AI Platform Data Labeling Service roles and permissions

This page lists the IAM roles and permissions for AI Platform Data Labeling Service. To search through all roles and permissions, see the role and permission index.

AI Platform Data Labeling Service roles

Role	Permissions
Data Labeling Service Admin ^Beta (roles/datalabeling.admin) Full access to all Data Labeling resources	datalabeling.* datalabeling.annotateddatasets.delete datalabeling.annotateddatasets.get datalabeling.annotateddatasets.label datalabeling.annotateddatasets.list datalabeling.annotationspecsets.create datalabeling.annotationspecsets.delete datalabeling.annotationspecsets.get datalabeling.annotationspecsets.list datalabeling.dataitems.get datalabeling.dataitems.list datalabeling.datasets.create datalabeling.datasets.delete datalabeling.datasets.export datalabeling.datasets.get datalabeling.datasets.import datalabeling.datasets.list datalabeling.examples.get datalabeling.examples.list datalabeling.instructions.create datalabeling.instructions.delete datalabeling.instructions.get datalabeling.instructions.list datalabeling.operations.cancel datalabeling.operations.get datalabeling.operations.list resourcemanager.projects.get resourcemanager.projects.list
Data Labeling Service Editor ^Beta (roles/datalabeling.editor) Editor of all Data Labeling resources	datalabeling.* datalabeling.annotateddatasets.delete datalabeling.annotateddatasets.get datalabeling.annotateddatasets.label datalabeling.annotateddatasets.list datalabeling.annotationspecsets.create datalabeling.annotationspecsets.delete datalabeling.annotationspecsets.get datalabeling.annotationspecsets.list datalabeling.dataitems.get datalabeling.dataitems.list datalabeling.datasets.create datalabeling.datasets.delete datalabeling.datasets.export datalabeling.datasets.get datalabeling.datasets.import datalabeling.datasets.list datalabeling.examples.get datalabeling.examples.list datalabeling.instructions.create datalabeling.instructions.delete datalabeling.instructions.get datalabeling.instructions.list datalabeling.operations.cancel datalabeling.operations.get datalabeling.operations.list resourcemanager.projects.get resourcemanager.projects.list
Data Labeling Service Viewer ^Beta (roles/datalabeling.viewer) Viewer of all Data Labeling resources	datalabeling.annotateddatasets.get datalabeling.annotateddatasets.list datalabeling.annotationspecsets.get datalabeling.annotationspecsets.list datalabeling.dataitems.* datalabeling.dataitems.get datalabeling.dataitems.list datalabeling.datasets.get datalabeling.datasets.list datalabeling.examples.* datalabeling.examples.get datalabeling.examples.list datalabeling.instructions.get datalabeling.instructions.list datalabeling.operations.get datalabeling.operations.list resourcemanager.projects.get resourcemanager.projects.list

Service agent roles

Service agent roles should only be granted to service agents.

Role

Permissions

Data Labeling Service Agent (roles/datalabeling.serviceAgent) Gives Data Labeling service account read/write access to Cloud Storage, read/write BigQuery, update CMLE model versions, editor access to Annotation service and AutoML service. Warning: Do not grant service agent roles to any principals except service agents.

automl.annotationSpecs.* automl.annotationSpecs.create automl.annotationSpecs.delete automl.annotationSpecs.get automl.annotationSpecs.list automl.annotationSpecs.update automl.annotations.* automl.annotations.approve automl.annotations.create automl.annotations.list automl.annotations.manipulate automl.annotations.reject automl.columnSpecs.* automl.columnSpecs.get automl.columnSpecs.list automl.columnSpecs.update automl.datasets.create automl.datasets.delete automl.datasets.export automl.datasets.get automl.datasets.import automl.datasets.list automl.datasets.update automl.examples.* automl.examples.delete automl.examples.get automl.examples.list automl.examples.update automl.files.* automl.files.delete automl.files.list automl.humanAnnotationTasks.* automl.humanAnnotationTasks.create automl.humanAnnotationTasks.delete automl.humanAnnotationTasks.get automl.humanAnnotationTasks.list automl.locations.get automl.locations.list automl.modelEvaluations.* automl.modelEvaluations.create automl.modelEvaluations.get automl.modelEvaluations.list automl.models.create automl.models.delete automl.models.deploy automl.models.export automl.models.get automl.models.list automl.models.predict automl.models.undeploy automl.operations.* automl.operations.cancel automl.operations.delete automl.operations.get automl.operations.list automl.tableSpecs.* automl.tableSpecs.get automl.tableSpecs.list automl.tableSpecs.update bigquery.datasets.create bigquery.datasets.get bigquery.jobs.create bigquery.jobs.get bigquery.tables.create bigquery.tables.get bigquery.tables.getData ml.jobs.create ml.jobs.get ml.jobs.getIamPolicy ml.jobs.list ml.locations.* ml.locations.get ml.locations.list ml.models.* ml.models.create ml.models.delete ml.models.get ml.models.getIamPolicy ml.models.list ml.models.predict ml.models.setIamPolicy ml.models.update ml.operations.get ml.operations.list ml.projects.getConfig ml.studies.* ml.studies.create ml.studies.delete ml.studies.get ml.studies.getIamPolicy ml.studies.list ml.studies.setIamPolicy ml.trials.* ml.trials.create ml.trials.delete ml.trials.get ml.trials.list ml.trials.update ml.versions.* ml.versions.create ml.versions.delete ml.versions.get ml.versions.list ml.versions.predict ml.versions.update resourcemanager.projects.get resourcemanager.projects.list serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.services.get serviceusage.services.list serviceusage.values.test storage.objects.create storage.objects.delete storage.objects.get storage.objects.list storage.objects.update

AI Platform Data Labeling Service permissions

Permission	Included in roles
datalabeling.annotateddatasets.delete	Owner (roles/owner) Editor (roles/editor) Data Labeling Service Admin (roles/datalabeling.admin) Data Labeling Service Editor (roles/datalabeling.editor)
datalabeling.annotateddatasets.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Data Labeling Service Admin (roles/datalabeling.admin) Data Labeling Service Editor (roles/datalabeling.editor) Data Labeling Service Viewer (roles/datalabeling.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (roles/aiplatform.serviceAgent)
datalabeling.annotateddatasets.label	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Data Labeling Service Admin (roles/datalabeling.admin) Data Labeling Service Editor (roles/datalabeling.editor) Support User (roles/iam.supportUser)
datalabeling.annotateddatasets.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Data Labeling Service Admin (roles/datalabeling.admin) Data Labeling Service Editor (roles/datalabeling.editor) Data Labeling Service Viewer (roles/datalabeling.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
datalabeling.annotationspecsets.create	Owner (roles/owner) Editor (roles/editor) Data Labeling Service Admin (roles/datalabeling.admin) Data Labeling Service Editor (roles/datalabeling.editor)
datalabeling.annotationspecsets.delete	Owner (roles/owner) Editor (roles/editor) Data Labeling Service Admin (roles/datalabeling.admin) Data Labeling Service Editor (roles/datalabeling.editor)
datalabeling.annotationspecsets.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Data Labeling Service Admin (roles/datalabeling.admin) Data Labeling Service Editor (roles/datalabeling.editor) Data Labeling Service Viewer (roles/datalabeling.viewer) Support User (roles/iam.supportUser)
datalabeling.annotationspecsets.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Data Labeling Service Admin (roles/datalabeling.admin) Data Labeling Service Editor (roles/datalabeling.editor) Data Labeling Service Viewer (roles/datalabeling.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
datalabeling.dataitems.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Data Labeling Service Admin (roles/datalabeling.admin) Data Labeling Service Editor (roles/datalabeling.editor) Data Labeling Service Viewer (roles/datalabeling.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (roles/contactcenterinsights.serviceAgent)
datalabeling.dataitems.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Data Labeling Service Admin (roles/datalabeling.admin) Data Labeling Service Editor (roles/datalabeling.editor) Data Labeling Service Viewer (roles/datalabeling.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (roles/contactcenterinsights.serviceAgent)
datalabeling.datasets.create	Owner (roles/owner) Editor (roles/editor) Data Labeling Service Admin (roles/datalabeling.admin) Data Labeling Service Editor (roles/datalabeling.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (roles/contactcenterinsights.serviceAgent)
datalabeling.datasets.delete	Owner (roles/owner) Editor (roles/editor) Data Labeling Service Admin (roles/datalabeling.admin) Data Labeling Service Editor (roles/datalabeling.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (roles/contactcenterinsights.serviceAgent)
datalabeling.datasets.export	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Data Labeling Service Admin (roles/datalabeling.admin) Data Labeling Service Editor (roles/datalabeling.editor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (roles/aiplatform.serviceAgent) Contact Center AI Insights Service Agent (roles/contactcenterinsights.serviceAgent)
datalabeling.datasets.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Data Labeling Service Admin (roles/datalabeling.admin) Data Labeling Service Editor (roles/datalabeling.editor) Data Labeling Service Viewer (roles/datalabeling.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (roles/aiplatform.serviceAgent) Contact Center AI Insights Service Agent (roles/contactcenterinsights.serviceAgent)
datalabeling.datasets.import	Owner (roles/owner) Editor (roles/editor) Data Labeling Service Admin (roles/datalabeling.admin) Data Labeling Service Editor (roles/datalabeling.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (roles/contactcenterinsights.serviceAgent)
datalabeling.datasets.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Data Labeling Service Admin (roles/datalabeling.admin) Data Labeling Service Editor (roles/datalabeling.editor) Data Labeling Service Viewer (roles/datalabeling.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (roles/aiplatform.serviceAgent)
datalabeling.examples.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Data Labeling Service Admin (roles/datalabeling.admin) Data Labeling Service Editor (roles/datalabeling.editor) Data Labeling Service Viewer (roles/datalabeling.viewer) Support User (roles/iam.supportUser)
datalabeling.examples.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Data Labeling Service Admin (roles/datalabeling.admin) Data Labeling Service Editor (roles/datalabeling.editor) Data Labeling Service Viewer (roles/datalabeling.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
datalabeling.instructions.create	Owner (roles/owner) Editor (roles/editor) Data Labeling Service Admin (roles/datalabeling.admin) Data Labeling Service Editor (roles/datalabeling.editor)
datalabeling.instructions.delete	Owner (roles/owner) Editor (roles/editor) Data Labeling Service Admin (roles/datalabeling.admin) Data Labeling Service Editor (roles/datalabeling.editor)
datalabeling.instructions.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Data Labeling Service Admin (roles/datalabeling.admin) Data Labeling Service Editor (roles/datalabeling.editor) Data Labeling Service Viewer (roles/datalabeling.viewer) Support User (roles/iam.supportUser)
datalabeling.instructions.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Data Labeling Service Admin (roles/datalabeling.admin) Data Labeling Service Editor (roles/datalabeling.editor) Data Labeling Service Viewer (roles/datalabeling.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
datalabeling.operations.cancel	Owner (roles/owner) Editor (roles/editor) Data Labeling Service Admin (roles/datalabeling.admin) Data Labeling Service Editor (roles/datalabeling.editor)
datalabeling.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Data Labeling Service Admin (roles/datalabeling.admin) Data Labeling Service Editor (roles/datalabeling.editor) Data Labeling Service Viewer (roles/datalabeling.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (roles/aiplatform.serviceAgent) Contact Center AI Insights Service Agent (roles/contactcenterinsights.serviceAgent)
datalabeling.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Data Labeling Service Admin (roles/datalabeling.admin) Data Labeling Service Editor (roles/datalabeling.editor) Data Labeling Service Viewer (roles/datalabeling.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (roles/contactcenterinsights.serviceAgent)