Discovery Engine roles and permissions

This page lists the IAM roles and permissions for Discovery Engine. To search through all roles and permissions, see the role and permission index.

Discovery Engine roles

Role	Permissions
Discovery Engine Admin (roles/discoveryengine.admin) Grants full access to all discoveryengine resources.	cloudaicompanion.aiDevToolsSettings.* cloudaicompanion.aiDevToolsSettings.create cloudaicompanion.aiDevToolsSettings.delete cloudaicompanion.aiDevToolsSettings.get cloudaicompanion.aiDevToolsSettings.list cloudaicompanion.aiDevToolsSettings.update cloudaicompanion.codeRepositoryIndexes.* cloudaicompanion.codeRepositoryIndexes.create cloudaicompanion.codeRepositoryIndexes.delete cloudaicompanion.codeRepositoryIndexes.get cloudaicompanion.codeRepositoryIndexes.list cloudaicompanion.codeRepositoryIndexes.update cloudaicompanion.codeToolsSettings.* cloudaicompanion.codeToolsSettings.create cloudaicompanion.codeToolsSettings.delete cloudaicompanion.codeToolsSettings.get cloudaicompanion.codeToolsSettings.list cloudaicompanion.codeToolsSettings.update cloudaicompanion.dataSharingWithGoogleSettings.* cloudaicompanion.dataSharingWithGoogleSettings.create cloudaicompanion.dataSharingWithGoogleSettings.delete cloudaicompanion.dataSharingWithGoogleSettings.get cloudaicompanion.dataSharingWithGoogleSettings.list cloudaicompanion.dataSharingWithGoogleSettings.update cloudaicompanion.geminiGcpEnablementSettings.* cloudaicompanion.geminiGcpEnablementSettings.create cloudaicompanion.geminiGcpEnablementSettings.delete cloudaicompanion.geminiGcpEnablementSettings.get cloudaicompanion.geminiGcpEnablementSettings.list cloudaicompanion.geminiGcpEnablementSettings.update cloudaicompanion.instances.queryEffectiveSetting cloudaicompanion.instances.queryEffectiveSettingBindings cloudaicompanion.loggingSettings.* cloudaicompanion.loggingSettings.create cloudaicompanion.loggingSettings.delete cloudaicompanion.loggingSettings.get cloudaicompanion.loggingSettings.list cloudaicompanion.loggingSettings.update cloudaicompanion.operations.* cloudaicompanion.operations.cancel cloudaicompanion.operations.delete cloudaicompanion.operations.get cloudaicompanion.operations.list cloudaicompanion.releaseChannelSettings.* cloudaicompanion.releaseChannelSettings.create cloudaicompanion.releaseChannelSettings.delete cloudaicompanion.releaseChannelSettings.get cloudaicompanion.releaseChannelSettings.list cloudaicompanion.releaseChannelSettings.update cloudaicompanion.repositoryGroups.create cloudaicompanion.repositoryGroups.delete cloudaicompanion.repositoryGroups.get cloudaicompanion.repositoryGroups.getIamPolicy cloudaicompanion.repositoryGroups.list cloudaicompanion.repositoryGroups.setIamPolicy cloudaicompanion.repositoryGroups.update cloudaicompanion.settingBindings.* cloudaicompanion.settingBindings.aiDevToolsSettingsCreate cloudaicompanion.settingBindings.aiDevToolsSettingsDelete cloudaicompanion.settingBindings.aiDevToolsSettingsGet cloudaicompanion.settingBindings.aiDevToolsSettingsList cloudaicompanion.settingBindings.aiDevToolsSettingsUpdate cloudaicompanion.settingBindings.aiDevToolsSettingsUse cloudaicompanion.settingBindings.codeToolsSettingsCreate cloudaicompanion.settingBindings.codeToolsSettingsDelete cloudaicompanion.settingBindings.codeToolsSettingsGet cloudaicompanion.settingBindings.codeToolsSettingsList cloudaicompanion.settingBindings.codeToolsSettingsUpdate cloudaicompanion.settingBindings.codeToolsSettingsUse cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsCreate cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsDelete cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsGet cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsList cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsUpdate cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsUse cloudaicompanion.settingBindings.geminiGcpEnablementSettingsCreate cloudaicompanion.settingBindings.geminiGcpEnablementSettingsDelete cloudaicompanion.settingBindings.geminiGcpEnablementSettingsGet cloudaicompanion.settingBindings.geminiGcpEnablementSettingsList cloudaicompanion.settingBindings.geminiGcpEnablementSettingsUpdate cloudaicompanion.settingBindings.geminiGcpEnablementSettingsUse cloudaicompanion.settingBindings.loggingSettingsCreate cloudaicompanion.settingBindings.loggingSettingsDelete cloudaicompanion.settingBindings.loggingSettingsGet cloudaicompanion.settingBindings.loggingSettingsList cloudaicompanion.settingBindings.loggingSettingsUpdate cloudaicompanion.settingBindings.loggingSettingsUse cloudaicompanion.settingBindings.releaseChannelSettingsCreate cloudaicompanion.settingBindings.releaseChannelSettingsDelete cloudaicompanion.settingBindings.releaseChannelSettingsGet cloudaicompanion.settingBindings.releaseChannelSettingsList cloudaicompanion.settingBindings.releaseChannelSettingsUpdate cloudaicompanion.settingBindings.releaseChannelSettingsUse cloudnotifications.activities.list discoveryengine.aclConfigs.* discoveryengine.aclConfigs.get discoveryengine.aclConfigs.update discoveryengine.agentFiles.* discoveryengine.agentFiles.delete discoveryengine.agentFiles.download discoveryengine.agentFiles.import discoveryengine.agentFiles.list discoveryengine.agentFiles.upload discoveryengine.agentIamProposals.* discoveryengine.agentIamProposals.create discoveryengine.agentIamProposals.delete discoveryengine.agentIamProposals.get discoveryengine.agentIamProposals.list discoveryengine.agents.create discoveryengine.agents.delete discoveryengine.agents.get discoveryengine.agents.getAgentView discoveryengine.agents.getIamPolicy discoveryengine.agents.list discoveryengine.agents.listAvailableAgentViews discoveryengine.agents.manage discoveryengine.agents.setIamPolicy discoveryengine.agents.update discoveryengine.alertPolicies.* discoveryengine.alertPolicies.create discoveryengine.alertPolicies.get discoveryengine.alertPolicies.update discoveryengine.analytics.* discoveryengine.analytics.acquireDashboardSession discoveryengine.analytics.refreshDashboardSessionTokens discoveryengine.answers.get discoveryengine.assistAnswers.get discoveryengine.assistants.* discoveryengine.assistants.assist discoveryengine.assistants.create discoveryengine.assistants.delete discoveryengine.assistants.get discoveryengine.assistants.list discoveryengine.assistants.update discoveryengine.authorizations.storeUserAuthorization discoveryengine.billingAccountLicenseConfigs.* discoveryengine.billingAccountLicenseConfigs.distribute discoveryengine.billingAccountLicenseConfigs.get discoveryengine.billingAccountLicenseConfigs.list discoveryengine.billingAccountLicenseConfigs.retract discoveryengine.branches.* discoveryengine.branches.get discoveryengine.branches.list discoveryengine.cannedQueries.* discoveryengine.cannedQueries.create discoveryengine.cannedQueries.delete discoveryengine.cannedQueries.get discoveryengine.cannedQueries.list discoveryengine.cannedQueries.listActiveCannedQueryUserViews discoveryengine.cannedQueries.update discoveryengine.cmekConfigs.* discoveryengine.cmekConfigs.get discoveryengine.cmekConfigs.list discoveryengine.cmekConfigs.update discoveryengine.collections.* discoveryengine.collections.delete discoveryengine.collections.get discoveryengine.collections.list discoveryengine.completionConfigs.* discoveryengine.completionConfigs.completeQuery discoveryengine.completionConfigs.get discoveryengine.completionConfigs.removeSuggestion discoveryengine.completionConfigs.update discoveryengine.completionSuggestions.* discoveryengine.completionSuggestions.import discoveryengine.completionSuggestions.purge discoveryengine.connectorRuns.* discoveryengine.connectorRuns.cancel discoveryengine.connectorRuns.list discoveryengine.controls.* discoveryengine.controls.create discoveryengine.controls.delete discoveryengine.controls.get discoveryengine.controls.list discoveryengine.controls.update discoveryengine.conversations.* discoveryengine.conversations.converse discoveryengine.conversations.create discoveryengine.conversations.delete discoveryengine.conversations.get discoveryengine.conversations.list discoveryengine.conversations.update discoveryengine.dataConnectors.* discoveryengine.dataConnectors.acquireAccessToken discoveryengine.dataConnectors.acquireAndStoreRefreshToken discoveryengine.dataConnectors.buildActionInvocation discoveryengine.dataConnectors.checkRefreshToken discoveryengine.dataConnectors.executeAction discoveryengine.dataConnectors.get discoveryengine.dataConnectors.queryAvailableActions discoveryengine.dataConnectors.startConnectorRun discoveryengine.dataConnectors.update discoveryengine.dataStores.* discoveryengine.dataStores.completeQuery discoveryengine.dataStores.create discoveryengine.dataStores.delete discoveryengine.dataStores.enrollSolutions discoveryengine.dataStores.get discoveryengine.dataStores.list discoveryengine.dataStores.listCustomModels discoveryengine.dataStores.trainCustomModel discoveryengine.dataStores.update discoveryengine.documentProcessingConfigs.* discoveryengine.documentProcessingConfigs.get discoveryengine.documentProcessingConfigs.update discoveryengine.documents.* discoveryengine.documents.batchGetDocumentsMetadata discoveryengine.documents.create discoveryengine.documents.delete discoveryengine.documents.get discoveryengine.documents.import discoveryengine.documents.list discoveryengine.documents.purge discoveryengine.documents.update discoveryengine.engines.* discoveryengine.engines.create discoveryengine.engines.createEngineUserData discoveryengine.engines.delete discoveryengine.engines.generateMemories discoveryengine.engines.generatePersonalContext discoveryengine.engines.get discoveryengine.engines.getEngineUserData discoveryengine.engines.getIamPolicy discoveryengine.engines.getPersonalContext discoveryengine.engines.list discoveryengine.engines.pause discoveryengine.engines.resume discoveryengine.engines.setIamPolicy discoveryengine.engines.tune discoveryengine.engines.update discoveryengine.engines.updateEngineUserData discoveryengine.evaluations.* discoveryengine.evaluations.create discoveryengine.evaluations.get discoveryengine.evaluations.list discoveryengine.groundingConfigs.check discoveryengine.homepageDataConfigs.fetchDocuments discoveryengine.ideaForgeIdeas.* discoveryengine.ideaForgeIdeas.create discoveryengine.ideaForgeIdeas.get discoveryengine.ideaForgeInstances.* discoveryengine.ideaForgeInstances.get discoveryengine.ideaForgeInstances.start discoveryengine.identityMappingStores.* discoveryengine.identityMappingStores.create discoveryengine.identityMappingStores.delete discoveryengine.identityMappingStores.get discoveryengine.identityMappingStores.importIdentityMappings discoveryengine.identityMappingStores.list discoveryengine.identityMappingStores.listIdentityMappings discoveryengine.identityMappingStores.purgeIdentityMappings discoveryengine.licenseConfigs.* discoveryengine.licenseConfigs.create discoveryengine.licenseConfigs.get discoveryengine.licenseConfigs.list discoveryengine.licenseConfigs.update discoveryengine.locations.* discoveryengine.locations.completeExternalIdentities discoveryengine.locations.estimateDataSize discoveryengine.locations.exchangeAuthCredentials discoveryengine.locations.fetchAgentCards discoveryengine.locations.getConnectorSource discoveryengine.locations.listConnectorSources discoveryengine.locations.setUpDataConnector discoveryengine.memories.* discoveryengine.memories.delete discoveryengine.memories.list discoveryengine.memories.retrieve discoveryengine.memories.update discoveryengine.models.* discoveryengine.models.create discoveryengine.models.delete discoveryengine.models.get discoveryengine.models.list discoveryengine.models.pause discoveryengine.models.resume discoveryengine.models.tune discoveryengine.models.update discoveryengine.notificationMessages.* discoveryengine.notificationMessages.ackAll discoveryengine.notificationMessages.list discoveryengine.notificationMessages.update discoveryengine.operations.* discoveryengine.operations.get discoveryengine.operations.list discoveryengine.projects.* discoveryengine.projects.get discoveryengine.projects.provision discoveryengine.projects.reportConsentChange discoveryengine.rankingConfigs.rank discoveryengine.sampleQueries.* discoveryengine.sampleQueries.create discoveryengine.sampleQueries.delete discoveryengine.sampleQueries.get discoveryengine.sampleQueries.import discoveryengine.sampleQueries.list discoveryengine.sampleQueries.update discoveryengine.sampleQuerySets.* discoveryengine.sampleQuerySets.create discoveryengine.sampleQuerySets.delete discoveryengine.sampleQuerySets.get discoveryengine.sampleQuerySets.list discoveryengine.sampleQuerySets.update discoveryengine.schemas.* discoveryengine.schemas.create discoveryengine.schemas.delete discoveryengine.schemas.get discoveryengine.schemas.list discoveryengine.schemas.preview discoveryengine.schemas.update discoveryengine.schemas.validate discoveryengine.servingConfigs.* discoveryengine.servingConfigs.answer discoveryengine.servingConfigs.create discoveryengine.servingConfigs.delete discoveryengine.servingConfigs.get discoveryengine.servingConfigs.list discoveryengine.servingConfigs.recommend discoveryengine.servingConfigs.search discoveryengine.servingConfigs.update discoveryengine.sessions.* discoveryengine.sessions.addContextFile discoveryengine.sessions.create discoveryengine.sessions.delete discoveryengine.sessions.downloadFile discoveryengine.sessions.generateSummary discoveryengine.sessions.get discoveryengine.sessions.list discoveryengine.sessions.listSessionFileMetadata discoveryengine.sessions.recommendQuestions discoveryengine.sessions.removeContextFile discoveryengine.sessions.search discoveryengine.sessions.selectContextFiles discoveryengine.sessions.update discoveryengine.sessions.uploadFile discoveryengine.sharedContents.* discoveryengine.sharedContents.create discoveryengine.sharedContents.delete discoveryengine.sharedContents.get discoveryengine.sharedContents.list discoveryengine.siteSearchEngines.* discoveryengine.siteSearchEngines.batchVerifyTargetSites discoveryengine.siteSearchEngines.disableAdvancedSiteSearch discoveryengine.siteSearchEngines.enableAdvancedSiteSearch discoveryengine.siteSearchEngines.fetchDomainVerificationStatus discoveryengine.siteSearchEngines.get discoveryengine.siteSearchEngines.recrawlUris discoveryengine.sitemaps.* discoveryengine.sitemaps.create discoveryengine.sitemaps.delete discoveryengine.sitemaps.fetch discoveryengine.suggestionDenyListEntries.* discoveryengine.suggestionDenyListEntries.import discoveryengine.suggestionDenyListEntries.purge discoveryengine.targetSites.* discoveryengine.targetSites.batchCreate discoveryengine.targetSites.create discoveryengine.targetSites.delete discoveryengine.targetSites.get discoveryengine.targetSites.list discoveryengine.targetSites.update discoveryengine.userEvents.* discoveryengine.userEvents.create discoveryengine.userEvents.fetchStats discoveryengine.userEvents.import discoveryengine.userEvents.purge discoveryengine.userStores.* discoveryengine.userStores.batchUpdateUserLicenses discoveryengine.userStores.get discoveryengine.userStores.listUserLicenses discoveryengine.userStores.update discoveryengine.users.* discoveryengine.users.get discoveryengine.users.update discoveryengine.widgetConfigs.* discoveryengine.widgetConfigs.get discoveryengine.widgetConfigs.update monitoring.alertPolicies.get monitoring.alertPolicies.list monitoring.alertPolicies.listEffectiveTags monitoring.alertPolicies.listTagBindings monitoring.alerts.* monitoring.alerts.get monitoring.alerts.list monitoring.dashboards.get monitoring.dashboards.list monitoring.dashboards.listEffectiveTags monitoring.dashboards.listTagBindings monitoring.groups.get monitoring.groups.list monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list monitoring.notificationChannelDescriptors.* monitoring.notificationChannelDescriptors.get monitoring.notificationChannelDescriptors.list monitoring.notificationChannels.get monitoring.notificationChannels.list monitoring.services.get monitoring.services.list monitoring.slos.get monitoring.slos.list monitoring.snoozes.get monitoring.snoozes.list monitoring.timeSeries.list monitoring.uptimeCheckConfigs.get monitoring.uptimeCheckConfigs.list opsconfigmonitoring.resourceMetadata.list resourcemanager.projects.get resourcemanager.projects.list stackdriver.projects.get stackdriver.resourceMetadata.list
Discovery Engine Editor (roles/discoveryengine.editor) Grants read and write access to all discovery engine resources.	discoveryengine.aclConfigs.get discoveryengine.agentFiles.* discoveryengine.agentFiles.delete discoveryengine.agentFiles.download discoveryengine.agentFiles.import discoveryengine.agentFiles.list discoveryengine.agentFiles.upload discoveryengine.agents.create discoveryengine.agents.delete discoveryengine.agents.get discoveryengine.agents.getAgentView discoveryengine.agents.getIamPolicy discoveryengine.agents.list discoveryengine.agents.listAvailableAgentViews discoveryengine.agents.manage discoveryengine.agents.update discoveryengine.alertPolicies.get discoveryengine.analytics.* discoveryengine.analytics.acquireDashboardSession discoveryengine.analytics.refreshDashboardSessionTokens discoveryengine.answers.get discoveryengine.assistAnswers.get discoveryengine.assistants.assist discoveryengine.assistants.get discoveryengine.assistants.list discoveryengine.authorizations.storeUserAuthorization discoveryengine.branches.* discoveryengine.branches.get discoveryengine.branches.list discoveryengine.cannedQueries.get discoveryengine.cannedQueries.list discoveryengine.cannedQueries.listActiveCannedQueryUserViews discoveryengine.cmekConfigs.get discoveryengine.cmekConfigs.list discoveryengine.collections.get discoveryengine.collections.list discoveryengine.completionConfigs.completeQuery discoveryengine.completionConfigs.get discoveryengine.completionConfigs.removeSuggestion discoveryengine.connectorRuns.list discoveryengine.controls.get discoveryengine.controls.list discoveryengine.conversations.* discoveryengine.conversations.converse discoveryengine.conversations.create discoveryengine.conversations.delete discoveryengine.conversations.get discoveryengine.conversations.list discoveryengine.conversations.update discoveryengine.dataConnectors.acquireAccessToken discoveryengine.dataConnectors.acquireAndStoreRefreshToken discoveryengine.dataConnectors.buildActionInvocation discoveryengine.dataConnectors.checkRefreshToken discoveryengine.dataConnectors.executeAction discoveryengine.dataConnectors.get discoveryengine.dataConnectors.queryAvailableActions discoveryengine.dataStores.completeQuery discoveryengine.dataStores.get discoveryengine.dataStores.list discoveryengine.dataStores.listCustomModels discoveryengine.dataStores.trainCustomModel discoveryengine.documentProcessingConfigs.get discoveryengine.documents.batchGetDocumentsMetadata discoveryengine.documents.create discoveryengine.documents.delete discoveryengine.documents.get discoveryengine.documents.import discoveryengine.documents.list discoveryengine.documents.update discoveryengine.engines.createEngineUserData discoveryengine.engines.generateMemories discoveryengine.engines.generatePersonalContext discoveryengine.engines.get discoveryengine.engines.getEngineUserData discoveryengine.engines.getPersonalContext discoveryengine.engines.list discoveryengine.engines.pause discoveryengine.engines.resume discoveryengine.engines.tune discoveryengine.engines.updateEngineUserData discoveryengine.evaluations.get discoveryengine.evaluations.list discoveryengine.groundingConfigs.check discoveryengine.homepageDataConfigs.fetchDocuments discoveryengine.ideaForgeIdeas.* discoveryengine.ideaForgeIdeas.create discoveryengine.ideaForgeIdeas.get discoveryengine.ideaForgeInstances.* discoveryengine.ideaForgeInstances.get discoveryengine.ideaForgeInstances.start discoveryengine.identityMappingStores.* discoveryengine.identityMappingStores.create discoveryengine.identityMappingStores.delete discoveryengine.identityMappingStores.get discoveryengine.identityMappingStores.importIdentityMappings discoveryengine.identityMappingStores.list discoveryengine.identityMappingStores.listIdentityMappings discoveryengine.identityMappingStores.purgeIdentityMappings discoveryengine.licenseConfigs.get discoveryengine.licenseConfigs.list discoveryengine.locations.completeExternalIdentities discoveryengine.locations.fetchAgentCards discoveryengine.memories.* discoveryengine.memories.delete discoveryengine.memories.list discoveryengine.memories.retrieve discoveryengine.memories.update discoveryengine.models.* discoveryengine.models.create discoveryengine.models.delete discoveryengine.models.get discoveryengine.models.list discoveryengine.models.pause discoveryengine.models.resume discoveryengine.models.tune discoveryengine.models.update discoveryengine.notificationMessages.* discoveryengine.notificationMessages.ackAll discoveryengine.notificationMessages.list discoveryengine.notificationMessages.update discoveryengine.operations.* discoveryengine.operations.get discoveryengine.operations.list discoveryengine.projects.get discoveryengine.rankingConfigs.rank discoveryengine.sampleQueries.* discoveryengine.sampleQueries.create discoveryengine.sampleQueries.delete discoveryengine.sampleQueries.get discoveryengine.sampleQueries.import discoveryengine.sampleQueries.list discoveryengine.sampleQueries.update discoveryengine.sampleQuerySets.* discoveryengine.sampleQuerySets.create discoveryengine.sampleQuerySets.delete discoveryengine.sampleQuerySets.get discoveryengine.sampleQuerySets.list discoveryengine.sampleQuerySets.update discoveryengine.schemas.get discoveryengine.schemas.list discoveryengine.schemas.preview discoveryengine.schemas.validate discoveryengine.servingConfigs.answer discoveryengine.servingConfigs.get discoveryengine.servingConfigs.list discoveryengine.servingConfigs.recommend discoveryengine.servingConfigs.search discoveryengine.sessions.* discoveryengine.sessions.addContextFile discoveryengine.sessions.create discoveryengine.sessions.delete discoveryengine.sessions.downloadFile discoveryengine.sessions.generateSummary discoveryengine.sessions.get discoveryengine.sessions.list discoveryengine.sessions.listSessionFileMetadata discoveryengine.sessions.recommendQuestions discoveryengine.sessions.removeContextFile discoveryengine.sessions.search discoveryengine.sessions.selectContextFiles discoveryengine.sessions.update discoveryengine.sessions.uploadFile discoveryengine.sharedContents.* discoveryengine.sharedContents.create discoveryengine.sharedContents.delete discoveryengine.sharedContents.get discoveryengine.sharedContents.list discoveryengine.siteSearchEngines.get discoveryengine.targetSites.get discoveryengine.targetSites.list discoveryengine.userEvents.create discoveryengine.userEvents.fetchStats discoveryengine.userEvents.import discoveryengine.userStores.get discoveryengine.widgetConfigs.* discoveryengine.widgetConfigs.get discoveryengine.widgetConfigs.update resourcemanager.projects.get resourcemanager.projects.list
Discovery Engine Viewer (roles/discoveryengine.viewer) Grants read access to all discovery engine resources.	discoveryengine.aclConfigs.get discoveryengine.agentFiles.list discoveryengine.agents.get discoveryengine.agents.getAgentView discoveryengine.agents.getIamPolicy discoveryengine.agents.list discoveryengine.agents.listAvailableAgentViews discoveryengine.alertPolicies.get discoveryengine.analytics.* discoveryengine.analytics.acquireDashboardSession discoveryengine.analytics.refreshDashboardSessionTokens discoveryengine.answers.get discoveryengine.assistAnswers.get discoveryengine.assistants.get discoveryengine.assistants.list discoveryengine.branches.* discoveryengine.branches.get discoveryengine.branches.list discoveryengine.cannedQueries.get discoveryengine.cannedQueries.list discoveryengine.cannedQueries.listActiveCannedQueryUserViews discoveryengine.cmekConfigs.get discoveryengine.cmekConfigs.list discoveryengine.collections.get discoveryengine.collections.list discoveryengine.completionConfigs.completeQuery discoveryengine.completionConfigs.get discoveryengine.connectorRuns.list discoveryengine.controls.get discoveryengine.controls.list discoveryengine.conversations.converse discoveryengine.conversations.get discoveryengine.conversations.list discoveryengine.dataConnectors.buildActionInvocation discoveryengine.dataConnectors.checkRefreshToken discoveryengine.dataConnectors.get discoveryengine.dataConnectors.queryAvailableActions discoveryengine.dataStores.completeQuery discoveryengine.dataStores.get discoveryengine.dataStores.list discoveryengine.dataStores.listCustomModels discoveryengine.documentProcessingConfigs.get discoveryengine.documents.batchGetDocumentsMetadata discoveryengine.documents.get discoveryengine.documents.list discoveryengine.engines.get discoveryengine.engines.getPersonalContext discoveryengine.engines.list discoveryengine.evaluations.get discoveryengine.evaluations.list discoveryengine.groundingConfigs.check discoveryengine.homepageDataConfigs.fetchDocuments discoveryengine.ideaForgeIdeas.get discoveryengine.ideaForgeInstances.get discoveryengine.identityMappingStores.get discoveryengine.identityMappingStores.list discoveryengine.identityMappingStores.listIdentityMappings discoveryengine.locations.completeExternalIdentities discoveryengine.locations.fetchAgentCards discoveryengine.memories.list discoveryengine.memories.retrieve discoveryengine.models.get discoveryengine.models.list discoveryengine.notificationMessages.list discoveryengine.operations.* discoveryengine.operations.get discoveryengine.operations.list discoveryengine.projects.get discoveryengine.rankingConfigs.rank discoveryengine.sampleQueries.get discoveryengine.sampleQueries.list discoveryengine.sampleQuerySets.get discoveryengine.sampleQuerySets.list discoveryengine.schemas.get discoveryengine.schemas.list discoveryengine.schemas.preview discoveryengine.schemas.validate discoveryengine.servingConfigs.answer discoveryengine.servingConfigs.get discoveryengine.servingConfigs.list discoveryengine.servingConfigs.recommend discoveryengine.servingConfigs.search discoveryengine.sessions.downloadFile discoveryengine.sessions.generateSummary discoveryengine.sessions.get discoveryengine.sessions.list discoveryengine.sessions.listSessionFileMetadata discoveryengine.sessions.recommendQuestions discoveryengine.sharedContents.get discoveryengine.sharedContents.list discoveryengine.siteSearchEngines.get discoveryengine.targetSites.get discoveryengine.targetSites.list discoveryengine.userEvents.fetchStats discoveryengine.userStores.get discoveryengine.widgetConfigs.get resourcemanager.projects.get resourcemanager.projects.list
Agent Admin ^Beta (roles/discoveryengine.agentAdmin) Grants admin-level access to Agent resources.	discoveryengine.agentFiles.* discoveryengine.agentFiles.delete discoveryengine.agentFiles.download discoveryengine.agentFiles.import discoveryengine.agentFiles.list discoveryengine.agentFiles.upload discoveryengine.agentIamProposals.get discoveryengine.agentIamProposals.list discoveryengine.agents.create discoveryengine.agents.delete discoveryengine.agents.get discoveryengine.agents.getIamPolicy discoveryengine.agents.list discoveryengine.agents.manage discoveryengine.agents.setIamPolicy discoveryengine.agents.update
Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Grants admin-level access to Gemini Enterprise resources.	cloudaicompanion.aiDevToolsSettings.* cloudaicompanion.aiDevToolsSettings.create cloudaicompanion.aiDevToolsSettings.delete cloudaicompanion.aiDevToolsSettings.get cloudaicompanion.aiDevToolsSettings.list cloudaicompanion.aiDevToolsSettings.update cloudaicompanion.codeRepositoryIndexes.* cloudaicompanion.codeRepositoryIndexes.create cloudaicompanion.codeRepositoryIndexes.delete cloudaicompanion.codeRepositoryIndexes.get cloudaicompanion.codeRepositoryIndexes.list cloudaicompanion.codeRepositoryIndexes.update cloudaicompanion.codeToolsSettings.* cloudaicompanion.codeToolsSettings.create cloudaicompanion.codeToolsSettings.delete cloudaicompanion.codeToolsSettings.get cloudaicompanion.codeToolsSettings.list cloudaicompanion.codeToolsSettings.update cloudaicompanion.dataSharingWithGoogleSettings.* cloudaicompanion.dataSharingWithGoogleSettings.create cloudaicompanion.dataSharingWithGoogleSettings.delete cloudaicompanion.dataSharingWithGoogleSettings.get cloudaicompanion.dataSharingWithGoogleSettings.list cloudaicompanion.dataSharingWithGoogleSettings.update cloudaicompanion.geminiGcpEnablementSettings.* cloudaicompanion.geminiGcpEnablementSettings.create cloudaicompanion.geminiGcpEnablementSettings.delete cloudaicompanion.geminiGcpEnablementSettings.get cloudaicompanion.geminiGcpEnablementSettings.list cloudaicompanion.geminiGcpEnablementSettings.update cloudaicompanion.instances.queryEffectiveSetting cloudaicompanion.instances.queryEffectiveSettingBindings cloudaicompanion.loggingSettings.* cloudaicompanion.loggingSettings.create cloudaicompanion.loggingSettings.delete cloudaicompanion.loggingSettings.get cloudaicompanion.loggingSettings.list cloudaicompanion.loggingSettings.update cloudaicompanion.operations.* cloudaicompanion.operations.cancel cloudaicompanion.operations.delete cloudaicompanion.operations.get cloudaicompanion.operations.list cloudaicompanion.releaseChannelSettings.* cloudaicompanion.releaseChannelSettings.create cloudaicompanion.releaseChannelSettings.delete cloudaicompanion.releaseChannelSettings.get cloudaicompanion.releaseChannelSettings.list cloudaicompanion.releaseChannelSettings.update cloudaicompanion.repositoryGroups.create cloudaicompanion.repositoryGroups.delete cloudaicompanion.repositoryGroups.get cloudaicompanion.repositoryGroups.getIamPolicy cloudaicompanion.repositoryGroups.list cloudaicompanion.repositoryGroups.setIamPolicy cloudaicompanion.repositoryGroups.update cloudaicompanion.settingBindings.* cloudaicompanion.settingBindings.aiDevToolsSettingsCreate cloudaicompanion.settingBindings.aiDevToolsSettingsDelete cloudaicompanion.settingBindings.aiDevToolsSettingsGet cloudaicompanion.settingBindings.aiDevToolsSettingsList cloudaicompanion.settingBindings.aiDevToolsSettingsUpdate cloudaicompanion.settingBindings.aiDevToolsSettingsUse cloudaicompanion.settingBindings.codeToolsSettingsCreate cloudaicompanion.settingBindings.codeToolsSettingsDelete cloudaicompanion.settingBindings.codeToolsSettingsGet cloudaicompanion.settingBindings.codeToolsSettingsList cloudaicompanion.settingBindings.codeToolsSettingsUpdate cloudaicompanion.settingBindings.codeToolsSettingsUse cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsCreate cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsDelete cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsGet cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsList cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsUpdate cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsUse cloudaicompanion.settingBindings.geminiGcpEnablementSettingsCreate cloudaicompanion.settingBindings.geminiGcpEnablementSettingsDelete cloudaicompanion.settingBindings.geminiGcpEnablementSettingsGet cloudaicompanion.settingBindings.geminiGcpEnablementSettingsList cloudaicompanion.settingBindings.geminiGcpEnablementSettingsUpdate cloudaicompanion.settingBindings.geminiGcpEnablementSettingsUse cloudaicompanion.settingBindings.loggingSettingsCreate cloudaicompanion.settingBindings.loggingSettingsDelete cloudaicompanion.settingBindings.loggingSettingsGet cloudaicompanion.settingBindings.loggingSettingsList cloudaicompanion.settingBindings.loggingSettingsUpdate cloudaicompanion.settingBindings.loggingSettingsUse cloudaicompanion.settingBindings.releaseChannelSettingsCreate cloudaicompanion.settingBindings.releaseChannelSettingsDelete cloudaicompanion.settingBindings.releaseChannelSettingsGet cloudaicompanion.settingBindings.releaseChannelSettingsList cloudaicompanion.settingBindings.releaseChannelSettingsUpdate cloudaicompanion.settingBindings.releaseChannelSettingsUse cloudnotifications.activities.list discoveryengine.aclConfigs.* discoveryengine.aclConfigs.get discoveryengine.aclConfigs.update discoveryengine.agentFiles.* discoveryengine.agentFiles.delete discoveryengine.agentFiles.download discoveryengine.agentFiles.import discoveryengine.agentFiles.list discoveryengine.agentFiles.upload discoveryengine.agentIamProposals.* discoveryengine.agentIamProposals.create discoveryengine.agentIamProposals.delete discoveryengine.agentIamProposals.get discoveryengine.agentIamProposals.list discoveryengine.agents.create discoveryengine.agents.delete discoveryengine.agents.get discoveryengine.agents.getAgentView discoveryengine.agents.getIamPolicy discoveryengine.agents.list discoveryengine.agents.listAvailableAgentViews discoveryengine.agents.manage discoveryengine.agents.setIamPolicy discoveryengine.agents.update discoveryengine.alertPolicies.* discoveryengine.alertPolicies.create discoveryengine.alertPolicies.get discoveryengine.alertPolicies.update discoveryengine.analytics.* discoveryengine.analytics.acquireDashboardSession discoveryengine.analytics.refreshDashboardSessionTokens discoveryengine.answers.get discoveryengine.assistAnswers.get discoveryengine.assistants.* discoveryengine.assistants.assist discoveryengine.assistants.create discoveryengine.assistants.delete discoveryengine.assistants.get discoveryengine.assistants.list discoveryengine.assistants.update discoveryengine.authorizations.storeUserAuthorization discoveryengine.billingAccountLicenseConfigs.* discoveryengine.billingAccountLicenseConfigs.distribute discoveryengine.billingAccountLicenseConfigs.get discoveryengine.billingAccountLicenseConfigs.list discoveryengine.billingAccountLicenseConfigs.retract discoveryengine.branches.* discoveryengine.branches.get discoveryengine.branches.list discoveryengine.cannedQueries.* discoveryengine.cannedQueries.create discoveryengine.cannedQueries.delete discoveryengine.cannedQueries.get discoveryengine.cannedQueries.list discoveryengine.cannedQueries.listActiveCannedQueryUserViews discoveryengine.cannedQueries.update discoveryengine.cmekConfigs.* discoveryengine.cmekConfigs.get discoveryengine.cmekConfigs.list discoveryengine.cmekConfigs.update discoveryengine.collections.* discoveryengine.collections.delete discoveryengine.collections.get discoveryengine.collections.list discoveryengine.completionConfigs.* discoveryengine.completionConfigs.completeQuery discoveryengine.completionConfigs.get discoveryengine.completionConfigs.removeSuggestion discoveryengine.completionConfigs.update discoveryengine.completionSuggestions.* discoveryengine.completionSuggestions.import discoveryengine.completionSuggestions.purge discoveryengine.connectorRuns.* discoveryengine.connectorRuns.cancel discoveryengine.connectorRuns.list discoveryengine.controls.* discoveryengine.controls.create discoveryengine.controls.delete discoveryengine.controls.get discoveryengine.controls.list discoveryengine.controls.update discoveryengine.conversations.* discoveryengine.conversations.converse discoveryengine.conversations.create discoveryengine.conversations.delete discoveryengine.conversations.get discoveryengine.conversations.list discoveryengine.conversations.update discoveryengine.dataConnectors.* discoveryengine.dataConnectors.acquireAccessToken discoveryengine.dataConnectors.acquireAndStoreRefreshToken discoveryengine.dataConnectors.buildActionInvocation discoveryengine.dataConnectors.checkRefreshToken discoveryengine.dataConnectors.executeAction discoveryengine.dataConnectors.get discoveryengine.dataConnectors.queryAvailableActions discoveryengine.dataConnectors.startConnectorRun discoveryengine.dataConnectors.update discoveryengine.dataStores.* discoveryengine.dataStores.completeQuery discoveryengine.dataStores.create discoveryengine.dataStores.delete discoveryengine.dataStores.enrollSolutions discoveryengine.dataStores.get discoveryengine.dataStores.list discoveryengine.dataStores.listCustomModels discoveryengine.dataStores.trainCustomModel discoveryengine.dataStores.update discoveryengine.documentProcessingConfigs.* discoveryengine.documentProcessingConfigs.get discoveryengine.documentProcessingConfigs.update discoveryengine.documents.* discoveryengine.documents.batchGetDocumentsMetadata discoveryengine.documents.create discoveryengine.documents.delete discoveryengine.documents.get discoveryengine.documents.import discoveryengine.documents.list discoveryengine.documents.purge discoveryengine.documents.update discoveryengine.engines.* discoveryengine.engines.create discoveryengine.engines.createEngineUserData discoveryengine.engines.delete discoveryengine.engines.generateMemories discoveryengine.engines.generatePersonalContext discoveryengine.engines.get discoveryengine.engines.getEngineUserData discoveryengine.engines.getIamPolicy discoveryengine.engines.getPersonalContext discoveryengine.engines.list discoveryengine.engines.pause discoveryengine.engines.resume discoveryengine.engines.setIamPolicy discoveryengine.engines.tune discoveryengine.engines.update discoveryengine.engines.updateEngineUserData discoveryengine.evaluations.* discoveryengine.evaluations.create discoveryengine.evaluations.get discoveryengine.evaluations.list discoveryengine.groundingConfigs.check discoveryengine.homepageDataConfigs.fetchDocuments discoveryengine.ideaForgeIdeas.* discoveryengine.ideaForgeIdeas.create discoveryengine.ideaForgeIdeas.get discoveryengine.ideaForgeInstances.* discoveryengine.ideaForgeInstances.get discoveryengine.ideaForgeInstances.start discoveryengine.identityMappingStores.* discoveryengine.identityMappingStores.create discoveryengine.identityMappingStores.delete discoveryengine.identityMappingStores.get discoveryengine.identityMappingStores.importIdentityMappings discoveryengine.identityMappingStores.list discoveryengine.identityMappingStores.listIdentityMappings discoveryengine.identityMappingStores.purgeIdentityMappings discoveryengine.licenseConfigs.* discoveryengine.licenseConfigs.create discoveryengine.licenseConfigs.get discoveryengine.licenseConfigs.list discoveryengine.licenseConfigs.update discoveryengine.locations.* discoveryengine.locations.completeExternalIdentities discoveryengine.locations.estimateDataSize discoveryengine.locations.exchangeAuthCredentials discoveryengine.locations.fetchAgentCards discoveryengine.locations.getConnectorSource discoveryengine.locations.listConnectorSources discoveryengine.locations.setUpDataConnector discoveryengine.memories.* discoveryengine.memories.delete discoveryengine.memories.list discoveryengine.memories.retrieve discoveryengine.memories.update discoveryengine.models.* discoveryengine.models.create discoveryengine.models.delete discoveryengine.models.get discoveryengine.models.list discoveryengine.models.pause discoveryengine.models.resume discoveryengine.models.tune discoveryengine.models.update discoveryengine.notificationMessages.* discoveryengine.notificationMessages.ackAll discoveryengine.notificationMessages.list discoveryengine.notificationMessages.update discoveryengine.operations.* discoveryengine.operations.get discoveryengine.operations.list discoveryengine.projects.* discoveryengine.projects.get discoveryengine.projects.provision discoveryengine.projects.reportConsentChange discoveryengine.rankingConfigs.rank discoveryengine.sampleQueries.* discoveryengine.sampleQueries.create discoveryengine.sampleQueries.delete discoveryengine.sampleQueries.get discoveryengine.sampleQueries.import discoveryengine.sampleQueries.list discoveryengine.sampleQueries.update discoveryengine.sampleQuerySets.* discoveryengine.sampleQuerySets.create discoveryengine.sampleQuerySets.delete discoveryengine.sampleQuerySets.get discoveryengine.sampleQuerySets.list discoveryengine.sampleQuerySets.update discoveryengine.schemas.* discoveryengine.schemas.create discoveryengine.schemas.delete discoveryengine.schemas.get discoveryengine.schemas.list discoveryengine.schemas.preview discoveryengine.schemas.update discoveryengine.schemas.validate discoveryengine.servingConfigs.* discoveryengine.servingConfigs.answer discoveryengine.servingConfigs.create discoveryengine.servingConfigs.delete discoveryengine.servingConfigs.get discoveryengine.servingConfigs.list discoveryengine.servingConfigs.recommend discoveryengine.servingConfigs.search discoveryengine.servingConfigs.update discoveryengine.sessions.* discoveryengine.sessions.addContextFile discoveryengine.sessions.create discoveryengine.sessions.delete discoveryengine.sessions.downloadFile discoveryengine.sessions.generateSummary discoveryengine.sessions.get discoveryengine.sessions.list discoveryengine.sessions.listSessionFileMetadata discoveryengine.sessions.recommendQuestions discoveryengine.sessions.removeContextFile discoveryengine.sessions.search discoveryengine.sessions.selectContextFiles discoveryengine.sessions.update discoveryengine.sessions.uploadFile discoveryengine.sharedContents.* discoveryengine.sharedContents.create discoveryengine.sharedContents.delete discoveryengine.sharedContents.get discoveryengine.sharedContents.list discoveryengine.siteSearchEngines.* discoveryengine.siteSearchEngines.batchVerifyTargetSites discoveryengine.siteSearchEngines.disableAdvancedSiteSearch discoveryengine.siteSearchEngines.enableAdvancedSiteSearch discoveryengine.siteSearchEngines.fetchDomainVerificationStatus discoveryengine.siteSearchEngines.get discoveryengine.siteSearchEngines.recrawlUris discoveryengine.sitemaps.* discoveryengine.sitemaps.create discoveryengine.sitemaps.delete discoveryengine.sitemaps.fetch discoveryengine.suggestionDenyListEntries.* discoveryengine.suggestionDenyListEntries.import discoveryengine.suggestionDenyListEntries.purge discoveryengine.targetSites.* discoveryengine.targetSites.batchCreate discoveryengine.targetSites.create discoveryengine.targetSites.delete discoveryengine.targetSites.get discoveryengine.targetSites.list discoveryengine.targetSites.update discoveryengine.userEvents.* discoveryengine.userEvents.create discoveryengine.userEvents.fetchStats discoveryengine.userEvents.import discoveryengine.userEvents.purge discoveryengine.userStores.* discoveryengine.userStores.batchUpdateUserLicenses discoveryengine.userStores.get discoveryengine.userStores.listUserLicenses discoveryengine.userStores.update discoveryengine.users.* discoveryengine.users.get discoveryengine.users.update discoveryengine.widgetConfigs.* discoveryengine.widgetConfigs.get discoveryengine.widgetConfigs.update monitoring.alertPolicies.get monitoring.alertPolicies.list monitoring.alertPolicies.listEffectiveTags monitoring.alertPolicies.listTagBindings monitoring.alerts.* monitoring.alerts.get monitoring.alerts.list monitoring.dashboards.get monitoring.dashboards.list monitoring.dashboards.listEffectiveTags monitoring.dashboards.listTagBindings monitoring.groups.get monitoring.groups.list monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list monitoring.notificationChannelDescriptors.* monitoring.notificationChannelDescriptors.get monitoring.notificationChannelDescriptors.list monitoring.notificationChannels.get monitoring.notificationChannels.list monitoring.services.get monitoring.services.list monitoring.slos.get monitoring.slos.list monitoring.snoozes.get monitoring.snoozes.list monitoring.timeSeries.list monitoring.uptimeCheckConfigs.get monitoring.uptimeCheckConfigs.list opsconfigmonitoring.resourceMetadata.list resourcemanager.projects.get resourcemanager.projects.list stackdriver.projects.get stackdriver.resourceMetadata.list
Gemini Enterprise Editor ^Beta (roles/discoveryengine.agentspaceEditor) Grants access to edit Gemini Enterprise resources.	discoveryengine.aclConfigs.get discoveryengine.agentFiles.* discoveryengine.agentFiles.delete discoveryengine.agentFiles.download discoveryengine.agentFiles.import discoveryengine.agentFiles.list discoveryengine.agentFiles.upload discoveryengine.agents.create discoveryengine.agents.delete discoveryengine.agents.get discoveryengine.agents.getAgentView discoveryengine.agents.getIamPolicy discoveryengine.agents.list discoveryengine.agents.listAvailableAgentViews discoveryengine.agents.manage discoveryengine.agents.update discoveryengine.alertPolicies.get discoveryengine.analytics.* discoveryengine.analytics.acquireDashboardSession discoveryengine.analytics.refreshDashboardSessionTokens discoveryengine.answers.get discoveryengine.assistAnswers.get discoveryengine.assistants.assist discoveryengine.assistants.get discoveryengine.assistants.list discoveryengine.authorizations.storeUserAuthorization discoveryengine.branches.* discoveryengine.branches.get discoveryengine.branches.list discoveryengine.cannedQueries.get discoveryengine.cannedQueries.list discoveryengine.cannedQueries.listActiveCannedQueryUserViews discoveryengine.cmekConfigs.get discoveryengine.cmekConfigs.list discoveryengine.collections.get discoveryengine.collections.list discoveryengine.completionConfigs.completeQuery discoveryengine.completionConfigs.get discoveryengine.completionConfigs.removeSuggestion discoveryengine.connectorRuns.list discoveryengine.controls.get discoveryengine.controls.list discoveryengine.conversations.* discoveryengine.conversations.converse discoveryengine.conversations.create discoveryengine.conversations.delete discoveryengine.conversations.get discoveryengine.conversations.list discoveryengine.conversations.update discoveryengine.dataConnectors.acquireAccessToken discoveryengine.dataConnectors.acquireAndStoreRefreshToken discoveryengine.dataConnectors.buildActionInvocation discoveryengine.dataConnectors.checkRefreshToken discoveryengine.dataConnectors.executeAction discoveryengine.dataConnectors.get discoveryengine.dataConnectors.queryAvailableActions discoveryengine.dataStores.completeQuery discoveryengine.dataStores.get discoveryengine.dataStores.list discoveryengine.dataStores.listCustomModels discoveryengine.dataStores.trainCustomModel discoveryengine.documentProcessingConfigs.get discoveryengine.documents.batchGetDocumentsMetadata discoveryengine.documents.create discoveryengine.documents.delete discoveryengine.documents.get discoveryengine.documents.import discoveryengine.documents.list discoveryengine.documents.update discoveryengine.engines.createEngineUserData discoveryengine.engines.generateMemories discoveryengine.engines.generatePersonalContext discoveryengine.engines.get discoveryengine.engines.getEngineUserData discoveryengine.engines.getPersonalContext discoveryengine.engines.list discoveryengine.engines.pause discoveryengine.engines.resume discoveryengine.engines.tune discoveryengine.engines.updateEngineUserData discoveryengine.evaluations.get discoveryengine.evaluations.list discoveryengine.groundingConfigs.check discoveryengine.homepageDataConfigs.fetchDocuments discoveryengine.ideaForgeIdeas.* discoveryengine.ideaForgeIdeas.create discoveryengine.ideaForgeIdeas.get discoveryengine.ideaForgeInstances.* discoveryengine.ideaForgeInstances.get discoveryengine.ideaForgeInstances.start discoveryengine.identityMappingStores.* discoveryengine.identityMappingStores.create discoveryengine.identityMappingStores.delete discoveryengine.identityMappingStores.get discoveryengine.identityMappingStores.importIdentityMappings discoveryengine.identityMappingStores.list discoveryengine.identityMappingStores.listIdentityMappings discoveryengine.identityMappingStores.purgeIdentityMappings discoveryengine.licenseConfigs.get discoveryengine.licenseConfigs.list discoveryengine.locations.completeExternalIdentities discoveryengine.locations.fetchAgentCards discoveryengine.memories.* discoveryengine.memories.delete discoveryengine.memories.list discoveryengine.memories.retrieve discoveryengine.memories.update discoveryengine.models.* discoveryengine.models.create discoveryengine.models.delete discoveryengine.models.get discoveryengine.models.list discoveryengine.models.pause discoveryengine.models.resume discoveryengine.models.tune discoveryengine.models.update discoveryengine.notificationMessages.* discoveryengine.notificationMessages.ackAll discoveryengine.notificationMessages.list discoveryengine.notificationMessages.update discoveryengine.operations.* discoveryengine.operations.get discoveryengine.operations.list discoveryengine.projects.get discoveryengine.rankingConfigs.rank discoveryengine.sampleQueries.* discoveryengine.sampleQueries.create discoveryengine.sampleQueries.delete discoveryengine.sampleQueries.get discoveryengine.sampleQueries.import discoveryengine.sampleQueries.list discoveryengine.sampleQueries.update discoveryengine.sampleQuerySets.* discoveryengine.sampleQuerySets.create discoveryengine.sampleQuerySets.delete discoveryengine.sampleQuerySets.get discoveryengine.sampleQuerySets.list discoveryengine.sampleQuerySets.update discoveryengine.schemas.get discoveryengine.schemas.list discoveryengine.schemas.preview discoveryengine.schemas.validate discoveryengine.servingConfigs.answer discoveryengine.servingConfigs.get discoveryengine.servingConfigs.list discoveryengine.servingConfigs.recommend discoveryengine.servingConfigs.search discoveryengine.sessions.* discoveryengine.sessions.addContextFile discoveryengine.sessions.create discoveryengine.sessions.delete discoveryengine.sessions.downloadFile discoveryengine.sessions.generateSummary discoveryengine.sessions.get discoveryengine.sessions.list discoveryengine.sessions.listSessionFileMetadata discoveryengine.sessions.recommendQuestions discoveryengine.sessions.removeContextFile discoveryengine.sessions.search discoveryengine.sessions.selectContextFiles discoveryengine.sessions.update discoveryengine.sessions.uploadFile discoveryengine.sharedContents.* discoveryengine.sharedContents.create discoveryengine.sharedContents.delete discoveryengine.sharedContents.get discoveryengine.sharedContents.list discoveryengine.siteSearchEngines.get discoveryengine.targetSites.get discoveryengine.targetSites.list discoveryengine.userEvents.create discoveryengine.userEvents.fetchStats discoveryengine.userEvents.import discoveryengine.userStores.get discoveryengine.widgetConfigs.* discoveryengine.widgetConfigs.get discoveryengine.widgetConfigs.update resourcemanager.projects.get resourcemanager.projects.list
Gemini Enterprise Restricted User ^Beta (roles/discoveryengine.agentspaceRestrictedUser) Grants restricted user-level access to Gemini Enterprise resources, for fine-grained control over multiple Gemini Enterprise instances in the same project. Principals with this role will need to be granted an unrestricted user-level role (e.g. /agentspaceUser) on an Engine policy in order to use Gemini Enterprise.	discoveryengine.authorizations.storeUserAuthorization discoveryengine.dataConnectors.acquireAccessToken discoveryengine.dataConnectors.acquireAndStoreRefreshToken discoveryengine.dataConnectors.buildActionInvocation discoveryengine.dataConnectors.checkRefreshToken discoveryengine.dataConnectors.executeAction discoveryengine.dataConnectors.queryAvailableActions discoveryengine.locations.fetchAgentCards discoveryengine.userEvents.create discoveryengine.users.* discoveryengine.users.get discoveryengine.users.update
Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Grants user-level access to Gemini Enterprise resources.	businessaicode.* businessaicode.locations.generateContent businessaicode.locations.queryConfiguration businessaicode.locations.sendTelemetry cloudaicompanion.companions.* cloudaicompanion.companions.generateChat cloudaicompanion.companions.generateCode cloudaicompanion.entitlements.get cloudaicompanion.instances.* cloudaicompanion.instances.completeCode cloudaicompanion.instances.completeTask cloudaicompanion.instances.exportMetrics cloudaicompanion.instances.generateCode cloudaicompanion.instances.generateText cloudaicompanion.instances.queryEffectiveSetting cloudaicompanion.instances.queryEffectiveSettingBindings cloudaicompanion.licenses.selfAssign cloudaicompanion.operations.get cloudaicompanion.topics.create discoveryengine.accounts.create discoveryengine.agentFiles.* discoveryengine.agentFiles.delete discoveryengine.agentFiles.download discoveryengine.agentFiles.import discoveryengine.agentFiles.list discoveryengine.agentFiles.upload discoveryengine.agentIamProposals.* discoveryengine.agentIamProposals.create discoveryengine.agentIamProposals.delete discoveryengine.agentIamProposals.get discoveryengine.agentIamProposals.list discoveryengine.agents.create discoveryengine.agents.delete discoveryengine.agents.get discoveryengine.agents.getAgentView discoveryengine.agents.list discoveryengine.agents.listAvailableAgentViews discoveryengine.agents.requestReview discoveryengine.agents.update discoveryengine.answers.get discoveryengine.assistAnswers.get discoveryengine.assistants.assist discoveryengine.authorizations.storeUserAuthorization discoveryengine.cannedQueries.listActiveCannedQueryUserViews discoveryengine.completionConfigs.completeQuery discoveryengine.completionConfigs.removeSuggestion discoveryengine.dataConnectors.acquireAccessToken discoveryengine.dataConnectors.acquireAndStoreRefreshToken discoveryengine.dataConnectors.buildActionInvocation discoveryengine.dataConnectors.checkRefreshToken discoveryengine.dataConnectors.executeAction discoveryengine.dataConnectors.queryAvailableActions discoveryengine.engines.createEngineUserData discoveryengine.engines.generateMemories discoveryengine.engines.generatePersonalContext discoveryengine.engines.get discoveryengine.engines.getEngineUserData discoveryengine.engines.getPersonalContext discoveryengine.engines.updateEngineUserData discoveryengine.homepageDataConfigs.fetchDocuments discoveryengine.ideaForgeIdeas.* discoveryengine.ideaForgeIdeas.create discoveryengine.ideaForgeIdeas.get discoveryengine.ideaForgeInstances.* discoveryengine.ideaForgeInstances.get discoveryengine.ideaForgeInstances.start discoveryengine.locations.completeExternalIdentities discoveryengine.locations.fetchAgentCards discoveryengine.memories.* discoveryengine.memories.delete discoveryengine.memories.list discoveryengine.memories.retrieve discoveryengine.memories.update discoveryengine.notebooks.create discoveryengine.notebooks.list discoveryengine.notificationMessages.* discoveryengine.notificationMessages.ackAll discoveryengine.notificationMessages.list discoveryengine.notificationMessages.update discoveryengine.servingConfigs.answer discoveryengine.servingConfigs.recommend discoveryengine.servingConfigs.search discoveryengine.sessions.* discoveryengine.sessions.addContextFile discoveryengine.sessions.create discoveryengine.sessions.delete discoveryengine.sessions.downloadFile discoveryengine.sessions.generateSummary discoveryengine.sessions.get discoveryengine.sessions.list discoveryengine.sessions.listSessionFileMetadata discoveryengine.sessions.recommendQuestions discoveryengine.sessions.removeContextFile discoveryengine.sessions.search discoveryengine.sessions.selectContextFiles discoveryengine.sessions.update discoveryengine.sessions.uploadFile discoveryengine.sharedContents.* discoveryengine.sharedContents.create discoveryengine.sharedContents.delete discoveryengine.sharedContents.get discoveryengine.sharedContents.list discoveryengine.userEvents.create discoveryengine.users.* discoveryengine.users.get discoveryengine.users.update discoveryengine.widgetConfigs.get resourcemanager.projects.get resourcemanager.projects.list
Gemini Enterprise Viewer ^Beta (roles/discoveryengine.agentspaceViewer) Grants access to view the details of Gemini Enterprise resources.	discoveryengine.aclConfigs.get discoveryengine.agentFiles.list discoveryengine.agents.get discoveryengine.agents.getAgentView discoveryengine.agents.getIamPolicy discoveryengine.agents.list discoveryengine.agents.listAvailableAgentViews discoveryengine.alertPolicies.get discoveryengine.analytics.* discoveryengine.analytics.acquireDashboardSession discoveryengine.analytics.refreshDashboardSessionTokens discoveryengine.answers.get discoveryengine.assistAnswers.get discoveryengine.assistants.get discoveryengine.assistants.list discoveryengine.branches.* discoveryengine.branches.get discoveryengine.branches.list discoveryengine.cannedQueries.get discoveryengine.cannedQueries.list discoveryengine.cannedQueries.listActiveCannedQueryUserViews discoveryengine.cmekConfigs.get discoveryengine.cmekConfigs.list discoveryengine.collections.get discoveryengine.collections.list discoveryengine.completionConfigs.completeQuery discoveryengine.completionConfigs.get discoveryengine.connectorRuns.list discoveryengine.controls.get discoveryengine.controls.list discoveryengine.conversations.converse discoveryengine.conversations.get discoveryengine.conversations.list discoveryengine.dataConnectors.buildActionInvocation discoveryengine.dataConnectors.checkRefreshToken discoveryengine.dataConnectors.get discoveryengine.dataConnectors.queryAvailableActions discoveryengine.dataStores.completeQuery discoveryengine.dataStores.get discoveryengine.dataStores.list discoveryengine.dataStores.listCustomModels discoveryengine.documentProcessingConfigs.get discoveryengine.documents.batchGetDocumentsMetadata discoveryengine.documents.get discoveryengine.documents.list discoveryengine.engines.get discoveryengine.engines.getPersonalContext discoveryengine.engines.list discoveryengine.evaluations.get discoveryengine.evaluations.list discoveryengine.groundingConfigs.check discoveryengine.homepageDataConfigs.fetchDocuments discoveryengine.ideaForgeIdeas.get discoveryengine.ideaForgeInstances.get discoveryengine.identityMappingStores.get discoveryengine.identityMappingStores.list discoveryengine.identityMappingStores.listIdentityMappings discoveryengine.locations.completeExternalIdentities discoveryengine.locations.fetchAgentCards discoveryengine.memories.list discoveryengine.memories.retrieve discoveryengine.models.get discoveryengine.models.list discoveryengine.notificationMessages.list discoveryengine.operations.* discoveryengine.operations.get discoveryengine.operations.list discoveryengine.projects.get discoveryengine.rankingConfigs.rank discoveryengine.sampleQueries.get discoveryengine.sampleQueries.list discoveryengine.sampleQuerySets.get discoveryengine.sampleQuerySets.list discoveryengine.schemas.get discoveryengine.schemas.list discoveryengine.schemas.preview discoveryengine.schemas.validate discoveryengine.servingConfigs.answer discoveryengine.servingConfigs.get discoveryengine.servingConfigs.list discoveryengine.servingConfigs.recommend discoveryengine.servingConfigs.search discoveryengine.sessions.downloadFile discoveryengine.sessions.generateSummary discoveryengine.sessions.get discoveryengine.sessions.list discoveryengine.sessions.listSessionFileMetadata discoveryengine.sessions.recommendQuestions discoveryengine.sharedContents.get discoveryengine.sharedContents.list discoveryengine.siteSearchEngines.get discoveryengine.targetSites.get discoveryengine.targetSites.list discoveryengine.userEvents.fetchStats discoveryengine.userStores.get discoveryengine.widgetConfigs.get resourcemanager.projects.get resourcemanager.projects.list
Cloud NotebookLM Notebook Editor ^Beta (roles/discoveryengine.notebookEditor) Grants read and write access to a Cloud NotebookLM Notebook.	discoveryengine.audioOverviews.* discoveryengine.audioOverviews.create discoveryengine.audioOverviews.delete discoveryengine.audioOverviews.get discoveryengine.audioOverviews.getIceConfig discoveryengine.audioOverviews.sendSdpOffer discoveryengine.notebooks.generateGuide discoveryengine.notebooks.get discoveryengine.notebooks.getAnalytics discoveryengine.notebooks.getIamPolicy discoveryengine.notebooks.interactSources discoveryengine.notebooks.list discoveryengine.notebooks.removeSelf discoveryengine.notebooks.update discoveryengine.notes.* discoveryengine.notes.create discoveryengine.notes.delete discoveryengine.notes.get discoveryengine.notes.update discoveryengine.sources.* discoveryengine.sources.checkFreshness discoveryengine.sources.create discoveryengine.sources.delete discoveryengine.sources.generateDocumentGuide discoveryengine.sources.get discoveryengine.sources.refresh discoveryengine.sources.update
Cloud NotebookLM Admin ^Beta (roles/discoveryengine.notebookLmOwner) Grants full access to Cloud NotebookLM resources.	discoveryengine.accounts.create discoveryengine.aclConfigs.* discoveryengine.aclConfigs.get discoveryengine.aclConfigs.update discoveryengine.audioOverviews.* discoveryengine.audioOverviews.create discoveryengine.audioOverviews.delete discoveryengine.audioOverviews.get discoveryengine.audioOverviews.getIceConfig discoveryengine.audioOverviews.sendSdpOffer discoveryengine.locations.completeExternalIdentities discoveryengine.notebooks.* discoveryengine.notebooks.create discoveryengine.notebooks.generateGuide discoveryengine.notebooks.get discoveryengine.notebooks.getAnalytics discoveryengine.notebooks.getIamPolicy discoveryengine.notebooks.interactSources discoveryengine.notebooks.list discoveryengine.notebooks.removeSelf discoveryengine.notebooks.setIamPolicy discoveryengine.notebooks.update discoveryengine.notes.* discoveryengine.notes.create discoveryengine.notes.delete discoveryengine.notes.get discoveryengine.notes.update discoveryengine.sources.* discoveryengine.sources.checkFreshness discoveryengine.sources.create discoveryengine.sources.delete discoveryengine.sources.generateDocumentGuide discoveryengine.sources.get discoveryengine.sources.refresh discoveryengine.sources.update resourcemanager.projects.get resourcemanager.projects.list
Cloud NotebookLM User ^Beta (roles/discoveryengine.notebookLmUser) Grants user-level access to Cloud NotebookLM resources.	discoveryengine.accounts.create discoveryengine.locations.completeExternalIdentities discoveryengine.notebooks.create discoveryengine.notebooks.list resourcemanager.projects.get resourcemanager.projects.list
Cloud NotebookLM Notebook Owner ^Beta (roles/discoveryengine.notebookOwner) Grants full access to a Cloud NotebookLM Notebook.	discoveryengine.audioOverviews.* discoveryengine.audioOverviews.create discoveryengine.audioOverviews.delete discoveryengine.audioOverviews.get discoveryengine.audioOverviews.getIceConfig discoveryengine.audioOverviews.sendSdpOffer discoveryengine.notebooks.generateGuide discoveryengine.notebooks.get discoveryengine.notebooks.getAnalytics discoveryengine.notebooks.getIamPolicy discoveryengine.notebooks.interactSources discoveryengine.notebooks.list discoveryengine.notebooks.removeSelf discoveryengine.notebooks.setIamPolicy discoveryengine.notebooks.update discoveryengine.notes.* discoveryengine.notes.create discoveryengine.notes.delete discoveryengine.notes.get discoveryengine.notes.update discoveryengine.sources.* discoveryengine.sources.checkFreshness discoveryengine.sources.create discoveryengine.sources.delete discoveryengine.sources.generateDocumentGuide discoveryengine.sources.get discoveryengine.sources.refresh discoveryengine.sources.update
Cloud NotebookLM Notebook Viewer ^Beta (roles/discoveryengine.notebookViewer) Grants read-only access to a Cloud NotebookLM Notebook.	discoveryengine.audioOverviews.get discoveryengine.audioOverviews.getIceConfig discoveryengine.audioOverviews.sendSdpOffer discoveryengine.notebooks.generateGuide discoveryengine.notebooks.get discoveryengine.notebooks.getIamPolicy discoveryengine.notebooks.interactSources discoveryengine.notebooks.list discoveryengine.notebooks.removeSelf discoveryengine.notes.get discoveryengine.sources.checkFreshness discoveryengine.sources.generateDocumentGuide discoveryengine.sources.get
Podcast API User ^Beta (roles/discoveryengine.podcastApiUser) Grants user-level access to the Podcast resources.	businessaicode.* businessaicode.locations.generateContent businessaicode.locations.queryConfiguration businessaicode.locations.sendTelemetry cloudaicompanion.companions.* cloudaicompanion.companions.generateChat cloudaicompanion.companions.generateCode cloudaicompanion.entitlements.get cloudaicompanion.instances.* cloudaicompanion.instances.completeCode cloudaicompanion.instances.completeTask cloudaicompanion.instances.exportMetrics cloudaicompanion.instances.generateCode cloudaicompanion.instances.generateText cloudaicompanion.instances.queryEffectiveSetting cloudaicompanion.instances.queryEffectiveSettingBindings cloudaicompanion.licenses.selfAssign cloudaicompanion.operations.get cloudaicompanion.topics.create discoveryengine.accounts.create discoveryengine.agentFiles.* discoveryengine.agentFiles.delete discoveryengine.agentFiles.download discoveryengine.agentFiles.import discoveryengine.agentFiles.list discoveryengine.agentFiles.upload discoveryengine.agentIamProposals.* discoveryengine.agentIamProposals.create discoveryengine.agentIamProposals.delete discoveryengine.agentIamProposals.get discoveryengine.agentIamProposals.list discoveryengine.agents.create discoveryengine.agents.delete discoveryengine.agents.get discoveryengine.agents.getAgentView discoveryengine.agents.list discoveryengine.agents.listAvailableAgentViews discoveryengine.agents.requestReview discoveryengine.agents.update discoveryengine.answers.get discoveryengine.assistAnswers.get discoveryengine.assistants.assist discoveryengine.authorizations.storeUserAuthorization discoveryengine.cannedQueries.listActiveCannedQueryUserViews discoveryengine.completionConfigs.completeQuery discoveryengine.completionConfigs.removeSuggestion discoveryengine.dataConnectors.acquireAccessToken discoveryengine.dataConnectors.acquireAndStoreRefreshToken discoveryengine.dataConnectors.buildActionInvocation discoveryengine.dataConnectors.checkRefreshToken discoveryengine.dataConnectors.executeAction discoveryengine.dataConnectors.queryAvailableActions discoveryengine.engines.createEngineUserData discoveryengine.engines.generateMemories discoveryengine.engines.generatePersonalContext discoveryengine.engines.get discoveryengine.engines.getEngineUserData discoveryengine.engines.getPersonalContext discoveryengine.engines.updateEngineUserData discoveryengine.homepageDataConfigs.fetchDocuments discoveryengine.ideaForgeIdeas.* discoveryengine.ideaForgeIdeas.create discoveryengine.ideaForgeIdeas.get discoveryengine.ideaForgeInstances.* discoveryengine.ideaForgeInstances.get discoveryengine.ideaForgeInstances.start discoveryengine.locations.completeExternalIdentities discoveryengine.locations.fetchAgentCards discoveryengine.memories.* discoveryengine.memories.delete discoveryengine.memories.list discoveryengine.memories.retrieve discoveryengine.memories.update discoveryengine.notebooks.create discoveryengine.notebooks.list discoveryengine.notificationMessages.* discoveryengine.notificationMessages.ackAll discoveryengine.notificationMessages.list discoveryengine.notificationMessages.update discoveryengine.operations.get discoveryengine.podcasts.create discoveryengine.servingConfigs.answer discoveryengine.servingConfigs.recommend discoveryengine.servingConfigs.search discoveryengine.sessions.* discoveryengine.sessions.addContextFile discoveryengine.sessions.create discoveryengine.sessions.delete discoveryengine.sessions.downloadFile discoveryengine.sessions.generateSummary discoveryengine.sessions.get discoveryengine.sessions.list discoveryengine.sessions.listSessionFileMetadata discoveryengine.sessions.recommendQuestions discoveryengine.sessions.removeContextFile discoveryengine.sessions.search discoveryengine.sessions.selectContextFiles discoveryengine.sessions.update discoveryengine.sessions.uploadFile discoveryengine.sharedContents.* discoveryengine.sharedContents.create discoveryengine.sharedContents.delete discoveryengine.sharedContents.get discoveryengine.sharedContents.list discoveryengine.userEvents.create discoveryengine.users.* discoveryengine.users.get discoveryengine.users.update discoveryengine.widgetConfigs.get resourcemanager.projects.get resourcemanager.projects.list
Discovery Engine User (roles/discoveryengine.user) Grants user-level access to Discovery Engine resources.	businessaicode.* businessaicode.locations.generateContent businessaicode.locations.queryConfiguration businessaicode.locations.sendTelemetry cloudaicompanion.companions.* cloudaicompanion.companions.generateChat cloudaicompanion.companions.generateCode cloudaicompanion.entitlements.get cloudaicompanion.instances.* cloudaicompanion.instances.completeCode cloudaicompanion.instances.completeTask cloudaicompanion.instances.exportMetrics cloudaicompanion.instances.generateCode cloudaicompanion.instances.generateText cloudaicompanion.instances.queryEffectiveSetting cloudaicompanion.instances.queryEffectiveSettingBindings cloudaicompanion.licenses.selfAssign cloudaicompanion.operations.get cloudaicompanion.topics.create discoveryengine.accounts.create discoveryengine.agentFiles.* discoveryengine.agentFiles.delete discoveryengine.agentFiles.download discoveryengine.agentFiles.import discoveryengine.agentFiles.list discoveryengine.agentFiles.upload discoveryengine.agentIamProposals.* discoveryengine.agentIamProposals.create discoveryengine.agentIamProposals.delete discoveryengine.agentIamProposals.get discoveryengine.agentIamProposals.list discoveryengine.agents.create discoveryengine.agents.delete discoveryengine.agents.get discoveryengine.agents.getAgentView discoveryengine.agents.list discoveryengine.agents.listAvailableAgentViews discoveryengine.agents.requestReview discoveryengine.agents.update discoveryengine.answers.get discoveryengine.assistAnswers.get discoveryengine.assistants.assist discoveryengine.authorizations.storeUserAuthorization discoveryengine.cannedQueries.listActiveCannedQueryUserViews discoveryengine.completionConfigs.completeQuery discoveryengine.completionConfigs.removeSuggestion discoveryengine.dataConnectors.acquireAccessToken discoveryengine.dataConnectors.acquireAndStoreRefreshToken discoveryengine.dataConnectors.buildActionInvocation discoveryengine.dataConnectors.checkRefreshToken discoveryengine.dataConnectors.executeAction discoveryengine.dataConnectors.queryAvailableActions discoveryengine.engines.createEngineUserData discoveryengine.engines.generateMemories discoveryengine.engines.generatePersonalContext discoveryengine.engines.get discoveryengine.engines.getEngineUserData discoveryengine.engines.getPersonalContext discoveryengine.engines.updateEngineUserData discoveryengine.homepageDataConfigs.fetchDocuments discoveryengine.ideaForgeIdeas.* discoveryengine.ideaForgeIdeas.create discoveryengine.ideaForgeIdeas.get discoveryengine.ideaForgeInstances.* discoveryengine.ideaForgeInstances.get discoveryengine.ideaForgeInstances.start discoveryengine.locations.completeExternalIdentities discoveryengine.locations.fetchAgentCards discoveryengine.memories.* discoveryengine.memories.delete discoveryengine.memories.list discoveryengine.memories.retrieve discoveryengine.memories.update discoveryengine.notebooks.create discoveryengine.notebooks.list discoveryengine.notificationMessages.* discoveryengine.notificationMessages.ackAll discoveryengine.notificationMessages.list discoveryengine.notificationMessages.update discoveryengine.servingConfigs.answer discoveryengine.servingConfigs.recommend discoveryengine.servingConfigs.search discoveryengine.sessions.* discoveryengine.sessions.addContextFile discoveryengine.sessions.create discoveryengine.sessions.delete discoveryengine.sessions.downloadFile discoveryengine.sessions.generateSummary discoveryengine.sessions.get discoveryengine.sessions.list discoveryengine.sessions.listSessionFileMetadata discoveryengine.sessions.recommendQuestions discoveryengine.sessions.removeContextFile discoveryengine.sessions.search discoveryengine.sessions.selectContextFiles discoveryengine.sessions.update discoveryengine.sessions.uploadFile discoveryengine.sharedContents.* discoveryengine.sharedContents.create discoveryengine.sharedContents.delete discoveryengine.sharedContents.get discoveryengine.sharedContents.list discoveryengine.userEvents.create discoveryengine.users.* discoveryengine.users.get discoveryengine.users.update discoveryengine.widgetConfigs.get resourcemanager.projects.get resourcemanager.projects.list

Service agent roles

Service agent roles should only be granted to service agents.

Role

Permissions

Discovery Engine Service Agent (roles/discoveryengine.serviceAgent) Discovery Engine service uploads documents and user events from Cloud Storage and BigQuery, reports results to the customer Cloud Storage bucket, writes logs to customer projects using Cloud Logging, and writes and reads metrics for customer using Cloud Monitoring. Warning: Do not grant service agent roles to any principals except service agents.

agentregistry.agents.* agentregistry.agents.get agentregistry.agents.list agentregistry.mcpServers.* agentregistry.mcpServers.get agentregistry.mcpServers.list aiplatform.executions.create aiplatform.executions.delete aiplatform.executions.update aiplatform.extensions.* aiplatform.extensions.delete aiplatform.extensions.execute aiplatform.extensions.get aiplatform.extensions.import aiplatform.extensions.list aiplatform.extensions.update aiplatform.operations.list aiplatform.reasoningEngines.* aiplatform.reasoningEngines.create aiplatform.reasoningEngines.delete aiplatform.reasoningEngines.get aiplatform.reasoningEngines.list aiplatform.reasoningEngines.query aiplatform.reasoningEngines.update alloydb.clusters.export alloydb.databases.list alloydb.instances.get alloydb.operations.get bigquery.datasets.create bigquery.datasets.get bigquery.jobs.create bigquery.jobs.get bigquery.jobs.list bigquery.jobs.update bigquery.tables.create bigquery.tables.export bigquery.tables.get bigquery.tables.getData bigquery.tables.list bigquery.tables.update bigquery.tables.updateData bigtable.tables.readRows bigtable.tables.sampleRowKeys cloudsql.databases.get cloudsql.instances.export cloudsql.instances.get consumerprocurement.entitlements.list datastore.databases.export datastore.databases.get datastore.databases.getMetadata datastore.operations.get dialogflow.sessions.detectIntent discoveryengine.agents.create discoveryengine.agents.manage discoveryengine.completionConfigs.completeQuery discoveryengine.conversations.converse discoveryengine.conversations.create discoveryengine.dataStores.completeQuery discoveryengine.servingConfigs.answer discoveryengine.servingConfigs.search discoveryengine.userEvents.create integrations.apigeeExecutions.list integrations.apigeeIntegrationVers.get integrations.apigeeIntegrationVers.list integrations.integrationVersions.get integrations.integrationVersions.invoke integrations.integrationVersions.list integrations.integrations.get integrations.integrations.invoke integrations.integrations.list integrations.testCases.get integrations.testCases.invoke integrations.testCases.list logging.logEntries.create modelarmor.templates.useToSanitizeModelResponse modelarmor.templates.useToSanitizeUserPrompt monitoring.metricDescriptors.create monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list monitoring.timeSeries.* monitoring.timeSeries.create monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.list spanner.databases.beginReadOnlyTransaction spanner.databases.partitionQuery spanner.databases.select spanner.databases.useDataBoost spanner.sessions.create storage.buckets.create storage.buckets.get storage.buckets.getIamPolicy storage.buckets.setIamPolicy storage.managedFolders.* storage.managedFolders.create storage.managedFolders.delete storage.managedFolders.get storage.managedFolders.getIamPolicy storage.managedFolders.list storage.managedFolders.setIamPolicy storage.objects.create storage.objects.delete storage.objects.get storage.objects.list storage.objects.update

Discovery Engine permissions

Permission	Included in roles
discoveryengine.accounts.create	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM User (roles/discoveryengine.notebookLmUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.aclConfigs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Support User (roles/iam.supportUser)
discoveryengine.aclConfigs.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)
discoveryengine.agentFiles.delete	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Agent Admin (roles/discoveryengine.agentAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.agentFiles.download	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Agent Admin (roles/discoveryengine.agentAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.agentFiles.import	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Agent Admin (roles/discoveryengine.agentAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.agentFiles.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Agent Admin (roles/discoveryengine.agentAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.agentFiles.upload	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Agent Admin (roles/discoveryengine.agentAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.agentIamProposals.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.agentIamProposals.delete	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.agentIamProposals.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Agent Admin (roles/discoveryengine.agentAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.agentIamProposals.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Agent Admin (roles/discoveryengine.agentAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.agents.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Agent Admin (roles/discoveryengine.agentAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
discoveryengine.agents.delete	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Agent Admin (roles/discoveryengine.agentAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.agents.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Agent Admin (roles/discoveryengine.agentAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.agents.getAgentView	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.agents.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Agent Admin (roles/discoveryengine.agentAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.agents.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Agent Admin (roles/discoveryengine.agentAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.agents.listAvailableAgentViews	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.agents.manage	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Agent Admin (roles/discoveryengine.agentAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
discoveryengine.agents.requestReview	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.agents.setIamPolicy	Owner (roles/owner) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Agent Admin (roles/discoveryengine.agentAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.agents.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Agent Admin (roles/discoveryengine.agentAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.alertPolicies.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.alertPolicies.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.alertPolicies.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.analytics.acquireDashboardSession	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.analytics.refreshDashboardSessionTokens	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.answers.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.assistAnswers.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.assistants.assist	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.assistants.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.assistants.delete	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.assistants.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.assistants.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.assistants.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.audioOverviews.create	Owner (roles/owner) Editor (roles/editor) Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)
discoveryengine.audioOverviews.delete	Owner (roles/owner) Editor (roles/editor) Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)
discoveryengine.audioOverviews.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner) Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer) Support User (roles/iam.supportUser)
discoveryengine.audioOverviews.getIceConfig	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner) Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer) Support User (roles/iam.supportUser)
discoveryengine.audioOverviews.sendSdpOffer	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner) Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer) Support User (roles/iam.supportUser)
discoveryengine.authorizations.storeUserAuthorization	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Restricted User (roles/discoveryengine.agentspaceRestrictedUser) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.billingAccountLicenseConfigs.distribute	Owner (roles/owner) Billing Account Administrator (roles/billing.admin) Discovery Engine Admin (roles/discoveryengine.admin) Consumer Procurement Order Administrator (roles/consumerprocurement.orderAdmin) Consumer Procurement Administrator (roles/consumerprocurement.procurementAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.billingAccountLicenseConfigs.get	Owner (roles/owner) Billing Account Administrator (roles/billing.admin) Billing Account Viewer (roles/billing.viewer) Discovery Engine Admin (roles/discoveryengine.admin) Consumer Procurement Order Administrator (roles/consumerprocurement.orderAdmin) Consumer Procurement Order Viewer (roles/consumerprocurement.orderViewer) Consumer Procurement Administrator (roles/consumerprocurement.procurementAdmin) Consumer Procurement Viewer (roles/consumerprocurement.procurementViewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.billingAccountLicenseConfigs.list	Owner (roles/owner) Billing Account Administrator (roles/billing.admin) Billing Account Viewer (roles/billing.viewer) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Consumer Procurement Order Administrator (roles/consumerprocurement.orderAdmin) Consumer Procurement Order Viewer (roles/consumerprocurement.orderViewer) Consumer Procurement Administrator (roles/consumerprocurement.procurementAdmin) Consumer Procurement Viewer (roles/consumerprocurement.procurementViewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Security Auditor (roles/iam.securityAuditor)
discoveryengine.billingAccountLicenseConfigs.retract	Owner (roles/owner) Billing Account Administrator (roles/billing.admin) Discovery Engine Admin (roles/discoveryengine.admin) Consumer Procurement Order Administrator (roles/consumerprocurement.orderAdmin) Consumer Procurement Administrator (roles/consumerprocurement.procurementAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.branches.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.branches.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.cannedQueries.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.cannedQueries.delete	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.cannedQueries.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.cannedQueries.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.cannedQueries.listActiveCannedQueryUserViews	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.cannedQueries.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.cmekConfigs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.cmekConfigs.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.cmekConfigs.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.collections.delete	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.collections.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.collections.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent) Dialogflow Service Agent (roles/dialogflow.serviceAgent)
discoveryengine.completionConfigs.completeQuery	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
discoveryengine.completionConfigs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.completionConfigs.removeSuggestion	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.completionConfigs.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.completionSuggestions.import	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.completionSuggestions.purge	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.connectorRuns.cancel	Owner (roles/owner) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.connectorRuns.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.controls.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.controls.delete	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.controls.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.controls.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.controls.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.conversations.converse	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
discoveryengine.conversations.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
discoveryengine.conversations.delete	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)
discoveryengine.conversations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.conversations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.conversations.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)
discoveryengine.dataConnectors.acquireAccessToken	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Restricted User (roles/discoveryengine.agentspaceRestrictedUser) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.dataConnectors.acquireAndStoreRefreshToken	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Restricted User (roles/discoveryengine.agentspaceRestrictedUser) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.dataConnectors.buildActionInvocation	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Restricted User (roles/discoveryengine.agentspaceRestrictedUser) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.dataConnectors.checkRefreshToken	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Restricted User (roles/discoveryengine.agentspaceRestrictedUser) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.dataConnectors.executeAction	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Restricted User (roles/discoveryengine.agentspaceRestrictedUser) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.dataConnectors.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.dataConnectors.queryAvailableActions	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Restricted User (roles/discoveryengine.agentspaceRestrictedUser) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.dataConnectors.startConnectorRun	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.dataConnectors.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.dataStores.completeQuery	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (roles/discoveryengine.serviceAgent) SecLM Service Agent (roles/seclm.serviceAgent)
discoveryengine.dataStores.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent) Dialogflow Service Agent (roles/dialogflow.serviceAgent)
discoveryengine.dataStores.delete	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.dataStores.enrollSolutions	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.dataStores.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent) SecLM Service Agent (roles/seclm.serviceAgent)
discoveryengine.dataStores.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent) Dialogflow Service Agent (roles/dialogflow.serviceAgent) SecLM Service Agent (roles/seclm.serviceAgent)
discoveryengine.dataStores.listCustomModels	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.dataStores.trainCustomModel	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)
discoveryengine.dataStores.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.documentProcessingConfigs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.documentProcessingConfigs.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.documents.batchGetDocumentsMetadata	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.documents.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent) Dialogflow Service Agent (roles/dialogflow.serviceAgent)
discoveryengine.documents.delete	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)
discoveryengine.documents.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent) Dialogflow Service Agent (roles/dialogflow.serviceAgent)
discoveryengine.documents.import	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent) Dialogflow Service Agent (roles/dialogflow.serviceAgent)
discoveryengine.documents.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent) Dialogflow Service Agent (roles/dialogflow.serviceAgent)
discoveryengine.documents.purge	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.documents.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent) Dialogflow Service Agent (roles/dialogflow.serviceAgent)
discoveryengine.engines.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent) Dialogflow Service Agent (roles/dialogflow.serviceAgent)
discoveryengine.engines.createEngineUserData	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.engines.delete	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent) Dialogflow Service Agent (roles/dialogflow.serviceAgent)
discoveryengine.engines.generateMemories	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.engines.generatePersonalContext	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.engines.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent) Dialogflow Service Agent (roles/dialogflow.serviceAgent)
discoveryengine.engines.getEngineUserData	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.engines.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.engines.getPersonalContext	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.engines.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.engines.pause	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)
discoveryengine.engines.resume	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)
discoveryengine.engines.setIamPolicy	Owner (roles/owner) Discovery Engine Admin (roles/discoveryengine.admin) Security Admin (roles/iam.securityAdmin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.engines.tune	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)
discoveryengine.engines.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent) Dialogflow Service Agent (roles/dialogflow.serviceAgent)
discoveryengine.engines.updateEngineUserData	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.evaluations.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.evaluations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.evaluations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.groundingConfigs.check	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.homepageDataConfigs.fetchDocuments	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.ideaForgeIdeas.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.ideaForgeIdeas.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.ideaForgeInstances.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.ideaForgeInstances.start	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.identityMappingStores.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)
discoveryengine.identityMappingStores.delete	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)
discoveryengine.identityMappingStores.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.identityMappingStores.importIdentityMappings	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)
discoveryengine.identityMappingStores.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.identityMappingStores.listIdentityMappings	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.identityMappingStores.purgeIdentityMappings	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)
discoveryengine.licenseConfigs.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.licenseConfigs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Support User (roles/iam.supportUser)
discoveryengine.licenseConfigs.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.licenseConfigs.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.locations.completeExternalIdentities	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM User (roles/discoveryengine.notebookLmUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.locations.estimateDataSize	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser)
discoveryengine.locations.exchangeAuthCredentials	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser)
discoveryengine.locations.fetchAgentCards	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Restricted User (roles/discoveryengine.agentspaceRestrictedUser) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.locations.getConnectorSource	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser)
discoveryengine.locations.listConnectorSources	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser)
discoveryengine.locations.setUpDataConnector	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.memories.delete	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.memories.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.memories.retrieve	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.memories.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.models.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)
discoveryengine.models.delete	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)
discoveryengine.models.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.models.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.models.pause	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)
discoveryengine.models.resume	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)
discoveryengine.models.tune	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)
discoveryengine.models.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)
discoveryengine.notebooks.create	Owner (roles/owner) Editor (roles/editor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM User (roles/discoveryengine.notebookLmUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.notebooks.generateGuide	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner) Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer) Support User (roles/iam.supportUser)
discoveryengine.notebooks.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner) Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer) Support User (roles/iam.supportUser)
discoveryengine.notebooks.getAnalytics	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner) Support User (roles/iam.supportUser)
discoveryengine.notebooks.getIamPolicy	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner) Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.notebooks.interactSources	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner) Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer) Support User (roles/iam.supportUser)
discoveryengine.notebooks.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM User (roles/discoveryengine.notebookLmUser) Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner) Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.notebooks.removeSelf	Owner (roles/owner) Editor (roles/editor) Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner) Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)
discoveryengine.notebooks.setIamPolicy	Owner (roles/owner) Security Admin (roles/iam.securityAdmin) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)
discoveryengine.notebooks.update	Owner (roles/owner) Editor (roles/editor) Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)
discoveryengine.notes.create	Owner (roles/owner) Editor (roles/editor) Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)
discoveryengine.notes.delete	Owner (roles/owner) Editor (roles/editor) Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)
discoveryengine.notes.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner) Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer) Support User (roles/iam.supportUser)
discoveryengine.notes.update	Owner (roles/owner) Editor (roles/editor) Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)
discoveryengine.notificationMessages.ackAll	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.notificationMessages.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.notificationMessages.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Support User (roles/iam.supportUser)
discoveryengine.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.podcasts.create	Owner (roles/owner) Editor (roles/editor) Podcast API User (roles/discoveryengine.podcastApiUser)
discoveryengine.projects.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.projects.provision	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.projects.reportConsentChange	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.rankingConfigs.rank	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
discoveryengine.sampleQueries.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)
discoveryengine.sampleQueries.delete	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)
discoveryengine.sampleQueries.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.sampleQueries.import	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)
discoveryengine.sampleQueries.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.sampleQueries.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)
discoveryengine.sampleQuerySets.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)
discoveryengine.sampleQuerySets.delete	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)
discoveryengine.sampleQuerySets.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.sampleQuerySets.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.sampleQuerySets.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)
discoveryengine.schemas.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.schemas.delete	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.schemas.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent) Dialogflow Service Agent (roles/dialogflow.serviceAgent)
discoveryengine.schemas.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (roles/ces.serviceAgent) Dialogflow Service Agent (roles/dialogflow.serviceAgent)
discoveryengine.schemas.preview	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.schemas.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.schemas.validate	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.servingConfigs.answer	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
discoveryengine.servingConfigs.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.servingConfigs.delete	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.servingConfigs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.servingConfigs.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.servingConfigs.recommend	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.servingConfigs.search	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Extension Service Agent (roles/aiplatform.extensionServiceAgent) Customer Engagement Suite Service Agent (roles/ces.serviceAgent) Dialogflow Service Agent (roles/dialogflow.serviceAgent) Discovery Engine Service Agent (roles/discoveryengine.serviceAgent) SecLM Service Agent (roles/seclm.serviceAgent)
discoveryengine.servingConfigs.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.sessions.addContextFile	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.sessions.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.sessions.delete	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.sessions.downloadFile	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.sessions.generateSummary	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.sessions.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.sessions.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.sessions.listSessionFileMetadata	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.sessions.recommendQuestions	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.sessions.removeContextFile	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.sessions.search	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.sessions.selectContextFiles	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.sessions.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.sessions.uploadFile	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.sharedContents.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.sharedContents.delete	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.sharedContents.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.sharedContents.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.siteSearchEngines.batchVerifyTargetSites	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.siteSearchEngines.disableAdvancedSiteSearch	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.siteSearchEngines.enableAdvancedSiteSearch	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.siteSearchEngines.fetchDomainVerificationStatus	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser)
discoveryengine.siteSearchEngines.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.siteSearchEngines.recrawlUris	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.sitemaps.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.sitemaps.delete	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.sitemaps.fetch	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser)
discoveryengine.sources.checkFreshness	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner) Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer) Support User (roles/iam.supportUser)
discoveryengine.sources.create	Owner (roles/owner) Editor (roles/editor) Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)
discoveryengine.sources.delete	Owner (roles/owner) Editor (roles/editor) Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)
discoveryengine.sources.generateDocumentGuide	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner) Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer) Support User (roles/iam.supportUser)
discoveryengine.sources.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner) Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer) Support User (roles/iam.supportUser)
discoveryengine.sources.refresh	Owner (roles/owner) Editor (roles/editor) Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)
discoveryengine.sources.update	Owner (roles/owner) Editor (roles/editor) Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor) Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner) Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)
discoveryengine.suggestionDenyListEntries.import	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.suggestionDenyListEntries.purge	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.targetSites.batchCreate	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.targetSites.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.targetSites.delete	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.targetSites.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.targetSites.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
discoveryengine.targetSites.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.userEvents.create	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Restricted User (roles/discoveryengine.agentspaceRestrictedUser) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
discoveryengine.userEvents.fetchStats	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.userEvents.import	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)
discoveryengine.userEvents.purge	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.userStores.batchUpdateUserLicenses	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.userStores.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Support User (roles/iam.supportUser)
discoveryengine.userStores.listUserLicenses	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Support User (roles/iam.supportUser)
discoveryengine.userStores.update	Owner (roles/owner) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)
discoveryengine.users.get	Owner (roles/owner) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Restricted User (roles/discoveryengine.agentspaceRestrictedUser) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.users.update	Owner (roles/owner) Discovery Engine Admin (roles/discoveryengine.admin) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Restricted User (roles/discoveryengine.agentspaceRestrictedUser) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user)
discoveryengine.widgetConfigs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Discovery Engine Viewer (roles/discoveryengine.viewer) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor) Gemini Enterprise User (roles/discoveryengine.agentspaceUser) Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer) Podcast API User (roles/discoveryengine.podcastApiUser) Discovery Engine User (roles/discoveryengine.user) Support User (roles/iam.supportUser)
discoveryengine.widgetConfigs.update	Owner (roles/owner) Editor (roles/editor) Discovery Engine Admin (roles/discoveryengine.admin) Discovery Engine Editor (roles/discoveryengine.editor) Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin) Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)