Access control with IAM
This page describes how to use Identity and Access Management (IAM) to manage access to Colab Enterprise resources. To manage access for other Vertex AI resources, see Vertex AI access control with IAM .
Control access to notebooks with IAM
You can manage access to Colab Enterprise notebooks (IPYNB files) at the project level or per notebook.
- To grant access to notebooks at the project level, assign one or more roles to a principal (user, group, or service account ).
- To grant access to a specific notebook, assign one or more roles to a principal on the notebook. To learn more, see Manage access to a notebook .
Running code that interacts with other Google Cloud services
Granting access to a notebook is limited to the specific permissions related to interacting with the notebook. For example, you can grant the ability to create a notebook, write code in it, or delete the notebook.
To run code that interacts with other Google Cloud services, you must use one of the following methods:
-
Run code in a runtime with end-user credentials enabled. This means your notebook has the same access to Google Cloud services as your notebook user.
-
Run code that authenticates and authorizes your notebook to interact with Google Cloud services.
To learn more, see Run code that interacts with Google Cloud .
Types of IAM roles
There are different types of IAM roles that can be used in Colab Enterprise:
-
Predefined roles let you grant a set of related permissions to your Colab Enterprise resources at the project level.
-
Basic roles (Owner, Editor, and Viewer) provide access control to your Colab Enterprise resources at the project level, and are common to all Google Cloud services.
-
Custom roles enable you to choose a specific set of permissions, create your own role with those permissions, and grant the role to users in your organization.
To add, update, or remove these roles in your Colab Enterprise project, see the documentation on managing access to projects, folders, and organizations .
Predefined roles for Colab Enterprise
Colab Enterprise is a part of Vertex AI, and Colab Enterprise resources are managed through the Vertex AI API. Therefore, you can grant principals access to Colab Enterprise resources through Vertex AI roles.
The following table includes all Vertex AI predefined roles.
-
To use predefined roles for common Colab Enterprise operations, see Colab Enterprise Admin (
roles/aiplatform.colabEnterpriseAdmin
) and Colab Enterprise User (roles/aiplatform.colabEnterpriseUser
). -
For roles related to runtime management, see Notebook Runtime Admin (
roles/aiplatform.notebookRuntimeAdmin
) and Notebook Runtime User (roles/aiplatform.notebookRuntimeUser
). -
Vertex AI Administrator (
roles/aiplatform.admin
), Vertex AI User (roles/aiplatform.user
), and Vertex AI Viewer (roles/aiplatform.viewer
) also include Colab Enterprise permissions.
Vertex AI Administrator
( roles/
)
Grants full access to all resources in Vertex AI
aiplatform.*
-
aiplatform.
agentExamples. create -
aiplatform.
agentExamples. delete -
aiplatform.agentExamples.get
-
aiplatform.agentExamples.list
-
aiplatform.
agentExamples. update -
aiplatform.agents.create
-
aiplatform.agents.delete
-
aiplatform.agents.get
-
aiplatform.agents.list
-
aiplatform.agents.update
-
aiplatform.
annotationSpecs. create -
aiplatform.
annotationSpecs. delete -
aiplatform.annotationSpecs.get
-
aiplatform.
annotationSpecs. list -
aiplatform.
annotationSpecs. update -
aiplatform.annotations.create
-
aiplatform.annotations.delete
-
aiplatform.annotations.get
-
aiplatform.annotations.list
-
aiplatform.annotations.update
-
aiplatform.apps.create
-
aiplatform.apps.delete
-
aiplatform.apps.get
-
aiplatform.apps.list
-
aiplatform.apps.update
-
aiplatform.artifacts.create
-
aiplatform.artifacts.delete
-
aiplatform.artifacts.get
-
aiplatform.artifacts.list
-
aiplatform.artifacts.update
-
aiplatform.
batchPredictionJobs. cancel -
aiplatform.
batchPredictionJobs. create -
aiplatform.
batchPredictionJobs. delete -
aiplatform.
batchPredictionJobs. get -
aiplatform.
batchPredictionJobs. list -
aiplatform.cacheConfigs.get
-
aiplatform.cacheConfigs.update
-
aiplatform.
cachedContents. create -
aiplatform.
cachedContents. delete -
aiplatform.cachedContents.get
-
aiplatform.cachedContents.list
-
aiplatform.
cachedContents. update -
aiplatform.consents.get
-
aiplatform.consents.update
-
aiplatform.
contexts. addContextArtifactsAndExecutions -
aiplatform.
contexts. addContextChildren -
aiplatform.contexts.create
-
aiplatform.contexts.delete
-
aiplatform.contexts.get
-
aiplatform.contexts.list
-
aiplatform.
contexts. queryContextLineageSubgraph -
aiplatform.contexts.update
-
aiplatform.customJobs.cancel
-
aiplatform.customJobs.create
-
aiplatform.customJobs.delete
-
aiplatform.customJobs.get
-
aiplatform.customJobs.list
-
aiplatform.dataItems.create
-
aiplatform.dataItems.delete
-
aiplatform.dataItems.get
-
aiplatform.dataItems.list
-
aiplatform.dataItems.update
-
aiplatform.
dataLabelingJobs. cancel -
aiplatform.
dataLabelingJobs. create -
aiplatform.
dataLabelingJobs. delete -
aiplatform.
dataLabelingJobs. get -
aiplatform.
dataLabelingJobs. list -
aiplatform.
datasetVersions. create -
aiplatform.
datasetVersions. delete -
aiplatform.datasetVersions.get
-
aiplatform.
datasetVersions. list -
aiplatform.
datasetVersions. restore -
aiplatform.datasets.create
-
aiplatform.datasets.delete
-
aiplatform.datasets.export
-
aiplatform.datasets.get
-
aiplatform.datasets.import
-
aiplatform.datasets.list
-
aiplatform.datasets.update
-
aiplatform.
deploymentResourcePools. create -
aiplatform.
deploymentResourcePools. delete -
aiplatform.
deploymentResourcePools. get -
aiplatform.
deploymentResourcePools. list -
aiplatform.
deploymentResourcePools. queryDeployedModels -
aiplatform.
deploymentResourcePools. update -
aiplatform.
edgeDeploymentJobs. create -
aiplatform.
edgeDeploymentJobs. delete -
aiplatform.
edgeDeploymentJobs. get -
aiplatform.
edgeDeploymentJobs. list -
aiplatform.
edgeDeviceDebugInfo. get -
aiplatform.edgeDevices.create
-
aiplatform.edgeDevices.delete
-
aiplatform.edgeDevices.get
-
aiplatform.edgeDevices.list
-
aiplatform.edgeDevices.update
-
aiplatform.endpoints.create
-
aiplatform.endpoints.delete
-
aiplatform.endpoints.deploy
-
aiplatform.endpoints.explain
-
aiplatform.endpoints.get
-
aiplatform.
endpoints. getIamPolicy -
aiplatform.endpoints.list
-
aiplatform.endpoints.predict
-
aiplatform.
endpoints. setIamPolicy -
aiplatform.endpoints.undeploy
-
aiplatform.endpoints.update
-
aiplatform.entityTypes.create
-
aiplatform.entityTypes.delete
-
aiplatform.
entityTypes. deleteFeatureValues -
aiplatform.
entityTypes. exportFeatureValues -
aiplatform.entityTypes.get
-
aiplatform.
entityTypes. getIamPolicy -
aiplatform.
entityTypes. importFeatureValues -
aiplatform.entityTypes.list
-
aiplatform.
entityTypes. readFeatureValues -
aiplatform.
entityTypes. setIamPolicy -
aiplatform.
entityTypes. streamingReadFeatureValues -
aiplatform.entityTypes.update
-
aiplatform.
entityTypes. writeFeatureValues -
aiplatform.
exampleStores. create -
aiplatform.
exampleStores. delete -
aiplatform.exampleStores.get
-
aiplatform.exampleStores.list
-
aiplatform.
exampleStores. readExample -
aiplatform.
exampleStores. update -
aiplatform.
exampleStores. writeExample -
aiplatform.
executions. addExecutionEvents -
aiplatform.executions.create
-
aiplatform.executions.delete
-
aiplatform.executions.get
-
aiplatform.executions.list
-
aiplatform.
executions. queryExecutionInputsAndOutputs -
aiplatform.executions.update
-
aiplatform.extensions.delete
-
aiplatform.extensions.execute
-
aiplatform.extensions.get
-
aiplatform.extensions.import
-
aiplatform.extensions.list
-
aiplatform.extensions.update
-
aiplatform.
featureGroups. create -
aiplatform.
featureGroups. delete -
aiplatform.featureGroups.get
-
aiplatform.
featureGroups. getIamPolicy -
aiplatform.featureGroups.list
-
aiplatform.
featureGroups. setIamPolicy -
aiplatform.
featureGroups. update -
aiplatform.
featureMonitorJobs. create -
aiplatform.
featureMonitorJobs. get -
aiplatform.
featureMonitorJobs. list -
aiplatform.
featureMonitors. create -
aiplatform.
featureMonitors. delete -
aiplatform.featureMonitors.get
-
aiplatform.
featureMonitors. list -
aiplatform.
featureMonitors. update -
aiplatform.
featureOnlineStores. create -
aiplatform.
featureOnlineStores. delete -
aiplatform.
featureOnlineStores. get -
aiplatform.
featureOnlineStores. getIamPolicy -
aiplatform.
featureOnlineStores. list -
aiplatform.
featureOnlineStores. setIamPolicy -
aiplatform.
featureOnlineStores. update -
aiplatform.
featureViewSyncs. get -
aiplatform.
featureViewSyncs. list -
aiplatform.featureViews.create
-
aiplatform.featureViews.delete
-
aiplatform.
featureViews. directWrite -
aiplatform.
featureViews. fetchFeatureValues -
aiplatform.featureViews.get
-
aiplatform.
featureViews. getIamPolicy -
aiplatform.featureViews.list
-
aiplatform.
featureViews. searchNearestEntities -
aiplatform.
featureViews. setIamPolicy -
aiplatform.featureViews.sync
-
aiplatform.featureViews.update
-
aiplatform.features.create
-
aiplatform.features.delete
-
aiplatform.features.get
-
aiplatform.features.list
-
aiplatform.features.update
-
aiplatform.
featurestores. batchReadFeatureValues -
aiplatform.
featurestores. create -
aiplatform.
featurestores. delete -
aiplatform.
featurestores. exportFeatures -
aiplatform.featurestores.get
-
aiplatform.
featurestores. getIamPolicy -
aiplatform.
featurestores. importFeatures -
aiplatform.featurestores.list
-
aiplatform.
featurestores. readFeatures -
aiplatform.
featurestores. setIamPolicy -
aiplatform.
featurestores. update -
aiplatform.
featurestores. writeFeatures -
aiplatform.
humanInTheLoops. cancel -
aiplatform.
humanInTheLoops. create -
aiplatform.
humanInTheLoops. delete -
aiplatform.humanInTheLoops.get
-
aiplatform.
humanInTheLoops. list -
aiplatform.
humanInTheLoops. queryAnnotationStats -
aiplatform.
humanInTheLoops. send -
aiplatform.
humanInTheLoops. update -
aiplatform.
hyperparameterTuningJobs. cancel -
aiplatform.
hyperparameterTuningJobs. create -
aiplatform.
hyperparameterTuningJobs. delete -
aiplatform.
hyperparameterTuningJobs. get -
aiplatform.
hyperparameterTuningJobs. list -
aiplatform.
indexEndpoints. create -
aiplatform.
indexEndpoints. delete -
aiplatform.
indexEndpoints. deploy -
aiplatform.indexEndpoints.get
-
aiplatform.indexEndpoints.list
-
aiplatform.
indexEndpoints. queryVectors -
aiplatform.
indexEndpoints. undeploy -
aiplatform.
indexEndpoints. update -
aiplatform.indexes.create
-
aiplatform.indexes.delete
-
aiplatform.indexes.get
-
aiplatform.indexes.list
-
aiplatform.indexes.update
-
aiplatform.
locations. evaluateInstances -
aiplatform.locations.get
-
aiplatform.locations.list
-
aiplatform.memories.create
-
aiplatform.memories.delete
-
aiplatform.memories.generate
-
aiplatform.memories.get
-
aiplatform.memories.list
-
aiplatform.memories.retrieve
-
aiplatform.memories.update
-
aiplatform.
metadataSchemas. create -
aiplatform.
metadataSchemas. delete -
aiplatform.metadataSchemas.get
-
aiplatform.
metadataSchemas. list -
aiplatform.
metadataStores. create -
aiplatform.
metadataStores. delete -
aiplatform.metadataStores.get
-
aiplatform.metadataStores.list
-
aiplatform.
migratableResources. migrate -
aiplatform.
migratableResources. search -
aiplatform.
modelDeploymentMonitoringJobs. create -
aiplatform.
modelDeploymentMonitoringJobs. delete -
aiplatform.
modelDeploymentMonitoringJobs. get -
aiplatform.
modelDeploymentMonitoringJobs. list -
aiplatform.
modelDeploymentMonitoringJobs. pause -
aiplatform.
modelDeploymentMonitoringJobs. resume -
aiplatform.
modelDeploymentMonitoringJobs. searchStatsAnomalies -
aiplatform.
modelDeploymentMonitoringJobs. update -
aiplatform.
modelEvaluationSlices. get -
aiplatform.
modelEvaluationSlices. import -
aiplatform.
modelEvaluationSlices. list -
aiplatform.
modelEvaluations. exportEvaluatedDataItems -
aiplatform.
modelEvaluations. get -
aiplatform.
modelEvaluations. import -
aiplatform.
modelEvaluations. list -
aiplatform.
modelMonitoringJobs. create -
aiplatform.
modelMonitoringJobs. delete -
aiplatform.
modelMonitoringJobs. get -
aiplatform.
modelMonitoringJobs. list -
aiplatform.
modelMonitors. create -
aiplatform.
modelMonitors. delete -
aiplatform.modelMonitors.get
-
aiplatform.modelMonitors.list
-
aiplatform.
modelMonitors. searchModelMonitoringAlerts -
aiplatform.
modelMonitors. searchModelMonitoringStats -
aiplatform.
modelMonitors. update -
aiplatform.models.delete
-
aiplatform.models.export
-
aiplatform.models.get
-
aiplatform.models.list
-
aiplatform.models.update
-
aiplatform.models.upload
-
aiplatform.nasJobs.cancel
-
aiplatform.nasJobs.create
-
aiplatform.nasJobs.delete
-
aiplatform.nasJobs.get
-
aiplatform.nasJobs.list
-
aiplatform.nasTrialDetails.get
-
aiplatform.
nasTrialDetails. list -
aiplatform.
notebookExecutionJobs. create -
aiplatform.
notebookExecutionJobs. delete -
aiplatform.
notebookExecutionJobs. get -
aiplatform.
notebookExecutionJobs. list -
aiplatform.
notebookRuntimeTemplates. apply -
aiplatform.
notebookRuntimeTemplates. create -
aiplatform.
notebookRuntimeTemplates. delete -
aiplatform.
notebookRuntimeTemplates. get -
aiplatform.
notebookRuntimeTemplates. getIamPolicy -
aiplatform.
notebookRuntimeTemplates. list -
aiplatform.
notebookRuntimeTemplates. setIamPolicy -
aiplatform.
notebookRuntimeTemplates. update -
aiplatform.
notebookRuntimes. assign -
aiplatform.
notebookRuntimes. delete -
aiplatform.
notebookRuntimes. get -
aiplatform.
notebookRuntimes. list -
aiplatform.
notebookRuntimes. start -
aiplatform.
notebookRuntimes. update -
aiplatform.
notebookRuntimes. upgrade -
aiplatform.operations.list
-
aiplatform.
persistentResources. create -
aiplatform.
persistentResources. delete -
aiplatform.
persistentResources. get -
aiplatform.
persistentResources. list -
aiplatform.pipelineJobs.cancel
-
aiplatform.pipelineJobs.create
-
aiplatform.pipelineJobs.delete
-
aiplatform.pipelineJobs.get
-
aiplatform.pipelineJobs.list
-
aiplatform.
provisionedThroughputRevisions. get -
aiplatform.
provisionedThroughputRevisions. list -
aiplatform.
provisionedThroughputs. cancel -
aiplatform.
provisionedThroughputs. create -
aiplatform.
provisionedThroughputs. get -
aiplatform.
provisionedThroughputs. list -
aiplatform.
provisionedThroughputs. update -
aiplatform.ragCorpora.create
-
aiplatform.ragCorpora.delete
-
aiplatform.ragCorpora.get
-
aiplatform.ragCorpora.list
-
aiplatform.ragCorpora.query
-
aiplatform.ragCorpora.update
-
aiplatform.
ragEngineConfigs. get -
aiplatform.
ragEngineConfigs. update -
aiplatform.ragFiles.delete
-
aiplatform.ragFiles.get
-
aiplatform.ragFiles.import
-
aiplatform.ragFiles.list
-
aiplatform.ragFiles.upload
-
aiplatform.
reasoningEngines. create -
aiplatform.
reasoningEngines. delete -
aiplatform.
reasoningEngines. get -
aiplatform.
reasoningEngines. list -
aiplatform.
reasoningEngines. query -
aiplatform.
reasoningEngines. update -
aiplatform.schedules.create
-
aiplatform.schedules.delete
-
aiplatform.schedules.get
-
aiplatform.schedules.list
-
aiplatform.schedules.update
-
aiplatform.
sessionEvents. append -
aiplatform.sessionEvents.list
-
aiplatform.sessions.create
-
aiplatform.sessions.delete
-
aiplatform.sessions.get
-
aiplatform.sessions.list
-
aiplatform.sessions.run
-
aiplatform.sessions.update
-
aiplatform.
specialistPools. create -
aiplatform.
specialistPools. delete -
aiplatform.specialistPools.get
-
aiplatform.
specialistPools. list -
aiplatform.
specialistPools. update -
aiplatform.studies.create
-
aiplatform.studies.delete
-
aiplatform.studies.get
-
aiplatform.studies.list
-
aiplatform.studies.update
-
aiplatform.
tensorboardExperiments. create -
aiplatform.
tensorboardExperiments. delete -
aiplatform.
tensorboardExperiments. get -
aiplatform.
tensorboardExperiments. list -
aiplatform.
tensorboardExperiments. update -
aiplatform.
tensorboardExperiments. write -
aiplatform.
tensorboardRuns. batchCreate -
aiplatform.
tensorboardRuns. create -
aiplatform.
tensorboardRuns. delete -
aiplatform.tensorboardRuns.get
-
aiplatform.
tensorboardRuns. list -
aiplatform.
tensorboardRuns. update -
aiplatform.
tensorboardRuns. write -
aiplatform.
tensorboardTimeSeries. batchCreate -
aiplatform.
tensorboardTimeSeries. batchRead -
aiplatform.
tensorboardTimeSeries. create -
aiplatform.
tensorboardTimeSeries. delete -
aiplatform.
tensorboardTimeSeries. get -
aiplatform.
tensorboardTimeSeries. list -
aiplatform.
tensorboardTimeSeries. read -
aiplatform.
tensorboardTimeSeries. update -
aiplatform.tensorboards.create
-
aiplatform.tensorboards.delete
-
aiplatform.tensorboards.get
-
aiplatform.tensorboards.list
-
aiplatform.
tensorboards. recordAccess -
aiplatform.tensorboards.update
-
aiplatform.
trainingPipelines. cancel -
aiplatform.
trainingPipelines. create -
aiplatform.
trainingPipelines. delete -
aiplatform.
trainingPipelines. get -
aiplatform.
trainingPipelines. list -
aiplatform.trials.create
-
aiplatform.trials.delete
-
aiplatform.trials.get
-
aiplatform.trials.list
-
aiplatform.trials.update
-
aiplatform.tuningJobs.cancel
-
aiplatform.tuningJobs.create
-
aiplatform.tuningJobs.delete
-
aiplatform.tuningJobs.get
-
aiplatform.tuningJobs.list
-
aiplatform.
tuningJobs. vertexTune
resourcemanager.projects.get
resourcemanager.projects.list
Vertex AI Batch Prediction Service Agent
( roles/
)
Vertex AI Batch Prediction Service Agent for serving batch prediction requests.
bigquery.datasets.create
bigquery.datasets.get
bigquery.jobs.create
bigquery.jobs.get
bigquery.models.create
bigquery.models.export
bigquery.models.getData
bigquery.readsessions.create
bigquery.readsessions.getData
bigquery.tables.create
bigquery.tables.createSnapshot
bigquery.tables.deleteSnapshot
bigquery.tables.export
bigquery.tables.get
bigquery.tables.getData
bigquery.
bigquery.tables.update
bigquery.tables.updateData
storage.buckets.create
storage.buckets.delete
storage.buckets.get
storage.buckets.list
storage.buckets.update
storage.objects.create
storage.objects.delete
storage.objects.get
storage.objects.list
storage.objects.update
Colab Enterprise Admin
( roles/
)
Admin role of using colab enterprise.
aiplatform.
-
aiplatform.
notebookExecutionJobs. create -
aiplatform.
notebookExecutionJobs. delete -
aiplatform.
notebookExecutionJobs. get -
aiplatform.
notebookExecutionJobs. list
aiplatform.
-
aiplatform.
notebookRuntimeTemplates. apply -
aiplatform.
notebookRuntimeTemplates. create -
aiplatform.
notebookRuntimeTemplates. delete -
aiplatform.
notebookRuntimeTemplates. get -
aiplatform.
notebookRuntimeTemplates. getIamPolicy -
aiplatform.
notebookRuntimeTemplates. list -
aiplatform.
notebookRuntimeTemplates. setIamPolicy -
aiplatform.
notebookRuntimeTemplates. update
aiplatform.notebookRuntimes.*
-
aiplatform.
notebookRuntimes. assign -
aiplatform.
notebookRuntimes. delete -
aiplatform.
notebookRuntimes. get -
aiplatform.
notebookRuntimes. list -
aiplatform.
notebookRuntimes. start -
aiplatform.
notebookRuntimes. update -
aiplatform.
notebookRuntimes. upgrade
aiplatform.operations.list
aiplatform.pipelineJobs.create
aiplatform.schedules.*
-
aiplatform.schedules.create
-
aiplatform.schedules.delete
-
aiplatform.schedules.get
-
aiplatform.schedules.list
-
aiplatform.schedules.update
compute.reservations.get
compute.reservations.list
dataform.*
-
dataform.commentThreads.create
-
dataform.commentThreads.delete
-
dataform.commentThreads.get
-
dataform.commentThreads.list
-
dataform.commentThreads.update
-
dataform.comments.create
-
dataform.comments.delete
-
dataform.comments.get
-
dataform.comments.list
-
dataform.comments.update
-
dataform.
compilationResults. create -
dataform.
compilationResults. get -
dataform.
compilationResults. list -
dataform.
compilationResults. query -
dataform.config.get
-
dataform.config.update
-
dataform.locations.get
-
dataform.locations.list
-
dataform.releaseConfigs.create
-
dataform.releaseConfigs.delete
-
dataform.releaseConfigs.get
-
dataform.releaseConfigs.list
-
dataform.releaseConfigs.update
-
dataform.repositories.commit
-
dataform.
repositories. computeAccessTokenStatus -
dataform.repositories.create
-
dataform.repositories.delete
-
dataform.
repositories. fetchHistory -
dataform.
repositories. fetchRemoteBranches -
dataform.repositories.get
-
dataform.
repositories. getIamPolicy -
dataform.repositories.list
-
dataform.
repositories. queryDirectoryContents -
dataform.repositories.readFile
-
dataform.
repositories. setIamPolicy -
dataform.repositories.update
-
dataform.
workflowConfigs. create -
dataform.
workflowConfigs. delete -
dataform.workflowConfigs.get
-
dataform.workflowConfigs.list
-
dataform.
workflowConfigs. update -
dataform.
workflowInvocations. cancel -
dataform.
workflowInvocations. create -
dataform.
workflowInvocations. delete -
dataform.
workflowInvocations. get -
dataform.
workflowInvocations. list -
dataform.
workflowInvocations. query -
dataform.workspaces.commit
-
dataform.workspaces.create
-
dataform.workspaces.delete
-
dataform.
workspaces. fetchFileDiff -
dataform.
workspaces. fetchFileGitStatuses -
dataform.
workspaces. fetchGitAheadBehind -
dataform.workspaces.get
-
dataform.
workspaces. getIamPolicy -
dataform.
workspaces. installNpmPackages -
dataform.workspaces.list
-
dataform.
workspaces. makeDirectory -
dataform.
workspaces. moveDirectory -
dataform.workspaces.moveFile
-
dataform.workspaces.pull
-
dataform.workspaces.push
-
dataform.
workspaces. queryDirectoryContents -
dataform.workspaces.readFile
-
dataform.
workspaces. removeDirectory -
dataform.workspaces.removeFile
-
dataform.workspaces.reset
-
dataform.
workspaces. searchFiles -
dataform.
workspaces. setIamPolicy -
dataform.workspaces.writeFile
resourcemanager.projects.get
resourcemanager.projects.list
Colab Enterprise User
( roles/
)
User role of using colab enterprise.
aiplatform.
-
aiplatform.
notebookExecutionJobs. create -
aiplatform.
notebookExecutionJobs. delete -
aiplatform.
notebookExecutionJobs. get -
aiplatform.
notebookExecutionJobs. list
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.operations.list
aiplatform.pipelineJobs.create
aiplatform.schedules.*
-
aiplatform.schedules.create
-
aiplatform.schedules.delete
-
aiplatform.schedules.get
-
aiplatform.schedules.list
-
aiplatform.schedules.update
dataform.commentThreads.get
dataform.commentThreads.list
dataform.comments.get
dataform.comments.list
dataform.locations.*
-
dataform.locations.get
-
dataform.locations.list
dataform.repositories.create
dataform.repositories.list
resourcemanager.projects.get
resourcemanager.projects.list
Vertex AI Colab Service Agent
( roles/
)
Gives Vertex AI Colab the proper permissions to function.
aiplatform.
compute.addresses.get
compute.addresses.list
compute.addresses.use
compute.addresses.useInternal
compute.disks.create
compute.disks.createSnapshot
compute.disks.createTagBinding
compute.disks.delete
compute.disks.get
compute.disks.setLabels
compute.disks.use
compute.disks.useReadOnly
compute.globalOperations.get
compute.instances.attachDisk
compute.instances.create
compute.
compute.instances.delete
compute.instances.detachDisk
compute.instances.get
compute.
compute.instances.reset
compute.instances.setLabels
compute.instances.setMetadata
compute.
compute.instances.setTags
compute.instances.start
compute.instances.stop
compute.instances.useReadOnly
compute.networks.get
compute.networks.use
compute.networks.useExternalIp
compute.snapshots.create
compute.snapshots.delete
compute.snapshots.useReadOnly
compute.subnetworks.get
compute.subnetworks.list
compute.subnetworks.use
compute.
compute.zoneOperations.get
compute.zoneOperations.list
iam.serviceAccounts.actAs
notebooks.instances.create
notebooks.instances.delete
notebooks.instances.get
Vertex AI Custom Code Service Agent
( roles/
)
Gives Vertex AI Custom Code the proper permissions.
aiplatform.agentExamples.*
-
aiplatform.
agentExamples. create -
aiplatform.
agentExamples. delete -
aiplatform.agentExamples.get
-
aiplatform.agentExamples.list
-
aiplatform.
agentExamples. update
aiplatform.agents.*
-
aiplatform.agents.create
-
aiplatform.agents.delete
-
aiplatform.agents.get
-
aiplatform.agents.list
-
aiplatform.agents.update
aiplatform.annotationSpecs.*
-
aiplatform.
annotationSpecs. create -
aiplatform.
annotationSpecs. delete -
aiplatform.annotationSpecs.get
-
aiplatform.
annotationSpecs. list -
aiplatform.
annotationSpecs. update
aiplatform.annotations.*
-
aiplatform.annotations.create
-
aiplatform.annotations.delete
-
aiplatform.annotations.get
-
aiplatform.annotations.list
-
aiplatform.annotations.update
aiplatform.apps.*
-
aiplatform.apps.create
-
aiplatform.apps.delete
-
aiplatform.apps.get
-
aiplatform.apps.list
-
aiplatform.apps.update
aiplatform.artifacts.*
-
aiplatform.artifacts.create
-
aiplatform.artifacts.delete
-
aiplatform.artifacts.get
-
aiplatform.artifacts.list
-
aiplatform.artifacts.update
aiplatform.
-
aiplatform.
batchPredictionJobs. cancel -
aiplatform.
batchPredictionJobs. create -
aiplatform.
batchPredictionJobs. delete -
aiplatform.
batchPredictionJobs. get -
aiplatform.
batchPredictionJobs. list
aiplatform.cacheConfigs.get
aiplatform.cachedContents.*
-
aiplatform.
cachedContents. create -
aiplatform.
cachedContents. delete -
aiplatform.cachedContents.get
-
aiplatform.cachedContents.list
-
aiplatform.
cachedContents. update
aiplatform.consents.get
aiplatform.contexts.*
-
aiplatform.
contexts. addContextArtifactsAndExecutions -
aiplatform.
contexts. addContextChildren -
aiplatform.contexts.create
-
aiplatform.contexts.delete
-
aiplatform.contexts.get
-
aiplatform.contexts.list
-
aiplatform.
contexts. queryContextLineageSubgraph -
aiplatform.contexts.update
aiplatform.customJobs.*
-
aiplatform.customJobs.cancel
-
aiplatform.customJobs.create
-
aiplatform.customJobs.delete
-
aiplatform.customJobs.get
-
aiplatform.customJobs.list
aiplatform.dataItems.*
-
aiplatform.dataItems.create
-
aiplatform.dataItems.delete
-
aiplatform.dataItems.get
-
aiplatform.dataItems.list
-
aiplatform.dataItems.update
aiplatform.dataLabelingJobs.*
-
aiplatform.
dataLabelingJobs. cancel -
aiplatform.
dataLabelingJobs. create -
aiplatform.
dataLabelingJobs. delete -
aiplatform.
dataLabelingJobs. get -
aiplatform.
dataLabelingJobs. list
aiplatform.datasetVersions.*
-
aiplatform.
datasetVersions. create -
aiplatform.
datasetVersions. delete -
aiplatform.datasetVersions.get
-
aiplatform.
datasetVersions. list -
aiplatform.
datasetVersions. restore
aiplatform.datasets.*
-
aiplatform.datasets.create
-
aiplatform.datasets.delete
-
aiplatform.datasets.export
-
aiplatform.datasets.get
-
aiplatform.datasets.import
-
aiplatform.datasets.list
-
aiplatform.datasets.update
aiplatform.
-
aiplatform.
deploymentResourcePools. create -
aiplatform.
deploymentResourcePools. delete -
aiplatform.
deploymentResourcePools. get -
aiplatform.
deploymentResourcePools. list -
aiplatform.
deploymentResourcePools. queryDeployedModels -
aiplatform.
deploymentResourcePools. update
aiplatform.
-
aiplatform.
edgeDeploymentJobs. create -
aiplatform.
edgeDeploymentJobs. delete -
aiplatform.
edgeDeploymentJobs. get -
aiplatform.
edgeDeploymentJobs. list
aiplatform.
aiplatform.edgeDevices.*
-
aiplatform.edgeDevices.create
-
aiplatform.edgeDevices.delete
-
aiplatform.edgeDevices.get
-
aiplatform.edgeDevices.list
-
aiplatform.edgeDevices.update
aiplatform.endpoints.create
aiplatform.endpoints.delete
aiplatform.endpoints.deploy
aiplatform.endpoints.explain
aiplatform.endpoints.get
aiplatform.endpoints.list
aiplatform.endpoints.predict
aiplatform.endpoints.undeploy
aiplatform.endpoints.update
aiplatform.entityTypes.create
aiplatform.entityTypes.delete
aiplatform.
aiplatform.
aiplatform.entityTypes.get
aiplatform.
aiplatform.entityTypes.list
aiplatform.
aiplatform.
aiplatform.entityTypes.update
aiplatform.
aiplatform.exampleStores.*
-
aiplatform.
exampleStores. create -
aiplatform.
exampleStores. delete -
aiplatform.exampleStores.get
-
aiplatform.exampleStores.list
-
aiplatform.
exampleStores. readExample -
aiplatform.
exampleStores. update -
aiplatform.
exampleStores. writeExample
aiplatform.executions.*
-
aiplatform.
executions. addExecutionEvents -
aiplatform.executions.create
-
aiplatform.executions.delete
-
aiplatform.executions.get
-
aiplatform.executions.list
-
aiplatform.
executions. queryExecutionInputsAndOutputs -
aiplatform.executions.update
aiplatform.extensions.*
-
aiplatform.extensions.delete
-
aiplatform.extensions.execute
-
aiplatform.extensions.get
-
aiplatform.extensions.import
-
aiplatform.extensions.list
-
aiplatform.extensions.update
aiplatform.
aiplatform.
aiplatform.featureGroups.get
aiplatform.featureGroups.list
aiplatform.
aiplatform.
-
aiplatform.
featureMonitorJobs. create -
aiplatform.
featureMonitorJobs. get -
aiplatform.
featureMonitorJobs. list
aiplatform.featureMonitors.*
-
aiplatform.
featureMonitors. create -
aiplatform.
featureMonitors. delete -
aiplatform.featureMonitors.get
-
aiplatform.
featureMonitors. list -
aiplatform.
featureMonitors. update
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.featureViewSyncs.*
-
aiplatform.
featureViewSyncs. get -
aiplatform.
featureViewSyncs. list
aiplatform.featureViews.create
aiplatform.featureViews.delete
aiplatform.
aiplatform.
aiplatform.featureViews.get
aiplatform.featureViews.list
aiplatform.
aiplatform.featureViews.sync
aiplatform.featureViews.update
aiplatform.features.*
-
aiplatform.features.create
-
aiplatform.features.delete
-
aiplatform.features.get
-
aiplatform.features.list
-
aiplatform.features.update
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.featurestores.get
aiplatform.
aiplatform.featurestores.list
aiplatform.
aiplatform.
aiplatform.
aiplatform.humanInTheLoops.*
-
aiplatform.
humanInTheLoops. cancel -
aiplatform.
humanInTheLoops. create -
aiplatform.
humanInTheLoops. delete -
aiplatform.humanInTheLoops.get
-
aiplatform.
humanInTheLoops. list -
aiplatform.
humanInTheLoops. queryAnnotationStats -
aiplatform.
humanInTheLoops. send -
aiplatform.
humanInTheLoops. update
aiplatform.
-
aiplatform.
hyperparameterTuningJobs. cancel -
aiplatform.
hyperparameterTuningJobs. create -
aiplatform.
hyperparameterTuningJobs. delete -
aiplatform.
hyperparameterTuningJobs. get -
aiplatform.
hyperparameterTuningJobs. list
aiplatform.indexEndpoints.*
-
aiplatform.
indexEndpoints. create -
aiplatform.
indexEndpoints. delete -
aiplatform.
indexEndpoints. deploy -
aiplatform.indexEndpoints.get
-
aiplatform.indexEndpoints.list
-
aiplatform.
indexEndpoints. queryVectors -
aiplatform.
indexEndpoints. undeploy -
aiplatform.
indexEndpoints. update
aiplatform.indexes.*
-
aiplatform.indexes.create
-
aiplatform.indexes.delete
-
aiplatform.indexes.get
-
aiplatform.indexes.list
-
aiplatform.indexes.update
aiplatform.locations.*
-
aiplatform.
locations. evaluateInstances -
aiplatform.locations.get
-
aiplatform.locations.list
aiplatform.memories.*
-
aiplatform.memories.create
-
aiplatform.memories.delete
-
aiplatform.memories.generate
-
aiplatform.memories.get
-
aiplatform.memories.list
-
aiplatform.memories.retrieve
-
aiplatform.memories.update
aiplatform.metadataSchemas.*
-
aiplatform.
metadataSchemas. create -
aiplatform.
metadataSchemas. delete -
aiplatform.metadataSchemas.get
-
aiplatform.
metadataSchemas. list
aiplatform.metadataStores.*
-
aiplatform.
metadataStores. create -
aiplatform.
metadataStores. delete -
aiplatform.metadataStores.get
-
aiplatform.metadataStores.list
aiplatform.
-
aiplatform.
modelDeploymentMonitoringJobs. create -
aiplatform.
modelDeploymentMonitoringJobs. delete -
aiplatform.
modelDeploymentMonitoringJobs. get -
aiplatform.
modelDeploymentMonitoringJobs. list -
aiplatform.
modelDeploymentMonitoringJobs. pause -
aiplatform.
modelDeploymentMonitoringJobs. resume -
aiplatform.
modelDeploymentMonitoringJobs. searchStatsAnomalies -
aiplatform.
modelDeploymentMonitoringJobs. update
aiplatform.
-
aiplatform.
modelEvaluationSlices. get -
aiplatform.
modelEvaluationSlices. import -
aiplatform.
modelEvaluationSlices. list
aiplatform.modelEvaluations.*
-
aiplatform.
modelEvaluations. exportEvaluatedDataItems -
aiplatform.
modelEvaluations. get -
aiplatform.
modelEvaluations. import -
aiplatform.
modelEvaluations. list
aiplatform.
-
aiplatform.
modelMonitoringJobs. create -
aiplatform.
modelMonitoringJobs. delete -
aiplatform.
modelMonitoringJobs. get -
aiplatform.
modelMonitoringJobs. list
aiplatform.modelMonitors.*
-
aiplatform.
modelMonitors. create -
aiplatform.
modelMonitors. delete -
aiplatform.modelMonitors.get
-
aiplatform.modelMonitors.list
-
aiplatform.
modelMonitors. searchModelMonitoringAlerts -
aiplatform.
modelMonitors. searchModelMonitoringStats -
aiplatform.
modelMonitors. update
aiplatform.models.*
-
aiplatform.models.delete
-
aiplatform.models.export
-
aiplatform.models.get
-
aiplatform.models.list
-
aiplatform.models.update
-
aiplatform.models.upload
aiplatform.nasJobs.*
-
aiplatform.nasJobs.cancel
-
aiplatform.nasJobs.create
-
aiplatform.nasJobs.delete
-
aiplatform.nasJobs.get
-
aiplatform.nasJobs.list
aiplatform.nasTrialDetails.*
-
aiplatform.nasTrialDetails.get
-
aiplatform.
nasTrialDetails. list
aiplatform.
-
aiplatform.
notebookExecutionJobs. create -
aiplatform.
notebookExecutionJobs. delete -
aiplatform.
notebookExecutionJobs. get -
aiplatform.
notebookExecutionJobs. list
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.notebookRuntimes.*
-
aiplatform.
notebookRuntimes. assign -
aiplatform.
notebookRuntimes. delete -
aiplatform.
notebookRuntimes. get -
aiplatform.
notebookRuntimes. list -
aiplatform.
notebookRuntimes. start -
aiplatform.
notebookRuntimes. update -
aiplatform.
notebookRuntimes. upgrade
aiplatform.operations.list
aiplatform.
aiplatform.
aiplatform.pipelineJobs.*
-
aiplatform.pipelineJobs.cancel
-
aiplatform.pipelineJobs.create
-
aiplatform.pipelineJobs.delete
-
aiplatform.pipelineJobs.get
-
aiplatform.pipelineJobs.list
aiplatform.
-
aiplatform.
provisionedThroughputRevisions. get -
aiplatform.
provisionedThroughputRevisions. list
aiplatform.
aiplatform.
aiplatform.ragCorpora.*
-
aiplatform.ragCorpora.create
-
aiplatform.ragCorpora.delete
-
aiplatform.ragCorpora.get
-
aiplatform.ragCorpora.list
-
aiplatform.ragCorpora.query
-
aiplatform.ragCorpora.update
aiplatform.
aiplatform.ragFiles.*
-
aiplatform.ragFiles.delete
-
aiplatform.ragFiles.get
-
aiplatform.ragFiles.import
-
aiplatform.ragFiles.list
-
aiplatform.ragFiles.upload
aiplatform.reasoningEngines.*
-
aiplatform.
reasoningEngines. create -
aiplatform.
reasoningEngines. delete -
aiplatform.
reasoningEngines. get -
aiplatform.
reasoningEngines. list -
aiplatform.
reasoningEngines. query -
aiplatform.
reasoningEngines. update
aiplatform.schedules.*
-
aiplatform.schedules.create
-
aiplatform.schedules.delete
-
aiplatform.schedules.get
-
aiplatform.schedules.list
-
aiplatform.schedules.update
aiplatform.sessionEvents.*
-
aiplatform.
sessionEvents. append -
aiplatform.sessionEvents.list
aiplatform.sessions.*
-
aiplatform.sessions.create
-
aiplatform.sessions.delete
-
aiplatform.sessions.get
-
aiplatform.sessions.list
-
aiplatform.sessions.run
-
aiplatform.sessions.update
aiplatform.specialistPools.*
-
aiplatform.
specialistPools. create -
aiplatform.
specialistPools. delete -
aiplatform.specialistPools.get
-
aiplatform.
specialistPools. list -
aiplatform.
specialistPools. update
aiplatform.studies.*
-
aiplatform.studies.create
-
aiplatform.studies.delete
-
aiplatform.studies.get
-
aiplatform.studies.list
-
aiplatform.studies.update
aiplatform.
-
aiplatform.
tensorboardExperiments. create -
aiplatform.
tensorboardExperiments. delete -
aiplatform.
tensorboardExperiments. get -
aiplatform.
tensorboardExperiments. list -
aiplatform.
tensorboardExperiments. update -
aiplatform.
tensorboardExperiments. write
aiplatform.tensorboardRuns.*
-
aiplatform.
tensorboardRuns. batchCreate -
aiplatform.
tensorboardRuns. create -
aiplatform.
tensorboardRuns. delete -
aiplatform.tensorboardRuns.get
-
aiplatform.
tensorboardRuns. list -
aiplatform.
tensorboardRuns. update -
aiplatform.
tensorboardRuns. write
aiplatform.
-
aiplatform.
tensorboardTimeSeries. batchCreate -
aiplatform.
tensorboardTimeSeries. batchRead -
aiplatform.
tensorboardTimeSeries. create -
aiplatform.
tensorboardTimeSeries. delete -
aiplatform.
tensorboardTimeSeries. get -
aiplatform.
tensorboardTimeSeries. list -
aiplatform.
tensorboardTimeSeries. read -
aiplatform.
tensorboardTimeSeries. update
aiplatform.tensorboards.create
aiplatform.tensorboards.delete
aiplatform.tensorboards.get
aiplatform.tensorboards.list
aiplatform.tensorboards.update
aiplatform.trainingPipelines.*
-
aiplatform.
trainingPipelines. cancel -
aiplatform.
trainingPipelines. create -
aiplatform.
trainingPipelines. delete -
aiplatform.
trainingPipelines. get -
aiplatform.
trainingPipelines. list
aiplatform.trials.*
-
aiplatform.trials.create
-
aiplatform.trials.delete
-
aiplatform.trials.get
-
aiplatform.trials.list
-
aiplatform.trials.update
aiplatform.tuningJobs.*
-
aiplatform.tuningJobs.cancel
-
aiplatform.tuningJobs.create
-
aiplatform.tuningJobs.delete
-
aiplatform.tuningJobs.get
-
aiplatform.tuningJobs.list
-
aiplatform.
tuningJobs. vertexTune
artifactregistry.
artifactregistry.
artifactregistry.
artifactregistry.tags.get
artifactregistry.versions.get
bigquery.datasets.create
bigquery.datasets.get
bigquery.jobs.create
bigquery.jobs.get
bigquery.readsessions.create
bigquery.readsessions.getData
bigquery.tables.create
bigquery.tables.export
bigquery.tables.get
bigquery.tables.getData
bigquery.tables.update
bigquery.tables.updateData
iam.serviceAccounts.get
iam.
iam.
iam.
iam.serviceAccounts.list
iam.serviceAccounts.signBlob
iam.serviceAccounts.signJwt
logging.logEntries.create
logging.logEntries.route
monitoring.
monitoring.
monitoring.
monitoring.
-
monitoring.
monitoredResourceDescriptors. get -
monitoring.
monitoredResourceDescriptors. list
monitoring.timeSeries.create
resourcemanager.projects.get
resourcemanager.projects.list
serviceusage.services.use
storage.buckets.create
storage.buckets.delete
storage.buckets.get
storage.buckets.list
storage.objects.create
storage.objects.delete
storage.objects.get
storage.objects.list
storage.objects.update
Vertex AI Feature Store EntityType owner
( roles/
)
Provides full access to all permissions for a particular entity type resource.
Lowest-level resources where you can grant this role:
- Entity type
aiplatform.entityTypes.delete
aiplatform.
aiplatform.
aiplatform.entityTypes.get
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.entityTypes.update
aiplatform.
aiplatform.featureGroups.get
aiplatform.featureGroups.list
aiplatform.
aiplatform.
aiplatform.featureMonitors.get
aiplatform.
aiplatform.
aiplatform.
aiplatform.featureViewSyncs.*
-
aiplatform.
featureViewSyncs. get -
aiplatform.
featureViewSyncs. list
aiplatform.
aiplatform.featureViews.get
aiplatform.featureViews.list
aiplatform.
aiplatform.features.*
-
aiplatform.features.create
-
aiplatform.features.delete
-
aiplatform.features.get
-
aiplatform.features.list
-
aiplatform.features.update
aiplatform.
resourcemanager.projects.get
resourcemanager.projects.list
Vertex AI Platform Express Admin Beta
( roles/
)
Grants admin access to Vertex AI Express
aiplatform.
-
aiplatform.
batchPredictionJobs. cancel -
aiplatform.
batchPredictionJobs. create -
aiplatform.
batchPredictionJobs. delete -
aiplatform.
batchPredictionJobs. get -
aiplatform.
batchPredictionJobs. list
aiplatform.datasetVersions.*
-
aiplatform.
datasetVersions. create -
aiplatform.
datasetVersions. delete -
aiplatform.datasetVersions.get
-
aiplatform.
datasetVersions. list -
aiplatform.
datasetVersions. restore
aiplatform.datasets.create
aiplatform.datasets.delete
aiplatform.datasets.get
aiplatform.datasets.list
aiplatform.datasets.update
aiplatform.endpoints.predict
aiplatform.
aiplatform.memories.*
-
aiplatform.memories.create
-
aiplatform.memories.delete
-
aiplatform.memories.generate
-
aiplatform.memories.get
-
aiplatform.memories.list
-
aiplatform.memories.retrieve
-
aiplatform.memories.update
aiplatform.reasoningEngines.*
-
aiplatform.
reasoningEngines. create -
aiplatform.
reasoningEngines. delete -
aiplatform.
reasoningEngines. get -
aiplatform.
reasoningEngines. list -
aiplatform.
reasoningEngines. query -
aiplatform.
reasoningEngines. update
aiplatform.sessionEvents.*
-
aiplatform.
sessionEvents. append -
aiplatform.sessionEvents.list
aiplatform.sessions.create
aiplatform.sessions.delete
aiplatform.sessions.get
aiplatform.sessions.list
aiplatform.sessions.update
Vertex AI Platform Express User Beta
( roles/
)
Grants user access to Vertex AI Express
aiplatform.endpoints.predict
aiplatform.memories.*
-
aiplatform.memories.create
-
aiplatform.memories.delete
-
aiplatform.memories.generate
-
aiplatform.memories.get
-
aiplatform.memories.list
-
aiplatform.memories.retrieve
-
aiplatform.memories.update
aiplatform.reasoningEngines.*
-
aiplatform.
reasoningEngines. create -
aiplatform.
reasoningEngines. delete -
aiplatform.
reasoningEngines. get -
aiplatform.
reasoningEngines. list -
aiplatform.
reasoningEngines. query -
aiplatform.
reasoningEngines. update
aiplatform.sessionEvents.*
-
aiplatform.
sessionEvents. append -
aiplatform.sessionEvents.list
aiplatform.sessions.create
aiplatform.sessions.delete
aiplatform.sessions.get
aiplatform.sessions.list
aiplatform.sessions.update
Vertex AI Extension Custom Code Service Agent
( roles/
)
Gives Vertex AI Extension that executes custom code the permissions it needs to function.
logging.logEntries.create
logging.logEntries.route
monitoring.timeSeries.create
orgpolicy.policy.get
resourcemanager.projects.get
resourcemanager.projects.list
storage.folders.*
-
storage.folders.create
-
storage.folders.delete
-
storage.folders.get
-
storage.folders.list
-
storage.folders.rename
storage.managedFolders.create
storage.managedFolders.delete
storage.managedFolders.get
storage.managedFolders.list
storage.multipartUploads.*
-
storage.multipartUploads.abort
-
storage.
multipartUploads. create -
storage.multipartUploads.list
-
storage.
multipartUploads. listParts
storage.objects.*
-
storage.objects.create
-
storage.objects.delete
-
storage.objects.get
-
storage.objects.getIamPolicy
-
storage.objects.list
-
storage.objects.move
-
storage.
objects. overrideUnlockedRetention -
storage.objects.restore
-
storage.objects.setIamPolicy
-
storage.objects.setRetention
-
storage.objects.update
Vertex AI Extension Service Agent
( roles/
)
Gives Vertex AI Extension the permissions it needs to function.
aiplatform.endpoints.predict
aiplatform.locations.get
aiplatform.ragCorpora.query
discoveryengine.
iam.
iam.
logging.logEntries.create
logging.logEntries.route
serviceusage.services.use
storage.objects.get
Vertex AI Feature Store Admin
( roles/
)
Grants full access to all resources in Vertex AI Feature Store
Lowest-level resources where you can grant this role:
- Entity type
aiplatform.entityTypes.*
-
aiplatform.entityTypes.create
-
aiplatform.entityTypes.delete
-
aiplatform.
entityTypes. deleteFeatureValues -
aiplatform.
entityTypes. exportFeatureValues -
aiplatform.entityTypes.get
-
aiplatform.
entityTypes. getIamPolicy -
aiplatform.
entityTypes. importFeatureValues -
aiplatform.entityTypes.list
-
aiplatform.
entityTypes. readFeatureValues -
aiplatform.
entityTypes. setIamPolicy -
aiplatform.
entityTypes. streamingReadFeatureValues -
aiplatform.entityTypes.update
-
aiplatform.
entityTypes. writeFeatureValues
aiplatform.featureGroups.*
-
aiplatform.
featureGroups. create -
aiplatform.
featureGroups. delete -
aiplatform.featureGroups.get
-
aiplatform.
featureGroups. getIamPolicy -
aiplatform.featureGroups.list
-
aiplatform.
featureGroups. setIamPolicy -
aiplatform.
featureGroups. update
aiplatform.
-
aiplatform.
featureMonitorJobs. create -
aiplatform.
featureMonitorJobs. get -
aiplatform.
featureMonitorJobs. list
aiplatform.featureMonitors.*
-
aiplatform.
featureMonitors. create -
aiplatform.
featureMonitors. delete -
aiplatform.featureMonitors.get
-
aiplatform.
featureMonitors. list -
aiplatform.
featureMonitors. update
aiplatform.
-
aiplatform.
featureOnlineStores. create -
aiplatform.
featureOnlineStores. delete -
aiplatform.
featureOnlineStores. get -
aiplatform.
featureOnlineStores. getIamPolicy -
aiplatform.
featureOnlineStores. list -
aiplatform.
featureOnlineStores. setIamPolicy -
aiplatform.
featureOnlineStores. update
aiplatform.featureViewSyncs.*
-
aiplatform.
featureViewSyncs. get -
aiplatform.
featureViewSyncs. list
aiplatform.featureViews.*
-
aiplatform.featureViews.create
-
aiplatform.featureViews.delete
-
aiplatform.
featureViews. directWrite -
aiplatform.
featureViews. fetchFeatureValues -
aiplatform.featureViews.get
-
aiplatform.
featureViews. getIamPolicy -
aiplatform.featureViews.list
-
aiplatform.
featureViews. searchNearestEntities -
aiplatform.
featureViews. setIamPolicy -
aiplatform.featureViews.sync
-
aiplatform.featureViews.update
aiplatform.features.*
-
aiplatform.features.create
-
aiplatform.features.delete
-
aiplatform.features.get
-
aiplatform.features.list
-
aiplatform.features.update
aiplatform.featurestores.*
-
aiplatform.
featurestores. batchReadFeatureValues -
aiplatform.
featurestores. create -
aiplatform.
featurestores. delete -
aiplatform.
featurestores. exportFeatures -
aiplatform.featurestores.get
-
aiplatform.
featurestores. getIamPolicy -
aiplatform.
featurestores. importFeatures -
aiplatform.featurestores.list
-
aiplatform.
featurestores. readFeatures -
aiplatform.
featurestores. setIamPolicy -
aiplatform.
featurestores. update -
aiplatform.
featurestores. writeFeatures
aiplatform.operations.list
resourcemanager.projects.get
resourcemanager.projects.list
Vertex AI Feature Store Data Viewer
( roles/
)
This role provides permissions to read Feature data.
Lowest-level resources where you can grant this role:
- Entity type
aiplatform.
aiplatform.entityTypes.get
aiplatform.
aiplatform.
aiplatform.featureGroups.get
aiplatform.featureGroups.list
aiplatform.
aiplatform.
aiplatform.featureMonitors.get
aiplatform.
aiplatform.
aiplatform.
aiplatform.featureViewSyncs.*
-
aiplatform.
featureViewSyncs. get -
aiplatform.
featureViewSyncs. list
aiplatform.
aiplatform.featureViews.get
aiplatform.featureViews.list
aiplatform.
aiplatform.features.get
aiplatform.features.list
aiplatform.
resourcemanager.projects.get
resourcemanager.projects.list
Vertex AI Feature Store Data Writer
( roles/
)
This role provides permissions to read and write Feature data.
Lowest-level resources where you can grant this role:
- Entity type
aiplatform.
aiplatform.
aiplatform.entityTypes.get
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.featureGroups.get
aiplatform.featureGroups.list
aiplatform.
aiplatform.
aiplatform.featureMonitors.get
aiplatform.
aiplatform.
aiplatform.
aiplatform.featureViewSyncs.*
-
aiplatform.
featureViewSyncs. get -
aiplatform.
featureViewSyncs. list
aiplatform.
aiplatform.featureViews.get
aiplatform.featureViews.list
aiplatform.
aiplatform.features.get
aiplatform.features.list
aiplatform.
resourcemanager.projects.get
resourcemanager.projects.list
Vertex AI Feature Store Instance Creator
( roles/
)
Administrator of Featurestore resources, but not the child resources under Featurestores.
Lowest-level resources where you can grant this role:
- Featurestore
aiplatform.
aiplatform.
aiplatform.featurestores.get
aiplatform.featurestores.list
aiplatform.
Vertex AI Feature Store Resource Viewer
( roles/
)
Viewer of all resources in Vertex AI Feature Store but cannot make changes.
Lowest-level resources where you can grant this role:
- Entity type
aiplatform.entityTypes.get
aiplatform.entityTypes.list
aiplatform.featureGroups.get
aiplatform.featureGroups.list
aiplatform.
aiplatform.
aiplatform.featureMonitors.get
aiplatform.
aiplatform.
aiplatform.
aiplatform.featureViewSyncs.*
-
aiplatform.
featureViewSyncs. get -
aiplatform.
featureViewSyncs. list
aiplatform.featureViews.get
aiplatform.featureViews.list
aiplatform.features.get
aiplatform.features.list
aiplatform.featurestores.get
aiplatform.featurestores.list
aiplatform.operations.list
resourcemanager.projects.get
resourcemanager.projects.list
Vertex AI Feature Store User Beta
( roles/
)
Deprecated. Use featurestoreAdmin instead.
aiplatform.entityTypes.*
-
aiplatform.entityTypes.create
-
aiplatform.entityTypes.delete
-
aiplatform.
entityTypes. deleteFeatureValues -
aiplatform.
entityTypes. exportFeatureValues -
aiplatform.entityTypes.get
-
aiplatform.
entityTypes. getIamPolicy -
aiplatform.
entityTypes. importFeatureValues -
aiplatform.entityTypes.list
-
aiplatform.
entityTypes. readFeatureValues -
aiplatform.
entityTypes. setIamPolicy -
aiplatform.
entityTypes. streamingReadFeatureValues -
aiplatform.entityTypes.update
-
aiplatform.
entityTypes. writeFeatureValues
aiplatform.features.*
-
aiplatform.features.create
-
aiplatform.features.delete
-
aiplatform.features.get
-
aiplatform.features.list
-
aiplatform.features.update
aiplatform.featurestores.*
-
aiplatform.
featurestores. batchReadFeatureValues -
aiplatform.
featurestores. create -
aiplatform.
featurestores. delete -
aiplatform.
featurestores. exportFeatures -
aiplatform.featurestores.get
-
aiplatform.
featurestores. getIamPolicy -
aiplatform.
featurestores. importFeatures -
aiplatform.featurestores.list
-
aiplatform.
featurestores. readFeatures -
aiplatform.
featurestores. setIamPolicy -
aiplatform.
featurestores. update -
aiplatform.
featurestores. writeFeatures
aiplatform.operations.list
resourcemanager.projects.get
resourcemanager.projects.list
Vertex AI Migration Service User
( roles/
)
Grants access to use migration service in Vertex AI
aiplatform.
-
aiplatform.
migratableResources. migrate -
aiplatform.
migratableResources. search
Vertex AI Model Monitoring Service Agent
( roles/
)
Gives Vertex AI Model Monitoring the permissions it needs to function.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
bigquery.datasets.create
bigquery.datasets.get
bigquery.jobs.create
bigquery.jobs.get
bigquery.tables.create
bigquery.tables.export
bigquery.tables.get
bigquery.tables.getData
bigquery.tables.update
bigquery.tables.updateData
monitoring.
serviceusage.services.use
storage.buckets.create
storage.buckets.delete
storage.buckets.get
storage.buckets.list
storage.buckets.update
storage.objects.create
storage.objects.delete
storage.objects.get
storage.objects.list
storage.objects.update
Notebook Executor User Beta
( roles/
)
Grants users full access to schedules and notebook execution jobs.
aiplatform.
-
aiplatform.
notebookExecutionJobs. create -
aiplatform.
notebookExecutionJobs. delete -
aiplatform.
notebookExecutionJobs. get -
aiplatform.
notebookExecutionJobs. list
aiplatform.operations.list
aiplatform.pipelineJobs.create
aiplatform.schedules.*
-
aiplatform.schedules.create
-
aiplatform.schedules.delete
-
aiplatform.schedules.get
-
aiplatform.schedules.list
-
aiplatform.schedules.update
Notebook Runtime Admin
( roles/
)
Grants full access to all runtime templates and runtimes in Notebook Service.
aiplatform.
-
aiplatform.
notebookRuntimeTemplates. apply -
aiplatform.
notebookRuntimeTemplates. create -
aiplatform.
notebookRuntimeTemplates. delete -
aiplatform.
notebookRuntimeTemplates. get -
aiplatform.
notebookRuntimeTemplates. getIamPolicy -
aiplatform.
notebookRuntimeTemplates. list -
aiplatform.
notebookRuntimeTemplates. setIamPolicy -
aiplatform.
notebookRuntimeTemplates. update
aiplatform.notebookRuntimes.*
-
aiplatform.
notebookRuntimes. assign -
aiplatform.
notebookRuntimes. delete -
aiplatform.
notebookRuntimes. get -
aiplatform.
notebookRuntimes. list -
aiplatform.
notebookRuntimes. start -
aiplatform.
notebookRuntimes. update -
aiplatform.
notebookRuntimes. upgrade
aiplatform.operations.list
compute.reservations.get
compute.reservations.list
Notebook Runtime User
( roles/
)
Grants users permissions to create runtime resources using a runtime template and manage the runtime resources they created.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.operations.list
Vertex AI Notebook Service Agent
( roles/
)
Vertex AI Service Agent used to run Notebook managed resources in user project with restricted permissions.
logging.logEntries.create
logging.logEntries.route
monitoring.
monitoring.
monitoring.
monitoring.
-
monitoring.
monitoredResourceDescriptors. get -
monitoring.
monitoredResourceDescriptors. list
monitoring.timeSeries.create
Vertex AI Online Prediction Service Agent
( roles/
)
Gives Vertex AI Online Prediction the permissions it needs to function.
gkehub.features.get
gkehub.features.getIamPolicy
gkehub.features.list
gkehub.fleet.get
gkehub.gateway.delete
gkehub.
gkehub.gateway.get
gkehub.gateway.patch
gkehub.gateway.post
gkehub.gateway.put
gkehub.locations.*
-
gkehub.locations.get
-
gkehub.locations.list
gkehub.memberships.get
gkehub.
gkehub.memberships.list
serviceusage.services.get
Vertex AI Platform Provisioned Throughput Admin Beta
( roles/
)
Grants access to use all resources related to Vertex AI Provisioned Throughput
aiplatform.
-
aiplatform.
provisionedThroughputRevisions. get -
aiplatform.
provisionedThroughputRevisions. list
aiplatform.
-
aiplatform.
provisionedThroughputs. cancel -
aiplatform.
provisionedThroughputs. create -
aiplatform.
provisionedThroughputs. get -
aiplatform.
provisionedThroughputs. list -
aiplatform.
provisionedThroughputs. update
Vertex AI RAG Data Service Agent
( roles/
)
Vertex AI Service Agent used by Vertex RAG to access user imported data, Vertex AI, Document AI processors in the project
aiplatform.endpoints.get
aiplatform.endpoints.predict
aiplatform.featureViews.get
aiplatform.featureViews.list
aiplatform.featureViews.sync
aiplatform.featureViews.update
aiplatform.indexEndpoints.*
-
aiplatform.
indexEndpoints. create -
aiplatform.
indexEndpoints. delete -
aiplatform.
indexEndpoints. deploy -
aiplatform.indexEndpoints.get
-
aiplatform.indexEndpoints.list
-
aiplatform.
indexEndpoints. queryVectors -
aiplatform.
indexEndpoints. undeploy -
aiplatform.
indexEndpoints. update
aiplatform.indexes.*
-
aiplatform.indexes.create
-
aiplatform.indexes.delete
-
aiplatform.indexes.get
-
aiplatform.indexes.list
-
aiplatform.indexes.update
aiplatform.models.get
bigquery.datasets.create
bigquery.datasets.get
bigquery.jobs.create
bigquery.jobs.get
bigquery.readsessions.create
bigquery.readsessions.getData
bigquery.tables.create
bigquery.tables.createSnapshot
bigquery.tables.deleteSnapshot
bigquery.tables.export
bigquery.tables.get
bigquery.tables.getData
bigquery.
bigquery.tables.update
bigquery.tables.updateData
documentai.
documentai.processors.get
documentai.
logging.logEntries.create
logging.logEntries.route
storage.buckets.get
storage.buckets.list
storage.objects.get
storage.objects.list
Vertex AI Rapid Eval Service Agent
( roles/
)
Vertex AI Service Agent used by GenAI Rapid Evaluation Service to access publisher model endpoints in the user project
aiplatform.endpoints.predict
Vertex AI Reasoning Engine Service Agent
( roles/
)
Gives Vertex AI Reasoning Engine the proper permissions to function.
aiplatform.endpoints.create
aiplatform.endpoints.delete
aiplatform.endpoints.deploy
aiplatform.endpoints.explain
aiplatform.endpoints.get
aiplatform.endpoints.list
aiplatform.endpoints.predict
aiplatform.endpoints.undeploy
aiplatform.endpoints.update
aiplatform.memories.*
-
aiplatform.memories.create
-
aiplatform.memories.delete
-
aiplatform.memories.generate
-
aiplatform.memories.get
-
aiplatform.memories.list
-
aiplatform.memories.retrieve
-
aiplatform.memories.update
aiplatform.sessionEvents.*
-
aiplatform.
sessionEvents. append -
aiplatform.sessionEvents.list
aiplatform.sessions.create
aiplatform.sessions.delete
aiplatform.sessions.get
aiplatform.sessions.list
aiplatform.sessions.update
cloudtrace.traces.patch
logging.logEntries.create
logging.logEntries.route
monitoring.
monitoring.
monitoring.
monitoring.
-
monitoring.
monitoredResourceDescriptors. get -
monitoring.
monitoredResourceDescriptors. list
monitoring.timeSeries.create
serviceusage.services.use
storage.buckets.get
storage.buckets.list
storage.objects.get
storage.objects.list
Vertex AI Service Agent
( roles/
)
Gives Vertex AI the permissions it needs to function.
aiplatform.agentExamples.*
-
aiplatform.
agentExamples. create -
aiplatform.
agentExamples. delete -
aiplatform.agentExamples.get
-
aiplatform.agentExamples.list
-
aiplatform.
agentExamples. update
aiplatform.agents.*
-
aiplatform.agents.create
-
aiplatform.agents.delete
-
aiplatform.agents.get
-
aiplatform.agents.list
-
aiplatform.agents.update
aiplatform.annotationSpecs.*
-
aiplatform.
annotationSpecs. create -
aiplatform.
annotationSpecs. delete -
aiplatform.annotationSpecs.get
-
aiplatform.
annotationSpecs. list -
aiplatform.
annotationSpecs. update
aiplatform.annotations.*
-
aiplatform.annotations.create
-
aiplatform.annotations.delete
-
aiplatform.annotations.get
-
aiplatform.annotations.list
-
aiplatform.annotations.update
aiplatform.apps.*
-
aiplatform.apps.create
-
aiplatform.apps.delete
-
aiplatform.apps.get
-
aiplatform.apps.list
-
aiplatform.apps.update
aiplatform.artifacts.*
-
aiplatform.artifacts.create
-
aiplatform.artifacts.delete
-
aiplatform.artifacts.get
-
aiplatform.artifacts.list
-
aiplatform.artifacts.update
aiplatform.
-
aiplatform.
batchPredictionJobs. cancel -
aiplatform.
batchPredictionJobs. create -
aiplatform.
batchPredictionJobs. delete -
aiplatform.
batchPredictionJobs. get -
aiplatform.
batchPredictionJobs. list
aiplatform.cacheConfigs.get
aiplatform.cachedContents.*
-
aiplatform.
cachedContents. create -
aiplatform.
cachedContents. delete -
aiplatform.cachedContents.get
-
aiplatform.cachedContents.list
-
aiplatform.
cachedContents. update
aiplatform.consents.get
aiplatform.contexts.*
-
aiplatform.
contexts. addContextArtifactsAndExecutions -
aiplatform.
contexts. addContextChildren -
aiplatform.contexts.create
-
aiplatform.contexts.delete
-
aiplatform.contexts.get
-
aiplatform.contexts.list
-
aiplatform.
contexts. queryContextLineageSubgraph -
aiplatform.contexts.update
aiplatform.customJobs.*
-
aiplatform.customJobs.cancel
-
aiplatform.customJobs.create
-
aiplatform.customJobs.delete
-
aiplatform.customJobs.get
-
aiplatform.customJobs.list
aiplatform.dataItems.*
-
aiplatform.dataItems.create
-
aiplatform.dataItems.delete
-
aiplatform.dataItems.get
-
aiplatform.dataItems.list
-
aiplatform.dataItems.update
aiplatform.dataLabelingJobs.*
-
aiplatform.
dataLabelingJobs. cancel -
aiplatform.
dataLabelingJobs. create -
aiplatform.
dataLabelingJobs. delete -
aiplatform.
dataLabelingJobs. get -
aiplatform.
dataLabelingJobs. list
aiplatform.datasetVersions.*
-
aiplatform.
datasetVersions. create -
aiplatform.
datasetVersions. delete -
aiplatform.datasetVersions.get
-
aiplatform.
datasetVersions. list -
aiplatform.
datasetVersions. restore
aiplatform.datasets.*
-
aiplatform.datasets.create
-
aiplatform.datasets.delete
-
aiplatform.datasets.export
-
aiplatform.datasets.get
-
aiplatform.datasets.import
-
aiplatform.datasets.list
-
aiplatform.datasets.update
aiplatform.
-
aiplatform.
deploymentResourcePools. create -
aiplatform.
deploymentResourcePools. delete -
aiplatform.
deploymentResourcePools. get -
aiplatform.
deploymentResourcePools. list -
aiplatform.
deploymentResourcePools. queryDeployedModels -
aiplatform.
deploymentResourcePools. update
aiplatform.
-
aiplatform.
edgeDeploymentJobs. create -
aiplatform.
edgeDeploymentJobs. delete -
aiplatform.
edgeDeploymentJobs. get -
aiplatform.
edgeDeploymentJobs. list
aiplatform.
aiplatform.edgeDevices.*
-
aiplatform.edgeDevices.create
-
aiplatform.edgeDevices.delete
-
aiplatform.edgeDevices.get
-
aiplatform.edgeDevices.list
-
aiplatform.edgeDevices.update
aiplatform.endpoints.create
aiplatform.endpoints.delete
aiplatform.endpoints.deploy
aiplatform.endpoints.explain
aiplatform.endpoints.get
aiplatform.endpoints.list
aiplatform.endpoints.predict
aiplatform.endpoints.undeploy
aiplatform.endpoints.update
aiplatform.entityTypes.create
aiplatform.entityTypes.delete
aiplatform.
aiplatform.
aiplatform.entityTypes.get
aiplatform.
aiplatform.entityTypes.list
aiplatform.
aiplatform.
aiplatform.entityTypes.update
aiplatform.
aiplatform.exampleStores.*
-
aiplatform.
exampleStores. create -
aiplatform.
exampleStores. delete -
aiplatform.exampleStores.get
-
aiplatform.exampleStores.list
-
aiplatform.
exampleStores. readExample -
aiplatform.
exampleStores. update -
aiplatform.
exampleStores. writeExample
aiplatform.executions.*
-
aiplatform.
executions. addExecutionEvents -
aiplatform.executions.create
-
aiplatform.executions.delete
-
aiplatform.executions.get
-
aiplatform.executions.list
-
aiplatform.
executions. queryExecutionInputsAndOutputs -
aiplatform.executions.update
aiplatform.extensions.*
-
aiplatform.extensions.delete
-
aiplatform.extensions.execute
-
aiplatform.extensions.get
-
aiplatform.extensions.import
-
aiplatform.extensions.list
-
aiplatform.extensions.update
aiplatform.
aiplatform.
aiplatform.featureGroups.get
aiplatform.featureGroups.list
aiplatform.
aiplatform.
-
aiplatform.
featureMonitorJobs. create -
aiplatform.
featureMonitorJobs. get -
aiplatform.
featureMonitorJobs. list
aiplatform.featureMonitors.*
-
aiplatform.
featureMonitors. create -
aiplatform.
featureMonitors. delete -
aiplatform.featureMonitors.get
-
aiplatform.
featureMonitors. list -
aiplatform.
featureMonitors. update
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.featureViewSyncs.*
-
aiplatform.
featureViewSyncs. get -
aiplatform.
featureViewSyncs. list
aiplatform.featureViews.create
aiplatform.featureViews.delete
aiplatform.
aiplatform.
aiplatform.featureViews.get
aiplatform.featureViews.list
aiplatform.
aiplatform.featureViews.sync
aiplatform.featureViews.update
aiplatform.features.*
-
aiplatform.features.create
-
aiplatform.features.delete
-
aiplatform.features.get
-
aiplatform.features.list
-
aiplatform.features.update
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.featurestores.get
aiplatform.
aiplatform.featurestores.list
aiplatform.
aiplatform.
aiplatform.
aiplatform.humanInTheLoops.*
-
aiplatform.
humanInTheLoops. cancel -
aiplatform.
humanInTheLoops. create -
aiplatform.
humanInTheLoops. delete -
aiplatform.humanInTheLoops.get
-
aiplatform.
humanInTheLoops. list -
aiplatform.
humanInTheLoops. queryAnnotationStats -
aiplatform.
humanInTheLoops. send -
aiplatform.
humanInTheLoops. update
aiplatform.
-
aiplatform.
hyperparameterTuningJobs. cancel -
aiplatform.
hyperparameterTuningJobs. create -
aiplatform.
hyperparameterTuningJobs. delete -
aiplatform.
hyperparameterTuningJobs. get -
aiplatform.
hyperparameterTuningJobs. list
aiplatform.indexEndpoints.*
-
aiplatform.
indexEndpoints. create -
aiplatform.
indexEndpoints. delete -
aiplatform.
indexEndpoints. deploy -
aiplatform.indexEndpoints.get
-
aiplatform.indexEndpoints.list
-
aiplatform.
indexEndpoints. queryVectors -
aiplatform.
indexEndpoints. undeploy -
aiplatform.
indexEndpoints. update
aiplatform.indexes.*
-
aiplatform.indexes.create
-
aiplatform.indexes.delete
-
aiplatform.indexes.get
-
aiplatform.indexes.list
-
aiplatform.indexes.update
aiplatform.locations.*
-
aiplatform.
locations. evaluateInstances -
aiplatform.locations.get
-
aiplatform.locations.list
aiplatform.memories.*
-
aiplatform.memories.create
-
aiplatform.memories.delete
-
aiplatform.memories.generate
-
aiplatform.memories.get
-
aiplatform.memories.list
-
aiplatform.memories.retrieve
-
aiplatform.memories.update
aiplatform.metadataSchemas.*
-
aiplatform.
metadataSchemas. create -
aiplatform.
metadataSchemas. delete -
aiplatform.metadataSchemas.get
-
aiplatform.
metadataSchemas. list
aiplatform.metadataStores.*
-
aiplatform.
metadataStores. create -
aiplatform.
metadataStores. delete -
aiplatform.metadataStores.get
-
aiplatform.metadataStores.list
aiplatform.
-
aiplatform.
modelDeploymentMonitoringJobs. create -
aiplatform.
modelDeploymentMonitoringJobs. delete -
aiplatform.
modelDeploymentMonitoringJobs. get -
aiplatform.
modelDeploymentMonitoringJobs. list -
aiplatform.
modelDeploymentMonitoringJobs. pause -
aiplatform.
modelDeploymentMonitoringJobs. resume -
aiplatform.
modelDeploymentMonitoringJobs. searchStatsAnomalies -
aiplatform.
modelDeploymentMonitoringJobs. update
aiplatform.
-
aiplatform.
modelEvaluationSlices. get -
aiplatform.
modelEvaluationSlices. import -
aiplatform.
modelEvaluationSlices. list
aiplatform.modelEvaluations.*
-
aiplatform.
modelEvaluations. exportEvaluatedDataItems -
aiplatform.
modelEvaluations. get -
aiplatform.
modelEvaluations. import -
aiplatform.
modelEvaluations. list
aiplatform.
-
aiplatform.
modelMonitoringJobs. create -
aiplatform.
modelMonitoringJobs. delete -
aiplatform.
modelMonitoringJobs. get -
aiplatform.
modelMonitoringJobs. list
aiplatform.modelMonitors.*
-
aiplatform.
modelMonitors. create -
aiplatform.
modelMonitors. delete -
aiplatform.modelMonitors.get
-
aiplatform.modelMonitors.list
-
aiplatform.
modelMonitors. searchModelMonitoringAlerts -
aiplatform.
modelMonitors. searchModelMonitoringStats -
aiplatform.
modelMonitors. update
aiplatform.models.*
-
aiplatform.models.delete
-
aiplatform.models.export
-
aiplatform.models.get
-
aiplatform.models.list
-
aiplatform.models.update
-
aiplatform.models.upload
aiplatform.nasJobs.*
-
aiplatform.nasJobs.cancel
-
aiplatform.nasJobs.create
-
aiplatform.nasJobs.delete
-
aiplatform.nasJobs.get
-
aiplatform.nasJobs.list
aiplatform.nasTrialDetails.*
-
aiplatform.nasTrialDetails.get
-
aiplatform.
nasTrialDetails. list
aiplatform.
-
aiplatform.
notebookExecutionJobs. create -
aiplatform.
notebookExecutionJobs. delete -
aiplatform.
notebookExecutionJobs. get -
aiplatform.
notebookExecutionJobs. list
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.notebookRuntimes.*
-
aiplatform.
notebookRuntimes. assign -
aiplatform.
notebookRuntimes. delete -
aiplatform.
notebookRuntimes. get -
aiplatform.
notebookRuntimes. list -
aiplatform.
notebookRuntimes. start -
aiplatform.
notebookRuntimes. update -
aiplatform.
notebookRuntimes. upgrade
aiplatform.operations.list
aiplatform.
aiplatform.
aiplatform.pipelineJobs.*
-
aiplatform.pipelineJobs.cancel
-
aiplatform.pipelineJobs.create
-
aiplatform.pipelineJobs.delete
-
aiplatform.pipelineJobs.get
-
aiplatform.pipelineJobs.list
aiplatform.
-
aiplatform.
provisionedThroughputRevisions. get -
aiplatform.
provisionedThroughputRevisions. list
aiplatform.
aiplatform.
aiplatform.ragCorpora.*
-
aiplatform.ragCorpora.create
-
aiplatform.ragCorpora.delete
-
aiplatform.ragCorpora.get
-
aiplatform.ragCorpora.list
-
aiplatform.ragCorpora.query
-
aiplatform.ragCorpora.update
aiplatform.
aiplatform.ragFiles.*
-
aiplatform.ragFiles.delete
-
aiplatform.ragFiles.get
-
aiplatform.ragFiles.import
-
aiplatform.ragFiles.list
-
aiplatform.ragFiles.upload
aiplatform.reasoningEngines.*
-
aiplatform.
reasoningEngines. create -
aiplatform.
reasoningEngines. delete -
aiplatform.
reasoningEngines. get -
aiplatform.
reasoningEngines. list -
aiplatform.
reasoningEngines. query -
aiplatform.
reasoningEngines. update
aiplatform.schedules.*
-
aiplatform.schedules.create
-
aiplatform.schedules.delete
-
aiplatform.schedules.get
-
aiplatform.schedules.list
-
aiplatform.schedules.update
aiplatform.sessionEvents.*
-
aiplatform.
sessionEvents. append -
aiplatform.sessionEvents.list
aiplatform.sessions.*
-
aiplatform.sessions.create
-
aiplatform.sessions.delete
-
aiplatform.sessions.get
-
aiplatform.sessions.list
-
aiplatform.sessions.run
-
aiplatform.sessions.update
aiplatform.specialistPools.*
-
aiplatform.
specialistPools. create -
aiplatform.
specialistPools. delete -
aiplatform.specialistPools.get
-
aiplatform.
specialistPools. list -
aiplatform.
specialistPools. update
aiplatform.studies.*
-
aiplatform.studies.create
-
aiplatform.studies.delete
-
aiplatform.studies.get
-
aiplatform.studies.list
-
aiplatform.studies.update
aiplatform.
-
aiplatform.
tensorboardExperiments. create -
aiplatform.
tensorboardExperiments. delete -
aiplatform.
tensorboardExperiments. get -
aiplatform.
tensorboardExperiments. list -
aiplatform.
tensorboardExperiments. update -
aiplatform.
tensorboardExperiments. write
aiplatform.tensorboardRuns.*
-
aiplatform.
tensorboardRuns. batchCreate -
aiplatform.
tensorboardRuns. create -
aiplatform.
tensorboardRuns. delete -
aiplatform.tensorboardRuns.get
-
aiplatform.
tensorboardRuns. list -
aiplatform.
tensorboardRuns. update -
aiplatform.
tensorboardRuns. write
aiplatform.
-
aiplatform.
tensorboardTimeSeries. batchCreate -
aiplatform.
tensorboardTimeSeries. batchRead -
aiplatform.
tensorboardTimeSeries. create -
aiplatform.
tensorboardTimeSeries. delete -
aiplatform.
tensorboardTimeSeries. get -
aiplatform.
tensorboardTimeSeries. list -
aiplatform.
tensorboardTimeSeries. read -
aiplatform.
tensorboardTimeSeries. update
aiplatform.tensorboards.create
aiplatform.tensorboards.delete
aiplatform.tensorboards.get
aiplatform.tensorboards.list
aiplatform.tensorboards.update
aiplatform.trainingPipelines.*
-
aiplatform.
trainingPipelines. cancel -
aiplatform.
trainingPipelines. create -
aiplatform.
trainingPipelines. delete -
aiplatform.
trainingPipelines. get -
aiplatform.
trainingPipelines. list
aiplatform.trials.*
-
aiplatform.trials.create
-
aiplatform.trials.delete
-
aiplatform.trials.get
-
aiplatform.trials.list
-
aiplatform.trials.update
aiplatform.tuningJobs.*
-
aiplatform.tuningJobs.cancel
-
aiplatform.tuningJobs.create
-
aiplatform.tuningJobs.delete
-
aiplatform.tuningJobs.get
-
aiplatform.tuningJobs.list
-
aiplatform.
tuningJobs. vertexTune
artifactregistry.
artifactregistry.
artifactregistry.
artifactregistry.
artifactregistry.
artifactregistry.tags.get
artifactregistry.versions.get
automl.datasets.export
automl.datasets.get
automl.datasets.list
automl.modelEvaluations.list
automl.models.get
automl.models.list
automl.operations.get
automl.tableSpecs.get
bigquery.datasets.create
bigquery.datasets.get
bigquery.jobs.create
bigquery.jobs.get
bigquery.models.create
bigquery.models.export
bigquery.models.getData
bigquery.objectRefs.read
bigquery.readsessions.create
bigquery.readsessions.getData
bigquery.tables.create
bigquery.tables.export
bigquery.tables.get
bigquery.tables.getData
bigquery.tables.update
bigquery.tables.updateData
bigtable.tables.get
bigtable.tables.list
bigtable.tables.readRows
compute.addresses.get
compute.addresses.list
compute.addresses.use
compute.addresses.useInternal
compute.disks.create
compute.disks.createSnapshot
compute.disks.createTagBinding
compute.disks.delete
compute.disks.get
compute.disks.setLabels
compute.disks.use
compute.disks.useReadOnly
compute.globalOperations.get
compute.instances.attachDisk
compute.instances.create
compute.
compute.instances.delete
compute.instances.detachDisk
compute.instances.get
compute.
compute.instances.list
compute.instances.setLabels
compute.instances.setMetadata
compute.
compute.instances.setTags
compute.instances.start
compute.instances.stop
compute.instances.useReadOnly
compute.machineTypes.get
compute.networks.get
compute.networks.use
compute.networks.useExternalIp
compute.snapshots.create
compute.snapshots.delete
compute.snapshots.useReadOnly
compute.subnetworks.get
compute.subnetworks.list
compute.subnetworks.use
compute.
compute.zoneOperations.get
dataflow.jobs.*
-
dataflow.jobs.cancel
-
dataflow.jobs.create
-
dataflow.jobs.get
-
dataflow.jobs.list
-
dataflow.jobs.snapshot
-
dataflow.jobs.updateContents
dataflow.messages.list
dataflow.metrics.get
dataflow.snapshots.*
-
dataflow.snapshots.delete
-
dataflow.snapshots.get
-
dataflow.snapshots.list
datalabeling.
datalabeling.datasets.export
datalabeling.datasets.get
datalabeling.datasets.list
datalabeling.operations.get
hypercomputecluster.clusters.*
-
hypercomputecluster.
clusters. create -
hypercomputecluster.
clusters. delete -
hypercomputecluster.
clusters. get -
hypercomputecluster.
clusters. list -
hypercomputecluster.
clusters. update
hypercomputecluster.
-
hypercomputecluster.
locations. get -
hypercomputecluster.
locations. list
hypercomputecluster.
-
hypercomputecluster.
operations. cancel -
hypercomputecluster.
operations. delete -
hypercomputecluster.
operations. get -
hypercomputecluster.
operations. list
iam.serviceAccounts.actAs
iam.
iam.
logging.logEntries.create
logging.logEntries.route
ml.models.list
ml.operations.get
ml.versions.get
ml.versions.list
monitoring.
monitoring.
monitoring.
monitoring.
-
monitoring.
monitoredResourceDescriptors. get -
monitoring.
monitoredResourceDescriptors. list
monitoring.
monitoring.timeSeries.create
notebooks.instances.create
notebooks.instances.delete
notebooks.instances.get
resourcemanager.projects.get
resourcemanager.projects.list
run.executions.delete
run.executions.get
run.jobs.create
run.jobs.delete
run.jobs.get
run.jobs.run
run.jobs.update
run.operations.delete
run.operations.get
run.routes.invoke
run.services.create
run.services.delete
run.services.get
serviceusage.services.list
serviceusage.services.use
storage.buckets.create
storage.buckets.delete
storage.buckets.get
storage.buckets.list
storage.objects.create
storage.objects.delete
storage.objects.get
storage.objects.list
storage.objects.update
Vertex AI Telemetry Service Agent
( roles/
)
Allows Vertex AI Telemetry Service Agent to access telemetry data.
logging.logEntries.create
logging.logEntries.list
logging.logEntries.route
monitoring.
monitoring.
monitoring.
monitoring.
-
monitoring.
monitoredResourceDescriptors. get -
monitoring.
monitoredResourceDescriptors. list
monitoring.timeSeries.*
-
monitoring.timeSeries.create
-
monitoring.timeSeries.list
servicemanagement.
Vertex AI Tensorboard Web App User Beta
( roles/
)
Grants access to the Vertex AI TensorBoard web app.
aiplatform.
Vertex AI Tuning Service Agent
( roles/
)
Vertex AI Service Agent used for tuning in user project.
aiplatform.artifacts.*
-
aiplatform.artifacts.create
-
aiplatform.artifacts.delete
-
aiplatform.artifacts.get
-
aiplatform.artifacts.list
-
aiplatform.artifacts.update
aiplatform.
aiplatform.
aiplatform.
aiplatform.contexts.*
-
aiplatform.
contexts. addContextArtifactsAndExecutions -
aiplatform.
contexts. addContextChildren -
aiplatform.contexts.create
-
aiplatform.contexts.delete
-
aiplatform.contexts.get
-
aiplatform.contexts.list
-
aiplatform.
contexts. queryContextLineageSubgraph -
aiplatform.contexts.update
aiplatform.endpoints.create
aiplatform.endpoints.deploy
aiplatform.endpoints.get
aiplatform.
aiplatform.locations.get
aiplatform.metadataSchemas.*
-
aiplatform.
metadataSchemas. create -
aiplatform.
metadataSchemas. delete -
aiplatform.metadataSchemas.get
-
aiplatform.
metadataSchemas. list
aiplatform.metadataStores.*
-
aiplatform.
metadataStores. create -
aiplatform.
metadataStores. delete -
aiplatform.metadataStores.get
-
aiplatform.metadataStores.list
aiplatform.models.get
aiplatform.models.update
aiplatform.models.upload
aiplatform.operations.list
aiplatform.pipelineJobs.get
aiplatform.pipelineJobs.list
aiplatform.
-
aiplatform.
tensorboardExperiments. create -
aiplatform.
tensorboardExperiments. delete -
aiplatform.
tensorboardExperiments. get -
aiplatform.
tensorboardExperiments. list -
aiplatform.
tensorboardExperiments. update -
aiplatform.
tensorboardExperiments. write
aiplatform.tensorboardRuns.*
-
aiplatform.
tensorboardRuns. batchCreate -
aiplatform.
tensorboardRuns. create -
aiplatform.
tensorboardRuns. delete -
aiplatform.tensorboardRuns.get
-
aiplatform.
tensorboardRuns. list -
aiplatform.
tensorboardRuns. update -
aiplatform.
tensorboardRuns. write
aiplatform.
-
aiplatform.
tensorboardTimeSeries. batchCreate -
aiplatform.
tensorboardTimeSeries. batchRead -
aiplatform.
tensorboardTimeSeries. create -
aiplatform.
tensorboardTimeSeries. delete -
aiplatform.
tensorboardTimeSeries. get -
aiplatform.
tensorboardTimeSeries. list -
aiplatform.
tensorboardTimeSeries. read -
aiplatform.
tensorboardTimeSeries. update
aiplatform.tensorboards.create
aiplatform.tensorboards.delete
aiplatform.tensorboards.get
aiplatform.tensorboards.list
aiplatform.tensorboards.update
aiplatform.tuningJobs.*
-
aiplatform.tuningJobs.cancel
-
aiplatform.tuningJobs.create
-
aiplatform.tuningJobs.delete
-
aiplatform.tuningJobs.get
-
aiplatform.tuningJobs.list
-
aiplatform.
tuningJobs. vertexTune
bigquery.datasets.create
bigquery.datasets.get
bigquery.jobs.create
bigquery.jobs.get
bigquery.tables.create
bigquery.tables.delete
bigquery.tables.get
bigquery.tables.getData
bigquery.tables.list
bigquery.tables.update
bigquery.tables.updateData
resourcemanager.projects.get
serviceusage.services.use
storage.buckets.create
storage.buckets.get
storage.buckets.getIamPolicy
storage.buckets.list
storage.buckets.update
storage.objects.create
storage.objects.delete
storage.objects.get
storage.objects.getIamPolicy
storage.objects.list
storage.objects.update
Vertex AI User
( roles/
)
Grants access to use all resource in Vertex AI
aiplatform.agentExamples.*
-
aiplatform.
agentExamples. create -
aiplatform.
agentExamples. delete -
aiplatform.agentExamples.get
-
aiplatform.agentExamples.list
-
aiplatform.
agentExamples. update
aiplatform.agents.*
-
aiplatform.agents.create
-
aiplatform.agents.delete
-
aiplatform.agents.get
-
aiplatform.agents.list
-
aiplatform.agents.update
aiplatform.annotationSpecs.*
-
aiplatform.
annotationSpecs. create -
aiplatform.
annotationSpecs. delete -
aiplatform.annotationSpecs.get
-
aiplatform.
annotationSpecs. list -
aiplatform.
annotationSpecs. update
aiplatform.annotations.*
-
aiplatform.annotations.create
-
aiplatform.annotations.delete
-
aiplatform.annotations.get
-
aiplatform.annotations.list
-
aiplatform.annotations.update
aiplatform.apps.*
-
aiplatform.apps.create
-
aiplatform.apps.delete
-
aiplatform.apps.get
-
aiplatform.apps.list
-
aiplatform.apps.update
aiplatform.artifacts.*
-
aiplatform.artifacts.create
-
aiplatform.artifacts.delete
-
aiplatform.artifacts.get
-
aiplatform.artifacts.list
-
aiplatform.artifacts.update
aiplatform.
-
aiplatform.
batchPredictionJobs. cancel -
aiplatform.
batchPredictionJobs. create -
aiplatform.
batchPredictionJobs. delete -
aiplatform.
batchPredictionJobs. get -
aiplatform.
batchPredictionJobs. list
aiplatform.cacheConfigs.get
aiplatform.cachedContents.*
-
aiplatform.
cachedContents. create -
aiplatform.
cachedContents. delete -
aiplatform.cachedContents.get
-
aiplatform.cachedContents.list
-
aiplatform.
cachedContents. update
aiplatform.consents.get
aiplatform.contexts.*
-
aiplatform.
contexts. addContextArtifactsAndExecutions -
aiplatform.
contexts. addContextChildren -
aiplatform.contexts.create
-
aiplatform.contexts.delete
-
aiplatform.contexts.get
-
aiplatform.contexts.list
-
aiplatform.
contexts. queryContextLineageSubgraph -
aiplatform.contexts.update
aiplatform.customJobs.*
-
aiplatform.customJobs.cancel
-
aiplatform.customJobs.create
-
aiplatform.customJobs.delete
-
aiplatform.customJobs.get
-
aiplatform.customJobs.list
aiplatform.dataItems.*
-
aiplatform.dataItems.create
-
aiplatform.dataItems.delete
-
aiplatform.dataItems.get
-
aiplatform.dataItems.list
-
aiplatform.dataItems.update
aiplatform.dataLabelingJobs.*
-
aiplatform.
dataLabelingJobs. cancel -
aiplatform.
dataLabelingJobs. create -
aiplatform.
dataLabelingJobs. delete -
aiplatform.
dataLabelingJobs. get -
aiplatform.
dataLabelingJobs. list
aiplatform.datasetVersions.*
-
aiplatform.
datasetVersions. create -
aiplatform.
datasetVersions. delete -
aiplatform.datasetVersions.get
-
aiplatform.
datasetVersions. list -
aiplatform.
datasetVersions. restore
aiplatform.datasets.*
-
aiplatform.datasets.create
-
aiplatform.datasets.delete
-
aiplatform.datasets.export
-
aiplatform.datasets.get
-
aiplatform.datasets.import
-
aiplatform.datasets.list
-
aiplatform.datasets.update
aiplatform.
-
aiplatform.
deploymentResourcePools. create -
aiplatform.
deploymentResourcePools. delete -
aiplatform.
deploymentResourcePools. get -
aiplatform.
deploymentResourcePools. list -
aiplatform.
deploymentResourcePools. queryDeployedModels -
aiplatform.
deploymentResourcePools. update
aiplatform.
-
aiplatform.
edgeDeploymentJobs. create -
aiplatform.
edgeDeploymentJobs. delete -
aiplatform.
edgeDeploymentJobs. get -
aiplatform.
edgeDeploymentJobs. list
aiplatform.
aiplatform.edgeDevices.*
-
aiplatform.edgeDevices.create
-
aiplatform.edgeDevices.delete
-
aiplatform.edgeDevices.get
-
aiplatform.edgeDevices.list
-
aiplatform.edgeDevices.update
aiplatform.endpoints.create
aiplatform.endpoints.delete
aiplatform.endpoints.deploy
aiplatform.endpoints.explain
aiplatform.endpoints.get
aiplatform.endpoints.list
aiplatform.endpoints.predict
aiplatform.endpoints.undeploy
aiplatform.endpoints.update
aiplatform.entityTypes.create
aiplatform.entityTypes.delete
aiplatform.
aiplatform.
aiplatform.entityTypes.get
aiplatform.
aiplatform.entityTypes.list
aiplatform.
aiplatform.
aiplatform.entityTypes.update
aiplatform.
aiplatform.exampleStores.*
-
aiplatform.
exampleStores. create -
aiplatform.
exampleStores. delete -
aiplatform.exampleStores.get
-
aiplatform.exampleStores.list
-
aiplatform.
exampleStores. readExample -
aiplatform.
exampleStores. update -
aiplatform.
exampleStores. writeExample
aiplatform.executions.*
-
aiplatform.
executions. addExecutionEvents -
aiplatform.executions.create
-
aiplatform.executions.delete
-
aiplatform.executions.get
-
aiplatform.executions.list
-
aiplatform.
executions. queryExecutionInputsAndOutputs -
aiplatform.executions.update
aiplatform.extensions.*
-
aiplatform.extensions.delete
-
aiplatform.extensions.execute
-
aiplatform.extensions.get
-
aiplatform.extensions.import
-
aiplatform.extensions.list
-
aiplatform.extensions.update
aiplatform.
aiplatform.
aiplatform.featureGroups.get
aiplatform.featureGroups.list
aiplatform.
aiplatform.
-
aiplatform.
featureMonitorJobs. create -
aiplatform.
featureMonitorJobs. get -
aiplatform.
featureMonitorJobs. list
aiplatform.featureMonitors.*
-
aiplatform.
featureMonitors. create -
aiplatform.
featureMonitors. delete -
aiplatform.featureMonitors.get
-
aiplatform.
featureMonitors. list -
aiplatform.
featureMonitors. update
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.featureViewSyncs.*
-
aiplatform.
featureViewSyncs. get -
aiplatform.
featureViewSyncs. list
aiplatform.featureViews.create
aiplatform.featureViews.delete
aiplatform.
aiplatform.
aiplatform.featureViews.get
aiplatform.featureViews.list
aiplatform.
aiplatform.featureViews.sync
aiplatform.featureViews.update
aiplatform.features.*
-
aiplatform.features.create
-
aiplatform.features.delete
-
aiplatform.features.get
-
aiplatform.features.list
-
aiplatform.features.update
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.featurestores.get
aiplatform.
aiplatform.featurestores.list
aiplatform.
aiplatform.
aiplatform.
aiplatform.humanInTheLoops.*
-
aiplatform.
humanInTheLoops. cancel -
aiplatform.
humanInTheLoops. create -
aiplatform.
humanInTheLoops. delete -
aiplatform.humanInTheLoops.get
-
aiplatform.
humanInTheLoops. list -
aiplatform.
humanInTheLoops. queryAnnotationStats -
aiplatform.
humanInTheLoops. send -
aiplatform.
humanInTheLoops. update
aiplatform.
-
aiplatform.
hyperparameterTuningJobs. cancel -
aiplatform.
hyperparameterTuningJobs. create -
aiplatform.
hyperparameterTuningJobs. delete -
aiplatform.
hyperparameterTuningJobs. get -
aiplatform.
hyperparameterTuningJobs. list
aiplatform.indexEndpoints.*
-
aiplatform.
indexEndpoints. create -
aiplatform.
indexEndpoints. delete -
aiplatform.
indexEndpoints. deploy -
aiplatform.indexEndpoints.get
-
aiplatform.indexEndpoints.list
-
aiplatform.
indexEndpoints. queryVectors -
aiplatform.
indexEndpoints. undeploy -
aiplatform.
indexEndpoints. update
aiplatform.indexes.*
-
aiplatform.indexes.create
-
aiplatform.indexes.delete
-
aiplatform.indexes.get
-
aiplatform.indexes.list
-
aiplatform.indexes.update
aiplatform.locations.*
-
aiplatform.
locations. evaluateInstances -
aiplatform.locations.get
-
aiplatform.locations.list
aiplatform.memories.*
-
aiplatform.memories.create
-
aiplatform.memories.delete
-
aiplatform.memories.generate
-
aiplatform.memories.get
-
aiplatform.memories.list
-
aiplatform.memories.retrieve
-
aiplatform.memories.update
aiplatform.metadataSchemas.*
-
aiplatform.
metadataSchemas. create -
aiplatform.
metadataSchemas. delete -
aiplatform.metadataSchemas.get
-
aiplatform.
metadataSchemas. list
aiplatform.metadataStores.*
-
aiplatform.
metadataStores. create -
aiplatform.
metadataStores. delete -
aiplatform.metadataStores.get
-
aiplatform.metadataStores.list
aiplatform.
-
aiplatform.
modelDeploymentMonitoringJobs. create -
aiplatform.
modelDeploymentMonitoringJobs. delete -
aiplatform.
modelDeploymentMonitoringJobs. get -
aiplatform.
modelDeploymentMonitoringJobs. list -
aiplatform.
modelDeploymentMonitoringJobs. pause -
aiplatform.
modelDeploymentMonitoringJobs. resume -
aiplatform.
modelDeploymentMonitoringJobs. searchStatsAnomalies -
aiplatform.
modelDeploymentMonitoringJobs. update
aiplatform.
-
aiplatform.
modelEvaluationSlices. get -
aiplatform.
modelEvaluationSlices. import -
aiplatform.
modelEvaluationSlices. list
aiplatform.modelEvaluations.*
-
aiplatform.
modelEvaluations. exportEvaluatedDataItems -
aiplatform.
modelEvaluations. get -
aiplatform.
modelEvaluations. import -
aiplatform.
modelEvaluations. list
aiplatform.
-
aiplatform.
modelMonitoringJobs. create -
aiplatform.
modelMonitoringJobs. delete -
aiplatform.
modelMonitoringJobs. get -
aiplatform.
modelMonitoringJobs. list
aiplatform.modelMonitors.*
-
aiplatform.
modelMonitors. create -
aiplatform.
modelMonitors. delete -
aiplatform.modelMonitors.get
-
aiplatform.modelMonitors.list
-
aiplatform.
modelMonitors. searchModelMonitoringAlerts -
aiplatform.
modelMonitors. searchModelMonitoringStats -
aiplatform.
modelMonitors. update
aiplatform.models.*
-
aiplatform.models.delete
-
aiplatform.models.export
-
aiplatform.models.get
-
aiplatform.models.list
-
aiplatform.models.update
-
aiplatform.models.upload
aiplatform.nasJobs.*
-
aiplatform.nasJobs.cancel
-
aiplatform.nasJobs.create
-
aiplatform.nasJobs.delete
-
aiplatform.nasJobs.get
-
aiplatform.nasJobs.list
aiplatform.nasTrialDetails.*
-
aiplatform.nasTrialDetails.get
-
aiplatform.
nasTrialDetails. list
aiplatform.
-
aiplatform.
notebookExecutionJobs. create -
aiplatform.
notebookExecutionJobs. delete -
aiplatform.
notebookExecutionJobs. get -
aiplatform.
notebookExecutionJobs. list
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.notebookRuntimes.*
-
aiplatform.
notebookRuntimes. assign -
aiplatform.
notebookRuntimes. delete -
aiplatform.
notebookRuntimes. get -
aiplatform.
notebookRuntimes. list -
aiplatform.
notebookRuntimes. start -
aiplatform.
notebookRuntimes. update -
aiplatform.
notebookRuntimes. upgrade
aiplatform.operations.list
aiplatform.
aiplatform.
aiplatform.pipelineJobs.*
-
aiplatform.pipelineJobs.cancel
-
aiplatform.pipelineJobs.create
-
aiplatform.pipelineJobs.delete
-
aiplatform.pipelineJobs.get
-
aiplatform.pipelineJobs.list
aiplatform.
-
aiplatform.
provisionedThroughputRevisions. get -
aiplatform.
provisionedThroughputRevisions. list
aiplatform.
aiplatform.
aiplatform.ragCorpora.*
-
aiplatform.ragCorpora.create
-
aiplatform.ragCorpora.delete
-
aiplatform.ragCorpora.get
-
aiplatform.ragCorpora.list
-
aiplatform.ragCorpora.query
-
aiplatform.ragCorpora.update
aiplatform.
aiplatform.ragFiles.*
-
aiplatform.ragFiles.delete
-
aiplatform.ragFiles.get
-
aiplatform.ragFiles.import
-
aiplatform.ragFiles.list
-
aiplatform.ragFiles.upload
aiplatform.reasoningEngines.*
-
aiplatform.
reasoningEngines. create -
aiplatform.
reasoningEngines. delete -
aiplatform.
reasoningEngines. get -
aiplatform.
reasoningEngines. list -
aiplatform.
reasoningEngines. query -
aiplatform.
reasoningEngines. update
aiplatform.schedules.*
-
aiplatform.schedules.create
-
aiplatform.schedules.delete
-
aiplatform.schedules.get
-
aiplatform.schedules.list
-
aiplatform.schedules.update
aiplatform.sessionEvents.*
-
aiplatform.
sessionEvents. append -
aiplatform.sessionEvents.list
aiplatform.sessions.*
-
aiplatform.sessions.create
-
aiplatform.sessions.delete
-
aiplatform.sessions.get
-
aiplatform.sessions.list
-
aiplatform.sessions.run
-
aiplatform.sessions.update
aiplatform.specialistPools.*
-
aiplatform.
specialistPools. create -
aiplatform.
specialistPools. delete -
aiplatform.specialistPools.get
-
aiplatform.
specialistPools. list -
aiplatform.
specialistPools. update
aiplatform.studies.*
-
aiplatform.studies.create
-
aiplatform.studies.delete
-
aiplatform.studies.get
-
aiplatform.studies.list
-
aiplatform.studies.update
aiplatform.
-
aiplatform.
tensorboardExperiments. create -
aiplatform.
tensorboardExperiments. delete -
aiplatform.
tensorboardExperiments. get -
aiplatform.
tensorboardExperiments. list -
aiplatform.
tensorboardExperiments. update -
aiplatform.
tensorboardExperiments. write
aiplatform.tensorboardRuns.*
-
aiplatform.
tensorboardRuns. batchCreate -
aiplatform.
tensorboardRuns. create -
aiplatform.
tensorboardRuns. delete -
aiplatform.tensorboardRuns.get
-
aiplatform.
tensorboardRuns. list -
aiplatform.
tensorboardRuns. update -
aiplatform.
tensorboardRuns. write
aiplatform.
-
aiplatform.
tensorboardTimeSeries. batchCreate -
aiplatform.
tensorboardTimeSeries. batchRead -
aiplatform.
tensorboardTimeSeries. create -
aiplatform.
tensorboardTimeSeries. delete -
aiplatform.
tensorboardTimeSeries. get -
aiplatform.
tensorboardTimeSeries. list -
aiplatform.
tensorboardTimeSeries. read -
aiplatform.
tensorboardTimeSeries. update
aiplatform.tensorboards.create
aiplatform.tensorboards.delete
aiplatform.tensorboards.get
aiplatform.tensorboards.list
aiplatform.tensorboards.update
aiplatform.trainingPipelines.*
-
aiplatform.
trainingPipelines. cancel -
aiplatform.
trainingPipelines. create -
aiplatform.
trainingPipelines. delete -
aiplatform.
trainingPipelines. get -
aiplatform.
trainingPipelines. list
aiplatform.trials.*
-
aiplatform.trials.create
-
aiplatform.trials.delete
-
aiplatform.trials.get
-
aiplatform.trials.list
-
aiplatform.trials.update
aiplatform.tuningJobs.*
-
aiplatform.tuningJobs.cancel
-
aiplatform.tuningJobs.create
-
aiplatform.tuningJobs.delete
-
aiplatform.tuningJobs.get
-
aiplatform.tuningJobs.list
-
aiplatform.
tuningJobs. vertexTune
resourcemanager.projects.get
resourcemanager.projects.list
Vertex AI Viewer
( roles/
)
Grants access to view all resource in Vertex AI
aiplatform.agentExamples.get
aiplatform.agentExamples.list
aiplatform.agents.get
aiplatform.agents.list
aiplatform.annotationSpecs.get
aiplatform.
aiplatform.annotations.get
aiplatform.annotations.list
aiplatform.apps.get
aiplatform.apps.list
aiplatform.artifacts.get
aiplatform.artifacts.list
aiplatform.
aiplatform.
aiplatform.cacheConfigs.get
aiplatform.cachedContents.get
aiplatform.cachedContents.list
aiplatform.consents.get
aiplatform.contexts.get
aiplatform.contexts.list
aiplatform.
aiplatform.customJobs.get
aiplatform.customJobs.list
aiplatform.dataItems.get
aiplatform.dataItems.list
aiplatform.
aiplatform.
aiplatform.datasetVersions.get
aiplatform.
aiplatform.datasets.get
aiplatform.datasets.list
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.edgeDevices.get
aiplatform.edgeDevices.list
aiplatform.endpoints.get
aiplatform.endpoints.list
aiplatform.entityTypes.get
aiplatform.entityTypes.list
aiplatform.exampleStores.get
aiplatform.exampleStores.list
aiplatform.
aiplatform.executions.get
aiplatform.executions.list
aiplatform.
aiplatform.extensions.get
aiplatform.extensions.list
aiplatform.featureGroups.get
aiplatform.featureGroups.list
aiplatform.
aiplatform.
aiplatform.featureMonitors.get
aiplatform.
aiplatform.
aiplatform.
aiplatform.featureViewSyncs.*
-
aiplatform.
featureViewSyncs. get -
aiplatform.
featureViewSyncs. list
aiplatform.
aiplatform.featureViews.get
aiplatform.featureViews.list
aiplatform.
aiplatform.features.get
aiplatform.features.list
aiplatform.featurestores.get
aiplatform.featurestores.list
aiplatform.humanInTheLoops.get
aiplatform.
aiplatform.
aiplatform.
aiplatform.indexEndpoints.get
aiplatform.indexEndpoints.list
aiplatform.
aiplatform.indexes.get
aiplatform.indexes.list
aiplatform.locations.get
aiplatform.locations.list
aiplatform.memories.get
aiplatform.memories.list
aiplatform.metadataSchemas.get
aiplatform.
aiplatform.metadataStores.get
aiplatform.metadataStores.list
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.modelMonitors.get
aiplatform.modelMonitors.list
aiplatform.
aiplatform.
aiplatform.models.get
aiplatform.models.list
aiplatform.nasJobs.get
aiplatform.nasJobs.list
aiplatform.nasTrialDetails.*
-
aiplatform.nasTrialDetails.get
-
aiplatform.
nasTrialDetails. list
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.operations.list
aiplatform.
aiplatform.
aiplatform.pipelineJobs.get
aiplatform.pipelineJobs.list
aiplatform.
-
aiplatform.
provisionedThroughputRevisions. get -
aiplatform.
provisionedThroughputRevisions. list
aiplatform.
aiplatform.
aiplatform.ragCorpora.get
aiplatform.ragCorpora.list
aiplatform.ragCorpora.query
aiplatform.
aiplatform.ragFiles.get
aiplatform.ragFiles.list
aiplatform.
aiplatform.
aiplatform.
aiplatform.schedules.get
aiplatform.schedules.list
aiplatform.sessionEvents.list
aiplatform.sessions.get
aiplatform.sessions.list
aiplatform.specialistPools.get
aiplatform.
aiplatform.
aiplatform.studies.get
aiplatform.studies.list
aiplatform.
aiplatform.
aiplatform.tensorboardRuns.get
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.
aiplatform.tensorboards.get
aiplatform.tensorboards.list
aiplatform.
aiplatform.
aiplatform.trials.get
aiplatform.trials.list
aiplatform.tuningJobs.get
aiplatform.tuningJobs.list
resourcemanager.projects.get
resourcemanager.projects.list
Basic roles
The older Google Cloud basic roles are common to all Google Cloud services. These roles are Owner, Editor, and Viewer.
The basic roles provide permissions across Google Cloud, not just for Colab Enterprise. For this reason, you should use Colab Enterprise roles whenever possible.
Custom roles
If the predefined IAM roles for Colab Enterprise don't meet your needs, you can define custom roles. Custom roles enable you to choose a specific set of permissions, create your own role with those permissions, and grant the role to users in your organization. For more information, see Understanding IAM custom roles .
Service agents for Colab Enterprise
Colab Enterprise automatically creates and uses service agents to access resources on your behalf. When a service agent is created, the service agent is granted a predefined role for your project.
The following table lists Colab Enterprise service agents, their email addresses, and their respective roles:
Name | Used for | Email address | Role |
---|---|---|---|
Vertex AI Service Agent
|
Vertex AI capabilities | service- PROJECT_NUMBER
@gcp-sa-aiplatform.iam.gserviceaccount.com
|
roles/aiplatform.serviceAgent
|
Vertex AI Colab Service Agent
|
Gives Colab Enterprise the proper permissions to function | service- PROJECT_NUMBER
@gcp-sa-vertex-nb.iam.gserviceaccount.com
|
roles/aiplatform.colabServiceAgent
|
Vertex AI Notebook Service Agent
|
Run notebook-managed resources in the user project with restricted permissions | service- PROJECT_NUMBER
@gcp-sa-aiplatform-vm.iam.gserviceaccount.com
|
roles/aiplatform.notebookServiceAgent
|
If you remove the default roles of the Colab Enterprise service agents, Colab Enterprise can automatically reassign those roles to ensure uninterrupted service functionality. To turn off the Colab Enterprise service, you must turn off the relevant APIs instead of removing roles.
What's next
-
Learn how to create and manage custom IAM roles .
-
Learn more about Service agents