Customer Engagement Suite with Google AI roles and permissions

This page lists the IAM roles and permissions for Customer Engagement Suite with Google AI. To search through all roles and permissions, see the role and permission index.

Customer Engagement Suite with Google AI roles

Role	Permissions
Gemini Enterprise for Customer Experience Admin ^Beta (roles/ces.admin) Full access to Gemini Enterprise for Customer Experience resources.	ces.* ces.agents.create ces.agents.delete ces.agents.get ces.agents.list ces.agents.update ces.appVersions.create ces.appVersions.delete ces.appVersions.get ces.appVersions.list ces.appVersions.restore ces.apps.create ces.apps.delete ces.apps.export ces.apps.get ces.apps.import ces.apps.list ces.apps.update ces.changelogs.get ces.changelogs.list ces.conversations.delete ces.conversations.get ces.conversations.list ces.deployments.create ces.deployments.delete ces.deployments.get ces.deployments.list ces.deployments.update ces.evaluationDatasets.create ces.evaluationDatasets.delete ces.evaluationDatasets.get ces.evaluationDatasets.list ces.evaluationDatasets.update ces.evaluationResults.delete ces.evaluationResults.get ces.evaluationResults.list ces.evaluationRuns.delete ces.evaluationRuns.get ces.evaluationRuns.list ces.evaluations.create ces.evaluations.delete ces.evaluations.get ces.evaluations.list ces.evaluations.update ces.examples.create ces.examples.delete ces.examples.get ces.examples.list ces.examples.update ces.guardrails.create ces.guardrails.delete ces.guardrails.get ces.guardrails.list ces.guardrails.update ces.locations.get ces.locations.list ces.operations.cancel ces.operations.delete ces.operations.get ces.operations.list ces.sessions.bidiRunSession ces.sessions.runSession ces.tools.create ces.tools.delete ces.tools.execute ces.tools.get ces.tools.list ces.tools.update ces.toolsets.create ces.toolsets.delete ces.toolsets.get ces.toolsets.list ces.toolsets.update contactcenterinsights.* contactcenterinsights.analyses.create contactcenterinsights.analyses.delete contactcenterinsights.analyses.get contactcenterinsights.analyses.list contactcenterinsights.analysisRules.create contactcenterinsights.analysisRules.delete contactcenterinsights.analysisRules.get contactcenterinsights.analysisRules.list contactcenterinsights.analysisRules.update contactcenterinsights.assessmentRules.create contactcenterinsights.assessmentRules.delete contactcenterinsights.assessmentRules.get contactcenterinsights.assessmentRules.list contactcenterinsights.assessmentRules.update contactcenterinsights.assessments.appeal contactcenterinsights.assessments.create contactcenterinsights.assessments.delete contactcenterinsights.assessments.finalize contactcenterinsights.assessments.get contactcenterinsights.assessments.list contactcenterinsights.assessments.publish contactcenterinsights.authorizedAnalyses.create contactcenterinsights.authorizedAnalyses.delete contactcenterinsights.authorizedAnalyses.get contactcenterinsights.authorizedAnalyses.list contactcenterinsights.authorizedAssessments.appeal contactcenterinsights.authorizedAssessments.create contactcenterinsights.authorizedAssessments.delete contactcenterinsights.authorizedAssessments.finalize contactcenterinsights.authorizedAssessments.get contactcenterinsights.authorizedAssessments.list contactcenterinsights.authorizedAssessments.publish contactcenterinsights.authorizedConversations.create contactcenterinsights.authorizedConversations.delete contactcenterinsights.authorizedConversations.generateSignedAudio contactcenterinsights.authorizedConversations.get contactcenterinsights.authorizedConversations.list contactcenterinsights.authorizedConversations.update contactcenterinsights.authorizedConversations.upload contactcenterinsights.authorizedFeedbackLabels.create contactcenterinsights.authorizedFeedbackLabels.delete contactcenterinsights.authorizedFeedbackLabels.download contactcenterinsights.authorizedFeedbackLabels.get contactcenterinsights.authorizedFeedbackLabels.list contactcenterinsights.authorizedFeedbackLabels.update contactcenterinsights.authorizedFeedbackLabels.upload contactcenterinsights.authorizedNotes.create contactcenterinsights.authorizedNotes.delete contactcenterinsights.authorizedNotes.list contactcenterinsights.authorizedNotes.update contactcenterinsights.authorizedOperations.get contactcenterinsights.authorizedOperations.list contactcenterinsights.authorizedViewSets.create contactcenterinsights.authorizedViewSets.delete contactcenterinsights.authorizedViewSets.get contactcenterinsights.authorizedViewSets.list contactcenterinsights.authorizedViewSets.update contactcenterinsights.authorizedViews.create contactcenterinsights.authorizedViews.delete contactcenterinsights.authorizedViews.get contactcenterinsights.authorizedViews.getIamPolicy contactcenterinsights.authorizedViews.list contactcenterinsights.authorizedViews.setIamPolicy contactcenterinsights.authorizedViews.update contactcenterinsights.conversations.create contactcenterinsights.conversations.delete contactcenterinsights.conversations.export contactcenterinsights.conversations.generateSignedAudio contactcenterinsights.conversations.get contactcenterinsights.conversations.list contactcenterinsights.conversations.update contactcenterinsights.conversations.upload contactcenterinsights.datasetAnalyses.create contactcenterinsights.datasetAnalyses.delete contactcenterinsights.datasetAnalyses.get contactcenterinsights.datasetAnalyses.list contactcenterinsights.datasetConversations.create contactcenterinsights.datasetConversations.delete contactcenterinsights.datasetConversations.export contactcenterinsights.datasetConversations.generateSignedAudio contactcenterinsights.datasetConversations.get contactcenterinsights.datasetConversations.list contactcenterinsights.datasetConversations.update contactcenterinsights.datasetConversations.upload contactcenterinsights.datasetFeedbackLabels.create contactcenterinsights.datasetFeedbackLabels.delete contactcenterinsights.datasetFeedbackLabels.download contactcenterinsights.datasetFeedbackLabels.get contactcenterinsights.datasetFeedbackLabels.list contactcenterinsights.datasetFeedbackLabels.update contactcenterinsights.datasetFeedbackLabels.upload contactcenterinsights.datasets.create contactcenterinsights.datasets.delete contactcenterinsights.datasets.get contactcenterinsights.datasets.list contactcenterinsights.datasets.update contactcenterinsights.discoveries.delete contactcenterinsights.discoveries.generate contactcenterinsights.discoveries.get contactcenterinsights.discoveries.list contactcenterinsights.discoveries.update contactcenterinsights.discoveryResults.get contactcenterinsights.discoveryResults.list contactcenterinsights.discoveryRevisions.create contactcenterinsights.discoveryRevisions.get contactcenterinsights.discoveryRevisions.list contactcenterinsights.discoveryWorkspaces.delete contactcenterinsights.discoveryWorkspaces.deploy contactcenterinsights.discoveryWorkspaces.fetchTree contactcenterinsights.discoveryWorkspaces.get contactcenterinsights.discoveryWorkspaces.list contactcenterinsights.discoveryWorkspaces.undeploy contactcenterinsights.encryptionSpecs.get contactcenterinsights.encryptionSpecs.initialize contactcenterinsights.faqEntries.delete contactcenterinsights.faqEntries.get contactcenterinsights.faqEntries.list contactcenterinsights.faqEntries.update contactcenterinsights.faqModels.create contactcenterinsights.faqModels.delete contactcenterinsights.faqModels.get contactcenterinsights.faqModels.list contactcenterinsights.faqModels.update contactcenterinsights.feedbackLabels.create contactcenterinsights.feedbackLabels.delete contactcenterinsights.feedbackLabels.download contactcenterinsights.feedbackLabels.get contactcenterinsights.feedbackLabels.list contactcenterinsights.feedbackLabels.update contactcenterinsights.feedbackLabels.upload contactcenterinsights.issueModels.create contactcenterinsights.issueModels.delete contactcenterinsights.issueModels.deploy contactcenterinsights.issueModels.export contactcenterinsights.issueModels.get contactcenterinsights.issueModels.import contactcenterinsights.issueModels.list contactcenterinsights.issueModels.undeploy contactcenterinsights.issueModels.update contactcenterinsights.issues.create contactcenterinsights.issues.delete contactcenterinsights.issues.get contactcenterinsights.issues.list contactcenterinsights.issues.update contactcenterinsights.notes.create contactcenterinsights.notes.delete contactcenterinsights.notes.list contactcenterinsights.notes.update contactcenterinsights.operations.cancel contactcenterinsights.operations.get contactcenterinsights.operations.list contactcenterinsights.phraseMatchers.create contactcenterinsights.phraseMatchers.delete contactcenterinsights.phraseMatchers.get contactcenterinsights.phraseMatchers.list contactcenterinsights.phraseMatchers.update contactcenterinsights.qaQuestionTags.create contactcenterinsights.qaQuestionTags.delete contactcenterinsights.qaQuestionTags.get contactcenterinsights.qaQuestionTags.list contactcenterinsights.qaQuestionTags.update contactcenterinsights.qaQuestions.create contactcenterinsights.qaQuestions.delete contactcenterinsights.qaQuestions.get contactcenterinsights.qaQuestions.list contactcenterinsights.qaQuestions.update contactcenterinsights.qaScorecardRevisions.bulkUpdateQaQuestions contactcenterinsights.qaScorecardRevisions.create contactcenterinsights.qaScorecardRevisions.delete contactcenterinsights.qaScorecardRevisions.deploy contactcenterinsights.qaScorecardRevisions.get contactcenterinsights.qaScorecardRevisions.list contactcenterinsights.qaScorecardRevisions.tune contactcenterinsights.qaScorecardRevisions.undeploy contactcenterinsights.qaScorecards.create contactcenterinsights.qaScorecards.delete contactcenterinsights.qaScorecards.get contactcenterinsights.qaScorecards.list contactcenterinsights.qaScorecards.update contactcenterinsights.settings.get contactcenterinsights.settings.update contactcenterinsights.views.create contactcenterinsights.views.delete contactcenterinsights.views.get contactcenterinsights.views.list contactcenterinsights.views.update contactcenterinsights.visibilityLabels.list resourcemanager.projects.get resourcemanager.projects.list
Gemini Enterprise for Customer Experience Client ^Beta (roles/ces.client) Query access to Gemini Enterprise for Customer Experience agents.	ces.sessions.* ces.sessions.bidiRunSession ces.sessions.runSession ces.tools.execute
Customer Engagement Suite Service Agent (roles/ces.serviceAgent) Allows Customer Engagement Suite Service Account to access to dependent resources. Warning: Do not grant service agent roles to any principals except service agents.	aiplatform.endpoints.get aiplatform.endpoints.predict aiplatform.extensions.execute aiplatform.extensions.get aiplatform.models.get aiplatform.ragCorpora.* aiplatform.ragCorpora.create aiplatform.ragCorpora.delete aiplatform.ragCorpora.get aiplatform.ragCorpora.list aiplatform.ragCorpora.query aiplatform.ragCorpora.update aiplatform.ragFiles.* aiplatform.ragFiles.delete aiplatform.ragFiles.get aiplatform.ragFiles.import aiplatform.ragFiles.list aiplatform.ragFiles.upload bigquery.datasets.create bigquery.datasets.get bigquery.datasets.updateTag bigquery.jobs.create bigquery.tables.create bigquery.tables.get bigquery.tables.getData bigquery.tables.update bigquery.tables.updateData ces.appVersions.create ces.appVersions.get ces.evaluationResults.get ces.evaluationRuns.get ces.operations.get ces.sessions.* ces.sessions.bidiRunSession ces.sessions.runSession ces.tools.execute cloudfunctions.functions.invoke connectors.actions.* connectors.actions.execute connectors.actions.list connectors.connections.executeSqlQuery connectors.connections.generateOpenAPISpec connectors.connections.get connectors.entities.* connectors.entities.create connectors.entities.delete connectors.entities.deleteEntitiesWithConditions connectors.entities.get connectors.entities.list connectors.entities.update connectors.entities.updateEntitiesWithConditions connectors.entityTypes.list connectors.operations.get connectors.versions.get contactcenterinsights.faqModels.create contactcenterinsights.operations.get dialogflow.sessions.* dialogflow.sessions.detectIntent dialogflow.sessions.streamingDetectIntent discoveryengine.collections.list discoveryengine.dataStores.create discoveryengine.dataStores.get discoveryengine.dataStores.list discoveryengine.documents.create discoveryengine.documents.get discoveryengine.documents.import discoveryengine.documents.list discoveryengine.documents.update discoveryengine.engines.create discoveryengine.engines.delete discoveryengine.engines.get discoveryengine.engines.update discoveryengine.schemas.get discoveryengine.schemas.list discoveryengine.servingConfigs.search dlp.deidentifyTemplates.get dlp.deidentifyTemplates.list dlp.inspectTemplates.get dlp.inspectTemplates.list dlp.kms.encrypt dlp.locations.* dlp.locations.get dlp.locations.list integrations.integrationVersions.get integrations.integrations.generateOpenApiSpec integrations.integrations.get integrations.integrations.invoke logging.logEntries.create logging.logEntries.route run.jobs.run run.routes.invoke serviceusage.services.use storage.objects.create storage.objects.delete storage.objects.get storage.objects.update
Gemini Enterprise for Customer Experience Viewer ^Beta (roles/ces.viewer) Read only access to Gemini Enterprise for Customer Experience resources.	ces.agents.get ces.agents.list ces.appVersions.get ces.appVersions.list ces.apps.get ces.apps.list ces.changelogs.* ces.changelogs.get ces.changelogs.list ces.conversations.get ces.conversations.list ces.deployments.get ces.deployments.list ces.evaluationDatasets.get ces.evaluationDatasets.list ces.evaluationResults.get ces.evaluationResults.list ces.evaluationRuns.get ces.evaluationRuns.list ces.evaluations.get ces.evaluations.list ces.examples.get ces.examples.list ces.guardrails.get ces.guardrails.list ces.locations.* ces.locations.get ces.locations.list ces.operations.get ces.operations.list ces.tools.get ces.tools.list ces.toolsets.get ces.toolsets.list contactcenterinsights.analyses.get contactcenterinsights.analyses.list contactcenterinsights.analysisRules.get contactcenterinsights.analysisRules.list contactcenterinsights.assessmentRules.get contactcenterinsights.assessmentRules.list contactcenterinsights.assessments.get contactcenterinsights.assessments.list contactcenterinsights.authorizedAnalyses.get contactcenterinsights.authorizedAnalyses.list contactcenterinsights.authorizedAssessments.get contactcenterinsights.authorizedAssessments.list contactcenterinsights.authorizedConversations.generateSignedAudio contactcenterinsights.authorizedConversations.get contactcenterinsights.authorizedConversations.list contactcenterinsights.authorizedFeedbackLabels.get contactcenterinsights.authorizedFeedbackLabels.list contactcenterinsights.authorizedNotes.list contactcenterinsights.authorizedOperations.* contactcenterinsights.authorizedOperations.get contactcenterinsights.authorizedOperations.list contactcenterinsights.authorizedViewSets.get contactcenterinsights.authorizedViewSets.list contactcenterinsights.authorizedViews.get contactcenterinsights.authorizedViews.list contactcenterinsights.conversations.generateSignedAudio contactcenterinsights.conversations.get contactcenterinsights.conversations.list contactcenterinsights.datasetAnalyses.get contactcenterinsights.datasetAnalyses.list contactcenterinsights.datasetConversations.generateSignedAudio contactcenterinsights.datasetConversations.get contactcenterinsights.datasetConversations.list contactcenterinsights.datasetFeedbackLabels.get contactcenterinsights.datasetFeedbackLabels.list contactcenterinsights.datasets.get contactcenterinsights.datasets.list contactcenterinsights.discoveries.get contactcenterinsights.discoveries.list contactcenterinsights.discoveryResults.* contactcenterinsights.discoveryResults.get contactcenterinsights.discoveryResults.list contactcenterinsights.discoveryRevisions.get contactcenterinsights.discoveryRevisions.list contactcenterinsights.discoveryWorkspaces.fetchTree contactcenterinsights.discoveryWorkspaces.get contactcenterinsights.discoveryWorkspaces.list contactcenterinsights.encryptionSpecs.get contactcenterinsights.faqEntries.get contactcenterinsights.faqEntries.list contactcenterinsights.faqModels.get contactcenterinsights.faqModels.list contactcenterinsights.feedbackLabels.download contactcenterinsights.feedbackLabels.get contactcenterinsights.feedbackLabels.list contactcenterinsights.issueModels.get contactcenterinsights.issueModels.list contactcenterinsights.issues.get contactcenterinsights.issues.list contactcenterinsights.notes.list contactcenterinsights.operations.get contactcenterinsights.operations.list contactcenterinsights.phraseMatchers.get contactcenterinsights.phraseMatchers.list contactcenterinsights.qaQuestionTags.get contactcenterinsights.qaQuestionTags.list contactcenterinsights.qaQuestions.get contactcenterinsights.qaQuestions.list contactcenterinsights.qaScorecardRevisions.get contactcenterinsights.qaScorecardRevisions.list contactcenterinsights.qaScorecards.get contactcenterinsights.qaScorecards.list contactcenterinsights.settings.get contactcenterinsights.views.get contactcenterinsights.views.list contactcenterinsights.visibilityLabels.list resourcemanager.projects.get resourcemanager.projects.list

Customer Engagement Suite with Google AI permissions

Permission	Included in roles
ces.agents.create	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.agents.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.agents.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser)
ces.agents.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.agents.update	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.appVersions.create	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
ces.appVersions.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.appVersions.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
ces.appVersions.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.appVersions.restore	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.apps.create	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.apps.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.apps.export	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Support User (roles/iam.supportUser)
ces.apps.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser)
ces.apps.import	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.apps.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.apps.update	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.changelogs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser)
ces.changelogs.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.conversations.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.conversations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser)
ces.conversations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.deployments.create	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.deployments.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.deployments.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser)
ces.deployments.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.deployments.update	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.evaluationDatasets.create	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.evaluationDatasets.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.evaluationDatasets.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser)
ces.evaluationDatasets.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.evaluationDatasets.update	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.evaluationResults.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.evaluationResults.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
ces.evaluationResults.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.evaluationRuns.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.evaluationRuns.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
ces.evaluationRuns.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.evaluations.create	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.evaluations.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.evaluations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser)
ces.evaluations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.evaluations.update	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.examples.create	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.examples.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.examples.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser)
ces.examples.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.examples.update	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.guardrails.create	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.guardrails.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.guardrails.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser)
ces.guardrails.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.guardrails.update	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser)
ces.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.operations.cancel	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.operations.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
ces.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.sessions.bidiRunSession	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Client (roles/ces.client) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Dialogflow Service Agent (roles/dialogflow.serviceAgent) Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
ces.sessions.runSession	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Client (roles/ces.client) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Dialogflow Service Agent (roles/dialogflow.serviceAgent) Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
ces.tools.create	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.tools.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.tools.execute	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Client (roles/ces.client) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Dialogflow Service Agent (roles/dialogflow.serviceAgent) Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
ces.tools.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser)
ces.tools.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.tools.update	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.toolsets.create	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.toolsets.delete	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)
ces.toolsets.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Support User (roles/iam.supportUser)
ces.toolsets.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Gemini Enterprise for Customer Experience Admin (roles/ces.admin) Gemini Enterprise for Customer Experience Viewer (roles/ces.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
ces.toolsets.update	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise for Customer Experience Admin (roles/ces.admin)