In
https://cloud.google.com/resource-manager/docs/project-migration#assign_permissions,
it says that roles/resourcemanager.projectIamAdmin,
roles/resourcemanager.projectMover, and
constraints/resourcemanager.allowedExportDestination should be set up ...