Gemini Enterprise for Customer Experience roles and permissions

This page lists the IAM roles and permissions for Gemini Enterprise for Customer Experience. To search through all roles and permissions, see the role and permission index.

Gemini Enterprise for Customer Experience roles

Role	Permissions
Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Full access to Gemini Enterprise for Customer Experience resources.	ces.* ces.agents.create ces.agents.delete ces.agents.get ces.agents.list ces.agents.update ces.appVersions.create ces.appVersions.delete ces.appVersions.get ces.appVersions.list ces.appVersions.restore ces.apps.create ces.apps.delete ces.apps.export ces.apps.get ces.apps.import ces.apps.list ces.apps.update ces.changelogs.get ces.changelogs.list ces.conversations.delete ces.conversations.get ces.conversations.list ces.deployments.create ces.deployments.delete ces.deployments.get ces.deployments.list ces.deployments.update ces.evaluationDatasets.create ces.evaluationDatasets.delete ces.evaluationDatasets.get ces.evaluationDatasets.list ces.evaluationDatasets.update ces.evaluationResults.delete ces.evaluationResults.get ces.evaluationResults.list ces.evaluationRuns.delete ces.evaluationRuns.get ces.evaluationRuns.list ces.evaluations.create ces.evaluations.delete ces.evaluations.get ces.evaluations.list ces.evaluations.update ces.examples.create ces.examples.delete ces.examples.get ces.examples.list ces.examples.update ces.guardrails.create ces.guardrails.delete ces.guardrails.get ces.guardrails.list ces.guardrails.update ces.locations.get ces.locations.list ces.operations.cancel ces.operations.delete ces.operations.get ces.operations.list ces.sessions.bidiRunSession ces.sessions.runSession ces.tools.create ces.tools.delete ces.tools.execute ces.tools.get ces.tools.list ces.tools.update ces.toolsets.create ces.toolsets.delete ces.toolsets.get ces.toolsets.list ces.toolsets.update contactcenterinsights.* contactcenterinsights.analyses.create contactcenterinsights.analyses.delete contactcenterinsights.analyses.get contactcenterinsights.analyses.list contactcenterinsights.analysisRules.create contactcenterinsights.analysisRules.delete contactcenterinsights.analysisRules.get contactcenterinsights.analysisRules.list contactcenterinsights.analysisRules.update contactcenterinsights.assessmentRules.create contactcenterinsights.assessmentRules.delete contactcenterinsights.assessmentRules.get contactcenterinsights.assessmentRules.list contactcenterinsights.assessmentRules.update contactcenterinsights.assessments.appeal contactcenterinsights.assessments.create contactcenterinsights.assessments.delete contactcenterinsights.assessments.finalize contactcenterinsights.assessments.get contactcenterinsights.assessments.list contactcenterinsights.assessments.publish contactcenterinsights.authorizedAnalyses.create contactcenterinsights.authorizedAnalyses.delete contactcenterinsights.authorizedAnalyses.get contactcenterinsights.authorizedAnalyses.list contactcenterinsights.authorizedAssessments.appeal contactcenterinsights.authorizedAssessments.create contactcenterinsights.authorizedAssessments.delete contactcenterinsights.authorizedAssessments.finalize contactcenterinsights.authorizedAssessments.get contactcenterinsights.authorizedAssessments.list contactcenterinsights.authorizedAssessments.publish contactcenterinsights.authorizedConversations.create contactcenterinsights.authorizedConversations.delete contactcenterinsights.authorizedConversations.generateSignedAudio contactcenterinsights.authorizedConversations.get contactcenterinsights.authorizedConversations.list contactcenterinsights.authorizedConversations.update contactcenterinsights.authorizedConversations.upload contactcenterinsights.authorizedFeedbackLabels.create contactcenterinsights.authorizedFeedbackLabels.delete contactcenterinsights.authorizedFeedbackLabels.download contactcenterinsights.authorizedFeedbackLabels.get contactcenterinsights.authorizedFeedbackLabels.list contactcenterinsights.authorizedFeedbackLabels.update contactcenterinsights.authorizedFeedbackLabels.upload contactcenterinsights.authorizedNotes.create contactcenterinsights.authorizedNotes.delete contactcenterinsights.authorizedNotes.list contactcenterinsights.authorizedNotes.update contactcenterinsights.authorizedOperations.get contactcenterinsights.authorizedOperations.list contactcenterinsights.authorizedViewSets.create contactcenterinsights.authorizedViewSets.delete contactcenterinsights.authorizedViewSets.get contactcenterinsights.authorizedViewSets.list contactcenterinsights.authorizedViewSets.update contactcenterinsights.authorizedViews.create contactcenterinsights.authorizedViews.delete contactcenterinsights.authorizedViews.get contactcenterinsights.authorizedViews.getIamPolicy contactcenterinsights.authorizedViews.list contactcenterinsights.authorizedViews.setIamPolicy contactcenterinsights.authorizedViews.update contactcenterinsights.conversations.create contactcenterinsights.conversations.delete contactcenterinsights.conversations.export contactcenterinsights.conversations.generateSignedAudio contactcenterinsights.conversations.get contactcenterinsights.conversations.list contactcenterinsights.conversations.update contactcenterinsights.conversations.upload contactcenterinsights.datasetAnalyses.create contactcenterinsights.datasetAnalyses.delete contactcenterinsights.datasetAnalyses.get contactcenterinsights.datasetAnalyses.list contactcenterinsights.datasetConversations.create contactcenterinsights.datasetConversations.delete contactcenterinsights.datasetConversations.export contactcenterinsights.datasetConversations.generateSignedAudio contactcenterinsights.datasetConversations.get contactcenterinsights.datasetConversations.list contactcenterinsights.datasetConversations.update contactcenterinsights.datasetConversations.upload contactcenterinsights.datasetFeedbackLabels.create contactcenterinsights.datasetFeedbackLabels.delete contactcenterinsights.datasetFeedbackLabels.download contactcenterinsights.datasetFeedbackLabels.get contactcenterinsights.datasetFeedbackLabels.list contactcenterinsights.datasetFeedbackLabels.update contactcenterinsights.datasetFeedbackLabels.upload contactcenterinsights.datasets.create contactcenterinsights.datasets.delete contactcenterinsights.datasets.get contactcenterinsights.datasets.list contactcenterinsights.datasets.update contactcenterinsights.discoveries.delete contactcenterinsights.discoveries.generate contactcenterinsights.discoveries.get contactcenterinsights.discoveries.list contactcenterinsights.discoveries.update contactcenterinsights.discoveryResults.get contactcenterinsights.discoveryResults.list contactcenterinsights.discoveryRevisions.create contactcenterinsights.discoveryRevisions.get contactcenterinsights.discoveryRevisions.list contactcenterinsights.discoveryWorkspaces.delete contactcenterinsights.discoveryWorkspaces.deploy contactcenterinsights.discoveryWorkspaces.fetchTree contactcenterinsights.discoveryWorkspaces.get contactcenterinsights.discoveryWorkspaces.list contactcenterinsights.discoveryWorkspaces.undeploy contactcenterinsights.encryptionSpecs.get contactcenterinsights.encryptionSpecs.initialize contactcenterinsights.faqEntries.delete contactcenterinsights.faqEntries.get contactcenterinsights.faqEntries.list contactcenterinsights.faqEntries.update contactcenterinsights.faqModels.create contactcenterinsights.faqModels.delete contactcenterinsights.faqModels.get contactcenterinsights.faqModels.list contactcenterinsights.faqModels.update contactcenterinsights.feedbackLabels.create contactcenterinsights.feedbackLabels.delete contactcenterinsights.feedbackLabels.download contactcenterinsights.feedbackLabels.get contactcenterinsights.feedbackLabels.list contactcenterinsights.feedbackLabels.update contactcenterinsights.feedbackLabels.upload contactcenterinsights.issueModels.create contactcenterinsights.issueModels.delete contactcenterinsights.issueModels.deploy contactcenterinsights.issueModels.export contactcenterinsights.issueModels.get contactcenterinsights.issueModels.import contactcenterinsights.issueModels.list contactcenterinsights.issueModels.undeploy contactcenterinsights.issueModels.update contactcenterinsights.issues.create contactcenterinsights.issues.delete contactcenterinsights.issues.get contactcenterinsights.issues.list contactcenterinsights.issues.update contactcenterinsights.notes.create contactcenterinsights.notes.delete contactcenterinsights.notes.list contactcenterinsights.notes.update contactcenterinsights.operations.cancel contactcenterinsights.operations.get contactcenterinsights.operations.list contactcenterinsights.phraseMatchers.create contactcenterinsights.phraseMatchers.delete contactcenterinsights.phraseMatchers.get contactcenterinsights.phraseMatchers.list contactcenterinsights.phraseMatchers.update contactcenterinsights.qaQuestionTags.create contactcenterinsights.qaQuestionTags.delete contactcenterinsights.qaQuestionTags.get contactcenterinsights.qaQuestionTags.list contactcenterinsights.qaQuestionTags.update contactcenterinsights.qaQuestions.create contactcenterinsights.qaQuestions.delete contactcenterinsights.qaQuestions.get contactcenterinsights.qaQuestions.list contactcenterinsights.qaQuestions.update contactcenterinsights.qaScorecardRevisions.bulkUpdateQaQuestions contactcenterinsights.qaScorecardRevisions.create contactcenterinsights.qaScorecardRevisions.delete contactcenterinsights.qaScorecardRevisions.deploy contactcenterinsights.qaScorecardRevisions.get contactcenterinsights.qaScorecardRevisions.list contactcenterinsights.qaScorecardRevisions.tune contactcenterinsights.qaScorecardRevisions.undeploy contactcenterinsights.qaScorecards.create contactcenterinsights.qaScorecards.delete contactcenterinsights.qaScorecards.get contactcenterinsights.qaScorecards.list contactcenterinsights.qaScorecards.update contactcenterinsights.settings.get contactcenterinsights.settings.update contactcenterinsights.views.create contactcenterinsights.views.delete contactcenterinsights.views.get contactcenterinsights.views.list contactcenterinsights.views.update contactcenterinsights.visibilityLabels.list resourcemanager.projects.get resourcemanager.projects.list
Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Full control over agent node structures, including instructions, tools, guardrails, callbacks, etc.	ces.agents.* ces.agents.create ces.agents.delete ces.agents.get ces.agents.list ces.agents.update ces.appVersions.get ces.appVersions.list ces.apps.get ces.apps.list ces.changelogs.* ces.changelogs.get ces.changelogs.list ces.conversations.get ces.conversations.list ces.deployments.get ces.deployments.list ces.evaluationDatasets.get ces.evaluationDatasets.list ces.evaluationResults.get ces.evaluationResults.list ces.evaluationRuns.get ces.evaluationRuns.list ces.evaluations.get ces.evaluations.list ces.examples.* ces.examples.create ces.examples.delete ces.examples.get ces.examples.list ces.examples.update ces.guardrails.get ces.guardrails.list ces.locations.* ces.locations.get ces.locations.list ces.operations.get ces.operations.list ces.sessions.* ces.sessions.bidiRunSession ces.sessions.runSession ces.tools.execute ces.tools.get ces.tools.list ces.toolsets.get ces.toolsets.list contactcenterinsights.analyses.get contactcenterinsights.analyses.list contactcenterinsights.analysisRules.get contactcenterinsights.analysisRules.list contactcenterinsights.assessmentRules.get contactcenterinsights.assessmentRules.list contactcenterinsights.assessments.get contactcenterinsights.assessments.list contactcenterinsights.authorizedAnalyses.get contactcenterinsights.authorizedAnalyses.list contactcenterinsights.authorizedAssessments.get contactcenterinsights.authorizedAssessments.list contactcenterinsights.authorizedConversations.generateSignedAudio contactcenterinsights.authorizedConversations.get contactcenterinsights.authorizedConversations.list contactcenterinsights.authorizedFeedbackLabels.get contactcenterinsights.authorizedFeedbackLabels.list contactcenterinsights.authorizedNotes.list contactcenterinsights.authorizedOperations.* contactcenterinsights.authorizedOperations.get contactcenterinsights.authorizedOperations.list contactcenterinsights.authorizedViewSets.get contactcenterinsights.authorizedViewSets.list contactcenterinsights.authorizedViews.get contactcenterinsights.authorizedViews.list contactcenterinsights.conversations.generateSignedAudio contactcenterinsights.conversations.get contactcenterinsights.conversations.list contactcenterinsights.datasetAnalyses.get contactcenterinsights.datasetAnalyses.list contactcenterinsights.datasetConversations.generateSignedAudio contactcenterinsights.datasetConversations.get contactcenterinsights.datasetConversations.list contactcenterinsights.datasetFeedbackLabels.get contactcenterinsights.datasetFeedbackLabels.list contactcenterinsights.datasets.get contactcenterinsights.datasets.list contactcenterinsights.discoveries.get contactcenterinsights.discoveries.list contactcenterinsights.discoveryResults.* contactcenterinsights.discoveryResults.get contactcenterinsights.discoveryResults.list contactcenterinsights.discoveryRevisions.get contactcenterinsights.discoveryRevisions.list contactcenterinsights.discoveryWorkspaces.fetchTree contactcenterinsights.discoveryWorkspaces.get contactcenterinsights.discoveryWorkspaces.list contactcenterinsights.encryptionSpecs.get contactcenterinsights.faqEntries.get contactcenterinsights.faqEntries.list contactcenterinsights.faqModels.get contactcenterinsights.faqModels.list contactcenterinsights.feedbackLabels.download contactcenterinsights.feedbackLabels.get contactcenterinsights.feedbackLabels.list contactcenterinsights.issueModels.get contactcenterinsights.issueModels.list contactcenterinsights.issues.get contactcenterinsights.issues.list contactcenterinsights.notes.list contactcenterinsights.operations.get contactcenterinsights.operations.list contactcenterinsights.phraseMatchers.get contactcenterinsights.phraseMatchers.list contactcenterinsights.qaQuestionTags.get contactcenterinsights.qaQuestionTags.list contactcenterinsights.qaQuestions.get contactcenterinsights.qaQuestions.list contactcenterinsights.qaScorecardRevisions.get contactcenterinsights.qaScorecardRevisions.list contactcenterinsights.qaScorecards.get contactcenterinsights.qaScorecards.list contactcenterinsights.settings.get contactcenterinsights.views.get contactcenterinsights.views.list contactcenterinsights.visibilityLabels.list resourcemanager.projects.get resourcemanager.projects.list
Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Full control over app-level settings, such as logging settings, audio/voice configurations, etc.	ces.agents.get ces.agents.list ces.appVersions.* ces.appVersions.create ces.appVersions.delete ces.appVersions.get ces.appVersions.list ces.appVersions.restore ces.apps.* ces.apps.create ces.apps.delete ces.apps.export ces.apps.get ces.apps.import ces.apps.list ces.apps.update ces.changelogs.* ces.changelogs.get ces.changelogs.list ces.conversations.get ces.conversations.list ces.deployments.get ces.deployments.list ces.evaluationDatasets.get ces.evaluationDatasets.list ces.evaluationResults.get ces.evaluationResults.list ces.evaluationRuns.get ces.evaluationRuns.list ces.evaluations.get ces.evaluations.list ces.examples.get ces.examples.list ces.guardrails.get ces.guardrails.list ces.locations.* ces.locations.get ces.locations.list ces.operations.get ces.operations.list ces.tools.get ces.tools.list ces.toolsets.get ces.toolsets.list contactcenterinsights.analyses.get contactcenterinsights.analyses.list contactcenterinsights.analysisRules.get contactcenterinsights.analysisRules.list contactcenterinsights.assessmentRules.get contactcenterinsights.assessmentRules.list contactcenterinsights.assessments.get contactcenterinsights.assessments.list contactcenterinsights.authorizedAnalyses.get contactcenterinsights.authorizedAnalyses.list contactcenterinsights.authorizedAssessments.get contactcenterinsights.authorizedAssessments.list contactcenterinsights.authorizedConversations.generateSignedAudio contactcenterinsights.authorizedConversations.get contactcenterinsights.authorizedConversations.list contactcenterinsights.authorizedFeedbackLabels.get contactcenterinsights.authorizedFeedbackLabels.list contactcenterinsights.authorizedNotes.list contactcenterinsights.authorizedOperations.* contactcenterinsights.authorizedOperations.get contactcenterinsights.authorizedOperations.list contactcenterinsights.authorizedViewSets.get contactcenterinsights.authorizedViewSets.list contactcenterinsights.authorizedViews.get contactcenterinsights.authorizedViews.list contactcenterinsights.conversations.generateSignedAudio contactcenterinsights.conversations.get contactcenterinsights.conversations.list contactcenterinsights.datasetAnalyses.get contactcenterinsights.datasetAnalyses.list contactcenterinsights.datasetConversations.generateSignedAudio contactcenterinsights.datasetConversations.get contactcenterinsights.datasetConversations.list contactcenterinsights.datasetFeedbackLabels.get contactcenterinsights.datasetFeedbackLabels.list contactcenterinsights.datasets.get contactcenterinsights.datasets.list contactcenterinsights.discoveries.get contactcenterinsights.discoveries.list contactcenterinsights.discoveryResults.* contactcenterinsights.discoveryResults.get contactcenterinsights.discoveryResults.list contactcenterinsights.discoveryRevisions.get contactcenterinsights.discoveryRevisions.list contactcenterinsights.discoveryWorkspaces.fetchTree contactcenterinsights.discoveryWorkspaces.get contactcenterinsights.discoveryWorkspaces.list contactcenterinsights.encryptionSpecs.get contactcenterinsights.faqEntries.get contactcenterinsights.faqEntries.list contactcenterinsights.faqModels.get contactcenterinsights.faqModels.list contactcenterinsights.feedbackLabels.download contactcenterinsights.feedbackLabels.get contactcenterinsights.feedbackLabels.list contactcenterinsights.issueModels.get contactcenterinsights.issueModels.list contactcenterinsights.issues.get contactcenterinsights.issues.list contactcenterinsights.notes.list contactcenterinsights.operations.get contactcenterinsights.operations.list contactcenterinsights.phraseMatchers.get contactcenterinsights.phraseMatchers.list contactcenterinsights.qaQuestionTags.get contactcenterinsights.qaQuestionTags.list contactcenterinsights.qaQuestions.get contactcenterinsights.qaQuestions.list contactcenterinsights.qaScorecardRevisions.get contactcenterinsights.qaScorecardRevisions.list contactcenterinsights.qaScorecards.get contactcenterinsights.qaScorecards.list contactcenterinsights.settings.get contactcenterinsights.views.get contactcenterinsights.views.list contactcenterinsights.visibilityLabels.list resourcemanager.projects.get resourcemanager.projects.list
Gemini Enterprise for Customer Experience Client (roles/ces.client) Query access to Gemini Enterprise for Customer Experience agents.	ces.sessions.* ces.sessions.bidiRunSession ces.sessions.runSession ces.tools.execute
Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Ability to manage deployments and configure specific app versions.	ces.agents.get ces.agents.list ces.appVersions.get ces.appVersions.list ces.apps.get ces.apps.list ces.changelogs.* ces.changelogs.get ces.changelogs.list ces.conversations.get ces.conversations.list ces.deployments.* ces.deployments.create ces.deployments.delete ces.deployments.get ces.deployments.list ces.deployments.update ces.evaluationDatasets.get ces.evaluationDatasets.list ces.evaluationResults.get ces.evaluationResults.list ces.evaluationRuns.get ces.evaluationRuns.list ces.evaluations.get ces.evaluations.list ces.examples.get ces.examples.list ces.guardrails.get ces.guardrails.list ces.locations.* ces.locations.get ces.locations.list ces.operations.get ces.operations.list ces.tools.get ces.tools.list ces.toolsets.get ces.toolsets.list contactcenterinsights.analyses.get contactcenterinsights.analyses.list contactcenterinsights.analysisRules.get contactcenterinsights.analysisRules.list contactcenterinsights.assessmentRules.get contactcenterinsights.assessmentRules.list contactcenterinsights.assessments.get contactcenterinsights.assessments.list contactcenterinsights.authorizedAnalyses.get contactcenterinsights.authorizedAnalyses.list contactcenterinsights.authorizedAssessments.get contactcenterinsights.authorizedAssessments.list contactcenterinsights.authorizedConversations.generateSignedAudio contactcenterinsights.authorizedConversations.get contactcenterinsights.authorizedConversations.list contactcenterinsights.authorizedFeedbackLabels.get contactcenterinsights.authorizedFeedbackLabels.list contactcenterinsights.authorizedNotes.list contactcenterinsights.authorizedOperations.* contactcenterinsights.authorizedOperations.get contactcenterinsights.authorizedOperations.list contactcenterinsights.authorizedViewSets.get contactcenterinsights.authorizedViewSets.list contactcenterinsights.authorizedViews.get contactcenterinsights.authorizedViews.list contactcenterinsights.conversations.generateSignedAudio contactcenterinsights.conversations.get contactcenterinsights.conversations.list contactcenterinsights.datasetAnalyses.get contactcenterinsights.datasetAnalyses.list contactcenterinsights.datasetConversations.generateSignedAudio contactcenterinsights.datasetConversations.get contactcenterinsights.datasetConversations.list contactcenterinsights.datasetFeedbackLabels.get contactcenterinsights.datasetFeedbackLabels.list contactcenterinsights.datasets.get contactcenterinsights.datasets.list contactcenterinsights.discoveries.get contactcenterinsights.discoveries.list contactcenterinsights.discoveryResults.* contactcenterinsights.discoveryResults.get contactcenterinsights.discoveryResults.list contactcenterinsights.discoveryRevisions.get contactcenterinsights.discoveryRevisions.list contactcenterinsights.discoveryWorkspaces.fetchTree contactcenterinsights.discoveryWorkspaces.get contactcenterinsights.discoveryWorkspaces.list contactcenterinsights.encryptionSpecs.get contactcenterinsights.faqEntries.get contactcenterinsights.faqEntries.list contactcenterinsights.faqModels.get contactcenterinsights.faqModels.list contactcenterinsights.feedbackLabels.download contactcenterinsights.feedbackLabels.get contactcenterinsights.feedbackLabels.list contactcenterinsights.issueModels.get contactcenterinsights.issueModels.list contactcenterinsights.issues.get contactcenterinsights.issues.list contactcenterinsights.notes.list contactcenterinsights.operations.get contactcenterinsights.operations.list contactcenterinsights.phraseMatchers.get contactcenterinsights.phraseMatchers.list contactcenterinsights.qaQuestionTags.get contactcenterinsights.qaQuestionTags.list contactcenterinsights.qaQuestions.get contactcenterinsights.qaQuestions.list contactcenterinsights.qaScorecardRevisions.get contactcenterinsights.qaScorecardRevisions.list contactcenterinsights.qaScorecards.get contactcenterinsights.qaScorecards.list contactcenterinsights.settings.get contactcenterinsights.views.get contactcenterinsights.views.list contactcenterinsights.visibilityLabels.list resourcemanager.projects.get resourcemanager.projects.list
Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Full control over evaluation datasets, runs, and results.	ces.agents.get ces.agents.list ces.appVersions.get ces.appVersions.list ces.apps.get ces.apps.list ces.changelogs.* ces.changelogs.get ces.changelogs.list ces.conversations.get ces.conversations.list ces.deployments.get ces.deployments.list ces.evaluationDatasets.* ces.evaluationDatasets.create ces.evaluationDatasets.delete ces.evaluationDatasets.get ces.evaluationDatasets.list ces.evaluationDatasets.update ces.evaluationResults.* ces.evaluationResults.delete ces.evaluationResults.get ces.evaluationResults.list ces.evaluationRuns.* ces.evaluationRuns.delete ces.evaluationRuns.get ces.evaluationRuns.list ces.evaluations.* ces.evaluations.create ces.evaluations.delete ces.evaluations.get ces.evaluations.list ces.evaluations.update ces.examples.get ces.examples.list ces.guardrails.get ces.guardrails.list ces.locations.* ces.locations.get ces.locations.list ces.operations.get ces.operations.list ces.sessions.* ces.sessions.bidiRunSession ces.sessions.runSession ces.tools.execute ces.tools.get ces.tools.list ces.toolsets.get ces.toolsets.list contactcenterinsights.analyses.get contactcenterinsights.analyses.list contactcenterinsights.analysisRules.get contactcenterinsights.analysisRules.list contactcenterinsights.assessmentRules.get contactcenterinsights.assessmentRules.list contactcenterinsights.assessments.get contactcenterinsights.assessments.list contactcenterinsights.authorizedAnalyses.get contactcenterinsights.authorizedAnalyses.list contactcenterinsights.authorizedAssessments.get contactcenterinsights.authorizedAssessments.list contactcenterinsights.authorizedConversations.generateSignedAudio contactcenterinsights.authorizedConversations.get contactcenterinsights.authorizedConversations.list contactcenterinsights.authorizedFeedbackLabels.get contactcenterinsights.authorizedFeedbackLabels.list contactcenterinsights.authorizedNotes.list contactcenterinsights.authorizedOperations.* contactcenterinsights.authorizedOperations.get contactcenterinsights.authorizedOperations.list contactcenterinsights.authorizedViewSets.get contactcenterinsights.authorizedViewSets.list contactcenterinsights.authorizedViews.get contactcenterinsights.authorizedViews.list contactcenterinsights.conversations.generateSignedAudio contactcenterinsights.conversations.get contactcenterinsights.conversations.list contactcenterinsights.datasetAnalyses.get contactcenterinsights.datasetAnalyses.list contactcenterinsights.datasetConversations.generateSignedAudio contactcenterinsights.datasetConversations.get contactcenterinsights.datasetConversations.list contactcenterinsights.datasetFeedbackLabels.get contactcenterinsights.datasetFeedbackLabels.list contactcenterinsights.datasets.get contactcenterinsights.datasets.list contactcenterinsights.discoveries.get contactcenterinsights.discoveries.list contactcenterinsights.discoveryResults.* contactcenterinsights.discoveryResults.get contactcenterinsights.discoveryResults.list contactcenterinsights.discoveryRevisions.get contactcenterinsights.discoveryRevisions.list contactcenterinsights.discoveryWorkspaces.fetchTree contactcenterinsights.discoveryWorkspaces.get contactcenterinsights.discoveryWorkspaces.list contactcenterinsights.encryptionSpecs.get contactcenterinsights.faqEntries.get contactcenterinsights.faqEntries.list contactcenterinsights.faqModels.get contactcenterinsights.faqModels.list contactcenterinsights.feedbackLabels.download contactcenterinsights.feedbackLabels.get contactcenterinsights.feedbackLabels.list contactcenterinsights.issueModels.get contactcenterinsights.issueModels.list contactcenterinsights.issues.get contactcenterinsights.issues.list contactcenterinsights.notes.list contactcenterinsights.operations.get contactcenterinsights.operations.list contactcenterinsights.phraseMatchers.get contactcenterinsights.phraseMatchers.list contactcenterinsights.qaQuestionTags.get contactcenterinsights.qaQuestionTags.list contactcenterinsights.qaQuestions.get contactcenterinsights.qaQuestions.list contactcenterinsights.qaScorecardRevisions.get contactcenterinsights.qaScorecardRevisions.list contactcenterinsights.qaScorecards.get contactcenterinsights.qaScorecards.list contactcenterinsights.settings.get contactcenterinsights.views.get contactcenterinsights.views.list contactcenterinsights.visibilityLabels.list resourcemanager.projects.get resourcemanager.projects.list
Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Full control over safety settings and guardrails.	ces.agents.get ces.agents.list ces.appVersions.get ces.appVersions.list ces.apps.get ces.apps.list ces.changelogs.* ces.changelogs.get ces.changelogs.list ces.conversations.get ces.conversations.list ces.deployments.get ces.deployments.list ces.evaluationDatasets.get ces.evaluationDatasets.list ces.evaluationResults.get ces.evaluationResults.list ces.evaluationRuns.get ces.evaluationRuns.list ces.evaluations.get ces.evaluations.list ces.examples.get ces.examples.list ces.guardrails.* ces.guardrails.create ces.guardrails.delete ces.guardrails.get ces.guardrails.list ces.guardrails.update ces.locations.* ces.locations.get ces.locations.list ces.operations.get ces.operations.list ces.sessions.* ces.sessions.bidiRunSession ces.sessions.runSession ces.tools.execute ces.tools.get ces.tools.list ces.toolsets.get ces.toolsets.list contactcenterinsights.analyses.get contactcenterinsights.analyses.list contactcenterinsights.analysisRules.get contactcenterinsights.analysisRules.list contactcenterinsights.assessmentRules.get contactcenterinsights.assessmentRules.list contactcenterinsights.assessments.get contactcenterinsights.assessments.list contactcenterinsights.authorizedAnalyses.get contactcenterinsights.authorizedAnalyses.list contactcenterinsights.authorizedAssessments.get contactcenterinsights.authorizedAssessments.list contactcenterinsights.authorizedConversations.generateSignedAudio contactcenterinsights.authorizedConversations.get contactcenterinsights.authorizedConversations.list contactcenterinsights.authorizedFeedbackLabels.get contactcenterinsights.authorizedFeedbackLabels.list contactcenterinsights.authorizedNotes.list contactcenterinsights.authorizedOperations.* contactcenterinsights.authorizedOperations.get contactcenterinsights.authorizedOperations.list contactcenterinsights.authorizedViewSets.get contactcenterinsights.authorizedViewSets.list contactcenterinsights.authorizedViews.get contactcenterinsights.authorizedViews.list contactcenterinsights.conversations.generateSignedAudio contactcenterinsights.conversations.get contactcenterinsights.conversations.list contactcenterinsights.datasetAnalyses.get contactcenterinsights.datasetAnalyses.list contactcenterinsights.datasetConversations.generateSignedAudio contactcenterinsights.datasetConversations.get contactcenterinsights.datasetConversations.list contactcenterinsights.datasetFeedbackLabels.get contactcenterinsights.datasetFeedbackLabels.list contactcenterinsights.datasets.get contactcenterinsights.datasets.list contactcenterinsights.discoveries.get contactcenterinsights.discoveries.list contactcenterinsights.discoveryResults.* contactcenterinsights.discoveryResults.get contactcenterinsights.discoveryResults.list contactcenterinsights.discoveryRevisions.get contactcenterinsights.discoveryRevisions.list contactcenterinsights.discoveryWorkspaces.fetchTree contactcenterinsights.discoveryWorkspaces.get contactcenterinsights.discoveryWorkspaces.list contactcenterinsights.encryptionSpecs.get contactcenterinsights.faqEntries.get contactcenterinsights.faqEntries.list contactcenterinsights.faqModels.get contactcenterinsights.faqModels.list contactcenterinsights.feedbackLabels.download contactcenterinsights.feedbackLabels.get contactcenterinsights.feedbackLabels.list contactcenterinsights.issueModels.get contactcenterinsights.issueModels.list contactcenterinsights.issues.get contactcenterinsights.issues.list contactcenterinsights.notes.list contactcenterinsights.operations.get contactcenterinsights.operations.list contactcenterinsights.phraseMatchers.get contactcenterinsights.phraseMatchers.list contactcenterinsights.qaQuestionTags.get contactcenterinsights.qaQuestionTags.list contactcenterinsights.qaQuestions.get contactcenterinsights.qaQuestions.list contactcenterinsights.qaScorecardRevisions.get contactcenterinsights.qaScorecardRevisions.list contactcenterinsights.qaScorecards.get contactcenterinsights.qaScorecards.list contactcenterinsights.settings.get contactcenterinsights.views.get contactcenterinsights.views.list contactcenterinsights.visibilityLabels.list resourcemanager.projects.get resourcemanager.projects.list
Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Full control over security settings.	ces.agents.get ces.agents.list ces.appVersions.get ces.appVersions.list ces.apps.get ces.apps.list ces.changelogs.* ces.changelogs.get ces.changelogs.list ces.conversations.get ces.conversations.list ces.deployments.get ces.deployments.list ces.evaluationDatasets.get ces.evaluationDatasets.list ces.evaluationResults.get ces.evaluationResults.list ces.evaluationRuns.get ces.evaluationRuns.list ces.evaluations.get ces.evaluations.list ces.examples.get ces.examples.list ces.guardrails.get ces.guardrails.list ces.locations.* ces.locations.get ces.locations.list ces.operations.get ces.operations.list ces.tools.get ces.tools.list ces.toolsets.get ces.toolsets.list contactcenterinsights.analyses.get contactcenterinsights.analyses.list contactcenterinsights.analysisRules.get contactcenterinsights.analysisRules.list contactcenterinsights.assessmentRules.get contactcenterinsights.assessmentRules.list contactcenterinsights.assessments.get contactcenterinsights.assessments.list contactcenterinsights.authorizedAnalyses.get contactcenterinsights.authorizedAnalyses.list contactcenterinsights.authorizedAssessments.get contactcenterinsights.authorizedAssessments.list contactcenterinsights.authorizedConversations.generateSignedAudio contactcenterinsights.authorizedConversations.get contactcenterinsights.authorizedConversations.list contactcenterinsights.authorizedFeedbackLabels.get contactcenterinsights.authorizedFeedbackLabels.list contactcenterinsights.authorizedNotes.list contactcenterinsights.authorizedOperations.* contactcenterinsights.authorizedOperations.get contactcenterinsights.authorizedOperations.list contactcenterinsights.authorizedViewSets.get contactcenterinsights.authorizedViewSets.list contactcenterinsights.authorizedViews.get contactcenterinsights.authorizedViews.list contactcenterinsights.conversations.generateSignedAudio contactcenterinsights.conversations.get contactcenterinsights.conversations.list contactcenterinsights.datasetAnalyses.get contactcenterinsights.datasetAnalyses.list contactcenterinsights.datasetConversations.generateSignedAudio contactcenterinsights.datasetConversations.get contactcenterinsights.datasetConversations.list contactcenterinsights.datasetFeedbackLabels.get contactcenterinsights.datasetFeedbackLabels.list contactcenterinsights.datasets.get contactcenterinsights.datasets.list contactcenterinsights.discoveries.get contactcenterinsights.discoveries.list contactcenterinsights.discoveryResults.* contactcenterinsights.discoveryResults.get contactcenterinsights.discoveryResults.list contactcenterinsights.discoveryRevisions.get contactcenterinsights.discoveryRevisions.list contactcenterinsights.discoveryWorkspaces.fetchTree contactcenterinsights.discoveryWorkspaces.get contactcenterinsights.discoveryWorkspaces.list contactcenterinsights.encryptionSpecs.get contactcenterinsights.faqEntries.get contactcenterinsights.faqEntries.list contactcenterinsights.faqModels.get contactcenterinsights.faqModels.list contactcenterinsights.feedbackLabels.download contactcenterinsights.feedbackLabels.get contactcenterinsights.feedbackLabels.list contactcenterinsights.issueModels.get contactcenterinsights.issueModels.list contactcenterinsights.issues.get contactcenterinsights.issues.list contactcenterinsights.notes.list contactcenterinsights.operations.get contactcenterinsights.operations.list contactcenterinsights.phraseMatchers.get contactcenterinsights.phraseMatchers.list contactcenterinsights.qaQuestionTags.get contactcenterinsights.qaQuestionTags.list contactcenterinsights.qaQuestions.get contactcenterinsights.qaQuestions.list contactcenterinsights.qaScorecardRevisions.get contactcenterinsights.qaScorecardRevisions.list contactcenterinsights.qaScorecards.get contactcenterinsights.qaScorecards.list contactcenterinsights.settings.get contactcenterinsights.views.get contactcenterinsights.views.list contactcenterinsights.visibilityLabels.list resourcemanager.projects.get resourcemanager.projects.list
Customer Engagement Suite Service Agent (roles/ces.serviceAgent) Allows Customer Engagement Suite Service Account to access to dependent resources. Warning: Do not grant service agent roles to any principals except service agents.	aiplatform.endpoints.get aiplatform.endpoints.predict aiplatform.extensions.execute aiplatform.extensions.get aiplatform.models.get aiplatform.ragCorpora.* aiplatform.ragCorpora.create aiplatform.ragCorpora.delete aiplatform.ragCorpora.get aiplatform.ragCorpora.list aiplatform.ragCorpora.query aiplatform.ragCorpora.update aiplatform.ragFiles.* aiplatform.ragFiles.delete aiplatform.ragFiles.get aiplatform.ragFiles.import aiplatform.ragFiles.list aiplatform.ragFiles.upload bigquery.datasets.create bigquery.datasets.get bigquery.datasets.updateTag bigquery.jobs.create bigquery.tables.create bigquery.tables.get bigquery.tables.getData bigquery.tables.update bigquery.tables.updateData ces.appVersions.create ces.appVersions.get ces.apps.get ces.evaluationResults.get ces.evaluationRuns.get ces.operations.get ces.sessions.* ces.sessions.bidiRunSession ces.sessions.runSession ces.tools.execute cloudfunctions.functions.invoke connectors.actions.* connectors.actions.execute connectors.actions.list connectors.connections.executeSqlQuery connectors.connections.generateOpenAPISpec connectors.connections.get connectors.entities.* connectors.entities.create connectors.entities.delete connectors.entities.deleteEntitiesWithConditions connectors.entities.get connectors.entities.list connectors.entities.update connectors.entities.updateEntitiesWithConditions connectors.entityTypes.list connectors.operations.get connectors.versions.get contactcenterinsights.analyses.* contactcenterinsights.analyses.create contactcenterinsights.analyses.delete contactcenterinsights.analyses.get contactcenterinsights.analyses.list contactcenterinsights.analysisRules.* contactcenterinsights.analysisRules.create contactcenterinsights.analysisRules.delete contactcenterinsights.analysisRules.get contactcenterinsights.analysisRules.list contactcenterinsights.analysisRules.update contactcenterinsights.datasetAnalyses.create contactcenterinsights.datasetAnalyses.get contactcenterinsights.datasetAnalyses.list contactcenterinsights.discoveries.generate contactcenterinsights.discoveries.get contactcenterinsights.discoveries.list contactcenterinsights.discoveryWorkspaces.get contactcenterinsights.discoveryWorkspaces.list contactcenterinsights.faqModels.create contactcenterinsights.faqModels.get contactcenterinsights.faqModels.list contactcenterinsights.operations.get contactcenterinsights.operations.list contactcenterinsights.qaQuestions.* contactcenterinsights.qaQuestions.create contactcenterinsights.qaQuestions.delete contactcenterinsights.qaQuestions.get contactcenterinsights.qaQuestions.list contactcenterinsights.qaQuestions.update contactcenterinsights.qaScorecardRevisions.create contactcenterinsights.qaScorecardRevisions.delete contactcenterinsights.qaScorecardRevisions.deploy contactcenterinsights.qaScorecardRevisions.get contactcenterinsights.qaScorecardRevisions.list contactcenterinsights.qaScorecardRevisions.tune contactcenterinsights.qaScorecardRevisions.undeploy contactcenterinsights.qaScorecards.* contactcenterinsights.qaScorecards.create contactcenterinsights.qaScorecards.delete contactcenterinsights.qaScorecards.get contactcenterinsights.qaScorecards.list contactcenterinsights.qaScorecards.update dialogflow.sessions.* dialogflow.sessions.detectIntent dialogflow.sessions.streamingDetectIntent discoveryengine.collections.list discoveryengine.dataStores.create discoveryengine.dataStores.get discoveryengine.dataStores.list discoveryengine.documents.create discoveryengine.documents.get discoveryengine.documents.import discoveryengine.documents.list discoveryengine.documents.update discoveryengine.engines.create discoveryengine.engines.delete discoveryengine.engines.get discoveryengine.engines.update discoveryengine.rankingConfigs.rank discoveryengine.schemas.get discoveryengine.schemas.list discoveryengine.servingConfigs.search dlp.deidentifyTemplates.get dlp.deidentifyTemplates.list dlp.inspectTemplates.get dlp.inspectTemplates.list dlp.kms.encrypt dlp.locations.* dlp.locations.get dlp.locations.list integrations.integrationVersions.get integrations.integrations.generateOpenApiSpec integrations.integrations.get integrations.integrations.invoke logging.logEntries.create logging.logEntries.route run.jobs.run run.routes.invoke serviceusage.services.use storage.objects.create storage.objects.delete storage.objects.get storage.objects.update
Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Full control over tools and toolsets.	ces.agents.get ces.agents.list ces.appVersions.get ces.appVersions.list ces.apps.get ces.apps.list ces.changelogs.* ces.changelogs.get ces.changelogs.list ces.conversations.get ces.conversations.list ces.deployments.get ces.deployments.list ces.evaluationDatasets.get ces.evaluationDatasets.list ces.evaluationResults.get ces.evaluationResults.list ces.evaluationRuns.get ces.evaluationRuns.list ces.evaluations.get ces.evaluations.list ces.examples.get ces.examples.list ces.guardrails.get ces.guardrails.list ces.locations.* ces.locations.get ces.locations.list ces.operations.get ces.operations.list ces.sessions.* ces.sessions.bidiRunSession ces.sessions.runSession ces.tools.* ces.tools.create ces.tools.delete ces.tools.execute ces.tools.get ces.tools.list ces.tools.update ces.toolsets.* ces.toolsets.create ces.toolsets.delete ces.toolsets.get ces.toolsets.list ces.toolsets.update contactcenterinsights.analyses.get contactcenterinsights.analyses.list contactcenterinsights.analysisRules.get contactcenterinsights.analysisRules.list contactcenterinsights.assessmentRules.get contactcenterinsights.assessmentRules.list contactcenterinsights.assessments.get contactcenterinsights.assessments.list contactcenterinsights.authorizedAnalyses.get contactcenterinsights.authorizedAnalyses.list contactcenterinsights.authorizedAssessments.get contactcenterinsights.authorizedAssessments.list contactcenterinsights.authorizedConversations.generateSignedAudio contactcenterinsights.authorizedConversations.get contactcenterinsights.authorizedConversations.list contactcenterinsights.authorizedFeedbackLabels.get contactcenterinsights.authorizedFeedbackLabels.list contactcenterinsights.authorizedNotes.list contactcenterinsights.authorizedOperations.* contactcenterinsights.authorizedOperations.get contactcenterinsights.authorizedOperations.list contactcenterinsights.authorizedViewSets.get contactcenterinsights.authorizedViewSets.list contactcenterinsights.authorizedViews.get contactcenterinsights.authorizedViews.list contactcenterinsights.conversations.generateSignedAudio contactcenterinsights.conversations.get contactcenterinsights.conversations.list contactcenterinsights.datasetAnalyses.get contactcenterinsights.datasetAnalyses.list contactcenterinsights.datasetConversations.generateSignedAudio contactcenterinsights.datasetConversations.get contactcenterinsights.datasetConversations.list contactcenterinsights.datasetFeedbackLabels.get contactcenterinsights.datasetFeedbackLabels.list contactcenterinsights.datasets.get contactcenterinsights.datasets.list contactcenterinsights.discoveries.get contactcenterinsights.discoveries.list contactcenterinsights.discoveryResults.* contactcenterinsights.discoveryResults.get contactcenterinsights.discoveryResults.list contactcenterinsights.discoveryRevisions.get contactcenterinsights.discoveryRevisions.list contactcenterinsights.discoveryWorkspaces.fetchTree contactcenterinsights.discoveryWorkspaces.get contactcenterinsights.discoveryWorkspaces.list contactcenterinsights.encryptionSpecs.get contactcenterinsights.faqEntries.get contactcenterinsights.faqEntries.list contactcenterinsights.faqModels.get contactcenterinsights.faqModels.list contactcenterinsights.feedbackLabels.download contactcenterinsights.feedbackLabels.get contactcenterinsights.feedbackLabels.list contactcenterinsights.issueModels.get contactcenterinsights.issueModels.list contactcenterinsights.issues.get contactcenterinsights.issues.list contactcenterinsights.notes.list contactcenterinsights.operations.get contactcenterinsights.operations.list contactcenterinsights.phraseMatchers.get contactcenterinsights.phraseMatchers.list contactcenterinsights.qaQuestionTags.get contactcenterinsights.qaQuestionTags.list contactcenterinsights.qaQuestions.get contactcenterinsights.qaQuestions.list contactcenterinsights.qaScorecardRevisions.get contactcenterinsights.qaScorecardRevisions.list contactcenterinsights.qaScorecards.get contactcenterinsights.qaScorecards.list contactcenterinsights.settings.get contactcenterinsights.views.get contactcenterinsights.views.list contactcenterinsights.visibilityLabels.list resourcemanager.projects.get resourcemanager.projects.list
Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Read only access to Gemini Enterprise for Customer Experience resources.	ces.agents.get ces.agents.list ces.appVersions.get ces.appVersions.list ces.apps.get ces.apps.list ces.changelogs.* ces.changelogs.get ces.changelogs.list ces.conversations.get ces.conversations.list ces.deployments.get ces.deployments.list ces.evaluationDatasets.get ces.evaluationDatasets.list ces.evaluationResults.get ces.evaluationResults.list ces.evaluationRuns.get ces.evaluationRuns.list ces.evaluations.get ces.evaluations.list ces.examples.get ces.examples.list ces.guardrails.get ces.guardrails.list ces.locations.* ces.locations.get ces.locations.list ces.operations.get ces.operations.list ces.tools.get ces.tools.list ces.toolsets.get ces.toolsets.list contactcenterinsights.analyses.get contactcenterinsights.analyses.list contactcenterinsights.analysisRules.get contactcenterinsights.analysisRules.list contactcenterinsights.assessmentRules.get contactcenterinsights.assessmentRules.list contactcenterinsights.assessments.get contactcenterinsights.assessments.list contactcenterinsights.authorizedAnalyses.get contactcenterinsights.authorizedAnalyses.list contactcenterinsights.authorizedAssessments.get contactcenterinsights.authorizedAssessments.list contactcenterinsights.authorizedConversations.generateSignedAudio contactcenterinsights.authorizedConversations.get contactcenterinsights.authorizedConversations.list contactcenterinsights.authorizedFeedbackLabels.get contactcenterinsights.authorizedFeedbackLabels.list contactcenterinsights.authorizedNotes.list contactcenterinsights.authorizedOperations.* contactcenterinsights.authorizedOperations.get contactcenterinsights.authorizedOperations.list contactcenterinsights.authorizedViewSets.get contactcenterinsights.authorizedViewSets.list contactcenterinsights.authorizedViews.get contactcenterinsights.authorizedViews.list contactcenterinsights.conversations.generateSignedAudio contactcenterinsights.conversations.get contactcenterinsights.conversations.list contactcenterinsights.datasetAnalyses.get contactcenterinsights.datasetAnalyses.list contactcenterinsights.datasetConversations.generateSignedAudio contactcenterinsights.datasetConversations.get contactcenterinsights.datasetConversations.list contactcenterinsights.datasetFeedbackLabels.get contactcenterinsights.datasetFeedbackLabels.list contactcenterinsights.datasets.get contactcenterinsights.datasets.list contactcenterinsights.discoveries.get contactcenterinsights.discoveries.list contactcenterinsights.discoveryResults.* contactcenterinsights.discoveryResults.get contactcenterinsights.discoveryResults.list contactcenterinsights.discoveryRevisions.get contactcenterinsights.discoveryRevisions.list contactcenterinsights.discoveryWorkspaces.fetchTree contactcenterinsights.discoveryWorkspaces.get contactcenterinsights.discoveryWorkspaces.list contactcenterinsights.encryptionSpecs.get contactcenterinsights.faqEntries.get contactcenterinsights.faqEntries.list contactcenterinsights.faqModels.get contactcenterinsights.faqModels.list contactcenterinsights.feedbackLabels.download contactcenterinsights.feedbackLabels.get contactcenterinsights.feedbackLabels.list contactcenterinsights.issueModels.get contactcenterinsights.issueModels.list contactcenterinsights.issues.get contactcenterinsights.issues.list contactcenterinsights.notes.list contactcenterinsights.operations.get contactcenterinsights.operations.list contactcenterinsights.phraseMatchers.get contactcenterinsights.phraseMatchers.list contactcenterinsights.qaQuestionTags.get contactcenterinsights.qaQuestionTags.list contactcenterinsights.qaQuestions.get contactcenterinsights.qaQuestions.list contactcenterinsights.qaScorecardRevisions.get contactcenterinsights.qaScorecardRevisions.list contactcenterinsights.qaScorecards.get contactcenterinsights.qaScorecards.list contactcenterinsights.settings.get contactcenterinsights.views.get contactcenterinsights.views.list contactcenterinsights.visibilityLabels.list resourcemanager.projects.get resourcemanager.projects.list

Gemini Enterprise for Customer Experience permissions

Permission	Included in roles
ces.agents.create	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor)
ces.agents.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor)
ces.agents.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser)
ces.agents.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.agents.update	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor)
ces.appVersions.create	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
ces.appVersions.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor)
ces.appVersions.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
ces.appVersions.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.appVersions.restore	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor)
ces.apps.create	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor)
ces.apps.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor)
ces.apps.export	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Support User (roles/iam.supportUser)
ces.apps.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
ces.apps.import	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor)
ces.apps.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.apps.update	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor)
ces.changelogs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser)
ces.changelogs.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.conversations.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.conversations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser)
ces.conversations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.deployments.create	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor)
ces.deployments.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor)
ces.deployments.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser)
ces.deployments.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.deployments.update	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor)
ces.evaluationDatasets.create	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor)
ces.evaluationDatasets.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor)
ces.evaluationDatasets.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser)
ces.evaluationDatasets.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.evaluationDatasets.update	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor)
ces.evaluationResults.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor)
ces.evaluationResults.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
ces.evaluationResults.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.evaluationRuns.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor)
ces.evaluationRuns.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
ces.evaluationRuns.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.evaluations.create	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor)
ces.evaluations.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor)
ces.evaluations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser)
ces.evaluations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.evaluations.update	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor)
ces.examples.create	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor)
ces.examples.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor)
ces.examples.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser)
ces.examples.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.examples.update	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor)
ces.guardrails.create	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor)
ces.guardrails.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor)
ces.guardrails.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser)
ces.guardrails.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.guardrails.update	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor)
ces.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser)
ces.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.operations.cancel	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.operations.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
ces.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.sessions.bidiRunSession	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience Client (roles/ces.client) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Dialogflow Service Agent (roles/dialogflow.serviceAgent) Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
ces.sessions.runSession	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience Client (roles/ces.client) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Dialogflow Service Agent (roles/dialogflow.serviceAgent) Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
ces.tools.create	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor)
ces.tools.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor)
ces.tools.execute	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience Client (roles/ces.client) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Dialogflow Service Agent (roles/dialogflow.serviceAgent) Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
ces.tools.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser)
ces.tools.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.tools.update	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor)
ces.toolsets.create	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor)
ces.toolsets.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor)
ces.toolsets.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser)
ces.toolsets.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Agent Editor (roles/ces.agentEditor) Gemini Enterprise for Customer Experience App Editor (roles/ces.appEditor) Gemini Enterprise for Customer Experience Deployment Editor (roles/ces.deploymentEditor) Gemini Enterprise for Customer Experience Evals Editor (roles/ces.evalsEditor) Gemini Enterprise for Customer Experience Guardrails Editor (roles/ces.guardrailsEditor) Gemini Enterprise for Customer Experience Security Settings Editor (roles/ces.securitySettingsEditor) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.toolsets.update	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Tools Editor (roles/ces.toolsEditor)