AutoML roles and permissions

This page lists the IAM roles and permissions for AutoML. To search through all roles and permissions, see the role and permission index.

AutoML roles

Role	Permissions
AutoML Admin ^Beta (roles/automl.admin) Full access to all AutoML resources Lowest-level resources where you can grant this role: Dataset Model	automl.* automl.annotationSpecs.create automl.annotationSpecs.delete automl.annotationSpecs.get automl.annotationSpecs.list automl.annotationSpecs.update automl.annotations.approve automl.annotations.create automl.annotations.list automl.annotations.manipulate automl.annotations.reject automl.columnSpecs.get automl.columnSpecs.list automl.columnSpecs.update automl.datasets.create automl.datasets.delete automl.datasets.export automl.datasets.get automl.datasets.getIamPolicy automl.datasets.import automl.datasets.list automl.datasets.setIamPolicy automl.datasets.update automl.examples.delete automl.examples.get automl.examples.list automl.examples.update automl.files.delete automl.files.list automl.humanAnnotationTasks.create automl.humanAnnotationTasks.delete automl.humanAnnotationTasks.get automl.humanAnnotationTasks.list automl.locations.get automl.locations.getIamPolicy automl.locations.list automl.locations.setIamPolicy automl.modelEvaluations.create automl.modelEvaluations.get automl.modelEvaluations.list automl.models.create automl.models.delete automl.models.deploy automl.models.export automl.models.get automl.models.getIamPolicy automl.models.list automl.models.predict automl.models.setIamPolicy automl.models.undeploy automl.operations.cancel automl.operations.delete automl.operations.get automl.operations.list automl.tableSpecs.get automl.tableSpecs.list automl.tableSpecs.update resourcemanager.projects.get resourcemanager.projects.list serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.services.get serviceusage.services.list serviceusage.values.test
AutoML Editor ^Beta (roles/automl.editor) Editor of all AutoML resources Lowest-level resources where you can grant this role: Dataset Model	automl.annotationSpecs.* automl.annotationSpecs.create automl.annotationSpecs.delete automl.annotationSpecs.get automl.annotationSpecs.list automl.annotationSpecs.update automl.annotations.* automl.annotations.approve automl.annotations.create automl.annotations.list automl.annotations.manipulate automl.annotations.reject automl.columnSpecs.* automl.columnSpecs.get automl.columnSpecs.list automl.columnSpecs.update automl.datasets.create automl.datasets.delete automl.datasets.export automl.datasets.get automl.datasets.import automl.datasets.list automl.datasets.update automl.examples.* automl.examples.delete automl.examples.get automl.examples.list automl.examples.update automl.files.* automl.files.delete automl.files.list automl.humanAnnotationTasks.* automl.humanAnnotationTasks.create automl.humanAnnotationTasks.delete automl.humanAnnotationTasks.get automl.humanAnnotationTasks.list automl.locations.get automl.locations.list automl.modelEvaluations.* automl.modelEvaluations.create automl.modelEvaluations.get automl.modelEvaluations.list automl.models.create automl.models.delete automl.models.deploy automl.models.export automl.models.get automl.models.list automl.models.predict automl.models.undeploy automl.operations.* automl.operations.cancel automl.operations.delete automl.operations.get automl.operations.list automl.tableSpecs.* automl.tableSpecs.get automl.tableSpecs.list automl.tableSpecs.update resourcemanager.projects.get resourcemanager.projects.list serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.services.get serviceusage.services.list serviceusage.values.test
AutoML Viewer ^Beta (roles/automl.viewer) Viewer of all AutoML resources Lowest-level resources where you can grant this role: Dataset Model	automl.annotationSpecs.get automl.annotationSpecs.list automl.annotations.list automl.columnSpecs.get automl.columnSpecs.list automl.datasets.get automl.datasets.list automl.examples.get automl.examples.list automl.files.list automl.humanAnnotationTasks.get automl.humanAnnotationTasks.list automl.locations.get automl.locations.list automl.modelEvaluations.get automl.modelEvaluations.list automl.models.get automl.models.list automl.operations.get automl.operations.list automl.tableSpecs.get automl.tableSpecs.list resourcemanager.projects.get resourcemanager.projects.list serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.services.get serviceusage.services.list serviceusage.values.test
AutoML Predictor ^Beta (roles/automl.predictor) Predict using models Lowest-level resources where you can grant this role: Model	automl.models.predict resourcemanager.projects.get resourcemanager.projects.list

Service agent roles

Service agent roles should only be granted to service agents.

Role

Permissions

AutoML Service Agent (roles/automl.serviceAgent) AutoML service agent can act as Cloud Storage admin and export BigQuery tables, which can be backed by Cloud Storage and Cloud Bigtable. Warning: Do not grant service agent roles to any principals except service agents.

bigquery.datasets.create bigquery.datasets.get bigquery.jobs.create bigquery.tables.create bigquery.tables.export bigquery.tables.get bigquery.tables.getData bigquery.tables.update bigquery.tables.updateData bigtable.tables.get bigtable.tables.list bigtable.tables.readRows serviceusage.services.use storage.buckets.get storage.objects.create storage.objects.delete storage.objects.get storage.objects.list storage.objects.update

AutoML permissions

Permission	Included in roles
automl.annotationSpecs.create	Owner (roles/owner) Editor (roles/editor) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.annotationSpecs.delete	Owner (roles/owner) Editor (roles/editor) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.annotationSpecs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.annotationSpecs.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.annotationSpecs.update	Owner (roles/owner) Editor (roles/editor) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.annotations.approve	Owner (roles/owner) Editor (roles/editor) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.annotations.create	Owner (roles/owner) Editor (roles/editor) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.annotations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.annotations.manipulate	Owner (roles/owner) Editor (roles/editor) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.annotations.reject	Owner (roles/owner) Editor (roles/editor) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.columnSpecs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.columnSpecs.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.columnSpecs.update	Owner (roles/owner) Editor (roles/editor) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.datasets.create	Owner (roles/owner) Editor (roles/editor) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.datasets.delete	Owner (roles/owner) Editor (roles/editor) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.datasets.export	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (roles/aiplatform.serviceAgent) Cloud Translation API Service Agent (roles/cloudtranslate.serviceAgent) Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.datasets.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (roles/aiplatform.serviceAgent) Cloud Translation API Service Agent (roles/cloudtranslate.serviceAgent) Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.datasets.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) Firebase Admin (roles/firebase.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Firebase Develop Admin (roles/firebase.developAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
automl.datasets.import	Owner (roles/owner) Editor (roles/editor) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.datasets.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (roles/aiplatform.serviceAgent) Cloud Translation API Service Agent (roles/cloudtranslate.serviceAgent) Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.datasets.setIamPolicy	Owner (roles/owner) AutoML Admin (roles/automl.admin) Firebase Admin (roles/firebase.admin) Security Admin (roles/iam.securityAdmin) Firebase Develop Admin (roles/firebase.developAdmin)
automl.datasets.update	Owner (roles/owner) Editor (roles/editor) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.examples.delete	Owner (roles/owner) Editor (roles/editor) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.examples.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.examples.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.examples.update	Owner (roles/owner) Editor (roles/editor) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.files.delete	Owner (roles/owner) Editor (roles/editor) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.files.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.humanAnnotationTasks.create	Owner (roles/owner) Editor (roles/editor) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.humanAnnotationTasks.delete	Owner (roles/owner) Editor (roles/editor) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.humanAnnotationTasks.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.humanAnnotationTasks.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.locations.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) Firebase Admin (roles/firebase.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Firebase Develop Admin (roles/firebase.developAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
automl.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.locations.setIamPolicy	Owner (roles/owner) AutoML Admin (roles/automl.admin) Firebase Admin (roles/firebase.admin) Security Admin (roles/iam.securityAdmin) Firebase Develop Admin (roles/firebase.developAdmin)
automl.modelEvaluations.create	Owner (roles/owner) Editor (roles/editor) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.modelEvaluations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.modelEvaluations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (roles/aiplatform.serviceAgent) Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.models.create	Owner (roles/owner) Editor (roles/editor) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.models.delete	Owner (roles/owner) Editor (roles/editor) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.models.deploy	Owner (roles/owner) Editor (roles/editor) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.models.export	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.models.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Cloud Translation API Admin (roles/cloudtranslate.admin) Cloud Translation API Editor (roles/cloudtranslate.editor) Cloud Translation API User (roles/cloudtranslate.user) Cloud Translation API Viewer (roles/cloudtranslate.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Translation Hub Admin (roles/translationhub.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Support User (roles/iam.supportUser) Translation Hub Portal User (roles/translationhub.portalUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (roles/aiplatform.serviceAgent) Cloud Translation API Service Agent (roles/cloudtranslate.serviceAgent) Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.models.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) Firebase Admin (roles/firebase.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Firebase Develop Admin (roles/firebase.developAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
automl.models.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Translation Hub Admin (roles/translationhub.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Translation Hub Portal User (roles/translationhub.portalUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (roles/aiplatform.serviceAgent) Cloud Translation API Service Agent (roles/cloudtranslate.serviceAgent) Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.models.predict	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Cloud Translation API Admin (roles/cloudtranslate.admin) Cloud Translation API Editor (roles/cloudtranslate.editor) Cloud Translation API User (roles/cloudtranslate.user) Firebase Admin (roles/firebase.admin) Translation Hub Admin (roles/translationhub.admin) AutoML Predictor (roles/automl.predictor) Firebase Develop Admin (roles/firebase.developAdmin) Support User (roles/iam.supportUser) Translation Hub Portal User (roles/translationhub.portalUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent) DocumentAI Core Service Agent (roles/documentaicore.serviceAgent)
automl.models.setIamPolicy	Owner (roles/owner) AutoML Admin (roles/automl.admin) Firebase Admin (roles/firebase.admin) Security Admin (roles/iam.securityAdmin) Firebase Develop Admin (roles/firebase.developAdmin)
automl.models.undeploy	Owner (roles/owner) Editor (roles/editor) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.operations.cancel	Owner (roles/owner) Editor (roles/editor) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.operations.delete	Owner (roles/owner) Editor (roles/editor) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (roles/aiplatform.serviceAgent) Cloud Translation API Service Agent (roles/cloudtranslate.serviceAgent) Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.tableSpecs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (roles/aiplatform.serviceAgent) Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.tableSpecs.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) AutoML Viewer (roles/automl.viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)
automl.tableSpecs.update	Owner (roles/owner) Editor (roles/editor) AutoML Admin (roles/automl.admin) AutoML Editor (roles/automl.editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (roles/datalabeling.serviceAgent)