This page lists the IAM roles and permissions for Document AI. To search through all roles and permissions, see the role and permission index .
Document AI roles
Document AI Administrator Beta
( roles/
)
Grants full access to all resources in Document AI
documentai.*
-
documentai.dataLabelingJobs. cancel -
documentai.dataLabelingJobs. create -
documentai.dataLabelingJobs. list -
documentai.datasetSchemas.get -
documentai.datasetSchemas. update -
documentai.datasets. createDocuments -
documentai.datasets. deleteDocuments -
documentai.datasets.get -
documentai.datasets. getDocuments -
documentai.datasets. listDocuments -
documentai.datasets.update -
documentai.datasets. updateDocuments -
documentai.evaluationDocuments. get -
documentai.evaluations.create -
documentai.evaluations.get -
documentai.evaluations.list -
documentai.humanReviewConfigs. get -
documentai.humanReviewConfigs. review -
documentai.humanReviewConfigs. update -
documentai.labelerPools.create -
documentai.labelerPools.delete -
documentai.labelerPools.get -
documentai.labelerPools.list -
documentai.locations.get -
documentai.locations.list -
documentai.operations. getLegacy -
documentai.processedDocumentsSets. get -
documentai.processedDocumentsSets. getDocuments -
documentai.processedDocumentsSets. listDocuments -
documentai.processorTypes.get -
documentai.processorTypes.list -
documentai.processorVersions. create -
documentai.processorVersions. delete -
documentai.processorVersions. get -
documentai.processorVersions. list -
documentai.processorVersions. processBatch -
documentai.processorVersions. processOnline -
documentai.processorVersions. update -
documentai.processors.create -
documentai.processors.delete -
documentai.processors. fetchHumanReviewDetails -
documentai.processors.get -
documentai.processors.list -
documentai.processors. processBatch -
documentai.processors. processOnline -
documentai.processors.update
resourcemanager.projects.get
resourcemanager.projects.list
Document AI API User Beta
( roles/
)
Grants access to process documents in Document AI
documentai.
documentai.
documentai.
documentai.
documentai.
documentai.
Document AI Editor Beta
( roles/
)
Grants access to use all resources in Document AI
documentai.*
-
documentai.dataLabelingJobs. cancel -
documentai.dataLabelingJobs. create -
documentai.dataLabelingJobs. list -
documentai.datasetSchemas.get -
documentai.datasetSchemas. update -
documentai.datasets. createDocuments -
documentai.datasets. deleteDocuments -
documentai.datasets.get -
documentai.datasets. getDocuments -
documentai.datasets. listDocuments -
documentai.datasets.update -
documentai.datasets. updateDocuments -
documentai.evaluationDocuments. get -
documentai.evaluations.create -
documentai.evaluations.get -
documentai.evaluations.list -
documentai.humanReviewConfigs. get -
documentai.humanReviewConfigs. review -
documentai.humanReviewConfigs. update -
documentai.labelerPools.create -
documentai.labelerPools.delete -
documentai.labelerPools.get -
documentai.labelerPools.list -
documentai.locations.get -
documentai.locations.list -
documentai.operations. getLegacy -
documentai.processedDocumentsSets. get -
documentai.processedDocumentsSets. getDocuments -
documentai.processedDocumentsSets. listDocuments -
documentai.processorTypes.get -
documentai.processorTypes.list -
documentai.processorVersions. create -
documentai.processorVersions. delete -
documentai.processorVersions. get -
documentai.processorVersions. list -
documentai.processorVersions. processBatch -
documentai.processorVersions. processOnline -
documentai.processorVersions. update -
documentai.processors.create -
documentai.processors.delete -
documentai.processors. fetchHumanReviewDetails -
documentai.processors.get -
documentai.processors.list -
documentai.processors. processBatch -
documentai.processors. processOnline -
documentai.processors.update
resourcemanager.projects.get
resourcemanager.projects.list
Document AI Viewer Beta
( roles/
)
Grants access to view all resources and process documents in Document AI
documentai.
documentai.datasetSchemas.get
documentai.datasets.get
documentai.
documentai.
documentai.
documentai.evaluations.get
documentai.evaluations.list
documentai.
documentai.
documentai.labelerPools.get
documentai.labelerPools.list
documentai.locations.*
-
documentai.locations.get -
documentai.locations.list
documentai.
documentai.
-
documentai.processedDocumentsSets. get -
documentai.processedDocumentsSets. getDocuments -
documentai.processedDocumentsSets. listDocuments
documentai.processorTypes.*
-
documentai.processorTypes.get -
documentai.processorTypes.list
documentai.
documentai.
documentai.
documentai.
documentai.
documentai.processors.get
documentai.processors.list
documentai.
documentai.
resourcemanager.projects.get
resourcemanager.projects.list
DocumentAI Core Service Agent
( roles/
)
Gives DocumentAI Core Service Account access to consumer resources.
automl.models.predict
documentai.
storage.buckets.get
storage.objects.create
storage.objects.delete
storage.objects.get
storage.objects.list
storage.objects.update
Document AI permissions
documentai.
Owner
( roles/
)
Editor
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
documentai.
Owner
( roles/
)
Editor
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
documentai.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
documentai.datasetSchemas.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Support User
( roles/
)
documentai.
Owner
( roles/
)
Editor
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
documentai.
Owner
( roles/
)
Editor
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
Service agent roles
- Content Warehouse Service Agent
(
roles/)contentwarehouse.serviceAgent
documentai.
Owner
( roles/
)
Editor
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
documentai.datasets.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Support User
( roles/
)
documentai.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Support User
( roles/
)
documentai.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Support User
( roles/
)
documentai.datasets.update
Owner
( roles/
)
Editor
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
documentai.
Owner
( roles/
)
Editor
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
documentai.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Support User
( roles/
)
documentai.evaluations.create
Owner
( roles/
)
Editor
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
documentai.evaluations.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Support User
( roles/
)
documentai.evaluations.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
documentai.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Support User
( roles/
)
documentai.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI API User
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Support User
( roles/
)
Service agent roles
- DocumentAI Core Service Agent
(
roles/)documentaicore.serviceAgent
documentai.
Owner
( roles/
)
Editor
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
documentai.labelerPools.create
Owner
( roles/
)
Editor
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
documentai.labelerPools.delete
Owner
( roles/
)
Editor
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
documentai.labelerPools.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Support User
( roles/
)
documentai.labelerPools.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
documentai.locations.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Support User
( roles/
)
documentai.locations.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
documentai.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI API User
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Support User
( roles/
)
documentai.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Support User
( roles/
)
documentai.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Support User
( roles/
)
documentai.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Support User
( roles/
)
documentai.processorTypes.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Support User
( roles/
)
documentai.processorTypes.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
documentai.
Owner
( roles/
)
Editor
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
documentai.
Owner
( roles/
)
Editor
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
documentai.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Support User
( roles/
)
documentai.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
documentai.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI API User
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Support User
( roles/
)
documentai.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI API User
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Vertex AI RAG Data Service Agent
(
roles/)aiplatform.ragServiceAgent
documentai.
Owner
( roles/
)
Editor
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
documentai.processors.create
Owner
( roles/
)
Editor
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
documentai.processors.delete
Owner
( roles/
)
Editor
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
documentai.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Support User
( roles/
)
documentai.processors.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Content Warehouse Service Agent
(
roles/)contentwarehouse.serviceAgent - Vertex AI RAG Data Service Agent
(
roles/)aiplatform.ragServiceAgent
documentai.processors.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
documentai.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI API User
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Content Warehouse Service Agent
(
roles/)contentwarehouse.serviceAgent
documentai.
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Document AI Administrator
( roles/
)
Document AI API User
( roles/
)
Document AI Editor
( roles/
)
Document AI Viewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Vertex AI RAG Data Service Agent
(
roles/)aiplatform.ragServiceAgent
documentai.processors.update
Owner
( roles/
)
Editor
( roles/
)
Document AI Administrator
( roles/
)
Document AI Editor
( roles/
)
