Turn off Gemini in Colab Enterprise

This document explains how to turn off Gemini in Colab Enterprise.

Before you begin

  • To update a Gemini in Colab Enterprise subscription, make sure you have the billing.subscriptions.update Identity and Access Management (IAM) permission. The billing.subscriptions.update permission is included in the roles/billing.admin IAM role, or you can add the permission to a custom role.

Turn off Gemini in Colab Enterprise

To turn off Gemini in Colab Enterprise, you can remove access for specific users or turn off features within Colab Enterprise.

Remove access for specific users

You can use the Policy Analyzer feature in the Cloud Asset Inventory to find all users with any of the permissions included in the Gemini for Google Cloud User role and the Service Usage Consumer role. The most direct way to achieve this is to run a Policy Analyzer query that checks for the specific role itself, as the role implicitly contains the set of permissions.

  1. Use the Policy Analyzer to see which users have the Gemini for Google Cloud User role and the Service Usage Consumer role, or the individual equivalent permissions.

    Query by roles

    1. Go to the Policy Analyzer page.

      Go to Policy Analyzer

    2. In the Analyze policies section, click Create custom query.

    3. In the Select query scope field, choose the Organization, Folder, or Project you want to analyze. This defines the resources (and their IAM policies) that will be checked.

    4. Set the parameter to Role.

      1. In the Parameter 1 field, select Role from the drop-down menu.

      2. In the corresponding Select a role field, select or type the name of the role: Gemini for Google Cloud User. Note that the full role ID is roles/cloudaicompanion.user.

      3. In the Parameter 2 field, select Role from the drop-down menu.

      4. In the corresponding Select a role field, select or type the name of the role: Service Usage Consumer. Note that the full role ID is roles/serviceusage.serviceUsageConsumer.

    5. Click Analyze (or Run Query). The results table shows all principals (users, service accounts, groups) that have been granted the Gemini for Google Cloud User role and the Service Usage Consumer role on any resource within your defined scope, whether directly or inherited from a parent resource.

    Query by permissions

    1. Go to the Policy Analyzer page.

      Go to Policy Analyzer

    2. In the Analyze policies section, click Create custom query.

    3. In the Select query scope field, choose the Organization, Folder, or Project you want to analyze. This defines the resources (and their IAM policies) that will be checked.

    4. Set the parameter to Permission.

      1. In the Parameter 1 field, select Permission from the drop-down menu.

      2. In the corresponding field, enter cloudaicompanion.companions.generateChat.

      3. In the Parameter 2 field, select Permission from the drop-down menu.

      4. In the corresponding field, enter cloudaicompanion.companions.generateCode.

    5. Click Analyze (or Run Query). The results table will show all principals that have any of the listed permissions granted on resources within the scope, regardless of the role they were granted through (such as a predefined role, a custom role, or another predefined role that coincidentally includes those permissions).

  2. Remove all applicable user Identity and Access Management roles or permissions for Gemini in Colab Enterprise:

    1. Go to the IAM & Admin page.

      Go to IAM & Admin

    2. In the Principal column, find a principal for which you want to remove access to Gemini in Colab Enterprise, and then click Edit principal in that row.

    3. In the Edit access pane, do the following:

      Remove predefined roles

      1. Locate the Gemini for Google Cloud User role, and then click Delete role.

      2. Locate the Service Usage Consumer role, and then click Delete role.

      Remove custom or alternate roles

      1. Locate the roles that include the cloudaicompanion.companions.generateChat and cloudaicompanion.companions.generateCode permissions, and then click Delete role.

    4. Click Save.

Turn off features within Colab Enterprise

You can also turn off Gemini features from the Colab Enterprise Notebooks page:

  1. In the Google Cloud console, go to the Colab Enterprise Notebooks page.

    Go to Colab Enterprise Notebooks

  2. Open a notebook.

  3. In the Colab Enterprise toolbar, click pen_spark Help me code.

  4. Clear the Gemini features that you want to turn off.

  5. Optional: If you are disabling all Gemini for Google Cloud products, then turn off the Gemini for Google Cloud API.

Optional: Turn off the Gemini for Google Cloud API

After you turn off all other Gemini for Google Cloud products for your project, turn off the Gemini for Google Cloud API (cloudaicompanion.googleapis.com). For more information, see Disabling services.