.useExternalIp

compute.zoneOperations.get

compute.zoneOperations.list

compute.zones.list

VM Migration Viewer ^Beta

(roles/vmmigration.viewer)

Ability to view all VM Migration objects

resourcemanager.projects.get

resourcemanager.projects.list

vmmigration.cloneJobs.get

vmmigration.cloneJobs.list

vmmigration.cutoverJobs.get

vmmigration.cutoverJobs.list

vmmigration.datacenterConnectors.get

vmmigration.datacenterConnectors.list

vmmigration.deployments.get

vmmigration.deployments.list

vmmigration.groups.get

vmmigration.groups.list

vmmigration.locations.*

vmmigration.locations.get
vmmigration.locations.list

vmmigration.migratingVms.get

vmmigration.migratingVms.list

vmmigration.operations.get

vmmigration.operations.list

vmmigration.replicationCycles.*

vmmigration.replicationCycles.get
vmmigration.replicationCycles.list

vmmigration.sources.get

vmmigration.sources.list

vmmigration.targets.get

vmmigration.targets.list

vmmigration.utilizationReports.get

vmmigration.utilizationReports.list

VM Migration permissions

Permission	Included in roles
`vmmigration.cloneJobs.create`	Owner (`roles/owner`) Editor (`roles/editor`) VM Migration Administrator (`roles/vmmigration.admin`)
`vmmigration.cloneJobs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) VM Migration Administrator (`roles/vmmigration.admin`) VM Migration Viewer (`roles/vmmigration.viewer`)
`vmmigration.cloneJobs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) VM Migration Administrator (`roles/vmmigration.admin`) VM Migration Viewer (`roles/vmmigration.viewer`)
`vmmigration.cloneJobs.update`	Owner (`roles/owner`) Editor (`roles/editor`) VM Migration Administrator (`roles/vmmigration.admin`)
`vmmigration.cutoverJobs.create`	Owner (`roles/owner`) Editor (`roles/editor`) VM Migration Administrator (`roles/vmmigration.admin`)
`vmmigration.cutoverJobs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) VM Migration Administrator (`roles/vmmigration.admin`) VM Migration Viewer (`roles/vmmigration.viewer`)
`vmmigration.cutoverJobs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) VM Migration Administrator (`roles/vmmigration.admin`) VM Migration Viewer (`roles/vmmigration.viewer`)
`vmmigration.cutoverJobs.update`	Owner (`roles/owner`) Editor (`roles/editor`) VM Migration Administrator (`roles/vmmigration.admin`)
`vmmigration.datacenterConnectors.create`	Owner (`roles/owner`) Editor (`roles/editor`) VM Migration Administrator (`roles/vmmigration.admin`)
`vmmigration.datacenterConnectors.delete`	Owner (`roles/owner`) Editor (`roles/editor`) VM Migration Administrator (`roles/vmmigration.admin`)
`vmmigration.datacenterConnectors.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) VM Migration Administrator (`roles/vmmigration.admin`) VM Migration Viewer (`roles/vmmigration.viewer`)
`vmmigration.datacenterConnectors.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) VM Migration Administrator (`roles/vmmigration.admin`) VM Migration Viewer (`roles/vmmigration.viewer`)
`vmmigration.datacenterConnectors.update`	Owner (`roles/owner`) Editor (`roles/editor`) VM Migration Administrator (`roles/vmmigration.admin`)
`vmmigration.deployments.create`	Owner (`roles/owner`) Editor (`roles/editor`) VM Migration Administrator (`roles/vmmigration.admin`)
`vmmigration.deployments.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) VM Migration Administrator (`roles/vmmigration.admin`) VM Migration Viewer (`roles/vmmigration.viewer`)
`vmmigration.deployments.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) VM Migration Administrator (`roles/vmmigration.admin`) VM Migration Viewer (`roles/vmmigration.viewer`)
`vmmigration.groups.create`	Owner (`roles/owner`) Editor (`roles/editor`) VM Migration Administrator (`roles/vmmigration.admin`)
`vmmigration.groups.delete`	Owner (`roles/owner`) Editor (`roles/editor`) VM Migration Administrator (`roles/vmmigration.admin`)
`vmmigration.groups.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) VM Migration Administrator (`roles/vmmigration.admin`) VM Migration Viewer (`roles/vmmigration.viewer`)
`vmmigration.groups.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) VM Migration Administrator (`roles/vmmigration.admin`) VM Migration Viewer (`roles/vmmigration.viewer`)
`vmmigration.groups.update`	Owner (`roles/owner`) Editor (`roles/editor`) VM Migration Administrator (`roles/vmmigration.admin`)
`vmmigration.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) VM Migration Administrator (`roles/vmmigration.admin`) VM Migration Viewer (`roles/vmmigration.viewer`)
`vmmigration.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) VM Migration Administrator (`roles/vmmigration.admin`) VM Migration Viewer (`roles/vmmigration.viewer`)
`vmmigration.migratingVms.create`	Owner (`roles/owner`) Editor (`roles/editor`) VM Migration Administrator (`roles/vmmigration.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Migration Center Service Agent (`roles/migrationcenter.serviceAgent`)
`vmmigration.migratingVms.delete`	Owner (`roles/owner`) Editor (`roles/editor`) VM Migration Administrator (`roles/vmmigration.admin`)
`vmmigration.migratingVms.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) VM Migration Administrator (`roles/vmmigration.admin`) VM Migration Viewer (`roles/vmmigration.viewer`)
`vmmigration.migratingVms.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) VM Migration Administrator (`roles/vmmigration.admin`) VM Migration Viewer (`roles/vmmigration.viewer`)
`vmmigration.migratingVms.update`	Owner (`roles/owner`) Editor (`roles/editor`) VM Migration Administrator (`roles/vmmigration.admin`)
`vmmigration.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) VM Migration Administrator (`roles/vmmigration.admin`)
`vmmigration.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) VM Migration Administrator (`roles/vmmigration.admin`)
`vmmigration.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) VM Migration Administrator (`roles/vmmigration.admin`) VM Migration Viewer (`roles/vmmigration.viewer`)
`vmmigration.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) VM Migration Administrator (`roles/vmmigration.admin`) VM Migration Viewer (`roles/vmmigration.viewer`)
`vmmigration.replicationCycles.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) VM Migration Administrator (`roles/vmmigration.admin`) VM Migration Viewer (`roles/vmmigration.viewer`)
`vmmigration.replicationCycles.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) VM Migration Administrator (`roles/vmmigration.admin`) VM Migration Viewer (`roles/vmmigration.viewer`)
`vmmigration.sources.create`	Owner (`roles/owner`) Editor (`roles/editor`) VM Migration Administrator (`roles/vmmigration.admin`)
`vmmigration.sources.delete`	Owner (`roles/owner`) Editor (`roles/editor`) VM Migration Administrator (`roles/vmmigration.admin`)
`vmmigration.sources.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) VM Migration Administrator (`roles/vmmigration.admin`) VM Migration Viewer (`roles/vmmigration.viewer`)
`vmmigration.sources.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) VM Migration Administrator (`roles/vmmigration.admin`) VM Migration Viewer (`roles/vmmigration.viewer`)
`vmmigration.sources.update`	Owner (`roles/owner`) Editor (`roles/editor`) VM Migration Administrator (`roles/vmmigration.admin`)
`vmmigration.targets.create`	Owner (`roles/owner`) Editor (`roles/editor`) VM Migration Administrator (`roles/vmmigration.admin`)
`vmmigration.targets.delete`	Owner (`roles/owner`) Editor (`roles/editor`) VM Migration Administrator (`roles/vmmigration.admin`)
`vmmigration.targets.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) VM Migration Administrator (`roles/vmmigration.admin`) VM Migration Viewer (`roles/vmmigration.viewer`)
`vmmigration.targets.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) VM Migration Administrator (`roles/vmmigration.admin`) VM Migration Viewer (`roles/vmmigration.viewer`)
`vmmigration.targets.update`	Owner (`roles/owner`) Editor (`roles/editor`) VM Migration Administrator (`roles/vmmigration.admin`)
`vmmigration.utilizationReports.create`	Owner (`roles/owner`) Editor (`roles/editor`) VM Migration Administrator (`roles/vmmigration.admin`)
`vmmigration.utilizationReports.delete`	Owner (`roles/owner`) Editor (`roles/editor`) VM Migration Administrator (`roles/vmmigration.admin`)
`vmmigration.utilizationReports.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) VM Migration Administrator (`roles/vmmigration.admin`) VM Migration Viewer (`roles/vmmigration.viewer`)
`vmmigration.utilizationReports.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) VM Migration Administrator (`roles/vmmigration.admin`) VM Migration Viewer (`roles/vmmigration.viewer`)

VM Migration roles and permissions Stay organized with collections Save and categorize content based on your preferences.