IAM으로 액세스 제어

IAM으로 액세스 제어

이 페이지에서는 Identity and Access Management (IAM)를 사용하여 Colab Enterprise 리소스에 대한 액세스를 관리하는 방법을 설명합니다. 다른 Vertex AI 리소스의 액세스를 관리하려면 IAM을 사용한 Vertex AI 액세스 제어를 참고하세요.

IAM으로 노트북 액세스 제어

프로젝트 수준 또는 노트북별로 Colab Enterprise 노트북 (IPYNB 파일)에 대한 액세스를 관리할 수 있습니다.

• 프로젝트 수준에서 노트북에 대한 액세스 권한을 부여하려면 주 구성원 (사용자, 그룹 또는 서비스 계정)에 역할을 하나 이상 할당합니다.
• 특정 노트북에 대한 액세스 권한을 부여하려면 노트북의 보안 주체에게 하나 이상의 역할을 할당합니다. 자세한 내용은 노트북에 대한 액세스 관리를 참고하세요.

다른 Google Cloud 서비스와 상호작용하는 코드 실행

노트북에 대한 액세스 권한 부여는 노트북과의 상호작용과 관련된 특정 권한으로 제한됩니다. 예를 들어 노트북을 만들거나, 노트북에 코드를 작성하거나, 노트북을 삭제할 수 있는 기능을 부여할 수 있습니다.

다른 Google Cloud 서비스와 상호작용하는 코드를 실행하려면 다음 방법 중 하나를 사용해야 합니다.

• 최종 사용자 인증 정보가 사용 설정된 런타임에서 코드를 실행합니다. 즉, 노트북이 노트북 사용자와 동일한 Google Cloud 서비스에 액세스할 수 있습니다.

• 노트북이Google Cloud 서비스와 상호작용하도록 인증하고 승인하는 코드를 실행합니다.

자세한 내용은 Google Cloud와 상호작용하는 코드 실행을 참고하세요.

IAM 역할 유형

Colab Enterprise에서 사용할 수 있는 다양한 IAM 역할 유형이 있습니다.

• 사전 정의된 역할을 사용하면 프로젝트 수준에서 Colab Enterprise 리소스에 대한 관련 권한 집합을 부여할 수 있습니다.

• 기본 역할 (소유자, 편집자, 뷰어)은 프로젝트 수준에서 Colab Enterprise 리소스에 대한 액세스 제어를 제공하며 모든 Google Cloud서비스에 공통으로 적용됩니다.

• 커스텀 역할을 사용하면 특정 권한 집합을 선택하고, 해당 권한을 사용하여 고유한 역할을 만들고, 조직의 사용자에게 역할을 부여할 수 있습니다.

Colab Enterprise 프로젝트에서 이러한 역할을 추가, 업데이트 또는 삭제하려면 프로젝트, 폴더, 조직에 대한 액세스 관리 문서를 참고하세요.

Colab Enterprise의 사전 정의된 역할

Colab Enterprise는 Vertex AI의 일부이며 Colab Enterprise 리소스는 Vertex AI API를 통해 관리됩니다. 따라서 Vertex AI 역할을 통해 보안 주체에게 Colab Enterprise 리소스에 대한 액세스 권한을 부여할 수 있습니다.

다음 표에는 모든 Vertex AI 사전 정의된 역할이 포함되어 있습니다.

• 일반적인 Colab Enterprise 작업에 사전 정의된 역할을 사용하려면 Colab Enterprise 관리자(roles/aiplatform.colabEnterpriseAdmin) 및 Colab Enterprise 사용자(roles/aiplatform.colabEnterpriseUser)를 참고하세요.

• 런타임 관리와 관련된 역할은 노트북 런타임 관리자(roles/aiplatform.notebookRuntimeAdmin) 및 노트북 런타임 사용자(roles/aiplatform.notebookRuntimeUser)를 참고하세요.

• Vertex AI 관리자 (roles/aiplatform.admin), Vertex AI 사용자 (roles/aiplatform.user), Vertex AI 뷰어 (roles/aiplatform.viewer)에도 Colab Enterprise 권한이 포함됩니다.

Role	Permissions
Agent Platform Administrator (roles/aiplatform.admin) Grants full access to all resources in Agent Platform.	aiplatform.* aiplatform.agentExamples.create aiplatform.agentExamples.delete aiplatform.agentExamples.get aiplatform.agentExamples.list aiplatform.agentExamples.update aiplatform.agents.create aiplatform.agents.delete aiplatform.agents.get aiplatform.agents.list aiplatform.agents.update aiplatform.annotationSpecs.create aiplatform.annotationSpecs.delete aiplatform.annotationSpecs.get aiplatform.annotationSpecs.list aiplatform.annotationSpecs.update aiplatform.annotations.create aiplatform.annotations.delete aiplatform.annotations.get aiplatform.annotations.list aiplatform.annotations.update aiplatform.apps.create aiplatform.apps.delete aiplatform.apps.get aiplatform.apps.list aiplatform.apps.update aiplatform.artifacts.create aiplatform.artifacts.delete aiplatform.artifacts.get aiplatform.artifacts.list aiplatform.artifacts.update aiplatform.batchPredictionJobs.cancel aiplatform.batchPredictionJobs.create aiplatform.batchPredictionJobs.delete aiplatform.batchPredictionJobs.get aiplatform.batchPredictionJobs.list aiplatform.cacheConfigs.get aiplatform.cacheConfigs.update aiplatform.cachedContents.create aiplatform.cachedContents.delete aiplatform.cachedContents.get aiplatform.cachedContents.list aiplatform.cachedContents.update aiplatform.consents.get aiplatform.consents.update aiplatform.contexts.addContextArtifactsAndExecutions aiplatform.contexts.addContextChildren aiplatform.contexts.create aiplatform.contexts.delete aiplatform.contexts.get aiplatform.contexts.list aiplatform.contexts.queryContextLineageSubgraph aiplatform.contexts.update aiplatform.customJobs.cancel aiplatform.customJobs.create aiplatform.customJobs.delete aiplatform.customJobs.get aiplatform.customJobs.list aiplatform.dataItems.create aiplatform.dataItems.delete aiplatform.dataItems.get aiplatform.dataItems.list aiplatform.dataItems.update aiplatform.dataLabelingJobs.cancel aiplatform.dataLabelingJobs.create aiplatform.dataLabelingJobs.delete aiplatform.dataLabelingJobs.get aiplatform.dataLabelingJobs.list aiplatform.datasetVersions.create aiplatform.datasetVersions.delete aiplatform.datasetVersions.get aiplatform.datasetVersions.list aiplatform.datasetVersions.restore aiplatform.datasets.create aiplatform.datasets.delete aiplatform.datasets.export aiplatform.datasets.get aiplatform.datasets.import aiplatform.datasets.list aiplatform.datasets.update aiplatform.deploymentResourcePools.create aiplatform.deploymentResourcePools.delete aiplatform.deploymentResourcePools.get aiplatform.deploymentResourcePools.list aiplatform.deploymentResourcePools.queryDeployedModels aiplatform.deploymentResourcePools.update aiplatform.edgeDeploymentJobs.create aiplatform.edgeDeploymentJobs.delete aiplatform.edgeDeploymentJobs.get aiplatform.edgeDeploymentJobs.list aiplatform.edgeDeviceDebugInfo.get aiplatform.edgeDevices.create aiplatform.edgeDevices.delete aiplatform.edgeDevices.get aiplatform.edgeDevices.list aiplatform.edgeDevices.update aiplatform.endpoints.create aiplatform.endpoints.delete aiplatform.endpoints.deploy aiplatform.endpoints.explain aiplatform.endpoints.get aiplatform.endpoints.getIamPolicy aiplatform.endpoints.list aiplatform.endpoints.predict aiplatform.endpoints.setIamPolicy aiplatform.endpoints.undeploy aiplatform.endpoints.update aiplatform.entityTypes.create aiplatform.entityTypes.delete aiplatform.entityTypes.deleteFeatureValues aiplatform.entityTypes.exportFeatureValues aiplatform.entityTypes.get aiplatform.entityTypes.getIamPolicy aiplatform.entityTypes.importFeatureValues aiplatform.entityTypes.list aiplatform.entityTypes.readFeatureValues aiplatform.entityTypes.setIamPolicy aiplatform.entityTypes.streamingReadFeatureValues aiplatform.entityTypes.update aiplatform.entityTypes.writeFeatureValues aiplatform.evaluationExperiments.create aiplatform.evaluationExperiments.delete aiplatform.evaluationExperiments.get aiplatform.evaluationExperiments.list aiplatform.evaluationExperiments.update aiplatform.evaluationItems.create aiplatform.evaluationItems.delete aiplatform.evaluationItems.get aiplatform.evaluationItems.list aiplatform.evaluationItems.update aiplatform.evaluationRuns.cancel aiplatform.evaluationRuns.create aiplatform.evaluationRuns.delete aiplatform.evaluationRuns.execute aiplatform.evaluationRuns.get aiplatform.evaluationRuns.list aiplatform.evaluationRuns.update aiplatform.evaluationSets.create aiplatform.evaluationSets.delete aiplatform.evaluationSets.get aiplatform.evaluationSets.import aiplatform.evaluationSets.list aiplatform.evaluationSets.update aiplatform.exampleStores.create aiplatform.exampleStores.delete aiplatform.exampleStores.get aiplatform.exampleStores.list aiplatform.exampleStores.readExample aiplatform.exampleStores.update aiplatform.exampleStores.writeExample aiplatform.executions.addExecutionEvents aiplatform.executions.create aiplatform.executions.delete aiplatform.executions.get aiplatform.executions.list aiplatform.executions.queryExecutionInputsAndOutputs aiplatform.executions.update aiplatform.extensions.delete aiplatform.extensions.execute aiplatform.extensions.get aiplatform.extensions.import aiplatform.extensions.list aiplatform.extensions.update aiplatform.featureGroups.create aiplatform.featureGroups.delete aiplatform.featureGroups.get aiplatform.featureGroups.getIamPolicy aiplatform.featureGroups.list aiplatform.featureGroups.setIamPolicy aiplatform.featureGroups.update aiplatform.featureMonitorJobs.create aiplatform.featureMonitorJobs.get aiplatform.featureMonitorJobs.list aiplatform.featureMonitors.create aiplatform.featureMonitors.delete aiplatform.featureMonitors.get aiplatform.featureMonitors.list aiplatform.featureMonitors.update aiplatform.featureOnlineStores.create aiplatform.featureOnlineStores.delete aiplatform.featureOnlineStores.get aiplatform.featureOnlineStores.getIamPolicy aiplatform.featureOnlineStores.list aiplatform.featureOnlineStores.setIamPolicy aiplatform.featureOnlineStores.update aiplatform.featureViewSyncs.get aiplatform.featureViewSyncs.list aiplatform.featureViews.create aiplatform.featureViews.delete aiplatform.featureViews.directWrite aiplatform.featureViews.fetchFeatureValues aiplatform.featureViews.get aiplatform.featureViews.getIamPolicy aiplatform.featureViews.list aiplatform.featureViews.searchNearestEntities aiplatform.featureViews.setIamPolicy aiplatform.featureViews.sync aiplatform.featureViews.update aiplatform.features.create aiplatform.features.delete aiplatform.features.get aiplatform.features.list aiplatform.features.update aiplatform.featurestores.batchReadFeatureValues aiplatform.featurestores.create aiplatform.featurestores.delete aiplatform.featurestores.exportFeatures aiplatform.featurestores.get aiplatform.featurestores.getIamPolicy aiplatform.featurestores.importFeatures aiplatform.featurestores.list aiplatform.featurestores.readFeatures aiplatform.featurestores.setIamPolicy aiplatform.featurestores.update aiplatform.featurestores.writeFeatures aiplatform.humanInTheLoops.cancel aiplatform.humanInTheLoops.create aiplatform.humanInTheLoops.delete aiplatform.humanInTheLoops.get aiplatform.humanInTheLoops.list aiplatform.humanInTheLoops.queryAnnotationStats aiplatform.humanInTheLoops.send aiplatform.humanInTheLoops.update aiplatform.hyperparameterTuningJobs.cancel aiplatform.hyperparameterTuningJobs.create aiplatform.hyperparameterTuningJobs.delete aiplatform.hyperparameterTuningJobs.get aiplatform.hyperparameterTuningJobs.list aiplatform.indexEndpoints.create aiplatform.indexEndpoints.delete aiplatform.indexEndpoints.deploy aiplatform.indexEndpoints.get aiplatform.indexEndpoints.list aiplatform.indexEndpoints.queryVectors aiplatform.indexEndpoints.undeploy aiplatform.indexEndpoints.update aiplatform.indexes.create aiplatform.indexes.delete aiplatform.indexes.get aiplatform.indexes.list aiplatform.indexes.update aiplatform.locations.evaluateInstances aiplatform.locations.get aiplatform.locations.list aiplatform.memories.create aiplatform.memories.delete aiplatform.memories.generate aiplatform.memories.get aiplatform.memories.list aiplatform.memories.retrieve aiplatform.memories.update aiplatform.memoryRevisions.get aiplatform.memoryRevisions.list aiplatform.memoryRevisions.rollback aiplatform.metadataSchemas.create aiplatform.metadataSchemas.delete aiplatform.metadataSchemas.get aiplatform.metadataSchemas.list aiplatform.metadataStores.create aiplatform.metadataStores.delete aiplatform.metadataStores.get aiplatform.metadataStores.list aiplatform.migratableResources.migrate aiplatform.migratableResources.search aiplatform.modelDeploymentMonitoringJobs.create aiplatform.modelDeploymentMonitoringJobs.delete aiplatform.modelDeploymentMonitoringJobs.get aiplatform.modelDeploymentMonitoringJobs.list aiplatform.modelDeploymentMonitoringJobs.pause aiplatform.modelDeploymentMonitoringJobs.resume aiplatform.modelDeploymentMonitoringJobs.searchStatsAnomalies aiplatform.modelDeploymentMonitoringJobs.update aiplatform.modelEvaluationSlices.get aiplatform.modelEvaluationSlices.import aiplatform.modelEvaluationSlices.list aiplatform.modelEvaluations.exportEvaluatedDataItems aiplatform.modelEvaluations.get aiplatform.modelEvaluations.import aiplatform.modelEvaluations.list aiplatform.modelMonitoringJobs.create aiplatform.modelMonitoringJobs.delete aiplatform.modelMonitoringJobs.get aiplatform.modelMonitoringJobs.list aiplatform.modelMonitors.create aiplatform.modelMonitors.delete aiplatform.modelMonitors.get aiplatform.modelMonitors.list aiplatform.modelMonitors.searchModelMonitoringAlerts aiplatform.modelMonitors.searchModelMonitoringStats aiplatform.modelMonitors.update aiplatform.models.delete aiplatform.models.export aiplatform.models.get aiplatform.models.list aiplatform.models.update aiplatform.models.upload aiplatform.nasJobs.cancel aiplatform.nasJobs.create aiplatform.nasJobs.delete aiplatform.nasJobs.get aiplatform.nasJobs.list aiplatform.nasTrialDetails.get aiplatform.nasTrialDetails.list aiplatform.notebookExecutionJobs.create aiplatform.notebookExecutionJobs.delete aiplatform.notebookExecutionJobs.get aiplatform.notebookExecutionJobs.list aiplatform.notebookRuntimeTemplates.apply aiplatform.notebookRuntimeTemplates.create aiplatform.notebookRuntimeTemplates.delete aiplatform.notebookRuntimeTemplates.get aiplatform.notebookRuntimeTemplates.getIamPolicy aiplatform.notebookRuntimeTemplates.list aiplatform.notebookRuntimeTemplates.setIamPolicy aiplatform.notebookRuntimeTemplates.update aiplatform.notebookRuntimes.assign aiplatform.notebookRuntimes.delete aiplatform.notebookRuntimes.get aiplatform.notebookRuntimes.list aiplatform.notebookRuntimes.start aiplatform.notebookRuntimes.update aiplatform.notebookRuntimes.upgrade aiplatform.onlineEvaluators.create aiplatform.onlineEvaluators.delete aiplatform.onlineEvaluators.get aiplatform.onlineEvaluators.list aiplatform.onlineEvaluators.update aiplatform.operations.list aiplatform.persistentResources.create aiplatform.persistentResources.delete aiplatform.persistentResources.get aiplatform.persistentResources.list aiplatform.pipelineJobs.cancel aiplatform.pipelineJobs.create aiplatform.pipelineJobs.delete aiplatform.pipelineJobs.get aiplatform.pipelineJobs.list aiplatform.provisionedThroughputRevisions.get aiplatform.provisionedThroughputRevisions.list aiplatform.provisionedThroughputs.cancel aiplatform.provisionedThroughputs.create aiplatform.provisionedThroughputs.get aiplatform.provisionedThroughputs.list aiplatform.provisionedThroughputs.split aiplatform.provisionedThroughputs.update aiplatform.ragCorpora.create aiplatform.ragCorpora.delete aiplatform.ragCorpora.get aiplatform.ragCorpora.list aiplatform.ragCorpora.query aiplatform.ragCorpora.update aiplatform.ragEngineConfigs.get aiplatform.ragEngineConfigs.update aiplatform.ragFiles.delete aiplatform.ragFiles.get aiplatform.ragFiles.import aiplatform.ragFiles.list aiplatform.ragFiles.upload aiplatform.reasoningEngineRuntimeRevisions.delete aiplatform.reasoningEngineRuntimeRevisions.get aiplatform.reasoningEngineRuntimeRevisions.list aiplatform.reasoningEngineRuntimeRevisions.query aiplatform.reasoningEngines.create aiplatform.reasoningEngines.delete aiplatform.reasoningEngines.get aiplatform.reasoningEngines.getIamPolicy aiplatform.reasoningEngines.list aiplatform.reasoningEngines.query aiplatform.reasoningEngines.setIamPolicy aiplatform.reasoningEngines.update aiplatform.sandboxEnvironments.create aiplatform.sandboxEnvironments.delete aiplatform.sandboxEnvironments.execute aiplatform.sandboxEnvironments.get aiplatform.sandboxEnvironments.list aiplatform.schedules.create aiplatform.schedules.delete aiplatform.schedules.get aiplatform.schedules.list aiplatform.schedules.update aiplatform.semanticGovernancePolicies.create aiplatform.semanticGovernancePolicies.delete aiplatform.semanticGovernancePolicies.get aiplatform.semanticGovernancePolicies.list aiplatform.semanticGovernancePolicies.update aiplatform.semanticGovernancePolicyEngine.get aiplatform.semanticGovernancePolicyEngine.update aiplatform.sessionEvents.append aiplatform.sessionEvents.list aiplatform.sessions.create aiplatform.sessions.delete aiplatform.sessions.get aiplatform.sessions.list aiplatform.sessions.run aiplatform.sessions.update aiplatform.specialistPools.create aiplatform.specialistPools.delete aiplatform.specialistPools.get aiplatform.specialistPools.list aiplatform.specialistPools.update aiplatform.studies.create aiplatform.studies.delete aiplatform.studies.get aiplatform.studies.list aiplatform.studies.update aiplatform.tensorboardExperiments.create aiplatform.tensorboardExperiments.delete aiplatform.tensorboardExperiments.get aiplatform.tensorboardExperiments.list aiplatform.tensorboardExperiments.update aiplatform.tensorboardExperiments.write aiplatform.tensorboardRuns.batchCreate aiplatform.tensorboardRuns.create aiplatform.tensorboardRuns.delete aiplatform.tensorboardRuns.get aiplatform.tensorboardRuns.list aiplatform.tensorboardRuns.update aiplatform.tensorboardRuns.write aiplatform.tensorboardTimeSeries.batchCreate aiplatform.tensorboardTimeSeries.batchRead aiplatform.tensorboardTimeSeries.create aiplatform.tensorboardTimeSeries.delete aiplatform.tensorboardTimeSeries.get aiplatform.tensorboardTimeSeries.list aiplatform.tensorboardTimeSeries.read aiplatform.tensorboardTimeSeries.update aiplatform.tensorboards.create aiplatform.tensorboards.delete aiplatform.tensorboards.get aiplatform.tensorboards.list aiplatform.tensorboards.recordAccess aiplatform.tensorboards.update aiplatform.trainingPipelines.cancel aiplatform.trainingPipelines.create aiplatform.trainingPipelines.delete aiplatform.trainingPipelines.get aiplatform.trainingPipelines.list aiplatform.trials.create aiplatform.trials.delete aiplatform.trials.get aiplatform.trials.list aiplatform.trials.update aiplatform.tuningJobs.cancel aiplatform.tuningJobs.create aiplatform.tuningJobs.delete aiplatform.tuningJobs.get aiplatform.tuningJobs.list aiplatform.tuningJobs.optimizePrompt aiplatform.tuningJobs.validateReinforcementTuningReward aiplatform.tuningJobs.vertexTune resourcemanager.projects.get resourcemanager.projects.list
Aiplatform Editor (roles/aiplatform.editor) Editor role for aiplatform	aiplatform.agentExamples.* aiplatform.agentExamples.create aiplatform.agentExamples.delete aiplatform.agentExamples.get aiplatform.agentExamples.list aiplatform.agentExamples.update aiplatform.agents.* aiplatform.agents.create aiplatform.agents.delete aiplatform.agents.get aiplatform.agents.list aiplatform.agents.update aiplatform.annotationSpecs.* aiplatform.annotationSpecs.create aiplatform.annotationSpecs.delete aiplatform.annotationSpecs.get aiplatform.annotationSpecs.list aiplatform.annotationSpecs.update aiplatform.annotations.* aiplatform.annotations.create aiplatform.annotations.delete aiplatform.annotations.get aiplatform.annotations.list aiplatform.annotations.update aiplatform.apps.* aiplatform.apps.create aiplatform.apps.delete aiplatform.apps.get aiplatform.apps.list aiplatform.apps.update aiplatform.artifacts.* aiplatform.artifacts.create aiplatform.artifacts.delete aiplatform.artifacts.get aiplatform.artifacts.list aiplatform.artifacts.update aiplatform.batchPredictionJobs.* aiplatform.batchPredictionJobs.cancel aiplatform.batchPredictionJobs.create aiplatform.batchPredictionJobs.delete aiplatform.batchPredictionJobs.get aiplatform.batchPredictionJobs.list aiplatform.cacheConfigs.* aiplatform.cacheConfigs.get aiplatform.cacheConfigs.update aiplatform.cachedContents.* aiplatform.cachedContents.create aiplatform.cachedContents.delete aiplatform.cachedContents.get aiplatform.cachedContents.list aiplatform.cachedContents.update aiplatform.consents.* aiplatform.consents.get aiplatform.consents.update aiplatform.contexts.* aiplatform.contexts.addContextArtifactsAndExecutions aiplatform.contexts.addContextChildren aiplatform.contexts.create aiplatform.contexts.delete aiplatform.contexts.get aiplatform.contexts.list aiplatform.contexts.queryContextLineageSubgraph aiplatform.contexts.update aiplatform.customJobs.* aiplatform.customJobs.cancel aiplatform.customJobs.create aiplatform.customJobs.delete aiplatform.customJobs.get aiplatform.customJobs.list aiplatform.dataItems.* aiplatform.dataItems.create aiplatform.dataItems.delete aiplatform.dataItems.get aiplatform.dataItems.list aiplatform.dataItems.update aiplatform.dataLabelingJobs.* aiplatform.dataLabelingJobs.cancel aiplatform.dataLabelingJobs.create aiplatform.dataLabelingJobs.delete aiplatform.dataLabelingJobs.get aiplatform.dataLabelingJobs.list aiplatform.datasetVersions.* aiplatform.datasetVersions.create aiplatform.datasetVersions.delete aiplatform.datasetVersions.get aiplatform.datasetVersions.list aiplatform.datasetVersions.restore aiplatform.datasets.* aiplatform.datasets.create aiplatform.datasets.delete aiplatform.datasets.export aiplatform.datasets.get aiplatform.datasets.import aiplatform.datasets.list aiplatform.datasets.update aiplatform.deploymentResourcePools.* aiplatform.deploymentResourcePools.create aiplatform.deploymentResourcePools.delete aiplatform.deploymentResourcePools.get aiplatform.deploymentResourcePools.list aiplatform.deploymentResourcePools.queryDeployedModels aiplatform.deploymentResourcePools.update aiplatform.edgeDeploymentJobs.* aiplatform.edgeDeploymentJobs.create aiplatform.edgeDeploymentJobs.delete aiplatform.edgeDeploymentJobs.get aiplatform.edgeDeploymentJobs.list aiplatform.edgeDeviceDebugInfo.get aiplatform.edgeDevices.* aiplatform.edgeDevices.create aiplatform.edgeDevices.delete aiplatform.edgeDevices.get aiplatform.edgeDevices.list aiplatform.edgeDevices.update aiplatform.endpoints.create aiplatform.endpoints.delete aiplatform.endpoints.deploy aiplatform.endpoints.explain aiplatform.endpoints.get aiplatform.endpoints.getIamPolicy aiplatform.endpoints.list aiplatform.endpoints.predict aiplatform.endpoints.undeploy aiplatform.endpoints.update aiplatform.entityTypes.create aiplatform.entityTypes.delete aiplatform.entityTypes.deleteFeatureValues aiplatform.entityTypes.exportFeatureValues aiplatform.entityTypes.get aiplatform.entityTypes.getIamPolicy aiplatform.entityTypes.importFeatureValues aiplatform.entityTypes.list aiplatform.entityTypes.readFeatureValues aiplatform.entityTypes.streamingReadFeatureValues aiplatform.entityTypes.update aiplatform.entityTypes.writeFeatureValues aiplatform.evaluationExperiments.* aiplatform.evaluationExperiments.create aiplatform.evaluationExperiments.delete aiplatform.evaluationExperiments.get aiplatform.evaluationExperiments.list aiplatform.evaluationExperiments.update aiplatform.evaluationItems.* aiplatform.evaluationItems.create aiplatform.evaluationItems.delete aiplatform.evaluationItems.get aiplatform.evaluationItems.list aiplatform.evaluationItems.update aiplatform.evaluationRuns.* aiplatform.evaluationRuns.cancel aiplatform.evaluationRuns.create aiplatform.evaluationRuns.delete aiplatform.evaluationRuns.execute aiplatform.evaluationRuns.get aiplatform.evaluationRuns.list aiplatform.evaluationRuns.update aiplatform.evaluationSets.* aiplatform.evaluationSets.create aiplatform.evaluationSets.delete aiplatform.evaluationSets.get aiplatform.evaluationSets.import aiplatform.evaluationSets.list aiplatform.evaluationSets.update aiplatform.exampleStores.* aiplatform.exampleStores.create aiplatform.exampleStores.delete aiplatform.exampleStores.get aiplatform.exampleStores.list aiplatform.exampleStores.readExample aiplatform.exampleStores.update aiplatform.exampleStores.writeExample aiplatform.executions.* aiplatform.executions.addExecutionEvents aiplatform.executions.create aiplatform.executions.delete aiplatform.executions.get aiplatform.executions.list aiplatform.executions.queryExecutionInputsAndOutputs aiplatform.executions.update aiplatform.extensions.* aiplatform.extensions.delete aiplatform.extensions.execute aiplatform.extensions.get aiplatform.extensions.import aiplatform.extensions.list aiplatform.extensions.update aiplatform.featureGroups.create aiplatform.featureGroups.delete aiplatform.featureGroups.get aiplatform.featureGroups.getIamPolicy aiplatform.featureGroups.list aiplatform.featureGroups.update aiplatform.featureMonitorJobs.* aiplatform.featureMonitorJobs.create aiplatform.featureMonitorJobs.get aiplatform.featureMonitorJobs.list aiplatform.featureMonitors.* aiplatform.featureMonitors.create aiplatform.featureMonitors.delete aiplatform.featureMonitors.get aiplatform.featureMonitors.list aiplatform.featureMonitors.update aiplatform.featureOnlineStores.create aiplatform.featureOnlineStores.delete aiplatform.featureOnlineStores.get aiplatform.featureOnlineStores.getIamPolicy aiplatform.featureOnlineStores.list aiplatform.featureOnlineStores.update aiplatform.featureViewSyncs.* aiplatform.featureViewSyncs.get aiplatform.featureViewSyncs.list aiplatform.featureViews.create aiplatform.featureViews.delete aiplatform.featureViews.directWrite aiplatform.featureViews.fetchFeatureValues aiplatform.featureViews.get aiplatform.featureViews.getIamPolicy aiplatform.featureViews.list aiplatform.featureViews.searchNearestEntities aiplatform.featureViews.sync aiplatform.featureViews.update aiplatform.features.* aiplatform.features.create aiplatform.features.delete aiplatform.features.get aiplatform.features.list aiplatform.features.update aiplatform.featurestores.batchReadFeatureValues aiplatform.featurestores.create aiplatform.featurestores.delete aiplatform.featurestores.exportFeatures aiplatform.featurestores.get aiplatform.featurestores.getIamPolicy aiplatform.featurestores.importFeatures aiplatform.featurestores.list aiplatform.featurestores.readFeatures aiplatform.featurestores.update aiplatform.featurestores.writeFeatures aiplatform.humanInTheLoops.* aiplatform.humanInTheLoops.cancel aiplatform.humanInTheLoops.create aiplatform.humanInTheLoops.delete aiplatform.humanInTheLoops.get aiplatform.humanInTheLoops.list aiplatform.humanInTheLoops.queryAnnotationStats aiplatform.humanInTheLoops.send aiplatform.humanInTheLoops.update aiplatform.hyperparameterTuningJobs.* aiplatform.hyperparameterTuningJobs.cancel aiplatform.hyperparameterTuningJobs.create aiplatform.hyperparameterTuningJobs.delete aiplatform.hyperparameterTuningJobs.get aiplatform.hyperparameterTuningJobs.list aiplatform.indexEndpoints.* aiplatform.indexEndpoints.create aiplatform.indexEndpoints.delete aiplatform.indexEndpoints.deploy aiplatform.indexEndpoints.get aiplatform.indexEndpoints.list aiplatform.indexEndpoints.queryVectors aiplatform.indexEndpoints.undeploy aiplatform.indexEndpoints.update aiplatform.indexes.* aiplatform.indexes.create aiplatform.indexes.delete aiplatform.indexes.get aiplatform.indexes.list aiplatform.indexes.update aiplatform.locations.* aiplatform.locations.evaluateInstances aiplatform.locations.get aiplatform.locations.list aiplatform.memories.* aiplatform.memories.create aiplatform.memories.delete aiplatform.memories.generate aiplatform.memories.get aiplatform.memories.list aiplatform.memories.retrieve aiplatform.memories.update aiplatform.memoryRevisions.* aiplatform.memoryRevisions.get aiplatform.memoryRevisions.list aiplatform.memoryRevisions.rollback aiplatform.metadataSchemas.* aiplatform.metadataSchemas.create aiplatform.metadataSchemas.delete aiplatform.metadataSchemas.get aiplatform.metadataSchemas.list aiplatform.metadataStores.* aiplatform.metadataStores.create aiplatform.metadataStores.delete aiplatform.metadataStores.get aiplatform.metadataStores.list aiplatform.migratableResources.* aiplatform.migratableResources.migrate aiplatform.migratableResources.search aiplatform.modelDeploymentMonitoringJobs.* aiplatform.modelDeploymentMonitoringJobs.create aiplatform.modelDeploymentMonitoringJobs.delete aiplatform.modelDeploymentMonitoringJobs.get aiplatform.modelDeploymentMonitoringJobs.list aiplatform.modelDeploymentMonitoringJobs.pause aiplatform.modelDeploymentMonitoringJobs.resume aiplatform.modelDeploymentMonitoringJobs.searchStatsAnomalies aiplatform.modelDeploymentMonitoringJobs.update aiplatform.modelEvaluationSlices.* aiplatform.modelEvaluationSlices.get aiplatform.modelEvaluationSlices.import aiplatform.modelEvaluationSlices.list aiplatform.modelEvaluations.* aiplatform.modelEvaluations.exportEvaluatedDataItems aiplatform.modelEvaluations.get aiplatform.modelEvaluations.import aiplatform.modelEvaluations.list aiplatform.modelMonitoringJobs.* aiplatform.modelMonitoringJobs.create aiplatform.modelMonitoringJobs.delete aiplatform.modelMonitoringJobs.get aiplatform.modelMonitoringJobs.list aiplatform.modelMonitors.* aiplatform.modelMonitors.create aiplatform.modelMonitors.delete aiplatform.modelMonitors.get aiplatform.modelMonitors.list aiplatform.modelMonitors.searchModelMonitoringAlerts aiplatform.modelMonitors.searchModelMonitoringStats aiplatform.modelMonitors.update aiplatform.models.* aiplatform.models.delete aiplatform.models.export aiplatform.models.get aiplatform.models.list aiplatform.models.update aiplatform.models.upload aiplatform.nasJobs.* aiplatform.nasJobs.cancel aiplatform.nasJobs.create aiplatform.nasJobs.delete aiplatform.nasJobs.get aiplatform.nasJobs.list aiplatform.nasTrialDetails.* aiplatform.nasTrialDetails.get aiplatform.nasTrialDetails.list aiplatform.notebookExecutionJobs.* aiplatform.notebookExecutionJobs.create aiplatform.notebookExecutionJobs.delete aiplatform.notebookExecutionJobs.get aiplatform.notebookExecutionJobs.list aiplatform.notebookRuntimeTemplates.apply aiplatform.notebookRuntimeTemplates.create aiplatform.notebookRuntimeTemplates.delete aiplatform.notebookRuntimeTemplates.get aiplatform.notebookRuntimeTemplates.getIamPolicy aiplatform.notebookRuntimeTemplates.list aiplatform.notebookRuntimeTemplates.update aiplatform.notebookRuntimes.* aiplatform.notebookRuntimes.assign aiplatform.notebookRuntimes.delete aiplatform.notebookRuntimes.get aiplatform.notebookRuntimes.list aiplatform.notebookRuntimes.start aiplatform.notebookRuntimes.update aiplatform.notebookRuntimes.upgrade aiplatform.onlineEvaluators.* aiplatform.onlineEvaluators.create aiplatform.onlineEvaluators.delete aiplatform.onlineEvaluators.get aiplatform.onlineEvaluators.list aiplatform.onlineEvaluators.update aiplatform.operations.list aiplatform.persistentResources.* aiplatform.persistentResources.create aiplatform.persistentResources.delete aiplatform.persistentResources.get aiplatform.persistentResources.list aiplatform.pipelineJobs.* aiplatform.pipelineJobs.cancel aiplatform.pipelineJobs.create aiplatform.pipelineJobs.delete aiplatform.pipelineJobs.get aiplatform.pipelineJobs.list aiplatform.provisionedThroughputRevisions.* aiplatform.provisionedThroughputRevisions.get aiplatform.provisionedThroughputRevisions.list aiplatform.provisionedThroughputs.* aiplatform.provisionedThroughputs.cancel aiplatform.provisionedThroughputs.create aiplatform.provisionedThroughputs.get aiplatform.provisionedThroughputs.list aiplatform.provisionedThroughputs.split aiplatform.provisionedThroughputs.update aiplatform.ragCorpora.* aiplatform.ragCorpora.create aiplatform.ragCorpora.delete aiplatform.ragCorpora.get aiplatform.ragCorpora.list aiplatform.ragCorpora.query aiplatform.ragCorpora.update aiplatform.ragEngineConfigs.* aiplatform.ragEngineConfigs.get aiplatform.ragEngineConfigs.update aiplatform.ragFiles.* aiplatform.ragFiles.delete aiplatform.ragFiles.get aiplatform.ragFiles.import aiplatform.ragFiles.list aiplatform.ragFiles.upload aiplatform.reasoningEngineRuntimeRevisions.* aiplatform.reasoningEngineRuntimeRevisions.delete aiplatform.reasoningEngineRuntimeRevisions.get aiplatform.reasoningEngineRuntimeRevisions.list aiplatform.reasoningEngineRuntimeRevisions.query aiplatform.reasoningEngines.create aiplatform.reasoningEngines.delete aiplatform.reasoningEngines.get aiplatform.reasoningEngines.getIamPolicy aiplatform.reasoningEngines.list aiplatform.reasoningEngines.query aiplatform.reasoningEngines.update aiplatform.sandboxEnvironments.* aiplatform.sandboxEnvironments.create aiplatform.sandboxEnvironments.delete aiplatform.sandboxEnvironments.execute aiplatform.sandboxEnvironments.get aiplatform.sandboxEnvironments.list aiplatform.schedules.* aiplatform.schedules.create aiplatform.schedules.delete aiplatform.schedules.get aiplatform.schedules.list aiplatform.schedules.update aiplatform.semanticGovernancePolicies.* aiplatform.semanticGovernancePolicies.create aiplatform.semanticGovernancePolicies.delete aiplatform.semanticGovernancePolicies.get aiplatform.semanticGovernancePolicies.list aiplatform.semanticGovernancePolicies.update aiplatform.semanticGovernancePolicyEngine.* aiplatform.semanticGovernancePolicyEngine.get aiplatform.semanticGovernancePolicyEngine.update aiplatform.sessionEvents.* aiplatform.sessionEvents.append aiplatform.sessionEvents.list aiplatform.sessions.* aiplatform.sessions.create aiplatform.sessions.delete aiplatform.sessions.get aiplatform.sessions.list aiplatform.sessions.run aiplatform.sessions.update aiplatform.specialistPools.* aiplatform.specialistPools.create aiplatform.specialistPools.delete aiplatform.specialistPools.get aiplatform.specialistPools.list aiplatform.specialistPools.update aiplatform.studies.* aiplatform.studies.create aiplatform.studies.delete aiplatform.studies.get aiplatform.studies.list aiplatform.studies.update aiplatform.tensorboardExperiments.* aiplatform.tensorboardExperiments.create aiplatform.tensorboardExperiments.delete aiplatform.tensorboardExperiments.get aiplatform.tensorboardExperiments.list aiplatform.tensorboardExperiments.update aiplatform.tensorboardExperiments.write aiplatform.tensorboardRuns.* aiplatform.tensorboardRuns.batchCreate aiplatform.tensorboardRuns.create aiplatform.tensorboardRuns.delete aiplatform.tensorboardRuns.get aiplatform.tensorboardRuns.list aiplatform.tensorboardRuns.update aiplatform.tensorboardRuns.write aiplatform.tensorboardTimeSeries.* aiplatform.tensorboardTimeSeries.batchCreate aiplatform.tensorboardTimeSeries.batchRead aiplatform.tensorboardTimeSeries.create aiplatform.tensorboardTimeSeries.delete aiplatform.tensorboardTimeSeries.get aiplatform.tensorboardTimeSeries.list aiplatform.tensorboardTimeSeries.read aiplatform.tensorboardTimeSeries.update aiplatform.tensorboards.create aiplatform.tensorboards.delete aiplatform.tensorboards.get aiplatform.tensorboards.list aiplatform.tensorboards.update aiplatform.trainingPipelines.* aiplatform.trainingPipelines.cancel aiplatform.trainingPipelines.create aiplatform.trainingPipelines.delete aiplatform.trainingPipelines.get aiplatform.trainingPipelines.list aiplatform.trials.* aiplatform.trials.create aiplatform.trials.delete aiplatform.trials.get aiplatform.trials.list aiplatform.trials.update aiplatform.tuningJobs.* aiplatform.tuningJobs.cancel aiplatform.tuningJobs.create aiplatform.tuningJobs.delete aiplatform.tuningJobs.get aiplatform.tuningJobs.list aiplatform.tuningJobs.optimizePrompt aiplatform.tuningJobs.validateReinforcementTuningReward aiplatform.tuningJobs.vertexTune resourcemanager.projects.get resourcemanager.projects.list
Agent Platform Express User ^Beta (roles/aiplatform.expressUser) Grants user access to Agent Platform Express.	aiplatform.datasetVersions.* aiplatform.datasetVersions.create aiplatform.datasetVersions.delete aiplatform.datasetVersions.get aiplatform.datasetVersions.list aiplatform.datasetVersions.restore aiplatform.datasets.create aiplatform.datasets.delete aiplatform.datasets.get aiplatform.datasets.list aiplatform.datasets.update aiplatform.endpoints.predict aiplatform.locations.evaluateInstances aiplatform.memories.* aiplatform.memories.create aiplatform.memories.delete aiplatform.memories.generate aiplatform.memories.get aiplatform.memories.list aiplatform.memories.retrieve aiplatform.memories.update aiplatform.operations.list aiplatform.reasoningEngines.create aiplatform.reasoningEngines.delete aiplatform.reasoningEngines.get aiplatform.reasoningEngines.list aiplatform.reasoningEngines.query aiplatform.reasoningEngines.update aiplatform.sandboxEnvironments.* aiplatform.sandboxEnvironments.create aiplatform.sandboxEnvironments.delete aiplatform.sandboxEnvironments.execute aiplatform.sandboxEnvironments.get aiplatform.sandboxEnvironments.list aiplatform.sessionEvents.* aiplatform.sessionEvents.append aiplatform.sessionEvents.list aiplatform.sessions.create aiplatform.sessions.delete aiplatform.sessions.get aiplatform.sessions.list aiplatform.sessions.update
Agent Platform User (roles/aiplatform.user) Grants access to use all resource in Agent Platform.	aiplatform.agentExamples.* aiplatform.agentExamples.create aiplatform.agentExamples.delete aiplatform.agentExamples.get aiplatform.agentExamples.list aiplatform.agentExamples.update aiplatform.agents.* aiplatform.agents.create aiplatform.agents.delete aiplatform.agents.get aiplatform.agents.list aiplatform.agents.update aiplatform.annotationSpecs.* aiplatform.annotationSpecs.create aiplatform.annotationSpecs.delete aiplatform.annotationSpecs.get aiplatform.annotationSpecs.list aiplatform.annotationSpecs.update aiplatform.annotations.* aiplatform.annotations.create aiplatform.annotations.delete aiplatform.annotations.get aiplatform.annotations.list aiplatform.annotations.update aiplatform.apps.* aiplatform.apps.create aiplatform.apps.delete aiplatform.apps.get aiplatform.apps.list aiplatform.apps.update aiplatform.artifacts.* aiplatform.artifacts.create aiplatform.artifacts.delete aiplatform.artifacts.get aiplatform.artifacts.list aiplatform.artifacts.update aiplatform.batchPredictionJobs.* aiplatform.batchPredictionJobs.cancel aiplatform.batchPredictionJobs.create aiplatform.batchPredictionJobs.delete aiplatform.batchPredictionJobs.get aiplatform.batchPredictionJobs.list aiplatform.cacheConfigs.get aiplatform.cachedContents.* aiplatform.cachedContents.create aiplatform.cachedContents.delete aiplatform.cachedContents.get aiplatform.cachedContents.list aiplatform.cachedContents.update aiplatform.consents.get aiplatform.contexts.* aiplatform.contexts.addContextArtifactsAndExecutions aiplatform.contexts.addContextChildren aiplatform.contexts.create aiplatform.contexts.delete aiplatform.contexts.get aiplatform.contexts.list aiplatform.contexts.queryContextLineageSubgraph aiplatform.contexts.update aiplatform.customJobs.* aiplatform.customJobs.cancel aiplatform.customJobs.create aiplatform.customJobs.delete aiplatform.customJobs.get aiplatform.customJobs.list aiplatform.dataItems.* aiplatform.dataItems.create aiplatform.dataItems.delete aiplatform.dataItems.get aiplatform.dataItems.list aiplatform.dataItems.update aiplatform.dataLabelingJobs.* aiplatform.dataLabelingJobs.cancel aiplatform.dataLabelingJobs.create aiplatform.dataLabelingJobs.delete aiplatform.dataLabelingJobs.get aiplatform.dataLabelingJobs.list aiplatform.datasetVersions.* aiplatform.datasetVersions.create aiplatform.datasetVersions.delete aiplatform.datasetVersions.get aiplatform.datasetVersions.list aiplatform.datasetVersions.restore aiplatform.datasets.* aiplatform.datasets.create aiplatform.datasets.delete aiplatform.datasets.export aiplatform.datasets.get aiplatform.datasets.import aiplatform.datasets.list aiplatform.datasets.update aiplatform.deploymentResourcePools.* aiplatform.deploymentResourcePools.create aiplatform.deploymentResourcePools.delete aiplatform.deploymentResourcePools.get aiplatform.deploymentResourcePools.list aiplatform.deploymentResourcePools.queryDeployedModels aiplatform.deploymentResourcePools.update aiplatform.edgeDeploymentJobs.* aiplatform.edgeDeploymentJobs.create aiplatform.edgeDeploymentJobs.delete aiplatform.edgeDeploymentJobs.get aiplatform.edgeDeploymentJobs.list aiplatform.edgeDeviceDebugInfo.get aiplatform.edgeDevices.* aiplatform.edgeDevices.create aiplatform.edgeDevices.delete aiplatform.edgeDevices.get aiplatform.edgeDevices.list aiplatform.edgeDevices.update aiplatform.endpoints.create aiplatform.endpoints.delete aiplatform.endpoints.deploy aiplatform.endpoints.explain aiplatform.endpoints.get aiplatform.endpoints.list aiplatform.endpoints.predict aiplatform.endpoints.undeploy aiplatform.endpoints.update aiplatform.entityTypes.create aiplatform.entityTypes.delete aiplatform.entityTypes.deleteFeatureValues aiplatform.entityTypes.exportFeatureValues aiplatform.entityTypes.get aiplatform.entityTypes.importFeatureValues aiplatform.entityTypes.list aiplatform.entityTypes.readFeatureValues aiplatform.entityTypes.streamingReadFeatureValues aiplatform.entityTypes.update aiplatform.entityTypes.writeFeatureValues aiplatform.evaluationExperiments.* aiplatform.evaluationExperiments.create aiplatform.evaluationExperiments.delete aiplatform.evaluationExperiments.get aiplatform.evaluationExperiments.list aiplatform.evaluationExperiments.update aiplatform.evaluationItems.* aiplatform.evaluationItems.create aiplatform.evaluationItems.delete aiplatform.evaluationItems.get aiplatform.evaluationItems.list aiplatform.evaluationItems.update aiplatform.evaluationRuns.* aiplatform.evaluationRuns.cancel aiplatform.evaluationRuns.create aiplatform.evaluationRuns.delete aiplatform.evaluationRuns.execute aiplatform.evaluationRuns.get aiplatform.evaluationRuns.list aiplatform.evaluationRuns.update aiplatform.evaluationSets.* aiplatform.evaluationSets.create aiplatform.evaluationSets.delete aiplatform.evaluationSets.get aiplatform.evaluationSets.import aiplatform.evaluationSets.list aiplatform.evaluationSets.update aiplatform.exampleStores.* aiplatform.exampleStores.create aiplatform.exampleStores.delete aiplatform.exampleStores.get aiplatform.exampleStores.list aiplatform.exampleStores.readExample aiplatform.exampleStores.update aiplatform.exampleStores.writeExample aiplatform.executions.* aiplatform.executions.addExecutionEvents aiplatform.executions.create aiplatform.executions.delete aiplatform.executions.get aiplatform.executions.list aiplatform.executions.queryExecutionInputsAndOutputs aiplatform.executions.update aiplatform.extensions.* aiplatform.extensions.delete aiplatform.extensions.execute aiplatform.extensions.get aiplatform.extensions.import aiplatform.extensions.list aiplatform.extensions.update aiplatform.featureGroups.create aiplatform.featureGroups.delete aiplatform.featureGroups.get aiplatform.featureGroups.list aiplatform.featureGroups.update aiplatform.featureMonitorJobs.* aiplatform.featureMonitorJobs.create aiplatform.featureMonitorJobs.get aiplatform.featureMonitorJobs.list aiplatform.featureMonitors.* aiplatform.featureMonitors.create aiplatform.featureMonitors.delete aiplatform.featureMonitors.get aiplatform.featureMonitors.list aiplatform.featureMonitors.update aiplatform.featureOnlineStores.create aiplatform.featureOnlineStores.delete aiplatform.featureOnlineStores.get aiplatform.featureOnlineStores.list aiplatform.featureOnlineStores.update aiplatform.featureViewSyncs.* aiplatform.featureViewSyncs.get aiplatform.featureViewSyncs.list aiplatform.featureViews.create aiplatform.featureViews.delete aiplatform.featureViews.directWrite aiplatform.featureViews.fetchFeatureValues aiplatform.featureViews.get aiplatform.featureViews.list aiplatform.featureViews.searchNearestEntities aiplatform.featureViews.sync aiplatform.featureViews.update aiplatform.features.* aiplatform.features.create aiplatform.features.delete aiplatform.features.get aiplatform.features.list aiplatform.features.update aiplatform.featurestores.batchReadFeatureValues aiplatform.featurestores.create aiplatform.featurestores.delete aiplatform.featurestores.exportFeatures aiplatform.featurestores.get aiplatform.featurestores.importFeatures aiplatform.featurestores.list aiplatform.featurestores.readFeatures aiplatform.featurestores.update aiplatform.featurestores.writeFeatures aiplatform.humanInTheLoops.* aiplatform.humanInTheLoops.cancel aiplatform.humanInTheLoops.create aiplatform.humanInTheLoops.delete aiplatform.humanInTheLoops.get aiplatform.humanInTheLoops.list aiplatform.humanInTheLoops.queryAnnotationStats aiplatform.humanInTheLoops.send aiplatform.humanInTheLoops.update aiplatform.hyperparameterTuningJobs.* aiplatform.hyperparameterTuningJobs.cancel aiplatform.hyperparameterTuningJobs.create aiplatform.hyperparameterTuningJobs.delete aiplatform.hyperparameterTuningJobs.get aiplatform.hyperparameterTuningJobs.list aiplatform.indexEndpoints.* aiplatform.indexEndpoints.create aiplatform.indexEndpoints.delete aiplatform.indexEndpoints.deploy aiplatform.indexEndpoints.get aiplatform.indexEndpoints.list aiplatform.indexEndpoints.queryVectors aiplatform.indexEndpoints.undeploy aiplatform.indexEndpoints.update aiplatform.indexes.* aiplatform.indexes.create aiplatform.indexes.delete aiplatform.indexes.get aiplatform.indexes.list aiplatform.indexes.update aiplatform.locations.* aiplatform.locations.evaluateInstances aiplatform.locations.get aiplatform.locations.list aiplatform.memories.* aiplatform.memories.create aiplatform.memories.delete aiplatform.memories.generate aiplatform.memories.get aiplatform.memories.list aiplatform.memories.retrieve aiplatform.memories.update aiplatform.memoryRevisions.* aiplatform.memoryRevisions.get aiplatform.memoryRevisions.list aiplatform.memoryRevisions.rollback aiplatform.metadataSchemas.* aiplatform.metadataSchemas.create aiplatform.metadataSchemas.delete aiplatform.metadataSchemas.get aiplatform.metadataSchemas.list aiplatform.metadataStores.* aiplatform.metadataStores.create aiplatform.metadataStores.delete aiplatform.metadataStores.get aiplatform.metadataStores.list aiplatform.modelDeploymentMonitoringJobs.* aiplatform.modelDeploymentMonitoringJobs.create aiplatform.modelDeploymentMonitoringJobs.delete aiplatform.modelDeploymentMonitoringJobs.get aiplatform.modelDeploymentMonitoringJobs.list aiplatform.modelDeploymentMonitoringJobs.pause aiplatform.modelDeploymentMonitoringJobs.resume aiplatform.modelDeploymentMonitoringJobs.searchStatsAnomalies aiplatform.modelDeploymentMonitoringJobs.update aiplatform.modelEvaluationSlices.* aiplatform.modelEvaluationSlices.get aiplatform.modelEvaluationSlices.import aiplatform.modelEvaluationSlices.list aiplatform.modelEvaluations.* aiplatform.modelEvaluations.exportEvaluatedDataItems aiplatform.modelEvaluations.get aiplatform.modelEvaluations.import aiplatform.modelEvaluations.list aiplatform.modelMonitoringJobs.* aiplatform.modelMonitoringJobs.create aiplatform.modelMonitoringJobs.delete aiplatform.modelMonitoringJobs.get aiplatform.modelMonitoringJobs.list aiplatform.modelMonitors.* aiplatform.modelMonitors.create aiplatform.modelMonitors.delete aiplatform.modelMonitors.get aiplatform.modelMonitors.list aiplatform.modelMonitors.searchModelMonitoringAlerts aiplatform.modelMonitors.searchModelMonitoringStats aiplatform.modelMonitors.update aiplatform.models.* aiplatform.models.delete aiplatform.models.export aiplatform.models.get aiplatform.models.list aiplatform.models.update aiplatform.models.upload aiplatform.nasJobs.* aiplatform.nasJobs.cancel aiplatform.nasJobs.create aiplatform.nasJobs.delete aiplatform.nasJobs.get aiplatform.nasJobs.list aiplatform.nasTrialDetails.* aiplatform.nasTrialDetails.get aiplatform.nasTrialDetails.list aiplatform.notebookExecutionJobs.* aiplatform.notebookExecutionJobs.create aiplatform.notebookExecutionJobs.delete aiplatform.notebookExecutionJobs.get aiplatform.notebookExecutionJobs.list aiplatform.notebookRuntimeTemplates.apply aiplatform.notebookRuntimeTemplates.create aiplatform.notebookRuntimeTemplates.delete aiplatform.notebookRuntimeTemplates.get aiplatform.notebookRuntimeTemplates.list aiplatform.notebookRuntimeTemplates.update aiplatform.notebookRuntimes.* aiplatform.notebookRuntimes.assign aiplatform.notebookRuntimes.delete aiplatform.notebookRuntimes.get aiplatform.notebookRuntimes.list aiplatform.notebookRuntimes.start aiplatform.notebookRuntimes.update aiplatform.notebookRuntimes.upgrade aiplatform.onlineEvaluators.* aiplatform.onlineEvaluators.create aiplatform.onlineEvaluators.delete aiplatform.onlineEvaluators.get aiplatform.onlineEvaluators.list aiplatform.onlineEvaluators.update aiplatform.operations.list aiplatform.persistentResources.get aiplatform.persistentResources.list aiplatform.pipelineJobs.* aiplatform.pipelineJobs.cancel aiplatform.pipelineJobs.create aiplatform.pipelineJobs.delete aiplatform.pipelineJobs.get aiplatform.pipelineJobs.list aiplatform.provisionedThroughputRevisions.* aiplatform.provisionedThroughputRevisions.get aiplatform.provisionedThroughputRevisions.list aiplatform.provisionedThroughputs.get aiplatform.provisionedThroughputs.list aiplatform.ragCorpora.* aiplatform.ragCorpora.create aiplatform.ragCorpora.delete aiplatform.ragCorpora.get aiplatform.ragCorpora.list aiplatform.ragCorpora.query aiplatform.ragCorpora.update aiplatform.ragEngineConfigs.get aiplatform.ragFiles.* aiplatform.ragFiles.delete aiplatform.ragFiles.get aiplatform.ragFiles.import aiplatform.ragFiles.list aiplatform.ragFiles.upload aiplatform.reasoningEngineRuntimeRevisions.* aiplatform.reasoningEngineRuntimeRevisions.delete aiplatform.reasoningEngineRuntimeRevisions.get aiplatform.reasoningEngineRuntimeRevisions.list aiplatform.reasoningEngineRuntimeRevisions.query aiplatform.reasoningEngines.create aiplatform.reasoningEngines.delete aiplatform.reasoningEngines.get aiplatform.reasoningEngines.list aiplatform.reasoningEngines.query aiplatform.reasoningEngines.update aiplatform.sandboxEnvironments.* aiplatform.sandboxEnvironments.create aiplatform.sandboxEnvironments.delete aiplatform.sandboxEnvironments.execute aiplatform.sandboxEnvironments.get aiplatform.sandboxEnvironments.list aiplatform.schedules.* aiplatform.schedules.create aiplatform.schedules.delete aiplatform.schedules.get aiplatform.schedules.list aiplatform.schedules.update aiplatform.semanticGovernancePolicies.* aiplatform.semanticGovernancePolicies.create aiplatform.semanticGovernancePolicies.delete aiplatform.semanticGovernancePolicies.get aiplatform.semanticGovernancePolicies.list aiplatform.semanticGovernancePolicies.update aiplatform.semanticGovernancePolicyEngine.* aiplatform.semanticGovernancePolicyEngine.get aiplatform.semanticGovernancePolicyEngine.update aiplatform.sessionEvents.* aiplatform.sessionEvents.append aiplatform.sessionEvents.list aiplatform.sessions.* aiplatform.sessions.create aiplatform.sessions.delete aiplatform.sessions.get aiplatform.sessions.list aiplatform.sessions.run aiplatform.sessions.update aiplatform.specialistPools.* aiplatform.specialistPools.create aiplatform.specialistPools.delete aiplatform.specialistPools.get aiplatform.specialistPools.list aiplatform.specialistPools.update aiplatform.studies.* aiplatform.studies.create aiplatform.studies.delete aiplatform.studies.get aiplatform.studies.list aiplatform.studies.update aiplatform.tensorboardExperiments.* aiplatform.tensorboardExperiments.create aiplatform.tensorboardExperiments.delete aiplatform.tensorboardExperiments.get aiplatform.tensorboardExperiments.list aiplatform.tensorboardExperiments.update aiplatform.tensorboardExperiments.write aiplatform.tensorboardRuns.* aiplatform.tensorboardRuns.batchCreate aiplatform.tensorboardRuns.create aiplatform.tensorboardRuns.delete aiplatform.tensorboardRuns.get aiplatform.tensorboardRuns.list aiplatform.tensorboardRuns.update aiplatform.tensorboardRuns.write aiplatform.tensorboardTimeSeries.* aiplatform.tensorboardTimeSeries.batchCreate aiplatform.tensorboardTimeSeries.batchRead aiplatform.tensorboardTimeSeries.create aiplatform.tensorboardTimeSeries.delete aiplatform.tensorboardTimeSeries.get aiplatform.tensorboardTimeSeries.list aiplatform.tensorboardTimeSeries.read aiplatform.tensorboardTimeSeries.update aiplatform.tensorboards.create aiplatform.tensorboards.delete aiplatform.tensorboards.get aiplatform.tensorboards.list aiplatform.tensorboards.update aiplatform.trainingPipelines.* aiplatform.trainingPipelines.cancel aiplatform.trainingPipelines.create aiplatform.trainingPipelines.delete aiplatform.trainingPipelines.get aiplatform.trainingPipelines.list aiplatform.trials.* aiplatform.trials.create aiplatform.trials.delete aiplatform.trials.get aiplatform.trials.list aiplatform.trials.update aiplatform.tuningJobs.* aiplatform.tuningJobs.cancel aiplatform.tuningJobs.create aiplatform.tuningJobs.delete aiplatform.tuningJobs.get aiplatform.tuningJobs.list aiplatform.tuningJobs.optimizePrompt aiplatform.tuningJobs.validateReinforcementTuningReward aiplatform.tuningJobs.vertexTune resourcemanager.projects.get resourcemanager.projects.list
Agent Platform Viewer (roles/aiplatform.viewer) Grants access to view all resource in Agent Platform.	aiplatform.agentExamples.get aiplatform.agentExamples.list aiplatform.agents.get aiplatform.agents.list aiplatform.annotationSpecs.get aiplatform.annotationSpecs.list aiplatform.annotations.get aiplatform.annotations.list aiplatform.apps.get aiplatform.apps.list aiplatform.artifacts.get aiplatform.artifacts.list aiplatform.batchPredictionJobs.get aiplatform.batchPredictionJobs.list aiplatform.cacheConfigs.get aiplatform.cachedContents.get aiplatform.cachedContents.list aiplatform.consents.get aiplatform.contexts.get aiplatform.contexts.list aiplatform.contexts.queryContextLineageSubgraph aiplatform.customJobs.get aiplatform.customJobs.list aiplatform.dataItems.get aiplatform.dataItems.list aiplatform.dataLabelingJobs.get aiplatform.dataLabelingJobs.list aiplatform.datasetVersions.get aiplatform.datasetVersions.list aiplatform.datasets.get aiplatform.datasets.list aiplatform.deploymentResourcePools.get aiplatform.deploymentResourcePools.list aiplatform.deploymentResourcePools.queryDeployedModels aiplatform.edgeDeploymentJobs.get aiplatform.edgeDeploymentJobs.list aiplatform.edgeDeviceDebugInfo.get aiplatform.edgeDevices.get aiplatform.edgeDevices.list aiplatform.endpoints.get aiplatform.endpoints.list aiplatform.entityTypes.get aiplatform.entityTypes.list aiplatform.evaluationExperiments.get aiplatform.evaluationExperiments.list aiplatform.evaluationItems.get aiplatform.evaluationItems.list aiplatform.evaluationRuns.get aiplatform.evaluationRuns.list aiplatform.evaluationSets.get aiplatform.evaluationSets.list aiplatform.exampleStores.get aiplatform.exampleStores.list aiplatform.exampleStores.readExample aiplatform.executions.get aiplatform.executions.list aiplatform.executions.queryExecutionInputsAndOutputs aiplatform.extensions.get aiplatform.extensions.list aiplatform.featureGroups.get aiplatform.featureGroups.list aiplatform.featureMonitorJobs.get aiplatform.featureMonitorJobs.list aiplatform.featureMonitors.get aiplatform.featureMonitors.list aiplatform.featureOnlineStores.get aiplatform.featureOnlineStores.list aiplatform.featureViewSyncs.* aiplatform.featureViewSyncs.get aiplatform.featureViewSyncs.list aiplatform.featureViews.fetchFeatureValues aiplatform.featureViews.get aiplatform.featureViews.list aiplatform.featureViews.searchNearestEntities aiplatform.features.get aiplatform.features.list aiplatform.featurestores.get aiplatform.featurestores.list aiplatform.humanInTheLoops.get aiplatform.humanInTheLoops.list aiplatform.hyperparameterTuningJobs.get aiplatform.hyperparameterTuningJobs.list aiplatform.indexEndpoints.get aiplatform.indexEndpoints.list aiplatform.indexEndpoints.queryVectors aiplatform.indexes.get aiplatform.indexes.list aiplatform.locations.get aiplatform.locations.list aiplatform.memories.get aiplatform.memories.list aiplatform.memoryRevisions.get aiplatform.memoryRevisions.list aiplatform.metadataSchemas.get aiplatform.metadataSchemas.list aiplatform.metadataStores.get aiplatform.metadataStores.list aiplatform.modelDeploymentMonitoringJobs.get aiplatform.modelDeploymentMonitoringJobs.list aiplatform.modelDeploymentMonitoringJobs.searchStatsAnomalies aiplatform.modelEvaluationSlices.get aiplatform.modelEvaluationSlices.list aiplatform.modelEvaluations.get aiplatform.modelEvaluations.list aiplatform.modelMonitoringJobs.get aiplatform.modelMonitoringJobs.list aiplatform.modelMonitors.get aiplatform.modelMonitors.list aiplatform.modelMonitors.searchModelMonitoringAlerts aiplatform.modelMonitors.searchModelMonitoringStats aiplatform.models.get aiplatform.models.list aiplatform.nasJobs.get aiplatform.nasJobs.list aiplatform.nasTrialDetails.* aiplatform.nasTrialDetails.get aiplatform.nasTrialDetails.list aiplatform.notebookExecutionJobs.get aiplatform.notebookExecutionJobs.list aiplatform.notebookRuntimeTemplates.get aiplatform.notebookRuntimeTemplates.list aiplatform.notebookRuntimes.get aiplatform.notebookRuntimes.list aiplatform.onlineEvaluators.get aiplatform.onlineEvaluators.list aiplatform.operations.list aiplatform.persistentResources.get aiplatform.persistentResources.list aiplatform.pipelineJobs.get aiplatform.pipelineJobs.list aiplatform.provisionedThroughputRevisions.* aiplatform.provisionedThroughputRevisions.get aiplatform.provisionedThroughputRevisions.list aiplatform.provisionedThroughputs.get aiplatform.provisionedThroughputs.list aiplatform.ragCorpora.get aiplatform.ragCorpora.list aiplatform.ragCorpora.query aiplatform.ragEngineConfigs.get aiplatform.ragFiles.get aiplatform.ragFiles.list aiplatform.reasoningEngineRuntimeRevisions.get aiplatform.reasoningEngineRuntimeRevisions.list aiplatform.reasoningEngines.get aiplatform.reasoningEngines.list aiplatform.reasoningEngines.query aiplatform.sandboxEnvironments.get aiplatform.sandboxEnvironments.list aiplatform.schedules.get aiplatform.schedules.list aiplatform.semanticGovernancePolicies.get aiplatform.semanticGovernancePolicies.list aiplatform.semanticGovernancePolicyEngine.get aiplatform.sessionEvents.list aiplatform.sessions.get aiplatform.sessions.list aiplatform.specialistPools.get aiplatform.specialistPools.list aiplatform.specialistPools.update aiplatform.studies.get aiplatform.studies.list aiplatform.tensorboardExperiments.get aiplatform.tensorboardExperiments.list aiplatform.tensorboardRuns.get aiplatform.tensorboardRuns.list aiplatform.tensorboardTimeSeries.batchRead aiplatform.tensorboardTimeSeries.get aiplatform.tensorboardTimeSeries.list aiplatform.tensorboardTimeSeries.read aiplatform.tensorboards.get aiplatform.tensorboards.list aiplatform.trainingPipelines.get aiplatform.trainingPipelines.list aiplatform.trials.get aiplatform.trials.list aiplatform.tuningJobs.get aiplatform.tuningJobs.list resourcemanager.projects.get resourcemanager.projects.list
Colab Enterprise Admin (roles/aiplatform.colabEnterpriseAdmin) Admin role of using colab enterprise.	aiplatform.locations.get aiplatform.notebookExecutionJobs.* aiplatform.notebookExecutionJobs.create aiplatform.notebookExecutionJobs.delete aiplatform.notebookExecutionJobs.get aiplatform.notebookExecutionJobs.list aiplatform.notebookRuntimeTemplates.* aiplatform.notebookRuntimeTemplates.apply aiplatform.notebookRuntimeTemplates.create aiplatform.notebookRuntimeTemplates.delete aiplatform.notebookRuntimeTemplates.get aiplatform.notebookRuntimeTemplates.getIamPolicy aiplatform.notebookRuntimeTemplates.list aiplatform.notebookRuntimeTemplates.setIamPolicy aiplatform.notebookRuntimeTemplates.update aiplatform.notebookRuntimes.* aiplatform.notebookRuntimes.assign aiplatform.notebookRuntimes.delete aiplatform.notebookRuntimes.get aiplatform.notebookRuntimes.list aiplatform.notebookRuntimes.start aiplatform.notebookRuntimes.update aiplatform.notebookRuntimes.upgrade aiplatform.operations.list aiplatform.pipelineJobs.create aiplatform.schedules.* aiplatform.schedules.create aiplatform.schedules.delete aiplatform.schedules.get aiplatform.schedules.list aiplatform.schedules.update compute.reservations.get compute.reservations.list dataform.* dataform.commentThreads.create dataform.commentThreads.delete dataform.commentThreads.get dataform.commentThreads.list dataform.commentThreads.update dataform.comments.create dataform.comments.delete dataform.comments.get dataform.comments.list dataform.comments.update dataform.compilationResults.create dataform.compilationResults.get dataform.compilationResults.list dataform.compilationResults.query dataform.config.get dataform.config.update dataform.folders.addContents dataform.folders.create dataform.folders.delete dataform.folders.deleteTree dataform.folders.get dataform.folders.getIamPolicy dataform.folders.move dataform.folders.queryContents dataform.folders.setIamPolicy dataform.folders.update dataform.locations.get dataform.locations.list dataform.operations.cancel dataform.operations.delete dataform.operations.get dataform.operations.list dataform.releaseConfigs.create dataform.releaseConfigs.delete dataform.releaseConfigs.get dataform.releaseConfigs.list dataform.releaseConfigs.update dataform.repositories.commit dataform.repositories.computeAccessTokenStatus dataform.repositories.create dataform.repositories.delete dataform.repositories.fetchHistory dataform.repositories.fetchRemoteBranches dataform.repositories.get dataform.repositories.getIamPolicy dataform.repositories.list dataform.repositories.move dataform.repositories.queryDirectoryContents dataform.repositories.readFile dataform.repositories.scheduleRelease dataform.repositories.scheduleWorkflow dataform.repositories.setIamPolicy dataform.repositories.update dataform.teamFolders.create dataform.teamFolders.delete dataform.teamFolders.deleteTree dataform.teamFolders.get dataform.teamFolders.getIamPolicy dataform.teamFolders.setIamPolicy dataform.teamFolders.update dataform.workflowConfigs.create dataform.workflowConfigs.delete dataform.workflowConfigs.get dataform.workflowConfigs.list dataform.workflowConfigs.update dataform.workflowInvocations.cancel dataform.workflowInvocations.create dataform.workflowInvocations.delete dataform.workflowInvocations.get dataform.workflowInvocations.list dataform.workflowInvocations.query dataform.workspaces.commit dataform.workspaces.create dataform.workspaces.delete dataform.workspaces.fetchFileDiff dataform.workspaces.fetchFileGitStatuses dataform.workspaces.fetchGitAheadBehind dataform.workspaces.get dataform.workspaces.getIamPolicy dataform.workspaces.installNpmPackages dataform.workspaces.list dataform.workspaces.makeDirectory dataform.workspaces.moveDirectory dataform.workspaces.moveFile dataform.workspaces.pull dataform.workspaces.push dataform.workspaces.queryDirectoryContents dataform.workspaces.readFile dataform.workspaces.removeDirectory dataform.workspaces.removeFile dataform.workspaces.reset dataform.workspaces.searchFiles dataform.workspaces.setIamPolicy dataform.workspaces.writeFile resourcemanager.projects.get resourcemanager.projects.list
Colab Enterprise User (roles/aiplatform.colabEnterpriseUser) User role of using colab enterprise.	aiplatform.locations.get aiplatform.notebookExecutionJobs.* aiplatform.notebookExecutionJobs.create aiplatform.notebookExecutionJobs.delete aiplatform.notebookExecutionJobs.get aiplatform.notebookExecutionJobs.list aiplatform.notebookRuntimeTemplates.apply aiplatform.notebookRuntimeTemplates.get aiplatform.notebookRuntimeTemplates.getIamPolicy aiplatform.notebookRuntimeTemplates.list aiplatform.notebookRuntimes.assign aiplatform.notebookRuntimes.get aiplatform.notebookRuntimes.list aiplatform.operations.list aiplatform.pipelineJobs.create aiplatform.schedules.* aiplatform.schedules.create aiplatform.schedules.delete aiplatform.schedules.get aiplatform.schedules.list aiplatform.schedules.update dataform.commentThreads.get dataform.commentThreads.list dataform.comments.get dataform.comments.list dataform.folders.create dataform.locations.* dataform.locations.get dataform.locations.list dataform.repositories.create dataform.repositories.list resourcemanager.projects.get resourcemanager.projects.list
Agent Platform Feature Store EntityType owner (roles/aiplatform.entityTypeOwner) Provides full access to all permissions for a particular entity type resource. Lowest-level resources where you can grant this role: Entity type	aiplatform.entityTypes.delete aiplatform.entityTypes.deleteFeatureValues aiplatform.entityTypes.exportFeatureValues aiplatform.entityTypes.get aiplatform.entityTypes.getIamPolicy aiplatform.entityTypes.importFeatureValues aiplatform.entityTypes.readFeatureValues aiplatform.entityTypes.setIamPolicy aiplatform.entityTypes.streamingReadFeatureValues aiplatform.entityTypes.update aiplatform.entityTypes.writeFeatureValues aiplatform.featureGroups.get aiplatform.featureGroups.list aiplatform.featureMonitorJobs.get aiplatform.featureMonitorJobs.list aiplatform.featureMonitors.get aiplatform.featureMonitors.list aiplatform.featureOnlineStores.get aiplatform.featureOnlineStores.list aiplatform.featureViewSyncs.* aiplatform.featureViewSyncs.get aiplatform.featureViewSyncs.list aiplatform.featureViews.fetchFeatureValues aiplatform.featureViews.get aiplatform.featureViews.list aiplatform.featureViews.searchNearestEntities aiplatform.features.* aiplatform.features.create aiplatform.features.delete aiplatform.features.get aiplatform.features.list aiplatform.features.update aiplatform.featurestores.batchReadFeatureValues resourcemanager.projects.get resourcemanager.projects.list
Agent Platform Express Admin ^Beta (roles/aiplatform.expressAdmin) Grants admin access to Agent Platform Express.	aiplatform.batchPredictionJobs.* aiplatform.batchPredictionJobs.cancel aiplatform.batchPredictionJobs.create aiplatform.batchPredictionJobs.delete aiplatform.batchPredictionJobs.get aiplatform.batchPredictionJobs.list aiplatform.datasetVersions.* aiplatform.datasetVersions.create aiplatform.datasetVersions.delete aiplatform.datasetVersions.get aiplatform.datasetVersions.list aiplatform.datasetVersions.restore aiplatform.datasets.create aiplatform.datasets.delete aiplatform.datasets.get aiplatform.datasets.list aiplatform.datasets.update aiplatform.endpoints.predict aiplatform.locations.evaluateInstances aiplatform.memories.* aiplatform.memories.create aiplatform.memories.delete aiplatform.memories.generate aiplatform.memories.get aiplatform.memories.list aiplatform.memories.retrieve aiplatform.memories.update aiplatform.operations.list aiplatform.reasoningEngines.create aiplatform.reasoningEngines.delete aiplatform.reasoningEngines.get aiplatform.reasoningEngines.list aiplatform.reasoningEngines.query aiplatform.reasoningEngines.update aiplatform.sandboxEnvironments.* aiplatform.sandboxEnvironments.create aiplatform.sandboxEnvironments.delete aiplatform.sandboxEnvironments.execute aiplatform.sandboxEnvironments.get aiplatform.sandboxEnvironments.list aiplatform.sessionEvents.* aiplatform.sessionEvents.append aiplatform.sessionEvents.list aiplatform.sessions.create aiplatform.sessions.delete aiplatform.sessions.get aiplatform.sessions.list aiplatform.sessions.update
Agent Platform Feature Store Admin (roles/aiplatform.featurestoreAdmin) Grants full access to all resources in Agent Platform Feature Store. Lowest-level resources where you can grant this role: Entity type	aiplatform.entityTypes.* aiplatform.entityTypes.create aiplatform.entityTypes.delete aiplatform.entityTypes.deleteFeatureValues aiplatform.entityTypes.exportFeatureValues aiplatform.entityTypes.get aiplatform.entityTypes.getIamPolicy aiplatform.entityTypes.importFeatureValues aiplatform.entityTypes.list aiplatform.entityTypes.readFeatureValues aiplatform.entityTypes.setIamPolicy aiplatform.entityTypes.streamingReadFeatureValues aiplatform.entityTypes.update aiplatform.entityTypes.writeFeatureValues aiplatform.featureGroups.* aiplatform.featureGroups.create aiplatform.featureGroups.delete aiplatform.featureGroups.get aiplatform.featureGroups.getIamPolicy aiplatform.featureGroups.list aiplatform.featureGroups.setIamPolicy aiplatform.featureGroups.update aiplatform.featureMonitorJobs.* aiplatform.featureMonitorJobs.create aiplatform.featureMonitorJobs.get aiplatform.featureMonitorJobs.list aiplatform.featureMonitors.* aiplatform.featureMonitors.create aiplatform.featureMonitors.delete aiplatform.featureMonitors.get aiplatform.featureMonitors.list aiplatform.featureMonitors.update aiplatform.featureOnlineStores.* aiplatform.featureOnlineStores.create aiplatform.featureOnlineStores.delete aiplatform.featureOnlineStores.get aiplatform.featureOnlineStores.getIamPolicy aiplatform.featureOnlineStores.list aiplatform.featureOnlineStores.setIamPolicy aiplatform.featureOnlineStores.update aiplatform.featureViewSyncs.* aiplatform.featureViewSyncs.get aiplatform.featureViewSyncs.list aiplatform.featureViews.* aiplatform.featureViews.create aiplatform.featureViews.delete aiplatform.featureViews.directWrite aiplatform.featureViews.fetchFeatureValues aiplatform.featureViews.get aiplatform.featureViews.getIamPolicy aiplatform.featureViews.list aiplatform.featureViews.searchNearestEntities aiplatform.featureViews.setIamPolicy aiplatform.featureViews.sync aiplatform.featureViews.update aiplatform.features.* aiplatform.features.create aiplatform.features.delete aiplatform.features.get aiplatform.features.list aiplatform.features.update aiplatform.featurestores.* aiplatform.featurestores.batchReadFeatureValues aiplatform.featurestores.create aiplatform.featurestores.delete aiplatform.featurestores.exportFeatures aiplatform.featurestores.get aiplatform.featurestores.getIamPolicy aiplatform.featurestores.importFeatures aiplatform.featurestores.list aiplatform.featurestores.readFeatures aiplatform.featurestores.setIamPolicy aiplatform.featurestores.update aiplatform.featurestores.writeFeatures aiplatform.operations.list resourcemanager.projects.get resourcemanager.projects.list
Agent Platform Feature Store Data Viewer (roles/aiplatform.featurestoreDataViewer) This role provides permissions to read Feature data. Lowest-level resources where you can grant this role: Entity type	aiplatform.entityTypes.exportFeatureValues aiplatform.entityTypes.get aiplatform.entityTypes.readFeatureValues aiplatform.entityTypes.streamingReadFeatureValues aiplatform.featureGroups.get aiplatform.featureGroups.list aiplatform.featureMonitorJobs.get aiplatform.featureMonitorJobs.list aiplatform.featureMonitors.get aiplatform.featureMonitors.list aiplatform.featureOnlineStores.get aiplatform.featureOnlineStores.list aiplatform.featureViewSyncs.* aiplatform.featureViewSyncs.get aiplatform.featureViewSyncs.list aiplatform.featureViews.fetchFeatureValues aiplatform.featureViews.get aiplatform.featureViews.list aiplatform.featureViews.searchNearestEntities aiplatform.features.get aiplatform.features.list aiplatform.featurestores.batchReadFeatureValues resourcemanager.projects.get resourcemanager.projects.list
Agent Platform Feature Store Data Writer (roles/aiplatform.featurestoreDataWriter) This role provides permissions to read and write Feature data. Lowest-level resources where you can grant this role: Entity type	aiplatform.entityTypes.deleteFeatureValues aiplatform.entityTypes.exportFeatureValues aiplatform.entityTypes.get aiplatform.entityTypes.importFeatureValues aiplatform.entityTypes.readFeatureValues aiplatform.entityTypes.streamingReadFeatureValues aiplatform.entityTypes.writeFeatureValues aiplatform.featureGroups.get aiplatform.featureGroups.list aiplatform.featureMonitorJobs.get aiplatform.featureMonitorJobs.list aiplatform.featureMonitors.get aiplatform.featureMonitors.list aiplatform.featureOnlineStores.get aiplatform.featureOnlineStores.list aiplatform.featureViewSyncs.* aiplatform.featureViewSyncs.get aiplatform.featureViewSyncs.list aiplatform.featureViews.fetchFeatureValues aiplatform.featureViews.get aiplatform.featureViews.list aiplatform.featureViews.searchNearestEntities aiplatform.features.get aiplatform.features.list aiplatform.featurestores.batchReadFeatureValues resourcemanager.projects.get resourcemanager.projects.list
Agent Platform Feature Store Instance Creator (roles/aiplatform.featurestoreInstanceCreator) Administrator of Featurestore resources, but not the child resources under Featurestores. Lowest-level resources where you can grant this role: Featurestore	aiplatform.featurestores.create aiplatform.featurestores.delete aiplatform.featurestores.get aiplatform.featurestores.list aiplatform.featurestores.update
Agent Platform Feature Store Resource Viewer (roles/aiplatform.featurestoreResourceViewer) Viewer of all resources in Agent Platform Feature Store but cannot make changes. Lowest-level resources where you can grant this role: Entity type	aiplatform.entityTypes.get aiplatform.entityTypes.list aiplatform.featureGroups.get aiplatform.featureGroups.list aiplatform.featureMonitorJobs.get aiplatform.featureMonitorJobs.list aiplatform.featureMonitors.get aiplatform.featureMonitors.list aiplatform.featureOnlineStores.get aiplatform.featureOnlineStores.list aiplatform.featureViewSyncs.* aiplatform.featureViewSyncs.get aiplatform.featureViewSyncs.list aiplatform.featureViews.get aiplatform.featureViews.list aiplatform.features.get aiplatform.features.list aiplatform.featurestores.get aiplatform.featurestores.list aiplatform.operations.list resourcemanager.projects.get resourcemanager.projects.list
Agent Platform Feature Store User ^Beta (roles/aiplatform.featurestoreUser) Deprecated. Use featurestoreAdmin instead.	aiplatform.entityTypes.* aiplatform.entityTypes.create aiplatform.entityTypes.delete aiplatform.entityTypes.deleteFeatureValues aiplatform.entityTypes.exportFeatureValues aiplatform.entityTypes.get aiplatform.entityTypes.getIamPolicy aiplatform.entityTypes.importFeatureValues aiplatform.entityTypes.list aiplatform.entityTypes.readFeatureValues aiplatform.entityTypes.setIamPolicy aiplatform.entityTypes.streamingReadFeatureValues aiplatform.entityTypes.update aiplatform.entityTypes.writeFeatureValues aiplatform.features.* aiplatform.features.create aiplatform.features.delete aiplatform.features.get aiplatform.features.list aiplatform.features.update aiplatform.featurestores.* aiplatform.featurestores.batchReadFeatureValues aiplatform.featurestores.create aiplatform.featurestores.delete aiplatform.featurestores.exportFeatures aiplatform.featurestores.get aiplatform.featurestores.getIamPolicy aiplatform.featurestores.importFeatures aiplatform.featurestores.list aiplatform.featurestores.readFeatures aiplatform.featurestores.setIamPolicy aiplatform.featurestores.update aiplatform.featurestores.writeFeatures aiplatform.operations.list resourcemanager.projects.get resourcemanager.projects.list
Agent Platform Memory Bank Editor Role (roles/aiplatform.memoryEditor) Grants edit access to Agent Platform Memory Bank.	aiplatform.memories.create aiplatform.memories.delete aiplatform.memories.generate aiplatform.memories.update aiplatform.memoryRevisions.rollback
Agent Platform Memory Bank User Role (roles/aiplatform.memoryUser) Grants full user access to Agent Platform Memory Bank.	aiplatform.memories.* aiplatform.memories.create aiplatform.memories.delete aiplatform.memories.generate aiplatform.memories.get aiplatform.memories.list aiplatform.memories.retrieve aiplatform.memories.update aiplatform.memoryRevisions.* aiplatform.memoryRevisions.get aiplatform.memoryRevisions.list aiplatform.memoryRevisions.rollback
Agent Platform Memory Bank Viewer Role (roles/aiplatform.memoryViewer) Grants viewer access to Agent Platform Memory Bank.	aiplatform.memories.get aiplatform.memories.list aiplatform.memories.retrieve aiplatform.memoryRevisions.get aiplatform.memoryRevisions.list
Agent Platform Migration Service User (roles/aiplatform.migrator) Grants access to use migration service in Agent Platform	aiplatform.migratableResources.* aiplatform.migratableResources.migrate aiplatform.migratableResources.search
Notebook Executor User ^Beta (roles/aiplatform.notebookExecutorUser) Grants users full access to schedules and notebook execution jobs.	aiplatform.notebookExecutionJobs.* aiplatform.notebookExecutionJobs.create aiplatform.notebookExecutionJobs.delete aiplatform.notebookExecutionJobs.get aiplatform.notebookExecutionJobs.list aiplatform.operations.list aiplatform.pipelineJobs.create aiplatform.schedules.* aiplatform.schedules.create aiplatform.schedules.delete aiplatform.schedules.get aiplatform.schedules.list aiplatform.schedules.update
Notebook Runtime Admin (roles/aiplatform.notebookRuntimeAdmin) Grants full access to all runtime templates and runtimes in Notebook Service.	aiplatform.locations.get aiplatform.notebookRuntimeTemplates.* aiplatform.notebookRuntimeTemplates.apply aiplatform.notebookRuntimeTemplates.create aiplatform.notebookRuntimeTemplates.delete aiplatform.notebookRuntimeTemplates.get aiplatform.notebookRuntimeTemplates.getIamPolicy aiplatform.notebookRuntimeTemplates.list aiplatform.notebookRuntimeTemplates.setIamPolicy aiplatform.notebookRuntimeTemplates.update aiplatform.notebookRuntimes.* aiplatform.notebookRuntimes.assign aiplatform.notebookRuntimes.delete aiplatform.notebookRuntimes.get aiplatform.notebookRuntimes.list aiplatform.notebookRuntimes.start aiplatform.notebookRuntimes.update aiplatform.notebookRuntimes.upgrade aiplatform.operations.list compute.reservations.get compute.reservations.list
Notebook Runtime User (roles/aiplatform.notebookRuntimeUser) Grants users permissions to create runtime resources using a runtime template and manage the runtime resources they created.	aiplatform.locations.get aiplatform.notebookRuntimeTemplates.apply aiplatform.notebookRuntimeTemplates.get aiplatform.notebookRuntimeTemplates.getIamPolicy aiplatform.notebookRuntimeTemplates.list aiplatform.notebookRuntimes.assign aiplatform.notebookRuntimes.get aiplatform.notebookRuntimes.list aiplatform.operations.list
Vertex AI Platform Provisioned Throughput Admin ^Beta (roles/aiplatform.provisionedThroughputAdmin) Grants access to use all resources related to Vertex AI Provisioned Throughput	aiplatform.provisionedThroughputRevisions.* aiplatform.provisionedThroughputRevisions.get aiplatform.provisionedThroughputRevisions.list aiplatform.provisionedThroughputs.* aiplatform.provisionedThroughputs.cancel aiplatform.provisionedThroughputs.create aiplatform.provisionedThroughputs.get aiplatform.provisionedThroughputs.list aiplatform.provisionedThroughputs.split aiplatform.provisionedThroughputs.update
Vertex AI Platform Publisher Provisioned Throughput Admin ^Beta (roles/aiplatform.publisherProvisionedThroughputAdmin) Grants Publisher access to use all resources related to Vertex AI Provisioned Throughput Orders
Vertex AI Platform Publisher Provisioned Throughput Viewer ^Beta (roles/aiplatform.publisherProvisionedThroughputViewer) Grants Publisher access to view all resources related to Vertex AI Provisioned Throughput Orders
Agent Platform Sessions Editor Role (roles/aiplatform.sessionEditor) Grants edit access to Agent Platform Sessions.	aiplatform.sessionEvents.append aiplatform.sessions.create aiplatform.sessions.delete aiplatform.sessions.update
Agent Platform Sessions User Role (roles/aiplatform.sessionUser) Grants full user access to Agent Platform Sessions.	aiplatform.sessionEvents.* aiplatform.sessionEvents.append aiplatform.sessionEvents.list aiplatform.sessions.create aiplatform.sessions.delete aiplatform.sessions.get aiplatform.sessions.list aiplatform.sessions.update
Agent Platform Sessions Viewer Role (roles/aiplatform.sessionViewer) Grants viewer access to Agent Platform Sessions	aiplatform.sessionEvents.list aiplatform.sessions.get aiplatform.sessions.list
Agent Platform Tensorboard Web App User ^Beta (roles/aiplatform.tensorboardWebAppUser) Grants access to the Vertex AI TensorBoard web app.	aiplatform.tensorboards.recordAccess

Service agent roles

Service agent roles should only be granted to service agents.

Role	Permissions
Vertex AI Agent Sandbox Service Agent (roles/aiplatform.agentSandboxServiceAgent) Vertex AI Service Agent used to access Agent Sandbox managed resources in consumer project with restricted permissions. Warning: Do not grant service agent roles to any principals except service agents.	artifactregistry.repositories.downloadArtifacts logging.logEntries.create logging.logEntries.route serviceusage.services.use storage.objects.create storage.objects.delete storage.objects.get storage.objects.list
Vertex AI Batch Prediction Service Agent (roles/aiplatform.batchPredictionServiceAgent) Vertex AI Batch Prediction Service Agent for serving batch prediction requests. Warning: Do not grant service agent roles to any principals except service agents.	bigquery.datasets.create bigquery.datasets.get bigquery.jobs.create bigquery.jobs.get bigquery.models.create bigquery.models.export bigquery.models.getData bigquery.readsessions.create bigquery.readsessions.getData bigquery.tables.create bigquery.tables.createSnapshot bigquery.tables.deleteSnapshot bigquery.tables.export bigquery.tables.get bigquery.tables.getData bigquery.tables.restoreSnapshot bigquery.tables.update bigquery.tables.updateData storage.buckets.create storage.buckets.delete storage.buckets.get storage.buckets.list storage.buckets.update storage.objects.create storage.objects.delete storage.objects.get storage.objects.list storage.objects.update
Vertex AI Colab Service Agent (roles/aiplatform.colabServiceAgent) Gives Vertex AI Colab the proper permissions to function. Warning: Do not grant service agent roles to any principals except service agents.	aiplatform.notebookExecutionJobs.create compute.addresses.get compute.addresses.list compute.addresses.use compute.addresses.useInternal compute.disks.create compute.disks.createSnapshot compute.disks.createTagBinding compute.disks.delete compute.disks.get compute.disks.setLabels compute.disks.use compute.disks.useReadOnly compute.globalOperations.get compute.instances.attachDisk compute.instances.create compute.instances.createTagBinding compute.instances.delete compute.instances.detachDisk compute.instances.get compute.instances.getGuestAttributes compute.instances.reset compute.instances.setLabels compute.instances.setMetadata compute.instances.setServiceAccount compute.instances.setTags compute.instances.start compute.instances.stop compute.instances.useReadOnly compute.networks.get compute.networks.use compute.networks.useExternalIp compute.snapshots.create compute.snapshots.delete compute.snapshots.useReadOnly compute.subnetworks.get compute.subnetworks.list compute.subnetworks.use compute.subnetworks.useExternalIp compute.zoneOperations.get compute.zoneOperations.list iam.serviceAccounts.actAs notebooks.instances.create notebooks.instances.delete notebooks.instances.get
Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent) Gives Vertex AI Custom Code the proper permissions. Warning: Do not grant service agent roles to any principals except service agents.	aiplatform.agentExamples.* aiplatform.agentExamples.create aiplatform.agentExamples.delete aiplatform.agentExamples.get aiplatform.agentExamples.list aiplatform.agentExamples.update aiplatform.agents.* aiplatform.agents.create aiplatform.agents.delete aiplatform.agents.get aiplatform.agents.list aiplatform.agents.update aiplatform.annotationSpecs.* aiplatform.annotationSpecs.create aiplatform.annotationSpecs.delete aiplatform.annotationSpecs.get aiplatform.annotationSpecs.list aiplatform.annotationSpecs.update aiplatform.annotations.* aiplatform.annotations.create aiplatform.annotations.delete aiplatform.annotations.get aiplatform.annotations.list aiplatform.annotations.update aiplatform.apps.* aiplatform.apps.create aiplatform.apps.delete aiplatform.apps.get aiplatform.apps.list aiplatform.apps.update aiplatform.artifacts.* aiplatform.artifacts.create aiplatform.artifacts.delete aiplatform.artifacts.get aiplatform.artifacts.list aiplatform.artifacts.update aiplatform.batchPredictionJobs.* aiplatform.batchPredictionJobs.cancel aiplatform.batchPredictionJobs.create aiplatform.batchPredictionJobs.delete aiplatform.batchPredictionJobs.get aiplatform.batchPredictionJobs.list aiplatform.cacheConfigs.get aiplatform.cachedContents.* aiplatform.cachedContents.create aiplatform.cachedContents.delete aiplatform.cachedContents.get aiplatform.cachedContents.list aiplatform.cachedContents.update aiplatform.consents.get aiplatform.contexts.* aiplatform.contexts.addContextArtifactsAndExecutions aiplatform.contexts.addContextChildren aiplatform.contexts.create aiplatform.contexts.delete aiplatform.contexts.get aiplatform.contexts.list aiplatform.contexts.queryContextLineageSubgraph aiplatform.contexts.update aiplatform.customJobs.* aiplatform.customJobs.cancel aiplatform.customJobs.create aiplatform.customJobs.delete aiplatform.customJobs.get aiplatform.customJobs.list aiplatform.dataItems.* aiplatform.dataItems.create aiplatform.dataItems.delete aiplatform.dataItems.get aiplatform.dataItems.list aiplatform.dataItems.update aiplatform.dataLabelingJobs.* aiplatform.dataLabelingJobs.cancel aiplatform.dataLabelingJobs.create aiplatform.dataLabelingJobs.delete aiplatform.dataLabelingJobs.get aiplatform.dataLabelingJobs.list aiplatform.datasetVersions.* aiplatform.datasetVersions.create aiplatform.datasetVersions.delete aiplatform.datasetVersions.get aiplatform.datasetVersions.list aiplatform.datasetVersions.restore aiplatform.datasets.* aiplatform.datasets.create aiplatform.datasets.delete aiplatform.datasets.export aiplatform.datasets.get aiplatform.datasets.import aiplatform.datasets.list aiplatform.datasets.update aiplatform.deploymentResourcePools.* aiplatform.deploymentResourcePools.create aiplatform.deploymentResourcePools.delete aiplatform.deploymentResourcePools.get aiplatform.deploymentResourcePools.list aiplatform.deploymentResourcePools.queryDeployedModels aiplatform.deploymentResourcePools.update aiplatform.edgeDeploymentJobs.* aiplatform.edgeDeploymentJobs.create aiplatform.edgeDeploymentJobs.delete aiplatform.edgeDeploymentJobs.get aiplatform.edgeDeploymentJobs.list aiplatform.edgeDeviceDebugInfo.get aiplatform.edgeDevices.* aiplatform.edgeDevices.create aiplatform.edgeDevices.delete aiplatform.edgeDevices.get aiplatform.edgeDevices.list aiplatform.edgeDevices.update aiplatform.endpoints.create aiplatform.endpoints.delete aiplatform.endpoints.deploy aiplatform.endpoints.explain aiplatform.endpoints.get aiplatform.endpoints.list aiplatform.endpoints.predict aiplatform.endpoints.undeploy aiplatform.endpoints.update aiplatform.entityTypes.create aiplatform.entityTypes.delete aiplatform.entityTypes.deleteFeatureValues aiplatform.entityTypes.exportFeatureValues aiplatform.entityTypes.get aiplatform.entityTypes.importFeatureValues aiplatform.entityTypes.list aiplatform.entityTypes.readFeatureValues aiplatform.entityTypes.streamingReadFeatureValues aiplatform.entityTypes.update aiplatform.entityTypes.writeFeatureValues aiplatform.evaluationExperiments.* aiplatform.evaluationExperiments.create aiplatform.evaluationExperiments.delete aiplatform.evaluationExperiments.get aiplatform.evaluationExperiments.list aiplatform.evaluationExperiments.update aiplatform.evaluationItems.* aiplatform.evaluationItems.create aiplatform.evaluationItems.delete aiplatform.evaluationItems.get aiplatform.evaluationItems.list aiplatform.evaluationItems.update aiplatform.evaluationRuns.* aiplatform.evaluationRuns.cancel aiplatform.evaluationRuns.create aiplatform.evaluationRuns.delete aiplatform.evaluationRuns.execute aiplatform.evaluationRuns.get aiplatform.evaluationRuns.list aiplatform.evaluationRuns.update aiplatform.evaluationSets.* aiplatform.evaluationSets.create aiplatform.evaluationSets.delete aiplatform.evaluationSets.get aiplatform.evaluationSets.import aiplatform.evaluationSets.list aiplatform.evaluationSets.update aiplatform.exampleStores.* aiplatform.exampleStores.create aiplatform.exampleStores.delete aiplatform.exampleStores.get aiplatform.exampleStores.list aiplatform.exampleStores.readExample aiplatform.exampleStores.update aiplatform.exampleStores.writeExample aiplatform.executions.* aiplatform.executions.addExecutionEvents aiplatform.executions.create aiplatform.executions.delete aiplatform.executions.get aiplatform.executions.list aiplatform.executions.queryExecutionInputsAndOutputs aiplatform.executions.update aiplatform.extensions.* aiplatform.extensions.delete aiplatform.extensions.execute aiplatform.extensions.get aiplatform.extensions.import aiplatform.extensions.list aiplatform.extensions.update aiplatform.featureGroups.create aiplatform.featureGroups.delete aiplatform.featureGroups.get aiplatform.featureGroups.list aiplatform.featureGroups.update aiplatform.featureMonitorJobs.* aiplatform.featureMonitorJobs.create aiplatform.featureMonitorJobs.get aiplatform.featureMonitorJobs.list aiplatform.featureMonitors.* aiplatform.featureMonitors.create aiplatform.featureMonitors.delete aiplatform.featureMonitors.get aiplatform.featureMonitors.list aiplatform.featureMonitors.update aiplatform.featureOnlineStores.create aiplatform.featureOnlineStores.delete aiplatform.featureOnlineStores.get aiplatform.featureOnlineStores.list aiplatform.featureOnlineStores.update aiplatform.featureViewSyncs.* aiplatform.featureViewSyncs.get aiplatform.featureViewSyncs.list aiplatform.featureViews.create aiplatform.featureViews.delete aiplatform.featureViews.directWrite aiplatform.featureViews.fetchFeatureValues aiplatform.featureViews.get aiplatform.featureViews.list aiplatform.featureViews.searchNearestEntities aiplatform.featureViews.sync aiplatform.featureViews.update aiplatform.features.* aiplatform.features.create aiplatform.features.delete aiplatform.features.get aiplatform.features.list aiplatform.features.update aiplatform.featurestores.batchReadFeatureValues aiplatform.featurestores.create aiplatform.featurestores.delete aiplatform.featurestores.exportFeatures aiplatform.featurestores.get aiplatform.featurestores.importFeatures aiplatform.featurestores.list aiplatform.featurestores.readFeatures aiplatform.featurestores.update aiplatform.featurestores.writeFeatures aiplatform.humanInTheLoops.* aiplatform.humanInTheLoops.cancel aiplatform.humanInTheLoops.create aiplatform.humanInTheLoops.delete aiplatform.humanInTheLoops.get aiplatform.humanInTheLoops.list aiplatform.humanInTheLoops.queryAnnotationStats aiplatform.humanInTheLoops.send aiplatform.humanInTheLoops.update aiplatform.hyperparameterTuningJobs.* aiplatform.hyperparameterTuningJobs.cancel aiplatform.hyperparameterTuningJobs.create aiplatform.hyperparameterTuningJobs.delete aiplatform.hyperparameterTuningJobs.get aiplatform.hyperparameterTuningJobs.list aiplatform.indexEndpoints.* aiplatform.indexEndpoints.create aiplatform.indexEndpoints.delete aiplatform.indexEndpoints.deploy aiplatform.indexEndpoints.get aiplatform.indexEndpoints.list aiplatform.indexEndpoints.queryVectors aiplatform.indexEndpoints.undeploy aiplatform.indexEndpoints.update aiplatform.indexes.* aiplatform.indexes.create aiplatform.indexes.delete aiplatform.indexes.get aiplatform.indexes.list aiplatform.indexes.update aiplatform.locations.* aiplatform.locations.evaluateInstances aiplatform.locations.get aiplatform.locations.list aiplatform.memories.* aiplatform.memories.create aiplatform.memories.delete aiplatform.memories.generate aiplatform.memories.get aiplatform.memories.list aiplatform.memories.retrieve aiplatform.memories.update aiplatform.memoryRevisions.* aiplatform.memoryRevisions.get aiplatform.memoryRevisions.list aiplatform.memoryRevisions.rollback aiplatform.metadataSchemas.* aiplatform.metadataSchemas.create aiplatform.metadataSchemas.delete aiplatform.metadataSchemas.get aiplatform.metadataSchemas.list aiplatform.metadataStores.* aiplatform.metadataStores.create aiplatform.metadataStores.delete aiplatform.metadataStores.get aiplatform.metadataStores.list aiplatform.modelDeploymentMonitoringJobs.* aiplatform.modelDeploymentMonitoringJobs.create aiplatform.modelDeploymentMonitoringJobs.delete aiplatform.modelDeploymentMonitoringJobs.get aiplatform.modelDeploymentMonitoringJobs.list aiplatform.modelDeploymentMonitoringJobs.pause aiplatform.modelDeploymentMonitoringJobs.resume aiplatform.modelDeploymentMonitoringJobs.searchStatsAnomalies aiplatform.modelDeploymentMonitoringJobs.update aiplatform.modelEvaluationSlices.* aiplatform.modelEvaluationSlices.get aiplatform.modelEvaluationSlices.import aiplatform.modelEvaluationSlices.list aiplatform.modelEvaluations.* aiplatform.modelEvaluations.exportEvaluatedDataItems aiplatform.modelEvaluations.get aiplatform.modelEvaluations.import aiplatform.modelEvaluations.list aiplatform.modelMonitoringJobs.* aiplatform.modelMonitoringJobs.create aiplatform.modelMonitoringJobs.delete aiplatform.modelMonitoringJobs.get aiplatform.modelMonitoringJobs.list aiplatform.modelMonitors.* aiplatform.modelMonitors.create aiplatform.modelMonitors.delete aiplatform.modelMonitors.get aiplatform.modelMonitors.list aiplatform.modelMonitors.searchModelMonitoringAlerts aiplatform.modelMonitors.searchModelMonitoringStats aiplatform.modelMonitors.update aiplatform.models.* aiplatform.models.delete aiplatform.models.export aiplatform.models.get aiplatform.models.list aiplatform.models.update aiplatform.models.upload aiplatform.nasJobs.* aiplatform.nasJobs.cancel aiplatform.nasJobs.create aiplatform.nasJobs.delete aiplatform.nasJobs.get aiplatform.nasJobs.list aiplatform.nasTrialDetails.* aiplatform.nasTrialDetails.get aiplatform.nasTrialDetails.list aiplatform.notebookExecutionJobs.* aiplatform.notebookExecutionJobs.create aiplatform.notebookExecutionJobs.delete aiplatform.notebookExecutionJobs.get aiplatform.notebookExecutionJobs.list aiplatform.notebookRuntimeTemplates.apply aiplatform.notebookRuntimeTemplates.create aiplatform.notebookRuntimeTemplates.delete aiplatform.notebookRuntimeTemplates.get aiplatform.notebookRuntimeTemplates.list aiplatform.notebookRuntimeTemplates.update aiplatform.notebookRuntimes.* aiplatform.notebookRuntimes.assign aiplatform.notebookRuntimes.delete aiplatform.notebookRuntimes.get aiplatform.notebookRuntimes.list aiplatform.notebookRuntimes.start aiplatform.notebookRuntimes.update aiplatform.notebookRuntimes.upgrade aiplatform.onlineEvaluators.* aiplatform.onlineEvaluators.create aiplatform.onlineEvaluators.delete aiplatform.onlineEvaluators.get aiplatform.onlineEvaluators.list aiplatform.onlineEvaluators.update aiplatform.operations.list aiplatform.persistentResources.get aiplatform.persistentResources.list aiplatform.pipelineJobs.* aiplatform.pipelineJobs.cancel aiplatform.pipelineJobs.create aiplatform.pipelineJobs.delete aiplatform.pipelineJobs.get aiplatform.pipelineJobs.list aiplatform.provisionedThroughputRevisions.* aiplatform.provisionedThroughputRevisions.get aiplatform.provisionedThroughputRevisions.list aiplatform.provisionedThroughputs.get aiplatform.provisionedThroughputs.list aiplatform.ragCorpora.* aiplatform.ragCorpora.create aiplatform.ragCorpora.delete aiplatform.ragCorpora.get aiplatform.ragCorpora.list aiplatform.ragCorpora.query aiplatform.ragCorpora.update aiplatform.ragEngineConfigs.get aiplatform.ragFiles.* aiplatform.ragFiles.delete aiplatform.ragFiles.get aiplatform.ragFiles.import aiplatform.ragFiles.list aiplatform.ragFiles.upload aiplatform.reasoningEngineRuntimeRevisions.* aiplatform.reasoningEngineRuntimeRevisions.delete aiplatform.reasoningEngineRuntimeRevisions.get aiplatform.reasoningEngineRuntimeRevisions.list aiplatform.reasoningEngineRuntimeRevisions.query aiplatform.reasoningEngines.create aiplatform.reasoningEngines.delete aiplatform.reasoningEngines.get aiplatform.reasoningEngines.list aiplatform.reasoningEngines.query aiplatform.reasoningEngines.update aiplatform.sandboxEnvironments.* aiplatform.sandboxEnvironments.create aiplatform.sandboxEnvironments.delete aiplatform.sandboxEnvironments.execute aiplatform.sandboxEnvironments.get aiplatform.sandboxEnvironments.list aiplatform.schedules.* aiplatform.schedules.create aiplatform.schedules.delete aiplatform.schedules.get aiplatform.schedules.list aiplatform.schedules.update aiplatform.semanticGovernancePolicies.* aiplatform.semanticGovernancePolicies.create aiplatform.semanticGovernancePolicies.delete aiplatform.semanticGovernancePolicies.get aiplatform.semanticGovernancePolicies.list aiplatform.semanticGovernancePolicies.update aiplatform.semanticGovernancePolicyEngine.* aiplatform.semanticGovernancePolicyEngine.get aiplatform.semanticGovernancePolicyEngine.update aiplatform.sessionEvents.* aiplatform.sessionEvents.append aiplatform.sessionEvents.list aiplatform.sessions.* aiplatform.sessions.create aiplatform.sessions.delete aiplatform.sessions.get aiplatform.sessions.list aiplatform.sessions.run aiplatform.sessions.update aiplatform.specialistPools.* aiplatform.specialistPools.create aiplatform.specialistPools.delete aiplatform.specialistPools.get aiplatform.specialistPools.list aiplatform.specialistPools.update aiplatform.studies.* aiplatform.studies.create aiplatform.studies.delete aiplatform.studies.get aiplatform.studies.list aiplatform.studies.update aiplatform.tensorboardExperiments.* aiplatform.tensorboardExperiments.create aiplatform.tensorboardExperiments.delete aiplatform.tensorboardExperiments.get aiplatform.tensorboardExperiments.list aiplatform.tensorboardExperiments.update aiplatform.tensorboardExperiments.write aiplatform.tensorboardRuns.* aiplatform.tensorboardRuns.batchCreate aiplatform.tensorboardRuns.create aiplatform.tensorboardRuns.delete aiplatform.tensorboardRuns.get aiplatform.tensorboardRuns.list aiplatform.tensorboardRuns.update aiplatform.tensorboardRuns.write aiplatform.tensorboardTimeSeries.* aiplatform.tensorboardTimeSeries.batchCreate aiplatform.tensorboardTimeSeries.batchRead aiplatform.tensorboardTimeSeries.create aiplatform.tensorboardTimeSeries.delete aiplatform.tensorboardTimeSeries.get aiplatform.tensorboardTimeSeries.list aiplatform.tensorboardTimeSeries.read aiplatform.tensorboardTimeSeries.update aiplatform.tensorboards.create aiplatform.tensorboards.delete aiplatform.tensorboards.get aiplatform.tensorboards.list aiplatform.tensorboards.update aiplatform.trainingPipelines.* aiplatform.trainingPipelines.cancel aiplatform.trainingPipelines.create aiplatform.trainingPipelines.delete aiplatform.trainingPipelines.get aiplatform.trainingPipelines.list aiplatform.trials.* aiplatform.trials.create aiplatform.trials.delete aiplatform.trials.get aiplatform.trials.list aiplatform.trials.update aiplatform.tuningJobs.* aiplatform.tuningJobs.cancel aiplatform.tuningJobs.create aiplatform.tuningJobs.delete aiplatform.tuningJobs.get aiplatform.tuningJobs.list aiplatform.tuningJobs.optimizePrompt aiplatform.tuningJobs.validateReinforcementTuningReward aiplatform.tuningJobs.vertexTune artifactregistry.repositories.downloadArtifacts artifactregistry.repositories.get artifactregistry.repositories.list artifactregistry.tags.get artifactregistry.versions.get bigquery.datasets.create bigquery.datasets.get bigquery.jobs.create bigquery.jobs.get bigquery.readsessions.create bigquery.readsessions.getData bigquery.tables.create bigquery.tables.export bigquery.tables.get bigquery.tables.getData bigquery.tables.update bigquery.tables.updateData cloudtrace.traces.list iam.serviceAccounts.get iam.serviceAccounts.getAccessToken iam.serviceAccounts.getOpenIdToken iam.serviceAccounts.implicitDelegation iam.serviceAccounts.list iam.serviceAccounts.signBlob iam.serviceAccounts.signJwt logging.logEntries.create logging.logEntries.route logging.views.access logging.views.get monitoring.metricDescriptors.create monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list monitoring.timeSeries.create observability.views.access resourcemanager.projects.get resourcemanager.projects.list servicemanagement.services.report serviceusage.services.use storage.buckets.create storage.buckets.delete storage.buckets.get storage.buckets.list storage.objects.create storage.objects.delete storage.objects.get storage.objects.list storage.objects.update
Vertex AI Extension Custom Code Service Agent (roles/aiplatform.extensionCustomCodeServiceAgent) Gives Vertex AI Extension that executes custom code the permissions it needs to function. Warning: Do not grant service agent roles to any principals except service agents.	logging.logEntries.create logging.logEntries.route monitoring.timeSeries.create orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.list storage.folders.* storage.folders.create storage.folders.delete storage.folders.get storage.folders.list storage.folders.rename storage.managedFolders.create storage.managedFolders.delete storage.managedFolders.get storage.managedFolders.list storage.multipartUploads.* storage.multipartUploads.abort storage.multipartUploads.create storage.multipartUploads.list storage.multipartUploads.listParts storage.objects.* storage.objects.create storage.objects.createContext storage.objects.delete storage.objects.deleteContext storage.objects.get storage.objects.getIamPolicy storage.objects.list storage.objects.move storage.objects.overrideUnlockedRetention storage.objects.restore storage.objects.setIamPolicy storage.objects.setRetention storage.objects.update storage.objects.updateContext
Vertex AI Extension Service Agent (roles/aiplatform.extensionServiceAgent) Gives Vertex AI Extension the permissions it needs to function. Warning: Do not grant service agent roles to any principals except service agents.	aiplatform.endpoints.predict aiplatform.locations.get aiplatform.ragCorpora.query discoveryengine.servingConfigs.search iam.serviceAccounts.getAccessToken iam.serviceAccounts.getOpenIdToken logging.logEntries.create logging.logEntries.route serviceusage.services.use storage.objects.get
Vertex AI Model Monitoring Service Agent (roles/aiplatform.modelMonitoringServiceAgent) Gives Vertex AI Model Monitoring the permissions it needs to function. Warning: Do not grant service agent roles to any principals except service agents.	aiplatform.batchPredictionJobs.create aiplatform.batchPredictionJobs.get aiplatform.batchPredictionJobs.list aiplatform.locations.evaluateInstances bigquery.datasets.create bigquery.datasets.get bigquery.jobs.create bigquery.jobs.get bigquery.tables.create bigquery.tables.export bigquery.tables.get bigquery.tables.getData bigquery.tables.update bigquery.tables.updateData monitoring.notificationChannels.get serviceusage.services.use storage.buckets.create storage.buckets.delete storage.buckets.get storage.buckets.list storage.buckets.update storage.objects.create storage.objects.delete storage.objects.get storage.objects.list storage.objects.update
Vertex AI Notebook Service Agent (roles/aiplatform.notebookServiceAgent) Vertex AI Service Agent used to run Notebook managed resources in user project with restricted permissions. Warning: Do not grant service agent roles to any principals except service agents.	logging.logEntries.create logging.logEntries.route monitoring.metricDescriptors.create monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list monitoring.timeSeries.create
Vertex AI Online Prediction Service Agent (roles/aiplatform.onlinePredictionServiceAgent) Gives Vertex AI Online Prediction the permissions it needs to function. Warning: Do not grant service agent roles to any principals except service agents.	gkehub.features.get gkehub.features.getIamPolicy gkehub.features.list gkehub.fleet.get gkehub.gateway.delete gkehub.gateway.generateCredentials gkehub.gateway.get gkehub.gateway.patch gkehub.gateway.post gkehub.gateway.put gkehub.locations.* gkehub.locations.get gkehub.locations.list gkehub.memberships.get gkehub.memberships.getIamPolicy gkehub.memberships.list serviceusage.services.get
Vertex AI RAG Data Service Agent (roles/aiplatform.ragServiceAgent) Vertex AI Service Agent used by Vertex RAG to access user imported data, Vertex AI, Document AI processors, and Vector Search in the project Warning: Do not grant service agent roles to any principals except service agents.	aiplatform.endpoints.get aiplatform.endpoints.predict aiplatform.featureViews.get aiplatform.featureViews.list aiplatform.featureViews.sync aiplatform.featureViews.update aiplatform.indexEndpoints.* aiplatform.indexEndpoints.create aiplatform.indexEndpoints.delete aiplatform.indexEndpoints.deploy aiplatform.indexEndpoints.get aiplatform.indexEndpoints.list aiplatform.indexEndpoints.queryVectors aiplatform.indexEndpoints.undeploy aiplatform.indexEndpoints.update aiplatform.indexes.* aiplatform.indexes.create aiplatform.indexes.delete aiplatform.indexes.get aiplatform.indexes.list aiplatform.indexes.update aiplatform.models.get aiplatform.ragCorpora.get aiplatform.ragCorpora.list aiplatform.ragCorpora.query aiplatform.ragFiles.get aiplatform.ragFiles.list bigquery.datasets.create bigquery.datasets.get bigquery.jobs.create bigquery.jobs.get bigquery.readsessions.create bigquery.readsessions.getData bigquery.tables.create bigquery.tables.createSnapshot bigquery.tables.deleteSnapshot bigquery.tables.export bigquery.tables.get bigquery.tables.getData bigquery.tables.restoreSnapshot bigquery.tables.update bigquery.tables.updateData documentai.processorVersions.processOnline documentai.processors.get documentai.processors.processOnline logging.logEntries.create logging.logEntries.route storage.buckets.get storage.buckets.list storage.objects.get storage.objects.list vectorsearch.collections.* vectorsearch.collections.create vectorsearch.collections.delete vectorsearch.collections.get vectorsearch.collections.list vectorsearch.collections.update vectorsearch.dataObjects.* vectorsearch.dataObjects.create vectorsearch.dataObjects.delete vectorsearch.dataObjects.get vectorsearch.dataObjects.import vectorsearch.dataObjects.query vectorsearch.dataObjects.search vectorsearch.dataObjects.update vectorsearch.indexes.* vectorsearch.indexes.create vectorsearch.indexes.delete vectorsearch.indexes.get vectorsearch.indexes.list vectorsearch.operations.get vectorsearch.operations.list
Vertex AI Rapid Eval Service Agent (roles/aiplatform.rapidevalServiceAgent) Vertex AI Service Agent used by GenAI Rapid Evaluation Service to access publisher model endpoints in the user project Warning: Do not grant service agent roles to any principals except service agents.	aiplatform.endpoints.predict
Vertex AI Reasoning Engine Service Agent (roles/aiplatform.reasoningEngineServiceAgent) Gives Vertex AI Reasoning Engine the proper permissions to function. The aiplatform.reasoningEngines.create IAM permission implies read access to the GCS objects of the consumer project through this service agent. Warning: Do not grant service agent roles to any principals except service agents.	aiplatform.endpoints.create aiplatform.endpoints.delete aiplatform.endpoints.deploy aiplatform.endpoints.explain aiplatform.endpoints.get aiplatform.endpoints.list aiplatform.endpoints.predict aiplatform.endpoints.undeploy aiplatform.endpoints.update aiplatform.memories.* aiplatform.memories.create aiplatform.memories.delete aiplatform.memories.generate aiplatform.memories.get aiplatform.memories.list aiplatform.memories.retrieve aiplatform.memories.update aiplatform.sessionEvents.* aiplatform.sessionEvents.append aiplatform.sessionEvents.list aiplatform.sessions.create aiplatform.sessions.delete aiplatform.sessions.get aiplatform.sessions.list aiplatform.sessions.update cloudapiregistry.* cloudapiregistry.locations.get cloudapiregistry.locations.list cloudapiregistry.mcpServers.get cloudapiregistry.mcpServers.list cloudapiregistry.mcpTools.get cloudapiregistry.mcpTools.list cloudtrace.traces.patch developerconnect.connections.get developerconnect.gitRepositoryLinks.fetchReadToken developerconnect.gitRepositoryLinks.get logging.logEntries.create logging.logEntries.route modelarmor.callouts.invoke modelarmor.locations.* modelarmor.locations.get modelarmor.locations.list modelarmor.templates.useToSanitizeInput modelarmor.templates.useToSanitizeModelResponse modelarmor.templates.useToSanitizeOutput modelarmor.templates.useToSanitizeUserPrompt monitoring.metricDescriptors.create monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list monitoring.timeSeries.create resourcemanager.projects.get resourcemanager.projects.list serviceusage.services.use storage.buckets.get storage.buckets.list storage.objects.get storage.objects.list telemetry.traces.write
Vertex AI Service Agent (roles/aiplatform.serviceAgent) Gives Vertex AI the permissions it needs to function. Warning: Do not grant service agent roles to any principals except service agents.	aiplatform.agentExamples.* aiplatform.agentExamples.create aiplatform.agentExamples.delete aiplatform.agentExamples.get aiplatform.agentExamples.list aiplatform.agentExamples.update aiplatform.agents.* aiplatform.agents.create aiplatform.agents.delete aiplatform.agents.get aiplatform.agents.list aiplatform.agents.update aiplatform.annotationSpecs.* aiplatform.annotationSpecs.create aiplatform.annotationSpecs.delete aiplatform.annotationSpecs.get aiplatform.annotationSpecs.list aiplatform.annotationSpecs.update aiplatform.annotations.* aiplatform.annotations.create aiplatform.annotations.delete aiplatform.annotations.get aiplatform.annotations.list aiplatform.annotations.update aiplatform.apps.* aiplatform.apps.create aiplatform.apps.delete aiplatform.apps.get aiplatform.apps.list aiplatform.apps.update aiplatform.artifacts.* aiplatform.artifacts.create aiplatform.artifacts.delete aiplatform.artifacts.get aiplatform.artifacts.list aiplatform.artifacts.update aiplatform.batchPredictionJobs.* aiplatform.batchPredictionJobs.cancel aiplatform.batchPredictionJobs.create aiplatform.batchPredictionJobs.delete aiplatform.batchPredictionJobs.get aiplatform.batchPredictionJobs.list aiplatform.cacheConfigs.get aiplatform.cachedContents.* aiplatform.cachedContents.create aiplatform.cachedContents.delete aiplatform.cachedContents.get aiplatform.cachedContents.list aiplatform.cachedContents.update aiplatform.consents.get aiplatform.contexts.* aiplatform.contexts.addContextArtifactsAndExecutions aiplatform.contexts.addContextChildren aiplatform.contexts.create aiplatform.contexts.delete aiplatform.contexts.get aiplatform.contexts.list aiplatform.contexts.queryContextLineageSubgraph aiplatform.contexts.update aiplatform.customJobs.* aiplatform.customJobs.cancel aiplatform.customJobs.create aiplatform.customJobs.delete aiplatform.customJobs.get aiplatform.customJobs.list aiplatform.dataItems.* aiplatform.dataItems.create aiplatform.dataItems.delete aiplatform.dataItems.get aiplatform.dataItems.list aiplatform.dataItems.update aiplatform.dataLabelingJobs.* aiplatform.dataLabelingJobs.cancel aiplatform.dataLabelingJobs.create aiplatform.dataLabelingJobs.delete aiplatform.dataLabelingJobs.get aiplatform.dataLabelingJobs.list aiplatform.datasetVersions.* aiplatform.datasetVersions.create aiplatform.datasetVersions.delete aiplatform.datasetVersions.get aiplatform.datasetVersions.list aiplatform.datasetVersions.restore aiplatform.datasets.* aiplatform.datasets.create aiplatform.datasets.delete aiplatform.datasets.export aiplatform.datasets.get aiplatform.datasets.import aiplatform.datasets.list aiplatform.datasets.update aiplatform.deploymentResourcePools.* aiplatform.deploymentResourcePools.create aiplatform.deploymentResourcePools.delete aiplatform.deploymentResourcePools.get aiplatform.deploymentResourcePools.list aiplatform.deploymentResourcePools.queryDeployedModels aiplatform.deploymentResourcePools.update aiplatform.edgeDeploymentJobs.* aiplatform.edgeDeploymentJobs.create aiplatform.edgeDeploymentJobs.delete aiplatform.edgeDeploymentJobs.get aiplatform.edgeDeploymentJobs.list aiplatform.edgeDeviceDebugInfo.get aiplatform.edgeDevices.* aiplatform.edgeDevices.create aiplatform.edgeDevices.delete aiplatform.edgeDevices.get aiplatform.edgeDevices.list aiplatform.edgeDevices.update aiplatform.endpoints.create aiplatform.endpoints.delete aiplatform.endpoints.deploy aiplatform.endpoints.explain aiplatform.endpoints.get aiplatform.endpoints.list aiplatform.endpoints.predict aiplatform.endpoints.undeploy aiplatform.endpoints.update aiplatform.entityTypes.create aiplatform.entityTypes.delete aiplatform.entityTypes.deleteFeatureValues aiplatform.entityTypes.exportFeatureValues aiplatform.entityTypes.get aiplatform.entityTypes.importFeatureValues aiplatform.entityTypes.list aiplatform.entityTypes.readFeatureValues aiplatform.entityTypes.streamingReadFeatureValues aiplatform.entityTypes.update aiplatform.entityTypes.writeFeatureValues aiplatform.evaluationExperiments.* aiplatform.evaluationExperiments.create aiplatform.evaluationExperiments.delete aiplatform.evaluationExperiments.get aiplatform.evaluationExperiments.list aiplatform.evaluationExperiments.update aiplatform.evaluationItems.* aiplatform.evaluationItems.create aiplatform.evaluationItems.delete aiplatform.evaluationItems.get aiplatform.evaluationItems.list aiplatform.evaluationItems.update aiplatform.evaluationRuns.* aiplatform.evaluationRuns.cancel aiplatform.evaluationRuns.create aiplatform.evaluationRuns.delete aiplatform.evaluationRuns.execute aiplatform.evaluationRuns.get aiplatform.evaluationRuns.list aiplatform.evaluationRuns.update aiplatform.evaluationSets.* aiplatform.evaluationSets.create aiplatform.evaluationSets.delete aiplatform.evaluationSets.get aiplatform.evaluationSets.import aiplatform.evaluationSets.list aiplatform.evaluationSets.update aiplatform.exampleStores.* aiplatform.exampleStores.create aiplatform.exampleStores.delete aiplatform.exampleStores.get aiplatform.exampleStores.list aiplatform.exampleStores.readExample aiplatform.exampleStores.update aiplatform.exampleStores.writeExample aiplatform.executions.* aiplatform.executions.addExecutionEvents aiplatform.executions.create aiplatform.executions.delete aiplatform.executions.get aiplatform.executions.list aiplatform.executions.queryExecutionInputsAndOutputs aiplatform.executions.update aiplatform.extensions.* aiplatform.extensions.delete aiplatform.extensions.execute aiplatform.extensions.get aiplatform.extensions.import aiplatform.extensions.list aiplatform.extensions.update aiplatform.featureGroups.create aiplatform.featureGroups.delete aiplatform.featureGroups.get aiplatform.featureGroups.list aiplatform.featureGroups.update aiplatform.featureMonitorJobs.* aiplatform.featureMonitorJobs.create aiplatform.featureMonitorJobs.get aiplatform.featureMonitorJobs.list aiplatform.featureMonitors.* aiplatform.featureMonitors.create aiplatform.featureMonitors.delete aiplatform.featureMonitors.get aiplatform.featureMonitors.list aiplatform.featureMonitors.update aiplatform.featureOnlineStores.create aiplatform.featureOnlineStores.delete aiplatform.featureOnlineStores.get aiplatform.featureOnlineStores.list aiplatform.featureOnlineStores.update aiplatform.featureViewSyncs.* aiplatform.featureViewSyncs.get aiplatform.featureViewSyncs.list aiplatform.featureViews.create aiplatform.featureViews.delete aiplatform.featureViews.directWrite aiplatform.featureViews.fetchFeatureValues aiplatform.featureViews.get aiplatform.featureViews.list aiplatform.featureViews.searchNearestEntities aiplatform.featureViews.sync aiplatform.featureViews.update aiplatform.features.* aiplatform.features.create aiplatform.features.delete aiplatform.features.get aiplatform.features.list aiplatform.features.update aiplatform.featurestores.batchReadFeatureValues aiplatform.featurestores.create aiplatform.featurestores.delete aiplatform.featurestores.exportFeatures aiplatform.featurestores.get aiplatform.featurestores.importFeatures aiplatform.featurestores.list aiplatform.featurestores.readFeatures aiplatform.featurestores.update aiplatform.featurestores.writeFeatures aiplatform.humanInTheLoops.* aiplatform.humanInTheLoops.cancel aiplatform.humanInTheLoops.create aiplatform.humanInTheLoops.delete aiplatform.humanInTheLoops.get aiplatform.humanInTheLoops.list aiplatform.humanInTheLoops.queryAnnotationStats aiplatform.humanInTheLoops.send aiplatform.humanInTheLoops.update aiplatform.hyperparameterTuningJobs.* aiplatform.hyperparameterTuningJobs.cancel aiplatform.hyperparameterTuningJobs.create aiplatform.hyperparameterTuningJobs.delete aiplatform.hyperparameterTuningJobs.get aiplatform.hyperparameterTuningJobs.list aiplatform.indexEndpoints.* aiplatform.indexEndpoints.create aiplatform.indexEndpoints.delete aiplatform.indexEndpoints.deploy aiplatform.indexEndpoints.get aiplatform.indexEndpoints.list aiplatform.indexEndpoints.queryVectors aiplatform.indexEndpoints.undeploy aiplatform.indexEndpoints.update aiplatform.indexes.* aiplatform.indexes.create aiplatform.indexes.delete aiplatform.indexes.get aiplatform.indexes.list aiplatform.indexes.update aiplatform.locations.* aiplatform.locations.evaluateInstances aiplatform.locations.get aiplatform.locations.list aiplatform.memories.* aiplatform.memories.create aiplatform.memories.delete aiplatform.memories.generate aiplatform.memories.get aiplatform.memories.list aiplatform.memories.retrieve aiplatform.memories.update aiplatform.memoryRevisions.* aiplatform.memoryRevisions.get aiplatform.memoryRevisions.list aiplatform.memoryRevisions.rollback aiplatform.metadataSchemas.* aiplatform.metadataSchemas.create aiplatform.metadataSchemas.delete aiplatform.metadataSchemas.get aiplatform.metadataSchemas.list aiplatform.metadataStores.* aiplatform.metadataStores.create aiplatform.metadataStores.delete aiplatform.metadataStores.get aiplatform.metadataStores.list aiplatform.modelDeploymentMonitoringJobs.* aiplatform.modelDeploymentMonitoringJobs.create aiplatform.modelDeploymentMonitoringJobs.delete aiplatform.modelDeploymentMonitoringJobs.get aiplatform.modelDeploymentMonitoringJobs.list aiplatform.modelDeploymentMonitoringJobs.pause aiplatform.modelDeploymentMonitoringJobs.resume aiplatform.modelDeploymentMonitoringJobs.searchStatsAnomalies aiplatform.modelDeploymentMonitoringJobs.update aiplatform.modelEvaluationSlices.* aiplatform.modelEvaluationSlices.get aiplatform.modelEvaluationSlices.import aiplatform.modelEvaluationSlices.list aiplatform.modelEvaluations.* aiplatform.modelEvaluations.exportEvaluatedDataItems aiplatform.modelEvaluations.get aiplatform.modelEvaluations.import aiplatform.modelEvaluations.list aiplatform.modelMonitoringJobs.* aiplatform.modelMonitoringJobs.create aiplatform.modelMonitoringJobs.delete aiplatform.modelMonitoringJobs.get aiplatform.modelMonitoringJobs.list aiplatform.modelMonitors.* aiplatform.modelMonitors.create aiplatform.modelMonitors.delete aiplatform.modelMonitors.get aiplatform.modelMonitors.list aiplatform.modelMonitors.searchModelMonitoringAlerts aiplatform.modelMonitors.searchModelMonitoringStats aiplatform.modelMonitors.update aiplatform.models.* aiplatform.models.delete aiplatform.models.export aiplatform.models.get aiplatform.models.list aiplatform.models.update aiplatform.models.upload aiplatform.nasJobs.* aiplatform.nasJobs.cancel aiplatform.nasJobs.create aiplatform.nasJobs.delete aiplatform.nasJobs.get aiplatform.nasJobs.list aiplatform.nasTrialDetails.* aiplatform.nasTrialDetails.get aiplatform.nasTrialDetails.list aiplatform.notebookExecutionJobs.* aiplatform.notebookExecutionJobs.create aiplatform.notebookExecutionJobs.delete aiplatform.notebookExecutionJobs.get aiplatform.notebookExecutionJobs.list aiplatform.notebookRuntimeTemplates.apply aiplatform.notebookRuntimeTemplates.create aiplatform.notebookRuntimeTemplates.delete aiplatform.notebookRuntimeTemplates.get aiplatform.notebookRuntimeTemplates.list aiplatform.notebookRuntimeTemplates.update aiplatform.notebookRuntimes.* aiplatform.notebookRuntimes.assign aiplatform.notebookRuntimes.delete aiplatform.notebookRuntimes.get aiplatform.notebookRuntimes.list aiplatform.notebookRuntimes.start aiplatform.notebookRuntimes.update aiplatform.notebookRuntimes.upgrade aiplatform.onlineEvaluators.* aiplatform.onlineEvaluators.create aiplatform.onlineEvaluators.delete aiplatform.onlineEvaluators.get aiplatform.onlineEvaluators.list aiplatform.onlineEvaluators.update aiplatform.operations.list aiplatform.persistentResources.get aiplatform.persistentResources.list aiplatform.pipelineJobs.* aiplatform.pipelineJobs.cancel aiplatform.pipelineJobs.create aiplatform.pipelineJobs.delete aiplatform.pipelineJobs.get aiplatform.pipelineJobs.list aiplatform.provisionedThroughputRevisions.* aiplatform.provisionedThroughputRevisions.get aiplatform.provisionedThroughputRevisions.list aiplatform.provisionedThroughputs.get aiplatform.provisionedThroughputs.list aiplatform.ragCorpora.* aiplatform.ragCorpora.create aiplatform.ragCorpora.delete aiplatform.ragCorpora.get aiplatform.ragCorpora.list aiplatform.ragCorpora.query aiplatform.ragCorpora.update aiplatform.ragEngineConfigs.get aiplatform.ragFiles.* aiplatform.ragFiles.delete aiplatform.ragFiles.get aiplatform.ragFiles.import aiplatform.ragFiles.list aiplatform.ragFiles.upload aiplatform.reasoningEngineRuntimeRevisions.* aiplatform.reasoningEngineRuntimeRevisions.delete aiplatform.reasoningEngineRuntimeRevisions.get aiplatform.reasoningEngineRuntimeRevisions.list aiplatform.reasoningEngineRuntimeRevisions.query aiplatform.reasoningEngines.create aiplatform.reasoningEngines.delete aiplatform.reasoningEngines.get aiplatform.reasoningEngines.list aiplatform.reasoningEngines.query aiplatform.reasoningEngines.update aiplatform.sandboxEnvironments.* aiplatform.sandboxEnvironments.create aiplatform.sandboxEnvironments.delete aiplatform.sandboxEnvironments.execute aiplatform.sandboxEnvironments.get aiplatform.sandboxEnvironments.list aiplatform.schedules.* aiplatform.schedules.create aiplatform.schedules.delete aiplatform.schedules.get aiplatform.schedules.list aiplatform.schedules.update aiplatform.semanticGovernancePolicies.* aiplatform.semanticGovernancePolicies.create aiplatform.semanticGovernancePolicies.delete aiplatform.semanticGovernancePolicies.get aiplatform.semanticGovernancePolicies.list aiplatform.semanticGovernancePolicies.update aiplatform.semanticGovernancePolicyEngine.* aiplatform.semanticGovernancePolicyEngine.get aiplatform.semanticGovernancePolicyEngine.update aiplatform.sessionEvents.* aiplatform.sessionEvents.append aiplatform.sessionEvents.list aiplatform.sessions.* aiplatform.sessions.create aiplatform.sessions.delete aiplatform.sessions.get aiplatform.sessions.list aiplatform.sessions.run aiplatform.sessions.update aiplatform.specialistPools.* aiplatform.specialistPools.create aiplatform.specialistPools.delete aiplatform.specialistPools.get aiplatform.specialistPools.list aiplatform.specialistPools.update aiplatform.studies.* aiplatform.studies.create aiplatform.studies.delete aiplatform.studies.get aiplatform.studies.list aiplatform.studies.update aiplatform.tensorboardExperiments.* aiplatform.tensorboardExperiments.create aiplatform.tensorboardExperiments.delete aiplatform.tensorboardExperiments.get aiplatform.tensorboardExperiments.list aiplatform.tensorboardExperiments.update aiplatform.tensorboardExperiments.write aiplatform.tensorboardRuns.* aiplatform.tensorboardRuns.batchCreate aiplatform.tensorboardRuns.create aiplatform.tensorboardRuns.delete aiplatform.tensorboardRuns.get aiplatform.tensorboardRuns.list aiplatform.tensorboardRuns.update aiplatform.tensorboardRuns.write aiplatform.tensorboardTimeSeries.* aiplatform.tensorboardTimeSeries.batchCreate aiplatform.tensorboardTimeSeries.batchRead aiplatform.tensorboardTimeSeries.create aiplatform.tensorboardTimeSeries.delete aiplatform.tensorboardTimeSeries.get aiplatform.tensorboardTimeSeries.list aiplatform.tensorboardTimeSeries.read aiplatform.tensorboardTimeSeries.update aiplatform.tensorboards.create aiplatform.tensorboards.delete aiplatform.tensorboards.get aiplatform.tensorboards.list aiplatform.tensorboards.update aiplatform.trainingPipelines.* aiplatform.trainingPipelines.cancel aiplatform.trainingPipelines.create aiplatform.trainingPipelines.delete aiplatform.trainingPipelines.get aiplatform.trainingPipelines.list aiplatform.trials.* aiplatform.trials.create aiplatform.trials.delete aiplatform.trials.get aiplatform.trials.list aiplatform.trials.update aiplatform.tuningJobs.* aiplatform.tuningJobs.cancel aiplatform.tuningJobs.create aiplatform.tuningJobs.delete aiplatform.tuningJobs.get aiplatform.tuningJobs.list aiplatform.tuningJobs.optimizePrompt aiplatform.tuningJobs.validateReinforcementTuningReward aiplatform.tuningJobs.vertexTune artifactregistry.repositories.create artifactregistry.repositories.downloadArtifacts artifactregistry.repositories.get artifactregistry.repositories.list artifactregistry.repositories.uploadArtifacts artifactregistry.tags.get artifactregistry.versions.get automl.datasets.export automl.datasets.get automl.datasets.list automl.modelEvaluations.list automl.models.get automl.models.list automl.operations.get automl.tableSpecs.get bigquery.datasets.create bigquery.datasets.get bigquery.jobs.create bigquery.jobs.get bigquery.models.create bigquery.models.export bigquery.models.getData bigquery.objectRefs.read bigquery.readsessions.create bigquery.readsessions.getData bigquery.tables.create bigquery.tables.export bigquery.tables.get bigquery.tables.getData bigquery.tables.update bigquery.tables.updateData bigtable.tables.get bigtable.tables.list bigtable.tables.readRows binaryauthorization.policy.evaluatePolicy cloudtrace.traces.get cloudtrace.traces.list compute.addresses.get compute.addresses.list compute.addresses.use compute.addresses.useInternal compute.disks.create compute.disks.createSnapshot compute.disks.createTagBinding compute.disks.delete compute.disks.get compute.disks.setLabels compute.disks.use compute.disks.useReadOnly compute.globalOperations.get compute.instances.attachDisk compute.instances.create compute.instances.createTagBinding compute.instances.delete compute.instances.detachDisk compute.instances.get compute.instances.getGuestAttributes compute.instances.list compute.instances.setLabels compute.instances.setMetadata compute.instances.setServiceAccount compute.instances.setTags compute.instances.start compute.instances.stop compute.instances.update compute.instances.useReadOnly compute.machineTypes.get compute.networks.get compute.networks.use compute.networks.useExternalIp compute.snapshots.create compute.snapshots.delete compute.snapshots.useReadOnly compute.subnetworks.get compute.subnetworks.list compute.subnetworks.use compute.subnetworks.useExternalIp compute.zoneOperations.get dataflow.jobs.* dataflow.jobs.cancel dataflow.jobs.create dataflow.jobs.get dataflow.jobs.list dataflow.jobs.snapshot dataflow.jobs.updateContents dataflow.messages.list dataflow.metrics.get dataflow.snapshots.* dataflow.snapshots.delete dataflow.snapshots.get dataflow.snapshots.list datalabeling.annotateddatasets.get datalabeling.datasets.export datalabeling.datasets.get datalabeling.datasets.list datalabeling.operations.get hypercomputecluster.clusters.* hypercomputecluster.clusters.create hypercomputecluster.clusters.delete hypercomputecluster.clusters.get hypercomputecluster.clusters.list hypercomputecluster.clusters.update hypercomputecluster.locations.* hypercomputecluster.locations.get hypercomputecluster.locations.list hypercomputecluster.operations.* hypercomputecluster.operations.cancel hypercomputecluster.operations.delete hypercomputecluster.operations.get hypercomputecluster.operations.list iam.serviceAccounts.actAs iam.serviceAccounts.getAccessToken iam.serviceAccounts.getOpenIdToken logging.logEntries.create logging.logEntries.route logging.views.access logging.views.get ml.models.list ml.operations.get ml.versions.get ml.versions.list monitoring.metricDescriptors.create monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list monitoring.notificationChannels.get monitoring.timeSeries.create networkservices.agentGateways.get networkservices.agentGateways.use networkservices.operations.get notebooks.instances.create notebooks.instances.delete notebooks.instances.get resourcemanager.projects.get resourcemanager.projects.list run.executions.delete run.executions.get run.jobs.create run.jobs.delete run.jobs.get run.jobs.run run.jobs.update run.operations.delete run.operations.get run.routes.invoke run.services.create run.services.delete run.services.get servicemanagement.services.report serviceusage.services.list serviceusage.services.use storage.buckets.create storage.buckets.delete storage.buckets.get storage.buckets.list storage.objects.create storage.objects.delete storage.objects.get storage.objects.list storage.objects.update
Vertex AI Telemetry Service Agent (roles/aiplatform.telemetryServiceAgent) Allows Vertex AI Telemetry Service Agent to access telemetry data. Warning: Do not grant service agent roles to any principals except service agents.	logging.logEntries.create logging.logEntries.list logging.logEntries.route monitoring.metricDescriptors.create monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list monitoring.timeSeries.* monitoring.timeSeries.create monitoring.timeSeries.list servicemanagement.services.report
Vertex AI Tuning Service Agent (roles/aiplatform.tuningServiceAgent) Vertex AI Service Agent used for tuning in user project. Warning: Do not grant service agent roles to any principals except service agents.	aiplatform.artifacts.* aiplatform.artifacts.create aiplatform.artifacts.delete aiplatform.artifacts.get aiplatform.artifacts.list aiplatform.artifacts.update aiplatform.batchPredictionJobs.cancel aiplatform.batchPredictionJobs.create aiplatform.batchPredictionJobs.get aiplatform.contexts.* aiplatform.contexts.addContextArtifactsAndExecutions aiplatform.contexts.addContextChildren aiplatform.contexts.create aiplatform.contexts.delete aiplatform.contexts.get aiplatform.contexts.list aiplatform.contexts.queryContextLineageSubgraph aiplatform.contexts.update aiplatform.endpoints.create aiplatform.endpoints.deploy aiplatform.endpoints.get aiplatform.endpoints.predict aiplatform.evaluationRuns.create aiplatform.evaluationRuns.get aiplatform.locations.evaluateInstances aiplatform.locations.get aiplatform.metadataSchemas.* aiplatform.metadataSchemas.create aiplatform.metadataSchemas.delete aiplatform.metadataSchemas.get aiplatform.metadataSchemas.list aiplatform.metadataStores.* aiplatform.metadataStores.create aiplatform.metadataStores.delete aiplatform.metadataStores.get aiplatform.metadataStores.list aiplatform.models.get aiplatform.models.update aiplatform.models.upload aiplatform.operations.list aiplatform.pipelineJobs.get aiplatform.pipelineJobs.list aiplatform.tensorboardExperiments.* aiplatform.tensorboardExperiments.create aiplatform.tensorboardExperiments.delete aiplatform.tensorboardExperiments.get aiplatform.tensorboardExperiments.list aiplatform.tensorboardExperiments.update aiplatform.tensorboardExperiments.write aiplatform.tensorboardRuns.* aiplatform.tensorboardRuns.batchCreate aiplatform.tensorboardRuns.create aiplatform.tensorboardRuns.delete aiplatform.tensorboardRuns.get aiplatform.tensorboardRuns.list aiplatform.tensorboardRuns.update aiplatform.tensorboardRuns.write aiplatform.tensorboardTimeSeries.* aiplatform.tensorboardTimeSeries.batchCreate aiplatform.tensorboardTimeSeries.batchRead aiplatform.tensorboardTimeSeries.create aiplatform.tensorboardTimeSeries.delete aiplatform.tensorboardTimeSeries.get aiplatform.tensorboardTimeSeries.list aiplatform.tensorboardTimeSeries.read aiplatform.tensorboardTimeSeries.update aiplatform.tensorboards.create aiplatform.tensorboards.delete aiplatform.tensorboards.get aiplatform.tensorboards.list aiplatform.tensorboards.update aiplatform.tuningJobs.cancel aiplatform.tuningJobs.create aiplatform.tuningJobs.delete aiplatform.tuningJobs.get aiplatform.tuningJobs.list aiplatform.tuningJobs.vertexTune bigquery.datasets.create bigquery.datasets.get bigquery.jobs.create bigquery.jobs.get bigquery.tables.create bigquery.tables.delete bigquery.tables.get bigquery.tables.getData bigquery.tables.list bigquery.tables.update bigquery.tables.updateData resourcemanager.projects.get serviceusage.services.use storage.buckets.create storage.buckets.get storage.buckets.getIamPolicy storage.buckets.list storage.buckets.update storage.objects.create storage.objects.delete storage.objects.get storage.objects.getIamPolicy storage.objects.list storage.objects.update

기본 역할

이전 Google Cloud기본 역할은 모든 Google Cloud 서비스에 공통으로 적용됩니다. 이러한 역할은 소유자, 편집자, 뷰어입니다.

기본 역할은 Colab Enterprise뿐만 아니라 Google Cloud전반에 대한 권한을 제공합니다. 이러한 이유로 가능하면 Colab Enterprise 역할을 사용해야 합니다.

커스텀 역할

Colab Enterprise의 사전 정의된 IAM 역할이 필요에 맞지 않는 경우 커스텀 역할을 정의할 수 있습니다. 커스텀 역할을 사용하면 특정 권한 집합을 선택하고, 해당 권한을 사용하여 고유한 역할을 만들고, 조직의 사용자에게 역할을 부여할 수 있습니다. 자세한 내용은 IAM 맞춤 역할 이해를 참조하세요.

Colab Enterprise 서비스 에이전트

Colab Enterprise는 서비스 에이전트를 자동으로 만들고 사용하여 사용자를 대신하여 리소스에 액세스합니다. 서비스 에이전트가 생성되면 서비스 에이전트에게 프로젝트에 대한 사전 정의된 역할이 부여됩니다.

참고: 확실히 불필요한 것이 아니면 기본 서비스 계정의 기본 역할과 권한을 삭제하지 마세요.

다음 표에는 Colab Enterprise 서비스 상담사, 이메일 주소, 각 역할이 나와 있습니다.

이름	연결 대상:	이메일 주소	역할
Vertex AI 서비스 에이전트	Vertex AI 기능	[e-mail]	roles/aiplatform.serviceAgent
Vertex AI Colab 서비스 에이전트	Colab Enterprise에 작동하는 데 필요한 적절한 권한을 부여합니다.	[e-mail]	roles/aiplatform.colabServiceAgent
Vertex AI 노트북 서비스 에이전트	제한된 권한으로 사용자 프로젝트에서 노트북 관리 리소스 실행	[e-mail]	roles/aiplatform.notebookServiceAgent

Colab Enterprise 서비스 에이전트의 기본 역할을 삭제하면 Colab Enterprise에서 서비스 기능이 중단되지 않도록 자동으로 해당 역할을 다시 할당할 수 있습니다. Colab Enterprise 서비스를 사용 중지하려면 역할을 삭제하는 대신 관련 API를 사용 중지해야 합니다.

Colab Enterprise 권한의 보안 고려사항

사용자가 Colab Enterprise 노트북을 만들면 해당 노트북에 대한 코드 소유자 (roles/dataform.codeOwner) 역할이 자동으로 부여됩니다. 이 리소스 수준 역할 부여는 프로젝트 수준 IAM 역할과 별개입니다.

IAM은 정책을 계층적 방식으로 구성합니다.

• 사용자는 프로젝트 IAM 정책에서 역할을 가질 수 있으며, 이 역할은 프로젝트의 모든 리소스에 자동으로 전파됩니다.
• 사용자는 개별 노트북과 같은 특정 리소스 정책에 역할을 가질 수도 있습니다.

사용자는 리소스 정책 또는 상위 정책에 역할이 있는 경우 리소스에 액세스할 수 있습니다.

주의: 사용자의 프로젝트 수준 IAM 역할을 삭제해도 사용자가 만든 노트북의 리소스 수준 역할이 자동으로 삭제되지는 않습니다. 사용자는 리소스 수준 역할도 삭제될 때까지 해당 노트북에 대한 액세스 권한을 유지합니다.

사용자의 액세스 권한을 완전히 취소하려면 관리자가 다음 중 한 가지를 수행하면 됩니다.

• 각 개별 노트북에서 사용자의 역할을 삭제합니다. 자세한 내용은 노트북에서 리소스 수준 액세스 권한 삭제하기를 참고하세요.
• IAM 거부 정책을 만들어 프로젝트의 모든 리소스에 대한 사용자의 모든 권한을 취소합니다.

다음 단계

• Colab Enterprise 노트북에 대한 주 구성원 액세스 권한 부여하기

• IAM 자세히 알아보기

• 커스텀 IAM 역할 생성 및 관리 방법 알아보기

• 서비스 에이전트 자세히 알아보기