Deprecated IAM permissions

The following Identity and Access Management (IAM) permission is deprecated and shut down for Gemini Cloud Assist as of April 8, 2026:

• cloudaicompanion.instances.completeTask

Important: This permission is deprecated for Gemini Cloud Assist only. Other products, such as Gemini Code Assist and Gemini in BigQuery might still require the use of this permission.

If you have any custom IAM roles that contain this permission for controlling access to Gemini Cloud Assist, you should add the following permission to those custom roles:

• geminicloudassist.agents.invoke

For information about updating custom roles, see Create and manage custom roles.

If your custom IAM roles use the cloudaicompanion.instances.completeTask permission for controlling access to other Gemini products in Google Cloud, you should retain this permission in your custom role. If your custom IAM roles are only used to control access to Gemini Cloud Assist, you can remove the cloudaicompanion.instances.completeTask permission from those IAM roles.