Gemini for Google Cloud API roles and permissions

This page lists the IAM roles and permissions for Gemini for Google Cloud API. To search through all roles and permissions, see the role and permission index.

Gemini for Google Cloud API roles

Role	Permissions
Topic Admin ^Beta (roles/cloudaicompanion.topicAdmin) Grants read, write and permission management access to the Topic resource.	cloudaicompanion.topics.delete cloudaicompanion.topics.get cloudaicompanion.topics.getIamPolicy cloudaicompanion.topics.setIamPolicy cloudaicompanion.topics.update
Gemini for Google Cloud User (roles/cloudaicompanion.user) A user who can use Gemini for Google Cloud	cloudaicompanion.companions.* cloudaicompanion.companions.generateChat cloudaicompanion.companions.generateCode cloudaicompanion.entitlements.get cloudaicompanion.instances.* cloudaicompanion.instances.completeCode cloudaicompanion.instances.completeTask cloudaicompanion.instances.exportMetrics cloudaicompanion.instances.generateCode cloudaicompanion.instances.generateText cloudaicompanion.instances.queryEffectiveSetting cloudaicompanion.instances.queryEffectiveSettingBindings cloudaicompanion.licenses.selfAssign cloudaicompanion.operations.get cloudaicompanion.topics.create resourcemanager.projects.get resourcemanager.projects.list
Code Repository Indexes Admin (roles/cloudaicompanion.codeRepositoryIndexesAdmin) Grants full access to Code Repository Indexes resources.	cloudaicompanion.codeRepositoryIndexes.* cloudaicompanion.codeRepositoryIndexes.create cloudaicompanion.codeRepositoryIndexes.delete cloudaicompanion.codeRepositoryIndexes.get cloudaicompanion.codeRepositoryIndexes.list cloudaicompanion.codeRepositoryIndexes.update cloudaicompanion.operations.* cloudaicompanion.operations.cancel cloudaicompanion.operations.delete cloudaicompanion.operations.get cloudaicompanion.operations.list cloudaicompanion.repositoryGroups.create cloudaicompanion.repositoryGroups.delete cloudaicompanion.repositoryGroups.get cloudaicompanion.repositoryGroups.getIamPolicy cloudaicompanion.repositoryGroups.list cloudaicompanion.repositoryGroups.setIamPolicy cloudaicompanion.repositoryGroups.update resourcemanager.projects.get resourcemanager.projects.list
Code Repository Indexes Viewer (roles/cloudaicompanion.codeRepositoryIndexesViewer) Grants readonly access to Code Repository Indexes resources.	cloudaicompanion.codeRepositoryIndexes.get cloudaicompanion.codeRepositoryIndexes.list cloudaicompanion.operations.get cloudaicompanion.operations.list cloudaicompanion.repositoryGroups.get cloudaicompanion.repositoryGroups.getIamPolicy cloudaicompanion.repositoryGroups.list resourcemanager.projects.get resourcemanager.projects.list
Gemini Code Assist Tools Admin ^Beta (roles/cloudaicompanion.codeToolsAdmin) Grants full access to Gemini Code Assist Tools resources.	cloudaicompanion.codeToolsSettings.* cloudaicompanion.codeToolsSettings.create cloudaicompanion.codeToolsSettings.delete cloudaicompanion.codeToolsSettings.get cloudaicompanion.codeToolsSettings.list cloudaicompanion.codeToolsSettings.update cloudaicompanion.settingBindings.codeToolsSettingsCreate cloudaicompanion.settingBindings.codeToolsSettingsDelete cloudaicompanion.settingBindings.codeToolsSettingsGet cloudaicompanion.settingBindings.codeToolsSettingsList cloudaicompanion.settingBindings.codeToolsSettingsUpdate cloudaicompanion.settingBindings.codeToolsSettingsUse developerconnect.accountConnectors.* developerconnect.accountConnectors.create developerconnect.accountConnectors.delete developerconnect.accountConnectors.get developerconnect.accountConnectors.list developerconnect.accountConnectors.update developerconnect.locations.* developerconnect.locations.get developerconnect.locations.list developerconnect.operations.get developerconnect.operations.list developerconnect.providers.list developerconnect.users.* developerconnect.users.delete developerconnect.users.deleteSelf developerconnect.users.fetchAccessToken developerconnect.users.finishOAuth developerconnect.users.getSelf developerconnect.users.list developerconnect.users.startOAuth resourcemanager.projects.get resourcemanager.projects.list
Gemini Code Assist Tools User ^Beta (roles/cloudaicompanion.codeToolsUser) Grants read access to Gemini Code Assist Tools resources.	cloudaicompanion.codeToolsSettings.get cloudaicompanion.codeToolsSettings.list cloudaicompanion.companions.* cloudaicompanion.companions.generateChat cloudaicompanion.companions.generateCode cloudaicompanion.entitlements.get cloudaicompanion.instances.* cloudaicompanion.instances.completeCode cloudaicompanion.instances.completeTask cloudaicompanion.instances.exportMetrics cloudaicompanion.instances.generateCode cloudaicompanion.instances.generateText cloudaicompanion.instances.queryEffectiveSetting cloudaicompanion.instances.queryEffectiveSettingBindings cloudaicompanion.licenses.selfAssign cloudaicompanion.operations.get cloudaicompanion.settingBindings.codeToolsSettingsGet cloudaicompanion.settingBindings.codeToolsSettingsList cloudaicompanion.topics.create developerconnect.accountConnectors.get developerconnect.accountConnectors.list developerconnect.locations.* developerconnect.locations.get developerconnect.locations.list developerconnect.operations.get developerconnect.operations.list developerconnect.users.deleteSelf developerconnect.users.fetchAccessToken developerconnect.users.finishOAuth developerconnect.users.getSelf developerconnect.users.startOAuth resourcemanager.projects.get resourcemanager.projects.list
Gemini for Google Cloud individual User (roles/cloudaicompanion.individualUser) An individual user who can use Gemini for Google Cloud	cloudaicompanion.companions.* cloudaicompanion.companions.generateChat cloudaicompanion.companions.generateCode cloudaicompanion.entitlements.get cloudaicompanion.instances.* cloudaicompanion.instances.completeCode cloudaicompanion.instances.completeTask cloudaicompanion.instances.exportMetrics cloudaicompanion.instances.generateCode cloudaicompanion.instances.generateText cloudaicompanion.instances.queryEffectiveSetting cloudaicompanion.instances.queryEffectiveSettingBindings cloudaicompanion.licenses.selfAssign cloudaicompanion.operations.get cloudaicompanion.topics.create
Repository Groups User (roles/cloudaicompanion.repositoryGroupsUser) Grants Read/Use access to the Code Repository Indexes Repository Group.	cloudaicompanion.codeRepositoryIndexes.get cloudaicompanion.repositoryGroups.get cloudaicompanion.repositoryGroups.getIamPolicy cloudaicompanion.repositoryGroups.use
Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Grants read and write access to the Gemini for Cloud setting and their bindings.	cloudaicompanion.aiDevToolsSettings.* cloudaicompanion.aiDevToolsSettings.create cloudaicompanion.aiDevToolsSettings.delete cloudaicompanion.aiDevToolsSettings.get cloudaicompanion.aiDevToolsSettings.list cloudaicompanion.aiDevToolsSettings.update cloudaicompanion.codeToolsSettings.* cloudaicompanion.codeToolsSettings.create cloudaicompanion.codeToolsSettings.delete cloudaicompanion.codeToolsSettings.get cloudaicompanion.codeToolsSettings.list cloudaicompanion.codeToolsSettings.update cloudaicompanion.dataSharingWithGoogleSettings.* cloudaicompanion.dataSharingWithGoogleSettings.create cloudaicompanion.dataSharingWithGoogleSettings.delete cloudaicompanion.dataSharingWithGoogleSettings.get cloudaicompanion.dataSharingWithGoogleSettings.list cloudaicompanion.dataSharingWithGoogleSettings.update cloudaicompanion.geminiGcpEnablementSettings.* cloudaicompanion.geminiGcpEnablementSettings.create cloudaicompanion.geminiGcpEnablementSettings.delete cloudaicompanion.geminiGcpEnablementSettings.get cloudaicompanion.geminiGcpEnablementSettings.list cloudaicompanion.geminiGcpEnablementSettings.update cloudaicompanion.instances.queryEffectiveSetting cloudaicompanion.instances.queryEffectiveSettingBindings cloudaicompanion.loggingSettings.* cloudaicompanion.loggingSettings.create cloudaicompanion.loggingSettings.delete cloudaicompanion.loggingSettings.get cloudaicompanion.loggingSettings.list cloudaicompanion.loggingSettings.update cloudaicompanion.releaseChannelSettings.* cloudaicompanion.releaseChannelSettings.create cloudaicompanion.releaseChannelSettings.delete cloudaicompanion.releaseChannelSettings.get cloudaicompanion.releaseChannelSettings.list cloudaicompanion.releaseChannelSettings.update cloudaicompanion.settingBindings.* cloudaicompanion.settingBindings.aiDevToolsSettingsCreate cloudaicompanion.settingBindings.aiDevToolsSettingsDelete cloudaicompanion.settingBindings.aiDevToolsSettingsGet cloudaicompanion.settingBindings.aiDevToolsSettingsList cloudaicompanion.settingBindings.aiDevToolsSettingsUpdate cloudaicompanion.settingBindings.aiDevToolsSettingsUse cloudaicompanion.settingBindings.codeToolsSettingsCreate cloudaicompanion.settingBindings.codeToolsSettingsDelete cloudaicompanion.settingBindings.codeToolsSettingsGet cloudaicompanion.settingBindings.codeToolsSettingsList cloudaicompanion.settingBindings.codeToolsSettingsUpdate cloudaicompanion.settingBindings.codeToolsSettingsUse cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsCreate cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsDelete cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsGet cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsList cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsUpdate cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsUse cloudaicompanion.settingBindings.geminiGcpEnablementSettingsCreate cloudaicompanion.settingBindings.geminiGcpEnablementSettingsDelete cloudaicompanion.settingBindings.geminiGcpEnablementSettingsGet cloudaicompanion.settingBindings.geminiGcpEnablementSettingsList cloudaicompanion.settingBindings.geminiGcpEnablementSettingsUpdate cloudaicompanion.settingBindings.geminiGcpEnablementSettingsUse cloudaicompanion.settingBindings.loggingSettingsCreate cloudaicompanion.settingBindings.loggingSettingsDelete cloudaicompanion.settingBindings.loggingSettingsGet cloudaicompanion.settingBindings.loggingSettingsList cloudaicompanion.settingBindings.loggingSettingsUpdate cloudaicompanion.settingBindings.loggingSettingsUse cloudaicompanion.settingBindings.releaseChannelSettingsCreate cloudaicompanion.settingBindings.releaseChannelSettingsDelete cloudaicompanion.settingBindings.releaseChannelSettingsGet cloudaicompanion.settingBindings.releaseChannelSettingsList cloudaicompanion.settingBindings.releaseChannelSettingsUpdate cloudaicompanion.settingBindings.releaseChannelSettingsUse
Gemini for Google Cloud Settings User (roles/cloudaicompanion.settingsUser) Grants read access to the Gemini for Cloud setting and their bindings.	cloudaicompanion.aiDevToolsSettings.get cloudaicompanion.aiDevToolsSettings.list cloudaicompanion.dataSharingWithGoogleSettings.get cloudaicompanion.dataSharingWithGoogleSettings.list cloudaicompanion.geminiGcpEnablementSettings.get cloudaicompanion.geminiGcpEnablementSettings.list cloudaicompanion.loggingSettings.get cloudaicompanion.loggingSettings.list cloudaicompanion.releaseChannelSettings.get cloudaicompanion.releaseChannelSettings.list cloudaicompanion.settingBindings.aiDevToolsSettingsGet cloudaicompanion.settingBindings.aiDevToolsSettingsList cloudaicompanion.settingBindings.codeToolsSettingsGet cloudaicompanion.settingBindings.codeToolsSettingsList cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsGet cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsList cloudaicompanion.settingBindings.geminiGcpEnablementSettingsGet cloudaicompanion.settingBindings.geminiGcpEnablementSettingsList cloudaicompanion.settingBindings.loggingSettingsGet cloudaicompanion.settingBindings.loggingSettingsList cloudaicompanion.settingBindings.releaseChannelSettingsGet cloudaicompanion.settingBindings.releaseChannelSettingsList
Topic Reader ^Beta (roles/cloudaicompanion.topicReader) Grants read-only access to topic resource.	cloudaicompanion.topics.get

Service agent roles

Service agent roles should only be granted to service agents.

Role

Permissions

Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent) Gives Gemini for Google Cloud components the proper permissions to function. Warning: Do not grant service agent roles to any principals except service agents.

cloudaicompanion.codeRepositoryIndexes.get cloudaicompanion.codeRepositoryIndexes.list cloudaicompanion.instances.exportMetrics cloudaicompanion.instances.queryEffectiveSetting cloudaicompanion.instances.queryEffectiveSettingBindings cloudaicompanion.licenses.selfAssign cloudaicompanion.repositoryGroups.get cloudaicompanion.repositoryGroups.getIamPolicy cloudaicompanion.repositoryGroups.list cloudbuild.connections.get cloudbuild.repositories.accessReadToken cloudbuild.repositories.fetchGitRefs cloudbuild.repositories.get cloudbuild.repositories.list developerconnect.connections.get developerconnect.gitRepositoryLinks.fetchGitRefs developerconnect.gitRepositoryLinks.fetchReadToken developerconnect.gitRepositoryLinks.get developerconnect.gitRepositoryLinks.gitProxyRead developerconnect.gitRepositoryLinks.list logging.logEntries.create logging.logEntries.route monitoring.metricDescriptors.create monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list monitoring.timeSeries.create serviceusage.services.use

Gemini for Google Cloud API permissions

Permission	Included in roles
cloudaicompanion.aiDevToolsSettings.create	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.aiDevToolsSettings.delete	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.aiDevToolsSettings.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini for Google Cloud Settings User (roles/cloudaicompanion.settingsUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser)
cloudaicompanion.aiDevToolsSettings.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini for Google Cloud Settings User (roles/cloudaicompanion.settingsUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
cloudaicompanion.aiDevToolsSettings.update	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.codeRepositoryIndexes.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Code Repository Indexes Admin (roles/cloudaicompanion.codeRepositoryIndexesAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.codeRepositoryIndexes.delete	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Code Repository Indexes Admin (roles/cloudaicompanion.codeRepositoryIndexesAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.codeRepositoryIndexes.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Code Repository Indexes Admin (roles/cloudaicompanion.codeRepositoryIndexesAdmin) Code Repository Indexes Viewer (roles/cloudaicompanion.codeRepositoryIndexesViewer) Repository Groups User (roles/cloudaicompanion.repositoryGroupsUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent)
cloudaicompanion.codeRepositoryIndexes.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Code Repository Indexes Admin (roles/cloudaicompanion.codeRepositoryIndexesAdmin) Code Repository Indexes Viewer (roles/cloudaicompanion.codeRepositoryIndexesViewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent)
cloudaicompanion.codeRepositoryIndexes.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Code Repository Indexes Admin (roles/cloudaicompanion.codeRepositoryIndexesAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.codeToolsSettings.create	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.codeToolsSettings.delete	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.codeToolsSettings.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser)
cloudaicompanion.codeToolsSettings.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
cloudaicompanion.codeToolsSettings.update	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.companions.generateChat	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) BigQuery Studio User (roles/bigquery.studioUser) Gemini for Google Cloud User (roles/cloudaicompanion.user) Cloud SQL Admin (roles/cloudsql.admin) Discovery Engine User (roles/discoveryengine.user) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Gemini for Google Cloud individual User (roles/cloudaicompanion.individualUser) Cloud SQL Studio User (roles/cloudsql.studioUser) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent)
cloudaicompanion.companions.generateCode	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) BigQuery Studio User (roles/bigquery.studioUser) Gemini for Google Cloud User (roles/cloudaicompanion.user) Cloud SQL Admin (roles/cloudsql.admin) Discovery Engine User (roles/discoveryengine.user) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Gemini for Google Cloud individual User (roles/cloudaicompanion.individualUser) Cloud SQL Studio User (roles/cloudsql.studioUser) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent)
cloudaicompanion.dataSharingWithGoogleSettings.create	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.dataSharingWithGoogleSettings.delete	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.dataSharingWithGoogleSettings.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini for Google Cloud Settings User (roles/cloudaicompanion.settingsUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser)
cloudaicompanion.dataSharingWithGoogleSettings.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini for Google Cloud Settings User (roles/cloudaicompanion.settingsUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
cloudaicompanion.dataSharingWithGoogleSettings.update	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.entitlements.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) AlloyDB Admin (roles/alloydb.admin) AlloyDB Editor (roles/alloydb.editor) AlloyDB Viewer (roles/alloydb.viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) BigQuery Studio User (roles/bigquery.studioUser) Gemini for Google Cloud User (roles/cloudaicompanion.user) Cloud SQL Admin (roles/cloudsql.admin) Cloud SQL Editor (roles/cloudsql.editor) Cloud SQL Viewer (roles/cloudsql.viewer) Database Center Admin (roles/databasecenter.admin) Database Center Viewer (roles/databasecenter.viewer) Database Migration Admin (roles/datamigration.admin) Datamigration Editor (roles/datamigration.editor) Discovery Engine User (roles/discoveryengine.user) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Gemini for Google Cloud individual User (roles/cloudaicompanion.individualUser) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) DLP Organization Data Profiles Driver (roles/dlp.orgdriver) DLP Project Data Profiles Driver (roles/dlp.projectdriver) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent)
cloudaicompanion.geminiGcpEnablementSettings.create	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.geminiGcpEnablementSettings.delete	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.geminiGcpEnablementSettings.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini for Google Cloud Settings User (roles/cloudaicompanion.settingsUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser)
cloudaicompanion.geminiGcpEnablementSettings.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Cloud Assist Viewer (roles/geminicloudassist.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini for Google Cloud Settings User (roles/cloudaicompanion.settingsUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
cloudaicompanion.geminiGcpEnablementSettings.update	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.instances.completeCode	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) BigQuery Studio User (roles/bigquery.studioUser) Gemini for Google Cloud User (roles/cloudaicompanion.user) Cloud SQL Admin (roles/cloudsql.admin) Discovery Engine User (roles/discoveryengine.user) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Gemini for Google Cloud individual User (roles/cloudaicompanion.individualUser) Cloud SQL Studio User (roles/cloudsql.studioUser) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent)
cloudaicompanion.instances.completeTask	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) BigQuery Studio User (roles/bigquery.studioUser) Gemini for Google Cloud User (roles/cloudaicompanion.user) Discovery Engine User (roles/discoveryengine.user) Firebase Admin (roles/firebase.admin) Gemini Cloud Assist Investigation Owner (roles/geminicloudassist.investigationOwner) Gemini Cloud Assist User (roles/geminicloudassist.user) Storage Admin (roles/storage.admin) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Gemini for Google Cloud individual User (roles/cloudaicompanion.individualUser) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Firebase Develop Admin (roles/firebase.developAdmin) Gemini Cloud Assist Investigation Admin (roles/geminicloudassist.investigationAdmin) Gemini Cloud Assist Investigation Creator (roles/geminicloudassist.investigationCreator) Gemini Cloud Assist Investigation Editor (roles/geminicloudassist.investigationEditor) Gemini Cloud Assist Investigation User (roles/geminicloudassist.investigationUser) Gemini Cloud Assist Investigation Viewer (roles/geminicloudassist.investigationViewer) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Datapipelines Service Agent (roles/datapipelines.serviceAgent) Cloud Dataplex Service Agent (roles/dataplex.serviceAgent) Dataproc Service Agent (roles/dataproc.serviceAgent) DLP API Service Agent (roles/dlp.serviceAgent) AI Platform Service Agent (roles/ml.serviceAgent) Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent)
cloudaicompanion.instances.exportMetrics	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) BigQuery Studio User (roles/bigquery.studioUser) Gemini for Google Cloud User (roles/cloudaicompanion.user) Discovery Engine User (roles/discoveryengine.user) Gemini Cloud Assist User (roles/geminicloudassist.user) User role for Business AI Code API (roles/businessaicode.user) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Gemini for Google Cloud individual User (roles/cloudaicompanion.individualUser) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Data Scientist (roles/iam.dataScientist) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent)
cloudaicompanion.instances.generateCode	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) BigQuery Studio User (roles/bigquery.studioUser) Gemini for Google Cloud User (roles/cloudaicompanion.user) Cloud SQL Admin (roles/cloudsql.admin) Discovery Engine User (roles/discoveryengine.user) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Gemini for Google Cloud individual User (roles/cloudaicompanion.individualUser) Cloud SQL Studio User (roles/cloudsql.studioUser) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Data Scientist (roles/iam.dataScientist) Databases Admin (roles/iam.databasesAdmin) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent)
cloudaicompanion.instances.generateText	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) BigQuery Studio User (roles/bigquery.studioUser) Gemini for Google Cloud User (roles/cloudaicompanion.user) Discovery Engine User (roles/discoveryengine.user) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Gemini for Google Cloud individual User (roles/cloudaicompanion.individualUser) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Data Scientist (roles/iam.dataScientist) Support User (roles/iam.supportUser)
cloudaicompanion.instances.queryEffectiveSetting	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) BigQuery Studio User (roles/bigquery.studioUser) Gemini for Google Cloud User (roles/cloudaicompanion.user) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine User (roles/discoveryengine.user) Gemini Cloud Assist Investigation Owner (roles/geminicloudassist.investigationOwner) Gemini Cloud Assist User (roles/geminicloudassist.user) User role for Business AI Code API (roles/businessaicode.user) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Gemini for Google Cloud individual User (roles/cloudaicompanion.individualUser) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Gemini Cloud Assist Investigation Admin (roles/geminicloudassist.investigationAdmin) Gemini Cloud Assist Investigation Creator (roles/geminicloudassist.investigationCreator) Gemini Cloud Assist Investigation Editor (roles/geminicloudassist.investigationEditor) Gemini Cloud Assist Investigation User (roles/geminicloudassist.investigationUser) Gemini Cloud Assist Investigation Viewer (roles/geminicloudassist.investigationViewer) Data Scientist (roles/iam.dataScientist) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent)
cloudaicompanion.instances.queryEffectiveSettingBindings	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) BigQuery Studio User (roles/bigquery.studioUser) Gemini for Google Cloud User (roles/cloudaicompanion.user) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine User (roles/discoveryengine.user) Gemini Cloud Assist User (roles/geminicloudassist.user) User role for Business AI Code API (roles/businessaicode.user) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Gemini for Google Cloud individual User (roles/cloudaicompanion.individualUser) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Data Scientist (roles/iam.dataScientist) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent)
cloudaicompanion.licenses.selfAssign	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) BigQuery Studio User (roles/bigquery.studioUser) Gemini for Google Cloud User (roles/cloudaicompanion.user) Discovery Engine User (roles/discoveryengine.user) Gemini Cloud Assist User (roles/geminicloudassist.user) User role for Business AI Code API (roles/businessaicode.user) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Gemini for Google Cloud individual User (roles/cloudaicompanion.individualUser) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Data Scientist (roles/iam.dataScientist) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent)
cloudaicompanion.loggingSettings.create	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.loggingSettings.delete	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.loggingSettings.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini for Google Cloud Settings User (roles/cloudaicompanion.settingsUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser)
cloudaicompanion.loggingSettings.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini for Google Cloud Settings User (roles/cloudaicompanion.settingsUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
cloudaicompanion.loggingSettings.update	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.operations.cancel	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Code Repository Indexes Admin (roles/cloudaicompanion.codeRepositoryIndexesAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.operations.delete	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Code Repository Indexes Admin (roles/cloudaicompanion.codeRepositoryIndexesAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) BigQuery Studio User (roles/bigquery.studioUser) Gemini for Google Cloud User (roles/cloudaicompanion.user) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine User (roles/discoveryengine.user) Code Repository Indexes Admin (roles/cloudaicompanion.codeRepositoryIndexesAdmin) Code Repository Indexes Viewer (roles/cloudaicompanion.codeRepositoryIndexesViewer) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Gemini for Google Cloud individual User (roles/cloudaicompanion.individualUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Data Scientist (roles/iam.dataScientist) Support User (roles/iam.supportUser)
cloudaicompanion.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Code Repository Indexes Admin (roles/cloudaicompanion.codeRepositoryIndexesAdmin) Code Repository Indexes Viewer (roles/cloudaicompanion.codeRepositoryIndexesViewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
cloudaicompanion.releaseChannelSettings.create	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.releaseChannelSettings.delete	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.releaseChannelSettings.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini for Google Cloud Settings User (roles/cloudaicompanion.settingsUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser)
cloudaicompanion.releaseChannelSettings.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini for Google Cloud Settings User (roles/cloudaicompanion.settingsUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
cloudaicompanion.releaseChannelSettings.update	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.repositoryGroups.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Code Repository Indexes Admin (roles/cloudaicompanion.codeRepositoryIndexesAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.repositoryGroups.delete	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Code Repository Indexes Admin (roles/cloudaicompanion.codeRepositoryIndexesAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.repositoryGroups.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Code Repository Indexes Admin (roles/cloudaicompanion.codeRepositoryIndexesAdmin) Code Repository Indexes Viewer (roles/cloudaicompanion.codeRepositoryIndexesViewer) Repository Groups User (roles/cloudaicompanion.repositoryGroupsUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent)
cloudaicompanion.repositoryGroups.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Code Repository Indexes Admin (roles/cloudaicompanion.codeRepositoryIndexesAdmin) Code Repository Indexes Viewer (roles/cloudaicompanion.codeRepositoryIndexesViewer) Repository Groups User (roles/cloudaicompanion.repositoryGroupsUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent)
cloudaicompanion.repositoryGroups.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Code Repository Indexes Admin (roles/cloudaicompanion.codeRepositoryIndexesAdmin) Code Repository Indexes Viewer (roles/cloudaicompanion.codeRepositoryIndexesViewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Gemini for Google Cloud Service Agent (roles/cloudaicompanion.serviceAgent)
cloudaicompanion.repositoryGroups.setIamPolicy	Owner (roles/owner) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Code Repository Indexes Admin (roles/cloudaicompanion.codeRepositoryIndexesAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.repositoryGroups.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Code Repository Indexes Admin (roles/cloudaicompanion.codeRepositoryIndexesAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.repositoryGroups.use	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Repository Groups User (roles/cloudaicompanion.repositoryGroupsUser) Support User (roles/iam.supportUser)
cloudaicompanion.settingBindings.aiDevToolsSettingsCreate	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.settingBindings.aiDevToolsSettingsDelete	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.settingBindings.aiDevToolsSettingsGet	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini for Google Cloud Settings User (roles/cloudaicompanion.settingsUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser)
cloudaicompanion.settingBindings.aiDevToolsSettingsList	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini for Google Cloud Settings User (roles/cloudaicompanion.settingsUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser)
cloudaicompanion.settingBindings.aiDevToolsSettingsUpdate	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.settingBindings.aiDevToolsSettingsUse	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.settingBindings.codeToolsSettingsCreate	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.settingBindings.codeToolsSettingsDelete	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.settingBindings.codeToolsSettingsGet	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini for Google Cloud Settings User (roles/cloudaicompanion.settingsUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser)
cloudaicompanion.settingBindings.codeToolsSettingsList	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini for Google Cloud Settings User (roles/cloudaicompanion.settingsUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser)
cloudaicompanion.settingBindings.codeToolsSettingsUpdate	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.settingBindings.codeToolsSettingsUse	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Code Assist Tools Admin (roles/cloudaicompanion.codeToolsAdmin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsCreate	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsDelete	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsGet	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini for Google Cloud Settings User (roles/cloudaicompanion.settingsUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser)
cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsList	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini for Google Cloud Settings User (roles/cloudaicompanion.settingsUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser)
cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsUpdate	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsUse	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.settingBindings.geminiGcpEnablementSettingsCreate	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.settingBindings.geminiGcpEnablementSettingsDelete	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.settingBindings.geminiGcpEnablementSettingsGet	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini for Google Cloud Settings User (roles/cloudaicompanion.settingsUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser)
cloudaicompanion.settingBindings.geminiGcpEnablementSettingsList	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini for Google Cloud Settings User (roles/cloudaicompanion.settingsUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser)
cloudaicompanion.settingBindings.geminiGcpEnablementSettingsUpdate	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.settingBindings.geminiGcpEnablementSettingsUse	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.settingBindings.loggingSettingsCreate	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.settingBindings.loggingSettingsDelete	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.settingBindings.loggingSettingsGet	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini for Google Cloud Settings User (roles/cloudaicompanion.settingsUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser)
cloudaicompanion.settingBindings.loggingSettingsList	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini for Google Cloud Settings User (roles/cloudaicompanion.settingsUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser)
cloudaicompanion.settingBindings.loggingSettingsUpdate	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.settingBindings.loggingSettingsUse	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.settingBindings.releaseChannelSettingsCreate	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.settingBindings.releaseChannelSettingsDelete	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.settingBindings.releaseChannelSettingsGet	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini for Google Cloud Settings User (roles/cloudaicompanion.settingsUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser)
cloudaicompanion.settingBindings.releaseChannelSettingsList	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini for Google Cloud Settings User (roles/cloudaicompanion.settingsUser) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser)
cloudaicompanion.settingBindings.releaseChannelSettingsUpdate	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.settingBindings.releaseChannelSettingsUse	Owner (roles/owner) Editor (roles/editor) BigQuery Studio Admin (roles/bigquery.studioAdmin) Discovery Engine Admin (roles/discoveryengine.admin) Gemini for Google Cloud Settings Admin (roles/cloudaicompanion.settingsAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
cloudaicompanion.topics.create	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) BigQuery Studio Admin (roles/bigquery.studioAdmin) BigQuery Studio User (roles/bigquery.studioUser) Gemini for Google Cloud User (roles/cloudaicompanion.user) Discovery Engine User (roles/discoveryengine.user) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Gemini Cloud Assist Editor (roles/geminicloudassist.editor) Gemini Cloud Assist User (roles/geminicloudassist.user) Gemini Code Assist Tools User (roles/cloudaicompanion.codeToolsUser) Gemini for Google Cloud individual User (roles/cloudaicompanion.individualUser) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Data Scientist (roles/iam.dataScientist) Support User (roles/iam.supportUser)
cloudaicompanion.topics.delete	Topic Admin (roles/cloudaicompanion.topicAdmin) Gemini Cloud Assist Admin (roles/geminicloudassist.admin)
cloudaicompanion.topics.get	Owner (roles/owner) Topic Admin (roles/cloudaicompanion.topicAdmin) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Topic Reader (roles/cloudaicompanion.topicReader)
cloudaicompanion.topics.getIamPolicy	Owner (roles/owner) Topic Admin (roles/cloudaicompanion.topicAdmin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Security Auditor (roles/iam.securityAuditor)
cloudaicompanion.topics.setIamPolicy	Owner (roles/owner) Topic Admin (roles/cloudaicompanion.topicAdmin) Gemini Cloud Assist Admin (roles/geminicloudassist.admin) Security Admin (roles/iam.securityAdmin)
cloudaicompanion.topics.update	Topic Admin (roles/cloudaicompanion.topicAdmin) Gemini Cloud Assist Admin (roles/geminicloudassist.admin)