User-managed notebooks access control
Vertex AI Workbench user-managed notebooks is deprecated . On April 14, 2025, support for user-managed notebooks ended and the ability to create user-managed notebooks instances was removed. Existing instances will continue to function until March 30, 2026, but patches, updates, and upgrades won't be available. To continue using Vertex AI Workbench, we recommend that you migrate your user-managed notebooks instances to Vertex AI Workbench instances .
This page describes how to use Identity and Access Management (IAM) and an access mode to manage access to Vertex AI Workbench user-managed notebooks resources. To manage access to Vertex AI resources, see the Vertex AI page on access control .
Vertex AI Workbench uses IAM to manage access to user-managed notebooks instances and an access mode to manage access to each instance's JupyterLab interface.
Control access to an instance with IAM
You can manage access to a user-managed notebooks instance at the project level or per instance.
- To grant access to resources at the project level, assign one or more roles to a principal (user, group, or service account ).
- To grant access to a specific instance, set an IAM policy on that resource. The policy defines which roles are assigned to which principals. To learn more, see Manage access to a user-managed notebooks instance .
Access to an instance can include a broad range of abilities. For example, you might grant a principal the ability to start, stop, and upgrade an instance. However, even granting a principal full access to a user-managed notebooks instance doesn't grant the ability to use the instance's JupyterLab interface. See the following section.
Control access to an instance's JupyterLab interface with the access mode
You control access to a user-managed notebooks instance's JupyterLab interface through the instance's access mode. You set a JupyterLab access mode when you create a user-managed notebooks instance. The access mode can't be changed after the notebook is created.
The JupyterLab access mode determines who can use the instance's JupyterLab interface. The access mode also determines which credentials are used when your instance interacts with other Google Cloud services. To learn more, see Manage access to a user-managed notebooks instance's JupyterLab interface .
Types of IAM roles
There are different types of IAM roles that can be used in Vertex AI Workbench:
-  Predefined roles let you grant a set of related permissions to your Vertex AI Workbench resources at the project level. 
-  Basic roles (Owner, Editor, and Viewer) provide access control to your Vertex AI Workbench resources at the project level, and are common to all Google Cloud services. 
-  Custom roles enable you to choose a specific set of permissions, create your own role with those permissions, and grant the role to users in your organization. 
To add, update, or remove these roles in your Vertex AI Workbench project, see the documentation on granting, changing, and revoking access .
Predefined user-managed notebooks IAM roles
Vertex AI Workbench resources are managed through the Notebooks API. Therefore, Notebooks roles define permissions and access to the use of Vertex AI Workbench.
Notebooks Admin
( roles/  
)
Full access to Notebooks, all resources.
Lowest-level resources where you can grant this role:
- Instance
  aiplatform.  
 
-  aiplatform.notebookExecutionJobs. create 
-  aiplatform.notebookExecutionJobs. delete 
-  aiplatform.notebookExecutionJobs. get 
-  aiplatform.notebookExecutionJobs. list 
 aiplatform.operations.list 
 aiplatform.pipelineJobs.create 
  aiplatform.schedules.* 
 
-  aiplatform.schedules.create
-  aiplatform.schedules.delete
-  aiplatform.schedules.get
-  aiplatform.schedules.list
-  aiplatform.schedules.update
  compute.acceleratorTypes.* 
 
-  compute.acceleratorTypes.get
-  compute.acceleratorTypes.list
 compute.addresses.get 
 compute.addresses.list 
 compute.  
 compute.  
 compute.autoscalers.get 
 compute.autoscalers.list 
 compute.backendBuckets.get 
 compute.  
 compute.backendBuckets.list 
 compute.  
 compute.  
 compute.backendServices.get 
 compute.  
 compute.backendServices.list 
 compute.  
 compute.  
 compute.commitments.get 
 compute.commitments.list 
 compute.crossSiteNetworks.get 
 compute.crossSiteNetworks.list 
 compute.diskSettings.get 
  compute.diskTypes.* 
 
-  compute.diskTypes.get
-  compute.diskTypes.list
 compute.disks.get 
 compute.disks.getIamPolicy 
 compute.disks.list 
 compute.  
 compute.disks.listTagBindings 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.firewallPolicies.get 
 compute.  
 compute.firewallPolicies.list 
 compute.  
 compute.  
 compute.firewalls.get 
 compute.firewalls.list 
 compute.  
 compute.  
 compute.forwardingRules.get 
 compute.forwardingRules.list 
 compute.  
 compute.  
 compute.futureReservations.get 
 compute.  
 compute.  
 compute.globalAddresses.get 
 compute.globalAddresses.list 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.globalOperations.get 
 compute.  
 compute.globalOperations.list 
 compute.  
 compute.  
 compute.healthChecks.get 
 compute.healthChecks.list 
 compute.  
 compute.  
 compute.httpHealthChecks.get 
 compute.httpHealthChecks.list 
 compute.  
 compute.  
 compute.httpsHealthChecks.get 
 compute.httpsHealthChecks.list 
 compute.  
 compute.  
 compute.images.get 
 compute.images.getFromFamily 
 compute.images.getIamPolicy 
 compute.images.list 
 compute.  
 compute.images.listTagBindings 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.instanceGroups.get 
 compute.instanceGroups.list 
 compute.  
 compute.  
 compute.instanceSettings.get 
 compute.instanceTemplates.get 
 compute.  
 compute.instanceTemplates.list 
 compute.instances.get 
 compute.  
 compute.  
 compute.instances.getIamPolicy 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.instances.list 
 compute.  
 compute.  
 compute.  
 compute.instantSnapshots.get 
 compute.  
 compute.instantSnapshots.list 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.interconnectGroups.get 
 compute.  
  compute.  
 
-  compute.interconnectLocations. get 
-  compute.interconnectLocations. list 
  compute.  
 
-  compute.interconnectRemoteLocations. get 
-  compute.interconnectRemoteLocations. list 
 compute.interconnects.get 
 compute.interconnects.list 
 compute.  
 compute.  
 compute.licenseCodes.get 
 compute.  
 compute.licenseCodes.list 
 compute.licenses.get 
 compute.licenses.getIamPolicy 
 compute.licenses.list 
 compute.machineImages.get 
 compute.  
 compute.machineImages.list 
  compute.machineTypes.* 
 
-  compute.machineTypes.get
-  compute.machineTypes.list
 compute.multiMig.get 
 compute.multiMig.list 
  compute.multiMigMembers.* 
 
-  compute.multiMigMembers.get
-  compute.multiMigMembers.list
 compute.networkAttachments.get 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
  compute.networkProfiles.* 
 
-  compute.networkProfiles.get
-  compute.networkProfiles.list
 compute.networks.get 
 compute.  
 compute.  
 compute.networks.list 
 compute.  
 compute.  
 compute.  
 compute.nodeGroups.get 
 compute.  
 compute.nodeGroups.list 
 compute.nodeTemplates.get 
 compute.  
 compute.nodeTemplates.list 
  compute.nodeTypes.* 
 
-  compute.nodeTypes.get
-  compute.nodeTypes.list
 compute.  
 compute.packetMirrorings.get 
 compute.packetMirrorings.list 
 compute.  
 compute.  
 compute.previewFeatures.get 
 compute.previewFeatures.list 
 compute.projects.get 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.regionHealthChecks.get 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.regionOperations.get 
 compute.  
 compute.regionOperations.list 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.regionSslPolicies.get 
 compute.regionSslPolicies.list 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.regionUrlMaps.get 
 compute.regionUrlMaps.list 
 compute.  
 compute.  
 compute.regionUrlMaps.validate 
  compute.regions.* 
 
-  compute.regions.get
-  compute.regions.list
 compute.reservationBlocks.get 
 compute.reservationBlocks.list 
 compute.  
 compute.  
 compute.reservations.get 
 compute.reservations.list 
 compute.resourcePolicies.get 
 compute.  
 compute.resourcePolicies.list 
 compute.rolloutPlans.get 
 compute.rolloutPlans.list 
 compute.rollouts.get 
 compute.rollouts.list 
 compute.routers.get 
 compute.routers.getRoutePolicy 
 compute.routers.list 
 compute.routers.listBgpRoutes 
 compute.  
 compute.  
 compute.  
 compute.routes.get 
 compute.routes.list 
 compute.  
 compute.routes.listTagBindings 
 compute.securityPolicies.get 
 compute.securityPolicies.list 
 compute.  
 compute.  
 compute.serviceAttachments.get 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.snapshotSettings.get 
 compute.snapshots.get 
 compute.snapshots.getIamPolicy 
 compute.snapshots.list 
 compute.  
 compute.  
 compute.spotAssistants.get 
 compute.sslCertificates.get 
 compute.sslCertificates.list 
 compute.  
 compute.  
 compute.sslPolicies.get 
 compute.sslPolicies.list 
 compute.  
 compute.  
 compute.  
 compute.storagePools.get 
 compute.  
 compute.storagePools.list 
 compute.subnetworks.get 
 compute.  
 compute.subnetworks.list 
 compute.  
 compute.  
 compute.targetGrpcProxies.get 
 compute.targetGrpcProxies.list 
 compute.  
 compute.  
 compute.targetHttpProxies.get 
 compute.targetHttpProxies.list 
 compute.  
 compute.  
 compute.targetHttpsProxies.get 
 compute.  
 compute.  
 compute.  
 compute.targetInstances.get 
 compute.targetInstances.list 
 compute.  
 compute.  
 compute.targetPools.get 
 compute.targetPools.list 
 compute.  
 compute.  
 compute.targetSslProxies.get 
 compute.targetSslProxies.list 
 compute.  
 compute.  
 compute.targetTcpProxies.get 
 compute.targetTcpProxies.list 
 compute.  
 compute.  
 compute.targetVpnGateways.get 
 compute.targetVpnGateways.list 
 compute.  
 compute.  
 compute.urlMaps.get 
 compute.urlMaps.list 
 compute.  
 compute.  
 compute.urlMaps.validate 
 compute.vpnGateways.get 
 compute.vpnGateways.list 
 compute.  
 compute.  
 compute.vpnTunnels.get 
 compute.vpnTunnels.list 
 compute.  
 compute.  
 compute.wireGroups.get 
 compute.wireGroups.list 
 compute.zoneOperations.get 
 compute.  
 compute.zoneOperations.list 
  compute.zones.* 
 
-  compute.zones.get
-  compute.zones.list
  notebooks.* 
 
-  notebooks.environments.create
-  notebooks.environments.delete
-  notebooks.environments.get
-  notebooks.environments. getIamPolicy 
-  notebooks.environments.list
-  notebooks.environments. setIamPolicy 
-  notebooks.executions.create
-  notebooks.executions.delete
-  notebooks.executions.get
-  notebooks.executions. getIamPolicy 
-  notebooks.executions.list
-  notebooks.executions. setIamPolicy 
-  notebooks.instances. checkUpgradability 
-  notebooks.instances.create
-  notebooks.instances.delete
-  notebooks.instances.diagnose
-  notebooks.instances.get
-  notebooks.instances.getHealth
-  notebooks.instances. getIamPolicy 
-  notebooks.instances.list
-  notebooks.instances.reset
-  notebooks.instances. setAccelerator 
-  notebooks.instances. setIamPolicy 
-  notebooks.instances.setLabels
-  notebooks.instances. setMachineType 
-  notebooks.instances.start
-  notebooks.instances.stop
-  notebooks.instances.update
-  notebooks.instances. updateConfig 
-  notebooks.instances. updateShieldInstanceConfig 
-  notebooks.instances.upgrade
-  notebooks.instances.use
-  notebooks.locations.get
-  notebooks.locations.list
-  notebooks.operations.cancel
-  notebooks.operations.delete
-  notebooks.operations.get
-  notebooks.operations.list
-  notebooks.runtimes.create
-  notebooks.runtimes.delete
-  notebooks.runtimes.diagnose
-  notebooks.runtimes.get
-  notebooks.runtimes. getIamPolicy 
-  notebooks.runtimes.list
-  notebooks.runtimes.reset
-  notebooks.runtimes. setIamPolicy 
-  notebooks.runtimes.start
-  notebooks.runtimes.stop
-  notebooks.runtimes.switch
-  notebooks.runtimes.update
-  notebooks.runtimes.upgrade
-  notebooks.schedules.create
-  notebooks.schedules.delete
-  notebooks.schedules.get
-  notebooks.schedules. getIamPolicy 
-  notebooks.schedules.list
-  notebooks.schedules. setIamPolicy 
 resourcemanager.projects.get 
 resourcemanager.projects.list 
 serviceusage.quotas.get 
 serviceusage.services.get 
 serviceusage.services.list 
Notebooks Legacy Admin
( roles/  
)
Full access to Notebooks all resources through compute API.
 backupdr.  
 backupdr.  
 backupdr.  
 backupdr.  
 backupdr.  
 backupdr.  
 backupdr.  
 backupdr.  
 backupdr.  
 backupdr.  
 backupdr.  
 backupdr.backupPlans.get 
 backupdr.backupPlans.list 
 backupdr.  
 backupdr.  
 backupdr.backupVaults.get 
 backupdr.backupVaults.list 
 backupdr.locations.list 
 backupdr.operations.get 
 backupdr.operations.list 
 backupdr.  
  cloudkms.keyHandles.* 
 
-  cloudkms.keyHandles.create
-  cloudkms.keyHandles.get
-  cloudkms.keyHandles.list
 cloudkms.operations.get 
 cloudkms.  
  compute.* 
 
-  compute.acceleratorTypes.get
-  compute.acceleratorTypes.list
-  compute.addresses.create
-  compute.addresses. createInternal 
-  compute.addresses. createTagBinding 
-  compute.addresses.delete
-  compute.addresses. deleteInternal 
-  compute.addresses. deleteTagBinding 
-  compute.addresses.get
-  compute.addresses.list
-  compute.addresses. listEffectiveTags 
-  compute.addresses. listTagBindings 
-  compute.addresses.setLabels
-  compute.addresses.use
-  compute.addresses.useInternal
-  compute.advice.calendarMode
-  compute.autoscalers.create
-  compute.autoscalers.delete
-  compute.autoscalers.get
-  compute.autoscalers.list
-  compute.autoscalers.update
-  compute.backendBuckets. addSignedUrlKey 
-  compute.backendBuckets.create
-  compute.backendBuckets. createTagBinding 
-  compute.backendBuckets.delete
-  compute.backendBuckets. deleteSignedUrlKey 
-  compute.backendBuckets. deleteTagBinding 
-  compute.backendBuckets.get
-  compute.backendBuckets. getIamPolicy 
-  compute.backendBuckets.list
-  compute.backendBuckets. listEffectiveTags 
-  compute.backendBuckets. listTagBindings 
-  compute.backendBuckets. setIamPolicy 
-  compute.backendBuckets. setSecurityPolicy 
-  compute.backendBuckets.update
-  compute.backendBuckets.use
-  compute.backendServices. addSignedUrlKey 
-  compute.backendServices.create
-  compute.backendServices. createTagBinding 
-  compute.backendServices.delete
-  compute.backendServices. deleteSignedUrlKey 
-  compute.backendServices. deleteTagBinding 
-  compute.backendServices.get
-  compute.backendServices. getIamPolicy 
-  compute.backendServices.list
-  compute.backendServices. listEffectiveTags 
-  compute.backendServices. listTagBindings 
-  compute.backendServices. setIamPolicy 
-  compute.backendServices. setSecurityPolicy 
-  compute.backendServices.update
-  compute.backendServices.use
-  compute.commitments.create
-  compute.commitments.get
-  compute.commitments.list
-  compute.commitments.update
-  compute.commitments. updateReservations 
-  compute.crossSiteNetworks. create 
-  compute.crossSiteNetworks. delete 
-  compute.crossSiteNetworks.get
-  compute.crossSiteNetworks.list
-  compute.crossSiteNetworks. update 
-  compute.diskSettings.get
-  compute.diskSettings.update
-  compute.diskTypes.get
-  compute.diskTypes.list
-  compute.disks. addResourcePolicies 
-  compute.disks.create
-  compute.disks.createSnapshot
-  compute.disks.createTagBinding
-  compute.disks.delete
-  compute.disks.deleteTagBinding
-  compute.disks.get
-  compute.disks.getIamPolicy
-  compute.disks.list
-  compute.disks. listEffectiveTags 
-  compute.disks.listTagBindings
-  compute.disks. removeResourcePolicies 
-  compute.disks.resize
-  compute.disks.setIamPolicy
-  compute.disks.setLabels
-  compute.disks. startAsyncReplication 
-  compute.disks. stopAsyncReplication 
-  compute.disks. stopGroupAsyncReplication 
-  compute.disks.update
-  compute.disks.updateKmsKey
-  compute.disks.use
-  compute.disks.useReadOnly
-  compute.externalVpnGateways. create 
-  compute.externalVpnGateways. createTagBinding 
-  compute.externalVpnGateways. delete 
-  compute.externalVpnGateways. deleteTagBinding 
-  compute.externalVpnGateways. get 
-  compute.externalVpnGateways. list 
-  compute.externalVpnGateways. listEffectiveTags 
-  compute.externalVpnGateways. listTagBindings 
-  compute.externalVpnGateways. setLabels 
-  compute.externalVpnGateways. use 
-  compute.firewallPolicies. cloneRules 
-  compute.firewallPolicies. copyRules 
-  compute.firewallPolicies. create 
-  compute.firewallPolicies. createTagBinding 
-  compute.firewallPolicies. delete 
-  compute.firewallPolicies. deleteTagBinding 
-  compute.firewallPolicies.get
-  compute.firewallPolicies. getIamPolicy 
-  compute.firewallPolicies.list
-  compute.firewallPolicies. listEffectiveTags 
-  compute.firewallPolicies. listTagBindings 
-  compute.firewallPolicies.move
-  compute.firewallPolicies. setIamPolicy 
-  compute.firewallPolicies. update 
-  compute.firewallPolicies.use
-  compute.firewalls.create
-  compute.firewalls. createTagBinding 
-  compute.firewalls.delete
-  compute.firewalls. deleteTagBinding 
-  compute.firewalls.get
-  compute.firewalls.list
-  compute.firewalls. listEffectiveTags 
-  compute.firewalls. listTagBindings 
-  compute.firewalls.update
-  compute.forwardingRules.create
-  compute.forwardingRules. createTagBinding 
-  compute.forwardingRules.delete
-  compute.forwardingRules. deleteTagBinding 
-  compute.forwardingRules.get
-  compute.forwardingRules.list
-  compute.forwardingRules. listEffectiveTags 
-  compute.forwardingRules. listTagBindings 
-  compute.forwardingRules. pscCreate 
-  compute.forwardingRules. pscDelete 
-  compute.forwardingRules. pscSetLabels 
-  compute.forwardingRules. pscUpdate 
-  compute.forwardingRules. setLabels 
-  compute.forwardingRules. setTarget 
-  compute.forwardingRules.update
-  compute.forwardingRules.use
-  compute.futureReservations. cancel 
-  compute.futureReservations. create 
-  compute.futureReservations. delete 
-  compute.futureReservations.get
-  compute.futureReservations. getIamPolicy 
-  compute.futureReservations. list 
-  compute.futureReservations. setIamPolicy 
-  compute.futureReservations. update 
-  compute.globalAddresses.create
-  compute.globalAddresses. createInternal 
-  compute.globalAddresses. createTagBinding 
-  compute.globalAddresses.delete
-  compute.globalAddresses. deleteInternal 
-  compute.globalAddresses. deleteTagBinding 
-  compute.globalAddresses.get
-  compute.globalAddresses.list
-  compute.globalAddresses. listEffectiveTags 
-  compute.globalAddresses. listTagBindings 
-  compute.globalAddresses. setLabels 
-  compute.globalAddresses.use
-  compute.globalForwardingRules. create 
-  compute.globalForwardingRules. createTagBinding 
-  compute.globalForwardingRules. delete 
-  compute.globalForwardingRules. deleteTagBinding 
-  compute.globalForwardingRules. get 
-  compute.globalForwardingRules. list 
-  compute.globalForwardingRules. listEffectiveTags 
-  compute.globalForwardingRules. listTagBindings 
-  compute.globalForwardingRules. pscCreate 
-  compute.globalForwardingRules. pscDelete 
-  compute.globalForwardingRules. pscSetLabels 
-  compute.globalForwardingRules. pscUpdate 
-  compute.globalForwardingRules. setLabels 
-  compute.globalForwardingRules. setTarget 
-  compute.globalForwardingRules. update 
-  compute.globalNetworkEndpointGroups. attachNetworkEndpoints 
-  compute.globalNetworkEndpointGroups. create 
-  compute.globalNetworkEndpointGroups. createTagBinding 
-  compute.globalNetworkEndpointGroups. delete 
-  compute.globalNetworkEndpointGroups. deleteTagBinding 
-  compute.globalNetworkEndpointGroups. detachNetworkEndpoints 
-  compute.globalNetworkEndpointGroups. get 
-  compute.globalNetworkEndpointGroups. list 
-  compute.globalNetworkEndpointGroups. listEffectiveTags 
-  compute.globalNetworkEndpointGroups. listTagBindings 
-  compute.globalNetworkEndpointGroups. use 
-  compute.globalOperations. delete 
-  compute.globalOperations.get
-  compute.globalOperations. getIamPolicy 
-  compute.globalOperations.list
-  compute.globalOperations. setIamPolicy 
-  compute.globalPublicDelegatedPrefixes. create 
-  compute.globalPublicDelegatedPrefixes. delete 
-  compute.globalPublicDelegatedPrefixes. get 
-  compute.globalPublicDelegatedPrefixes. list 
-  compute.globalPublicDelegatedPrefixes. updatePolicy 
-  compute.healthChecks.create
-  compute.healthChecks. createTagBinding 
-  compute.healthChecks.delete
-  compute.healthChecks. deleteTagBinding 
-  compute.healthChecks.get
-  compute.healthChecks.list
-  compute.healthChecks. listEffectiveTags 
-  compute.healthChecks. listTagBindings 
-  compute.healthChecks.update
-  compute.healthChecks.use
-  compute.healthChecks. useReadOnly 
-  compute.httpHealthChecks. create 
-  compute.httpHealthChecks. createTagBinding 
-  compute.httpHealthChecks. delete 
-  compute.httpHealthChecks. deleteTagBinding 
-  compute.httpHealthChecks.get
-  compute.httpHealthChecks.list
-  compute.httpHealthChecks. listEffectiveTags 
-  compute.httpHealthChecks. listTagBindings 
-  compute.httpHealthChecks. update 
-  compute.httpHealthChecks.use
-  compute.httpHealthChecks. useReadOnly 
-  compute.httpsHealthChecks. create 
-  compute.httpsHealthChecks. createTagBinding 
-  compute.httpsHealthChecks. delete 
-  compute.httpsHealthChecks. deleteTagBinding 
-  compute.httpsHealthChecks.get
-  compute.httpsHealthChecks.list
-  compute.httpsHealthChecks. listEffectiveTags 
-  compute.httpsHealthChecks. listTagBindings 
-  compute.httpsHealthChecks. update 
-  compute.httpsHealthChecks.use
-  compute.httpsHealthChecks. useReadOnly 
-  compute.images.create
-  compute.images. createTagBinding 
-  compute.images.delete
-  compute.images. deleteTagBinding 
-  compute.images.deprecate
-  compute.images.get
-  compute.images.getFromFamily
-  compute.images.getIamPolicy
-  compute.images.list
-  compute.images. listEffectiveTags 
-  compute.images.listTagBindings
-  compute.images.setIamPolicy
-  compute.images.setLabels
-  compute.images.update
-  compute.images.useReadOnly
-  compute.instanceGroupManagers. create 
-  compute.instanceGroupManagers. createTagBinding 
-  compute.instanceGroupManagers. delete 
-  compute.instanceGroupManagers. deleteTagBinding 
-  compute.instanceGroupManagers. get 
-  compute.instanceGroupManagers. list 
-  compute.instanceGroupManagers. listEffectiveTags 
-  compute.instanceGroupManagers. listTagBindings 
-  compute.instanceGroupManagers. update 
-  compute.instanceGroupManagers. use 
-  compute.instanceGroups.create
-  compute.instanceGroups. createTagBinding 
-  compute.instanceGroups.delete
-  compute.instanceGroups. deleteTagBinding 
-  compute.instanceGroups.get
-  compute.instanceGroups.list
-  compute.instanceGroups. listEffectiveTags 
-  compute.instanceGroups. listTagBindings 
-  compute.instanceGroups.update
-  compute.instanceGroups.use
-  compute.instanceSettings.get
-  compute.instanceSettings. update 
-  compute.instanceTemplates. create 
-  compute.instanceTemplates. delete 
-  compute.instanceTemplates.get
-  compute.instanceTemplates. getIamPolicy 
-  compute.instanceTemplates.list
-  compute.instanceTemplates. setIamPolicy 
-  compute.instanceTemplates. useReadOnly 
-  compute.instances. addAccessConfig 
-  compute.instances. addNetworkInterface 
-  compute.instances. addResourcePolicies 
-  compute.instances.attachDisk
-  compute.instances.create
-  compute.instances. createTagBinding 
-  compute.instances.delete
-  compute.instances. deleteAccessConfig 
-  compute.instances. deleteNetworkInterface 
-  compute.instances. deleteTagBinding 
-  compute.instances.detachDisk
-  compute.instances.get
-  compute.instances. getEffectiveFirewalls 
-  compute.instances. getGuestAttributes 
-  compute.instances.getIamPolicy
-  compute.instances. getScreenshot 
-  compute.instances. getSerialPortOutput 
-  compute.instances. getShieldedInstanceIdentity 
-  compute.instances. getShieldedVmIdentity 
-  compute.instances.list
-  compute.instances. listEffectiveTags 
-  compute.instances. listReferrers 
-  compute.instances. listTagBindings 
-  compute.instances.osAdminLogin
-  compute.instances.osLogin
-  compute.instances. pscInterfaceCreate 
-  compute.instances. removeResourcePolicies 
-  compute.instances.reset
-  compute.instances.resume
-  compute.instances. sendDiagnosticInterrupt 
-  compute.instances. setDeletionProtection 
-  compute.instances. setDiskAutoDelete 
-  compute.instances.setIamPolicy
-  compute.instances.setLabels
-  compute.instances. setMachineResources 
-  compute.instances. setMachineType 
-  compute.instances.setMetadata
-  compute.instances. setMinCpuPlatform 
-  compute.instances.setName
-  compute.instances. setScheduling 
-  compute.instances. setSecurityPolicy 
-  compute.instances. setServiceAccount 
-  compute.instances. setShieldedInstanceIntegrityPolicy 
-  compute.instances. setShieldedVmIntegrityPolicy 
-  compute.instances.setTags
-  compute.instances. simulateMaintenanceEvent 
-  compute.instances.start
-  compute.instances. startWithEncryptionKey 
-  compute.instances.stop
-  compute.instances.suspend
-  compute.instances.update
-  compute.instances. updateAccessConfig 
-  compute.instances. updateDisplayDevice 
-  compute.instances. updateNetworkInterface 
-  compute.instances. updateSecurity 
-  compute.instances. updateShieldedInstanceConfig 
-  compute.instances. updateShieldedVmConfig 
-  compute.instances.use
-  compute.instances.useReadOnly
-  compute.instantSnapshots. create 
-  compute.instantSnapshots. delete 
-  compute.instantSnapshots. export 
-  compute.instantSnapshots.get
-  compute.instantSnapshots. getIamPolicy 
-  compute.instantSnapshots.list
-  compute.instantSnapshots. setIamPolicy 
-  compute.instantSnapshots. setLabels 
-  compute.instantSnapshots. useReadOnly 
-  compute.interconnectAttachmentGroups. create 
-  compute.interconnectAttachmentGroups. delete 
-  compute.interconnectAttachmentGroups. get 
-  compute.interconnectAttachmentGroups. list 
-  compute.interconnectAttachmentGroups. patch 
-  compute.interconnectAttachments. create 
-  compute.interconnectAttachments. createTagBinding 
-  compute.interconnectAttachments. delete 
-  compute.interconnectAttachments. deleteTagBinding 
-  compute.interconnectAttachments. get 
-  compute.interconnectAttachments. list 
-  compute.interconnectAttachments. listEffectiveTags 
-  compute.interconnectAttachments. listTagBindings 
-  compute.interconnectAttachments. setLabels 
-  compute.interconnectAttachments. update 
-  compute.interconnectAttachments. use 
-  compute.interconnectGroups. create 
-  compute.interconnectGroups. delete 
-  compute.interconnectGroups.get
-  compute.interconnectGroups. list 
-  compute.interconnectGroups. patch 
-  compute.interconnectLocations. get 
-  compute.interconnectLocations. list 
-  compute.interconnectRemoteLocations. get 
-  compute.interconnectRemoteLocations. list 
-  compute.interconnects.create
-  compute.interconnects. createTagBinding 
-  compute.interconnects.delete
-  compute.interconnects. deleteTagBinding 
-  compute.interconnects.get
-  compute.interconnects. getMacsecConfig 
-  compute.interconnects.list
-  compute.interconnects. listEffectiveTags 
-  compute.interconnects. listTagBindings 
-  compute.interconnects. setLabels 
-  compute.interconnects.update
-  compute.interconnects.use
-  compute.licenseCodes.get
-  compute.licenseCodes. getIamPolicy 
-  compute.licenseCodes.list
-  compute.licenseCodes. setIamPolicy 
-  compute.licenses.create
-  compute.licenses.delete
-  compute.licenses.get
-  compute.licenses.getIamPolicy
-  compute.licenses.list
-  compute.licenses.setIamPolicy
-  compute.licenses.update
-  compute.machineImages.create
-  compute.machineImages.delete
-  compute.machineImages.get
-  compute.machineImages. getIamPolicy 
-  compute.machineImages.list
-  compute.machineImages. setIamPolicy 
-  compute.machineImages. setLabels 
-  compute.machineImages. useReadOnly 
-  compute.machineTypes.get
-  compute.machineTypes.list
-  compute.multiMig.create
-  compute.multiMig.delete
-  compute.multiMig.get
-  compute.multiMig.list
-  compute.multiMigMembers.get
-  compute.multiMigMembers.list
-  compute.networkAttachments. create 
-  compute.networkAttachments. createTagBinding 
-  compute.networkAttachments. delete 
-  compute.networkAttachments. deleteTagBinding 
-  compute.networkAttachments.get
-  compute.networkAttachments. getIamPolicy 
-  compute.networkAttachments. list 
-  compute.networkAttachments. listEffectiveTags 
-  compute.networkAttachments. listTagBindings 
-  compute.networkAttachments. setIamPolicy 
-  compute.networkAttachments. update 
-  compute.networkAttachments.use
-  compute.networkEdgeSecurityServices. create 
-  compute.networkEdgeSecurityServices. createTagBinding 
-  compute.networkEdgeSecurityServices. delete 
-  compute.networkEdgeSecurityServices. deleteTagBinding 
-  compute.networkEdgeSecurityServices. get 
-  compute.networkEdgeSecurityServices. list 
-  compute.networkEdgeSecurityServices. listEffectiveTags 
-  compute.networkEdgeSecurityServices. listTagBindings 
-  compute.networkEdgeSecurityServices. update 
-  compute.networkEndpointGroups. attachNetworkEndpoints 
-  compute.networkEndpointGroups. create 
-  compute.networkEndpointGroups. createTagBinding 
-  compute.networkEndpointGroups. delete 
-  compute.networkEndpointGroups. deleteTagBinding 
-  compute.networkEndpointGroups. detachNetworkEndpoints 
-  compute.networkEndpointGroups. get 
-  compute.networkEndpointGroups. list 
-  compute.networkEndpointGroups. listEffectiveTags 
-  compute.networkEndpointGroups. listTagBindings 
-  compute.networkEndpointGroups. use 
-  compute.networkProfiles.get
-  compute.networkProfiles.list
-  compute.networks.access
-  compute.networks.addPeering
-  compute.networks.create
-  compute.networks. createTagBinding 
-  compute.networks.delete
-  compute.networks. deleteTagBinding 
-  compute.networks.get
-  compute.networks. getEffectiveFirewalls 
-  compute.networks. getRegionEffectiveFirewalls 
-  compute.networks.list
-  compute.networks. listEffectiveTags 
-  compute.networks. listPeeringRoutes 
-  compute.networks. listTagBindings 
-  compute.networks.mirror
-  compute.networks.removePeering
-  compute.networks. setFirewallPolicy 
-  compute.networks. switchToCustomMode 
-  compute.networks.update
-  compute.networks.updatePeering
-  compute.networks.updatePolicy
-  compute.networks.use
-  compute.networks.useExternalIp
-  compute.nodeGroups.addNodes
-  compute.nodeGroups.create
-  compute.nodeGroups.delete
-  compute.nodeGroups.deleteNodes
-  compute.nodeGroups.get
-  compute.nodeGroups. getIamPolicy 
-  compute.nodeGroups.list
-  compute.nodeGroups. performMaintenance 
-  compute.nodeGroups. setIamPolicy 
-  compute.nodeGroups. setNodeTemplate 
-  compute.nodeGroups. simulateMaintenanceEvent 
-  compute.nodeGroups.update
-  compute.nodeTemplates.create
-  compute.nodeTemplates.delete
-  compute.nodeTemplates.get
-  compute.nodeTemplates. getIamPolicy 
-  compute.nodeTemplates.list
-  compute.nodeTemplates. setIamPolicy 
-  compute.nodeTypes.get
-  compute.nodeTypes.list
-  compute.organizations. disableXpnHost 
-  compute.organizations. disableXpnResource 
-  compute.organizations. enableXpnHost 
-  compute.organizations. enableXpnResource 
-  compute.organizations. listAssociations 
-  compute.organizations. setFirewallPolicy 
-  compute.organizations. setSecurityPolicy 
-  compute.oslogin. updateExternalUser 
-  compute.packetMirrorings. create 
-  compute.packetMirrorings. createTagBinding 
-  compute.packetMirrorings. delete 
-  compute.packetMirrorings. deleteTagBinding 
-  compute.packetMirrorings.get
-  compute.packetMirrorings.list
-  compute.packetMirrorings. listEffectiveTags 
-  compute.packetMirrorings. listTagBindings 
-  compute.packetMirrorings. update 
-  compute.previewFeatures.get
-  compute.previewFeatures.list
-  compute.previewFeatures.update
-  compute.projects.get
-  compute.projects. setCloudArmorTier 
-  compute.projects. setCommonInstanceMetadata 
-  compute.projects. setDefaultNetworkTier 
-  compute.projects. setDefaultServiceAccount 
-  compute.projects. setManagedProtectionTier 
-  compute.projects. setUsageExportBucket 
-  compute.publicAdvertisedPrefixes. create 
-  compute.publicAdvertisedPrefixes. delete 
-  compute.publicAdvertisedPrefixes. get 
-  compute.publicAdvertisedPrefixes. list 
-  compute.publicAdvertisedPrefixes. update 
-  compute.publicAdvertisedPrefixes. updatePolicy 
-  compute.publicDelegatedPrefixes. announce 
-  compute.publicDelegatedPrefixes. create 
-  compute.publicDelegatedPrefixes. createTagBinding 
-  compute.publicDelegatedPrefixes. delete 
-  compute.publicDelegatedPrefixes. deleteTagBinding 
-  compute.publicDelegatedPrefixes. get 
-  compute.publicDelegatedPrefixes. list 
-  compute.publicDelegatedPrefixes. listEffectiveTags 
-  compute.publicDelegatedPrefixes. listTagBindings 
-  compute.publicDelegatedPrefixes. update 
-  compute.publicDelegatedPrefixes. updatePolicy 
-  compute.publicDelegatedPrefixes. use 
-  compute.publicDelegatedPrefixes. withdraw 
-  compute.regionBackendBuckets. create 
-  compute.regionBackendBuckets. createTagBinding 
-  compute.regionBackendBuckets. delete 
-  compute.regionBackendBuckets. deleteTagBinding 
-  compute.regionBackendBuckets. get 
-  compute.regionBackendBuckets. getIamPolicy 
-  compute.regionBackendBuckets. list 
-  compute.regionBackendBuckets. listEffectiveTags 
-  compute.regionBackendBuckets. listTagBindings 
-  compute.regionBackendBuckets. setIamPolicy 
-  compute.regionBackendBuckets. update 
-  compute.regionBackendBuckets. use 
-  compute.regionBackendServices. create 
-  compute.regionBackendServices. createTagBinding 
-  compute.regionBackendServices. delete 
-  compute.regionBackendServices. deleteTagBinding 
-  compute.regionBackendServices. get 
-  compute.regionBackendServices. getIamPolicy 
-  compute.regionBackendServices. list 
-  compute.regionBackendServices. listEffectiveTags 
-  compute.regionBackendServices. listTagBindings 
-  compute.regionBackendServices. setIamPolicy 
-  compute.regionBackendServices. setSecurityPolicy 
-  compute.regionBackendServices. update 
-  compute.regionBackendServices. use 
-  compute.regionCompositeHealthChecks. create 
-  compute.regionCompositeHealthChecks. delete 
-  compute.regionCompositeHealthChecks. get 
-  compute.regionCompositeHealthChecks. list 
-  compute.regionCompositeHealthChecks. update 
-  compute.regionFirewallPolicies. cloneRules 
-  compute.regionFirewallPolicies. create 
-  compute.regionFirewallPolicies. createTagBinding 
-  compute.regionFirewallPolicies. delete 
-  compute.regionFirewallPolicies. deleteTagBinding 
-  compute.regionFirewallPolicies. get 
-  compute.regionFirewallPolicies. getIamPolicy 
-  compute.regionFirewallPolicies. list 
-  compute.regionFirewallPolicies. listEffectiveTags 
-  compute.regionFirewallPolicies. listTagBindings 
-  compute.regionFirewallPolicies. setIamPolicy 
-  compute.regionFirewallPolicies. update 
-  compute.regionFirewallPolicies. use 
-  compute.regionHealthAggregationPolicies. create 
-  compute.regionHealthAggregationPolicies. delete 
-  compute.regionHealthAggregationPolicies. get 
-  compute.regionHealthAggregationPolicies. list 
-  compute.regionHealthAggregationPolicies. update 
-  compute.regionHealthCheckServices. create 
-  compute.regionHealthCheckServices. delete 
-  compute.regionHealthCheckServices. get 
-  compute.regionHealthCheckServices. list 
-  compute.regionHealthCheckServices. update 
-  compute.regionHealthCheckServices. use 
-  compute.regionHealthChecks. create 
-  compute.regionHealthChecks. createTagBinding 
-  compute.regionHealthChecks. delete 
-  compute.regionHealthChecks. deleteTagBinding 
-  compute.regionHealthChecks.get
-  compute.regionHealthChecks. list 
-  compute.regionHealthChecks. listEffectiveTags 
-  compute.regionHealthChecks. listTagBindings 
-  compute.regionHealthChecks. update 
-  compute.regionHealthChecks.use
-  compute.regionHealthChecks. useReadOnly 
-  compute.regionHealthSources. create 
-  compute.regionHealthSources. delete 
-  compute.regionHealthSources. get 
-  compute.regionHealthSources. list 
-  compute.regionHealthSources. update 
-  compute.regionNetworkEndpointGroups. attachNetworkEndpoints 
-  compute.regionNetworkEndpointGroups. create 
-  compute.regionNetworkEndpointGroups. createTagBinding 
-  compute.regionNetworkEndpointGroups. delete 
-  compute.regionNetworkEndpointGroups. deleteTagBinding 
-  compute.regionNetworkEndpointGroups. detachNetworkEndpoints 
-  compute.regionNetworkEndpointGroups. get 
-  compute.regionNetworkEndpointGroups. list 
-  compute.regionNetworkEndpointGroups. listEffectiveTags 
-  compute.regionNetworkEndpointGroups. listTagBindings 
-  compute.regionNetworkEndpointGroups. use 
-  compute.regionNotificationEndpoints. create 
-  compute.regionNotificationEndpoints. delete 
-  compute.regionNotificationEndpoints. get 
-  compute.regionNotificationEndpoints. list 
-  compute.regionNotificationEndpoints. update 
-  compute.regionNotificationEndpoints. use 
-  compute.regionOperations. delete 
-  compute.regionOperations.get
-  compute.regionOperations. getIamPolicy 
-  compute.regionOperations.list
-  compute.regionOperations. setIamPolicy 
-  compute.regionSecurityPolicies. create 
-  compute.regionSecurityPolicies. createTagBinding 
-  compute.regionSecurityPolicies. delete 
-  compute.regionSecurityPolicies. deleteTagBinding 
-  compute.regionSecurityPolicies. get 
-  compute.regionSecurityPolicies. list 
-  compute.regionSecurityPolicies. listEffectiveTags 
-  compute.regionSecurityPolicies. listTagBindings 
-  compute.regionSecurityPolicies. update 
-  compute.regionSecurityPolicies. use 
-  compute.regionSslCertificates. create 
-  compute.regionSslCertificates. createTagBinding 
-  compute.regionSslCertificates. delete 
-  compute.regionSslCertificates. deleteTagBinding 
-  compute.regionSslCertificates. get 
-  compute.regionSslCertificates. list 
-  compute.regionSslCertificates. listEffectiveTags 
-  compute.regionSslCertificates. listTagBindings 
-  compute.regionSslPolicies. create 
-  compute.regionSslPolicies. createTagBinding 
-  compute.regionSslPolicies. delete 
-  compute.regionSslPolicies. deleteTagBinding 
-  compute.regionSslPolicies.get
-  compute.regionSslPolicies.list
-  compute.regionSslPolicies. listAvailableFeatures 
-  compute.regionSslPolicies. listEffectiveTags 
-  compute.regionSslPolicies. listTagBindings 
-  compute.regionSslPolicies. update 
-  compute.regionSslPolicies.use
-  compute.regionTargetHttpProxies. create 
-  compute.regionTargetHttpProxies. createTagBinding 
-  compute.regionTargetHttpProxies. delete 
-  compute.regionTargetHttpProxies. deleteTagBinding 
-  compute.regionTargetHttpProxies. get 
-  compute.regionTargetHttpProxies. list 
-  compute.regionTargetHttpProxies. listEffectiveTags 
-  compute.regionTargetHttpProxies. listTagBindings 
-  compute.regionTargetHttpProxies. setUrlMap 
-  compute.regionTargetHttpProxies. use 
-  compute.regionTargetHttpsProxies. create 
-  compute.regionTargetHttpsProxies. createTagBinding 
-  compute.regionTargetHttpsProxies. delete 
-  compute.regionTargetHttpsProxies. deleteTagBinding 
-  compute.regionTargetHttpsProxies. get 
-  compute.regionTargetHttpsProxies. list 
-  compute.regionTargetHttpsProxies. listEffectiveTags 
-  compute.regionTargetHttpsProxies. listTagBindings 
-  compute.regionTargetHttpsProxies. setSslCertificates 
-  compute.regionTargetHttpsProxies. setUrlMap 
-  compute.regionTargetHttpsProxies. update 
-  compute.regionTargetHttpsProxies. use 
-  compute.regionTargetTcpProxies. create 
-  compute.regionTargetTcpProxies. createTagBinding 
-  compute.regionTargetTcpProxies. delete 
-  compute.regionTargetTcpProxies. deleteTagBinding 
-  compute.regionTargetTcpProxies. get 
-  compute.regionTargetTcpProxies. list 
-  compute.regionTargetTcpProxies. listEffectiveTags 
-  compute.regionTargetTcpProxies. listTagBindings 
-  compute.regionTargetTcpProxies. use 
-  compute.regionUrlMaps.create
-  compute.regionUrlMaps. createTagBinding 
-  compute.regionUrlMaps.delete
-  compute.regionUrlMaps. deleteTagBinding 
-  compute.regionUrlMaps.get
-  compute.regionUrlMaps. invalidateCache 
-  compute.regionUrlMaps.list
-  compute.regionUrlMaps. listEffectiveTags 
-  compute.regionUrlMaps. listTagBindings 
-  compute.regionUrlMaps.update
-  compute.regionUrlMaps.use
-  compute.regionUrlMaps.validate
-  compute.regions.get
-  compute.regions.list
-  compute.reservationBlocks.get
-  compute.reservationBlocks.list
-  compute.reservationBlocks. performMaintenance 
-  compute.reservationSubBlocks. get 
-  compute.reservationSubBlocks. list 
-  compute.reservationSubBlocks. performMaintenance 
-  compute.reservationSubBlocks. reportFaulty 
-  compute.reservations.create
-  compute.reservations.delete
-  compute.reservations.get
-  compute.reservations.list
-  compute.reservations. performMaintenance 
-  compute.reservations.resize
-  compute.reservations.update
-  compute.resourcePolicies. create 
-  compute.resourcePolicies. delete 
-  compute.resourcePolicies.get
-  compute.resourcePolicies. getIamPolicy 
-  compute.resourcePolicies.list
-  compute.resourcePolicies. setIamPolicy 
-  compute.resourcePolicies. update 
-  compute.resourcePolicies.use
-  compute.resourcePolicies. useReadOnly 
-  compute.rolloutPlans.create
-  compute.rolloutPlans.delete
-  compute.rolloutPlans.get
-  compute.rolloutPlans.list
-  compute.rollouts.cancel
-  compute.rollouts.delete
-  compute.rollouts.get
-  compute.rollouts.list
-  compute.routers.create
-  compute.routers. createTagBinding 
-  compute.routers.delete
-  compute.routers. deleteRoutePolicy 
-  compute.routers. deleteTagBinding 
-  compute.routers.get
-  compute.routers.getRoutePolicy
-  compute.routers.list
-  compute.routers.listBgpRoutes
-  compute.routers. listEffectiveTags 
-  compute.routers. listRoutePolicies 
-  compute.routers. listTagBindings 
-  compute.routers.update
-  compute.routers. updateRoutePolicy 
-  compute.routers.use
-  compute.routes.create
-  compute.routes. createTagBinding 
-  compute.routes.delete
-  compute.routes. deleteTagBinding 
-  compute.routes.get
-  compute.routes.list
-  compute.routes. listEffectiveTags 
-  compute.routes.listTagBindings
-  compute.securityPolicies. addAssociation 
-  compute.securityPolicies. copyRules 
-  compute.securityPolicies. create 
-  compute.securityPolicies. createTagBinding 
-  compute.securityPolicies. delete 
-  compute.securityPolicies. deleteTagBinding 
-  compute.securityPolicies.get
-  compute.securityPolicies.list
-  compute.securityPolicies. listEffectiveTags 
-  compute.securityPolicies. listTagBindings 
-  compute.securityPolicies.move
-  compute.securityPolicies. removeAssociation 
-  compute.securityPolicies. setLabels 
-  compute.securityPolicies. update 
-  compute.securityPolicies.use
-  compute.serviceAttachments. create 
-  compute.serviceAttachments. createTagBinding 
-  compute.serviceAttachments. delete 
-  compute.serviceAttachments. deleteTagBinding 
-  compute.serviceAttachments.get
-  compute.serviceAttachments. getIamPolicy 
-  compute.serviceAttachments. list 
-  compute.serviceAttachments. listEffectiveTags 
-  compute.serviceAttachments. listTagBindings 
-  compute.serviceAttachments. setIamPolicy 
-  compute.serviceAttachments. update 
-  compute.serviceAttachments.use
-  compute.snapshotSettings.get
-  compute.snapshotSettings. update 
-  compute.snapshots.create
-  compute.snapshots. createTagBinding 
-  compute.snapshots.delete
-  compute.snapshots. deleteTagBinding 
-  compute.snapshots.get
-  compute.snapshots.getIamPolicy
-  compute.snapshots.list
-  compute.snapshots. listEffectiveTags 
-  compute.snapshots. listTagBindings 
-  compute.snapshots.setIamPolicy
-  compute.snapshots.setLabels
-  compute.snapshots.updateKmsKey
-  compute.snapshots.useReadOnly
-  compute.spotAssistants.get
-  compute.sslCertificates.create
-  compute.sslCertificates. createTagBinding 
-  compute.sslCertificates.delete
-  compute.sslCertificates. deleteTagBinding 
-  compute.sslCertificates.get
-  compute.sslCertificates.list
-  compute.sslCertificates. listEffectiveTags 
-  compute.sslCertificates. listTagBindings 
-  compute.sslPolicies.create
-  compute.sslPolicies. createTagBinding 
-  compute.sslPolicies.delete
-  compute.sslPolicies. deleteTagBinding 
-  compute.sslPolicies.get
-  compute.sslPolicies.list
-  compute.sslPolicies. listAvailableFeatures 
-  compute.sslPolicies. listEffectiveTags 
-  compute.sslPolicies. listTagBindings 
-  compute.sslPolicies.update
-  compute.sslPolicies.use
-  compute.storagePools.create
-  compute.storagePools.delete
-  compute.storagePools.get
-  compute.storagePools. getIamPolicy 
-  compute.storagePools.list
-  compute.storagePools. setIamPolicy 
-  compute.storagePools.update
-  compute.storagePools.use
-  compute.subnetworks.create
-  compute.subnetworks. createTagBinding 
-  compute.subnetworks.delete
-  compute.subnetworks. deleteTagBinding 
-  compute.subnetworks. expandIpCidrRange 
-  compute.subnetworks.get
-  compute.subnetworks. getIamPolicy 
-  compute.subnetworks.list
-  compute.subnetworks. listEffectiveTags 
-  compute.subnetworks. listTagBindings 
-  compute.subnetworks.mirror
-  compute.subnetworks. setIamPolicy 
-  compute.subnetworks. setPrivateIpGoogleAccess 
-  compute.subnetworks.update
-  compute.subnetworks.use
-  compute.subnetworks. useExternalIp 
-  compute.subnetworks. usePeerMigration 
-  compute.targetGrpcProxies. create 
-  compute.targetGrpcProxies. createTagBinding 
-  compute.targetGrpcProxies. delete 
-  compute.targetGrpcProxies. deleteTagBinding 
-  compute.targetGrpcProxies.get
-  compute.targetGrpcProxies.list
-  compute.targetGrpcProxies. listEffectiveTags 
-  compute.targetGrpcProxies. listTagBindings 
-  compute.targetGrpcProxies. update 
-  compute.targetGrpcProxies.use
-  compute.targetHttpProxies. create 
-  compute.targetHttpProxies. createTagBinding 
-  compute.targetHttpProxies. delete 
-  compute.targetHttpProxies. deleteTagBinding 
-  compute.targetHttpProxies.get
-  compute.targetHttpProxies.list
-  compute.targetHttpProxies. listEffectiveTags 
-  compute.targetHttpProxies. listTagBindings 
-  compute.targetHttpProxies. setUrlMap 
-  compute.targetHttpProxies. update 
-  compute.targetHttpProxies.use
-  compute.targetHttpsProxies. create 
-  compute.targetHttpsProxies. createTagBinding 
-  compute.targetHttpsProxies. delete 
-  compute.targetHttpsProxies. deleteTagBinding 
-  compute.targetHttpsProxies.get
-  compute.targetHttpsProxies. list 
-  compute.targetHttpsProxies. listEffectiveTags 
-  compute.targetHttpsProxies. listTagBindings 
-  compute.targetHttpsProxies. setCertificateMap 
-  compute.targetHttpsProxies. setQuicOverride 
-  compute.targetHttpsProxies. setSslCertificates 
-  compute.targetHttpsProxies. setSslPolicy 
-  compute.targetHttpsProxies. setUrlMap 
-  compute.targetHttpsProxies. update 
-  compute.targetHttpsProxies.use
-  compute.targetInstances.create
-  compute.targetInstances. createTagBinding 
-  compute.targetInstances.delete
-  compute.targetInstances. deleteTagBinding 
-  compute.targetInstances.get
-  compute.targetInstances.list
-  compute.targetInstances. listEffectiveTags 
-  compute.targetInstances. listTagBindings 
-  compute.targetInstances. setSecurityPolicy 
-  compute.targetInstances.use
-  compute.targetPools. addHealthCheck 
-  compute.targetPools. addInstance 
-  compute.targetPools.create
-  compute.targetPools. createTagBinding 
-  compute.targetPools.delete
-  compute.targetPools. deleteTagBinding 
-  compute.targetPools.get
-  compute.targetPools.list
-  compute.targetPools. listEffectiveTags 
-  compute.targetPools. listTagBindings 
-  compute.targetPools. removeHealthCheck 
-  compute.targetPools. removeInstance 
-  compute.targetPools. setSecurityPolicy 
-  compute.targetPools.update
-  compute.targetPools.use
-  compute.targetSslProxies. create 
-  compute.targetSslProxies. createTagBinding 
-  compute.targetSslProxies. delete 
-  compute.targetSslProxies. deleteTagBinding 
-  compute.targetSslProxies.get
-  compute.targetSslProxies.list
-  compute.targetSslProxies. listEffectiveTags 
-  compute.targetSslProxies. listTagBindings 
-  compute.targetSslProxies. setBackendService 
-  compute.targetSslProxies. setCertificateMap 
-  compute.targetSslProxies. setProxyHeader 
-  compute.targetSslProxies. setSslCertificates 
-  compute.targetSslProxies. setSslPolicy 
-  compute.targetSslProxies. update 
-  compute.targetSslProxies.use
-  compute.targetTcpProxies. create 
-  compute.targetTcpProxies. createTagBinding 
-  compute.targetTcpProxies. delete 
-  compute.targetTcpProxies. deleteTagBinding 
-  compute.targetTcpProxies.get
-  compute.targetTcpProxies.list
-  compute.targetTcpProxies. listEffectiveTags 
-  compute.targetTcpProxies. listTagBindings 
-  compute.targetTcpProxies. update 
-  compute.targetTcpProxies.use
-  compute.targetVpnGateways. create 
-  compute.targetVpnGateways. createTagBinding 
-  compute.targetVpnGateways. delete 
-  compute.targetVpnGateways. deleteTagBinding 
-  compute.targetVpnGateways.get
-  compute.targetVpnGateways.list
-  compute.targetVpnGateways. listEffectiveTags 
-  compute.targetVpnGateways. listTagBindings 
-  compute.targetVpnGateways. setLabels 
-  compute.targetVpnGateways.use
-  compute.urlMaps.create
-  compute.urlMaps. createTagBinding 
-  compute.urlMaps.delete
-  compute.urlMaps. deleteTagBinding 
-  compute.urlMaps.get
-  compute.urlMaps. invalidateCache 
-  compute.urlMaps.list
-  compute.urlMaps. listEffectiveTags 
-  compute.urlMaps. listTagBindings 
-  compute.urlMaps.update
-  compute.urlMaps.use
-  compute.urlMaps.validate
-  compute.vpnGateways.create
-  compute.vpnGateways. createTagBinding 
-  compute.vpnGateways.delete
-  compute.vpnGateways. deleteTagBinding 
-  compute.vpnGateways.get
-  compute.vpnGateways.list
-  compute.vpnGateways. listEffectiveTags 
-  compute.vpnGateways. listTagBindings 
-  compute.vpnGateways.setLabels
-  compute.vpnGateways.use
-  compute.vpnTunnels.create
-  compute.vpnTunnels. createTagBinding 
-  compute.vpnTunnels.delete
-  compute.vpnTunnels. deleteTagBinding 
-  compute.vpnTunnels.get
-  compute.vpnTunnels.list
-  compute.vpnTunnels. listEffectiveTags 
-  compute.vpnTunnels. listTagBindings 
-  compute.vpnTunnels.setLabels
-  compute.wireGroups.create
-  compute.wireGroups.delete
-  compute.wireGroups.get
-  compute.wireGroups.list
-  compute.wireGroups.update
-  compute.zoneOperations.delete
-  compute.zoneOperations.get
-  compute.zoneOperations. getIamPolicy 
-  compute.zoneOperations.list
-  compute.zoneOperations. setIamPolicy 
-  compute.zones.get
-  compute.zones.list
  notebooks.* 
 
-  notebooks.environments.create
-  notebooks.environments.delete
-  notebooks.environments.get
-  notebooks.environments. getIamPolicy 
-  notebooks.environments.list
-  notebooks.environments. setIamPolicy 
-  notebooks.executions.create
-  notebooks.executions.delete
-  notebooks.executions.get
-  notebooks.executions. getIamPolicy 
-  notebooks.executions.list
-  notebooks.executions. setIamPolicy 
-  notebooks.instances. checkUpgradability 
-  notebooks.instances.create
-  notebooks.instances.delete
-  notebooks.instances.diagnose
-  notebooks.instances.get
-  notebooks.instances.getHealth
-  notebooks.instances. getIamPolicy 
-  notebooks.instances.list
-  notebooks.instances.reset
-  notebooks.instances. setAccelerator 
-  notebooks.instances. setIamPolicy 
-  notebooks.instances.setLabels
-  notebooks.instances. setMachineType 
-  notebooks.instances.start
-  notebooks.instances.stop
-  notebooks.instances.update
-  notebooks.instances. updateConfig 
-  notebooks.instances. updateShieldInstanceConfig 
-  notebooks.instances.upgrade
-  notebooks.instances.use
-  notebooks.locations.get
-  notebooks.locations.list
-  notebooks.operations.cancel
-  notebooks.operations.delete
-  notebooks.operations.get
-  notebooks.operations.list
-  notebooks.runtimes.create
-  notebooks.runtimes.delete
-  notebooks.runtimes.diagnose
-  notebooks.runtimes.get
-  notebooks.runtimes. getIamPolicy 
-  notebooks.runtimes.list
-  notebooks.runtimes.reset
-  notebooks.runtimes. setIamPolicy 
-  notebooks.runtimes.start
-  notebooks.runtimes.stop
-  notebooks.runtimes.switch
-  notebooks.runtimes.update
-  notebooks.runtimes.upgrade
-  notebooks.schedules.create
-  notebooks.schedules.delete
-  notebooks.schedules.get
-  notebooks.schedules. getIamPolicy 
-  notebooks.schedules.list
-  notebooks.schedules. setIamPolicy 
 resourcemanager.projects.get 
 resourcemanager.projects.list 
 serviceusage.quotas.get 
 serviceusage.services.get 
 serviceusage.services.list 
Notebooks Legacy Viewer
( roles/  
)
Read-only access to Notebooks all resources through compute API.
  compute.acceleratorTypes.* 
 
-  compute.acceleratorTypes.get
-  compute.acceleratorTypes.list
 compute.addresses.get 
 compute.addresses.list 
 compute.  
 compute.  
 compute.autoscalers.get 
 compute.autoscalers.list 
 compute.backendBuckets.get 
 compute.  
 compute.backendBuckets.list 
 compute.  
 compute.  
 compute.backendServices.get 
 compute.  
 compute.backendServices.list 
 compute.  
 compute.  
 compute.commitments.get 
 compute.commitments.list 
 compute.crossSiteNetworks.get 
 compute.crossSiteNetworks.list 
 compute.diskSettings.get 
  compute.diskTypes.* 
 
-  compute.diskTypes.get
-  compute.diskTypes.list
 compute.disks.get 
 compute.disks.getIamPolicy 
 compute.disks.list 
 compute.  
 compute.disks.listTagBindings 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.firewallPolicies.get 
 compute.  
 compute.firewallPolicies.list 
 compute.  
 compute.  
 compute.firewalls.get 
 compute.firewalls.list 
 compute.  
 compute.  
 compute.forwardingRules.get 
 compute.forwardingRules.list 
 compute.  
 compute.  
 compute.futureReservations.get 
 compute.  
 compute.  
 compute.globalAddresses.get 
 compute.globalAddresses.list 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.globalOperations.get 
 compute.  
 compute.globalOperations.list 
 compute.  
 compute.  
 compute.healthChecks.get 
 compute.healthChecks.list 
 compute.  
 compute.  
 compute.httpHealthChecks.get 
 compute.httpHealthChecks.list 
 compute.  
 compute.  
 compute.httpsHealthChecks.get 
 compute.httpsHealthChecks.list 
 compute.  
 compute.  
 compute.images.get 
 compute.images.getFromFamily 
 compute.images.getIamPolicy 
 compute.images.list 
 compute.  
 compute.images.listTagBindings 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.instanceGroups.get 
 compute.instanceGroups.list 
 compute.  
 compute.  
 compute.instanceSettings.get 
 compute.instanceTemplates.get 
 compute.  
 compute.instanceTemplates.list 
 compute.instances.get 
 compute.  
 compute.  
 compute.instances.getIamPolicy 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.instances.list 
 compute.  
 compute.  
 compute.  
 compute.instantSnapshots.get 
 compute.  
 compute.instantSnapshots.list 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.interconnectGroups.get 
 compute.  
  compute.  
 
-  compute.interconnectLocations. get 
-  compute.interconnectLocations. list 
  compute.  
 
-  compute.interconnectRemoteLocations. get 
-  compute.interconnectRemoteLocations. list 
 compute.interconnects.get 
 compute.interconnects.list 
 compute.  
 compute.  
 compute.licenseCodes.get 
 compute.  
 compute.licenseCodes.list 
 compute.licenses.get 
 compute.licenses.getIamPolicy 
 compute.licenses.list 
 compute.machineImages.get 
 compute.  
 compute.machineImages.list 
  compute.machineTypes.* 
 
-  compute.machineTypes.get
-  compute.machineTypes.list
 compute.multiMig.get 
 compute.multiMig.list 
  compute.multiMigMembers.* 
 
-  compute.multiMigMembers.get
-  compute.multiMigMembers.list
 compute.networkAttachments.get 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
  compute.networkProfiles.* 
 
-  compute.networkProfiles.get
-  compute.networkProfiles.list
 compute.networks.get 
 compute.  
 compute.  
 compute.networks.list 
 compute.  
 compute.  
 compute.  
 compute.nodeGroups.get 
 compute.  
 compute.nodeGroups.list 
 compute.nodeTemplates.get 
 compute.  
 compute.nodeTemplates.list 
  compute.nodeTypes.* 
 
-  compute.nodeTypes.get
-  compute.nodeTypes.list
 compute.  
 compute.packetMirrorings.get 
 compute.packetMirrorings.list 
 compute.  
 compute.  
 compute.previewFeatures.get 
 compute.previewFeatures.list 
 compute.projects.get 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.regionHealthChecks.get 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.regionOperations.get 
 compute.  
 compute.regionOperations.list 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.regionSslPolicies.get 
 compute.regionSslPolicies.list 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.regionUrlMaps.get 
 compute.regionUrlMaps.list 
 compute.  
 compute.  
 compute.regionUrlMaps.validate 
  compute.regions.* 
 
-  compute.regions.get
-  compute.regions.list
 compute.reservationBlocks.get 
 compute.reservationBlocks.list 
 compute.  
 compute.  
 compute.reservations.get 
 compute.reservations.list 
 compute.resourcePolicies.get 
 compute.  
 compute.resourcePolicies.list 
 compute.rolloutPlans.get 
 compute.rolloutPlans.list 
 compute.rollouts.get 
 compute.rollouts.list 
 compute.routers.get 
 compute.routers.getRoutePolicy 
 compute.routers.list 
 compute.routers.listBgpRoutes 
 compute.  
 compute.  
 compute.  
 compute.routes.get 
 compute.routes.list 
 compute.  
 compute.routes.listTagBindings 
 compute.securityPolicies.get 
 compute.securityPolicies.list 
 compute.  
 compute.  
 compute.serviceAttachments.get 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.snapshotSettings.get 
 compute.snapshots.get 
 compute.snapshots.getIamPolicy 
 compute.snapshots.list 
 compute.  
 compute.  
 compute.spotAssistants.get 
 compute.sslCertificates.get 
 compute.sslCertificates.list 
 compute.  
 compute.  
 compute.sslPolicies.get 
 compute.sslPolicies.list 
 compute.  
 compute.  
 compute.  
 compute.storagePools.get 
 compute.  
 compute.storagePools.list 
 compute.subnetworks.get 
 compute.  
 compute.subnetworks.list 
 compute.  
 compute.  
 compute.targetGrpcProxies.get 
 compute.targetGrpcProxies.list 
 compute.  
 compute.  
 compute.targetHttpProxies.get 
 compute.targetHttpProxies.list 
 compute.  
 compute.  
 compute.targetHttpsProxies.get 
 compute.  
 compute.  
 compute.  
 compute.targetInstances.get 
 compute.targetInstances.list 
 compute.  
 compute.  
 compute.targetPools.get 
 compute.targetPools.list 
 compute.  
 compute.  
 compute.targetSslProxies.get 
 compute.targetSslProxies.list 
 compute.  
 compute.  
 compute.targetTcpProxies.get 
 compute.targetTcpProxies.list 
 compute.  
 compute.  
 compute.targetVpnGateways.get 
 compute.targetVpnGateways.list 
 compute.  
 compute.  
 compute.urlMaps.get 
 compute.urlMaps.list 
 compute.  
 compute.  
 compute.urlMaps.validate 
 compute.vpnGateways.get 
 compute.vpnGateways.list 
 compute.  
 compute.  
 compute.vpnTunnels.get 
 compute.vpnTunnels.list 
 compute.  
 compute.  
 compute.wireGroups.get 
 compute.wireGroups.list 
 compute.zoneOperations.get 
 compute.  
 compute.zoneOperations.list 
  compute.zones.* 
 
-  compute.zones.get
-  compute.zones.list
 notebooks.environments.get 
 notebooks.  
 notebooks.environments.list 
 notebooks.executions.get 
 notebooks.  
 notebooks.executions.list 
 notebooks.  
 notebooks.instances.get 
 notebooks.instances.getHealth 
 notebooks.  
 notebooks.instances.list 
  notebooks.locations.* 
 
-  notebooks.locations.get
-  notebooks.locations.list
 notebooks.operations.get 
 notebooks.operations.list 
 notebooks.runtimes.get 
 notebooks.  
 notebooks.runtimes.list 
 notebooks.schedules.get 
 notebooks.  
 notebooks.schedules.list 
 resourcemanager.projects.get 
 resourcemanager.projects.list 
 serviceusage.quotas.get 
 serviceusage.services.get 
 serviceusage.services.list 
Notebooks Runner
( roles/  
)
Restricted access for running scheduled Notebooks.
  aiplatform.  
 
-  aiplatform.notebookExecutionJobs. create 
-  aiplatform.notebookExecutionJobs. delete 
-  aiplatform.notebookExecutionJobs. get 
-  aiplatform.notebookExecutionJobs. list 
 aiplatform.operations.list 
 aiplatform.pipelineJobs.create 
  aiplatform.schedules.* 
 
-  aiplatform.schedules.create
-  aiplatform.schedules.delete
-  aiplatform.schedules.get
-  aiplatform.schedules.list
-  aiplatform.schedules.update
  compute.acceleratorTypes.* 
 
-  compute.acceleratorTypes.get
-  compute.acceleratorTypes.list
 compute.addresses.get 
 compute.addresses.list 
 compute.  
 compute.  
 compute.autoscalers.get 
 compute.autoscalers.list 
 compute.backendBuckets.get 
 compute.  
 compute.backendBuckets.list 
 compute.  
 compute.  
 compute.backendServices.get 
 compute.  
 compute.backendServices.list 
 compute.  
 compute.  
 compute.commitments.get 
 compute.commitments.list 
 compute.crossSiteNetworks.get 
 compute.crossSiteNetworks.list 
 compute.diskSettings.get 
  compute.diskTypes.* 
 
-  compute.diskTypes.get
-  compute.diskTypes.list
 compute.disks.get 
 compute.disks.getIamPolicy 
 compute.disks.list 
 compute.  
 compute.disks.listTagBindings 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.firewallPolicies.get 
 compute.  
 compute.firewallPolicies.list 
 compute.  
 compute.  
 compute.firewalls.get 
 compute.firewalls.list 
 compute.  
 compute.  
 compute.forwardingRules.get 
 compute.forwardingRules.list 
 compute.  
 compute.  
 compute.futureReservations.get 
 compute.  
 compute.  
 compute.globalAddresses.get 
 compute.globalAddresses.list 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.globalOperations.get 
 compute.  
 compute.globalOperations.list 
 compute.  
 compute.  
 compute.healthChecks.get 
 compute.healthChecks.list 
 compute.  
 compute.  
 compute.httpHealthChecks.get 
 compute.httpHealthChecks.list 
 compute.  
 compute.  
 compute.httpsHealthChecks.get 
 compute.httpsHealthChecks.list 
 compute.  
 compute.  
 compute.images.get 
 compute.images.getFromFamily 
 compute.images.getIamPolicy 
 compute.images.list 
 compute.  
 compute.images.listTagBindings 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.instanceGroups.get 
 compute.instanceGroups.list 
 compute.  
 compute.  
 compute.instanceSettings.get 
 compute.instanceTemplates.get 
 compute.  
 compute.instanceTemplates.list 
 compute.instances.get 
 compute.  
 compute.  
 compute.instances.getIamPolicy 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.instances.list 
 compute.  
 compute.  
 compute.  
 compute.instantSnapshots.get 
 compute.  
 compute.instantSnapshots.list 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.interconnectGroups.get 
 compute.  
  compute.  
 
-  compute.interconnectLocations. get 
-  compute.interconnectLocations. list 
  compute.  
 
-  compute.interconnectRemoteLocations. get 
-  compute.interconnectRemoteLocations. list 
 compute.interconnects.get 
 compute.interconnects.list 
 compute.  
 compute.  
 compute.licenseCodes.get 
 compute.  
 compute.licenseCodes.list 
 compute.licenses.get 
 compute.licenses.getIamPolicy 
 compute.licenses.list 
 compute.machineImages.get 
 compute.  
 compute.machineImages.list 
  compute.machineTypes.* 
 
-  compute.machineTypes.get
-  compute.machineTypes.list
 compute.multiMig.get 
 compute.multiMig.list 
  compute.multiMigMembers.* 
 
-  compute.multiMigMembers.get
-  compute.multiMigMembers.list
 compute.networkAttachments.get 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
  compute.networkProfiles.* 
 
-  compute.networkProfiles.get
-  compute.networkProfiles.list
 compute.networks.get 
 compute.  
 compute.  
 compute.networks.list 
 compute.  
 compute.  
 compute.  
 compute.nodeGroups.get 
 compute.  
 compute.nodeGroups.list 
 compute.nodeTemplates.get 
 compute.  
 compute.nodeTemplates.list 
  compute.nodeTypes.* 
 
-  compute.nodeTypes.get
-  compute.nodeTypes.list
 compute.  
 compute.packetMirrorings.get 
 compute.packetMirrorings.list 
 compute.  
 compute.  
 compute.previewFeatures.get 
 compute.previewFeatures.list 
 compute.projects.get 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.regionHealthChecks.get 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.regionOperations.get 
 compute.  
 compute.regionOperations.list 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.regionSslPolicies.get 
 compute.regionSslPolicies.list 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.regionUrlMaps.get 
 compute.regionUrlMaps.list 
 compute.  
 compute.  
 compute.regionUrlMaps.validate 
  compute.regions.* 
 
-  compute.regions.get
-  compute.regions.list
 compute.reservationBlocks.get 
 compute.reservationBlocks.list 
 compute.  
 compute.  
 compute.reservations.get 
 compute.reservations.list 
 compute.resourcePolicies.get 
 compute.  
 compute.resourcePolicies.list 
 compute.rolloutPlans.get 
 compute.rolloutPlans.list 
 compute.rollouts.get 
 compute.rollouts.list 
 compute.routers.get 
 compute.routers.getRoutePolicy 
 compute.routers.list 
 compute.routers.listBgpRoutes 
 compute.  
 compute.  
 compute.  
 compute.routes.get 
 compute.routes.list 
 compute.  
 compute.routes.listTagBindings 
 compute.securityPolicies.get 
 compute.securityPolicies.list 
 compute.  
 compute.  
 compute.serviceAttachments.get 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.snapshotSettings.get 
 compute.snapshots.get 
 compute.snapshots.getIamPolicy 
 compute.snapshots.list 
 compute.  
 compute.  
 compute.spotAssistants.get 
 compute.sslCertificates.get 
 compute.sslCertificates.list 
 compute.  
 compute.  
 compute.sslPolicies.get 
 compute.sslPolicies.list 
 compute.  
 compute.  
 compute.  
 compute.storagePools.get 
 compute.  
 compute.storagePools.list 
 compute.subnetworks.get 
 compute.  
 compute.subnetworks.list 
 compute.  
 compute.  
 compute.targetGrpcProxies.get 
 compute.targetGrpcProxies.list 
 compute.  
 compute.  
 compute.targetHttpProxies.get 
 compute.targetHttpProxies.list 
 compute.  
 compute.  
 compute.targetHttpsProxies.get 
 compute.  
 compute.  
 compute.  
 compute.targetInstances.get 
 compute.targetInstances.list 
 compute.  
 compute.  
 compute.targetPools.get 
 compute.targetPools.list 
 compute.  
 compute.  
 compute.targetSslProxies.get 
 compute.targetSslProxies.list 
 compute.  
 compute.  
 compute.targetTcpProxies.get 
 compute.targetTcpProxies.list 
 compute.  
 compute.  
 compute.targetVpnGateways.get 
 compute.targetVpnGateways.list 
 compute.  
 compute.  
 compute.urlMaps.get 
 compute.urlMaps.list 
 compute.  
 compute.  
 compute.urlMaps.validate 
 compute.vpnGateways.get 
 compute.vpnGateways.list 
 compute.  
 compute.  
 compute.vpnTunnels.get 
 compute.vpnTunnels.list 
 compute.  
 compute.  
 compute.wireGroups.get 
 compute.wireGroups.list 
 compute.zoneOperations.get 
 compute.  
 compute.zoneOperations.list 
  compute.zones.* 
 
-  compute.zones.get
-  compute.zones.list
 notebooks.environments.get 
 notebooks.  
 notebooks.environments.list 
 notebooks.executions.create 
 notebooks.executions.get 
 notebooks.  
 notebooks.executions.list 
 notebooks.  
 notebooks.instances.create 
 notebooks.instances.get 
 notebooks.instances.getHealth 
 notebooks.  
 notebooks.instances.list 
  notebooks.locations.* 
 
-  notebooks.locations.get
-  notebooks.locations.list
 notebooks.operations.get 
 notebooks.operations.list 
 notebooks.runtimes.create 
 notebooks.runtimes.get 
 notebooks.  
 notebooks.runtimes.list 
 notebooks.schedules.create 
 notebooks.schedules.get 
 notebooks.  
 notebooks.schedules.list 
 resourcemanager.projects.get 
 resourcemanager.projects.list 
 serviceusage.quotas.get 
 serviceusage.services.get 
 serviceusage.services.list 
AI Platform Notebooks Service Agent
( roles/  
)
Provide access for notebooks service agent to manage notebook instances in user projects
 aiplatform.customJobs.cancel 
 aiplatform.customJobs.create 
 aiplatform.customJobs.get 
 aiplatform.customJobs.list 
  aiplatform.  
 
-  aiplatform.notebookExecutionJobs. create 
-  aiplatform.notebookExecutionJobs. delete 
-  aiplatform.notebookExecutionJobs. get 
-  aiplatform.notebookExecutionJobs. list 
 aiplatform.operations.list 
 aiplatform.pipelineJobs.create 
  aiplatform.schedules.* 
 
-  aiplatform.schedules.create
-  aiplatform.schedules.delete
-  aiplatform.schedules.get
-  aiplatform.schedules.list
-  aiplatform.schedules.update
 backupdr.  
 backupdr.  
 backupdr.  
 backupdr.  
 backupdr.  
 backupdr.  
 backupdr.  
 backupdr.  
 backupdr.  
 backupdr.  
 backupdr.  
 backupdr.backupPlans.get 
 backupdr.backupPlans.list 
 backupdr.  
 backupdr.  
 backupdr.backupVaults.get 
 backupdr.backupVaults.list 
 backupdr.locations.list 
 backupdr.operations.get 
 backupdr.operations.list 
 backupdr.  
  compute.acceleratorTypes.* 
 
-  compute.acceleratorTypes.get
-  compute.acceleratorTypes.list
 compute.  
 compute.  
 compute.addresses.get 
 compute.addresses.list 
 compute.  
 compute.  
 compute.addresses.use 
 compute.addresses.useInternal 
  compute.autoscalers.* 
 
-  compute.autoscalers.create
-  compute.autoscalers.delete
-  compute.autoscalers.get
-  compute.autoscalers.list
-  compute.autoscalers.update
 compute.backendBuckets.get 
 compute.  
 compute.backendBuckets.list 
 compute.  
 compute.  
 compute.backendServices.get 
 compute.  
 compute.backendServices.list 
 compute.  
 compute.  
 compute.commitments.get 
 compute.commitments.list 
 compute.crossSiteNetworks.get 
 compute.crossSiteNetworks.list 
 compute.diskSettings.get 
  compute.diskTypes.* 
 
-  compute.diskTypes.get
-  compute.diskTypes.list
  compute.disks.* 
 
-  compute.disks. addResourcePolicies 
-  compute.disks.create
-  compute.disks.createSnapshot
-  compute.disks.createTagBinding
-  compute.disks.delete
-  compute.disks.deleteTagBinding
-  compute.disks.get
-  compute.disks.getIamPolicy
-  compute.disks.list
-  compute.disks. listEffectiveTags 
-  compute.disks.listTagBindings
-  compute.disks. removeResourcePolicies 
-  compute.disks.resize
-  compute.disks.setIamPolicy
-  compute.disks.setLabels
-  compute.disks. startAsyncReplication 
-  compute.disks. stopAsyncReplication 
-  compute.disks. stopGroupAsyncReplication 
-  compute.disks.update
-  compute.disks.updateKmsKey
-  compute.disks.use
-  compute.disks.useReadOnly
 compute.  
 compute.  
 compute.  
 compute.  
 compute.firewallPolicies.get 
 compute.  
 compute.firewallPolicies.list 
 compute.  
 compute.  
 compute.firewalls.get 
 compute.firewalls.list 
 compute.  
 compute.  
 compute.forwardingRules.get 
 compute.forwardingRules.list 
 compute.  
 compute.  
 compute.futureReservations.get 
 compute.  
 compute.  
 compute.globalAddresses.get 
 compute.globalAddresses.list 
 compute.  
 compute.  
 compute.globalAddresses.use 
 compute.  
 compute.  
 compute.  
 compute.  
  compute.  
 
-  compute.globalNetworkEndpointGroups. attachNetworkEndpoints 
-  compute.globalNetworkEndpointGroups. create 
-  compute.globalNetworkEndpointGroups. createTagBinding 
-  compute.globalNetworkEndpointGroups. delete 
-  compute.globalNetworkEndpointGroups. deleteTagBinding 
-  compute.globalNetworkEndpointGroups. detachNetworkEndpoints 
-  compute.globalNetworkEndpointGroups. get 
-  compute.globalNetworkEndpointGroups. list 
-  compute.globalNetworkEndpointGroups. listEffectiveTags 
-  compute.globalNetworkEndpointGroups. listTagBindings 
-  compute.globalNetworkEndpointGroups. use 
 compute.globalOperations.get 
 compute.  
 compute.globalOperations.list 
 compute.  
 compute.  
 compute.healthChecks.get 
 compute.healthChecks.list 
 compute.  
 compute.  
 compute.httpHealthChecks.get 
 compute.httpHealthChecks.list 
 compute.  
 compute.  
 compute.httpsHealthChecks.get 
 compute.httpsHealthChecks.list 
 compute.  
 compute.  
  compute.images.* 
 
-  compute.images.create
-  compute.images. createTagBinding 
-  compute.images.delete
-  compute.images. deleteTagBinding 
-  compute.images.deprecate
-  compute.images.get
-  compute.images.getFromFamily
-  compute.images.getIamPolicy
-  compute.images.list
-  compute.images. listEffectiveTags 
-  compute.images.listTagBindings
-  compute.images.setIamPolicy
-  compute.images.setLabels
-  compute.images.update
-  compute.images.useReadOnly
  compute.  
 
-  compute.instanceGroupManagers. create 
-  compute.instanceGroupManagers. createTagBinding 
-  compute.instanceGroupManagers. delete 
-  compute.instanceGroupManagers. deleteTagBinding 
-  compute.instanceGroupManagers. get 
-  compute.instanceGroupManagers. list 
-  compute.instanceGroupManagers. listEffectiveTags 
-  compute.instanceGroupManagers. listTagBindings 
-  compute.instanceGroupManagers. update 
-  compute.instanceGroupManagers. use 
  compute.instanceGroups.* 
 
-  compute.instanceGroups.create
-  compute.instanceGroups. createTagBinding 
-  compute.instanceGroups.delete
-  compute.instanceGroups. deleteTagBinding 
-  compute.instanceGroups.get
-  compute.instanceGroups.list
-  compute.instanceGroups. listEffectiveTags 
-  compute.instanceGroups. listTagBindings 
-  compute.instanceGroups.update
-  compute.instanceGroups.use
  compute.instanceSettings.* 
 
-  compute.instanceSettings.get
-  compute.instanceSettings. update 
  compute.instanceTemplates.* 
 
-  compute.instanceTemplates. create 
-  compute.instanceTemplates. delete 
-  compute.instanceTemplates.get
-  compute.instanceTemplates. getIamPolicy 
-  compute.instanceTemplates.list
-  compute.instanceTemplates. setIamPolicy 
-  compute.instanceTemplates. useReadOnly 
  compute.instances.* 
 
-  compute.instances. addAccessConfig 
-  compute.instances. addNetworkInterface 
-  compute.instances. addResourcePolicies 
-  compute.instances.attachDisk
-  compute.instances.create
-  compute.instances. createTagBinding 
-  compute.instances.delete
-  compute.instances. deleteAccessConfig 
-  compute.instances. deleteNetworkInterface 
-  compute.instances. deleteTagBinding 
-  compute.instances.detachDisk
-  compute.instances.get
-  compute.instances. getEffectiveFirewalls 
-  compute.instances. getGuestAttributes 
-  compute.instances.getIamPolicy
-  compute.instances. getScreenshot 
-  compute.instances. getSerialPortOutput 
-  compute.instances. getShieldedInstanceIdentity 
-  compute.instances. getShieldedVmIdentity 
-  compute.instances.list
-  compute.instances. listEffectiveTags 
-  compute.instances. listReferrers 
-  compute.instances. listTagBindings 
-  compute.instances.osAdminLogin
-  compute.instances.osLogin
-  compute.instances. pscInterfaceCreate 
-  compute.instances. removeResourcePolicies 
-  compute.instances.reset
-  compute.instances.resume
-  compute.instances. sendDiagnosticInterrupt 
-  compute.instances. setDeletionProtection 
-  compute.instances. setDiskAutoDelete 
-  compute.instances.setIamPolicy
-  compute.instances.setLabels
-  compute.instances. setMachineResources 
-  compute.instances. setMachineType 
-  compute.instances.setMetadata
-  compute.instances. setMinCpuPlatform 
-  compute.instances.setName
-  compute.instances. setScheduling 
-  compute.instances. setSecurityPolicy 
-  compute.instances. setServiceAccount 
-  compute.instances. setShieldedInstanceIntegrityPolicy 
-  compute.instances. setShieldedVmIntegrityPolicy 
-  compute.instances.setTags
-  compute.instances. simulateMaintenanceEvent 
-  compute.instances.start
-  compute.instances. startWithEncryptionKey 
-  compute.instances.stop
-  compute.instances.suspend
-  compute.instances.update
-  compute.instances. updateAccessConfig 
-  compute.instances. updateDisplayDevice 
-  compute.instances. updateNetworkInterface 
-  compute.instances. updateSecurity 
-  compute.instances. updateShieldedInstanceConfig 
-  compute.instances. updateShieldedVmConfig 
-  compute.instances.use
-  compute.instances.useReadOnly
  compute.instantSnapshots.* 
 
-  compute.instantSnapshots. create 
-  compute.instantSnapshots. delete 
-  compute.instantSnapshots. export 
-  compute.instantSnapshots.get
-  compute.instantSnapshots. getIamPolicy 
-  compute.instantSnapshots.list
-  compute.instantSnapshots. setIamPolicy 
-  compute.instantSnapshots. setLabels 
-  compute.instantSnapshots. useReadOnly 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.interconnectGroups.get 
 compute.  
  compute.  
 
-  compute.interconnectLocations. get 
-  compute.interconnectLocations. list 
  compute.  
 
-  compute.interconnectRemoteLocations. get 
-  compute.interconnectRemoteLocations. list 
 compute.interconnects.get 
 compute.interconnects.list 
 compute.  
 compute.  
  compute.licenseCodes.* 
 
-  compute.licenseCodes.get
-  compute.licenseCodes. getIamPolicy 
-  compute.licenseCodes.list
-  compute.licenseCodes. setIamPolicy 
  compute.licenses.* 
 
-  compute.licenses.create
-  compute.licenses.delete
-  compute.licenses.get
-  compute.licenses.getIamPolicy
-  compute.licenses.list
-  compute.licenses.setIamPolicy
-  compute.licenses.update
  compute.machineImages.* 
 
-  compute.machineImages.create
-  compute.machineImages.delete
-  compute.machineImages.get
-  compute.machineImages. getIamPolicy 
-  compute.machineImages.list
-  compute.machineImages. setIamPolicy 
-  compute.machineImages. setLabels 
-  compute.machineImages. useReadOnly 
  compute.machineTypes.* 
 
-  compute.machineTypes.get
-  compute.machineTypes.list
  compute.multiMig.* 
 
-  compute.multiMig.create
-  compute.multiMig.delete
-  compute.multiMig.get
-  compute.multiMig.list
  compute.multiMigMembers.* 
 
-  compute.multiMigMembers.get
-  compute.multiMigMembers.list
 compute.networkAttachments.get 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
  compute.  
 
-  compute.networkEndpointGroups. attachNetworkEndpoints 
-  compute.networkEndpointGroups. create 
-  compute.networkEndpointGroups. createTagBinding 
-  compute.networkEndpointGroups. delete 
-  compute.networkEndpointGroups. deleteTagBinding 
-  compute.networkEndpointGroups. detachNetworkEndpoints 
-  compute.networkEndpointGroups. get 
-  compute.networkEndpointGroups. list 
-  compute.networkEndpointGroups. listEffectiveTags 
-  compute.networkEndpointGroups. listTagBindings 
-  compute.networkEndpointGroups. use 
  compute.networkProfiles.* 
 
-  compute.networkProfiles.get
-  compute.networkProfiles.list
 compute.networks.get 
 compute.  
 compute.  
 compute.networks.list 
 compute.  
 compute.  
 compute.  
 compute.networks.use 
 compute.networks.useExternalIp 
 compute.nodeGroups.get 
 compute.  
 compute.nodeGroups.list 
 compute.nodeTemplates.get 
 compute.  
 compute.nodeTemplates.list 
  compute.nodeTypes.* 
 
-  compute.nodeTypes.get
-  compute.nodeTypes.list
 compute.  
 compute.packetMirrorings.get 
 compute.packetMirrorings.list 
 compute.  
 compute.  
 compute.previewFeatures.get 
 compute.previewFeatures.list 
 compute.projects.get 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.regionHealthChecks.get 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
  compute.  
 
-  compute.regionNetworkEndpointGroups. attachNetworkEndpoints 
-  compute.regionNetworkEndpointGroups. create 
-  compute.regionNetworkEndpointGroups. createTagBinding 
-  compute.regionNetworkEndpointGroups. delete 
-  compute.regionNetworkEndpointGroups. deleteTagBinding 
-  compute.regionNetworkEndpointGroups. detachNetworkEndpoints 
-  compute.regionNetworkEndpointGroups. get 
-  compute.regionNetworkEndpointGroups. list 
-  compute.regionNetworkEndpointGroups. listEffectiveTags 
-  compute.regionNetworkEndpointGroups. listTagBindings 
-  compute.regionNetworkEndpointGroups. use 
 compute.  
 compute.  
 compute.regionOperations.get 
 compute.  
 compute.regionOperations.list 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.regionSslPolicies.get 
 compute.regionSslPolicies.list 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.regionUrlMaps.get 
 compute.regionUrlMaps.list 
 compute.  
 compute.  
 compute.regionUrlMaps.validate 
  compute.regions.* 
 
-  compute.regions.get
-  compute.regions.list
 compute.reservationBlocks.get 
 compute.reservationBlocks.list 
 compute.  
 compute.  
 compute.reservations.get 
 compute.reservations.list 
  compute.resourcePolicies.* 
 
-  compute.resourcePolicies. create 
-  compute.resourcePolicies. delete 
-  compute.resourcePolicies.get
-  compute.resourcePolicies. getIamPolicy 
-  compute.resourcePolicies.list
-  compute.resourcePolicies. setIamPolicy 
-  compute.resourcePolicies. update 
-  compute.resourcePolicies.use
-  compute.resourcePolicies. useReadOnly 
 compute.rolloutPlans.get 
 compute.rolloutPlans.list 
 compute.rollouts.get 
 compute.rollouts.list 
 compute.routers.get 
 compute.routers.getRoutePolicy 
 compute.routers.list 
 compute.routers.listBgpRoutes 
 compute.  
 compute.  
 compute.  
 compute.routes.get 
 compute.routes.list 
 compute.  
 compute.routes.listTagBindings 
 compute.securityPolicies.get 
 compute.securityPolicies.list 
 compute.  
 compute.  
 compute.serviceAttachments.get 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.snapshotSettings.get 
  compute.snapshots.* 
 
-  compute.snapshots.create
-  compute.snapshots. createTagBinding 
-  compute.snapshots.delete
-  compute.snapshots. deleteTagBinding 
-  compute.snapshots.get
-  compute.snapshots.getIamPolicy
-  compute.snapshots.list
-  compute.snapshots. listEffectiveTags 
-  compute.snapshots. listTagBindings 
-  compute.snapshots.setIamPolicy
-  compute.snapshots.setLabels
-  compute.snapshots.updateKmsKey
-  compute.snapshots.useReadOnly
 compute.spotAssistants.get 
 compute.sslCertificates.get 
 compute.sslCertificates.list 
 compute.  
 compute.  
 compute.sslPolicies.get 
 compute.sslPolicies.list 
 compute.  
 compute.  
 compute.  
 compute.storagePools.get 
 compute.  
 compute.storagePools.list 
 compute.storagePools.use 
 compute.subnetworks.get 
 compute.  
 compute.subnetworks.list 
 compute.  
 compute.  
 compute.subnetworks.use 
 compute.  
 compute.targetGrpcProxies.get 
 compute.targetGrpcProxies.list 
 compute.  
 compute.  
 compute.targetHttpProxies.get 
 compute.targetHttpProxies.list 
 compute.  
 compute.  
 compute.targetHttpsProxies.get 
 compute.  
 compute.  
 compute.  
 compute.targetInstances.get 
 compute.targetInstances.list 
 compute.  
 compute.  
 compute.targetPools.get 
 compute.targetPools.list 
 compute.  
 compute.  
 compute.targetSslProxies.get 
 compute.targetSslProxies.list 
 compute.  
 compute.  
 compute.targetTcpProxies.get 
 compute.targetTcpProxies.list 
 compute.  
 compute.  
 compute.targetVpnGateways.get 
 compute.targetVpnGateways.list 
 compute.  
 compute.  
 compute.urlMaps.get 
 compute.urlMaps.list 
 compute.  
 compute.  
 compute.urlMaps.validate 
 compute.vpnGateways.get 
 compute.vpnGateways.list 
 compute.  
 compute.  
 compute.vpnTunnels.get 
 compute.vpnTunnels.list 
 compute.  
 compute.  
 compute.wireGroups.get 
 compute.wireGroups.list 
 compute.zoneOperations.get 
 compute.  
 compute.zoneOperations.list 
  compute.zones.* 
 
-  compute.zones.get
-  compute.zones.list
 dataproc.clusters.get 
 dataproc.clusters.use 
 dataproc.jobs.cancel 
 dataproc.jobs.create 
 dataproc.jobs.delete 
 dataproc.jobs.get 
 dataproc.jobs.list 
 dataproc.jobs.update 
 iam.serviceAccounts.actAs 
 iam.serviceAccounts.get 
 iam.  
 iam.serviceAccounts.list 
 ml.jobs.create 
 ml.jobs.get 
 ml.jobs.list 
  notebooks.* 
 
-  notebooks.environments.create
-  notebooks.environments.delete
-  notebooks.environments.get
-  notebooks.environments. getIamPolicy 
-  notebooks.environments.list
-  notebooks.environments. setIamPolicy 
-  notebooks.executions.create
-  notebooks.executions.delete
-  notebooks.executions.get
-  notebooks.executions. getIamPolicy 
-  notebooks.executions.list
-  notebooks.executions. setIamPolicy 
-  notebooks.instances. checkUpgradability 
-  notebooks.instances.create
-  notebooks.instances.delete
-  notebooks.instances.diagnose
-  notebooks.instances.get
-  notebooks.instances.getHealth
-  notebooks.instances. getIamPolicy 
-  notebooks.instances.list
-  notebooks.instances.reset
-  notebooks.instances. setAccelerator 
-  notebooks.instances. setIamPolicy 
-  notebooks.instances.setLabels
-  notebooks.instances. setMachineType 
-  notebooks.instances.start
-  notebooks.instances.stop
-  notebooks.instances.update
-  notebooks.instances. updateConfig 
-  notebooks.instances. updateShieldInstanceConfig 
-  notebooks.instances.upgrade
-  notebooks.instances.use
-  notebooks.locations.get
-  notebooks.locations.list
-  notebooks.operations.cancel
-  notebooks.operations.delete
-  notebooks.operations.get
-  notebooks.operations.list
-  notebooks.runtimes.create
-  notebooks.runtimes.delete
-  notebooks.runtimes.diagnose
-  notebooks.runtimes.get
-  notebooks.runtimes. getIamPolicy 
-  notebooks.runtimes.list
-  notebooks.runtimes.reset
-  notebooks.runtimes. setIamPolicy 
-  notebooks.runtimes.start
-  notebooks.runtimes.stop
-  notebooks.runtimes.switch
-  notebooks.runtimes.update
-  notebooks.runtimes.upgrade
-  notebooks.schedules.create
-  notebooks.schedules.delete
-  notebooks.schedules.get
-  notebooks.schedules. getIamPolicy 
-  notebooks.schedules.list
-  notebooks.schedules. setIamPolicy 
 resourcemanager.projects.get 
 resourcemanager.projects.list 
 serviceusage.quotas.get 
 serviceusage.services.get 
 serviceusage.services.list 
Notebooks Viewer
( roles/  
)
Read-only access to Notebooks, all resources.
Lowest-level resources where you can grant this role:
- Instance
 aiplatform.  
 aiplatform.  
 aiplatform.schedules.get 
 aiplatform.schedules.list 
  compute.acceleratorTypes.* 
 
-  compute.acceleratorTypes.get
-  compute.acceleratorTypes.list
 compute.addresses.get 
 compute.addresses.list 
 compute.  
 compute.  
 compute.autoscalers.get 
 compute.autoscalers.list 
 compute.backendBuckets.get 
 compute.  
 compute.backendBuckets.list 
 compute.  
 compute.  
 compute.backendServices.get 
 compute.  
 compute.backendServices.list 
 compute.  
 compute.  
 compute.commitments.get 
 compute.commitments.list 
 compute.crossSiteNetworks.get 
 compute.crossSiteNetworks.list 
 compute.diskSettings.get 
  compute.diskTypes.* 
 
-  compute.diskTypes.get
-  compute.diskTypes.list
 compute.disks.get 
 compute.disks.getIamPolicy 
 compute.disks.list 
 compute.  
 compute.disks.listTagBindings 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.firewallPolicies.get 
 compute.  
 compute.firewallPolicies.list 
 compute.  
 compute.  
 compute.firewalls.get 
 compute.firewalls.list 
 compute.  
 compute.  
 compute.forwardingRules.get 
 compute.forwardingRules.list 
 compute.  
 compute.  
 compute.futureReservations.get 
 compute.  
 compute.  
 compute.globalAddresses.get 
 compute.globalAddresses.list 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.globalOperations.get 
 compute.  
 compute.globalOperations.list 
 compute.  
 compute.  
 compute.healthChecks.get 
 compute.healthChecks.list 
 compute.  
 compute.  
 compute.httpHealthChecks.get 
 compute.httpHealthChecks.list 
 compute.  
 compute.  
 compute.httpsHealthChecks.get 
 compute.httpsHealthChecks.list 
 compute.  
 compute.  
 compute.images.get 
 compute.images.getFromFamily 
 compute.images.getIamPolicy 
 compute.images.list 
 compute.  
 compute.images.listTagBindings 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.instanceGroups.get 
 compute.instanceGroups.list 
 compute.  
 compute.  
 compute.instanceSettings.get 
 compute.instanceTemplates.get 
 compute.  
 compute.instanceTemplates.list 
 compute.instances.get 
 compute.  
 compute.  
 compute.instances.getIamPolicy 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.instances.list 
 compute.  
 compute.  
 compute.  
 compute.instantSnapshots.get 
 compute.  
 compute.instantSnapshots.list 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.interconnectGroups.get 
 compute.  
  compute.  
 
-  compute.interconnectLocations. get 
-  compute.interconnectLocations. list 
  compute.  
 
-  compute.interconnectRemoteLocations. get 
-  compute.interconnectRemoteLocations. list 
 compute.interconnects.get 
 compute.interconnects.list 
 compute.  
 compute.  
 compute.licenseCodes.get 
 compute.  
 compute.licenseCodes.list 
 compute.licenses.get 
 compute.licenses.getIamPolicy 
 compute.licenses.list 
 compute.machineImages.get 
 compute.  
 compute.machineImages.list 
  compute.machineTypes.* 
 
-  compute.machineTypes.get
-  compute.machineTypes.list
 compute.multiMig.get 
 compute.multiMig.list 
  compute.multiMigMembers.* 
 
-  compute.multiMigMembers.get
-  compute.multiMigMembers.list
 compute.networkAttachments.get 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
  compute.networkProfiles.* 
 
-  compute.networkProfiles.get
-  compute.networkProfiles.list
 compute.networks.get 
 compute.  
 compute.  
 compute.networks.list 
 compute.  
 compute.  
 compute.  
 compute.nodeGroups.get 
 compute.  
 compute.nodeGroups.list 
 compute.nodeTemplates.get 
 compute.  
 compute.nodeTemplates.list 
  compute.nodeTypes.* 
 
-  compute.nodeTypes.get
-  compute.nodeTypes.list
 compute.  
 compute.packetMirrorings.get 
 compute.packetMirrorings.list 
 compute.  
 compute.  
 compute.previewFeatures.get 
 compute.previewFeatures.list 
 compute.projects.get 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.regionHealthChecks.get 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.regionOperations.get 
 compute.  
 compute.regionOperations.list 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.regionSslPolicies.get 
 compute.regionSslPolicies.list 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.  
 compute.regionUrlMaps.get 
 compute.regionUrlMaps.list 
 compute.  
 compute.  
 compute.regionUrlMaps.validate 
  compute.regions.* 
 
-  compute.regions.get
-  compute.regions.list
 compute.reservationBlocks.get 
 compute.reservationBlocks.list 
 compute.  
 compute.  
 compute.reservations.get 
 compute.reservations.list 
 compute.resourcePolicies.get 
 compute.  
 compute.resourcePolicies.list 
 compute.rolloutPlans.get 
 compute.rolloutPlans.list 
 compute.rollouts.get 
 compute.rollouts.list 
 compute.routers.get 
 compute.routers.getRoutePolicy 
 compute.routers.list 
 compute.routers.listBgpRoutes 
 compute.  
 compute.  
 compute.  
 compute.routes.get 
 compute.routes.list 
 compute.  
 compute.routes.listTagBindings 
 compute.securityPolicies.get 
 compute.securityPolicies.list 
 compute.  
 compute.  
 compute.serviceAttachments.get 
 compute.  
 compute.  
 compute.  
 compute.  
 compute.snapshotSettings.get 
 compute.snapshots.get 
 compute.snapshots.getIamPolicy 
 compute.snapshots.list 
 compute.  
 compute.  
 compute.spotAssistants.get 
 compute.sslCertificates.get 
 compute.sslCertificates.list 
 compute.  
 compute.  
 compute.sslPolicies.get 
 compute.sslPolicies.list 
 compute.  
 compute.  
 compute.  
 compute.storagePools.get 
 compute.  
 compute.storagePools.list 
 compute.subnetworks.get 
 compute.  
 compute.subnetworks.list 
 compute.  
 compute.  
 compute.targetGrpcProxies.get 
 compute.targetGrpcProxies.list 
 compute.  
 compute.  
 compute.targetHttpProxies.get 
 compute.targetHttpProxies.list 
 compute.  
 compute.  
 compute.targetHttpsProxies.get 
 compute.  
 compute.  
 compute.  
 compute.targetInstances.get 
 compute.targetInstances.list 
 compute.  
 compute.  
 compute.targetPools.get 
 compute.targetPools.list 
 compute.  
 compute.  
 compute.targetSslProxies.get 
 compute.targetSslProxies.list 
 compute.  
 compute.  
 compute.targetTcpProxies.get 
 compute.targetTcpProxies.list 
 compute.  
 compute.  
 compute.targetVpnGateways.get 
 compute.targetVpnGateways.list 
 compute.  
 compute.  
 compute.urlMaps.get 
 compute.urlMaps.list 
 compute.  
 compute.  
 compute.urlMaps.validate 
 compute.vpnGateways.get 
 compute.vpnGateways.list 
 compute.  
 compute.  
 compute.vpnTunnels.get 
 compute.vpnTunnels.list 
 compute.  
 compute.  
 compute.wireGroups.get 
 compute.wireGroups.list 
 compute.zoneOperations.get 
 compute.  
 compute.zoneOperations.list 
  compute.zones.* 
 
-  compute.zones.get
-  compute.zones.list
 notebooks.environments.get 
 notebooks.  
 notebooks.environments.list 
 notebooks.executions.get 
 notebooks.  
 notebooks.executions.list 
 notebooks.  
 notebooks.instances.get 
 notebooks.instances.getHealth 
 notebooks.  
 notebooks.instances.list 
  notebooks.locations.* 
 
-  notebooks.locations.get
-  notebooks.locations.list
 notebooks.operations.get 
 notebooks.operations.list 
 notebooks.runtimes.get 
 notebooks.  
 notebooks.runtimes.list 
 notebooks.schedules.get 
 notebooks.  
 notebooks.schedules.list 
 resourcemanager.projects.get 
 resourcemanager.projects.list 
 serviceusage.quotas.get 
 serviceusage.services.get 
 serviceusage.services.list 
Basic roles
The older Google Cloud basic roles are common to all Google Cloud services. These roles are Owner, Editor, and Viewer.
The basic roles provide permissions across Google Cloud, not just for Vertex AI Workbench. For this reason, you should use Vertex AI Workbench roles whenever possible.
Custom roles
If the predefined IAM roles for Vertex AI Workbench don't meet your needs, you can define custom roles. Custom roles enable you to choose a specific set of permissions, create your own role with those permissions, and grant the role to users in your organization. For more information, see Understanding IAM custom roles .
Project-level access versus resource-level policies
A resource inherits all policies from its ancestry 
.
A policy 
set at the resource level doesn't
affect project-level policies.  You can use project-level access and
resource-level policies to customize permissions.
For example, you can grant users roles/notebooks.viewer 
permissions
at the project level so that they can view all
Vertex AI Workbench resources in the project,
and then you can grant each user roles/notebooks.admin 
permissions
on a specific user-managed notebooks instance so that they
have all of the admin 
abilities to administer that instance.
Not all Vertex AI Workbench predefined roles and resources support resource-level policies. To see which roles can be used on which resources, view the descriptions for each role.
Changes to the ability to access a resource take time to propagate. For more information, see Access change propagation .
What's next
-  Grant a principal access to a user-managed notebooks instance. 
-  Learn more about IAM . 
-  Learn how to create and manage custom IAM roles . 

