To use the generative AI features on Gemini Enterprise Agent Platform, the principals (for example, users, groups, and service accounts ) in your project need to be granted the appropriate IAM role. You can also create custom roles to grant a user-defined set of permissions to a principal. This page shows you the applicable IAM roles to grant and the specific permissions needed for each operation so you can create custom roles.
Predefined roles
You can grant the users or groups in your project one of the following predefined roles to give them access to the generative AI features on Gemini Enterprise Agent Platform:
- Gemini Enterprise Agent Platform Administrator (
roles/aiplatform.admin) - Gemini Enterprise Agent Platform User (
roles/aiplatform.user)
To learn more about Gemini Enterprise Agent Platform IAM roles, see Gemini Enterprise Agent Platform access control with IAM .
Permissions
The following table maps generative AI operations to the permissions required for the operation. If you need fine-grained access control, you can refer to these mappings to create custom roles.
-
aiplatform.endpoints.predict
-
aiplatform.datasets.create -
aiplatform.datasets.update -
aiplatform.datasets.delete -
aiplatform.datasets.list -
aiplatform.datasets.get
-
aiplatform.pipelineJobs.* -
aiplatform.customJobs.* -
aiplatform.datasets.export -
aiplatform.datasets.get -
aiplatform.models.upload -
aiplatform.models.get -
aiplatform.endpoints.create -
aiplatform.endpoints.get -
aiplatform.endpoints.deploy -
aiplatform.metadataStores.get -
storage.objects.create -
storage.objects.update -
storage.objects.get -
storage.objects.list
To learn more about Gemini Enterprise Agent Platform IAM permissions, see IAM permissions .
What's next
Enable Data Access audit logs
Enable Data Access audit logs in Agent Platform so that you can monitor usage of your model endpoints.
Control access with IAM
Learn how to use Identity and Access Management (IAM) to manage access to Agent Platform resources.
Introduction to tuning
Learn how to tune a model by providing a training dataset that contains a set of examples of specific downstream tasks.
Responsible AI
Learn about some of the limitations to generative AI and recommended practices for using generative AI.
