> [!IMPORTANT] > **Important:** New Gemini Code Assist subscriptions are [no longer available for purchase](https://docs.cloud.google.com/gemini/docs/codeassist/sunset.md.txt), and subscriptions can't be transferred between billing accounts. This page describes how to set up Gemini Code Assist Standard and Enterprise. Before you can use services available to users with [Gemini Code Assist](https://docs.cloud.google.com/gemini/docs/codeassist/overview.md.txt) Standard or Enterprise licenses, your team needs to perform the setup steps that are described in this document, and you must have an active Standard or Enterprise subscription: > [!NOTE] > **Note:** An administrator typically performs steps 1-3. 1. [Assign licenses to users in your organization](https://docs.cloud.google.com/gemini/docs/codeassist/set-up-gemini.md.txt#assign_licenses). 2. [Enable the Gemini for Google Cloud API in a Google Cloud project](https://docs.cloud.google.com/gemini/docs/codeassist/set-up-gemini.md.txt#enable-api). 3. [Grant Identity and Access Management (IAM) roles in a Google Cloud project](https://docs.cloud.google.com/gemini/docs/codeassist/set-up-gemini.md.txt#grant-iam). 4. Your organization's users set up the services they want to use. 1. To use Gemini Code Assist Standard or Enterprise in an IDE, users should [install the Gemini Code Assist plugin](https://docs.cloud.google.com/gemini/docs/codeassist/set-up-gemini.md.txt#install-gemini-code-assist), which is documented on this page. 2. To use Gemini Code Assist code customization, users should refer to [Configure Gemini Code Assist code customization](https://docs.cloud.google.com/gemini/docs/codeassist/code-customization.md.txt). 3. To use Gemini CLI, users should follow the [Gemini CLI installation instructions](https://geminicli.com/docs/get-started/installation/), and then they should authenticate by [setting a Google Cloud project](https://geminicli.com/docs/get-started/authentication#set-your-google-cloud-project). > [!IMPORTANT] > **Important:** Gemini CLI is not optimized for the latest Gemini models. For the best coding experience with Gemini models, use [Antigravity CLI](https://antigravity.google/product/antigravity-cli). 4. To use Gemini in Android Studio, users should refer to [Get started with Gemini in Android Studio for businesses](https://developer.android.com/studio/gemini/get-started-businesses). ## Assign licenses You manage license assignments for Gemini Code Assist Standard or Enterprise subscriptions using the Google Cloud console. Before using a Gemini Code Assist license, users must have the Gemini for Google Cloud User role or analogous permissions on a project where the API is already enabled. By default, subscriptions are set up for automatic license assignment. A user in your organization is automatically assigned a license when they use Gemini Code Assist within a supported IDE, provided all the following conditions are met: - The user has selected a project that is associated with the subscription's billing account. - The user has the `cloudaicompanion.licenses.selfAssign` IAM permission on the selected project. If a license is inactive for 30 days, then it will be automatically assigned to another user in your organization who meets the preceding conditions. When all available licenses in the subscription are assigned, users who try to access Gemini Code Assist without a license will receive an error message indicating one is required. After you set up Gemini Code Assist, you can view license assignments by navigating to the **Admin for Gemini** page, selecting your billing account, clicking **Manage Gemini Code Assist Subscription** , and then selecting the **License management** tab. If you require finer control over license assignments, you can also use this tab to switch from automatic license management to [manual license management](https://docs.cloud.google.com/gemini/docs/codeassist/manage-licenses.md.txt#manual). The [Gemini for Google Cloud API](https://docs.cloud.google.com/gemini/docs/codeassist/set-up-gemini.md.txt#enable-api) must be enabled in one or more projects that are associated with this billing account. Users won't see Gemini Code Assist until you activate it in at least one project. ## Enable the Gemini for Google Cloud API in a Google Cloud project This section describes the steps required to enable the Gemini for Google Cloud API in a Google Cloud project. Gemini Code Assist requires a Google Cloud project to manage API access, quota, and billing. For this reason, you need to enable the Gemini for Google Cloud API in a Google Cloud project of your choice before users can access Gemini Code Assist. ### Console 1. To enable the Gemini for Google Cloud API, go to the **Gemini for Google Cloud** page. [Go to Gemini for Google Cloud](https://console.cloud.google.com/marketplace/product/google/cloudaicompanion.googleapis.com) 2. In the project selector, select a project. 3. Click **Enable**. The page updates and shows a status of **Enabled**. Gemini is now available in the selected Google Cloud project to all users who have the required IAM roles. ### gcloud CLI 1. In the Google Cloud console, activate Cloud Shell. [Activate Cloud Shell](https://console.cloud.google.com/?cloudshell=true) 2. In the project selector menu, select a project. 3. Enable the Gemini for Google Cloud API for Gemini using the [`gcloud services enable` command](https://docs.cloud.google.com/sdk/gcloud/reference/services/enable): ```bash gcloud services enable cloudaicompanion.googleapis.com ``` If you want to enable the Gemini for Google Cloud API in a different Google Cloud project, add the `--project` parameter: ```bash gcloud services enable cloudaicompanion.googleapis.com --project PROJECT_ID ``` Replace `PROJECT_ID` with your Google Cloud project ID. The output is similar to the following: ``` Waiting for async operation operations/acf.2e2fcfce-8327-4984-9040-a67777082687 to complete... Operation finished successfully. ``` Gemini features are now available in the specified Google Cloud project to all users who have the [required IAM roles](https://docs.cloud.google.com/gemini/docs/codeassist/set-up-gemini.md.txt#grant-iam). ### Configure the firewall for API traffic between your IDE and Google In addition to enabling the Gemini for Google Cloud API, users behind firewalls also need to allow traffic to pass through for the following APIs: - [`oauth2.googleapis.com`](https://developers.google.com/identity/protocols/oauth2): used to sign in to Google Cloud. - [`serviceusage.googleapis.com`](https://console.cloud.google.com/marketplace/product/google/serviceusage.googleapis.com): used for checking that the user's Gemini Code Assist project is properly configured. - [`cloudaicompanion.googleapis.com`](https://console.cloud.google.com/marketplace/product/google/cloudaicompanion.googleapis.com): the primary Gemini Code Assist API endpoint. - `cloudcode-pa.googleapis.com`: an internal API that provides IDE-related features. - [`cloudresourcemanager.googleapis.com`](https://console.cloud.google.com/marketplace/product/google/cloudresourcemanager.googleapis.com): used in the IDEs for project pickers. The Resource Manager API may not be necessary if the projects are explicitly configured in your `settings.json` file. - [`people.googleapis.com`](https://console.cloud.google.com/marketplace/product/google/people.googleapis.com): provides access to information about profiles and contacts. - `firebaselogging-pa.googleapis.com`: an internal API used for sending product telemetry including events as to whether suggestions were accepted. - `feedback-pa.googleapis.com`: an internal API used for in-IDE feedback submission. - [`apihub.googleapis.com`](https://console.cloud.google.com/marketplace/product/google/apihub.googleapis.com): used by the Cloud Code API Browser feature. - `lh3.googleusercontent.com` and `lh5.googleusercontent.com`: used to obtain user photos. ### Determine IP addresses for Google Cloud default domains To enable connectivity from your IDE to Google Cloud APIs, your firewall must allow outbound TCP traffic to Google's publicly documented IP address ranges. These ranges are dynamically managed by Google. To maintain a list of IP ranges to access Google Cloud domains, you have several options: - Use our published lists or automate a script to [obtain Google IP address ranges](https://support.google.com/a/answer/10026322). - Use the [private.googleapis.com Virtual IP](https://docs.cloud.google.com/vpc/docs/configure-private-google-access.md.txt#domain-options). - Use [Private Service Connect](https://docs.cloud.google.com/vpc/docs/configure-private-service-connect-apis.md.txt). ### Optional: Configure VPC Service Controls If your organization has a service perimeter, then you must add the following resources to your perimeter: - Gemini for Google Cloud API - Gemini Code Assist API If you are using Gemini Code Assist Standard or Enterprise from outside of your service perimeter, then you also need to modify the ingress policy to allow access to those services. For more information, see [Configure VPC Service Controls for Gemini](https://docs.cloud.google.com/gemini/docs/configure-vpc-service-controls.md.txt). ## Grant IAM roles in a Google Cloud project This section describes the steps required to grant the Gemini for Google Cloud User and Service Usage Consumer IAM roles to users. ### Console 1. To grant the IAM roles that are required to use Gemini, go to the **IAM \& Admin** page. [Go to IAM \& Admin](https://console.cloud.google.com/projectselector/iam-admin/iam) 2. Click **Grant access** , and then enter the [principal](https://docs.cloud.google.com/iam/docs/overview.md.txt#concepts_related_identity) name for which you want to give access to Gemini. 3. In the **Grant access** pane, click **Add another role**. 4. In **Assign roles** , select **Gemini for Google Cloud User**. 5. Click **Add roles** and select **Service Usage Consumer**. 6. Click **Save**. ### gcloud CLI 1. In the Google Cloud console, activate Cloud Shell. [Activate Cloud Shell](https://console.cloud.google.com/?cloudshell=true) 2. In the project selector menu, select a project. 3. Grant the Gemini for Google Cloud User role: ``` gcloud projects add-iam-policy-binding PROJECT_ID \ --member=PRINCIPAL --role=roles/cloudaicompanion.user ``` Replace the following: - `PROJECT_ID`: the ID of your Google Cloud project---for example,`my-project-id`. - `PRINCIPAL`: the [identifier](https://docs.cloud.google.com/iam/docs/principal-identifiers.md.txt) for the principal. For user accounts, this identifier is in the format `user:EMAIL_ADDRESS`---for example, `user:cloudysanfrancisco@gmail.com`. The output is a list of policy bindings that includes the following: - members: - user:PRINCIPAL role: roles/cloudaicompanion.user 4. Repeat the previous step for the role `roles/serviceusage.serviceUsageConsumer`. For more information, see [Grant a single role](https://docs.cloud.google.com/iam/docs/granting-changing-revoking-access.md.txt#grant-single-role) and [`gcloud projects add-iam-policy-binding`](https://docs.cloud.google.com/sdk/gcloud/reference/projects/add-iam-policy-binding). All of the users who have been granted these roles can access Gemini features in the Google Cloud console within the specified project. For more information, see [Google Cloud with Gemini overview](https://docs.cloud.google.com/gemini/docs/overview.md.txt). ## Install the Gemini Code Assist plugin Your organization's users install the Gemini Code Assist plugin in their preferred [supported IDE](https://docs.cloud.google.com/gemini/docs/codeassist/supported-languages.md.txt#supported_ides). Users of supported JetBrains IDEs should follow the IntelliJ instructions. ### VS Code 1. To open the **Extensions** view in VS Code, click ![Extension icon](https://docs.cloud.google.com/static/code/docs/vscode/images/vscodeextension.png) **Extensions** or press `Ctrl`/`Cmd`+`Shift`+`X`. 2. Search for `Gemini Code Assist`. 3. Click **Install**. 4. If prompted, restart VS Code. After the extension has successfully installed, Gemini Code Assist appears in the activity bar and is ready for use. You can further configure your Gemini Code Assist installation by specifying your preferences using the top-level application taskbar: navigate to **Code** \> **Settings** \> **Settings** \> **Extensions** and search for `Gemini Code Assist`. ### IntelliJ 1. Click settings **IDE and Project Settings** \> **Plugins**. 2. In the **Marketplace** tab, search for `Gemini Code Assist`. 3. Click **Install** to install the plugin. 4. When the installation is finished, click **Restart IDE**. 5. When the IDE restarts, Gemini Code Assist appears in your activity bar. ![The Gemini Code Assist icon appears in the activity bar.](https://docs.cloud.google.com/static/code/docs/intellij/images/gemini-code-assist-icon-in-activity-bar.png) Now the users are ready to use Gemini Code Assist Standard or Enterprise in their IDE. Learn more about the supported features: - [Code features overview](https://docs.cloud.google.com/gemini/docs/codeassist/code-overview.md.txt) - [Chat features overview](https://docs.cloud.google.com/gemini/docs/codeassist/chat-overview.md.txt) Get started with the following guides: - [Code with Gemini Code Assist](https://docs.cloud.google.com/gemini/docs/codeassist/write-code-gemini.md.txt) - [Chat with Gemini Code Assist](https://docs.cloud.google.com/gemini/docs/codeassist/chat-gemini.md.txt) ### List of directories where Gemini Code Assist caches information The following table provides a list of directories where Gemini Code Assist stores extension information such as auth tokens: ### Windows - `%LOCALAPPDATA%/cloud-code` - `%LOCALAPPDATA%/google-vscode-extension` ### macOS - `~/Library/Application Support/cloud-code` - `~/Library/Application Support/google-vscode-extension` ### Linux - `~/.cache/cloud-code` - `~/.cache/google-vscode-extension` ## Sign into Google and select a Google Cloud project Once users have installed Gemini Code Assist in their IDEs, they need to sign in to their Google Accounts, and if it's their first time using Gemini Code Assist Standard or Enterprise in their IDE, they select a Google Cloud project. This is the same project used to set up Gemini Code Assist, and is used to manage API access, quota, and billing. ### VS Code If you select a Google Cloud project without the Gemini for Google Cloud API enabled, you receive a notification that gives you the option to enable the API from the IDE. Select **Enable the API** in the notification window to enable the API for your project. If you prefer to follow the **Code with Gemini Code Assist** walkthrough directly in your IDE, click **Launch VS Code** and follow the steps in the walkthrough to connect to Google Cloud and activate Gemini Code Assist Standard or Enterprise. [Launch VS Code](vscode://googlecloudtools.cloudcode/cloudcode.openWalkthrough?id=duet-ai) Otherwise, follow these steps: 1. Launch your IDE. 2. In the activity bar, click **Gemini Code Assist**. 3. In the **Gemini Code Assist** chat pane, click **Login to Google Cloud**. 4. When prompted to allow Gemini Code Assist to open the external website, click **Open**. 5. Follow the prompts to sign into your Google Account. 6. When asked if you downloaded Gemini Code Assist from Google, click **Sign In**. > [!NOTE] > **Note:** If your sign-in attempts keep timing out, see the [Sign-in attempts keep timing out](https://docs.cloud.google.com/gemini/docs/codeassist/write-code-gemini.md.txt#known-issues) known issue for more information on troubleshooting. You're now connected to Google Cloud. Next, to select a Google Cloud project that has the Gemini for Google Cloud API enabled, follow these steps: 7. In the **Gemini Code Assist** status bar, click **Gemini Code Assist**. ![The Gemini status bar is available.](https://docs.cloud.google.com/static/code/docs/vscode/images/duet-ai-status-bar-no-project-selected.png) 8. In the **Gemini Code Assist** menu, select **Select Gemini Code project**. 9. Select a Google Cloud project that has the Gemini for Google Cloud API enabled. Gemini Code Assist Standard or Enterprise is ready to use. ![The Gemini icon in status bar is set to normal.](https://docs.cloud.google.com/static/code/docs/vscode/images/duet-ai-status-bar-project-selected.png) ### IntelliJ To sign in to your Google Account, follow these steps: 1. In the activity bar, click spark **Gemini Code Assist**. 2. Click **Log in to Google** . Alternatively, you can click **Copy link** and paste the URL into your browser. 3. On the page that opens in the web browser, select your Google Account. 4. On the screen that asks you to make sure that you downloaded this app from Google, click **Sign in**. Gemini Code Assist is now authorized to access your account. Next, if this is your first time using Gemini Code Assist Standard or Enterprise in your IDE, you must select a Google Cloud project by following these steps: 5. Return to your IDE. In the Gemini Code Assist tool window, if you agree to allow Google to enable the APIs required to use Gemini Code Assist on your behalf for your selected project, click **Select a GCP project** to continue. 6. In the **Select Google Cloud Project** dialog, search for and select your Google Cloud project, and then click **OK**. 7. Click **FINISH**. Your Google Cloud project is selected with the Gemini Code Assist API enabled. You're ready to use Gemini Code Assist Standard or Enterprise in your IDE! ## Advanced setup tasks The following sections describe advanced setup tasks that you can perform to customize Gemini Code Assist. ### Advanced IAM considerations Instead of using the Google Cloud console or the gcloud CLI to grant predefined IAM roles, you can do any of the following: - Use [IAM REST APIs](https://docs.cloud.google.com/iam/docs/reference/rest.md.txt) or [IAM client libraries](https://docs.cloud.google.com/iam/docs/reference/libraries.md.txt) to grant roles. If you use these interfaces, use the fully qualified role names: - `roles/cloudaicompanion.user` - `roles/serviceusage.serviceUsageConsumer` For more information about granting roles, see [Manage access to projects, folders, and organizations](https://docs.cloud.google.com/iam/docs/granting-changing-revoking-access.md.txt). - Create and grant custom roles. Any [custom roles](https://docs.cloud.google.com/iam/docs/creating-custom-roles.md.txt) that you create need the following permissions for you to access Gemini Code Assist Standard and Enterprise: - `cloudaicompanion.instances.completeCode` - `cloudaicompanion.instances.completeTask` - `cloudaicompanion.instances.generateCode` - `cloudaicompanion.instances.generateText` - `cloudaicompanion.instances.exportMetrics` - `cloudaicompanion.instances.queryEffectiveSetting` - `cloudaicompanion.instances.queryEffectiveSettingBindings` - `serviceusage.services.enable` - Assign and manage licenses. Any [custom roles](https://docs.cloud.google.com/iam/docs/creating-custom-roles.md.txt) that you create need the following permissions for you to assign and manage Gemini Code Assist licenses: - `consumerprocurement.orders.get` - `consumerprocurement.orders.licensePools.*` - `consumerprocurement.orders.licensePools.update` - `consumerprocurement.orders.licensePools.get` - `consumerprocurement.orders.licensePools.assign` - `consumerprocurement.orders.licensePools.unassign` - `consumerprocurement.orders.licensePools.enumerateLicensedUsers` Also note that for any of the preceding permissions to work, the Gemini for Google Cloud API needs to be enabled in the same Google Cloud project where you've assigned each permission. ### Change the Google Cloud project release channel We release Gemini Code Assist features in different release channels, either Generally Available or Preview. When you set up Gemini Code Assist, your project is automatically set to the Generally Available release channel. You can [change the Gemini Code Assist release channel](https://docs.cloud.google.com/gemini/docs/codeassist/configure-release-channels.md.txt) to the Preview channel or back to the Generally Available channel at any time. ## What's next - Learn more about the [types of generative AI assistance available in Google Cloud](https://docs.cloud.google.com/gemini/docs/overview.md.txt). - Learn [how to access and manage Gemini Code Assist Standard and Enterprise administrator controls](https://docs.cloud.google.com/gemini/docs/admin.md.txt). - Learn how to [configure multi-project logging](https://docs.cloud.google.com/gemini/docs/configure-logging.md.txt#multi-project-logging). - [Configure VPC Service Controls for Gemini Code Assist Standard and Enterprise](https://docs.cloud.google.com/gemini/docs/configure-vpc-service-controls.md.txt).