User-managed notebooks access control
Vertex AI Workbench user-managed notebooks is deprecated . On January 30, 2025, support for user-managed notebooks will end and the ability to create user-managed notebooks instances will be removed. Existing instances will continue to function but patches, updates, and upgrades won't be available. To continue using Vertex AI Workbench, we recommend that you migrate your user-managed notebooks instances to Vertex AI Workbench instances .
This page describes how to use Identity and Access Management (IAM) and an access mode to manage access to Vertex AI Workbench user-managed notebooks resources. To manage access to Vertex AI resources, see the Vertex AI page on access control .
Vertex AI Workbench uses IAM to manage access to user-managed notebooks instances and an access mode to manage access to each instance's JupyterLab interface.
Control access to an instance with IAM
You can manage access to a user-managed notebooks instance at the project level or per instance.
- To grant access to resources at the project level, assign one or more roles to a principal (user, group, or service account ).
- To grant access to a specific instance, set an IAM policy on that resource. The policy defines which roles are assigned to which principals. To learn more, see Manage access to a user-managed notebooks instance .
Access to an instance can include a broad range of abilities. For example, you might grant a principal the ability to start, stop, and upgrade an instance. However, even granting a principal full access to a user-managed notebooks instance doesn't grant the ability to use the instance's JupyterLab interface. See the following section.
Control access to an instance's JupyterLab interface with the access mode
You control access to a user-managed notebooks instance's JupyterLab interface through the instance's access mode. You set a JupyterLab access mode when you create a user-managed notebooks instance. The access mode can't be changed after the notebook is created.
The JupyterLab access mode determines who can use the instance's JupyterLab interface. The access mode also determines which credentials are used when your instance interacts with other Google Cloud services. To learn more, see Manage access to a user-managed notebooks instance's JupyterLab interface .
Types of IAM roles
There are different types of IAM roles that can be used in Vertex AI Workbench:
-
Predefined roles let you grant a set of related permissions to your Vertex AI Workbench resources at the project level.
-
Basic roles (Owner, Editor, and Viewer) provide access control to your Vertex AI Workbench resources at the project level, and are common to all Google Cloud services.
-
Custom roles enable you to choose a specific set of permissions, create your own role with those permissions, and grant the role to users in your organization.
To add, update, or remove these roles in your Vertex AI Workbench project, see the documentation on granting, changing, and revoking access .
Predefined user-managed notebooks IAM roles
Vertex AI Workbench resources are managed through the Notebooks API. Therefore, Notebooks roles define permissions and access to the use of Vertex AI Workbench.
Notebooks Admin
( roles/
)
Full access to Notebooks, all resources.
Lowest-level resources where you can grant this role:
- Instance
aiplatform.
-
aiplatform.
notebookExecutionJobs. create -
aiplatform.
notebookExecutionJobs. delete -
aiplatform.
notebookExecutionJobs. get -
aiplatform.
notebookExecutionJobs. list
aiplatform.operations.list
aiplatform.pipelineJobs.create
aiplatform.schedules.*
-
aiplatform.schedules.create
-
aiplatform.schedules.delete
-
aiplatform.schedules.get
-
aiplatform.schedules.list
-
aiplatform.schedules.update
compute.acceleratorTypes.*
-
compute.acceleratorTypes.get
-
compute.acceleratorTypes.list
compute.addresses.get
compute.addresses.list
compute.
compute.
compute.autoscalers.get
compute.autoscalers.list
compute.backendBuckets.get
compute.
compute.backendBuckets.list
compute.
compute.
compute.backendServices.get
compute.
compute.backendServices.list
compute.
compute.
compute.commitments.get
compute.commitments.list
compute.diskTypes.*
-
compute.diskTypes.get
-
compute.diskTypes.list
compute.disks.get
compute.disks.getIamPolicy
compute.disks.list
compute.
compute.disks.listTagBindings
compute.
compute.
compute.
compute.
compute.firewallPolicies.get
compute.
compute.firewallPolicies.list
compute.
compute.
compute.firewalls.get
compute.firewalls.list
compute.
compute.
compute.forwardingRules.get
compute.forwardingRules.list
compute.
compute.
compute.futureReservations.get
compute.
compute.
compute.globalAddresses.get
compute.globalAddresses.list
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.globalOperations.get
compute.
compute.globalOperations.list
compute.
compute.
compute.healthChecks.get
compute.healthChecks.list
compute.
compute.
compute.httpHealthChecks.get
compute.httpHealthChecks.list
compute.
compute.
compute.httpsHealthChecks.get
compute.httpsHealthChecks.list
compute.
compute.
compute.images.get
compute.images.getFromFamily
compute.images.getIamPolicy
compute.images.list
compute.
compute.images.listTagBindings
compute.
compute.
compute.
compute.
compute.instanceGroups.get
compute.instanceGroups.list
compute.
compute.
compute.instanceSettings.get
compute.instanceTemplates.get
compute.
compute.instanceTemplates.list
compute.instances.get
compute.
compute.
compute.instances.getIamPolicy
compute.
compute.
compute.
compute.
compute.instances.list
compute.
compute.
compute.
compute.instantSnapshots.get
compute.
compute.instantSnapshots.list
compute.
compute.
compute.
compute.
compute.
-
compute.
interconnectLocations. get -
compute.
interconnectLocations. list
compute.
-
compute.
interconnectRemoteLocations. get -
compute.
interconnectRemoteLocations. list
compute.interconnects.get
compute.interconnects.list
compute.
compute.
compute.licenseCodes.get
compute.
compute.licenseCodes.list
compute.licenses.get
compute.licenses.getIamPolicy
compute.licenses.list
compute.machineImages.get
compute.
compute.machineImages.list
compute.machineTypes.*
-
compute.machineTypes.get
-
compute.machineTypes.list
compute.multiMig.get
compute.multiMig.list
compute.networkAttachments.get
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.networkProfiles.*
-
compute.networkProfiles.get
-
compute.networkProfiles.list
compute.networks.get
compute.
compute.
compute.networks.list
compute.
compute.
compute.
compute.nodeGroups.get
compute.
compute.nodeGroups.list
compute.nodeTemplates.get
compute.
compute.nodeTemplates.list
compute.nodeTypes.*
-
compute.nodeTypes.get
-
compute.nodeTypes.list
compute.
compute.packetMirrorings.get
compute.packetMirrorings.list
compute.
compute.
compute.projects.get
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.regionHealthChecks.get
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.regionOperations.get
compute.
compute.regionOperations.list
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.regionSslPolicies.get
compute.regionSslPolicies.list
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.regionUrlMaps.get
compute.regionUrlMaps.list
compute.
compute.
compute.regionUrlMaps.validate
compute.regions.*
-
compute.regions.get
-
compute.regions.list
compute.reservations.get
compute.reservations.list
compute.resourcePolicies.get
compute.
compute.resourcePolicies.list
compute.routers.get
compute.routers.getRoutePolicy
compute.routers.list
compute.routers.listBgpRoutes
compute.
compute.
compute.
compute.routes.get
compute.routes.list
compute.
compute.routes.listTagBindings
compute.securityPolicies.get
compute.securityPolicies.list
compute.
compute.
compute.serviceAttachments.get
compute.
compute.
compute.
compute.
compute.snapshotSettings.get
compute.snapshots.get
compute.snapshots.getIamPolicy
compute.snapshots.list
compute.
compute.
compute.sslCertificates.get
compute.sslCertificates.list
compute.
compute.
compute.sslPolicies.get
compute.sslPolicies.list
compute.
compute.
compute.
compute.storagePools.get
compute.
compute.storagePools.list
compute.subnetworks.get
compute.
compute.subnetworks.list
compute.
compute.
compute.targetGrpcProxies.get
compute.targetGrpcProxies.list
compute.
compute.
compute.targetHttpProxies.get
compute.targetHttpProxies.list
compute.
compute.
compute.targetHttpsProxies.get
compute.
compute.
compute.
compute.targetInstances.get
compute.targetInstances.list
compute.
compute.
compute.targetPools.get
compute.targetPools.list
compute.
compute.
compute.targetSslProxies.get
compute.targetSslProxies.list
compute.
compute.
compute.targetTcpProxies.get
compute.targetTcpProxies.list
compute.
compute.
compute.targetVpnGateways.get
compute.targetVpnGateways.list
compute.
compute.
compute.urlMaps.get
compute.urlMaps.list
compute.
compute.
compute.urlMaps.validate
compute.vpnGateways.get
compute.vpnGateways.list
compute.
compute.
compute.vpnTunnels.get
compute.vpnTunnels.list
compute.
compute.
compute.zoneOperations.get
compute.
compute.zoneOperations.list
compute.zones.*
-
compute.zones.get
-
compute.zones.list
notebooks.*
-
notebooks.environments.create
-
notebooks.environments.delete
-
notebooks.environments.get
-
notebooks.
environments. getIamPolicy -
notebooks.environments.list
-
notebooks.
environments. setIamPolicy -
notebooks.executions.create
-
notebooks.executions.delete
-
notebooks.executions.get
-
notebooks.
executions. getIamPolicy -
notebooks.executions.list
-
notebooks.
executions. setIamPolicy -
notebooks.
instances. checkUpgradability -
notebooks.instances.create
-
notebooks.instances.delete
-
notebooks.instances.diagnose
-
notebooks.instances.get
-
notebooks.instances.getHealth
-
notebooks.
instances. getIamPolicy -
notebooks.instances.list
-
notebooks.instances.reset
-
notebooks.
instances. setAccelerator -
notebooks.
instances. setIamPolicy -
notebooks.instances.setLabels
-
notebooks.
instances. setMachineType -
notebooks.instances.start
-
notebooks.instances.stop
-
notebooks.instances.update
-
notebooks.
instances. updateConfig -
notebooks.
instances. updateShieldInstanceConfig -
notebooks.instances.upgrade
-
notebooks.instances.use
-
notebooks.locations.get
-
notebooks.locations.list
-
notebooks.operations.cancel
-
notebooks.operations.delete
-
notebooks.operations.get
-
notebooks.operations.list
-
notebooks.runtimes.create
-
notebooks.runtimes.delete
-
notebooks.runtimes.diagnose
-
notebooks.runtimes.get
-
notebooks.
runtimes. getIamPolicy -
notebooks.runtimes.list
-
notebooks.runtimes.reset
-
notebooks.
runtimes. setIamPolicy -
notebooks.runtimes.start
-
notebooks.runtimes.stop
-
notebooks.runtimes.switch
-
notebooks.runtimes.update
-
notebooks.runtimes.upgrade
-
notebooks.schedules.create
-
notebooks.schedules.delete
-
notebooks.schedules.get
-
notebooks.
schedules. getIamPolicy -
notebooks.schedules.list
-
notebooks.
schedules. setIamPolicy
resourcemanager.projects.get
resourcemanager.projects.list
serviceusage.quotas.get
serviceusage.services.get
serviceusage.services.list
Notebooks Legacy Admin
( roles/
)
Full access to Notebooks all resources through compute API.
backupdr.
backupdr.
backupdr.
backupdr.
backupdr.
compute.*
-
compute.acceleratorTypes.get
-
compute.acceleratorTypes.list
-
compute.addresses.create
-
compute.
addresses. createInternal -
compute.
addresses. createTagBinding -
compute.addresses.delete
-
compute.
addresses. deleteInternal -
compute.
addresses. deleteTagBinding -
compute.addresses.get
-
compute.addresses.list
-
compute.
addresses. listEffectiveTags -
compute.
addresses. listTagBindings -
compute.addresses.setLabels
-
compute.addresses.use
-
compute.addresses.useInternal
-
compute.autoscalers.create
-
compute.autoscalers.delete
-
compute.autoscalers.get
-
compute.autoscalers.list
-
compute.autoscalers.update
-
compute.
backendBuckets. addSignedUrlKey -
compute.backendBuckets.create
-
compute.
backendBuckets. createTagBinding -
compute.backendBuckets.delete
-
compute.
backendBuckets. deleteSignedUrlKey -
compute.
backendBuckets. deleteTagBinding -
compute.backendBuckets.get
-
compute.
backendBuckets. getIamPolicy -
compute.backendBuckets.list
-
compute.
backendBuckets. listEffectiveTags -
compute.
backendBuckets. listTagBindings -
compute.
backendBuckets. setIamPolicy -
compute.
backendBuckets. setSecurityPolicy -
compute.backendBuckets.update
-
compute.backendBuckets.use
-
compute.
backendServices. addSignedUrlKey -
compute.backendServices.create
-
compute.
backendServices. createTagBinding -
compute.backendServices.delete
-
compute.
backendServices. deleteSignedUrlKey -
compute.
backendServices. deleteTagBinding -
compute.backendServices.get
-
compute.
backendServices. getIamPolicy -
compute.backendServices.list
-
compute.
backendServices. listEffectiveTags -
compute.
backendServices. listTagBindings -
compute.
backendServices. setIamPolicy -
compute.
backendServices. setSecurityPolicy -
compute.backendServices.update
-
compute.backendServices.use
-
compute.commitments.create
-
compute.commitments.get
-
compute.commitments.list
-
compute.commitments.update
-
compute.
commitments. updateReservations -
compute.diskTypes.get
-
compute.diskTypes.list
-
compute.
disks. addResourcePolicies -
compute.disks.create
-
compute.disks.createSnapshot
-
compute.disks.createTagBinding
-
compute.disks.delete
-
compute.disks.deleteTagBinding
-
compute.disks.get
-
compute.disks.getIamPolicy
-
compute.disks.list
-
compute.
disks. listEffectiveTags -
compute.disks.listTagBindings
-
compute.
disks. removeResourcePolicies -
compute.disks.resize
-
compute.disks.setIamPolicy
-
compute.disks.setLabels
-
compute.
disks. startAsyncReplication -
compute.
disks. stopAsyncReplication -
compute.
disks. stopGroupAsyncReplication -
compute.disks.update
-
compute.disks.use
-
compute.disks.useReadOnly
-
compute.
externalVpnGateways. create -
compute.
externalVpnGateways. createTagBinding -
compute.
externalVpnGateways. delete -
compute.
externalVpnGateways. deleteTagBinding -
compute.
externalVpnGateways. get -
compute.
externalVpnGateways. list -
compute.
externalVpnGateways. listEffectiveTags -
compute.
externalVpnGateways. listTagBindings -
compute.
externalVpnGateways. setLabels -
compute.
externalVpnGateways. use -
compute.
firewallPolicies. cloneRules -
compute.
firewallPolicies. copyRules -
compute.
firewallPolicies. create -
compute.
firewallPolicies. createTagBinding -
compute.
firewallPolicies. delete -
compute.
firewallPolicies. deleteTagBinding -
compute.firewallPolicies.get
-
compute.
firewallPolicies. getIamPolicy -
compute.firewallPolicies.list
-
compute.
firewallPolicies. listEffectiveTags -
compute.
firewallPolicies. listTagBindings -
compute.firewallPolicies.move
-
compute.
firewallPolicies. setIamPolicy -
compute.
firewallPolicies. update -
compute.firewallPolicies.use
-
compute.firewalls.create
-
compute.
firewalls. createTagBinding -
compute.firewalls.delete
-
compute.
firewalls. deleteTagBinding -
compute.firewalls.get
-
compute.firewalls.list
-
compute.
firewalls. listEffectiveTags -
compute.
firewalls. listTagBindings -
compute.firewalls.update
-
compute.forwardingRules.create
-
compute.
forwardingRules. createTagBinding -
compute.forwardingRules.delete
-
compute.
forwardingRules. deleteTagBinding -
compute.forwardingRules.get
-
compute.forwardingRules.list
-
compute.
forwardingRules. listEffectiveTags -
compute.
forwardingRules. listTagBindings -
compute.
forwardingRules. pscCreate -
compute.
forwardingRules. pscDelete -
compute.
forwardingRules. pscSetLabels -
compute.
forwardingRules. pscSetTarget -
compute.
forwardingRules. pscUpdate -
compute.
forwardingRules. setLabels -
compute.
forwardingRules. setTarget -
compute.forwardingRules.update
-
compute.forwardingRules.use
-
compute.
futureReservations. cancel -
compute.
futureReservations. create -
compute.
futureReservations. delete -
compute.futureReservations.get
-
compute.
futureReservations. getIamPolicy -
compute.
futureReservations. list -
compute.
futureReservations. setIamPolicy -
compute.
futureReservations. update -
compute.globalAddresses.create
-
compute.
globalAddresses. createInternal -
compute.
globalAddresses. createTagBinding -
compute.globalAddresses.delete
-
compute.
globalAddresses. deleteInternal -
compute.
globalAddresses. deleteTagBinding -
compute.globalAddresses.get
-
compute.globalAddresses.list
-
compute.
globalAddresses. listEffectiveTags -
compute.
globalAddresses. listTagBindings -
compute.
globalAddresses. setLabels -
compute.globalAddresses.use
-
compute.
globalForwardingRules. create -
compute.
globalForwardingRules. createTagBinding -
compute.
globalForwardingRules. delete -
compute.
globalForwardingRules. deleteTagBinding -
compute.
globalForwardingRules. get -
compute.
globalForwardingRules. list -
compute.
globalForwardingRules. listEffectiveTags -
compute.
globalForwardingRules. listTagBindings -
compute.
globalForwardingRules. pscCreate -
compute.
globalForwardingRules. pscDelete -
compute.
globalForwardingRules. pscGet -
compute.
globalForwardingRules. pscSetLabels -
compute.
globalForwardingRules. pscSetTarget -
compute.
globalForwardingRules. pscUpdate -
compute.
globalForwardingRules. setLabels -
compute.
globalForwardingRules. setTarget -
compute.
globalForwardingRules. update -
compute.
globalNetworkEndpointGroups. attachNetworkEndpoints -
compute.
globalNetworkEndpointGroups. create -
compute.
globalNetworkEndpointGroups. createTagBinding -
compute.
globalNetworkEndpointGroups. delete -
compute.
globalNetworkEndpointGroups. deleteTagBinding -
compute.
globalNetworkEndpointGroups. detachNetworkEndpoints -
compute.
globalNetworkEndpointGroups. get -
compute.
globalNetworkEndpointGroups. list -
compute.
globalNetworkEndpointGroups. listEffectiveTags -
compute.
globalNetworkEndpointGroups. listTagBindings -
compute.
globalNetworkEndpointGroups. use -
compute.
globalOperations. delete -
compute.globalOperations.get
-
compute.
globalOperations. getIamPolicy -
compute.globalOperations.list
-
compute.
globalOperations. setIamPolicy -
compute.
globalPublicDelegatedPrefixes. create -
compute.
globalPublicDelegatedPrefixes. delete -
compute.
globalPublicDelegatedPrefixes. get -
compute.
globalPublicDelegatedPrefixes. list -
compute.
globalPublicDelegatedPrefixes. updatePolicy -
compute.healthChecks.create
-
compute.
healthChecks. createTagBinding -
compute.healthChecks.delete
-
compute.
healthChecks. deleteTagBinding -
compute.healthChecks.get
-
compute.healthChecks.list
-
compute.
healthChecks. listEffectiveTags -
compute.
healthChecks. listTagBindings -
compute.healthChecks.update
-
compute.healthChecks.use
-
compute.
healthChecks. useReadOnly -
compute.
httpHealthChecks. create -
compute.
httpHealthChecks. createTagBinding -
compute.
httpHealthChecks. delete -
compute.
httpHealthChecks. deleteTagBinding -
compute.httpHealthChecks.get
-
compute.httpHealthChecks.list
-
compute.
httpHealthChecks. listEffectiveTags -
compute.
httpHealthChecks. listTagBindings -
compute.
httpHealthChecks. update -
compute.httpHealthChecks.use
-
compute.
httpHealthChecks. useReadOnly -
compute.
httpsHealthChecks. create -
compute.
httpsHealthChecks. createTagBinding -
compute.
httpsHealthChecks. delete -
compute.
httpsHealthChecks. deleteTagBinding -
compute.httpsHealthChecks.get
-
compute.httpsHealthChecks.list
-
compute.
httpsHealthChecks. listEffectiveTags -
compute.
httpsHealthChecks. listTagBindings -
compute.
httpsHealthChecks. update -
compute.httpsHealthChecks.use
-
compute.
httpsHealthChecks. useReadOnly -
compute.images.create
-
compute.
images. createTagBinding -
compute.images.delete
-
compute.
images. deleteTagBinding -
compute.images.deprecate
-
compute.images.get
-
compute.images.getFromFamily
-
compute.images.getIamPolicy
-
compute.images.list
-
compute.
images. listEffectiveTags -
compute.images.listTagBindings
-
compute.images.setIamPolicy
-
compute.images.setLabels
-
compute.images.update
-
compute.images.useReadOnly
-
compute.
instanceGroupManagers. create -
compute.
instanceGroupManagers. createTagBinding -
compute.
instanceGroupManagers. delete -
compute.
instanceGroupManagers. deleteTagBinding -
compute.
instanceGroupManagers. get -
compute.
instanceGroupManagers. list -
compute.
instanceGroupManagers. listEffectiveTags -
compute.
instanceGroupManagers. listTagBindings -
compute.
instanceGroupManagers. update -
compute.
instanceGroupManagers. use -
compute.instanceGroups.create
-
compute.
instanceGroups. createTagBinding -
compute.instanceGroups.delete
-
compute.
instanceGroups. deleteTagBinding -
compute.instanceGroups.get
-
compute.instanceGroups.list
-
compute.
instanceGroups. listEffectiveTags -
compute.
instanceGroups. listTagBindings -
compute.instanceGroups.update
-
compute.instanceGroups.use
-
compute.instanceSettings.get
-
compute.
instanceSettings. update -
compute.
instanceTemplates. create -
compute.
instanceTemplates. delete -
compute.instanceTemplates.get
-
compute.
instanceTemplates. getIamPolicy -
compute.instanceTemplates.list
-
compute.
instanceTemplates. setIamPolicy -
compute.
instanceTemplates. useReadOnly -
compute.
instances. addAccessConfig -
compute.
instances. addResourcePolicies -
compute.instances.attachDisk
-
compute.instances.create
-
compute.
instances. createTagBinding -
compute.instances.delete
-
compute.
instances. deleteAccessConfig -
compute.
instances. deleteTagBinding -
compute.instances.detachDisk
-
compute.instances.get
-
compute.
instances. getEffectiveFirewalls -
compute.
instances. getGuestAttributes -
compute.instances.getIamPolicy
-
compute.
instances. getScreenshot -
compute.
instances. getSerialPortOutput -
compute.
instances. getShieldedInstanceIdentity -
compute.
instances. getShieldedVmIdentity -
compute.instances.list
-
compute.
instances. listEffectiveTags -
compute.
instances. listReferrers -
compute.
instances. listTagBindings -
compute.instances.osAdminLogin
-
compute.instances.osLogin
-
compute.
instances. pscInterfaceCreate -
compute.
instances. removeResourcePolicies -
compute.instances.reset
-
compute.instances.resume
-
compute.
instances. sendDiagnosticInterrupt -
compute.
instances. setDeletionProtection -
compute.
instances. setDiskAutoDelete -
compute.instances.setIamPolicy
-
compute.instances.setLabels
-
compute.
instances. setMachineResources -
compute.
instances. setMachineType -
compute.instances.setMetadata
-
compute.
instances. setMinCpuPlatform -
compute.instances.setName
-
compute.
instances. setScheduling -
compute.
instances. setSecurityPolicy -
compute.
instances. setServiceAccount -
compute.
instances. setShieldedInstanceIntegrityPolicy -
compute.
instances. setShieldedVmIntegrityPolicy -
compute.instances.setTags
-
compute.
instances. simulateMaintenanceEvent -
compute.instances.start
-
compute.
instances. startWithEncryptionKey -
compute.instances.stop
-
compute.instances.suspend
-
compute.instances.update
-
compute.
instances. updateAccessConfig -
compute.
instances. updateDisplayDevice -
compute.
instances. updateNetworkInterface -
compute.
instances. updateSecurity -
compute.
instances. updateShieldedInstanceConfig -
compute.
instances. updateShieldedVmConfig -
compute.instances.use
-
compute.instances.useReadOnly
-
compute.
instantSnapshots. create -
compute.
instantSnapshots. delete -
compute.
instantSnapshots. export -
compute.instantSnapshots.get
-
compute.
instantSnapshots. getIamPolicy -
compute.instantSnapshots.list
-
compute.
instantSnapshots. setIamPolicy -
compute.
instantSnapshots. setLabels -
compute.
instantSnapshots. useReadOnly -
compute.
interconnectAttachments. create -
compute.
interconnectAttachments. createTagBinding -
compute.
interconnectAttachments. delete -
compute.
interconnectAttachments. deleteTagBinding -
compute.
interconnectAttachments. get -
compute.
interconnectAttachments. list -
compute.
interconnectAttachments. listEffectiveTags -
compute.
interconnectAttachments. listTagBindings -
compute.
interconnectAttachments. setLabels -
compute.
interconnectAttachments. update -
compute.
interconnectAttachments. use -
compute.
interconnectLocations. get -
compute.
interconnectLocations. list -
compute.
interconnectRemoteLocations. get -
compute.
interconnectRemoteLocations. list -
compute.interconnects.create
-
compute.
interconnects. createTagBinding -
compute.interconnects.delete
-
compute.
interconnects. deleteTagBinding -
compute.interconnects.get
-
compute.
interconnects. getMacsecConfig -
compute.interconnects.list
-
compute.
interconnects. listEffectiveTags -
compute.
interconnects. listTagBindings -
compute.
interconnects. setLabels -
compute.interconnects.update
-
compute.interconnects.use
-
compute.licenseCodes.get
-
compute.
licenseCodes. getIamPolicy -
compute.licenseCodes.list
-
compute.
licenseCodes. setIamPolicy -
compute.licenseCodes.update
-
compute.licenses.create
-
compute.licenses.delete
-
compute.licenses.get
-
compute.licenses.getIamPolicy
-
compute.licenses.list
-
compute.licenses.setIamPolicy
-
compute.machineImages.create
-
compute.machineImages.delete
-
compute.machineImages.get
-
compute.
machineImages. getIamPolicy -
compute.machineImages.list
-
compute.
machineImages. setIamPolicy -
compute.
machineImages. useReadOnly -
compute.machineTypes.get
-
compute.machineTypes.list
-
compute.multiMig.create
-
compute.multiMig.delete
-
compute.multiMig.get
-
compute.multiMig.list
-
compute.
networkAttachments. create -
compute.
networkAttachments. createTagBinding -
compute.
networkAttachments. delete -
compute.
networkAttachments. deleteTagBinding -
compute.networkAttachments.get
-
compute.
networkAttachments. getIamPolicy -
compute.
networkAttachments. list -
compute.
networkAttachments. listEffectiveTags -
compute.
networkAttachments. listTagBindings -
compute.
networkAttachments. setIamPolicy -
compute.
networkAttachments. update -
compute.
networkEdgeSecurityServices. create -
compute.
networkEdgeSecurityServices. createTagBinding -
compute.
networkEdgeSecurityServices. delete -
compute.
networkEdgeSecurityServices. deleteTagBinding -
compute.
networkEdgeSecurityServices. get -
compute.
networkEdgeSecurityServices. list -
compute.
networkEdgeSecurityServices. listEffectiveTags -
compute.
networkEdgeSecurityServices. listTagBindings -
compute.
networkEdgeSecurityServices. update -
compute.
networkEndpointGroups. attachNetworkEndpoints -
compute.
networkEndpointGroups. create -
compute.
networkEndpointGroups. createTagBinding -
compute.
networkEndpointGroups. delete -
compute.
networkEndpointGroups. deleteTagBinding -
compute.
networkEndpointGroups. detachNetworkEndpoints -
compute.
networkEndpointGroups. get -
compute.
networkEndpointGroups. list -
compute.
networkEndpointGroups. listEffectiveTags -
compute.
networkEndpointGroups. listTagBindings -
compute.
networkEndpointGroups. use -
compute.networkProfiles.get
-
compute.networkProfiles.list
-
compute.networks.access
-
compute.networks.addPeering
-
compute.networks.create
-
compute.
networks. createTagBinding -
compute.networks.delete
-
compute.
networks. deleteTagBinding -
compute.networks.get
-
compute.
networks. getEffectiveFirewalls -
compute.
networks. getRegionEffectiveFirewalls -
compute.networks.list
-
compute.
networks. listEffectiveTags -
compute.
networks. listPeeringRoutes -
compute.
networks. listTagBindings -
compute.networks.mirror
-
compute.networks.removePeering
-
compute.
networks. setFirewallPolicy -
compute.
networks. switchToCustomMode -
compute.networks.update
-
compute.networks.updatePeering
-
compute.networks.updatePolicy
-
compute.networks.use
-
compute.networks.useExternalIp
-
compute.nodeGroups.addNodes
-
compute.nodeGroups.create
-
compute.nodeGroups.delete
-
compute.nodeGroups.deleteNodes
-
compute.nodeGroups.get
-
compute.
nodeGroups. getIamPolicy -
compute.nodeGroups.list
-
compute.
nodeGroups. performMaintenance -
compute.
nodeGroups. setIamPolicy -
compute.
nodeGroups. setNodeTemplate -
compute.
nodeGroups. simulateMaintenanceEvent -
compute.nodeGroups.update
-
compute.nodeTemplates.create
-
compute.nodeTemplates.delete
-
compute.nodeTemplates.get
-
compute.
nodeTemplates. getIamPolicy -
compute.nodeTemplates.list
-
compute.
nodeTemplates. setIamPolicy -
compute.nodeTypes.get
-
compute.nodeTypes.list
-
compute.
organizations. disableXpnHost -
compute.
organizations. disableXpnResource -
compute.
organizations. enableXpnHost -
compute.
organizations. enableXpnResource -
compute.
organizations. listAssociations -
compute.
organizations. setFirewallPolicy -
compute.
organizations. setSecurityPolicy -
compute.
oslogin. updateExternalUser -
compute.
packetMirrorings. create -
compute.
packetMirrorings. createTagBinding -
compute.
packetMirrorings. delete -
compute.
packetMirrorings. deleteTagBinding -
compute.packetMirrorings.get
-
compute.packetMirrorings.list
-
compute.
packetMirrorings. listEffectiveTags -
compute.
packetMirrorings. listTagBindings -
compute.
packetMirrorings. update -
compute.projects.get
-
compute.
projects. setCloudArmorTier -
compute.
projects. setCommonInstanceMetadata -
compute.
projects. setDefaultNetworkTier -
compute.
projects. setDefaultServiceAccount -
compute.
projects. setManagedProtectionTier -
compute.
projects. setUsageExportBucket -
compute.
publicAdvertisedPrefixes. create -
compute.
publicAdvertisedPrefixes. delete -
compute.
publicAdvertisedPrefixes. get -
compute.
publicAdvertisedPrefixes. list -
compute.
publicAdvertisedPrefixes. update -
compute.
publicAdvertisedPrefixes. updatePolicy -
compute.
publicDelegatedPrefixes. create -
compute.
publicDelegatedPrefixes. createTagBinding -
compute.
publicDelegatedPrefixes. delete -
compute.
publicDelegatedPrefixes. deleteTagBinding -
compute.
publicDelegatedPrefixes. get -
compute.
publicDelegatedPrefixes. list -
compute.
publicDelegatedPrefixes. listEffectiveTags -
compute.
publicDelegatedPrefixes. listTagBindings -
compute.
publicDelegatedPrefixes. update -
compute.
publicDelegatedPrefixes. updatePolicy -
compute.
publicDelegatedPrefixes. use -
compute.
regionBackendServices. create -
compute.
regionBackendServices. createTagBinding -
compute.
regionBackendServices. delete -
compute.
regionBackendServices. deleteTagBinding -
compute.
regionBackendServices. get -
compute.
regionBackendServices. getIamPolicy -
compute.
regionBackendServices. list -
compute.
regionBackendServices. listEffectiveTags -
compute.
regionBackendServices. listTagBindings -
compute.
regionBackendServices. setIamPolicy -
compute.
regionBackendServices. setSecurityPolicy -
compute.
regionBackendServices. update -
compute.
regionBackendServices. use -
compute.
regionFirewallPolicies. cloneRules -
compute.
regionFirewallPolicies. create -
compute.
regionFirewallPolicies. createTagBinding -
compute.
regionFirewallPolicies. delete -
compute.
regionFirewallPolicies. deleteTagBinding -
compute.
regionFirewallPolicies. get -
compute.
regionFirewallPolicies. getIamPolicy -
compute.
regionFirewallPolicies. list -
compute.
regionFirewallPolicies. listEffectiveTags -
compute.
regionFirewallPolicies. listTagBindings -
compute.
regionFirewallPolicies. setIamPolicy -
compute.
regionFirewallPolicies. update -
compute.
regionFirewallPolicies. use -
compute.
regionHealthCheckServices. create -
compute.
regionHealthCheckServices. delete -
compute.
regionHealthCheckServices. get -
compute.
regionHealthCheckServices. list -
compute.
regionHealthCheckServices. update -
compute.
regionHealthCheckServices. use -
compute.
regionHealthChecks. create -
compute.
regionHealthChecks. createTagBinding -
compute.
regionHealthChecks. delete -
compute.
regionHealthChecks. deleteTagBinding -
compute.regionHealthChecks.get
-
compute.
regionHealthChecks. list -
compute.
regionHealthChecks. listEffectiveTags -
compute.
regionHealthChecks. listTagBindings -
compute.
regionHealthChecks. update -
compute.regionHealthChecks.use
-
compute.
regionHealthChecks. useReadOnly -
compute.
regionNetworkEndpointGroups. attachNetworkEndpoints -
compute.
regionNetworkEndpointGroups. create -
compute.
regionNetworkEndpointGroups. createTagBinding -
compute.
regionNetworkEndpointGroups. delete -
compute.
regionNetworkEndpointGroups. deleteTagBinding -
compute.
regionNetworkEndpointGroups. detachNetworkEndpoints -
compute.
regionNetworkEndpointGroups. get -
compute.
regionNetworkEndpointGroups. list -
compute.
regionNetworkEndpointGroups. listEffectiveTags -
compute.
regionNetworkEndpointGroups. listTagBindings -
compute.
regionNetworkEndpointGroups. use -
compute.
regionNotificationEndpoints. create -
compute.
regionNotificationEndpoints. delete -
compute.
regionNotificationEndpoints. get -
compute.
regionNotificationEndpoints. list -
compute.
regionNotificationEndpoints. update -
compute.
regionNotificationEndpoints. use -
compute.
regionOperations. delete -
compute.regionOperations.get
-
compute.
regionOperations. getIamPolicy -
compute.regionOperations.list
-
compute.
regionOperations. setIamPolicy -
compute.
regionSecurityPolicies. create -
compute.
regionSecurityPolicies. createTagBinding -
compute.
regionSecurityPolicies. delete -
compute.
regionSecurityPolicies. deleteTagBinding -
compute.
regionSecurityPolicies. get -
compute.
regionSecurityPolicies. list -
compute.
regionSecurityPolicies. listEffectiveTags -
compute.
regionSecurityPolicies. listTagBindings -
compute.
regionSecurityPolicies. update -
compute.
regionSecurityPolicies. use -
compute.
regionSslCertificates. create -
compute.
regionSslCertificates. createTagBinding -
compute.
regionSslCertificates. delete -
compute.
regionSslCertificates. deleteTagBinding -
compute.
regionSslCertificates. get -
compute.
regionSslCertificates. list -
compute.
regionSslCertificates. listEffectiveTags -
compute.
regionSslCertificates. listTagBindings -
compute.
regionSslPolicies. create -
compute.
regionSslPolicies. createTagBinding -
compute.
regionSslPolicies. delete -
compute.
regionSslPolicies. deleteTagBinding -
compute.regionSslPolicies.get
-
compute.regionSslPolicies.list
-
compute.
regionSslPolicies. listAvailableFeatures -
compute.
regionSslPolicies. listEffectiveTags -
compute.
regionSslPolicies. listTagBindings -
compute.
regionSslPolicies. update -
compute.regionSslPolicies.use
-
compute.
regionTargetHttpProxies. create -
compute.
regionTargetHttpProxies. createTagBinding -
compute.
regionTargetHttpProxies. delete -
compute.
regionTargetHttpProxies. deleteTagBinding -
compute.
regionTargetHttpProxies. get -
compute.
regionTargetHttpProxies. list -
compute.
regionTargetHttpProxies. listEffectiveTags -
compute.
regionTargetHttpProxies. listTagBindings -
compute.
regionTargetHttpProxies. setUrlMap -
compute.
regionTargetHttpProxies. use -
compute.
regionTargetHttpsProxies. create -
compute.
regionTargetHttpsProxies. createTagBinding -
compute.
regionTargetHttpsProxies. delete -
compute.
regionTargetHttpsProxies. deleteTagBinding -
compute.
regionTargetHttpsProxies. get -
compute.
regionTargetHttpsProxies. list -
compute.
regionTargetHttpsProxies. listEffectiveTags -
compute.
regionTargetHttpsProxies. listTagBindings -
compute.
regionTargetHttpsProxies. setSslCertificates -
compute.
regionTargetHttpsProxies. setUrlMap -
compute.
regionTargetHttpsProxies. update -
compute.
regionTargetHttpsProxies. use -
compute.
regionTargetTcpProxies. create -
compute.
regionTargetTcpProxies. createTagBinding -
compute.
regionTargetTcpProxies. delete -
compute.
regionTargetTcpProxies. deleteTagBinding -
compute.
regionTargetTcpProxies. get -
compute.
regionTargetTcpProxies. list -
compute.
regionTargetTcpProxies. listEffectiveTags -
compute.
regionTargetTcpProxies. listTagBindings -
compute.
regionTargetTcpProxies. use -
compute.regionUrlMaps.create
-
compute.
regionUrlMaps. createTagBinding -
compute.regionUrlMaps.delete
-
compute.
regionUrlMaps. deleteTagBinding -
compute.regionUrlMaps.get
-
compute.
regionUrlMaps. invalidateCache -
compute.regionUrlMaps.list
-
compute.
regionUrlMaps. listEffectiveTags -
compute.
regionUrlMaps. listTagBindings -
compute.regionUrlMaps.update
-
compute.regionUrlMaps.use
-
compute.regionUrlMaps.validate
-
compute.regions.get
-
compute.regions.list
-
compute.reservations.create
-
compute.reservations.delete
-
compute.reservations.get
-
compute.reservations.list
-
compute.reservations.resize
-
compute.reservations.update
-
compute.
resourcePolicies. create -
compute.
resourcePolicies. delete -
compute.resourcePolicies.get
-
compute.
resourcePolicies. getIamPolicy -
compute.resourcePolicies.list
-
compute.
resourcePolicies. setIamPolicy -
compute.
resourcePolicies. update -
compute.resourcePolicies.use
-
compute.
resourcePolicies. useReadOnly -
compute.routers.create
-
compute.
routers. createTagBinding -
compute.routers.delete
-
compute.
routers. deleteRoutePolicy -
compute.
routers. deleteTagBinding -
compute.routers.get
-
compute.routers.getRoutePolicy
-
compute.routers.list
-
compute.routers.listBgpRoutes
-
compute.
routers. listEffectiveTags -
compute.
routers. listRoutePolicies -
compute.
routers. listTagBindings -
compute.routers.update
-
compute.
routers. updateRoutePolicy -
compute.routers.use
-
compute.routes.create
-
compute.
routes. createTagBinding -
compute.routes.delete
-
compute.
routes. deleteTagBinding -
compute.routes.get
-
compute.routes.list
-
compute.
routes. listEffectiveTags -
compute.routes.listTagBindings
-
compute.
securityPolicies. addAssociation -
compute.
securityPolicies. copyRules -
compute.
securityPolicies. create -
compute.
securityPolicies. createTagBinding -
compute.
securityPolicies. delete -
compute.
securityPolicies. deleteTagBinding -
compute.securityPolicies.get
-
compute.securityPolicies.list
-
compute.
securityPolicies. listEffectiveTags -
compute.
securityPolicies. listTagBindings -
compute.securityPolicies.move
-
compute.
securityPolicies. removeAssociation -
compute.
securityPolicies. setLabels -
compute.
securityPolicies. update -
compute.securityPolicies.use
-
compute.
serviceAttachments. create -
compute.
serviceAttachments. createTagBinding -
compute.
serviceAttachments. delete -
compute.
serviceAttachments. deleteTagBinding -
compute.serviceAttachments.get
-
compute.
serviceAttachments. getIamPolicy -
compute.
serviceAttachments. list -
compute.
serviceAttachments. listEffectiveTags -
compute.
serviceAttachments. listTagBindings -
compute.
serviceAttachments. setIamPolicy -
compute.
serviceAttachments. update -
compute.serviceAttachments.use
-
compute.snapshotSettings.get
-
compute.
snapshotSettings. update -
compute.snapshots.create
-
compute.
snapshots. createTagBinding -
compute.snapshots.delete
-
compute.
snapshots. deleteTagBinding -
compute.snapshots.get
-
compute.snapshots.getIamPolicy
-
compute.snapshots.list
-
compute.
snapshots. listEffectiveTags -
compute.
snapshots. listTagBindings -
compute.snapshots.setIamPolicy
-
compute.snapshots.setLabels
-
compute.snapshots.useReadOnly
-
compute.sslCertificates.create
-
compute.
sslCertificates. createTagBinding -
compute.sslCertificates.delete
-
compute.
sslCertificates. deleteTagBinding -
compute.sslCertificates.get
-
compute.sslCertificates.list
-
compute.
sslCertificates. listEffectiveTags -
compute.
sslCertificates. listTagBindings -
compute.sslPolicies.create
-
compute.
sslPolicies. createTagBinding -
compute.sslPolicies.delete
-
compute.
sslPolicies. deleteTagBinding -
compute.sslPolicies.get
-
compute.sslPolicies.list
-
compute.
sslPolicies. listAvailableFeatures -
compute.
sslPolicies. listEffectiveTags -
compute.
sslPolicies. listTagBindings -
compute.sslPolicies.update
-
compute.sslPolicies.use
-
compute.storagePools.create
-
compute.storagePools.delete
-
compute.storagePools.get
-
compute.
storagePools. getIamPolicy -
compute.storagePools.list
-
compute.
storagePools. setIamPolicy -
compute.storagePools.update
-
compute.storagePools.use
-
compute.subnetworks.create
-
compute.
subnetworks. createTagBinding -
compute.subnetworks.delete
-
compute.
subnetworks. deleteTagBinding -
compute.
subnetworks. expandIpCidrRange -
compute.subnetworks.get
-
compute.
subnetworks. getIamPolicy -
compute.subnetworks.list
-
compute.
subnetworks. listEffectiveTags -
compute.
subnetworks. listTagBindings -
compute.subnetworks.mirror
-
compute.
subnetworks. setIamPolicy -
compute.
subnetworks. setPrivateIpGoogleAccess -
compute.subnetworks.update
-
compute.subnetworks.use
-
compute.
subnetworks. useExternalIp -
compute.
targetGrpcProxies. create -
compute.
targetGrpcProxies. createTagBinding -
compute.
targetGrpcProxies. delete -
compute.
targetGrpcProxies. deleteTagBinding -
compute.targetGrpcProxies.get
-
compute.targetGrpcProxies.list
-
compute.
targetGrpcProxies. listEffectiveTags -
compute.
targetGrpcProxies. listTagBindings -
compute.
targetGrpcProxies. update -
compute.targetGrpcProxies.use
-
compute.
targetHttpProxies. create -
compute.
targetHttpProxies. createTagBinding -
compute.
targetHttpProxies. delete -
compute.
targetHttpProxies. deleteTagBinding -
compute.targetHttpProxies.get
-
compute.targetHttpProxies.list
-
compute.
targetHttpProxies. listEffectiveTags -
compute.
targetHttpProxies. listTagBindings -
compute.
targetHttpProxies. setUrlMap -
compute.
targetHttpProxies. update -
compute.targetHttpProxies.use
-
compute.
targetHttpsProxies. create -
compute.
targetHttpsProxies. createTagBinding -
compute.
targetHttpsProxies. delete -
compute.
targetHttpsProxies. deleteTagBinding -
compute.targetHttpsProxies.get
-
compute.
targetHttpsProxies. list -
compute.
targetHttpsProxies. listEffectiveTags -
compute.
targetHttpsProxies. listTagBindings -
compute.
targetHttpsProxies. setCertificateMap -
compute.
targetHttpsProxies. setQuicOverride -
compute.
targetHttpsProxies. setSslCertificates -
compute.
targetHttpsProxies. setSslPolicy -
compute.
targetHttpsProxies. setUrlMap -
compute.
targetHttpsProxies. update -
compute.targetHttpsProxies.use
-
compute.targetInstances.create
-
compute.
targetInstances. createTagBinding -
compute.targetInstances.delete
-
compute.
targetInstances. deleteTagBinding -
compute.targetInstances.get
-
compute.targetInstances.list
-
compute.
targetInstances. listEffectiveTags -
compute.
targetInstances. listTagBindings -
compute.
targetInstances. setSecurityPolicy -
compute.targetInstances.use
-
compute.
targetPools. addHealthCheck -
compute.
targetPools. addInstance -
compute.targetPools.create
-
compute.
targetPools. createTagBinding -
compute.targetPools.delete
-
compute.
targetPools. deleteTagBinding -
compute.targetPools.get
-
compute.targetPools.list
-
compute.
targetPools. listEffectiveTags -
compute.
targetPools. listTagBindings -
compute.
targetPools. removeHealthCheck -
compute.
targetPools. removeInstance -
compute.
targetPools. setSecurityPolicy -
compute.targetPools.update
-
compute.targetPools.use
-
compute.
targetSslProxies. create -
compute.
targetSslProxies. createTagBinding -
compute.
targetSslProxies. delete -
compute.
targetSslProxies. deleteTagBinding -
compute.targetSslProxies.get
-
compute.targetSslProxies.list
-
compute.
targetSslProxies. listEffectiveTags -
compute.
targetSslProxies. listTagBindings -
compute.
targetSslProxies. setBackendService -
compute.
targetSslProxies. setCertificateMap -
compute.
targetSslProxies. setProxyHeader -
compute.
targetSslProxies. setSslCertificates -
compute.
targetSslProxies. setSslPolicy -
compute.
targetSslProxies. update -
compute.targetSslProxies.use
-
compute.
targetTcpProxies. create -
compute.
targetTcpProxies. createTagBinding -
compute.
targetTcpProxies. delete -
compute.
targetTcpProxies. deleteTagBinding -
compute.targetTcpProxies.get
-
compute.targetTcpProxies.list
-
compute.
targetTcpProxies. listEffectiveTags -
compute.
targetTcpProxies. listTagBindings -
compute.
targetTcpProxies. update -
compute.targetTcpProxies.use
-
compute.
targetVpnGateways. create -
compute.
targetVpnGateways. createTagBinding -
compute.
targetVpnGateways. delete -
compute.
targetVpnGateways. deleteTagBinding -
compute.targetVpnGateways.get
-
compute.targetVpnGateways.list
-
compute.
targetVpnGateways. listEffectiveTags -
compute.
targetVpnGateways. listTagBindings -
compute.
targetVpnGateways. setLabels -
compute.targetVpnGateways.use
-
compute.urlMaps.create
-
compute.
urlMaps. createTagBinding -
compute.urlMaps.delete
-
compute.
urlMaps. deleteTagBinding -
compute.urlMaps.get
-
compute.
urlMaps. invalidateCache -
compute.urlMaps.list
-
compute.
urlMaps. listEffectiveTags -
compute.
urlMaps. listTagBindings -
compute.urlMaps.update
-
compute.urlMaps.use
-
compute.urlMaps.validate
-
compute.vpnGateways.create
-
compute.
vpnGateways. createTagBinding -
compute.vpnGateways.delete
-
compute.
vpnGateways. deleteTagBinding -
compute.vpnGateways.get
-
compute.vpnGateways.list
-
compute.
vpnGateways. listEffectiveTags -
compute.
vpnGateways. listTagBindings -
compute.vpnGateways.setLabels
-
compute.vpnGateways.use
-
compute.vpnTunnels.create
-
compute.
vpnTunnels. createTagBinding -
compute.vpnTunnels.delete
-
compute.
vpnTunnels. deleteTagBinding -
compute.vpnTunnels.get
-
compute.vpnTunnels.list
-
compute.
vpnTunnels. listEffectiveTags -
compute.
vpnTunnels. listTagBindings -
compute.vpnTunnels.setLabels
-
compute.zoneOperations.delete
-
compute.zoneOperations.get
-
compute.
zoneOperations. getIamPolicy -
compute.zoneOperations.list
-
compute.
zoneOperations. setIamPolicy -
compute.zones.get
-
compute.zones.list
notebooks.*
-
notebooks.environments.create
-
notebooks.environments.delete
-
notebooks.environments.get
-
notebooks.
environments. getIamPolicy -
notebooks.environments.list
-
notebooks.
environments. setIamPolicy -
notebooks.executions.create
-
notebooks.executions.delete
-
notebooks.executions.get
-
notebooks.
executions. getIamPolicy -
notebooks.executions.list
-
notebooks.
executions. setIamPolicy -
notebooks.
instances. checkUpgradability -
notebooks.instances.create
-
notebooks.instances.delete
-
notebooks.instances.diagnose
-
notebooks.instances.get
-
notebooks.instances.getHealth
-
notebooks.
instances. getIamPolicy -
notebooks.instances.list
-
notebooks.instances.reset
-
notebooks.
instances. setAccelerator -
notebooks.
instances. setIamPolicy -
notebooks.instances.setLabels
-
notebooks.
instances. setMachineType -
notebooks.instances.start
-
notebooks.instances.stop
-
notebooks.instances.update
-
notebooks.
instances. updateConfig -
notebooks.
instances. updateShieldInstanceConfig -
notebooks.instances.upgrade
-
notebooks.instances.use
-
notebooks.locations.get
-
notebooks.locations.list
-
notebooks.operations.cancel
-
notebooks.operations.delete
-
notebooks.operations.get
-
notebooks.operations.list
-
notebooks.runtimes.create
-
notebooks.runtimes.delete
-
notebooks.runtimes.diagnose
-
notebooks.runtimes.get
-
notebooks.
runtimes. getIamPolicy -
notebooks.runtimes.list
-
notebooks.runtimes.reset
-
notebooks.
runtimes. setIamPolicy -
notebooks.runtimes.start
-
notebooks.runtimes.stop
-
notebooks.runtimes.switch
-
notebooks.runtimes.update
-
notebooks.runtimes.upgrade
-
notebooks.schedules.create
-
notebooks.schedules.delete
-
notebooks.schedules.get
-
notebooks.
schedules. getIamPolicy -
notebooks.schedules.list
-
notebooks.
schedules. setIamPolicy
resourcemanager.projects.get
resourcemanager.projects.list
serviceusage.quotas.get
serviceusage.services.get
serviceusage.services.list
Notebooks Legacy Viewer
( roles/
)
Read-only access to Notebooks all resources through compute API.
compute.acceleratorTypes.*
-
compute.acceleratorTypes.get
-
compute.acceleratorTypes.list
compute.addresses.get
compute.addresses.list
compute.
compute.
compute.autoscalers.get
compute.autoscalers.list
compute.backendBuckets.get
compute.
compute.backendBuckets.list
compute.
compute.
compute.backendServices.get
compute.
compute.backendServices.list
compute.
compute.
compute.commitments.get
compute.commitments.list
compute.diskTypes.*
-
compute.diskTypes.get
-
compute.diskTypes.list
compute.disks.get
compute.disks.getIamPolicy
compute.disks.list
compute.
compute.disks.listTagBindings
compute.
compute.
compute.
compute.
compute.firewallPolicies.get
compute.
compute.firewallPolicies.list
compute.
compute.
compute.firewalls.get
compute.firewalls.list
compute.
compute.
compute.forwardingRules.get
compute.forwardingRules.list
compute.
compute.
compute.futureReservations.get
compute.
compute.
compute.globalAddresses.get
compute.globalAddresses.list
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.globalOperations.get
compute.
compute.globalOperations.list
compute.
compute.
compute.healthChecks.get
compute.healthChecks.list
compute.
compute.
compute.httpHealthChecks.get
compute.httpHealthChecks.list
compute.
compute.
compute.httpsHealthChecks.get
compute.httpsHealthChecks.list
compute.
compute.
compute.images.get
compute.images.getFromFamily
compute.images.getIamPolicy
compute.images.list
compute.
compute.images.listTagBindings
compute.
compute.
compute.
compute.
compute.instanceGroups.get
compute.instanceGroups.list
compute.
compute.
compute.instanceSettings.get
compute.instanceTemplates.get
compute.
compute.instanceTemplates.list
compute.instances.get
compute.
compute.
compute.instances.getIamPolicy
compute.
compute.
compute.
compute.
compute.instances.list
compute.
compute.
compute.
compute.instantSnapshots.get
compute.
compute.instantSnapshots.list
compute.
compute.
compute.
compute.
compute.
-
compute.
interconnectLocations. get -
compute.
interconnectLocations. list
compute.
-
compute.
interconnectRemoteLocations. get -
compute.
interconnectRemoteLocations. list
compute.interconnects.get
compute.interconnects.list
compute.
compute.
compute.licenseCodes.get
compute.
compute.licenseCodes.list
compute.licenses.get
compute.licenses.getIamPolicy
compute.licenses.list
compute.machineImages.get
compute.
compute.machineImages.list
compute.machineTypes.*
-
compute.machineTypes.get
-
compute.machineTypes.list
compute.multiMig.get
compute.multiMig.list
compute.networkAttachments.get
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.networkProfiles.*
-
compute.networkProfiles.get
-
compute.networkProfiles.list
compute.networks.get
compute.
compute.
compute.networks.list
compute.
compute.
compute.
compute.nodeGroups.get
compute.
compute.nodeGroups.list
compute.nodeTemplates.get
compute.
compute.nodeTemplates.list
compute.nodeTypes.*
-
compute.nodeTypes.get
-
compute.nodeTypes.list
compute.
compute.packetMirrorings.get
compute.packetMirrorings.list
compute.
compute.
compute.projects.get
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.regionHealthChecks.get
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.regionOperations.get
compute.
compute.regionOperations.list
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.regionSslPolicies.get
compute.regionSslPolicies.list
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.regionUrlMaps.get
compute.regionUrlMaps.list
compute.
compute.
compute.regionUrlMaps.validate
compute.regions.*
-
compute.regions.get
-
compute.regions.list
compute.reservations.get
compute.reservations.list
compute.resourcePolicies.get
compute.
compute.resourcePolicies.list
compute.routers.get
compute.routers.getRoutePolicy
compute.routers.list
compute.routers.listBgpRoutes
compute.
compute.
compute.
compute.routes.get
compute.routes.list
compute.
compute.routes.listTagBindings
compute.securityPolicies.get
compute.securityPolicies.list
compute.
compute.
compute.serviceAttachments.get
compute.
compute.
compute.
compute.
compute.snapshotSettings.get
compute.snapshots.get
compute.snapshots.getIamPolicy
compute.snapshots.list
compute.
compute.
compute.sslCertificates.get
compute.sslCertificates.list
compute.
compute.
compute.sslPolicies.get
compute.sslPolicies.list
compute.
compute.
compute.
compute.storagePools.get
compute.
compute.storagePools.list
compute.subnetworks.get
compute.
compute.subnetworks.list
compute.
compute.
compute.targetGrpcProxies.get
compute.targetGrpcProxies.list
compute.
compute.
compute.targetHttpProxies.get
compute.targetHttpProxies.list
compute.
compute.
compute.targetHttpsProxies.get
compute.
compute.
compute.
compute.targetInstances.get
compute.targetInstances.list
compute.
compute.
compute.targetPools.get
compute.targetPools.list
compute.
compute.
compute.targetSslProxies.get
compute.targetSslProxies.list
compute.
compute.
compute.targetTcpProxies.get
compute.targetTcpProxies.list
compute.
compute.
compute.targetVpnGateways.get
compute.targetVpnGateways.list
compute.
compute.
compute.urlMaps.get
compute.urlMaps.list
compute.
compute.
compute.urlMaps.validate
compute.vpnGateways.get
compute.vpnGateways.list
compute.
compute.
compute.vpnTunnels.get
compute.vpnTunnels.list
compute.
compute.
compute.zoneOperations.get
compute.
compute.zoneOperations.list
compute.zones.*
-
compute.zones.get
-
compute.zones.list
notebooks.environments.get
notebooks.
notebooks.environments.list
notebooks.executions.get
notebooks.
notebooks.executions.list
notebooks.
notebooks.instances.get
notebooks.instances.getHealth
notebooks.
notebooks.instances.list
notebooks.locations.*
-
notebooks.locations.get
-
notebooks.locations.list
notebooks.operations.get
notebooks.operations.list
notebooks.runtimes.get
notebooks.
notebooks.runtimes.list
notebooks.schedules.get
notebooks.
notebooks.schedules.list
resourcemanager.projects.get
resourcemanager.projects.list
serviceusage.quotas.get
serviceusage.services.get
serviceusage.services.list
Notebooks Runner
( roles/
)
Restricted access for running scheduled Notebooks.
aiplatform.
-
aiplatform.
notebookExecutionJobs. create -
aiplatform.
notebookExecutionJobs. delete -
aiplatform.
notebookExecutionJobs. get -
aiplatform.
notebookExecutionJobs. list
aiplatform.operations.list
aiplatform.pipelineJobs.create
aiplatform.schedules.*
-
aiplatform.schedules.create
-
aiplatform.schedules.delete
-
aiplatform.schedules.get
-
aiplatform.schedules.list
-
aiplatform.schedules.update
compute.acceleratorTypes.*
-
compute.acceleratorTypes.get
-
compute.acceleratorTypes.list
compute.addresses.get
compute.addresses.list
compute.
compute.
compute.autoscalers.get
compute.autoscalers.list
compute.backendBuckets.get
compute.
compute.backendBuckets.list
compute.
compute.
compute.backendServices.get
compute.
compute.backendServices.list
compute.
compute.
compute.commitments.get
compute.commitments.list
compute.diskTypes.*
-
compute.diskTypes.get
-
compute.diskTypes.list
compute.disks.get
compute.disks.getIamPolicy
compute.disks.list
compute.
compute.disks.listTagBindings
compute.
compute.
compute.
compute.
compute.firewallPolicies.get
compute.
compute.firewallPolicies.list
compute.
compute.
compute.firewalls.get
compute.firewalls.list
compute.
compute.
compute.forwardingRules.get
compute.forwardingRules.list
compute.
compute.
compute.futureReservations.get
compute.
compute.
compute.globalAddresses.get
compute.globalAddresses.list
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.globalOperations.get
compute.
compute.globalOperations.list
compute.
compute.
compute.healthChecks.get
compute.healthChecks.list
compute.
compute.
compute.httpHealthChecks.get
compute.httpHealthChecks.list
compute.
compute.
compute.httpsHealthChecks.get
compute.httpsHealthChecks.list
compute.
compute.
compute.images.get
compute.images.getFromFamily
compute.images.getIamPolicy
compute.images.list
compute.
compute.images.listTagBindings
compute.
compute.
compute.
compute.
compute.instanceGroups.get
compute.instanceGroups.list
compute.
compute.
compute.instanceSettings.get
compute.instanceTemplates.get
compute.
compute.instanceTemplates.list
compute.instances.get
compute.
compute.
compute.instances.getIamPolicy
compute.
compute.
compute.
compute.
compute.instances.list
compute.
compute.
compute.
compute.instantSnapshots.get
compute.
compute.instantSnapshots.list
compute.
compute.
compute.
compute.
compute.
-
compute.
interconnectLocations. get -
compute.
interconnectLocations. list
compute.
-
compute.
interconnectRemoteLocations. get -
compute.
interconnectRemoteLocations. list
compute.interconnects.get
compute.interconnects.list
compute.
compute.
compute.licenseCodes.get
compute.
compute.licenseCodes.list
compute.licenses.get
compute.licenses.getIamPolicy
compute.licenses.list
compute.machineImages.get
compute.
compute.machineImages.list
compute.machineTypes.*
-
compute.machineTypes.get
-
compute.machineTypes.list
compute.multiMig.get
compute.multiMig.list
compute.networkAttachments.get
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.networkProfiles.*
-
compute.networkProfiles.get
-
compute.networkProfiles.list
compute.networks.get
compute.
compute.
compute.networks.list
compute.
compute.
compute.
compute.nodeGroups.get
compute.
compute.nodeGroups.list
compute.nodeTemplates.get
compute.
compute.nodeTemplates.list
compute.nodeTypes.*
-
compute.nodeTypes.get
-
compute.nodeTypes.list
compute.
compute.packetMirrorings.get
compute.packetMirrorings.list
compute.
compute.
compute.projects.get
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.regionHealthChecks.get
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.regionOperations.get
compute.
compute.regionOperations.list
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.regionSslPolicies.get
compute.regionSslPolicies.list
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.regionUrlMaps.get
compute.regionUrlMaps.list
compute.
compute.
compute.regionUrlMaps.validate
compute.regions.*
-
compute.regions.get
-
compute.regions.list
compute.reservations.get
compute.reservations.list
compute.resourcePolicies.get
compute.
compute.resourcePolicies.list
compute.routers.get
compute.routers.getRoutePolicy
compute.routers.list
compute.routers.listBgpRoutes
compute.
compute.
compute.
compute.routes.get
compute.routes.list
compute.
compute.routes.listTagBindings
compute.securityPolicies.get
compute.securityPolicies.list
compute.
compute.
compute.serviceAttachments.get
compute.
compute.
compute.
compute.
compute.snapshotSettings.get
compute.snapshots.get
compute.snapshots.getIamPolicy
compute.snapshots.list
compute.
compute.
compute.sslCertificates.get
compute.sslCertificates.list
compute.
compute.
compute.sslPolicies.get
compute.sslPolicies.list
compute.
compute.
compute.
compute.storagePools.get
compute.
compute.storagePools.list
compute.subnetworks.get
compute.
compute.subnetworks.list
compute.
compute.
compute.targetGrpcProxies.get
compute.targetGrpcProxies.list
compute.
compute.
compute.targetHttpProxies.get
compute.targetHttpProxies.list
compute.
compute.
compute.targetHttpsProxies.get
compute.
compute.
compute.
compute.targetInstances.get
compute.targetInstances.list
compute.
compute.
compute.targetPools.get
compute.targetPools.list
compute.
compute.
compute.targetSslProxies.get
compute.targetSslProxies.list
compute.
compute.
compute.targetTcpProxies.get
compute.targetTcpProxies.list
compute.
compute.
compute.targetVpnGateways.get
compute.targetVpnGateways.list
compute.
compute.
compute.urlMaps.get
compute.urlMaps.list
compute.
compute.
compute.urlMaps.validate
compute.vpnGateways.get
compute.vpnGateways.list
compute.
compute.
compute.vpnTunnels.get
compute.vpnTunnels.list
compute.
compute.
compute.zoneOperations.get
compute.
compute.zoneOperations.list
compute.zones.*
-
compute.zones.get
-
compute.zones.list
notebooks.environments.get
notebooks.
notebooks.environments.list
notebooks.executions.create
notebooks.executions.get
notebooks.
notebooks.executions.list
notebooks.
notebooks.instances.create
notebooks.instances.get
notebooks.instances.getHealth
notebooks.
notebooks.instances.list
notebooks.locations.*
-
notebooks.locations.get
-
notebooks.locations.list
notebooks.operations.get
notebooks.operations.list
notebooks.runtimes.create
notebooks.runtimes.get
notebooks.
notebooks.runtimes.list
notebooks.schedules.create
notebooks.schedules.get
notebooks.
notebooks.schedules.list
resourcemanager.projects.get
resourcemanager.projects.list
serviceusage.quotas.get
serviceusage.services.get
serviceusage.services.list
Notebooks Viewer
( roles/
)
Read-only access to Notebooks, all resources.
Lowest-level resources where you can grant this role:
- Instance
aiplatform.
aiplatform.
aiplatform.schedules.get
aiplatform.schedules.list
compute.acceleratorTypes.*
-
compute.acceleratorTypes.get
-
compute.acceleratorTypes.list
compute.addresses.get
compute.addresses.list
compute.
compute.
compute.autoscalers.get
compute.autoscalers.list
compute.backendBuckets.get
compute.
compute.backendBuckets.list
compute.
compute.
compute.backendServices.get
compute.
compute.backendServices.list
compute.
compute.
compute.commitments.get
compute.commitments.list
compute.diskTypes.*
-
compute.diskTypes.get
-
compute.diskTypes.list
compute.disks.get
compute.disks.getIamPolicy
compute.disks.list
compute.
compute.disks.listTagBindings
compute.
compute.
compute.
compute.
compute.firewallPolicies.get
compute.
compute.firewallPolicies.list
compute.
compute.
compute.firewalls.get
compute.firewalls.list
compute.
compute.
compute.forwardingRules.get
compute.forwardingRules.list
compute.
compute.
compute.futureReservations.get
compute.
compute.
compute.globalAddresses.get
compute.globalAddresses.list
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.globalOperations.get
compute.
compute.globalOperations.list
compute.
compute.
compute.healthChecks.get
compute.healthChecks.list
compute.
compute.
compute.httpHealthChecks.get
compute.httpHealthChecks.list
compute.
compute.
compute.httpsHealthChecks.get
compute.httpsHealthChecks.list
compute.
compute.
compute.images.get
compute.images.getFromFamily
compute.images.getIamPolicy
compute.images.list
compute.
compute.images.listTagBindings
compute.
compute.
compute.
compute.
compute.instanceGroups.get
compute.instanceGroups.list
compute.
compute.
compute.instanceSettings.get
compute.instanceTemplates.get
compute.
compute.instanceTemplates.list
compute.instances.get
compute.
compute.
compute.instances.getIamPolicy
compute.
compute.
compute.
compute.
compute.instances.list
compute.
compute.
compute.
compute.instantSnapshots.get
compute.
compute.instantSnapshots.list
compute.
compute.
compute.
compute.
compute.
-
compute.
interconnectLocations. get -
compute.
interconnectLocations. list
compute.
-
compute.
interconnectRemoteLocations. get -
compute.
interconnectRemoteLocations. list
compute.interconnects.get
compute.interconnects.list
compute.
compute.
compute.licenseCodes.get
compute.
compute.licenseCodes.list
compute.licenses.get
compute.licenses.getIamPolicy
compute.licenses.list
compute.machineImages.get
compute.
compute.machineImages.list
compute.machineTypes.*
-
compute.machineTypes.get
-
compute.machineTypes.list
compute.multiMig.get
compute.multiMig.list
compute.networkAttachments.get
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.networkProfiles.*
-
compute.networkProfiles.get
-
compute.networkProfiles.list
compute.networks.get
compute.
compute.
compute.networks.list
compute.
compute.
compute.
compute.nodeGroups.get
compute.
compute.nodeGroups.list
compute.nodeTemplates.get
compute.
compute.nodeTemplates.list
compute.nodeTypes.*
-
compute.nodeTypes.get
-
compute.nodeTypes.list
compute.
compute.packetMirrorings.get
compute.packetMirrorings.list
compute.
compute.
compute.projects.get
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.regionHealthChecks.get
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.regionOperations.get
compute.
compute.regionOperations.list
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.regionSslPolicies.get
compute.regionSslPolicies.list
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.
compute.regionUrlMaps.get
compute.regionUrlMaps.list
compute.
compute.
compute.regionUrlMaps.validate
compute.regions.*
-
compute.regions.get
-
compute.regions.list
compute.reservations.get
compute.reservations.list
compute.resourcePolicies.get
compute.
compute.resourcePolicies.list
compute.routers.get
compute.routers.getRoutePolicy
compute.routers.list
compute.routers.listBgpRoutes
compute.
compute.
compute.
compute.routes.get
compute.routes.list
compute.
compute.routes.listTagBindings
compute.securityPolicies.get
compute.securityPolicies.list
compute.
compute.
compute.serviceAttachments.get
compute.
compute.
compute.
compute.
compute.snapshotSettings.get
compute.snapshots.get
compute.snapshots.getIamPolicy
compute.snapshots.list
compute.
compute.
compute.sslCertificates.get
compute.sslCertificates.list
compute.
compute.
compute.sslPolicies.get
compute.sslPolicies.list
compute.
compute.
compute.
compute.storagePools.get
compute.
compute.storagePools.list
compute.subnetworks.get
compute.
compute.subnetworks.list
compute.
compute.
compute.targetGrpcProxies.get
compute.targetGrpcProxies.list
compute.
compute.
compute.targetHttpProxies.get
compute.targetHttpProxies.list
compute.
compute.
compute.targetHttpsProxies.get
compute.
compute.
compute.
compute.targetInstances.get
compute.targetInstances.list
compute.
compute.
compute.targetPools.get
compute.targetPools.list
compute.
compute.
compute.targetSslProxies.get
compute.targetSslProxies.list
compute.
compute.
compute.targetTcpProxies.get
compute.targetTcpProxies.list
compute.
compute.
compute.targetVpnGateways.get
compute.targetVpnGateways.list
compute.
compute.
compute.urlMaps.get
compute.urlMaps.list
compute.
compute.
compute.urlMaps.validate
compute.vpnGateways.get
compute.vpnGateways.list
compute.
compute.
compute.vpnTunnels.get
compute.vpnTunnels.list
compute.
compute.
compute.zoneOperations.get
compute.
compute.zoneOperations.list
compute.zones.*
-
compute.zones.get
-
compute.zones.list
notebooks.environments.get
notebooks.
notebooks.environments.list
notebooks.executions.get
notebooks.
notebooks.executions.list
notebooks.
notebooks.instances.get
notebooks.instances.getHealth
notebooks.
notebooks.instances.list
notebooks.locations.*
-
notebooks.locations.get
-
notebooks.locations.list
notebooks.operations.get
notebooks.operations.list
notebooks.runtimes.get
notebooks.
notebooks.runtimes.list
notebooks.schedules.get
notebooks.
notebooks.schedules.list
resourcemanager.projects.get
resourcemanager.projects.list
serviceusage.quotas.get
serviceusage.services.get
serviceusage.services.list
Basic roles
The older Google Cloud basic roles are common to all Google Cloud services. These roles are Owner, Editor, and Viewer.
The basic roles provide permissions across Google Cloud, not just for Vertex AI Workbench. For this reason, you should use Vertex AI Workbench roles whenever possible.
Custom roles
If the predefined IAM roles for Vertex AI Workbench don't meet your needs, you can define custom roles. Custom roles enable you to choose a specific set of permissions, create your own role with those permissions, and grant the role to users in your organization. For more information, see Understanding IAM custom roles .
Project-level access versus resource-level policies
A resource inherits all policies from its ancestry
.
A policy
set at the resource level doesn't
affect project-level policies. You can use project-level access and
resource-level policies to customize permissions.
For example, you can grant users roles/notebooks.viewer
permissions
at the project level so that they can view all
Vertex AI Workbench resources in the project,
and then you can grant each user roles/notebooks.admin
permissions
on a specific user-managed notebooks instance so that they
have all of the admin
abilities to administer that instance.
Not all Vertex AI Workbench predefined roles and resources support resource-level policies. To see which roles can be used on which resources, view the descriptions for each role.
Changes to the ability to access a resource take time to propagate. For more information, see Access change propagation .
What's next
-
Grant a principal access to a user-managed notebooks instance.
-
Learn more about IAM .
-
Learn how to create and manage custom IAM roles .