Configure allowed data sources

Key Term: In Gemini Enterprise, the term data store can be used interchangeably with the term connector or data connector.

The discoveryengine.managed.allowedDataSources managed organization policy constraint, also known as Restrict allowed data sources for data connectors, lets you control which external data sources (such as Jira, Box, or Confluence) are permitted when adding a data store in Gemini Enterprise.

Before you begin

• Ensure you have the Organization Policy Administrator role (roles/orgpolicy.policyAdmin).

  Note: This role might only be available to project owners and is only applicable if your project is part of an organization.

• Understand the policy enforcement dependencies and interactions. See Overview of managed policy constraints.

Configure the constraint

To configure the allowed data sources, follow these steps:

1. In the Google Cloud console, go to the Organization Policies page.

   Go to Organization Policies

2. In the project selector, choose the organization or project where you want to change policy enforcement.

3. In the Filter field, enter discoveryengine.managed.allowedDataSources or Restrict allowed data sources for data connectors.

4. Click the policy name to open its details.

5. Click Manage Policy.

6. Select Override parent's policy.

7. Set Enforcement to On.

8. Edit the allowedDataSources parameter:

   1. Click edit next to allowedDataSources.
   2. Set Value Type to User-defined.
   3. Add values, such as jira, box, or custom_mcp. For a complete list, see Supported Data Sources.

9. Optional: To enforce this policy on specific projects not in VPCSC, update the enforcedProjects parameter and add the project names in the format projects/<project_name>/.

10. Click Set Policy.

Supported data sources

For the canonical list of supported dataSource values that you can add to the allowedDataSources parameter, see the tables in Connect a third-party data source. Use the values from the Value for allowedDataSources column exactly as they appear.

Verify the policy change

Verify the policy by attempting to create a data store. If the configuration is correct, you can create the data store without an Operation denied by org policy error related to discoveryengine.managed.allowedDataSources.

What's next

• To connect your data sources, see Connect a Google data source and Connect a third-party data source.

• To create custom organization policies with fine-grained rules for your data connectors or data stores, see Manage resources with custom organization policies.