This page lists the IAM roles and permissions for AI Platform. To search through all roles and permissions, see the role and permission index .
AI Platform roles
AI Platform Admin
( roles/
)
Provides full access to AI Platform resources, and its jobs, operations, models, and versions.
Lowest-level resources where you can grant this role:
- Project
ml.*
-
ml.jobs.cancel
-
ml.jobs.create
-
ml.jobs.get
-
ml.jobs.getIamPolicy
-
ml.jobs.list
-
ml.jobs.setIamPolicy
-
ml.jobs.update
-
ml.locations.get
-
ml.locations.list
-
ml.models.create
-
ml.models.delete
-
ml.models.get
-
ml.models.getIamPolicy
-
ml.models.list
-
ml.models.predict
-
ml.models.setIamPolicy
-
ml.models.update
-
ml.operations.cancel
-
ml.operations.get
-
ml.operations.list
-
ml.projects.getConfig
-
ml.studies.create
-
ml.studies.delete
-
ml.studies.get
-
ml.studies.getIamPolicy
-
ml.studies.list
-
ml.studies.setIamPolicy
-
ml.trials.create
-
ml.trials.delete
-
ml.trials.get
-
ml.trials.list
-
ml.trials.update
-
ml.versions.create
-
ml.versions.delete
-
ml.versions.get
-
ml.versions.list
-
ml.versions.predict
-
ml.versions.update
resourcemanager.projects.get
AI Platform Developer
( roles/
)
Provides ability to use AI Platform resources for creating models, versions, jobs for training and prediction, and sending online prediction requests.
Lowest-level resources where you can grant this role:
- Project
ml.jobs.create
ml.jobs.get
ml.jobs.getIamPolicy
ml.jobs.list
ml.locations.*
-
ml.locations.get
-
ml.locations.list
ml.models.create
ml.models.get
ml.models.getIamPolicy
ml.models.list
ml.models.predict
ml.operations.get
ml.operations.list
ml.projects.getConfig
ml.studies.*
-
ml.studies.create
-
ml.studies.delete
-
ml.studies.get
-
ml.studies.getIamPolicy
-
ml.studies.list
-
ml.studies.setIamPolicy
ml.trials.*
-
ml.trials.create
-
ml.trials.delete
-
ml.trials.get
-
ml.trials.list
-
ml.trials.update
ml.versions.get
ml.versions.list
ml.versions.predict
resourcemanager.projects.get
AI Platform Job Owner
( roles/
)
Provides full access to all permissions for a particular job resource. This role is automatically granted to the user who creates the job.
Lowest-level resources where you can grant this role:
- Job
ml.jobs.*
-
ml.jobs.cancel
-
ml.jobs.create
-
ml.jobs.get
-
ml.jobs.getIamPolicy
-
ml.jobs.list
-
ml.jobs.setIamPolicy
-
ml.jobs.update
AI Platform Model Owner
( roles/
)
Provides full access to the model and its versions. This role is automatically granted to the user who creates the model.
Lowest-level resources where you can grant this role:
- Model
ml.models.*
-
ml.models.create
-
ml.models.delete
-
ml.models.get
-
ml.models.getIamPolicy
-
ml.models.list
-
ml.models.predict
-
ml.models.setIamPolicy
-
ml.models.update
ml.versions.*
-
ml.versions.create
-
ml.versions.delete
-
ml.versions.get
-
ml.versions.list
-
ml.versions.predict
-
ml.versions.update
AI Platform Model User
( roles/
)
Provides permissions to read the model and its versions, and use them for prediction.
Lowest-level resources where you can grant this role:
- Model
ml.models.get
ml.models.predict
ml.versions.get
ml.versions.list
ml.versions.predict
AI Platform Operation Owner
( roles/
)
Provides full access to all permissions for a particular operation resource.
Lowest-level resources where you can grant this role:
- Operation
ml.operations.*
-
ml.operations.cancel
-
ml.operations.get
-
ml.operations.list
AI Platform Service Agent
( roles/
)
AI Platform service agent can act as log writer, Cloud Storage admin, Artifact Registry Reader, BigQuery writer, and service account access token creator.
artifactregistry.
artifactregistry.
artifactregistry.
-
artifactregistry.
dockerimages. get -
artifactregistry.
dockerimages. list
artifactregistry.
artifactregistry.files.get
artifactregistry.files.list
artifactregistry.locations.*
-
artifactregistry.locations.get
-
artifactregistry.
locations. list
artifactregistry.
-
artifactregistry.
mavenartifacts. get -
artifactregistry.
mavenartifacts. list
artifactregistry.npmpackages.*
-
artifactregistry.
npmpackages. get -
artifactregistry.
npmpackages. list
artifactregistry.packages.get
artifactregistry.packages.list
artifactregistry.
artifactregistry.
-
artifactregistry.
pythonpackages. get -
artifactregistry.
pythonpackages. list
artifactregistry.
artifactregistry.
artifactregistry.
artifactregistry.
artifactregistry.
artifactregistry.
artifactregistry.rules.get
artifactregistry.rules.list
artifactregistry.tags.get
artifactregistry.tags.list
artifactregistry.versions.get
artifactregistry.versions.list
bigquery.datasets.create
bigquery.datasets.get
bigquery.jobs.create
bigquery.jobs.get
bigquery.jobs.list
bigquery.jobs.update
bigquery.tables.create
bigquery.tables.get
bigquery.tables.getData
bigquery.tables.list
bigquery.tables.updateData
firebase.projects.get
iam.serviceAccounts.get
iam.
iam.
iam.
iam.serviceAccounts.list
iam.serviceAccounts.signBlob
iam.serviceAccounts.signJwt
logging.logEntries.create
logging.logEntries.route
monitoring.timeSeries.create
orgpolicy.policy.get
recommender.
-
recommender.
iamPolicyInsights. get -
recommender.
iamPolicyInsights. list -
recommender.
iamPolicyInsights. update
recommender.
-
recommender.
iamPolicyRecommendations. get -
recommender.
iamPolicyRecommendations. list -
recommender.
iamPolicyRecommendations. update
recommender.
-
recommender.
storageBucketSoftDeleteInsights. get -
recommender.
storageBucketSoftDeleteInsights. list -
recommender.
storageBucketSoftDeleteInsights. update
recommender.
-
recommender.
storageBucketSoftDeleteRecommendations. get -
recommender.
storageBucketSoftDeleteRecommendations. list -
recommender.
storageBucketSoftDeleteRecommendations. update
resourcemanager.
resourcemanager.projects.get
resourcemanager.projects.list
storage.anywhereCaches.*
-
storage.anywhereCaches.create
-
storage.anywhereCaches.disable
-
storage.anywhereCaches.get
-
storage.anywhereCaches.list
-
storage.anywhereCaches.pause
-
storage.anywhereCaches.resume
-
storage.anywhereCaches.update
storage.bucketOperations.*
-
storage.
bucketOperations. cancel -
storage.bucketOperations.get
-
storage.bucketOperations.list
storage.buckets.*
-
storage.buckets.create
-
storage.
buckets. createTagBinding -
storage.buckets.delete
-
storage.
buckets. deleteTagBinding -
storage.
buckets. enableObjectRetention -
storage.buckets.get
-
storage.buckets.getIamPolicy
-
storage.buckets.getIpFilter
-
storage.
buckets. getObjectInsights -
storage.buckets.list
-
storage.
buckets. listEffectiveTags -
storage.
buckets. listTagBindings -
storage.buckets.relocate
-
storage.buckets.restore
-
storage.buckets.setIamPolicy
-
storage.buckets.setIpFilter
-
storage.buckets.update
storage.folders.*
-
storage.folders.create
-
storage.folders.delete
-
storage.folders.get
-
storage.folders.list
-
storage.folders.rename
storage.intelligenceConfigs.*
-
storage.
intelligenceConfigs. get -
storage.
intelligenceConfigs. update
storage.managedFolders.*
-
storage.managedFolders.create
-
storage.managedFolders.delete
-
storage.managedFolders.get
-
storage.
managedFolders. getIamPolicy -
storage.managedFolders.list
-
storage.
managedFolders. setIamPolicy
storage.multipartUploads.*
-
storage.multipartUploads.abort
-
storage.
multipartUploads. create -
storage.multipartUploads.list
-
storage.
multipartUploads. listParts
storage.objects.*
-
storage.objects.create
-
storage.objects.delete
-
storage.objects.get
-
storage.objects.getIamPolicy
-
storage.objects.list
-
storage.objects.move
-
storage.
objects. overrideUnlockedRetention -
storage.objects.restore
-
storage.objects.setIamPolicy
-
storage.objects.setRetention
-
storage.objects.update
AI Platform Viewer
( roles/
)
Provides read-only access to AI Platform resources.
Lowest-level resources where you can grant this role:
- Project
ml.jobs.get
ml.jobs.list
ml.locations.*
-
ml.locations.get
-
ml.locations.list
ml.models.get
ml.models.list
ml.operations.get
ml.operations.list
ml.projects.getConfig
ml.studies.get
ml.studies.getIamPolicy
ml.studies.list
ml.trials.get
ml.trials.list
ml.versions.get
ml.versions.list
resourcemanager.projects.get
AI Platform permissions
ml.jobs.cancel
Owner
( roles/
)
Editor
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Job Owner
( roles/
)
ml.jobs.create
Owner
( roles/
)
Editor
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
AI Platform Job Owner
( roles/
)
Service agent roles
- AI Platform Notebooks Service Agent
(
roles/
)notebooks.serviceAgent - Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.jobs.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
AI Platform Job Owner
( roles/
)
AI Platform Viewer
( roles/
)
Service agent roles
- AI Platform Notebooks Service Agent
(
roles/
)notebooks.serviceAgent - Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.jobs.getIamPolicy
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
AI Platform Job Owner
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.jobs.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
AI Platform Job Owner
( roles/
)
AI Platform Viewer
( roles/
)
Service agent roles
- AI Platform Notebooks Service Agent
(
roles/
)notebooks.serviceAgent - Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.jobs.setIamPolicy
Owner
( roles/
)
Security Admin
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Job Owner
( roles/
)
ml.jobs.update
Owner
( roles/
)
Editor
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Job Owner
( roles/
)
ml.locations.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
AI Platform Viewer
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.locations.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
AI Platform Viewer
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.models.create
Owner
( roles/
)
Editor
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
AI Platform Model Owner
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.models.delete
Owner
( roles/
)
Editor
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Model Owner
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.models.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
AI Platform Model Owner
( roles/
)
AI Platform Model User
( roles/
)
AI Platform Viewer
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.models.getIamPolicy
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
AI Platform Model Owner
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.models.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
AI Platform Model Owner
( roles/
)
AI Platform Viewer
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent - Vertex AI Service Agent
(
roles/
)aiplatform.serviceAgent
ml.models.predict
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
AI Platform Model Owner
( roles/
)
AI Platform Model User
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.models.setIamPolicy
Owner
( roles/
)
Security Admin
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Model Owner
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.models.update
Owner
( roles/
)
Editor
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Model Owner
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.operations.cancel
Owner
( roles/
)
Editor
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Operation Owner
( roles/
)
ml.operations.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
AI Platform Operation Owner
( roles/
)
AI Platform Viewer
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent - Vertex AI Service Agent
(
roles/
)aiplatform.serviceAgent
ml.operations.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
AI Platform Operation Owner
( roles/
)
AI Platform Viewer
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.projects.getConfig
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
AI Platform Viewer
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.studies.create
Owner
( roles/
)
Editor
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.studies.delete
Owner
( roles/
)
Editor
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.studies.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
AI Platform Viewer
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.studies.getIamPolicy
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
AI Platform Viewer
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.studies.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
AI Platform Viewer
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.studies.setIamPolicy
Owner
( roles/
)
Security Admin
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.trials.create
Owner
( roles/
)
Editor
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.trials.delete
Owner
( roles/
)
Editor
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.trials.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
AI Platform Viewer
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.trials.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
AI Platform Viewer
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.trials.update
Owner
( roles/
)
Editor
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.versions.create
Owner
( roles/
)
Editor
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Model Owner
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.versions.delete
Owner
( roles/
)
Editor
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Model Owner
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.versions.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
AI Platform Model Owner
( roles/
)
AI Platform Model User
( roles/
)
AI Platform Viewer
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent - Vertex AI Service Agent
(
roles/
)aiplatform.serviceAgent
ml.versions.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
AI Platform Model Owner
( roles/
)
AI Platform Model User
( roles/
)
AI Platform Viewer
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent - Vertex AI Service Agent
(
roles/
)aiplatform.serviceAgent
ml.versions.predict
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Support User
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Developer
( roles/
)
AI Platform Model Owner
( roles/
)
AI Platform Model User
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent
ml.versions.update
Owner
( roles/
)
Editor
( roles/
)
AI Platform Admin
( roles/
)
AI Platform Model Owner
( roles/
)
Service agent roles
- Data Labeling Service Agent
(
roles/
)datalabeling.serviceAgent