Discovery Engine roles and permissions

This page lists the IAM roles and permissions for Discovery Engine. To search through all roles and permissions, see the role and permission index.

Discovery Engine roles

Role Permissions

Role	Permissions
Discovery Engine Admin (`roles/discoveryengine.admin`) Grants full access to all discoveryengine resources.	`cloudaicompanion.aiDevToolsSettings.` `cloudaicompanion.aiDevToolsSettings.create` `cloudaicompanion.aiDevToolsSettings.delete` `cloudaicompanion.aiDevToolsSettings.get` `cloudaicompanion.aiDevToolsSettings.list` `cloudaicompanion.aiDevToolsSettings.update` `cloudaicompanion.codeRepositoryIndexes.` `cloudaicompanion.codeRepositoryIndexes.create` `cloudaicompanion.codeRepositoryIndexes.delete` `cloudaicompanion.codeRepositoryIndexes.get` `cloudaicompanion.codeRepositoryIndexes.list` `cloudaicompanion.codeRepositoryIndexes.update` `cloudaicompanion.codeToolsSettings.` `cloudaicompanion.codeToolsSettings.create` `cloudaicompanion.codeToolsSettings.delete` `cloudaicompanion.codeToolsSettings.get` `cloudaicompanion.codeToolsSettings.list` `cloudaicompanion.codeToolsSettings.update` `cloudaicompanion.dataSharingWithGoogleSettings.` `cloudaicompanion.dataSharingWithGoogleSettings.create` `cloudaicompanion.dataSharingWithGoogleSettings.delete` `cloudaicompanion.dataSharingWithGoogleSettings.get` `cloudaicompanion.dataSharingWithGoogleSettings.list` `cloudaicompanion.dataSharingWithGoogleSettings.update` `cloudaicompanion.geminiGcpEnablementSettings.` `cloudaicompanion.geminiGcpEnablementSettings.create` `cloudaicompanion.geminiGcpEnablementSettings.delete` `cloudaicompanion.geminiGcpEnablementSettings.get` `cloudaicompanion.geminiGcpEnablementSettings.list` `cloudaicompanion.geminiGcpEnablementSettings.update` `cloudaicompanion.instances.queryEffectiveSetting` `cloudaicompanion.instances.queryEffectiveSettingBindings` `cloudaicompanion.loggingSettings.` `cloudaicompanion.loggingSettings.create` `cloudaicompanion.loggingSettings.delete` `cloudaicompanion.loggingSettings.get` `cloudaicompanion.loggingSettings.list` `cloudaicompanion.loggingSettings.update` `cloudaicompanion.operations.` `cloudaicompanion.operations.cancel` `cloudaicompanion.operations.delete` `cloudaicompanion.operations.get` `cloudaicompanion.operations.list` `cloudaicompanion.releaseChannelSettings.` `cloudaicompanion.releaseChannelSettings.create` `cloudaicompanion.releaseChannelSettings.delete` `cloudaicompanion.releaseChannelSettings.get` `cloudaicompanion.releaseChannelSettings.list` `cloudaicompanion.releaseChannelSettings.update` `cloudaicompanion.repositoryGroups.create` `cloudaicompanion.repositoryGroups.delete` `cloudaicompanion.repositoryGroups.get` `cloudaicompanion.repositoryGroups.getIamPolicy` `cloudaicompanion.repositoryGroups.list` `cloudaicompanion.repositoryGroups.setIamPolicy` `cloudaicompanion.repositoryGroups.update` `cloudaicompanion.settingBindings.` `cloudaicompanion.settingBindings.aiDevToolsSettingsCreate` `cloudaicompanion.settingBindings.aiDevToolsSettingsDelete` `cloudaicompanion.settingBindings.aiDevToolsSettingsGet` `cloudaicompanion.settingBindings.aiDevToolsSettingsList` `cloudaicompanion.settingBindings.aiDevToolsSettingsUpdate` `cloudaicompanion.settingBindings.aiDevToolsSettingsUse` `cloudaicompanion.settingBindings.codeToolsSettingsCreate` `cloudaicompanion.settingBindings.codeToolsSettingsDelete` `cloudaicompanion.settingBindings.codeToolsSettingsGet` `cloudaicompanion.settingBindings.codeToolsSettingsList` `cloudaicompanion.settingBindings.codeToolsSettingsUpdate` `cloudaicompanion.settingBindings.codeToolsSettingsUse` `cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsCreate` `cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsDelete` `cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsGet` `cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsList` `cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsUpdate` `cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsUse` `cloudaicompanion.settingBindings.geminiGcpEnablementSettingsCreate` `cloudaicompanion.settingBindings.geminiGcpEnablementSettingsDelete` `cloudaicompanion.settingBindings.geminiGcpEnablementSettingsGet` `cloudaicompanion.settingBindings.geminiGcpEnablementSettingsList` `cloudaicompanion.settingBindings.geminiGcpEnablementSettingsUpdate` `cloudaicompanion.settingBindings.geminiGcpEnablementSettingsUse` `cloudaicompanion.settingBindings.loggingSettingsCreate` `cloudaicompanion.settingBindings.loggingSettingsDelete` `cloudaicompanion.settingBindings.loggingSettingsGet` `cloudaicompanion.settingBindings.loggingSettingsList` `cloudaicompanion.settingBindings.loggingSettingsUpdate` `cloudaicompanion.settingBindings.loggingSettingsUse` `cloudaicompanion.settingBindings.releaseChannelSettingsCreate` `cloudaicompanion.settingBindings.releaseChannelSettingsDelete` `cloudaicompanion.settingBindings.releaseChannelSettingsGet` `cloudaicompanion.settingBindings.releaseChannelSettingsList` `cloudaicompanion.settingBindings.releaseChannelSettingsUpdate` `cloudaicompanion.settingBindings.releaseChannelSettingsUse` `cloudnotifications.activities.list` `cloudtrace.insights.` `cloudtrace.insights.get` `cloudtrace.insights.list` `cloudtrace.stats.get` `cloudtrace.tasks.` `cloudtrace.tasks.create` `cloudtrace.tasks.delete` `cloudtrace.tasks.get` `cloudtrace.tasks.list` `cloudtrace.traceScopes.` `cloudtrace.traceScopes.create` `cloudtrace.traceScopes.delete` `cloudtrace.traceScopes.get` `cloudtrace.traceScopes.list` `cloudtrace.traceScopes.update` `cloudtrace.traces.get` `cloudtrace.traces.list` `consumerprocurement.entitlements.` `consumerprocurement.entitlements.get` `consumerprocurement.entitlements.list` `discoveryengine.aclConfigs.` `discoveryengine.aclConfigs.get` `discoveryengine.aclConfigs.update` `discoveryengine.agentFiles.` `discoveryengine.agentFiles.delete` `discoveryengine.agentFiles.download` `discoveryengine.agentFiles.import` `discoveryengine.agentFiles.list` `discoveryengine.agentFiles.upload` `discoveryengine.agentIamProposals.` `discoveryengine.agentIamProposals.create` `discoveryengine.agentIamProposals.delete` `discoveryengine.agentIamProposals.get` `discoveryengine.agentIamProposals.list` `discoveryengine.agents.create` `discoveryengine.agents.delete` `discoveryengine.agents.get` `discoveryengine.agents.getAgentView` `discoveryengine.agents.getIamPolicy` `discoveryengine.agents.list` `discoveryengine.agents.listAvailableAgentViews` `discoveryengine.agents.manage` `discoveryengine.agents.setIamPolicy` `discoveryengine.agents.update` `discoveryengine.alertPolicies.` `discoveryengine.alertPolicies.create` `discoveryengine.alertPolicies.get` `discoveryengine.alertPolicies.update` `discoveryengine.analytics.` `discoveryengine.analytics.acquireDashboardSession` `discoveryengine.analytics.refreshDashboardSessionTokens` `discoveryengine.answers.get` `discoveryengine.assistAnswers.get` `discoveryengine.assistants.` `discoveryengine.assistants.assist` `discoveryengine.assistants.create` `discoveryengine.assistants.delete` `discoveryengine.assistants.get` `discoveryengine.assistants.list` `discoveryengine.assistants.update` `discoveryengine.authorizations.` `discoveryengine.authorizations.create` `discoveryengine.authorizations.delete` `discoveryengine.authorizations.get` `discoveryengine.authorizations.list` `discoveryengine.authorizations.storeUserAuthorization` `discoveryengine.authorizations.update` `discoveryengine.billingAccountLicenseConfigs.` `discoveryengine.billingAccountLicenseConfigs.distribute` `discoveryengine.billingAccountLicenseConfigs.get` `discoveryengine.billingAccountLicenseConfigs.list` `discoveryengine.billingAccountLicenseConfigs.retract` `discoveryengine.branches.` `discoveryengine.branches.get` `discoveryengine.branches.list` `discoveryengine.cannedQueries.` `discoveryengine.cannedQueries.create` `discoveryengine.cannedQueries.delete` `discoveryengine.cannedQueries.get` `discoveryengine.cannedQueries.list` `discoveryengine.cannedQueries.listActiveCannedQueryUserViews` `discoveryengine.cannedQueries.update` `discoveryengine.cmekConfigs.` `discoveryengine.cmekConfigs.get` `discoveryengine.cmekConfigs.list` `discoveryengine.cmekConfigs.update` `discoveryengine.collections.` `discoveryengine.collections.delete` `discoveryengine.collections.get` `discoveryengine.collections.getIamPolicy` `discoveryengine.collections.list` `discoveryengine.collections.setIamPolicy` `discoveryengine.completionConfigs.` `discoveryengine.completionConfigs.completeQuery` `discoveryengine.completionConfigs.get` `discoveryengine.completionConfigs.removeSuggestion` `discoveryengine.completionConfigs.update` `discoveryengine.completionSuggestions.` `discoveryengine.completionSuggestions.import` `discoveryengine.completionSuggestions.purge` `discoveryengine.connectorRuns.` `discoveryengine.connectorRuns.cancel` `discoveryengine.connectorRuns.list` `discoveryengine.controls.` `discoveryengine.controls.create` `discoveryengine.controls.delete` `discoveryengine.controls.get` `discoveryengine.controls.list` `discoveryengine.controls.update` `discoveryengine.conversations.` `discoveryengine.conversations.converse` `discoveryengine.conversations.create` `discoveryengine.conversations.delete` `discoveryengine.conversations.get` `discoveryengine.conversations.list` `discoveryengine.conversations.update` `discoveryengine.dataConnectors.` `discoveryengine.dataConnectors.acquireAccessToken` `discoveryengine.dataConnectors.acquireAndStoreRefreshToken` `discoveryengine.dataConnectors.buildActionInvocation` `discoveryengine.dataConnectors.checkRefreshToken` `discoveryengine.dataConnectors.executeAction` `discoveryengine.dataConnectors.get` `discoveryengine.dataConnectors.queryAvailableActions` `discoveryengine.dataConnectors.startConnectorRun` `discoveryengine.dataConnectors.update` `discoveryengine.dataStores.` `discoveryengine.dataStores.completeQuery` `discoveryengine.dataStores.create` `discoveryengine.dataStores.delete` `discoveryengine.dataStores.enrollSolutions` `discoveryengine.dataStores.get` `discoveryengine.dataStores.getIamPolicy` `discoveryengine.dataStores.list` `discoveryengine.dataStores.listCustomModels` `discoveryengine.dataStores.setIamPolicy` `discoveryengine.dataStores.trainCustomModel` `discoveryengine.dataStores.update` `discoveryengine.devToolsConfigs.` `discoveryengine.devToolsConfigs.get` `discoveryengine.devToolsConfigs.update` `discoveryengine.documentProcessingConfigs.` `discoveryengine.documentProcessingConfigs.get` `discoveryengine.documentProcessingConfigs.update` `discoveryengine.documents.` `discoveryengine.documents.batchGetDocumentsMetadata` `discoveryengine.documents.create` `discoveryengine.documents.delete` `discoveryengine.documents.get` `discoveryengine.documents.import` `discoveryengine.documents.list` `discoveryengine.documents.purge` `discoveryengine.documents.update` `discoveryengine.engines.` `discoveryengine.engines.create` `discoveryengine.engines.createEngineUserData` `discoveryengine.engines.delete` `discoveryengine.engines.generateMemories` `discoveryengine.engines.generatePersonalContext` `discoveryengine.engines.get` `discoveryengine.engines.getEngineUserData` `discoveryengine.engines.getIamPolicy` `discoveryengine.engines.getPersonalContext` `discoveryengine.engines.list` `discoveryengine.engines.pause` `discoveryengine.engines.resume` `discoveryengine.engines.setIamPolicy` `discoveryengine.engines.tune` `discoveryengine.engines.update` `discoveryengine.engines.updateEngineUserData` `discoveryengine.evaluations.` `discoveryengine.evaluations.create` `discoveryengine.evaluations.get` `discoveryengine.evaluations.list` `discoveryengine.groundingConfigs.check` `discoveryengine.homepageDataConfigs.fetchDocuments` `discoveryengine.ideaForgeIdeas.` `discoveryengine.ideaForgeIdeas.create` `discoveryengine.ideaForgeIdeas.get` `discoveryengine.ideaForgeInstances.` `discoveryengine.ideaForgeInstances.get` `discoveryengine.ideaForgeInstances.start` `discoveryengine.identityMappingStores.` `discoveryengine.identityMappingStores.create` `discoveryengine.identityMappingStores.delete` `discoveryengine.identityMappingStores.get` `discoveryengine.identityMappingStores.importIdentityMappings` `discoveryengine.identityMappingStores.list` `discoveryengine.identityMappingStores.listIdentityMappings` `discoveryengine.identityMappingStores.purgeIdentityMappings` `discoveryengine.licenseConfigs.` `discoveryengine.licenseConfigs.create` `discoveryengine.licenseConfigs.get` `discoveryengine.licenseConfigs.list` `discoveryengine.licenseConfigs.update` `discoveryengine.locations.` `discoveryengine.locations.completeExternalIdentities` `discoveryengine.locations.estimateDataSize` `discoveryengine.locations.exchangeAuthCredentials` `discoveryengine.locations.fetchAgentCards` `discoveryengine.locations.getConnectorSource` `discoveryengine.locations.listConnectorSources` `discoveryengine.locations.setUpDataConnector` `discoveryengine.memories.` `discoveryengine.memories.delete` `discoveryengine.memories.list` `discoveryengine.memories.retrieve` `discoveryengine.memories.update` `discoveryengine.models.` `discoveryengine.models.create` `discoveryengine.models.delete` `discoveryengine.models.get` `discoveryengine.models.list` `discoveryengine.models.pause` `discoveryengine.models.resume` `discoveryengine.models.tune` `discoveryengine.models.update` `discoveryengine.notificationMessages.` `discoveryengine.notificationMessages.ackAll` `discoveryengine.notificationMessages.list` `discoveryengine.notificationMessages.update` `discoveryengine.operations.` `discoveryengine.operations.get` `discoveryengine.operations.list` `discoveryengine.projectOverageConfigs.get` `discoveryengine.projects.` `discoveryengine.projects.get` `discoveryengine.projects.provision` `discoveryengine.projects.reportConsentChange` `discoveryengine.projects.update` `discoveryengine.rankingConfigs.rank` `discoveryengine.sampleQueries.` `discoveryengine.sampleQueries.create` `discoveryengine.sampleQueries.delete` `discoveryengine.sampleQueries.get` `discoveryengine.sampleQueries.import` `discoveryengine.sampleQueries.list` `discoveryengine.sampleQueries.update` `discoveryengine.sampleQuerySets.` `discoveryengine.sampleQuerySets.create` `discoveryengine.sampleQuerySets.delete` `discoveryengine.sampleQuerySets.get` `discoveryengine.sampleQuerySets.list` `discoveryengine.sampleQuerySets.update` `discoveryengine.schemas.` `discoveryengine.schemas.create` `discoveryengine.schemas.delete` `discoveryengine.schemas.get` `discoveryengine.schemas.list` `discoveryengine.schemas.preview` `discoveryengine.schemas.update` `discoveryengine.schemas.validate` `discoveryengine.servingConfigs.` `discoveryengine.servingConfigs.answer` `discoveryengine.servingConfigs.create` `discoveryengine.servingConfigs.delete` `discoveryengine.servingConfigs.get` `discoveryengine.servingConfigs.list` `discoveryengine.servingConfigs.recommend` `discoveryengine.servingConfigs.search` `discoveryengine.servingConfigs.update` `discoveryengine.sessions.` `discoveryengine.sessions.addContextFile` `discoveryengine.sessions.create` `discoveryengine.sessions.delete` `discoveryengine.sessions.downloadFile` `discoveryengine.sessions.generateSummary` `discoveryengine.sessions.get` `discoveryengine.sessions.list` `discoveryengine.sessions.listSessionFileMetadata` `discoveryengine.sessions.recommendQuestions` `discoveryengine.sessions.removeContextFile` `discoveryengine.sessions.search` `discoveryengine.sessions.selectContextFiles` `discoveryengine.sessions.update` `discoveryengine.sessions.uploadFile` `discoveryengine.sharedContents.` `discoveryengine.sharedContents.create` `discoveryengine.sharedContents.delete` `discoveryengine.sharedContents.get` `discoveryengine.sharedContents.list` `discoveryengine.siteSearchEngines.` `discoveryengine.siteSearchEngines.batchVerifyTargetSites` `discoveryengine.siteSearchEngines.disableAdvancedSiteSearch` `discoveryengine.siteSearchEngines.enableAdvancedSiteSearch` `discoveryengine.siteSearchEngines.fetchDomainVerificationStatus` `discoveryengine.siteSearchEngines.get` `discoveryengine.siteSearchEngines.recrawlUris` `discoveryengine.sitemaps.` `discoveryengine.sitemaps.create` `discoveryengine.sitemaps.delete` `discoveryengine.sitemaps.fetch` `discoveryengine.suggestionDenyListEntries.` `discoveryengine.suggestionDenyListEntries.import` `discoveryengine.suggestionDenyListEntries.purge` `discoveryengine.targetSites.` `discoveryengine.targetSites.batchCreate` `discoveryengine.targetSites.create` `discoveryengine.targetSites.delete` `discoveryengine.targetSites.get` `discoveryengine.targetSites.list` `discoveryengine.targetSites.update` `discoveryengine.userEvents.` `discoveryengine.userEvents.create` `discoveryengine.userEvents.fetchStats` `discoveryengine.userEvents.import` `discoveryengine.userEvents.purge` `discoveryengine.userStores.` `discoveryengine.userStores.batchUpdateUserLicenses` `discoveryengine.userStores.get` `discoveryengine.userStores.listUserLicenses` `discoveryengine.userStores.update` `discoveryengine.users.` `discoveryengine.users.get` `discoveryengine.users.update` `discoveryengine.widgetConfigs.` `discoveryengine.widgetConfigs.get` `discoveryengine.widgetConfigs.update` `logging.buckets.get` `logging.buckets.list` `logging.exclusions.get` `logging.exclusions.list` `logging.links.get` `logging.links.list` `logging.locations.` `logging.locations.get` `logging.locations.list` `logging.logEntries.list` `logging.logMetrics.get` `logging.logMetrics.list` `logging.logScopes.get` `logging.logScopes.list` `logging.logServiceIndexes.list` `logging.logServices.list` `logging.logs.list` `logging.operations.get` `logging.operations.list` `logging.queries.getShared` `logging.queries.listShared` `logging.queries.usePrivate` `logging.sinks.get` `logging.sinks.list` `logging.usage.get` `logging.views.get` `logging.views.list` `monitoring.alertPolicies.get` `monitoring.alertPolicies.list` `monitoring.alertPolicies.listEffectiveTags` `monitoring.alertPolicies.listTagBindings` `monitoring.alerts.` `monitoring.alerts.get` `monitoring.alerts.list` `monitoring.dashboards.get` `monitoring.dashboards.list` `monitoring.dashboards.listEffectiveTags` `monitoring.dashboards.listTagBindings` `monitoring.groups.get` `monitoring.groups.list` `monitoring.metricDescriptors.get` `monitoring.metricDescriptors.list` `monitoring.monitoredResourceDescriptors.` `monitoring.monitoredResourceDescriptors.get` `monitoring.monitoredResourceDescriptors.list` `monitoring.notificationChannelDescriptors.` `monitoring.notificationChannelDescriptors.get` `monitoring.notificationChannelDescriptors.list` `monitoring.notificationChannels.get` `monitoring.notificationChannels.list` `monitoring.services.get` `monitoring.services.list` `monitoring.slos.get` `monitoring.slos.list` `monitoring.snoozes.get` `monitoring.snoozes.list` `monitoring.timeSeries.list` `monitoring.uptimeCheckConfigs.get` `monitoring.uptimeCheckConfigs.list` `observability.scopes.get` `observability.traceScopes.` `observability.traceScopes.create` `observability.traceScopes.delete` `observability.traceScopes.get` `observability.traceScopes.list` `observability.traceScopes.update` `opsconfigmonitoring.resourceMetadata.list` `resourcemanager.projects.get` `resourcemanager.projects.list` `stackdriver.projects.get` `stackdriver.resourceMetadata.list`
Agent Admin ^Beta (`roles/discoveryengine.agentAdmin`) Grants admin-level access to Agent resources.	`discoveryengine.agentFiles.*` `discoveryengine.agentFiles.delete` `discoveryengine.agentFiles.download` `discoveryengine.agentFiles.import` `discoveryengine.agentFiles.list` `discoveryengine.agentFiles.upload` `discoveryengine.agentIamProposals.get` `discoveryengine.agentIamProposals.list` `discoveryengine.agents.create` `discoveryengine.agents.delete` `discoveryengine.agents.get` `discoveryengine.agents.getIamPolicy` `discoveryengine.agents.list` `discoveryengine.agents.manage` `discoveryengine.agents.setIamPolicy` `discoveryengine.agents.update`
Discovery Engine Editor (`roles/discoveryengine.editor`) Grants read and write access to all discovery engine resources.	`discoveryengine.aclConfigs.get` `discoveryengine.agentFiles.` `discoveryengine.agentFiles.delete` `discoveryengine.agentFiles.download` `discoveryengine.agentFiles.import` `discoveryengine.agentFiles.list` `discoveryengine.agentFiles.upload` `discoveryengine.agents.create` `discoveryengine.agents.delete` `discoveryengine.agents.get` `discoveryengine.agents.getAgentView` `discoveryengine.agents.getIamPolicy` `discoveryengine.agents.list` `discoveryengine.agents.listAvailableAgentViews` `discoveryengine.agents.manage` `discoveryengine.agents.update` `discoveryengine.alertPolicies.get` `discoveryengine.analytics.` `discoveryengine.analytics.acquireDashboardSession` `discoveryengine.analytics.refreshDashboardSessionTokens` `discoveryengine.answers.get` `discoveryengine.assistAnswers.get` `discoveryengine.assistants.assist` `discoveryengine.assistants.get` `discoveryengine.assistants.list` `discoveryengine.authorizations.storeUserAuthorization` `discoveryengine.branches.` `discoveryengine.branches.get` `discoveryengine.branches.list` `discoveryengine.cannedQueries.get` `discoveryengine.cannedQueries.list` `discoveryengine.cannedQueries.listActiveCannedQueryUserViews` `discoveryengine.cmekConfigs.get` `discoveryengine.cmekConfigs.list` `discoveryengine.collections.get` `discoveryengine.collections.list` `discoveryengine.completionConfigs.completeQuery` `discoveryengine.completionConfigs.get` `discoveryengine.completionConfigs.removeSuggestion` `discoveryengine.connectorRuns.list` `discoveryengine.controls.get` `discoveryengine.controls.list` `discoveryengine.conversations.` `discoveryengine.conversations.converse` `discoveryengine.conversations.create` `discoveryengine.conversations.delete` `discoveryengine.conversations.get` `discoveryengine.conversations.list` `discoveryengine.conversations.update` `discoveryengine.dataConnectors.acquireAccessToken` `discoveryengine.dataConnectors.acquireAndStoreRefreshToken` `discoveryengine.dataConnectors.buildActionInvocation` `discoveryengine.dataConnectors.checkRefreshToken` `discoveryengine.dataConnectors.executeAction` `discoveryengine.dataConnectors.get` `discoveryengine.dataConnectors.queryAvailableActions` `discoveryengine.dataStores.completeQuery` `discoveryengine.dataStores.get` `discoveryengine.dataStores.list` `discoveryengine.dataStores.listCustomModels` `discoveryengine.dataStores.trainCustomModel` `discoveryengine.devToolsConfigs.get` `discoveryengine.documentProcessingConfigs.get` `discoveryengine.documents.batchGetDocumentsMetadata` `discoveryengine.documents.create` `discoveryengine.documents.delete` `discoveryengine.documents.get` `discoveryengine.documents.import` `discoveryengine.documents.list` `discoveryengine.documents.update` `discoveryengine.engines.createEngineUserData` `discoveryengine.engines.generateMemories` `discoveryengine.engines.generatePersonalContext` `discoveryengine.engines.get` `discoveryengine.engines.getEngineUserData` `discoveryengine.engines.getPersonalContext` `discoveryengine.engines.list` `discoveryengine.engines.pause` `discoveryengine.engines.resume` `discoveryengine.engines.tune` `discoveryengine.engines.updateEngineUserData` `discoveryengine.evaluations.get` `discoveryengine.evaluations.list` `discoveryengine.groundingConfigs.check` `discoveryengine.homepageDataConfigs.fetchDocuments` `discoveryengine.ideaForgeIdeas.` `discoveryengine.ideaForgeIdeas.create` `discoveryengine.ideaForgeIdeas.get` `discoveryengine.ideaForgeInstances.` `discoveryengine.ideaForgeInstances.get` `discoveryengine.ideaForgeInstances.start` `discoveryengine.identityMappingStores.` `discoveryengine.identityMappingStores.create` `discoveryengine.identityMappingStores.delete` `discoveryengine.identityMappingStores.get` `discoveryengine.identityMappingStores.importIdentityMappings` `discoveryengine.identityMappingStores.list` `discoveryengine.identityMappingStores.listIdentityMappings` `discoveryengine.identityMappingStores.purgeIdentityMappings` `discoveryengine.licenseConfigs.get` `discoveryengine.licenseConfigs.list` `discoveryengine.locations.completeExternalIdentities` `discoveryengine.locations.fetchAgentCards` `discoveryengine.memories.` `discoveryengine.memories.delete` `discoveryengine.memories.list` `discoveryengine.memories.retrieve` `discoveryengine.memories.update` `discoveryengine.models.` `discoveryengine.models.create` `discoveryengine.models.delete` `discoveryengine.models.get` `discoveryengine.models.list` `discoveryengine.models.pause` `discoveryengine.models.resume` `discoveryengine.models.tune` `discoveryengine.models.update` `discoveryengine.notificationMessages.` `discoveryengine.notificationMessages.ackAll` `discoveryengine.notificationMessages.list` `discoveryengine.notificationMessages.update` `discoveryengine.operations.` `discoveryengine.operations.get` `discoveryengine.operations.list` `discoveryengine.projectOverageConfigs.get` `discoveryengine.projects.get` `discoveryengine.rankingConfigs.rank` `discoveryengine.sampleQueries.` `discoveryengine.sampleQueries.create` `discoveryengine.sampleQueries.delete` `discoveryengine.sampleQueries.get` `discoveryengine.sampleQueries.import` `discoveryengine.sampleQueries.list` `discoveryengine.sampleQueries.update` `discoveryengine.sampleQuerySets.` `discoveryengine.sampleQuerySets.create` `discoveryengine.sampleQuerySets.delete` `discoveryengine.sampleQuerySets.get` `discoveryengine.sampleQuerySets.list` `discoveryengine.sampleQuerySets.update` `discoveryengine.schemas.get` `discoveryengine.schemas.list` `discoveryengine.schemas.preview` `discoveryengine.schemas.validate` `discoveryengine.servingConfigs.answer` `discoveryengine.servingConfigs.get` `discoveryengine.servingConfigs.list` `discoveryengine.servingConfigs.recommend` `discoveryengine.servingConfigs.search` `discoveryengine.sessions.` `discoveryengine.sessions.addContextFile` `discoveryengine.sessions.create` `discoveryengine.sessions.delete` `discoveryengine.sessions.downloadFile` `discoveryengine.sessions.generateSummary` `discoveryengine.sessions.get` `discoveryengine.sessions.list` `discoveryengine.sessions.listSessionFileMetadata` `discoveryengine.sessions.recommendQuestions` `discoveryengine.sessions.removeContextFile` `discoveryengine.sessions.search` `discoveryengine.sessions.selectContextFiles` `discoveryengine.sessions.update` `discoveryengine.sessions.uploadFile` `discoveryengine.sharedContents.` `discoveryengine.sharedContents.create` `discoveryengine.sharedContents.delete` `discoveryengine.sharedContents.get` `discoveryengine.sharedContents.list` `discoveryengine.siteSearchEngines.get` `discoveryengine.targetSites.get` `discoveryengine.targetSites.list` `discoveryengine.userEvents.create` `discoveryengine.userEvents.fetchStats` `discoveryengine.userEvents.import` `discoveryengine.userStores.get` `discoveryengine.widgetConfigs.` `discoveryengine.widgetConfigs.get` `discoveryengine.widgetConfigs.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Discovery Engine User (`roles/discoveryengine.user`) Grants user-level access to Discovery Engine resources.	`businessaicode.` `businessaicode.locations.fetchQuotaStatus` `businessaicode.locations.generateContent` `businessaicode.locations.queryConfiguration` `businessaicode.locations.selfAssignLicense` `businessaicode.locations.sendTelemetry` `cloudaicompanion.companions.` `cloudaicompanion.companions.generateChat` `cloudaicompanion.companions.generateCode` `cloudaicompanion.entitlements.get` `cloudaicompanion.instances.` `cloudaicompanion.instances.completeCode` `cloudaicompanion.instances.completeTask` `cloudaicompanion.instances.exportMetrics` `cloudaicompanion.instances.generateCode` `cloudaicompanion.instances.generateText` `cloudaicompanion.instances.queryEffectiveSetting` `cloudaicompanion.instances.queryEffectiveSettingBindings` `cloudaicompanion.licenses.selfAssign` `cloudaicompanion.operations.get` `cloudaicompanion.topics.create` `discoveryengine.accounts.create` `discoveryengine.agentFiles.` `discoveryengine.agentFiles.delete` `discoveryengine.agentFiles.download` `discoveryengine.agentFiles.import` `discoveryengine.agentFiles.list` `discoveryengine.agentFiles.upload` `discoveryengine.agentIamProposals.` `discoveryengine.agentIamProposals.create` `discoveryengine.agentIamProposals.delete` `discoveryengine.agentIamProposals.get` `discoveryengine.agentIamProposals.list` `discoveryengine.agents.create` `discoveryengine.agents.delete` `discoveryengine.agents.get` `discoveryengine.agents.getAgentView` `discoveryengine.agents.list` `discoveryengine.agents.listAvailableAgentViews` `discoveryengine.agents.requestReview` `discoveryengine.agents.update` `discoveryengine.answers.get` `discoveryengine.assistAnswers.get` `discoveryengine.assistants.assist` `discoveryengine.authorizations.storeUserAuthorization` `discoveryengine.cannedQueries.listActiveCannedQueryUserViews` `discoveryengine.collections.get` `discoveryengine.completionConfigs.completeQuery` `discoveryengine.completionConfigs.removeSuggestion` `discoveryengine.dataConnectors.acquireAccessToken` `discoveryengine.dataConnectors.acquireAndStoreRefreshToken` `discoveryengine.dataConnectors.buildActionInvocation` `discoveryengine.dataConnectors.checkRefreshToken` `discoveryengine.dataConnectors.executeAction` `discoveryengine.dataConnectors.queryAvailableActions` `discoveryengine.dataStores.get` `discoveryengine.devToolsConfigs.get` `discoveryengine.engines.createEngineUserData` `discoveryengine.engines.generateMemories` `discoveryengine.engines.generatePersonalContext` `discoveryengine.engines.get` `discoveryengine.engines.getEngineUserData` `discoveryengine.engines.getPersonalContext` `discoveryengine.engines.updateEngineUserData` `discoveryengine.homepageDataConfigs.fetchDocuments` `discoveryengine.ideaForgeIdeas.` `discoveryengine.ideaForgeIdeas.create` `discoveryengine.ideaForgeIdeas.get` `discoveryengine.ideaForgeInstances.` `discoveryengine.ideaForgeInstances.get` `discoveryengine.ideaForgeInstances.start` `discoveryengine.locations.completeExternalIdentities` `discoveryengine.locations.fetchAgentCards` `discoveryengine.memories.` `discoveryengine.memories.delete` `discoveryengine.memories.list` `discoveryengine.memories.retrieve` `discoveryengine.memories.update` `discoveryengine.notebooks.create` `discoveryengine.notebooks.list` `discoveryengine.notificationMessages.` `discoveryengine.notificationMessages.ackAll` `discoveryengine.notificationMessages.list` `discoveryengine.notificationMessages.update` `discoveryengine.servingConfigs.answer` `discoveryengine.servingConfigs.recommend` `discoveryengine.servingConfigs.search` `discoveryengine.sessions.` `discoveryengine.sessions.addContextFile` `discoveryengine.sessions.create` `discoveryengine.sessions.delete` `discoveryengine.sessions.downloadFile` `discoveryengine.sessions.generateSummary` `discoveryengine.sessions.get` `discoveryengine.sessions.list` `discoveryengine.sessions.listSessionFileMetadata` `discoveryengine.sessions.recommendQuestions` `discoveryengine.sessions.removeContextFile` `discoveryengine.sessions.search` `discoveryengine.sessions.selectContextFiles` `discoveryengine.sessions.update` `discoveryengine.sessions.uploadFile` `discoveryengine.sharedContents.` `discoveryengine.sharedContents.create` `discoveryengine.sharedContents.delete` `discoveryengine.sharedContents.get` `discoveryengine.sharedContents.list` `discoveryengine.userEvents.create` `discoveryengine.users.` `discoveryengine.users.get` `discoveryengine.users.update` `discoveryengine.widgetConfigs.get` `geminicloudassist.agents.invoke` `resourcemanager.projects.get` `resourcemanager.projects.list`
Discovery Engine Viewer (`roles/discoveryengine.viewer`) Grants read access to all discovery engine resources.	`discoveryengine.aclConfigs.get` `discoveryengine.agentFiles.list` `discoveryengine.agents.get` `discoveryengine.agents.getAgentView` `discoveryengine.agents.getIamPolicy` `discoveryengine.agents.list` `discoveryengine.agents.listAvailableAgentViews` `discoveryengine.alertPolicies.get` `discoveryengine.analytics.` `discoveryengine.analytics.acquireDashboardSession` `discoveryengine.analytics.refreshDashboardSessionTokens` `discoveryengine.answers.get` `discoveryengine.assistAnswers.get` `discoveryengine.assistants.get` `discoveryengine.assistants.list` `discoveryengine.branches.` `discoveryengine.branches.get` `discoveryengine.branches.list` `discoveryengine.cannedQueries.get` `discoveryengine.cannedQueries.list` `discoveryengine.cannedQueries.listActiveCannedQueryUserViews` `discoveryengine.cmekConfigs.get` `discoveryengine.cmekConfigs.list` `discoveryengine.collections.get` `discoveryengine.collections.list` `discoveryengine.completionConfigs.completeQuery` `discoveryengine.completionConfigs.get` `discoveryengine.connectorRuns.list` `discoveryengine.controls.get` `discoveryengine.controls.list` `discoveryengine.conversations.converse` `discoveryengine.conversations.get` `discoveryengine.conversations.list` `discoveryengine.dataConnectors.buildActionInvocation` `discoveryengine.dataConnectors.checkRefreshToken` `discoveryengine.dataConnectors.get` `discoveryengine.dataConnectors.queryAvailableActions` `discoveryengine.dataStores.completeQuery` `discoveryengine.dataStores.get` `discoveryengine.dataStores.list` `discoveryengine.dataStores.listCustomModels` `discoveryengine.devToolsConfigs.get` `discoveryengine.documentProcessingConfigs.get` `discoveryengine.documents.batchGetDocumentsMetadata` `discoveryengine.documents.get` `discoveryengine.documents.list` `discoveryengine.engines.get` `discoveryengine.engines.getPersonalContext` `discoveryengine.engines.list` `discoveryengine.evaluations.get` `discoveryengine.evaluations.list` `discoveryengine.groundingConfigs.check` `discoveryengine.homepageDataConfigs.fetchDocuments` `discoveryengine.ideaForgeIdeas.get` `discoveryengine.ideaForgeInstances.get` `discoveryengine.identityMappingStores.get` `discoveryengine.identityMappingStores.list` `discoveryengine.identityMappingStores.listIdentityMappings` `discoveryengine.locations.completeExternalIdentities` `discoveryengine.locations.fetchAgentCards` `discoveryengine.memories.list` `discoveryengine.memories.retrieve` `discoveryengine.models.get` `discoveryengine.models.list` `discoveryengine.notificationMessages.list` `discoveryengine.operations.*` `discoveryengine.operations.get` `discoveryengine.operations.list` `discoveryengine.projectOverageConfigs.get` `discoveryengine.projects.get` `discoveryengine.rankingConfigs.rank` `discoveryengine.sampleQueries.get` `discoveryengine.sampleQueries.list` `discoveryengine.sampleQuerySets.get` `discoveryengine.sampleQuerySets.list` `discoveryengine.schemas.get` `discoveryengine.schemas.list` `discoveryengine.schemas.preview` `discoveryengine.schemas.validate` `discoveryengine.servingConfigs.answer` `discoveryengine.servingConfigs.get` `discoveryengine.servingConfigs.list` `discoveryengine.servingConfigs.recommend` `discoveryengine.servingConfigs.search` `discoveryengine.sessions.downloadFile` `discoveryengine.sessions.generateSummary` `discoveryengine.sessions.get` `discoveryengine.sessions.list` `discoveryengine.sessions.listSessionFileMetadata` `discoveryengine.sessions.recommendQuestions` `discoveryengine.sharedContents.get` `discoveryengine.sharedContents.list` `discoveryengine.siteSearchEngines.get` `discoveryengine.targetSites.get` `discoveryengine.targetSites.list` `discoveryengine.userEvents.fetchStats` `discoveryengine.userStores.get` `discoveryengine.widgetConfigs.get` `resourcemanager.projects.get` `resourcemanager.projects.list`
Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Grants admin-level access to Gemini Enterprise resources.	`cloudaicompanion.aiDevToolsSettings.` `cloudaicompanion.aiDevToolsSettings.create` `cloudaicompanion.aiDevToolsSettings.delete` `cloudaicompanion.aiDevToolsSettings.get` `cloudaicompanion.aiDevToolsSettings.list` `cloudaicompanion.aiDevToolsSettings.update` `cloudaicompanion.codeRepositoryIndexes.` `cloudaicompanion.codeRepositoryIndexes.create` `cloudaicompanion.codeRepositoryIndexes.delete` `cloudaicompanion.codeRepositoryIndexes.get` `cloudaicompanion.codeRepositoryIndexes.list` `cloudaicompanion.codeRepositoryIndexes.update` `cloudaicompanion.codeToolsSettings.` `cloudaicompanion.codeToolsSettings.create` `cloudaicompanion.codeToolsSettings.delete` `cloudaicompanion.codeToolsSettings.get` `cloudaicompanion.codeToolsSettings.list` `cloudaicompanion.codeToolsSettings.update` `cloudaicompanion.dataSharingWithGoogleSettings.` `cloudaicompanion.dataSharingWithGoogleSettings.create` `cloudaicompanion.dataSharingWithGoogleSettings.delete` `cloudaicompanion.dataSharingWithGoogleSettings.get` `cloudaicompanion.dataSharingWithGoogleSettings.list` `cloudaicompanion.dataSharingWithGoogleSettings.update` `cloudaicompanion.geminiGcpEnablementSettings.` `cloudaicompanion.geminiGcpEnablementSettings.create` `cloudaicompanion.geminiGcpEnablementSettings.delete` `cloudaicompanion.geminiGcpEnablementSettings.get` `cloudaicompanion.geminiGcpEnablementSettings.list` `cloudaicompanion.geminiGcpEnablementSettings.update` `cloudaicompanion.instances.queryEffectiveSetting` `cloudaicompanion.instances.queryEffectiveSettingBindings` `cloudaicompanion.loggingSettings.` `cloudaicompanion.loggingSettings.create` `cloudaicompanion.loggingSettings.delete` `cloudaicompanion.loggingSettings.get` `cloudaicompanion.loggingSettings.list` `cloudaicompanion.loggingSettings.update` `cloudaicompanion.operations.` `cloudaicompanion.operations.cancel` `cloudaicompanion.operations.delete` `cloudaicompanion.operations.get` `cloudaicompanion.operations.list` `cloudaicompanion.releaseChannelSettings.` `cloudaicompanion.releaseChannelSettings.create` `cloudaicompanion.releaseChannelSettings.delete` `cloudaicompanion.releaseChannelSettings.get` `cloudaicompanion.releaseChannelSettings.list` `cloudaicompanion.releaseChannelSettings.update` `cloudaicompanion.repositoryGroups.create` `cloudaicompanion.repositoryGroups.delete` `cloudaicompanion.repositoryGroups.get` `cloudaicompanion.repositoryGroups.getIamPolicy` `cloudaicompanion.repositoryGroups.list` `cloudaicompanion.repositoryGroups.setIamPolicy` `cloudaicompanion.repositoryGroups.update` `cloudaicompanion.settingBindings.` `cloudaicompanion.settingBindings.aiDevToolsSettingsCreate` `cloudaicompanion.settingBindings.aiDevToolsSettingsDelete` `cloudaicompanion.settingBindings.aiDevToolsSettingsGet` `cloudaicompanion.settingBindings.aiDevToolsSettingsList` `cloudaicompanion.settingBindings.aiDevToolsSettingsUpdate` `cloudaicompanion.settingBindings.aiDevToolsSettingsUse` `cloudaicompanion.settingBindings.codeToolsSettingsCreate` `cloudaicompanion.settingBindings.codeToolsSettingsDelete` `cloudaicompanion.settingBindings.codeToolsSettingsGet` `cloudaicompanion.settingBindings.codeToolsSettingsList` `cloudaicompanion.settingBindings.codeToolsSettingsUpdate` `cloudaicompanion.settingBindings.codeToolsSettingsUse` `cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsCreate` `cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsDelete` `cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsGet` `cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsList` `cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsUpdate` `cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsUse` `cloudaicompanion.settingBindings.geminiGcpEnablementSettingsCreate` `cloudaicompanion.settingBindings.geminiGcpEnablementSettingsDelete` `cloudaicompanion.settingBindings.geminiGcpEnablementSettingsGet` `cloudaicompanion.settingBindings.geminiGcpEnablementSettingsList` `cloudaicompanion.settingBindings.geminiGcpEnablementSettingsUpdate` `cloudaicompanion.settingBindings.geminiGcpEnablementSettingsUse` `cloudaicompanion.settingBindings.loggingSettingsCreate` `cloudaicompanion.settingBindings.loggingSettingsDelete` `cloudaicompanion.settingBindings.loggingSettingsGet` `cloudaicompanion.settingBindings.loggingSettingsList` `cloudaicompanion.settingBindings.loggingSettingsUpdate` `cloudaicompanion.settingBindings.loggingSettingsUse` `cloudaicompanion.settingBindings.releaseChannelSettingsCreate` `cloudaicompanion.settingBindings.releaseChannelSettingsDelete` `cloudaicompanion.settingBindings.releaseChannelSettingsGet` `cloudaicompanion.settingBindings.releaseChannelSettingsList` `cloudaicompanion.settingBindings.releaseChannelSettingsUpdate` `cloudaicompanion.settingBindings.releaseChannelSettingsUse` `cloudnotifications.activities.list` `cloudtrace.insights.` `cloudtrace.insights.get` `cloudtrace.insights.list` `cloudtrace.stats.get` `cloudtrace.tasks.` `cloudtrace.tasks.create` `cloudtrace.tasks.delete` `cloudtrace.tasks.get` `cloudtrace.tasks.list` `cloudtrace.traceScopes.` `cloudtrace.traceScopes.create` `cloudtrace.traceScopes.delete` `cloudtrace.traceScopes.get` `cloudtrace.traceScopes.list` `cloudtrace.traceScopes.update` `cloudtrace.traces.get` `cloudtrace.traces.list` `consumerprocurement.entitlements.` `consumerprocurement.entitlements.get` `consumerprocurement.entitlements.list` `discoveryengine.aclConfigs.` `discoveryengine.aclConfigs.get` `discoveryengine.aclConfigs.update` `discoveryengine.agentFiles.` `discoveryengine.agentFiles.delete` `discoveryengine.agentFiles.download` `discoveryengine.agentFiles.import` `discoveryengine.agentFiles.list` `discoveryengine.agentFiles.upload` `discoveryengine.agentIamProposals.` `discoveryengine.agentIamProposals.create` `discoveryengine.agentIamProposals.delete` `discoveryengine.agentIamProposals.get` `discoveryengine.agentIamProposals.list` `discoveryengine.agents.create` `discoveryengine.agents.delete` `discoveryengine.agents.get` `discoveryengine.agents.getAgentView` `discoveryengine.agents.getIamPolicy` `discoveryengine.agents.list` `discoveryengine.agents.listAvailableAgentViews` `discoveryengine.agents.manage` `discoveryengine.agents.setIamPolicy` `discoveryengine.agents.update` `discoveryengine.alertPolicies.` `discoveryengine.alertPolicies.create` `discoveryengine.alertPolicies.get` `discoveryengine.alertPolicies.update` `discoveryengine.analytics.` `discoveryengine.analytics.acquireDashboardSession` `discoveryengine.analytics.refreshDashboardSessionTokens` `discoveryengine.answers.get` `discoveryengine.assistAnswers.get` `discoveryengine.assistants.` `discoveryengine.assistants.assist` `discoveryengine.assistants.create` `discoveryengine.assistants.delete` `discoveryengine.assistants.get` `discoveryengine.assistants.list` `discoveryengine.assistants.update` `discoveryengine.authorizations.` `discoveryengine.authorizations.create` `discoveryengine.authorizations.delete` `discoveryengine.authorizations.get` `discoveryengine.authorizations.list` `discoveryengine.authorizations.storeUserAuthorization` `discoveryengine.authorizations.update` `discoveryengine.billingAccountLicenseConfigs.` `discoveryengine.billingAccountLicenseConfigs.distribute` `discoveryengine.billingAccountLicenseConfigs.get` `discoveryengine.billingAccountLicenseConfigs.list` `discoveryengine.billingAccountLicenseConfigs.retract` `discoveryengine.branches.` `discoveryengine.branches.get` `discoveryengine.branches.list` `discoveryengine.cannedQueries.` `discoveryengine.cannedQueries.create` `discoveryengine.cannedQueries.delete` `discoveryengine.cannedQueries.get` `discoveryengine.cannedQueries.list` `discoveryengine.cannedQueries.listActiveCannedQueryUserViews` `discoveryengine.cannedQueries.update` `discoveryengine.cmekConfigs.` `discoveryengine.cmekConfigs.get` `discoveryengine.cmekConfigs.list` `discoveryengine.cmekConfigs.update` `discoveryengine.collections.` `discoveryengine.collections.delete` `discoveryengine.collections.get` `discoveryengine.collections.getIamPolicy` `discoveryengine.collections.list` `discoveryengine.collections.setIamPolicy` `discoveryengine.completionConfigs.` `discoveryengine.completionConfigs.completeQuery` `discoveryengine.completionConfigs.get` `discoveryengine.completionConfigs.removeSuggestion` `discoveryengine.completionConfigs.update` `discoveryengine.completionSuggestions.` `discoveryengine.completionSuggestions.import` `discoveryengine.completionSuggestions.purge` `discoveryengine.connectorRuns.` `discoveryengine.connectorRuns.cancel` `discoveryengine.connectorRuns.list` `discoveryengine.controls.` `discoveryengine.controls.create` `discoveryengine.controls.delete` `discoveryengine.controls.get` `discoveryengine.controls.list` `discoveryengine.controls.update` `discoveryengine.conversations.` `discoveryengine.conversations.converse` `discoveryengine.conversations.create` `discoveryengine.conversations.delete` `discoveryengine.conversations.get` `discoveryengine.conversations.list` `discoveryengine.conversations.update` `discoveryengine.dataConnectors.` `discoveryengine.dataConnectors.acquireAccessToken` `discoveryengine.dataConnectors.acquireAndStoreRefreshToken` `discoveryengine.dataConnectors.buildActionInvocation` `discoveryengine.dataConnectors.checkRefreshToken` `discoveryengine.dataConnectors.executeAction` `discoveryengine.dataConnectors.get` `discoveryengine.dataConnectors.queryAvailableActions` `discoveryengine.dataConnectors.startConnectorRun` `discoveryengine.dataConnectors.update` `discoveryengine.dataStores.` `discoveryengine.dataStores.completeQuery` `discoveryengine.dataStores.create` `discoveryengine.dataStores.delete` `discoveryengine.dataStores.enrollSolutions` `discoveryengine.dataStores.get` `discoveryengine.dataStores.getIamPolicy` `discoveryengine.dataStores.list` `discoveryengine.dataStores.listCustomModels` `discoveryengine.dataStores.setIamPolicy` `discoveryengine.dataStores.trainCustomModel` `discoveryengine.dataStores.update` `discoveryengine.devToolsConfigs.` `discoveryengine.devToolsConfigs.get` `discoveryengine.devToolsConfigs.update` `discoveryengine.documentProcessingConfigs.` `discoveryengine.documentProcessingConfigs.get` `discoveryengine.documentProcessingConfigs.update` `discoveryengine.documents.` `discoveryengine.documents.batchGetDocumentsMetadata` `discoveryengine.documents.create` `discoveryengine.documents.delete` `discoveryengine.documents.get` `discoveryengine.documents.import` `discoveryengine.documents.list` `discoveryengine.documents.purge` `discoveryengine.documents.update` `discoveryengine.engines.` `discoveryengine.engines.create` `discoveryengine.engines.createEngineUserData` `discoveryengine.engines.delete` `discoveryengine.engines.generateMemories` `discoveryengine.engines.generatePersonalContext` `discoveryengine.engines.get` `discoveryengine.engines.getEngineUserData` `discoveryengine.engines.getIamPolicy` `discoveryengine.engines.getPersonalContext` `discoveryengine.engines.list` `discoveryengine.engines.pause` `discoveryengine.engines.resume` `discoveryengine.engines.setIamPolicy` `discoveryengine.engines.tune` `discoveryengine.engines.update` `discoveryengine.engines.updateEngineUserData` `discoveryengine.evaluations.` `discoveryengine.evaluations.create` `discoveryengine.evaluations.get` `discoveryengine.evaluations.list` `discoveryengine.groundingConfigs.check` `discoveryengine.homepageDataConfigs.fetchDocuments` `discoveryengine.ideaForgeIdeas.` `discoveryengine.ideaForgeIdeas.create` `discoveryengine.ideaForgeIdeas.get` `discoveryengine.ideaForgeInstances.` `discoveryengine.ideaForgeInstances.get` `discoveryengine.ideaForgeInstances.start` `discoveryengine.identityMappingStores.` `discoveryengine.identityMappingStores.create` `discoveryengine.identityMappingStores.delete` `discoveryengine.identityMappingStores.get` `discoveryengine.identityMappingStores.importIdentityMappings` `discoveryengine.identityMappingStores.list` `discoveryengine.identityMappingStores.listIdentityMappings` `discoveryengine.identityMappingStores.purgeIdentityMappings` `discoveryengine.licenseConfigs.` `discoveryengine.licenseConfigs.create` `discoveryengine.licenseConfigs.get` `discoveryengine.licenseConfigs.list` `discoveryengine.licenseConfigs.update` `discoveryengine.locations.` `discoveryengine.locations.completeExternalIdentities` `discoveryengine.locations.estimateDataSize` `discoveryengine.locations.exchangeAuthCredentials` `discoveryengine.locations.fetchAgentCards` `discoveryengine.locations.getConnectorSource` `discoveryengine.locations.listConnectorSources` `discoveryengine.locations.setUpDataConnector` `discoveryengine.memories.` `discoveryengine.memories.delete` `discoveryengine.memories.list` `discoveryengine.memories.retrieve` `discoveryengine.memories.update` `discoveryengine.models.` `discoveryengine.models.create` `discoveryengine.models.delete` `discoveryengine.models.get` `discoveryengine.models.list` `discoveryengine.models.pause` `discoveryengine.models.resume` `discoveryengine.models.tune` `discoveryengine.models.update` `discoveryengine.notificationMessages.` `discoveryengine.notificationMessages.ackAll` `discoveryengine.notificationMessages.list` `discoveryengine.notificationMessages.update` `discoveryengine.operations.` `discoveryengine.operations.get` `discoveryengine.operations.list` `discoveryengine.projectOverageConfigs.get` `discoveryengine.projects.` `discoveryengine.projects.get` `discoveryengine.projects.provision` `discoveryengine.projects.reportConsentChange` `discoveryengine.projects.update` `discoveryengine.rankingConfigs.rank` `discoveryengine.sampleQueries.` `discoveryengine.sampleQueries.create` `discoveryengine.sampleQueries.delete` `discoveryengine.sampleQueries.get` `discoveryengine.sampleQueries.import` `discoveryengine.sampleQueries.list` `discoveryengine.sampleQueries.update` `discoveryengine.sampleQuerySets.` `discoveryengine.sampleQuerySets.create` `discoveryengine.sampleQuerySets.delete` `discoveryengine.sampleQuerySets.get` `discoveryengine.sampleQuerySets.list` `discoveryengine.sampleQuerySets.update` `discoveryengine.schemas.` `discoveryengine.schemas.create` `discoveryengine.schemas.delete` `discoveryengine.schemas.get` `discoveryengine.schemas.list` `discoveryengine.schemas.preview` `discoveryengine.schemas.update` `discoveryengine.schemas.validate` `discoveryengine.servingConfigs.` `discoveryengine.servingConfigs.answer` `discoveryengine.servingConfigs.create` `discoveryengine.servingConfigs.delete` `discoveryengine.servingConfigs.get` `discoveryengine.servingConfigs.list` `discoveryengine.servingConfigs.recommend` `discoveryengine.servingConfigs.search` `discoveryengine.servingConfigs.update` `discoveryengine.sessions.` `discoveryengine.sessions.addContextFile` `discoveryengine.sessions.create` `discoveryengine.sessions.delete` `discoveryengine.sessions.downloadFile` `discoveryengine.sessions.generateSummary` `discoveryengine.sessions.get` `discoveryengine.sessions.list` `discoveryengine.sessions.listSessionFileMetadata` `discoveryengine.sessions.recommendQuestions` `discoveryengine.sessions.removeContextFile` `discoveryengine.sessions.search` `discoveryengine.sessions.selectContextFiles` `discoveryengine.sessions.update` `discoveryengine.sessions.uploadFile` `discoveryengine.sharedContents.` `discoveryengine.sharedContents.create` `discoveryengine.sharedContents.delete` `discoveryengine.sharedContents.get` `discoveryengine.sharedContents.list` `discoveryengine.siteSearchEngines.` `discoveryengine.siteSearchEngines.batchVerifyTargetSites` `discoveryengine.siteSearchEngines.disableAdvancedSiteSearch` `discoveryengine.siteSearchEngines.enableAdvancedSiteSearch` `discoveryengine.siteSearchEngines.fetchDomainVerificationStatus` `discoveryengine.siteSearchEngines.get` `discoveryengine.siteSearchEngines.recrawlUris` `discoveryengine.sitemaps.` `discoveryengine.sitemaps.create` `discoveryengine.sitemaps.delete` `discoveryengine.sitemaps.fetch` `discoveryengine.suggestionDenyListEntries.` `discoveryengine.suggestionDenyListEntries.import` `discoveryengine.suggestionDenyListEntries.purge` `discoveryengine.targetSites.` `discoveryengine.targetSites.batchCreate` `discoveryengine.targetSites.create` `discoveryengine.targetSites.delete` `discoveryengine.targetSites.get` `discoveryengine.targetSites.list` `discoveryengine.targetSites.update` `discoveryengine.userEvents.` `discoveryengine.userEvents.create` `discoveryengine.userEvents.fetchStats` `discoveryengine.userEvents.import` `discoveryengine.userEvents.purge` `discoveryengine.userStores.` `discoveryengine.userStores.batchUpdateUserLicenses` `discoveryengine.userStores.get` `discoveryengine.userStores.listUserLicenses` `discoveryengine.userStores.update` `discoveryengine.users.` `discoveryengine.users.get` `discoveryengine.users.update` `discoveryengine.widgetConfigs.` `discoveryengine.widgetConfigs.get` `discoveryengine.widgetConfigs.update` `logging.buckets.get` `logging.buckets.list` `logging.exclusions.get` `logging.exclusions.list` `logging.links.get` `logging.links.list` `logging.locations.` `logging.locations.get` `logging.locations.list` `logging.logEntries.list` `logging.logMetrics.get` `logging.logMetrics.list` `logging.logScopes.get` `logging.logScopes.list` `logging.logServiceIndexes.list` `logging.logServices.list` `logging.logs.list` `logging.operations.get` `logging.operations.list` `logging.queries.getShared` `logging.queries.listShared` `logging.queries.usePrivate` `logging.sinks.get` `logging.sinks.list` `logging.usage.get` `logging.views.get` `logging.views.list` `monitoring.alertPolicies.get` `monitoring.alertPolicies.list` `monitoring.alertPolicies.listEffectiveTags` `monitoring.alertPolicies.listTagBindings` `monitoring.alerts.` `monitoring.alerts.get` `monitoring.alerts.list` `monitoring.dashboards.get` `monitoring.dashboards.list` `monitoring.dashboards.listEffectiveTags` `monitoring.dashboards.listTagBindings` `monitoring.groups.get` `monitoring.groups.list` `monitoring.metricDescriptors.get` `monitoring.metricDescriptors.list` `monitoring.monitoredResourceDescriptors.` `monitoring.monitoredResourceDescriptors.get` `monitoring.monitoredResourceDescriptors.list` `monitoring.notificationChannelDescriptors.` `monitoring.notificationChannelDescriptors.get` `monitoring.notificationChannelDescriptors.list` `monitoring.notificationChannels.get` `monitoring.notificationChannels.list` `monitoring.services.get` `monitoring.services.list` `monitoring.slos.get` `monitoring.slos.list` `monitoring.snoozes.get` `monitoring.snoozes.list` `monitoring.timeSeries.list` `monitoring.uptimeCheckConfigs.get` `monitoring.uptimeCheckConfigs.list` `observability.scopes.get` `observability.traceScopes.` `observability.traceScopes.create` `observability.traceScopes.delete` `observability.traceScopes.get` `observability.traceScopes.list` `observability.traceScopes.update` `opsconfigmonitoring.resourceMetadata.list` `resourcemanager.projects.get` `resourcemanager.projects.list` `stackdriver.projects.get` `stackdriver.resourceMetadata.list`
Gemini Enterprise Editor ^Beta (`roles/discoveryengine.agentspaceEditor`) Grants access to edit Gemini Enterprise resources.	`discoveryengine.aclConfigs.get` `discoveryengine.agentFiles.` `discoveryengine.agentFiles.delete` `discoveryengine.agentFiles.download` `discoveryengine.agentFiles.import` `discoveryengine.agentFiles.list` `discoveryengine.agentFiles.upload` `discoveryengine.agents.create` `discoveryengine.agents.delete` `discoveryengine.agents.get` `discoveryengine.agents.getAgentView` `discoveryengine.agents.getIamPolicy` `discoveryengine.agents.list` `discoveryengine.agents.listAvailableAgentViews` `discoveryengine.agents.manage` `discoveryengine.agents.update` `discoveryengine.alertPolicies.get` `discoveryengine.analytics.` `discoveryengine.analytics.acquireDashboardSession` `discoveryengine.analytics.refreshDashboardSessionTokens` `discoveryengine.answers.get` `discoveryengine.assistAnswers.get` `discoveryengine.assistants.assist` `discoveryengine.assistants.get` `discoveryengine.assistants.list` `discoveryengine.authorizations.storeUserAuthorization` `discoveryengine.branches.` `discoveryengine.branches.get` `discoveryengine.branches.list` `discoveryengine.cannedQueries.get` `discoveryengine.cannedQueries.list` `discoveryengine.cannedQueries.listActiveCannedQueryUserViews` `discoveryengine.cmekConfigs.get` `discoveryengine.cmekConfigs.list` `discoveryengine.collections.get` `discoveryengine.collections.list` `discoveryengine.completionConfigs.completeQuery` `discoveryengine.completionConfigs.get` `discoveryengine.completionConfigs.removeSuggestion` `discoveryengine.connectorRuns.list` `discoveryengine.controls.get` `discoveryengine.controls.list` `discoveryengine.conversations.` `discoveryengine.conversations.converse` `discoveryengine.conversations.create` `discoveryengine.conversations.delete` `discoveryengine.conversations.get` `discoveryengine.conversations.list` `discoveryengine.conversations.update` `discoveryengine.dataConnectors.acquireAccessToken` `discoveryengine.dataConnectors.acquireAndStoreRefreshToken` `discoveryengine.dataConnectors.buildActionInvocation` `discoveryengine.dataConnectors.checkRefreshToken` `discoveryengine.dataConnectors.executeAction` `discoveryengine.dataConnectors.get` `discoveryengine.dataConnectors.queryAvailableActions` `discoveryengine.dataStores.completeQuery` `discoveryengine.dataStores.get` `discoveryengine.dataStores.list` `discoveryengine.dataStores.listCustomModels` `discoveryengine.dataStores.trainCustomModel` `discoveryengine.devToolsConfigs.get` `discoveryengine.documentProcessingConfigs.get` `discoveryengine.documents.batchGetDocumentsMetadata` `discoveryengine.documents.create` `discoveryengine.documents.delete` `discoveryengine.documents.get` `discoveryengine.documents.import` `discoveryengine.documents.list` `discoveryengine.documents.update` `discoveryengine.engines.createEngineUserData` `discoveryengine.engines.generateMemories` `discoveryengine.engines.generatePersonalContext` `discoveryengine.engines.get` `discoveryengine.engines.getEngineUserData` `discoveryengine.engines.getPersonalContext` `discoveryengine.engines.list` `discoveryengine.engines.pause` `discoveryengine.engines.resume` `discoveryengine.engines.tune` `discoveryengine.engines.updateEngineUserData` `discoveryengine.evaluations.get` `discoveryengine.evaluations.list` `discoveryengine.groundingConfigs.check` `discoveryengine.homepageDataConfigs.fetchDocuments` `discoveryengine.ideaForgeIdeas.` `discoveryengine.ideaForgeIdeas.create` `discoveryengine.ideaForgeIdeas.get` `discoveryengine.ideaForgeInstances.` `discoveryengine.ideaForgeInstances.get` `discoveryengine.ideaForgeInstances.start` `discoveryengine.identityMappingStores.` `discoveryengine.identityMappingStores.create` `discoveryengine.identityMappingStores.delete` `discoveryengine.identityMappingStores.get` `discoveryengine.identityMappingStores.importIdentityMappings` `discoveryengine.identityMappingStores.list` `discoveryengine.identityMappingStores.listIdentityMappings` `discoveryengine.identityMappingStores.purgeIdentityMappings` `discoveryengine.licenseConfigs.get` `discoveryengine.licenseConfigs.list` `discoveryengine.locations.completeExternalIdentities` `discoveryengine.locations.fetchAgentCards` `discoveryengine.memories.` `discoveryengine.memories.delete` `discoveryengine.memories.list` `discoveryengine.memories.retrieve` `discoveryengine.memories.update` `discoveryengine.models.` `discoveryengine.models.create` `discoveryengine.models.delete` `discoveryengine.models.get` `discoveryengine.models.list` `discoveryengine.models.pause` `discoveryengine.models.resume` `discoveryengine.models.tune` `discoveryengine.models.update` `discoveryengine.notificationMessages.` `discoveryengine.notificationMessages.ackAll` `discoveryengine.notificationMessages.list` `discoveryengine.notificationMessages.update` `discoveryengine.operations.` `discoveryengine.operations.get` `discoveryengine.operations.list` `discoveryengine.projectOverageConfigs.get` `discoveryengine.projects.get` `discoveryengine.rankingConfigs.rank` `discoveryengine.sampleQueries.` `discoveryengine.sampleQueries.create` `discoveryengine.sampleQueries.delete` `discoveryengine.sampleQueries.get` `discoveryengine.sampleQueries.import` `discoveryengine.sampleQueries.list` `discoveryengine.sampleQueries.update` `discoveryengine.sampleQuerySets.` `discoveryengine.sampleQuerySets.create` `discoveryengine.sampleQuerySets.delete` `discoveryengine.sampleQuerySets.get` `discoveryengine.sampleQuerySets.list` `discoveryengine.sampleQuerySets.update` `discoveryengine.schemas.get` `discoveryengine.schemas.list` `discoveryengine.schemas.preview` `discoveryengine.schemas.validate` `discoveryengine.servingConfigs.answer` `discoveryengine.servingConfigs.get` `discoveryengine.servingConfigs.list` `discoveryengine.servingConfigs.recommend` `discoveryengine.servingConfigs.search` `discoveryengine.sessions.` `discoveryengine.sessions.addContextFile` `discoveryengine.sessions.create` `discoveryengine.sessions.delete` `discoveryengine.sessions.downloadFile` `discoveryengine.sessions.generateSummary` `discoveryengine.sessions.get` `discoveryengine.sessions.list` `discoveryengine.sessions.listSessionFileMetadata` `discoveryengine.sessions.recommendQuestions` `discoveryengine.sessions.removeContextFile` `discoveryengine.sessions.search` `discoveryengine.sessions.selectContextFiles` `discoveryengine.sessions.update` `discoveryengine.sessions.uploadFile` `discoveryengine.sharedContents.` `discoveryengine.sharedContents.create` `discoveryengine.sharedContents.delete` `discoveryengine.sharedContents.get` `discoveryengine.sharedContents.list` `discoveryengine.siteSearchEngines.get` `discoveryengine.targetSites.get` `discoveryengine.targetSites.list` `discoveryengine.userEvents.create` `discoveryengine.userEvents.fetchStats` `discoveryengine.userEvents.import` `discoveryengine.userStores.get` `discoveryengine.widgetConfigs.` `discoveryengine.widgetConfigs.get` `discoveryengine.widgetConfigs.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Gemini Enterprise Restricted User (`roles/discoveryengine.agentspaceRestrictedUser`) Grants restricted user-level access to Gemini Enterprise resources, for fine-grained control over multiple Gemini Enterprise instances in the same project. Principals with this role will need to be granted an unrestricted user-level role (e.g. /agentspaceUser) on an Engine policy in order to use Gemini Enterprise.	`discoveryengine.accounts.create` `discoveryengine.authorizations.storeUserAuthorization` `discoveryengine.dataConnectors.acquireAccessToken` `discoveryengine.dataConnectors.acquireAndStoreRefreshToken` `discoveryengine.dataConnectors.buildActionInvocation` `discoveryengine.dataConnectors.checkRefreshToken` `discoveryengine.dataConnectors.executeAction` `discoveryengine.dataConnectors.queryAvailableActions` `discoveryengine.locations.completeExternalIdentities` `discoveryengine.locations.fetchAgentCards` `discoveryengine.notebooks.create` `discoveryengine.notebooks.list` `discoveryengine.userEvents.create` `discoveryengine.users.*` `discoveryengine.users.get` `discoveryengine.users.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Grants user-level access to Gemini Enterprise resources.	`businessaicode.` `businessaicode.locations.fetchQuotaStatus` `businessaicode.locations.generateContent` `businessaicode.locations.queryConfiguration` `businessaicode.locations.selfAssignLicense` `businessaicode.locations.sendTelemetry` `cloudaicompanion.companions.` `cloudaicompanion.companions.generateChat` `cloudaicompanion.companions.generateCode` `cloudaicompanion.entitlements.get` `cloudaicompanion.instances.` `cloudaicompanion.instances.completeCode` `cloudaicompanion.instances.completeTask` `cloudaicompanion.instances.exportMetrics` `cloudaicompanion.instances.generateCode` `cloudaicompanion.instances.generateText` `cloudaicompanion.instances.queryEffectiveSetting` `cloudaicompanion.instances.queryEffectiveSettingBindings` `cloudaicompanion.licenses.selfAssign` `cloudaicompanion.operations.get` `cloudaicompanion.topics.create` `discoveryengine.accounts.create` `discoveryengine.agentFiles.` `discoveryengine.agentFiles.delete` `discoveryengine.agentFiles.download` `discoveryengine.agentFiles.import` `discoveryengine.agentFiles.list` `discoveryengine.agentFiles.upload` `discoveryengine.agentIamProposals.` `discoveryengine.agentIamProposals.create` `discoveryengine.agentIamProposals.delete` `discoveryengine.agentIamProposals.get` `discoveryengine.agentIamProposals.list` `discoveryengine.agents.create` `discoveryengine.agents.delete` `discoveryengine.agents.get` `discoveryengine.agents.getAgentView` `discoveryengine.agents.list` `discoveryengine.agents.listAvailableAgentViews` `discoveryengine.agents.requestReview` `discoveryengine.agents.update` `discoveryengine.answers.get` `discoveryengine.assistAnswers.get` `discoveryengine.assistants.assist` `discoveryengine.authorizations.storeUserAuthorization` `discoveryengine.cannedQueries.listActiveCannedQueryUserViews` `discoveryengine.collections.get` `discoveryengine.completionConfigs.completeQuery` `discoveryengine.completionConfigs.removeSuggestion` `discoveryengine.dataConnectors.acquireAccessToken` `discoveryengine.dataConnectors.acquireAndStoreRefreshToken` `discoveryengine.dataConnectors.buildActionInvocation` `discoveryengine.dataConnectors.checkRefreshToken` `discoveryengine.dataConnectors.executeAction` `discoveryengine.dataConnectors.queryAvailableActions` `discoveryengine.dataStores.get` `discoveryengine.devToolsConfigs.get` `discoveryengine.engines.createEngineUserData` `discoveryengine.engines.generateMemories` `discoveryengine.engines.generatePersonalContext` `discoveryengine.engines.get` `discoveryengine.engines.getEngineUserData` `discoveryengine.engines.getPersonalContext` `discoveryengine.engines.updateEngineUserData` `discoveryengine.homepageDataConfigs.fetchDocuments` `discoveryengine.ideaForgeIdeas.` `discoveryengine.ideaForgeIdeas.create` `discoveryengine.ideaForgeIdeas.get` `discoveryengine.ideaForgeInstances.` `discoveryengine.ideaForgeInstances.get` `discoveryengine.ideaForgeInstances.start` `discoveryengine.locations.completeExternalIdentities` `discoveryengine.locations.fetchAgentCards` `discoveryengine.memories.` `discoveryengine.memories.delete` `discoveryengine.memories.list` `discoveryengine.memories.retrieve` `discoveryengine.memories.update` `discoveryengine.notebooks.create` `discoveryengine.notebooks.list` `discoveryengine.notificationMessages.` `discoveryengine.notificationMessages.ackAll` `discoveryengine.notificationMessages.list` `discoveryengine.notificationMessages.update` `discoveryengine.servingConfigs.answer` `discoveryengine.servingConfigs.recommend` `discoveryengine.servingConfigs.search` `discoveryengine.sessions.` `discoveryengine.sessions.addContextFile` `discoveryengine.sessions.create` `discoveryengine.sessions.delete` `discoveryengine.sessions.downloadFile` `discoveryengine.sessions.generateSummary` `discoveryengine.sessions.get` `discoveryengine.sessions.list` `discoveryengine.sessions.listSessionFileMetadata` `discoveryengine.sessions.recommendQuestions` `discoveryengine.sessions.removeContextFile` `discoveryengine.sessions.search` `discoveryengine.sessions.selectContextFiles` `discoveryengine.sessions.update` `discoveryengine.sessions.uploadFile` `discoveryengine.sharedContents.` `discoveryengine.sharedContents.create` `discoveryengine.sharedContents.delete` `discoveryengine.sharedContents.get` `discoveryengine.sharedContents.list` `discoveryengine.userEvents.create` `discoveryengine.users.` `discoveryengine.users.get` `discoveryengine.users.update` `discoveryengine.widgetConfigs.get` `geminicloudassist.agents.invoke` `resourcemanager.projects.get` `resourcemanager.projects.list`
Gemini Enterprise Viewer ^Beta (`roles/discoveryengine.agentspaceViewer`) Grants access to view the details of Gemini Enterprise resources.	`discoveryengine.aclConfigs.get` `discoveryengine.agentFiles.list` `discoveryengine.agents.get` `discoveryengine.agents.getAgentView` `discoveryengine.agents.getIamPolicy` `discoveryengine.agents.list` `discoveryengine.agents.listAvailableAgentViews` `discoveryengine.alertPolicies.get` `discoveryengine.analytics.` `discoveryengine.analytics.acquireDashboardSession` `discoveryengine.analytics.refreshDashboardSessionTokens` `discoveryengine.answers.get` `discoveryengine.assistAnswers.get` `discoveryengine.assistants.get` `discoveryengine.assistants.list` `discoveryengine.branches.` `discoveryengine.branches.get` `discoveryengine.branches.list` `discoveryengine.cannedQueries.get` `discoveryengine.cannedQueries.list` `discoveryengine.cannedQueries.listActiveCannedQueryUserViews` `discoveryengine.cmekConfigs.get` `discoveryengine.cmekConfigs.list` `discoveryengine.collections.get` `discoveryengine.collections.list` `discoveryengine.completionConfigs.completeQuery` `discoveryengine.completionConfigs.get` `discoveryengine.connectorRuns.list` `discoveryengine.controls.get` `discoveryengine.controls.list` `discoveryengine.conversations.converse` `discoveryengine.conversations.get` `discoveryengine.conversations.list` `discoveryengine.dataConnectors.buildActionInvocation` `discoveryengine.dataConnectors.checkRefreshToken` `discoveryengine.dataConnectors.get` `discoveryengine.dataConnectors.queryAvailableActions` `discoveryengine.dataStores.completeQuery` `discoveryengine.dataStores.get` `discoveryengine.dataStores.list` `discoveryengine.dataStores.listCustomModels` `discoveryengine.devToolsConfigs.get` `discoveryengine.documentProcessingConfigs.get` `discoveryengine.documents.batchGetDocumentsMetadata` `discoveryengine.documents.get` `discoveryengine.documents.list` `discoveryengine.engines.get` `discoveryengine.engines.getPersonalContext` `discoveryengine.engines.list` `discoveryengine.evaluations.get` `discoveryengine.evaluations.list` `discoveryengine.groundingConfigs.check` `discoveryengine.homepageDataConfigs.fetchDocuments` `discoveryengine.ideaForgeIdeas.get` `discoveryengine.ideaForgeInstances.get` `discoveryengine.identityMappingStores.get` `discoveryengine.identityMappingStores.list` `discoveryengine.identityMappingStores.listIdentityMappings` `discoveryengine.locations.completeExternalIdentities` `discoveryengine.locations.fetchAgentCards` `discoveryengine.memories.list` `discoveryengine.memories.retrieve` `discoveryengine.models.get` `discoveryengine.models.list` `discoveryengine.notificationMessages.list` `discoveryengine.operations.*` `discoveryengine.operations.get` `discoveryengine.operations.list` `discoveryengine.projectOverageConfigs.get` `discoveryengine.projects.get` `discoveryengine.rankingConfigs.rank` `discoveryengine.sampleQueries.get` `discoveryengine.sampleQueries.list` `discoveryengine.sampleQuerySets.get` `discoveryengine.sampleQuerySets.list` `discoveryengine.schemas.get` `discoveryengine.schemas.list` `discoveryengine.schemas.preview` `discoveryengine.schemas.validate` `discoveryengine.servingConfigs.answer` `discoveryengine.servingConfigs.get` `discoveryengine.servingConfigs.list` `discoveryengine.servingConfigs.recommend` `discoveryengine.servingConfigs.search` `discoveryengine.sessions.downloadFile` `discoveryengine.sessions.generateSummary` `discoveryengine.sessions.get` `discoveryengine.sessions.list` `discoveryengine.sessions.listSessionFileMetadata` `discoveryengine.sessions.recommendQuestions` `discoveryengine.sharedContents.get` `discoveryengine.sharedContents.list` `discoveryengine.siteSearchEngines.get` `discoveryengine.targetSites.get` `discoveryengine.targetSites.list` `discoveryengine.userEvents.fetchStats` `discoveryengine.userStores.get` `discoveryengine.widgetConfigs.get` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Grants read and write access to a Cloud NotebookLM Notebook.	`discoveryengine.audioOverviews.` `discoveryengine.audioOverviews.create` `discoveryengine.audioOverviews.delete` `discoveryengine.audioOverviews.get` `discoveryengine.audioOverviews.getIceConfig` `discoveryengine.audioOverviews.sendSdpOffer` `discoveryengine.notebooks.generateGuide` `discoveryengine.notebooks.get` `discoveryengine.notebooks.getAnalytics` `discoveryengine.notebooks.getIamPolicy` `discoveryengine.notebooks.interactSources` `discoveryengine.notebooks.list` `discoveryengine.notebooks.removeSelf` `discoveryengine.notebooks.update` `discoveryengine.notes.` `discoveryengine.notes.create` `discoveryengine.notes.delete` `discoveryengine.notes.get` `discoveryengine.notes.update` `discoveryengine.sources.*` `discoveryengine.sources.checkFreshness` `discoveryengine.sources.create` `discoveryengine.sources.delete` `discoveryengine.sources.generateDocumentGuide` `discoveryengine.sources.get` `discoveryengine.sources.refresh` `discoveryengine.sources.update`
Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Grants full access to Cloud NotebookLM resources.	`discoveryengine.accounts.create` `discoveryengine.aclConfigs.` `discoveryengine.aclConfigs.get` `discoveryengine.aclConfigs.update` `discoveryengine.audioOverviews.` `discoveryengine.audioOverviews.create` `discoveryengine.audioOverviews.delete` `discoveryengine.audioOverviews.get` `discoveryengine.audioOverviews.getIceConfig` `discoveryengine.audioOverviews.sendSdpOffer` `discoveryengine.locations.completeExternalIdentities` `discoveryengine.notebooks.` `discoveryengine.notebooks.create` `discoveryengine.notebooks.generateGuide` `discoveryengine.notebooks.get` `discoveryengine.notebooks.getAnalytics` `discoveryengine.notebooks.getIamPolicy` `discoveryengine.notebooks.interactSources` `discoveryengine.notebooks.list` `discoveryengine.notebooks.removeSelf` `discoveryengine.notebooks.setIamPolicy` `discoveryengine.notebooks.update` `discoveryengine.notes.` `discoveryengine.notes.create` `discoveryengine.notes.delete` `discoveryengine.notes.get` `discoveryengine.notes.update` `discoveryengine.sources.*` `discoveryengine.sources.checkFreshness` `discoveryengine.sources.create` `discoveryengine.sources.delete` `discoveryengine.sources.generateDocumentGuide` `discoveryengine.sources.get` `discoveryengine.sources.refresh` `discoveryengine.sources.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud NotebookLM User (`roles/discoveryengine.notebookLmUser`) Grants user-level access to Cloud NotebookLM resources.	`discoveryengine.accounts.create` `discoveryengine.locations.completeExternalIdentities` `discoveryengine.notebooks.create` `discoveryengine.notebooks.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Grants full access to a Cloud NotebookLM Notebook.	`discoveryengine.audioOverviews.` `discoveryengine.audioOverviews.create` `discoveryengine.audioOverviews.delete` `discoveryengine.audioOverviews.get` `discoveryengine.audioOverviews.getIceConfig` `discoveryengine.audioOverviews.sendSdpOffer` `discoveryengine.notebooks.generateGuide` `discoveryengine.notebooks.get` `discoveryengine.notebooks.getAnalytics` `discoveryengine.notebooks.getIamPolicy` `discoveryengine.notebooks.interactSources` `discoveryengine.notebooks.list` `discoveryengine.notebooks.removeSelf` `discoveryengine.notebooks.setIamPolicy` `discoveryengine.notebooks.update` `discoveryengine.notes.` `discoveryengine.notes.create` `discoveryengine.notes.delete` `discoveryengine.notes.get` `discoveryengine.notes.update` `discoveryengine.sources.*` `discoveryengine.sources.checkFreshness` `discoveryengine.sources.create` `discoveryengine.sources.delete` `discoveryengine.sources.generateDocumentGuide` `discoveryengine.sources.get` `discoveryengine.sources.refresh` `discoveryengine.sources.update`
Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`) Grants read-only access to a Cloud NotebookLM Notebook.	`discoveryengine.audioOverviews.get` `discoveryengine.audioOverviews.getIceConfig` `discoveryengine.audioOverviews.sendSdpOffer` `discoveryengine.notebooks.generateGuide` `discoveryengine.notebooks.get` `discoveryengine.notebooks.getIamPolicy` `discoveryengine.notebooks.interactSources` `discoveryengine.notebooks.list` `discoveryengine.notebooks.removeSelf` `discoveryengine.notes.get` `discoveryengine.sources.checkFreshness` `discoveryengine.sources.generateDocumentGuide` `discoveryengine.sources.get`
Podcast API User ^Beta (`roles/discoveryengine.podcastApiUser`) Grants user-level access to the Podcast resources.	`businessaicode.` `businessaicode.locations.fetchQuotaStatus` `businessaicode.locations.generateContent` `businessaicode.locations.queryConfiguration` `businessaicode.locations.selfAssignLicense` `businessaicode.locations.sendTelemetry` `cloudaicompanion.companions.` `cloudaicompanion.companions.generateChat` `cloudaicompanion.companions.generateCode` `cloudaicompanion.entitlements.get` `cloudaicompanion.instances.` `cloudaicompanion.instances.completeCode` `cloudaicompanion.instances.completeTask` `cloudaicompanion.instances.exportMetrics` `cloudaicompanion.instances.generateCode` `cloudaicompanion.instances.generateText` `cloudaicompanion.instances.queryEffectiveSetting` `cloudaicompanion.instances.queryEffectiveSettingBindings` `cloudaicompanion.licenses.selfAssign` `cloudaicompanion.operations.get` `cloudaicompanion.topics.create` `discoveryengine.accounts.create` `discoveryengine.agentFiles.` `discoveryengine.agentFiles.delete` `discoveryengine.agentFiles.download` `discoveryengine.agentFiles.import` `discoveryengine.agentFiles.list` `discoveryengine.agentFiles.upload` `discoveryengine.agentIamProposals.` `discoveryengine.agentIamProposals.create` `discoveryengine.agentIamProposals.delete` `discoveryengine.agentIamProposals.get` `discoveryengine.agentIamProposals.list` `discoveryengine.agents.create` `discoveryengine.agents.delete` `discoveryengine.agents.get` `discoveryengine.agents.getAgentView` `discoveryengine.agents.list` `discoveryengine.agents.listAvailableAgentViews` `discoveryengine.agents.requestReview` `discoveryengine.agents.update` `discoveryengine.answers.get` `discoveryengine.assistAnswers.get` `discoveryengine.assistants.assist` `discoveryengine.authorizations.storeUserAuthorization` `discoveryengine.cannedQueries.listActiveCannedQueryUserViews` `discoveryengine.collections.get` `discoveryengine.completionConfigs.completeQuery` `discoveryengine.completionConfigs.removeSuggestion` `discoveryengine.dataConnectors.acquireAccessToken` `discoveryengine.dataConnectors.acquireAndStoreRefreshToken` `discoveryengine.dataConnectors.buildActionInvocation` `discoveryengine.dataConnectors.checkRefreshToken` `discoveryengine.dataConnectors.executeAction` `discoveryengine.dataConnectors.queryAvailableActions` `discoveryengine.dataStores.get` `discoveryengine.devToolsConfigs.get` `discoveryengine.engines.createEngineUserData` `discoveryengine.engines.generateMemories` `discoveryengine.engines.generatePersonalContext` `discoveryengine.engines.get` `discoveryengine.engines.getEngineUserData` `discoveryengine.engines.getPersonalContext` `discoveryengine.engines.updateEngineUserData` `discoveryengine.homepageDataConfigs.fetchDocuments` `discoveryengine.ideaForgeIdeas.` `discoveryengine.ideaForgeIdeas.create` `discoveryengine.ideaForgeIdeas.get` `discoveryengine.ideaForgeInstances.` `discoveryengine.ideaForgeInstances.get` `discoveryengine.ideaForgeInstances.start` `discoveryengine.locations.completeExternalIdentities` `discoveryengine.locations.fetchAgentCards` `discoveryengine.memories.` `discoveryengine.memories.delete` `discoveryengine.memories.list` `discoveryengine.memories.retrieve` `discoveryengine.memories.update` `discoveryengine.notebooks.create` `discoveryengine.notebooks.list` `discoveryengine.notificationMessages.` `discoveryengine.notificationMessages.ackAll` `discoveryengine.notificationMessages.list` `discoveryengine.notificationMessages.update` `discoveryengine.operations.get` `discoveryengine.podcasts.create` `discoveryengine.servingConfigs.answer` `discoveryengine.servingConfigs.recommend` `discoveryengine.servingConfigs.search` `discoveryengine.sessions.` `discoveryengine.sessions.addContextFile` `discoveryengine.sessions.create` `discoveryengine.sessions.delete` `discoveryengine.sessions.downloadFile` `discoveryengine.sessions.generateSummary` `discoveryengine.sessions.get` `discoveryengine.sessions.list` `discoveryengine.sessions.listSessionFileMetadata` `discoveryengine.sessions.recommendQuestions` `discoveryengine.sessions.removeContextFile` `discoveryengine.sessions.search` `discoveryengine.sessions.selectContextFiles` `discoveryengine.sessions.update` `discoveryengine.sessions.uploadFile` `discoveryengine.sharedContents.` `discoveryengine.sharedContents.create` `discoveryengine.sharedContents.delete` `discoveryengine.sharedContents.get` `discoveryengine.sharedContents.list` `discoveryengine.userEvents.create` `discoveryengine.users.` `discoveryengine.users.get` `discoveryengine.users.update` `discoveryengine.widgetConfigs.get` `geminicloudassist.agents.invoke` `resourcemanager.projects.get` `resourcemanager.projects.list`

Discovery Engine Admin

(roles/discoveryengine.admin)

Grants full access to all discoveryengine resources.

cloudaicompanion.aiDevToolsSettings.*

cloudaicompanion.aiDevToolsSettings.create
cloudaicompanion.aiDevToolsSettings.delete
cloudaicompanion.aiDevToolsSettings.get
cloudaicompanion.aiDevToolsSettings.list
cloudaicompanion.aiDevToolsSettings.update

cloudaicompanion.codeRepositoryIndexes.*

cloudaicompanion.codeRepositoryIndexes.create
cloudaicompanion.codeRepositoryIndexes.delete
cloudaicompanion.codeRepositoryIndexes.get
cloudaicompanion.codeRepositoryIndexes.list
cloudaicompanion.codeRepositoryIndexes.update

cloudaicompanion.codeToolsSettings.*

cloudaicompanion.codeToolsSettings.create
cloudaicompanion.codeToolsSettings.delete
cloudaicompanion.codeToolsSettings.get
cloudaicompanion.codeToolsSettings.list
cloudaicompanion.codeToolsSettings.update

cloudaicompanion.dataSharingWithGoogleSettings.*

cloudaicompanion.dataSharingWithGoogleSettings.create
cloudaicompanion.dataSharingWithGoogleSettings.delete
cloudaicompanion.dataSharingWithGoogleSettings.get
cloudaicompanion.dataSharingWithGoogleSettings.list
cloudaicompanion.dataSharingWithGoogleSettings.update

cloudaicompanion.geminiGcpEnablementSettings.*

cloudaicompanion.geminiGcpEnablementSettings.create
cloudaicompanion.geminiGcpEnablementSettings.delete
cloudaicompanion.geminiGcpEnablementSettings.get
cloudaicompanion.geminiGcpEnablementSettings.list
cloudaicompanion.geminiGcpEnablementSettings.update

cloudaicompanion.instances.queryEffectiveSetting

cloudaicompanion.instances.queryEffectiveSettingBindings

cloudaicompanion.loggingSettings.*

cloudaicompanion.loggingSettings.create
cloudaicompanion.loggingSettings.delete
cloudaicompanion.loggingSettings.get
cloudaicompanion.loggingSettings.list
cloudaicompanion.loggingSettings.update

cloudaicompanion.operations.*

cloudaicompanion.operations.cancel
cloudaicompanion.operations.delete
cloudaicompanion.operations.get
cloudaicompanion.operations.list

cloudaicompanion.releaseChannelSettings.*

cloudaicompanion.releaseChannelSettings.create
cloudaicompanion.releaseChannelSettings.delete
cloudaicompanion.releaseChannelSettings.get
cloudaicompanion.releaseChannelSettings.list
cloudaicompanion.releaseChannelSettings.update

cloudaicompanion.repositoryGroups.create

cloudaicompanion.repositoryGroups.delete

cloudaicompanion.repositoryGroups.get

cloudaicompanion.repositoryGroups.getIamPolicy

cloudaicompanion.repositoryGroups.list

cloudaicompanion.repositoryGroups.setIamPolicy

cloudaicompanion.repositoryGroups.update

cloudaicompanion.settingBindings.*

cloudaicompanion.settingBindings.aiDevToolsSettingsCreate
cloudaicompanion.settingBindings.aiDevToolsSettingsDelete
cloudaicompanion.settingBindings.aiDevToolsSettingsGet
cloudaicompanion.settingBindings.aiDevToolsSettingsList
cloudaicompanion.settingBindings.aiDevToolsSettingsUpdate
cloudaicompanion.settingBindings.aiDevToolsSettingsUse
cloudaicompanion.settingBindings.codeToolsSettingsCreate
cloudaicompanion.settingBindings.codeToolsSettingsDelete
cloudaicompanion.settingBindings.codeToolsSettingsGet
cloudaicompanion.settingBindings.codeToolsSettingsList
cloudaicompanion.settingBindings.codeToolsSettingsUpdate
cloudaicompanion.settingBindings.codeToolsSettingsUse
cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsCreate
cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsDelete
cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsGet
cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsList
cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsUpdate
cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsUse
cloudaicompanion.settingBindings.geminiGcpEnablementSettingsCreate
cloudaicompanion.settingBindings.geminiGcpEnablementSettingsDelete
cloudaicompanion.settingBindings.geminiGcpEnablementSettingsGet
cloudaicompanion.settingBindings.geminiGcpEnablementSettingsList
cloudaicompanion.settingBindings.geminiGcpEnablementSettingsUpdate
cloudaicompanion.settingBindings.geminiGcpEnablementSettingsUse
cloudaicompanion.settingBindings.loggingSettingsCreate
cloudaicompanion.settingBindings.loggingSettingsDelete
cloudaicompanion.settingBindings.loggingSettingsGet
cloudaicompanion.settingBindings.loggingSettingsList
cloudaicompanion.settingBindings.loggingSettingsUpdate
cloudaicompanion.settingBindings.loggingSettingsUse
cloudaicompanion.settingBindings.releaseChannelSettingsCreate
cloudaicompanion.settingBindings.releaseChannelSettingsDelete
cloudaicompanion.settingBindings.releaseChannelSettingsGet
cloudaicompanion.settingBindings.releaseChannelSettingsList
cloudaicompanion.settingBindings.releaseChannelSettingsUpdate
cloudaicompanion.settingBindings.releaseChannelSettingsUse

cloudnotifications.activities.list

cloudtrace.insights.*

cloudtrace.insights.get
cloudtrace.insights.list

cloudtrace.stats.get

cloudtrace.tasks.*

cloudtrace.tasks.create
cloudtrace.tasks.delete
cloudtrace.tasks.get
cloudtrace.tasks.list

cloudtrace.traceScopes.*

cloudtrace.traceScopes.create
cloudtrace.traceScopes.delete
cloudtrace.traceScopes.get
cloudtrace.traceScopes.list
cloudtrace.traceScopes.update

cloudtrace.traces.get

cloudtrace.traces.list

consumerprocurement.entitlements.*

consumerprocurement.entitlements.get
consumerprocurement.entitlements.list

discoveryengine.aclConfigs.*

discoveryengine.aclConfigs.get
discoveryengine.aclConfigs.update

discoveryengine.agentFiles.*

discoveryengine.agentFiles.delete
discoveryengine.agentFiles.download
discoveryengine.agentFiles.import
discoveryengine.agentFiles.list
discoveryengine.agentFiles.upload

discoveryengine.agentIamProposals.*

discoveryengine.agentIamProposals.create
discoveryengine.agentIamProposals.delete
discoveryengine.agentIamProposals.get
discoveryengine.agentIamProposals.list

discoveryengine.agents.create

discoveryengine.agents.delete

discoveryengine.agents.get

discoveryengine.agents.getAgentView

discoveryengine.agents.getIamPolicy

discoveryengine.agents.list

discoveryengine.agents.listAvailableAgentViews

discoveryengine.agents.manage

discoveryengine.agents.setIamPolicy

discoveryengine.agents.update

discoveryengine.alertPolicies.*

discoveryengine.alertPolicies.create
discoveryengine.alertPolicies.get
discoveryengine.alertPolicies.update

discoveryengine.analytics.*

discoveryengine.analytics.acquireDashboardSession
discoveryengine.analytics.refreshDashboardSessionTokens

discoveryengine.answers.get

discoveryengine.assistAnswers.get

discoveryengine.assistants.*

discoveryengine.assistants.assist
discoveryengine.assistants.create
discoveryengine.assistants.delete
discoveryengine.assistants.get
discoveryengine.assistants.list
discoveryengine.assistants.update

discoveryengine.authorizations.*

discoveryengine.authorizations.create
discoveryengine.authorizations.delete
discoveryengine.authorizations.get
discoveryengine.authorizations.list
discoveryengine.authorizations.storeUserAuthorization
discoveryengine.authorizations.update

discoveryengine.billingAccountLicenseConfigs.*

discoveryengine.billingAccountLicenseConfigs.distribute
discoveryengine.billingAccountLicenseConfigs.get
discoveryengine.billingAccountLicenseConfigs.list
discoveryengine.billingAccountLicenseConfigs.retract

discoveryengine.branches.*

discoveryengine.branches.get
discoveryengine.branches.list

discoveryengine.cannedQueries.*

discoveryengine.cannedQueries.create
discoveryengine.cannedQueries.delete
discoveryengine.cannedQueries.get
discoveryengine.cannedQueries.list
discoveryengine.cannedQueries.listActiveCannedQueryUserViews
discoveryengine.cannedQueries.update

discoveryengine.cmekConfigs.*

discoveryengine.cmekConfigs.get
discoveryengine.cmekConfigs.list
discoveryengine.cmekConfigs.update

discoveryengine.collections.*

discoveryengine.collections.delete
discoveryengine.collections.get
discoveryengine.collections.getIamPolicy
discoveryengine.collections.list
discoveryengine.collections.setIamPolicy

discoveryengine.completionConfigs.*

discoveryengine.completionConfigs.completeQuery
discoveryengine.completionConfigs.get
discoveryengine.completionConfigs.removeSuggestion
discoveryengine.completionConfigs.update

discoveryengine.completionSuggestions.*

discoveryengine.completionSuggestions.import
discoveryengine.completionSuggestions.purge

discoveryengine.connectorRuns.*

discoveryengine.connectorRuns.cancel
discoveryengine.connectorRuns.list

discoveryengine.controls.*

discoveryengine.controls.create
discoveryengine.controls.delete
discoveryengine.controls.get
discoveryengine.controls.list
discoveryengine.controls.update

discoveryengine.conversations.*

discoveryengine.conversations.converse
discoveryengine.conversations.create
discoveryengine.conversations.delete
discoveryengine.conversations.get
discoveryengine.conversations.list
discoveryengine.conversations.update

discoveryengine.dataConnectors.*

discoveryengine.dataConnectors.acquireAccessToken
discoveryengine.dataConnectors.acquireAndStoreRefreshToken
discoveryengine.dataConnectors.buildActionInvocation
discoveryengine.dataConnectors.checkRefreshToken
discoveryengine.dataConnectors.executeAction
discoveryengine.dataConnectors.get
discoveryengine.dataConnectors.queryAvailableActions
discoveryengine.dataConnectors.startConnectorRun
discoveryengine.dataConnectors.update

discoveryengine.dataStores.*

discoveryengine.dataStores.completeQuery
discoveryengine.dataStores.create
discoveryengine.dataStores.delete
discoveryengine.dataStores.enrollSolutions
discoveryengine.dataStores.get
discoveryengine.dataStores.getIamPolicy
discoveryengine.dataStores.list
discoveryengine.dataStores.listCustomModels
discoveryengine.dataStores.setIamPolicy
discoveryengine.dataStores.trainCustomModel
discoveryengine.dataStores.update

discoveryengine.devToolsConfigs.*

discoveryengine.devToolsConfigs.get
discoveryengine.devToolsConfigs.update

discoveryengine.documentProcessingConfigs.*

discoveryengine.documentProcessingConfigs.get
discoveryengine.documentProcessingConfigs.update

discoveryengine.documents.*

discoveryengine.documents.batchGetDocumentsMetadata
discoveryengine.documents.create
discoveryengine.documents.delete
discoveryengine.documents.get
discoveryengine.documents.import
discoveryengine.documents.list
discoveryengine.documents.purge
discoveryengine.documents.update

discoveryengine.engines.*

discoveryengine.engines.create
discoveryengine.engines.createEngineUserData
discoveryengine.engines.delete
discoveryengine.engines.generateMemories
discoveryengine.engines.generatePersonalContext
discoveryengine.engines.get
discoveryengine.engines.getEngineUserData
discoveryengine.engines.getIamPolicy
discoveryengine.engines.getPersonalContext
discoveryengine.engines.list
discoveryengine.engines.pause
discoveryengine.engines.resume
discoveryengine.engines.setIamPolicy
discoveryengine.engines.tune
discoveryengine.engines.update
discoveryengine.engines.updateEngineUserData

discoveryengine.evaluations.*

discoveryengine.evaluations.create
discoveryengine.evaluations.get
discoveryengine.evaluations.list

discoveryengine.groundingConfigs.check

discoveryengine.homepageDataConfigs.fetchDocuments

discoveryengine.ideaForgeIdeas.*

discoveryengine.ideaForgeIdeas.create
discoveryengine.ideaForgeIdeas.get

discoveryengine.ideaForgeInstances.*

discoveryengine.ideaForgeInstances.get
discoveryengine.ideaForgeInstances.start

discoveryengine.identityMappingStores.*

discoveryengine.identityMappingStores.create
discoveryengine.identityMappingStores.delete
discoveryengine.identityMappingStores.get
discoveryengine.identityMappingStores.importIdentityMappings
discoveryengine.identityMappingStores.list
discoveryengine.identityMappingStores.listIdentityMappings
discoveryengine.identityMappingStores.purgeIdentityMappings

discoveryengine.licenseConfigs.*

discoveryengine.licenseConfigs.create
discoveryengine.licenseConfigs.get
discoveryengine.licenseConfigs.list
discoveryengine.licenseConfigs.update

discoveryengine.locations.*

discoveryengine.locations.completeExternalIdentities
discoveryengine.locations.estimateDataSize
discoveryengine.locations.exchangeAuthCredentials
discoveryengine.locations.fetchAgentCards
discoveryengine.locations.getConnectorSource
discoveryengine.locations.listConnectorSources
discoveryengine.locations.setUpDataConnector

discoveryengine.memories.*

discoveryengine.memories.delete
discoveryengine.memories.list
discoveryengine.memories.retrieve
discoveryengine.memories.update

discoveryengine.models.*

discoveryengine.models.create
discoveryengine.models.delete
discoveryengine.models.get
discoveryengine.models.list
discoveryengine.models.pause
discoveryengine.models.resume
discoveryengine.models.tune
discoveryengine.models.update

discoveryengine.notificationMessages.*

discoveryengine.notificationMessages.ackAll
discoveryengine.notificationMessages.list
discoveryengine.notificationMessages.update

discoveryengine.operations.*

discoveryengine.operations.get
discoveryengine.operations.list

discoveryengine.projectOverageConfigs.get

discoveryengine.projects.*

discoveryengine.projects.get
discoveryengine.projects.provision
discoveryengine.projects.reportConsentChange
discoveryengine.projects.update

discoveryengine.rankingConfigs.rank

discoveryengine.sampleQueries.*

discoveryengine.sampleQueries.create
discoveryengine.sampleQueries.delete
discoveryengine.sampleQueries.get
discoveryengine.sampleQueries.import
discoveryengine.sampleQueries.list
discoveryengine.sampleQueries.update

discoveryengine.sampleQuerySets.*

discoveryengine.sampleQuerySets.create
discoveryengine.sampleQuerySets.delete
discoveryengine.sampleQuerySets.get
discoveryengine.sampleQuerySets.list
discoveryengine.sampleQuerySets.update

discoveryengine.schemas.*

discoveryengine.schemas.create
discoveryengine.schemas.delete
discoveryengine.schemas.get
discoveryengine.schemas.list
discoveryengine.schemas.preview
discoveryengine.schemas.update
discoveryengine.schemas.validate

discoveryengine.servingConfigs.*

discoveryengine.servingConfigs.answer
discoveryengine.servingConfigs.create
discoveryengine.servingConfigs.delete
discoveryengine.servingConfigs.get
discoveryengine.servingConfigs.list
discoveryengine.servingConfigs.recommend
discoveryengine.servingConfigs.search
discoveryengine.servingConfigs.update

discoveryengine.sessions.*

discoveryengine.sessions.addContextFile
discoveryengine.sessions.create
discoveryengine.sessions.delete
discoveryengine.sessions.downloadFile
discoveryengine.sessions.generateSummary
discoveryengine.sessions.get
discoveryengine.sessions.list
discoveryengine.sessions.listSessionFileMetadata
discoveryengine.sessions.recommendQuestions
discoveryengine.sessions.removeContextFile
discoveryengine.sessions.search
discoveryengine.sessions.selectContextFiles
discoveryengine.sessions.update
discoveryengine.sessions.uploadFile

discoveryengine.sharedContents.*

discoveryengine.sharedContents.create
discoveryengine.sharedContents.delete
discoveryengine.sharedContents.get
discoveryengine.sharedContents.list

discoveryengine.siteSearchEngines.*

discoveryengine.siteSearchEngines.batchVerifyTargetSites
discoveryengine.siteSearchEngines.disableAdvancedSiteSearch
discoveryengine.siteSearchEngines.enableAdvancedSiteSearch
discoveryengine.siteSearchEngines.fetchDomainVerificationStatus
discoveryengine.siteSearchEngines.get
discoveryengine.siteSearchEngines.recrawlUris

discoveryengine.sitemaps.*

discoveryengine.sitemaps.create
discoveryengine.sitemaps.delete
discoveryengine.sitemaps.fetch

discoveryengine.suggestionDenyListEntries.*

discoveryengine.suggestionDenyListEntries.import
discoveryengine.suggestionDenyListEntries.purge

discoveryengine.targetSites.*

discoveryengine.targetSites.batchCreate
discoveryengine.targetSites.create
discoveryengine.targetSites.delete
discoveryengine.targetSites.get
discoveryengine.targetSites.list
discoveryengine.targetSites.update

discoveryengine.userEvents.*

discoveryengine.userEvents.create
discoveryengine.userEvents.fetchStats
discoveryengine.userEvents.import
discoveryengine.userEvents.purge

discoveryengine.userStores.*

discoveryengine.userStores.batchUpdateUserLicenses
discoveryengine.userStores.get
discoveryengine.userStores.listUserLicenses
discoveryengine.userStores.update

discoveryengine.users.*

discoveryengine.users.get
discoveryengine.users.update

discoveryengine.widgetConfigs.*

discoveryengine.widgetConfigs.get
discoveryengine.widgetConfigs.update

logging.buckets.get

logging.buckets.list

logging.exclusions.get

logging.exclusions.list

logging.links.get

logging.links.list

logging.locations.*

logging.locations.get
logging.locations.list

logging.logEntries.list

logging.logMetrics.get

logging.logMetrics.list

logging.logScopes.get

logging.logScopes.list

logging.logServiceIndexes.list

logging.logServices.list

logging.logs.list

logging.operations.get

logging.operations.list

logging.queries.getShared

logging.queries.listShared

logging.queries.usePrivate

logging.sinks.get

logging.sinks.list

logging.usage.get

logging.views.get

logging.views.list

monitoring.alertPolicies.get

monitoring.alertPolicies.list

monitoring.alertPolicies.listEffectiveTags

monitoring.alertPolicies.listTagBindings

monitoring.alerts.*

monitoring.alerts.get
monitoring.alerts.list

monitoring.dashboards.get

monitoring.dashboards.list

monitoring.dashboards.listEffectiveTags

monitoring.dashboards.listTagBindings

monitoring.groups.get

monitoring.groups.list

monitoring.metricDescriptors.get

monitoring.metricDescriptors.list

monitoring.monitoredResourceDescriptors.*

monitoring.monitoredResourceDescriptors.get
monitoring.monitoredResourceDescriptors.list

monitoring.notificationChannelDescriptors.*

monitoring.notificationChannelDescriptors.get
monitoring.notificationChannelDescriptors.list

monitoring.notificationChannels.get

monitoring.notificationChannels.list

monitoring.services.get

monitoring.services.list

monitoring.slos.get

monitoring.slos.list

monitoring.snoozes.get

monitoring.snoozes.list

monitoring.timeSeries.list

monitoring.uptimeCheckConfigs.get

monitoring.uptimeCheckConfigs.list

observability.scopes.get

observability.traceScopes.*

observability.traceScopes.create
observability.traceScopes.delete
observability.traceScopes.get
observability.traceScopes.list
observability.traceScopes.update

opsconfigmonitoring.resourceMetadata.list

resourcemanager.projects.get

resourcemanager.projects.list

stackdriver.projects.get

stackdriver.resourceMetadata.list

Agent Admin ^Beta

(roles/discoveryengine.agentAdmin)

Grants admin-level access to Agent resources.

discoveryengine.agentFiles.*

discoveryengine.agentFiles.delete
discoveryengine.agentFiles.download
discoveryengine.agentFiles.import
discoveryengine.agentFiles.list
discoveryengine.agentFiles.upload

discoveryengine.agentIamProposals.get

discoveryengine.agentIamProposals.list

discoveryengine.agents.create

discoveryengine.agents.delete

discoveryengine.agents.get

discoveryengine.agents.getIamPolicy

discoveryengine.agents.list

discoveryengine.agents.manage

discoveryengine.agents.setIamPolicy

discoveryengine.agents.update

Discovery Engine Editor

(roles/discoveryengine.editor)

Grants read and write access to all discovery engine resources.

discoveryengine.aclConfigs.get

discoveryengine.agentFiles.*

discoveryengine.agentFiles.delete
discoveryengine.agentFiles.download
discoveryengine.agentFiles.import
discoveryengine.agentFiles.list
discoveryengine.agentFiles.upload

discoveryengine.agents.create

discoveryengine.agents.delete

discoveryengine.agents.get

discoveryengine.agents.getAgentView

discoveryengine.agents.getIamPolicy

discoveryengine.agents.list

discoveryengine.agents.listAvailableAgentViews

discoveryengine.agents.manage

discoveryengine.agents.update

discoveryengine.alertPolicies.get

discoveryengine.analytics.*

discoveryengine.analytics.acquireDashboardSession
discoveryengine.analytics.refreshDashboardSessionTokens

discoveryengine.answers.get

discoveryengine.assistAnswers.get

discoveryengine.assistants.assist

discoveryengine.assistants.get

discoveryengine.assistants.list

discoveryengine.authorizations.storeUserAuthorization

discoveryengine.branches.*

discoveryengine.branches.get
discoveryengine.branches.list

discoveryengine.cannedQueries.get

discoveryengine.cannedQueries.list

discoveryengine.cannedQueries.listActiveCannedQueryUserViews

discoveryengine.cmekConfigs.get

discoveryengine.cmekConfigs.list

discoveryengine.collections.get

discoveryengine.collections.list

discoveryengine.completionConfigs.completeQuery

discoveryengine.completionConfigs.get

discoveryengine.completionConfigs.removeSuggestion

discoveryengine.connectorRuns.list

discoveryengine.controls.get

discoveryengine.controls.list

discoveryengine.conversations.*

discoveryengine.conversations.converse
discoveryengine.conversations.create
discoveryengine.conversations.delete
discoveryengine.conversations.get
discoveryengine.conversations.list
discoveryengine.conversations.update

discoveryengine.dataConnectors.acquireAccessToken

discoveryengine.dataConnectors.acquireAndStoreRefreshToken

discoveryengine.dataConnectors.buildActionInvocation

discoveryengine.dataConnectors.checkRefreshToken

discoveryengine.dataConnectors.executeAction

discoveryengine.dataConnectors.get

discoveryengine.dataConnectors.queryAvailableActions

discoveryengine.dataStores.completeQuery

discoveryengine.dataStores.get

discoveryengine.dataStores.list

discoveryengine.dataStores.listCustomModels

discoveryengine.dataStores.trainCustomModel

discoveryengine.devToolsConfigs.get

discoveryengine.documentProcessingConfigs.get

discoveryengine.documents.batchGetDocumentsMetadata

discoveryengine.documents.create

discoveryengine.documents.delete

discoveryengine.documents.get

discoveryengine.documents.import

discoveryengine.documents.list

discoveryengine.documents.update

discoveryengine.engines.createEngineUserData

discoveryengine.engines.generateMemories

discoveryengine.engines.generatePersonalContext

discoveryengine.engines.get

discoveryengine.engines.getEngineUserData

discoveryengine.engines.getPersonalContext

discoveryengine.engines.list

discoveryengine.engines.pause

discoveryengine.engines.resume

discoveryengine.engines.tune

discoveryengine.engines.updateEngineUserData

discoveryengine.evaluations.get

discoveryengine.evaluations.list

discoveryengine.groundingConfigs.check

discoveryengine.homepageDataConfigs.fetchDocuments

discoveryengine.ideaForgeIdeas.*

discoveryengine.ideaForgeIdeas.create
discoveryengine.ideaForgeIdeas.get

discoveryengine.ideaForgeInstances.*

discoveryengine.ideaForgeInstances.get
discoveryengine.ideaForgeInstances.start

discoveryengine.identityMappingStores.*

discoveryengine.identityMappingStores.create
discoveryengine.identityMappingStores.delete
discoveryengine.identityMappingStores.get
discoveryengine.identityMappingStores.importIdentityMappings
discoveryengine.identityMappingStores.list
discoveryengine.identityMappingStores.listIdentityMappings
discoveryengine.identityMappingStores.purgeIdentityMappings

discoveryengine.licenseConfigs.get

discoveryengine.licenseConfigs.list

discoveryengine.locations.completeExternalIdentities

discoveryengine.locations.fetchAgentCards

discoveryengine.memories.*

discoveryengine.memories.delete
discoveryengine.memories.list
discoveryengine.memories.retrieve
discoveryengine.memories.update

discoveryengine.models.*

discoveryengine.models.create
discoveryengine.models.delete
discoveryengine.models.get
discoveryengine.models.list
discoveryengine.models.pause
discoveryengine.models.resume
discoveryengine.models.tune
discoveryengine.models.update

discoveryengine.notificationMessages.*

discoveryengine.notificationMessages.ackAll
discoveryengine.notificationMessages.list
discoveryengine.notificationMessages.update

discoveryengine.operations.*

discoveryengine.operations.get
discoveryengine.operations.list

discoveryengine.projectOverageConfigs.get

discoveryengine.projects.get

discoveryengine.rankingConfigs.rank

discoveryengine.sampleQueries.*

discoveryengine.sampleQueries.create
discoveryengine.sampleQueries.delete
discoveryengine.sampleQueries.get
discoveryengine.sampleQueries.import
discoveryengine.sampleQueries.list
discoveryengine.sampleQueries.update

discoveryengine.sampleQuerySets.*

discoveryengine.sampleQuerySets.create
discoveryengine.sampleQuerySets.delete
discoveryengine.sampleQuerySets.get
discoveryengine.sampleQuerySets.list
discoveryengine.sampleQuerySets.update

discoveryengine.schemas.get

discoveryengine.schemas.list

discoveryengine.schemas.preview

discoveryengine.schemas.validate

discoveryengine.servingConfigs.answer

discoveryengine.servingConfigs.get

discoveryengine.servingConfigs.list

discoveryengine.servingConfigs.recommend

discoveryengine.servingConfigs.search

discoveryengine.sessions.*

discoveryengine.sessions.addContextFile
discoveryengine.sessions.create
discoveryengine.sessions.delete
discoveryengine.sessions.downloadFile
discoveryengine.sessions.generateSummary
discoveryengine.sessions.get
discoveryengine.sessions.list
discoveryengine.sessions.listSessionFileMetadata
discoveryengine.sessions.recommendQuestions
discoveryengine.sessions.removeContextFile
discoveryengine.sessions.search
discoveryengine.sessions.selectContextFiles
discoveryengine.sessions.update
discoveryengine.sessions.uploadFile

discoveryengine.sharedContents.*

discoveryengine.sharedContents.create
discoveryengine.sharedContents.delete
discoveryengine.sharedContents.get
discoveryengine.sharedContents.list

discoveryengine.siteSearchEngines.get

discoveryengine.targetSites.get

discoveryengine.targetSites.list

discoveryengine.userEvents.create

discoveryengine.userEvents.fetchStats

discoveryengine.userEvents.import

discoveryengine.userStores.get

discoveryengine.widgetConfigs.*

discoveryengine.widgetConfigs.get
discoveryengine.widgetConfigs.update

resourcemanager.projects.get

resourcemanager.projects.list

Discovery Engine User

(roles/discoveryengine.user)

Grants user-level access to Discovery Engine resources.

businessaicode.*

businessaicode.locations.fetchQuotaStatus
businessaicode.locations.generateContent
businessaicode.locations.queryConfiguration
businessaicode.locations.selfAssignLicense
businessaicode.locations.sendTelemetry

cloudaicompanion.companions.*

cloudaicompanion.companions.generateChat
cloudaicompanion.companions.generateCode

cloudaicompanion.entitlements.get

cloudaicompanion.instances.*

cloudaicompanion.instances.completeCode
cloudaicompanion.instances.completeTask
cloudaicompanion.instances.exportMetrics
cloudaicompanion.instances.generateCode
cloudaicompanion.instances.generateText
cloudaicompanion.instances.queryEffectiveSetting
cloudaicompanion.instances.queryEffectiveSettingBindings

cloudaicompanion.licenses.selfAssign

cloudaicompanion.operations.get

cloudaicompanion.topics.create

discoveryengine.accounts.create

discoveryengine.agentFiles.*

discoveryengine.agentFiles.delete
discoveryengine.agentFiles.download
discoveryengine.agentFiles.import
discoveryengine.agentFiles.list
discoveryengine.agentFiles.upload

discoveryengine.agentIamProposals.*

discoveryengine.agentIamProposals.create
discoveryengine.agentIamProposals.delete
discoveryengine.agentIamProposals.get
discoveryengine.agentIamProposals.list

discoveryengine.agents.create

discoveryengine.agents.delete

discoveryengine.agents.get

discoveryengine.agents.getAgentView

discoveryengine.agents.list

discoveryengine.agents.listAvailableAgentViews

discoveryengine.agents.requestReview

discoveryengine.agents.update

discoveryengine.answers.get

discoveryengine.assistAnswers.get

discoveryengine.assistants.assist

discoveryengine.authorizations.storeUserAuthorization

discoveryengine.cannedQueries.listActiveCannedQueryUserViews

discoveryengine.collections.get

discoveryengine.completionConfigs.completeQuery

discoveryengine.completionConfigs.removeSuggestion

discoveryengine.dataConnectors.acquireAccessToken

discoveryengine.dataConnectors.acquireAndStoreRefreshToken

discoveryengine.dataConnectors.buildActionInvocation

discoveryengine.dataConnectors.checkRefreshToken

discoveryengine.dataConnectors.executeAction

discoveryengine.dataConnectors.queryAvailableActions

discoveryengine.dataStores.get

discoveryengine.devToolsConfigs.get

discoveryengine.engines.createEngineUserData

discoveryengine.engines.generateMemories

discoveryengine.engines.generatePersonalContext

discoveryengine.engines.get

discoveryengine.engines.getEngineUserData

discoveryengine.engines.getPersonalContext

discoveryengine.engines.updateEngineUserData

discoveryengine.homepageDataConfigs.fetchDocuments

discoveryengine.ideaForgeIdeas.*

discoveryengine.ideaForgeIdeas.create
discoveryengine.ideaForgeIdeas.get

discoveryengine.ideaForgeInstances.*

discoveryengine.ideaForgeInstances.get
discoveryengine.ideaForgeInstances.start

discoveryengine.locations.completeExternalIdentities

discoveryengine.locations.fetchAgentCards

discoveryengine.memories.*

discoveryengine.memories.delete
discoveryengine.memories.list
discoveryengine.memories.retrieve
discoveryengine.memories.update

discoveryengine.notebooks.create

discoveryengine.notebooks.list

discoveryengine.notificationMessages.*

discoveryengine.notificationMessages.ackAll
discoveryengine.notificationMessages.list
discoveryengine.notificationMessages.update

discoveryengine.servingConfigs.answer

discoveryengine.servingConfigs.recommend

discoveryengine.servingConfigs.search

discoveryengine.sessions.*

discoveryengine.sessions.addContextFile
discoveryengine.sessions.create
discoveryengine.sessions.delete
discoveryengine.sessions.downloadFile
discoveryengine.sessions.generateSummary
discoveryengine.sessions.get
discoveryengine.sessions.list
discoveryengine.sessions.listSessionFileMetadata
discoveryengine.sessions.recommendQuestions
discoveryengine.sessions.removeContextFile
discoveryengine.sessions.search
discoveryengine.sessions.selectContextFiles
discoveryengine.sessions.update
discoveryengine.sessions.uploadFile

discoveryengine.sharedContents.*

discoveryengine.sharedContents.create
discoveryengine.sharedContents.delete
discoveryengine.sharedContents.get
discoveryengine.sharedContents.list

discoveryengine.userEvents.create

discoveryengine.users.*

discoveryengine.users.get
discoveryengine.users.update

discoveryengine.widgetConfigs.get

geminicloudassist.agents.invoke

resourcemanager.projects.get

resourcemanager.projects.list

Discovery Engine Viewer

(roles/discoveryengine.viewer)

Grants read access to all discovery engine resources.

discoveryengine.aclConfigs.get

discoveryengine.agentFiles.list

discoveryengine.agents.get

discoveryengine.agents.getAgentView

discoveryengine.agents.getIamPolicy

discoveryengine.agents.list

discoveryengine.agents.listAvailableAgentViews

discoveryengine.alertPolicies.get

discoveryengine.analytics.*

discoveryengine.analytics.acquireDashboardSession
discoveryengine.analytics.refreshDashboardSessionTokens

discoveryengine.answers.get

discoveryengine.assistAnswers.get

discoveryengine.assistants.get

discoveryengine.assistants.list

discoveryengine.branches.*

discoveryengine.branches.get
discoveryengine.branches.list

discoveryengine.cannedQueries.get

discoveryengine.cannedQueries.list

discoveryengine.cannedQueries.listActiveCannedQueryUserViews

discoveryengine.cmekConfigs.get

discoveryengine.cmekConfigs.list

discoveryengine.collections.get

discoveryengine.collections.list

discoveryengine.completionConfigs.completeQuery

discoveryengine.completionConfigs.get

discoveryengine.connectorRuns.list

discoveryengine.controls.get

discoveryengine.controls.list

discoveryengine.conversations.converse

discoveryengine.conversations.get

discoveryengine.conversations.list

discoveryengine.dataConnectors.buildActionInvocation

discoveryengine.dataConnectors.checkRefreshToken

discoveryengine.dataConnectors.get

discoveryengine.dataConnectors.queryAvailableActions

discoveryengine.dataStores.completeQuery

discoveryengine.dataStores.get

discoveryengine.dataStores.list

discoveryengine.dataStores.listCustomModels

discoveryengine.devToolsConfigs.get

discoveryengine.documentProcessingConfigs.get

discoveryengine.documents.batchGetDocumentsMetadata

discoveryengine.documents.get

discoveryengine.documents.list

discoveryengine.engines.get

discoveryengine.engines.getPersonalContext

discoveryengine.engines.list

discoveryengine.evaluations.get

discoveryengine.evaluations.list

discoveryengine.groundingConfigs.check

discoveryengine.homepageDataConfigs.fetchDocuments

discoveryengine.ideaForgeIdeas.get

discoveryengine.ideaForgeInstances.get

discoveryengine.identityMappingStores.get

discoveryengine.identityMappingStores.list

discoveryengine.identityMappingStores.listIdentityMappings

discoveryengine.locations.completeExternalIdentities

discoveryengine.locations.fetchAgentCards

discoveryengine.memories.list

discoveryengine.memories.retrieve

discoveryengine.models.get

discoveryengine.models.list

discoveryengine.notificationMessages.list

discoveryengine.operations.*

discoveryengine.operations.get
discoveryengine.operations.list

discoveryengine.projectOverageConfigs.get

discoveryengine.projects.get

discoveryengine.rankingConfigs.rank

discoveryengine.sampleQueries.get

discoveryengine.sampleQueries.list

discoveryengine.sampleQuerySets.get

discoveryengine.sampleQuerySets.list

discoveryengine.schemas.get

discoveryengine.schemas.list

discoveryengine.schemas.preview

discoveryengine.schemas.validate

discoveryengine.servingConfigs.answer

discoveryengine.servingConfigs.get

discoveryengine.servingConfigs.list

discoveryengine.servingConfigs.recommend

discoveryengine.servingConfigs.search

discoveryengine.sessions.downloadFile

discoveryengine.sessions.generateSummary

discoveryengine.sessions.get

discoveryengine.sessions.list

discoveryengine.sessions.listSessionFileMetadata

discoveryengine.sessions.recommendQuestions

discoveryengine.sharedContents.get

discoveryengine.sharedContents.list

discoveryengine.siteSearchEngines.get

discoveryengine.targetSites.get

discoveryengine.targetSites.list

discoveryengine.userEvents.fetchStats

discoveryengine.userStores.get

discoveryengine.widgetConfigs.get

resourcemanager.projects.get

resourcemanager.projects.list

Gemini Enterprise Admin

(roles/discoveryengine.agentspaceAdmin)

Grants admin-level access to Gemini Enterprise resources.

cloudaicompanion.aiDevToolsSettings.*

cloudaicompanion.aiDevToolsSettings.create
cloudaicompanion.aiDevToolsSettings.delete
cloudaicompanion.aiDevToolsSettings.get
cloudaicompanion.aiDevToolsSettings.list
cloudaicompanion.aiDevToolsSettings.update

cloudaicompanion.codeRepositoryIndexes.*

cloudaicompanion.codeRepositoryIndexes.create
cloudaicompanion.codeRepositoryIndexes.delete
cloudaicompanion.codeRepositoryIndexes.get
cloudaicompanion.codeRepositoryIndexes.list
cloudaicompanion.codeRepositoryIndexes.update

cloudaicompanion.codeToolsSettings.*

cloudaicompanion.codeToolsSettings.create
cloudaicompanion.codeToolsSettings.delete
cloudaicompanion.codeToolsSettings.get
cloudaicompanion.codeToolsSettings.list
cloudaicompanion.codeToolsSettings.update

cloudaicompanion.dataSharingWithGoogleSettings.*

cloudaicompanion.dataSharingWithGoogleSettings.create
cloudaicompanion.dataSharingWithGoogleSettings.delete
cloudaicompanion.dataSharingWithGoogleSettings.get
cloudaicompanion.dataSharingWithGoogleSettings.list
cloudaicompanion.dataSharingWithGoogleSettings.update

cloudaicompanion.geminiGcpEnablementSettings.*

cloudaicompanion.geminiGcpEnablementSettings.create
cloudaicompanion.geminiGcpEnablementSettings.delete
cloudaicompanion.geminiGcpEnablementSettings.get
cloudaicompanion.geminiGcpEnablementSettings.list
cloudaicompanion.geminiGcpEnablementSettings.update

cloudaicompanion.instances.queryEffectiveSetting

cloudaicompanion.instances.queryEffectiveSettingBindings

cloudaicompanion.loggingSettings.*

cloudaicompanion.loggingSettings.create
cloudaicompanion.loggingSettings.delete
cloudaicompanion.loggingSettings.get
cloudaicompanion.loggingSettings.list
cloudaicompanion.loggingSettings.update

cloudaicompanion.operations.*

cloudaicompanion.operations.cancel
cloudaicompanion.operations.delete
cloudaicompanion.operations.get
cloudaicompanion.operations.list

cloudaicompanion.releaseChannelSettings.*

cloudaicompanion.releaseChannelSettings.create
cloudaicompanion.releaseChannelSettings.delete
cloudaicompanion.releaseChannelSettings.get
cloudaicompanion.releaseChannelSettings.list
cloudaicompanion.releaseChannelSettings.update

cloudaicompanion.repositoryGroups.create

cloudaicompanion.repositoryGroups.delete

cloudaicompanion.repositoryGroups.get

cloudaicompanion.repositoryGroups.getIamPolicy

cloudaicompanion.repositoryGroups.list

cloudaicompanion.repositoryGroups.setIamPolicy

cloudaicompanion.repositoryGroups.update

cloudaicompanion.settingBindings.*

cloudaicompanion.settingBindings.aiDevToolsSettingsCreate
cloudaicompanion.settingBindings.aiDevToolsSettingsDelete
cloudaicompanion.settingBindings.aiDevToolsSettingsGet
cloudaicompanion.settingBindings.aiDevToolsSettingsList
cloudaicompanion.settingBindings.aiDevToolsSettingsUpdate
cloudaicompanion.settingBindings.aiDevToolsSettingsUse
cloudaicompanion.settingBindings.codeToolsSettingsCreate
cloudaicompanion.settingBindings.codeToolsSettingsDelete
cloudaicompanion.settingBindings.codeToolsSettingsGet
cloudaicompanion.settingBindings.codeToolsSettingsList
cloudaicompanion.settingBindings.codeToolsSettingsUpdate
cloudaicompanion.settingBindings.codeToolsSettingsUse
cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsCreate
cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsDelete
cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsGet
cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsList
cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsUpdate
cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsUse
cloudaicompanion.settingBindings.geminiGcpEnablementSettingsCreate
cloudaicompanion.settingBindings.geminiGcpEnablementSettingsDelete
cloudaicompanion.settingBindings.geminiGcpEnablementSettingsGet
cloudaicompanion.settingBindings.geminiGcpEnablementSettingsList
cloudaicompanion.settingBindings.geminiGcpEnablementSettingsUpdate
cloudaicompanion.settingBindings.geminiGcpEnablementSettingsUse
cloudaicompanion.settingBindings.loggingSettingsCreate
cloudaicompanion.settingBindings.loggingSettingsDelete
cloudaicompanion.settingBindings.loggingSettingsGet
cloudaicompanion.settingBindings.loggingSettingsList
cloudaicompanion.settingBindings.loggingSettingsUpdate
cloudaicompanion.settingBindings.loggingSettingsUse
cloudaicompanion.settingBindings.releaseChannelSettingsCreate
cloudaicompanion.settingBindings.releaseChannelSettingsDelete
cloudaicompanion.settingBindings.releaseChannelSettingsGet
cloudaicompanion.settingBindings.releaseChannelSettingsList
cloudaicompanion.settingBindings.releaseChannelSettingsUpdate
cloudaicompanion.settingBindings.releaseChannelSettingsUse

cloudnotifications.activities.list

cloudtrace.insights.*

cloudtrace.insights.get
cloudtrace.insights.list

cloudtrace.stats.get

cloudtrace.tasks.*

cloudtrace.tasks.create
cloudtrace.tasks.delete
cloudtrace.tasks.get
cloudtrace.tasks.list

cloudtrace.traceScopes.*

cloudtrace.traceScopes.create
cloudtrace.traceScopes.delete
cloudtrace.traceScopes.get
cloudtrace.traceScopes.list
cloudtrace.traceScopes.update

cloudtrace.traces.get

cloudtrace.traces.list

consumerprocurement.entitlements.*

consumerprocurement.entitlements.get
consumerprocurement.entitlements.list

discoveryengine.aclConfigs.*

discoveryengine.aclConfigs.get
discoveryengine.aclConfigs.update

discoveryengine.agentFiles.*

discoveryengine.agentFiles.delete
discoveryengine.agentFiles.download
discoveryengine.agentFiles.import
discoveryengine.agentFiles.list
discoveryengine.agentFiles.upload

discoveryengine.agentIamProposals.*

discoveryengine.agentIamProposals.create
discoveryengine.agentIamProposals.delete
discoveryengine.agentIamProposals.get
discoveryengine.agentIamProposals.list

discoveryengine.agents.create

discoveryengine.agents.delete

discoveryengine.agents.get

discoveryengine.agents.getAgentView

discoveryengine.agents.getIamPolicy

discoveryengine.agents.list

discoveryengine.agents.listAvailableAgentViews

discoveryengine.agents.manage

discoveryengine.agents.setIamPolicy

discoveryengine.agents.update

discoveryengine.alertPolicies.*

discoveryengine.alertPolicies.create
discoveryengine.alertPolicies.get
discoveryengine.alertPolicies.update

discoveryengine.analytics.*

discoveryengine.analytics.acquireDashboardSession
discoveryengine.analytics.refreshDashboardSessionTokens

discoveryengine.answers.get

discoveryengine.assistAnswers.get

discoveryengine.assistants.*

discoveryengine.assistants.assist
discoveryengine.assistants.create
discoveryengine.assistants.delete
discoveryengine.assistants.get
discoveryengine.assistants.list
discoveryengine.assistants.update

discoveryengine.authorizations.*

discoveryengine.authorizations.create
discoveryengine.authorizations.delete
discoveryengine.authorizations.get
discoveryengine.authorizations.list
discoveryengine.authorizations.storeUserAuthorization
discoveryengine.authorizations.update

discoveryengine.billingAccountLicenseConfigs.*

discoveryengine.billingAccountLicenseConfigs.distribute
discoveryengine.billingAccountLicenseConfigs.get
discoveryengine.billingAccountLicenseConfigs.list
discoveryengine.billingAccountLicenseConfigs.retract

discoveryengine.branches.*

discoveryengine.branches.get
discoveryengine.branches.list

discoveryengine.cannedQueries.*

discoveryengine.cannedQueries.create
discoveryengine.cannedQueries.delete
discoveryengine.cannedQueries.get
discoveryengine.cannedQueries.list
discoveryengine.cannedQueries.listActiveCannedQueryUserViews
discoveryengine.cannedQueries.update

discoveryengine.cmekConfigs.*

discoveryengine.cmekConfigs.get
discoveryengine.cmekConfigs.list
discoveryengine.cmekConfigs.update

discoveryengine.collections.*

discoveryengine.collections.delete
discoveryengine.collections.get
discoveryengine.collections.getIamPolicy
discoveryengine.collections.list
discoveryengine.collections.setIamPolicy

discoveryengine.completionConfigs.*

discoveryengine.completionConfigs.completeQuery
discoveryengine.completionConfigs.get
discoveryengine.completionConfigs.removeSuggestion
discoveryengine.completionConfigs.update

discoveryengine.completionSuggestions.*

discoveryengine.completionSuggestions.import
discoveryengine.completionSuggestions.purge

discoveryengine.connectorRuns.*

discoveryengine.connectorRuns.cancel
discoveryengine.connectorRuns.list

discoveryengine.controls.*

discoveryengine.controls.create
discoveryengine.controls.delete
discoveryengine.controls.get
discoveryengine.controls.list
discoveryengine.controls.update

discoveryengine.conversations.*

discoveryengine.conversations.converse
discoveryengine.conversations.create
discoveryengine.conversations.delete
discoveryengine.conversations.get
discoveryengine.conversations.list
discoveryengine.conversations.update

discoveryengine.dataConnectors.*

discoveryengine.dataConnectors.acquireAccessToken
discoveryengine.dataConnectors.acquireAndStoreRefreshToken
discoveryengine.dataConnectors.buildActionInvocation
discoveryengine.dataConnectors.checkRefreshToken
discoveryengine.dataConnectors.executeAction
discoveryengine.dataConnectors.get
discoveryengine.dataConnectors.queryAvailableActions
discoveryengine.dataConnectors.startConnectorRun
discoveryengine.dataConnectors.update

discoveryengine.dataStores.*

discoveryengine.dataStores.completeQuery
discoveryengine.dataStores.create
discoveryengine.dataStores.delete
discoveryengine.dataStores.enrollSolutions
discoveryengine.dataStores.get
discoveryengine.dataStores.getIamPolicy
discoveryengine.dataStores.list
discoveryengine.dataStores.listCustomModels
discoveryengine.dataStores.setIamPolicy
discoveryengine.dataStores.trainCustomModel
discoveryengine.dataStores.update

discoveryengine.devToolsConfigs.*

discoveryengine.devToolsConfigs.get
discoveryengine.devToolsConfigs.update

discoveryengine.documentProcessingConfigs.*

discoveryengine.documentProcessingConfigs.get
discoveryengine.documentProcessingConfigs.update

discoveryengine.documents.*

discoveryengine.documents.batchGetDocumentsMetadata
discoveryengine.documents.create
discoveryengine.documents.delete
discoveryengine.documents.get
discoveryengine.documents.import
discoveryengine.documents.list
discoveryengine.documents.purge
discoveryengine.documents.update

discoveryengine.engines.*

discoveryengine.engines.create
discoveryengine.engines.createEngineUserData
discoveryengine.engines.delete
discoveryengine.engines.generateMemories
discoveryengine.engines.generatePersonalContext
discoveryengine.engines.get
discoveryengine.engines.getEngineUserData
discoveryengine.engines.getIamPolicy
discoveryengine.engines.getPersonalContext
discoveryengine.engines.list
discoveryengine.engines.pause
discoveryengine.engines.resume
discoveryengine.engines.setIamPolicy
discoveryengine.engines.tune
discoveryengine.engines.update
discoveryengine.engines.updateEngineUserData

discoveryengine.evaluations.*

discoveryengine.evaluations.create
discoveryengine.evaluations.get
discoveryengine.evaluations.list

discoveryengine.groundingConfigs.check

discoveryengine.homepageDataConfigs.fetchDocuments

discoveryengine.ideaForgeIdeas.*

discoveryengine.ideaForgeIdeas.create
discoveryengine.ideaForgeIdeas.get

discoveryengine.ideaForgeInstances.*

discoveryengine.ideaForgeInstances.get
discoveryengine.ideaForgeInstances.start

discoveryengine.identityMappingStores.*

discoveryengine.identityMappingStores.create
discoveryengine.identityMappingStores.delete
discoveryengine.identityMappingStores.get
discoveryengine.identityMappingStores.importIdentityMappings
discoveryengine.identityMappingStores.list
discoveryengine.identityMappingStores.listIdentityMappings
discoveryengine.identityMappingStores.purgeIdentityMappings

discoveryengine.licenseConfigs.*

discoveryengine.licenseConfigs.create
discoveryengine.licenseConfigs.get
discoveryengine.licenseConfigs.list
discoveryengine.licenseConfigs.update

discoveryengine.locations.*

discoveryengine.locations.completeExternalIdentities
discoveryengine.locations.estimateDataSize
discoveryengine.locations.exchangeAuthCredentials
discoveryengine.locations.fetchAgentCards
discoveryengine.locations.getConnectorSource
discoveryengine.locations.listConnectorSources
discoveryengine.locations.setUpDataConnector

discoveryengine.memories.*

discoveryengine.memories.delete
discoveryengine.memories.list
discoveryengine.memories.retrieve
discoveryengine.memories.update

discoveryengine.models.*

discoveryengine.models.create
discoveryengine.models.delete
discoveryengine.models.get
discoveryengine.models.list
discoveryengine.models.pause
discoveryengine.models.resume
discoveryengine.models.tune
discoveryengine.models.update

discoveryengine.notificationMessages.*

discoveryengine.notificationMessages.ackAll
discoveryengine.notificationMessages.list
discoveryengine.notificationMessages.update

discoveryengine.operations.*

discoveryengine.operations.get
discoveryengine.operations.list

discoveryengine.projectOverageConfigs.get

discoveryengine.projects.*

discoveryengine.projects.get
discoveryengine.projects.provision
discoveryengine.projects.reportConsentChange
discoveryengine.projects.update

discoveryengine.rankingConfigs.rank

discoveryengine.sampleQueries.*

discoveryengine.sampleQueries.create
discoveryengine.sampleQueries.delete
discoveryengine.sampleQueries.get
discoveryengine.sampleQueries.import
discoveryengine.sampleQueries.list
discoveryengine.sampleQueries.update

discoveryengine.sampleQuerySets.*

discoveryengine.sampleQuerySets.create
discoveryengine.sampleQuerySets.delete
discoveryengine.sampleQuerySets.get
discoveryengine.sampleQuerySets.list
discoveryengine.sampleQuerySets.update

discoveryengine.schemas.*

discoveryengine.schemas.create
discoveryengine.schemas.delete
discoveryengine.schemas.get
discoveryengine.schemas.list
discoveryengine.schemas.preview
discoveryengine.schemas.update
discoveryengine.schemas.validate

discoveryengine.servingConfigs.*

discoveryengine.servingConfigs.answer
discoveryengine.servingConfigs.create
discoveryengine.servingConfigs.delete
discoveryengine.servingConfigs.get
discoveryengine.servingConfigs.list
discoveryengine.servingConfigs.recommend
discoveryengine.servingConfigs.search
discoveryengine.servingConfigs.update

discoveryengine.sessions.*

discoveryengine.sessions.addContextFile
discoveryengine.sessions.create
discoveryengine.sessions.delete
discoveryengine.sessions.downloadFile
discoveryengine.sessions.generateSummary
discoveryengine.sessions.get
discoveryengine.sessions.list
discoveryengine.sessions.listSessionFileMetadata
discoveryengine.sessions.recommendQuestions
discoveryengine.sessions.removeContextFile
discoveryengine.sessions.search
discoveryengine.sessions.selectContextFiles
discoveryengine.sessions.update
discoveryengine.sessions.uploadFile

discoveryengine.sharedContents.*

discoveryengine.sharedContents.create
discoveryengine.sharedContents.delete
discoveryengine.sharedContents.get
discoveryengine.sharedContents.list

discoveryengine.siteSearchEngines.*

discoveryengine.siteSearchEngines.batchVerifyTargetSites
discoveryengine.siteSearchEngines.disableAdvancedSiteSearch
discoveryengine.siteSearchEngines.enableAdvancedSiteSearch
discoveryengine.siteSearchEngines.fetchDomainVerificationStatus
discoveryengine.siteSearchEngines.get
discoveryengine.siteSearchEngines.recrawlUris

discoveryengine.sitemaps.*

discoveryengine.sitemaps.create
discoveryengine.sitemaps.delete
discoveryengine.sitemaps.fetch

discoveryengine.suggestionDenyListEntries.*

discoveryengine.suggestionDenyListEntries.import
discoveryengine.suggestionDenyListEntries.purge

discoveryengine.targetSites.*

discoveryengine.targetSites.batchCreate
discoveryengine.targetSites.create
discoveryengine.targetSites.delete
discoveryengine.targetSites.get
discoveryengine.targetSites.list
discoveryengine.targetSites.update

discoveryengine.userEvents.*

discoveryengine.userEvents.create
discoveryengine.userEvents.fetchStats
discoveryengine.userEvents.import
discoveryengine.userEvents.purge

discoveryengine.userStores.*

discoveryengine.userStores.batchUpdateUserLicenses
discoveryengine.userStores.get
discoveryengine.userStores.listUserLicenses
discoveryengine.userStores.update

discoveryengine.users.*

discoveryengine.users.get
discoveryengine.users.update

discoveryengine.widgetConfigs.*

discoveryengine.widgetConfigs.get
discoveryengine.widgetConfigs.update

logging.buckets.get

logging.buckets.list

logging.exclusions.get

logging.exclusions.list

logging.links.get

logging.links.list

logging.locations.*

logging.locations.get
logging.locations.list

logging.logEntries.list

logging.logMetrics.get

logging.logMetrics.list

logging.logScopes.get

logging.logScopes.list

logging.logServiceIndexes.list

logging.logServices.list

logging.logs.list

logging.operations.get

logging.operations.list

logging.queries.getShared

logging.queries.listShared

logging.queries.usePrivate

logging.sinks.get

logging.sinks.list

logging.usage.get

logging.views.get

logging.views.list

monitoring.alertPolicies.get

monitoring.alertPolicies.list

monitoring.alertPolicies.listEffectiveTags

monitoring.alertPolicies.listTagBindings

monitoring.alerts.*

monitoring.alerts.get
monitoring.alerts.list

monitoring.dashboards.get

monitoring.dashboards.list

monitoring.dashboards.listEffectiveTags

monitoring.dashboards.listTagBindings

monitoring.groups.get

monitoring.groups.list

monitoring.metricDescriptors.get

monitoring.metricDescriptors.list

monitoring.monitoredResourceDescriptors.*

monitoring.monitoredResourceDescriptors.get
monitoring.monitoredResourceDescriptors.list

monitoring.notificationChannelDescriptors.*

monitoring.notificationChannelDescriptors.get
monitoring.notificationChannelDescriptors.list

monitoring.notificationChannels.get

monitoring.notificationChannels.list

monitoring.services.get

monitoring.services.list

monitoring.slos.get

monitoring.slos.list

monitoring.snoozes.get

monitoring.snoozes.list

monitoring.timeSeries.list

monitoring.uptimeCheckConfigs.get

monitoring.uptimeCheckConfigs.list

observability.scopes.get

observability.traceScopes.*

observability.traceScopes.create
observability.traceScopes.delete
observability.traceScopes.get
observability.traceScopes.list
observability.traceScopes.update

opsconfigmonitoring.resourceMetadata.list

resourcemanager.projects.get

resourcemanager.projects.list

stackdriver.projects.get

stackdriver.resourceMetadata.list

Gemini Enterprise Editor ^Beta

(roles/discoveryengine.agentspaceEditor)

Grants access to edit Gemini Enterprise resources.

discoveryengine.aclConfigs.get

discoveryengine.agentFiles.*

discoveryengine.agentFiles.delete
discoveryengine.agentFiles.download
discoveryengine.agentFiles.import
discoveryengine.agentFiles.list
discoveryengine.agentFiles.upload

discoveryengine.agents.create

discoveryengine.agents.delete

discoveryengine.agents.get

discoveryengine.agents.getAgentView

discoveryengine.agents.getIamPolicy

discoveryengine.agents.list

discoveryengine.agents.listAvailableAgentViews

discoveryengine.agents.manage

discoveryengine.agents.update

discoveryengine.alertPolicies.get

discoveryengine.analytics.*

discoveryengine.analytics.acquireDashboardSession
discoveryengine.analytics.refreshDashboardSessionTokens

discoveryengine.answers.get

discoveryengine.assistAnswers.get

discoveryengine.assistants.assist

discoveryengine.assistants.get

discoveryengine.assistants.list

discoveryengine.authorizations.storeUserAuthorization

discoveryengine.branches.*

discoveryengine.branches.get
discoveryengine.branches.list

discoveryengine.cannedQueries.get

discoveryengine.cannedQueries.list

discoveryengine.cannedQueries.listActiveCannedQueryUserViews

discoveryengine.cmekConfigs.get

discoveryengine.cmekConfigs.list

discoveryengine.collections.get

discoveryengine.collections.list

discoveryengine.completionConfigs.completeQuery

discoveryengine.completionConfigs.get

discoveryengine.completionConfigs.removeSuggestion

discoveryengine.connectorRuns.list

discoveryengine.controls.get

discoveryengine.controls.list

discoveryengine.conversations.*

discoveryengine.conversations.converse
discoveryengine.conversations.create
discoveryengine.conversations.delete
discoveryengine.conversations.get
discoveryengine.conversations.list
discoveryengine.conversations.update

discoveryengine.dataConnectors.acquireAccessToken

discoveryengine.dataConnectors.acquireAndStoreRefreshToken

discoveryengine.dataConnectors.buildActionInvocation

discoveryengine.dataConnectors.checkRefreshToken

discoveryengine.dataConnectors.executeAction

discoveryengine.dataConnectors.get

discoveryengine.dataConnectors.queryAvailableActions

discoveryengine.dataStores.completeQuery

discoveryengine.dataStores.get

discoveryengine.dataStores.list

discoveryengine.dataStores.listCustomModels

discoveryengine.dataStores.trainCustomModel

discoveryengine.devToolsConfigs.get

discoveryengine.documentProcessingConfigs.get

discoveryengine.documents.batchGetDocumentsMetadata

discoveryengine.documents.create

discoveryengine.documents.delete

discoveryengine.documents.get

discoveryengine.documents.import

discoveryengine.documents.list

discoveryengine.documents.update

discoveryengine.engines.createEngineUserData

discoveryengine.engines.generateMemories

discoveryengine.engines.generatePersonalContext

discoveryengine.engines.get

discoveryengine.engines.getEngineUserData

discoveryengine.engines.getPersonalContext

discoveryengine.engines.list

discoveryengine.engines.pause

discoveryengine.engines.resume

discoveryengine.engines.tune

discoveryengine.engines.updateEngineUserData

discoveryengine.evaluations.get

discoveryengine.evaluations.list

discoveryengine.groundingConfigs.check

discoveryengine.homepageDataConfigs.fetchDocuments

discoveryengine.ideaForgeIdeas.*

discoveryengine.ideaForgeIdeas.create
discoveryengine.ideaForgeIdeas.get

discoveryengine.ideaForgeInstances.*

discoveryengine.ideaForgeInstances.get
discoveryengine.ideaForgeInstances.start

discoveryengine.identityMappingStores.*

discoveryengine.identityMappingStores.create
discoveryengine.identityMappingStores.delete
discoveryengine.identityMappingStores.get
discoveryengine.identityMappingStores.importIdentityMappings
discoveryengine.identityMappingStores.list
discoveryengine.identityMappingStores.listIdentityMappings
discoveryengine.identityMappingStores.purgeIdentityMappings

discoveryengine.licenseConfigs.get

discoveryengine.licenseConfigs.list

discoveryengine.locations.completeExternalIdentities

discoveryengine.locations.fetchAgentCards

discoveryengine.memories.*

discoveryengine.memories.delete
discoveryengine.memories.list
discoveryengine.memories.retrieve
discoveryengine.memories.update

discoveryengine.models.*

discoveryengine.models.create
discoveryengine.models.delete
discoveryengine.models.get
discoveryengine.models.list
discoveryengine.models.pause
discoveryengine.models.resume
discoveryengine.models.tune
discoveryengine.models.update

discoveryengine.notificationMessages.*

discoveryengine.notificationMessages.ackAll
discoveryengine.notificationMessages.list
discoveryengine.notificationMessages.update

discoveryengine.operations.*

discoveryengine.operations.get
discoveryengine.operations.list

discoveryengine.projectOverageConfigs.get

discoveryengine.projects.get

discoveryengine.rankingConfigs.rank

discoveryengine.sampleQueries.*

discoveryengine.sampleQueries.create
discoveryengine.sampleQueries.delete
discoveryengine.sampleQueries.get
discoveryengine.sampleQueries.import
discoveryengine.sampleQueries.list
discoveryengine.sampleQueries.update

discoveryengine.sampleQuerySets.*

discoveryengine.sampleQuerySets.create
discoveryengine.sampleQuerySets.delete
discoveryengine.sampleQuerySets.get
discoveryengine.sampleQuerySets.list
discoveryengine.sampleQuerySets.update

discoveryengine.schemas.get

discoveryengine.schemas.list

discoveryengine.schemas.preview

discoveryengine.schemas.validate

discoveryengine.servingConfigs.answer

discoveryengine.servingConfigs.get

discoveryengine.servingConfigs.list

discoveryengine.servingConfigs.recommend

discoveryengine.servingConfigs.search

discoveryengine.sessions.*

discoveryengine.sessions.addContextFile
discoveryengine.sessions.create
discoveryengine.sessions.delete
discoveryengine.sessions.downloadFile
discoveryengine.sessions.generateSummary
discoveryengine.sessions.get
discoveryengine.sessions.list
discoveryengine.sessions.listSessionFileMetadata
discoveryengine.sessions.recommendQuestions
discoveryengine.sessions.removeContextFile
discoveryengine.sessions.search
discoveryengine.sessions.selectContextFiles
discoveryengine.sessions.update
discoveryengine.sessions.uploadFile

discoveryengine.sharedContents.*

discoveryengine.sharedContents.create
discoveryengine.sharedContents.delete
discoveryengine.sharedContents.get
discoveryengine.sharedContents.list

discoveryengine.siteSearchEngines.get

discoveryengine.targetSites.get

discoveryengine.targetSites.list

discoveryengine.userEvents.create

discoveryengine.userEvents.fetchStats

discoveryengine.userEvents.import

discoveryengine.userStores.get

discoveryengine.widgetConfigs.*

discoveryengine.widgetConfigs.get
discoveryengine.widgetConfigs.update

resourcemanager.projects.get

resourcemanager.projects.list

Gemini Enterprise Restricted User

(roles/discoveryengine.agentspaceRestrictedUser)

Grants restricted user-level access to Gemini Enterprise resources, for fine-grained control over multiple Gemini Enterprise instances in the same project. Principals with this role will need to be granted an unrestricted user-level role (e.g. /agentspaceUser) on an Engine policy in order to use Gemini Enterprise.

discoveryengine.accounts.create

discoveryengine.authorizations.storeUserAuthorization

discoveryengine.dataConnectors.acquireAccessToken

discoveryengine.dataConnectors.acquireAndStoreRefreshToken

discoveryengine.dataConnectors.buildActionInvocation

discoveryengine.dataConnectors.checkRefreshToken

discoveryengine.dataConnectors.executeAction

discoveryengine.dataConnectors.queryAvailableActions

discoveryengine.locations.completeExternalIdentities

discoveryengine.locations.fetchAgentCards

discoveryengine.notebooks.create

discoveryengine.notebooks.list

discoveryengine.userEvents.create

discoveryengine.users.*

discoveryengine.users.get
discoveryengine.users.update

resourcemanager.projects.get

resourcemanager.projects.list

Gemini Enterprise User

(roles/discoveryengine.agentspaceUser)

Grants user-level access to Gemini Enterprise resources.

businessaicode.*

businessaicode.locations.fetchQuotaStatus
businessaicode.locations.generateContent
businessaicode.locations.queryConfiguration
businessaicode.locations.selfAssignLicense
businessaicode.locations.sendTelemetry

cloudaicompanion.companions.*

cloudaicompanion.companions.generateChat
cloudaicompanion.companions.generateCode

cloudaicompanion.entitlements.get

cloudaicompanion.instances.*

cloudaicompanion.instances.completeCode
cloudaicompanion.instances.completeTask
cloudaicompanion.instances.exportMetrics
cloudaicompanion.instances.generateCode
cloudaicompanion.instances.generateText
cloudaicompanion.instances.queryEffectiveSetting
cloudaicompanion.instances.queryEffectiveSettingBindings

cloudaicompanion.licenses.selfAssign

cloudaicompanion.operations.get

cloudaicompanion.topics.create

discoveryengine.accounts.create

discoveryengine.agentFiles.*

discoveryengine.agentFiles.delete
discoveryengine.agentFiles.download
discoveryengine.agentFiles.import
discoveryengine.agentFiles.list
discoveryengine.agentFiles.upload

discoveryengine.agentIamProposals.*

discoveryengine.agentIamProposals.create
discoveryengine.agentIamProposals.delete
discoveryengine.agentIamProposals.get
discoveryengine.agentIamProposals.list

discoveryengine.agents.create

discoveryengine.agents.delete

discoveryengine.agents.get

discoveryengine.agents.getAgentView

discoveryengine.agents.list

discoveryengine.agents.listAvailableAgentViews

discoveryengine.agents.requestReview

discoveryengine.agents.update

discoveryengine.answers.get

discoveryengine.assistAnswers.get

discoveryengine.assistants.assist

discoveryengine.authorizations.storeUserAuthorization

discoveryengine.cannedQueries.listActiveCannedQueryUserViews

discoveryengine.collections.get

discoveryengine.completionConfigs.completeQuery

discoveryengine.completionConfigs.removeSuggestion

discoveryengine.dataConnectors.acquireAccessToken

discoveryengine.dataConnectors.acquireAndStoreRefreshToken

discoveryengine.dataConnectors.buildActionInvocation

discoveryengine.dataConnectors.checkRefreshToken

discoveryengine.dataConnectors.executeAction

discoveryengine.dataConnectors.queryAvailableActions

discoveryengine.dataStores.get

discoveryengine.devToolsConfigs.get

discoveryengine.engines.createEngineUserData

discoveryengine.engines.generateMemories

discoveryengine.engines.generatePersonalContext

discoveryengine.engines.get

discoveryengine.engines.getEngineUserData

discoveryengine.engines.getPersonalContext

discoveryengine.engines.updateEngineUserData

discoveryengine.homepageDataConfigs.fetchDocuments

discoveryengine.ideaForgeIdeas.*

discoveryengine.ideaForgeIdeas.create
discoveryengine.ideaForgeIdeas.get

discoveryengine.ideaForgeInstances.*

discoveryengine.ideaForgeInstances.get
discoveryengine.ideaForgeInstances.start

discoveryengine.locations.completeExternalIdentities

discoveryengine.locations.fetchAgentCards

discoveryengine.memories.*

discoveryengine.memories.delete
discoveryengine.memories.list
discoveryengine.memories.retrieve
discoveryengine.memories.update

discoveryengine.notebooks.create

discoveryengine.notebooks.list

discoveryengine.notificationMessages.*

discoveryengine.notificationMessages.ackAll
discoveryengine.notificationMessages.list
discoveryengine.notificationMessages.update

discoveryengine.servingConfigs.answer

discoveryengine.servingConfigs.recommend

discoveryengine.servingConfigs.search

discoveryengine.sessions.*

discoveryengine.sessions.addContextFile
discoveryengine.sessions.create
discoveryengine.sessions.delete
discoveryengine.sessions.downloadFile
discoveryengine.sessions.generateSummary
discoveryengine.sessions.get
discoveryengine.sessions.list
discoveryengine.sessions.listSessionFileMetadata
discoveryengine.sessions.recommendQuestions
discoveryengine.sessions.removeContextFile
discoveryengine.sessions.search
discoveryengine.sessions.selectContextFiles
discoveryengine.sessions.update
discoveryengine.sessions.uploadFile

discoveryengine.sharedContents.*

discoveryengine.sharedContents.create
discoveryengine.sharedContents.delete
discoveryengine.sharedContents.get
discoveryengine.sharedContents.list

discoveryengine.userEvents.create

discoveryengine.users.*

discoveryengine.users.get
discoveryengine.users.update

discoveryengine.widgetConfigs.get

geminicloudassist.agents.invoke

resourcemanager.projects.get

resourcemanager.projects.list

Gemini Enterprise Viewer ^Beta

(roles/discoveryengine.agentspaceViewer)

Grants access to view the details of Gemini Enterprise resources.

discoveryengine.aclConfigs.get

discoveryengine.agentFiles.list

discoveryengine.agents.get

discoveryengine.agents.getAgentView

discoveryengine.agents.getIamPolicy

discoveryengine.agents.list

discoveryengine.agents.listAvailableAgentViews

discoveryengine.alertPolicies.get

discoveryengine.analytics.*

discoveryengine.analytics.acquireDashboardSession
discoveryengine.analytics.refreshDashboardSessionTokens

discoveryengine.answers.get

discoveryengine.assistAnswers.get

discoveryengine.assistants.get

discoveryengine.assistants.list

discoveryengine.branches.*

discoveryengine.branches.get
discoveryengine.branches.list

discoveryengine.cannedQueries.get

discoveryengine.cannedQueries.list

discoveryengine.cannedQueries.listActiveCannedQueryUserViews

discoveryengine.cmekConfigs.get

discoveryengine.cmekConfigs.list

discoveryengine.collections.get

discoveryengine.collections.list

discoveryengine.completionConfigs.completeQuery

discoveryengine.completionConfigs.get

discoveryengine.connectorRuns.list

discoveryengine.controls.get

discoveryengine.controls.list

discoveryengine.conversations.converse

discoveryengine.conversations.get

discoveryengine.conversations.list

discoveryengine.dataConnectors.buildActionInvocation

discoveryengine.dataConnectors.checkRefreshToken

discoveryengine.dataConnectors.get

discoveryengine.dataConnectors.queryAvailableActions

discoveryengine.dataStores.completeQuery

discoveryengine.dataStores.get

discoveryengine.dataStores.list

discoveryengine.dataStores.listCustomModels

discoveryengine.devToolsConfigs.get

discoveryengine.documentProcessingConfigs.get

discoveryengine.documents.batchGetDocumentsMetadata

discoveryengine.documents.get

discoveryengine.documents.list

discoveryengine.engines.get

discoveryengine.engines.getPersonalContext

discoveryengine.engines.list

discoveryengine.evaluations.get

discoveryengine.evaluations.list

discoveryengine.groundingConfigs.check

discoveryengine.homepageDataConfigs.fetchDocuments

discoveryengine.ideaForgeIdeas.get

discoveryengine.ideaForgeInstances.get

discoveryengine.identityMappingStores.get

discoveryengine.identityMappingStores.list

discoveryengine.identityMappingStores.listIdentityMappings

discoveryengine.locations.completeExternalIdentities

discoveryengine.locations.fetchAgentCards

discoveryengine.memories.list

discoveryengine.memories.retrieve

discoveryengine.models.get

discoveryengine.models.list

discoveryengine.notificationMessages.list

discoveryengine.operations.*

discoveryengine.operations.get
discoveryengine.operations.list

discoveryengine.projectOverageConfigs.get

discoveryengine.projects.get

discoveryengine.rankingConfigs.rank

discoveryengine.sampleQueries.get

discoveryengine.sampleQueries.list

discoveryengine.sampleQuerySets.get

discoveryengine.sampleQuerySets.list

discoveryengine.schemas.get

discoveryengine.schemas.list

discoveryengine.schemas.preview

discoveryengine.schemas.validate

discoveryengine.servingConfigs.answer

discoveryengine.servingConfigs.get

discoveryengine.servingConfigs.list

discoveryengine.servingConfigs.recommend

discoveryengine.servingConfigs.search

discoveryengine.sessions.downloadFile

discoveryengine.sessions.generateSummary

discoveryengine.sessions.get

discoveryengine.sessions.list

discoveryengine.sessions.listSessionFileMetadata

discoveryengine.sessions.recommendQuestions

discoveryengine.sharedContents.get

discoveryengine.sharedContents.list

discoveryengine.siteSearchEngines.get

discoveryengine.targetSites.get

discoveryengine.targetSites.list

discoveryengine.userEvents.fetchStats

discoveryengine.userStores.get

discoveryengine.widgetConfigs.get

resourcemanager.projects.get

resourcemanager.projects.list

Cloud NotebookLM Notebook Editor

(roles/discoveryengine.notebookEditor)

Grants read and write access to a Cloud NotebookLM Notebook.

discoveryengine.audioOverviews.*

discoveryengine.audioOverviews.create
discoveryengine.audioOverviews.delete
discoveryengine.audioOverviews.get
discoveryengine.audioOverviews.getIceConfig
discoveryengine.audioOverviews.sendSdpOffer

discoveryengine.notebooks.generateGuide

discoveryengine.notebooks.get

discoveryengine.notebooks.getAnalytics

discoveryengine.notebooks.getIamPolicy

discoveryengine.notebooks.interactSources

discoveryengine.notebooks.list

discoveryengine.notebooks.removeSelf

discoveryengine.notebooks.update

discoveryengine.notes.*

discoveryengine.notes.create
discoveryengine.notes.delete
discoveryengine.notes.get
discoveryengine.notes.update

discoveryengine.sources.*

discoveryengine.sources.checkFreshness
discoveryengine.sources.create
discoveryengine.sources.delete
discoveryengine.sources.generateDocumentGuide
discoveryengine.sources.get
discoveryengine.sources.refresh
discoveryengine.sources.update

Cloud NotebookLM Admin

(roles/discoveryengine.notebookLmOwner)

Grants full access to Cloud NotebookLM resources.

discoveryengine.accounts.create

discoveryengine.aclConfigs.*

discoveryengine.aclConfigs.get
discoveryengine.aclConfigs.update

discoveryengine.audioOverviews.*

discoveryengine.audioOverviews.create
discoveryengine.audioOverviews.delete
discoveryengine.audioOverviews.get
discoveryengine.audioOverviews.getIceConfig
discoveryengine.audioOverviews.sendSdpOffer

discoveryengine.locations.completeExternalIdentities

discoveryengine.notebooks.*

discoveryengine.notebooks.create
discoveryengine.notebooks.generateGuide
discoveryengine.notebooks.get
discoveryengine.notebooks.getAnalytics
discoveryengine.notebooks.getIamPolicy
discoveryengine.notebooks.interactSources
discoveryengine.notebooks.list
discoveryengine.notebooks.removeSelf
discoveryengine.notebooks.setIamPolicy
discoveryengine.notebooks.update

discoveryengine.notes.*

discoveryengine.notes.create
discoveryengine.notes.delete
discoveryengine.notes.get
discoveryengine.notes.update

discoveryengine.sources.*

discoveryengine.sources.checkFreshness
discoveryengine.sources.create
discoveryengine.sources.delete
discoveryengine.sources.generateDocumentGuide
discoveryengine.sources.get
discoveryengine.sources.refresh
discoveryengine.sources.update

resourcemanager.projects.get

resourcemanager.projects.list

Cloud NotebookLM User

(roles/discoveryengine.notebookLmUser)

Grants user-level access to Cloud NotebookLM resources.

discoveryengine.accounts.create

discoveryengine.locations.completeExternalIdentities

discoveryengine.notebooks.create

discoveryengine.notebooks.list

resourcemanager.projects.get

resourcemanager.projects.list

Cloud NotebookLM Notebook Owner

(roles/discoveryengine.notebookOwner)

Grants full access to a Cloud NotebookLM Notebook.

discoveryengine.audioOverviews.*

discoveryengine.audioOverviews.create
discoveryengine.audioOverviews.delete
discoveryengine.audioOverviews.get
discoveryengine.audioOverviews.getIceConfig
discoveryengine.audioOverviews.sendSdpOffer

discoveryengine.notebooks.generateGuide

discoveryengine.notebooks.get

discoveryengine.notebooks.getAnalytics

discoveryengine.notebooks.getIamPolicy

discoveryengine.notebooks.interactSources

discoveryengine.notebooks.list

discoveryengine.notebooks.removeSelf

discoveryengine.notebooks.setIamPolicy

discoveryengine.notebooks.update

discoveryengine.notes.*

discoveryengine.notes.create
discoveryengine.notes.delete
discoveryengine.notes.get
discoveryengine.notes.update

discoveryengine.sources.*

discoveryengine.sources.checkFreshness
discoveryengine.sources.create
discoveryengine.sources.delete
discoveryengine.sources.generateDocumentGuide
discoveryengine.sources.get
discoveryengine.sources.refresh
discoveryengine.sources.update

Cloud NotebookLM Notebook Viewer

(roles/discoveryengine.notebookViewer)

Grants read-only access to a Cloud NotebookLM Notebook.

discoveryengine.audioOverviews.get

discoveryengine.audioOverviews.getIceConfig

discoveryengine.audioOverviews.sendSdpOffer

discoveryengine.notebooks.generateGuide

discoveryengine.notebooks.get

discoveryengine.notebooks.getIamPolicy

discoveryengine.notebooks.interactSources

discoveryengine.notebooks.list

discoveryengine.notebooks.removeSelf

discoveryengine.notes.get

discoveryengine.sources.checkFreshness

discoveryengine.sources.generateDocumentGuide

discoveryengine.sources.get

Podcast API User ^Beta

(roles/discoveryengine.podcastApiUser)

Grants user-level access to the Podcast resources.

businessaicode.*

businessaicode.locations.fetchQuotaStatus
businessaicode.locations.generateContent
businessaicode.locations.queryConfiguration
businessaicode.locations.selfAssignLicense
businessaicode.locations.sendTelemetry

cloudaicompanion.companions.*

cloudaicompanion.companions.generateChat
cloudaicompanion.companions.generateCode

cloudaicompanion.entitlements.get

cloudaicompanion.instances.*

cloudaicompanion.instances.completeCode
cloudaicompanion.instances.completeTask
cloudaicompanion.instances.exportMetrics
cloudaicompanion.instances.generateCode
cloudaicompanion.instances.generateText
cloudaicompanion.instances.queryEffectiveSetting
cloudaicompanion.instances.queryEffectiveSettingBindings

cloudaicompanion.licenses.selfAssign

cloudaicompanion.operations.get

cloudaicompanion.topics.create

discoveryengine.accounts.create

discoveryengine.agentFiles.*

discoveryengine.agentFiles.delete
discoveryengine.agentFiles.download
discoveryengine.agentFiles.import
discoveryengine.agentFiles.list
discoveryengine.agentFiles.upload

discoveryengine.agentIamProposals.*

discoveryengine.agentIamProposals.create
discoveryengine.agentIamProposals.delete
discoveryengine.agentIamProposals.get
discoveryengine.agentIamProposals.list

discoveryengine.agents.create

discoveryengine.agents.delete

discoveryengine.agents.get

discoveryengine.agents.getAgentView

discoveryengine.agents.list

discoveryengine.agents.listAvailableAgentViews

discoveryengine.agents.requestReview

discoveryengine.agents.update

discoveryengine.answers.get

discoveryengine.assistAnswers.get

discoveryengine.assistants.assist

discoveryengine.authorizations.storeUserAuthorization

discoveryengine.cannedQueries.listActiveCannedQueryUserViews

discoveryengine.collections.get

discoveryengine.completionConfigs.completeQuery

discoveryengine.completionConfigs.removeSuggestion

discoveryengine.dataConnectors.acquireAccessToken

discoveryengine.dataConnectors.acquireAndStoreRefreshToken

discoveryengine.dataConnectors.buildActionInvocation

discoveryengine.dataConnectors.checkRefreshToken

discoveryengine.dataConnectors.executeAction

discoveryengine.dataConnectors.queryAvailableActions

discoveryengine.dataStores.get

discoveryengine.devToolsConfigs.get

discoveryengine.engines.createEngineUserData

discoveryengine.engines.generateMemories

discoveryengine.engines.generatePersonalContext

discoveryengine.engines.get

discoveryengine.engines.getEngineUserData

discoveryengine.engines.getPersonalContext

discoveryengine.engines.updateEngineUserData

discoveryengine.homepageDataConfigs.fetchDocuments

discoveryengine.ideaForgeIdeas.*

discoveryengine.ideaForgeIdeas.create
discoveryengine.ideaForgeIdeas.get

discoveryengine.ideaForgeInstances.*

discoveryengine.ideaForgeInstances.get
discoveryengine.ideaForgeInstances.start

discoveryengine.locations.completeExternalIdentities

discoveryengine.locations.fetchAgentCards

discoveryengine.memories.*

discoveryengine.memories.delete
discoveryengine.memories.list
discoveryengine.memories.retrieve
discoveryengine.memories.update

discoveryengine.notebooks.create

discoveryengine.notebooks.list

discoveryengine.notificationMessages.*

discoveryengine.notificationMessages.ackAll
discoveryengine.notificationMessages.list
discoveryengine.notificationMessages.update

discoveryengine.operations.get

discoveryengine.podcasts.create

discoveryengine.servingConfigs.answer

discoveryengine.servingConfigs.recommend

discoveryengine.servingConfigs.search

discoveryengine.sessions.*

discoveryengine.sessions.addContextFile
discoveryengine.sessions.create
discoveryengine.sessions.delete
discoveryengine.sessions.downloadFile
discoveryengine.sessions.generateSummary
discoveryengine.sessions.get
discoveryengine.sessions.list
discoveryengine.sessions.listSessionFileMetadata
discoveryengine.sessions.recommendQuestions
discoveryengine.sessions.removeContextFile
discoveryengine.sessions.search
discoveryengine.sessions.selectContextFiles
discoveryengine.sessions.update
discoveryengine.sessions.uploadFile

discoveryengine.sharedContents.*

discoveryengine.sharedContents.create
discoveryengine.sharedContents.delete
discoveryengine.sharedContents.get
discoveryengine.sharedContents.list

discoveryengine.userEvents.create

discoveryengine.users.*

discoveryengine.users.get
discoveryengine.users.update

discoveryengine.widgetConfigs.get

geminicloudassist.agents.invoke

resourcemanager.projects.get

resourcemanager.projects.list

Service agent roles

Service agent roles should only be granted to service agents.

Role Permissions

Role	Permissions
Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`) Discovery Engine service uploads documents and user events from Cloud Storage and BigQuery, reports results to the customer Cloud Storage bucket, writes logs to customer projects using Cloud Logging, and writes and reads metrics for customer using Cloud Monitoring. Warning: Do not grant service agent roles to any principals except service agents.	`agentregistry.agents.` `agentregistry.agents.get` `agentregistry.agents.list` `agentregistry.agents.search` `agentregistry.mcpServers.` `agentregistry.mcpServers.get` `agentregistry.mcpServers.list` `agentregistry.mcpServers.search` `aiplatform.endpoints.predict` `aiplatform.executions.create` `aiplatform.executions.delete` `aiplatform.executions.update` `aiplatform.extensions.` `aiplatform.extensions.delete` `aiplatform.extensions.execute` `aiplatform.extensions.get` `aiplatform.extensions.import` `aiplatform.extensions.list` `aiplatform.extensions.update` `aiplatform.operations.list` `aiplatform.reasoningEngines.create` `aiplatform.reasoningEngines.delete` `aiplatform.reasoningEngines.get` `aiplatform.reasoningEngines.list` `aiplatform.reasoningEngines.query` `aiplatform.reasoningEngines.update` `aiplatform.sandboxEnvironments.` `aiplatform.sandboxEnvironments.create` `aiplatform.sandboxEnvironments.delete` `aiplatform.sandboxEnvironments.execute` `aiplatform.sandboxEnvironments.get` `aiplatform.sandboxEnvironments.list` `alloydb.clusters.export` `alloydb.databases.list` `alloydb.instances.get` `alloydb.operations.get` `bigquery.datasets.create` `bigquery.datasets.get` `bigquery.jobs.create` `bigquery.jobs.get` `bigquery.jobs.list` `bigquery.jobs.update` `bigquery.tables.create` `bigquery.tables.export` `bigquery.tables.get` `bigquery.tables.getData` `bigquery.tables.list` `bigquery.tables.update` `bigquery.tables.updateData` `bigtable.tables.readRows` `bigtable.tables.sampleRowKeys` `cloudsql.databases.get` `cloudsql.instances.export` `cloudsql.instances.get` `consumerprocurement.entitlements.list` `datastore.databases.export` `datastore.databases.get` `datastore.databases.getMetadata` `datastore.operations.get` `dialogflow.sessions.detectIntent` `discoveryengine.agents.create` `discoveryengine.agents.manage` `discoveryengine.completionConfigs.completeQuery` `discoveryengine.conversations.converse` `discoveryengine.conversations.create` `discoveryengine.dataStores.completeQuery` `discoveryengine.servingConfigs.answer` `discoveryengine.servingConfigs.search` `discoveryengine.userEvents.create` `integrations.apigeeExecutions.list` `integrations.apigeeIntegrationVers.get` `integrations.apigeeIntegrationVers.list` `integrations.integrationVersions.get` `integrations.integrationVersions.invoke` `integrations.integrationVersions.list` `integrations.integrations.get` `integrations.integrations.invoke` `integrations.integrations.list` `integrations.testCases.get` `integrations.testCases.invoke` `integrations.testCases.list` `logging.logEntries.create` `modelarmor.templates.useToSanitizeModelResponse` `modelarmor.templates.useToSanitizeUserPrompt` `monitoring.metricDescriptors.create` `monitoring.metricDescriptors.get` `monitoring.metricDescriptors.list` `monitoring.monitoredResourceDescriptors.` `monitoring.monitoredResourceDescriptors.get` `monitoring.monitoredResourceDescriptors.list` `monitoring.timeSeries.` `monitoring.timeSeries.create` `monitoring.timeSeries.list` `networkservices.agentGateways.get` `networkservices.agentGateways.list` `networkservices.agentGateways.use` `resourcemanager.projects.get` `resourcemanager.projects.list` `spanner.databases.beginReadOnlyTransaction` `spanner.databases.partitionQuery` `spanner.databases.select` `spanner.databases.useDataBoost` `spanner.sessions.create` `storage.buckets.create` `storage.buckets.get` `storage.buckets.getIamPolicy` `storage.buckets.setIamPolicy` `storage.managedFolders.*` `storage.managedFolders.create` `storage.managedFolders.delete` `storage.managedFolders.get` `storage.managedFolders.getIamPolicy` `storage.managedFolders.list` `storage.managedFolders.setIamPolicy` `storage.objects.create` `storage.objects.delete` `storage.objects.get` `storage.objects.list` `storage.objects.update`

Discovery Engine Service Agent

(roles/discoveryengine.serviceAgent)

Discovery Engine service uploads documents and user events from Cloud Storage and BigQuery, reports results to the customer Cloud Storage bucket, writes logs to customer projects using Cloud Logging, and writes and reads metrics for customer using Cloud Monitoring.

agentregistry.agents.*

agentregistry.agents.get
agentregistry.agents.list
agentregistry.agents.search

agentregistry.mcpServers.*

agentregistry.mcpServers.get
agentregistry.mcpServers.list
agentregistry.mcpServers.search

aiplatform.endpoints.predict

aiplatform.executions.create

aiplatform.executions.delete

aiplatform.executions.update

aiplatform.extensions.*

aiplatform.extensions.delete
aiplatform.extensions.execute
aiplatform.extensions.get
aiplatform.extensions.import
aiplatform.extensions.list
aiplatform.extensions.update

aiplatform.operations.list

aiplatform.reasoningEngines.create

aiplatform.reasoningEngines.delete

aiplatform.reasoningEngines.get

aiplatform.reasoningEngines.list

aiplatform.reasoningEngines.query

aiplatform.reasoningEngines.update

aiplatform.sandboxEnvironments.*

aiplatform.sandboxEnvironments.create
aiplatform.sandboxEnvironments.delete
aiplatform.sandboxEnvironments.execute
aiplatform.sandboxEnvironments.get
aiplatform.sandboxEnvironments.list

alloydb.clusters.export

alloydb.databases.list

alloydb.instances.get

alloydb.operations.get

bigquery.datasets.create

bigquery.datasets.get

bigquery.jobs.create

bigquery.jobs.get

bigquery.jobs.list

bigquery.jobs.update

bigquery.tables.create

bigquery.tables.export

bigquery.tables.get

bigquery.tables.getData

bigquery.tables.list

bigquery.tables.update

bigquery.tables.updateData

bigtable.tables.readRows

bigtable.tables.sampleRowKeys

cloudsql.databases.get

cloudsql.instances.export

cloudsql.instances.get

consumerprocurement.entitlements.list

datastore.databases.export

datastore.databases.get

datastore.databases.getMetadata

datastore.operations.get

dialogflow.sessions.detectIntent

discoveryengine.agents.create

discoveryengine.agents.manage

discoveryengine.completionConfigs.completeQuery

discoveryengine.conversations.converse

discoveryengine.conversations.create

discoveryengine.dataStores.completeQuery

discoveryengine.servingConfigs.answer

discoveryengine.servingConfigs.search

discoveryengine.userEvents.create

integrations.apigeeExecutions.list

integrations.apigeeIntegrationVers.get

integrations.apigeeIntegrationVers.list

integrations.integrationVersions.get

integrations.integrationVersions.invoke

integrations.integrationVersions.list

integrations.integrations.get

integrations.integrations.invoke

integrations.integrations.list

integrations.testCases.get

integrations.testCases.invoke

integrations.testCases.list

logging.logEntries.create

modelarmor.templates.useToSanitizeModelResponse

modelarmor.templates.useToSanitizeUserPrompt

monitoring.metricDescriptors.create

monitoring.metricDescriptors.get

monitoring.metricDescriptors.list

monitoring.monitoredResourceDescriptors.*

monitoring.monitoredResourceDescriptors.get
monitoring.monitoredResourceDescriptors.list

monitoring.timeSeries.*

monitoring.timeSeries.create
monitoring.timeSeries.list

networkservices.agentGateways.get

networkservices.agentGateways.list

networkservices.agentGateways.use

resourcemanager.projects.get

resourcemanager.projects.list

spanner.databases.beginReadOnlyTransaction

spanner.databases.partitionQuery

spanner.databases.select

spanner.databases.useDataBoost

spanner.sessions.create

storage.buckets.create

storage.buckets.get

storage.buckets.getIamPolicy

storage.buckets.setIamPolicy

storage.managedFolders.*

storage.managedFolders.create
storage.managedFolders.delete
storage.managedFolders.get
storage.managedFolders.getIamPolicy
storage.managedFolders.list
storage.managedFolders.setIamPolicy

storage.objects.create

storage.objects.delete

storage.objects.get

storage.objects.list

storage.objects.update

Discovery Engine permissions

Permission	Included in roles
`discoveryengine.accounts.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Restricted User (`roles/discoveryengine.agentspaceRestrictedUser`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM User (`roles/discoveryengine.notebookLmUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.aclConfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Support User (`roles/iam.supportUser`)
`discoveryengine.aclConfigs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`)
`discoveryengine.agentFiles.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Agent Admin (`roles/discoveryengine.agentAdmin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.agentFiles.download`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Agent Admin (`roles/discoveryengine.agentAdmin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.agentFiles.import`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Agent Admin (`roles/discoveryengine.agentAdmin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.agentFiles.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Agent Admin (`roles/discoveryengine.agentAdmin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.agentFiles.upload`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Agent Admin (`roles/discoveryengine.agentAdmin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.agentIamProposals.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.agentIamProposals.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.agentIamProposals.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Agent Admin (`roles/discoveryengine.agentAdmin`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.agentIamProposals.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Agent Admin (`roles/discoveryengine.agentAdmin`) Discovery Engine User (`roles/discoveryengine.user`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.agents.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Agent Admin (`roles/discoveryengine.agentAdmin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`discoveryengine.agents.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Agent Admin (`roles/discoveryengine.agentAdmin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.agents.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Agent Admin (`roles/discoveryengine.agentAdmin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.agents.getAgentView`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.agents.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Agent Admin (`roles/discoveryengine.agentAdmin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.agents.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Agent Admin (`roles/discoveryengine.agentAdmin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.agents.listAvailableAgentViews`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.agents.manage`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Agent Admin (`roles/discoveryengine.agentAdmin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`discoveryengine.agents.requestReview`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.agents.setIamPolicy`	Owner (`roles/owner`) Discovery Engine Admin (`roles/discoveryengine.admin`) Agent Admin (`roles/discoveryengine.agentAdmin`) Security Admin (`roles/iam.securityAdmin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.agents.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Agent Admin (`roles/discoveryengine.agentAdmin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.alertPolicies.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.alertPolicies.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.alertPolicies.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.analytics.acquireDashboardSession`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.analytics.refreshDashboardSessionTokens`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.answers.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.assistAnswers.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.assistants.assist`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.assistants.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.assistants.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.assistants.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.assistants.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.assistants.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.audioOverviews.create`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`)
`discoveryengine.audioOverviews.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`)
`discoveryengine.audioOverviews.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.audioOverviews.getIceConfig`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.audioOverviews.sendSdpOffer`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.authorizations.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.authorizations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.authorizations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Support User (`roles/iam.supportUser`)
`discoveryengine.authorizations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.authorizations.storeUserAuthorization`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Restricted User (`roles/discoveryengine.agentspaceRestrictedUser`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.authorizations.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.billingAccountLicenseConfigs.distribute`	Owner (`roles/owner`) Billing Account Administrator (`roles/billing.admin`) Discovery Engine Admin (`roles/discoveryengine.admin`) Consumer Procurement Order Administrator (`roles/consumerprocurement.orderAdmin`) Consumer Procurement Administrator (`roles/consumerprocurement.procurementAdmin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.billingAccountLicenseConfigs.get`	Owner (`roles/owner`) Billing Account Administrator (`roles/billing.admin`) Billing Account Viewer (`roles/billing.viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Consumer Procurement Order Administrator (`roles/consumerprocurement.orderAdmin`) Consumer Procurement Order Viewer (`roles/consumerprocurement.orderViewer`) Consumer Procurement Administrator (`roles/consumerprocurement.procurementAdmin`) Consumer Procurement Viewer (`roles/consumerprocurement.procurementViewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.billingAccountLicenseConfigs.list`	Owner (`roles/owner`) Billing Account Administrator (`roles/billing.admin`) Billing Account Viewer (`roles/billing.viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Consumer Procurement Order Administrator (`roles/consumerprocurement.orderAdmin`) Consumer Procurement Order Viewer (`roles/consumerprocurement.orderViewer`) Consumer Procurement Administrator (`roles/consumerprocurement.procurementAdmin`) Consumer Procurement Viewer (`roles/consumerprocurement.procurementViewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Security Auditor (`roles/iam.securityAuditor`)
`discoveryengine.billingAccountLicenseConfigs.retract`	Owner (`roles/owner`) Billing Account Administrator (`roles/billing.admin`) Discovery Engine Admin (`roles/discoveryengine.admin`) Consumer Procurement Order Administrator (`roles/consumerprocurement.orderAdmin`) Consumer Procurement Administrator (`roles/consumerprocurement.procurementAdmin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.branches.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.branches.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.cannedQueries.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.cannedQueries.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.cannedQueries.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.cannedQueries.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.cannedQueries.listActiveCannedQueryUserViews`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.cannedQueries.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.cmekConfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.cmekConfigs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.cmekConfigs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.collections.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.collections.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.collections.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.collections.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (`roles/ces.serviceAgent`) Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.collections.setIamPolicy`	Owner (`roles/owner`) Discovery Engine Admin (`roles/discoveryengine.admin`) Security Admin (`roles/iam.securityAdmin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.completionConfigs.completeQuery`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`discoveryengine.completionConfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.completionConfigs.removeSuggestion`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.completionConfigs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.completionSuggestions.import`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.completionSuggestions.purge`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.connectorRuns.cancel`	Owner (`roles/owner`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.connectorRuns.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.controls.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.controls.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.controls.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.controls.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.controls.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.conversations.converse`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`discoveryengine.conversations.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`discoveryengine.conversations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)
`discoveryengine.conversations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.conversations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.conversations.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)
`discoveryengine.dataConnectors.acquireAccessToken`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Restricted User (`roles/discoveryengine.agentspaceRestrictedUser`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.dataConnectors.acquireAndStoreRefreshToken`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Restricted User (`roles/discoveryengine.agentspaceRestrictedUser`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.dataConnectors.buildActionInvocation`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Restricted User (`roles/discoveryengine.agentspaceRestrictedUser`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.dataConnectors.checkRefreshToken`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Restricted User (`roles/discoveryengine.agentspaceRestrictedUser`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.dataConnectors.executeAction`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Restricted User (`roles/discoveryengine.agentspaceRestrictedUser`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.dataConnectors.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.dataConnectors.queryAvailableActions`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Restricted User (`roles/discoveryengine.agentspaceRestrictedUser`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.dataConnectors.startConnectorRun`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.dataConnectors.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.dataStores.completeQuery`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`) SecLM Service Agent (`roles/seclm.serviceAgent`)
`discoveryengine.dataStores.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (`roles/ces.serviceAgent`) Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.dataStores.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.dataStores.enrollSolutions`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.dataStores.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (`roles/ces.serviceAgent`) Dialogflow Service Agent (`roles/dialogflow.serviceAgent`) SecLM Service Agent (`roles/seclm.serviceAgent`)
`discoveryengine.dataStores.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.dataStores.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (`roles/ces.serviceAgent`) Dialogflow Service Agent (`roles/dialogflow.serviceAgent`) SecLM Service Agent (`roles/seclm.serviceAgent`)
`discoveryengine.dataStores.listCustomModels`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.dataStores.setIamPolicy`	Owner (`roles/owner`) Discovery Engine Admin (`roles/discoveryengine.admin`) Security Admin (`roles/iam.securityAdmin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.dataStores.trainCustomModel`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)
`discoveryengine.dataStores.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.devToolsConfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Business AI Code Service Agent (`roles/businessaicode.serviceAgent`)
`discoveryengine.devToolsConfigs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.documentProcessingConfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.documentProcessingConfigs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.documents.batchGetDocumentsMetadata`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.documents.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (`roles/ces.serviceAgent`) Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.documents.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)
`discoveryengine.documents.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (`roles/ces.serviceAgent`) Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.documents.import`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (`roles/ces.serviceAgent`) Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.documents.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (`roles/ces.serviceAgent`) Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.documents.purge`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.documents.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (`roles/ces.serviceAgent`) Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.engines.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (`roles/ces.serviceAgent`) Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.engines.createEngineUserData`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.engines.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (`roles/ces.serviceAgent`) Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.engines.generateMemories`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.engines.generatePersonalContext`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.engines.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (`roles/ces.serviceAgent`) Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.engines.getEngineUserData`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.engines.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.engines.getPersonalContext`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.engines.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.engines.pause`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)
`discoveryengine.engines.resume`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)
`discoveryengine.engines.setIamPolicy`	Owner (`roles/owner`) Discovery Engine Admin (`roles/discoveryengine.admin`) Security Admin (`roles/iam.securityAdmin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.engines.tune`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)
`discoveryengine.engines.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (`roles/ces.serviceAgent`) Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.engines.updateEngineUserData`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.evaluations.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.evaluations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.evaluations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.groundingConfigs.check`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.homepageDataConfigs.fetchDocuments`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.ideaForgeIdeas.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.ideaForgeIdeas.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.ideaForgeInstances.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.ideaForgeInstances.start`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.identityMappingStores.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)
`discoveryengine.identityMappingStores.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)
`discoveryengine.identityMappingStores.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.identityMappingStores.importIdentityMappings`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)
`discoveryengine.identityMappingStores.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.identityMappingStores.listIdentityMappings`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.identityMappingStores.purgeIdentityMappings`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)
`discoveryengine.licenseConfigs.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.licenseConfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.licenseConfigs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.licenseConfigs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.locations.completeExternalIdentities`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Restricted User (`roles/discoveryengine.agentspaceRestrictedUser`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM User (`roles/discoveryengine.notebookLmUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.locations.estimateDataSize`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Support User (`roles/iam.supportUser`)
`discoveryengine.locations.exchangeAuthCredentials`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Support User (`roles/iam.supportUser`)
`discoveryengine.locations.fetchAgentCards`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Restricted User (`roles/discoveryengine.agentspaceRestrictedUser`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.locations.getConnectorSource`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Support User (`roles/iam.supportUser`)
`discoveryengine.locations.listConnectorSources`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Support User (`roles/iam.supportUser`)
`discoveryengine.locations.setUpDataConnector`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.memories.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.memories.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.memories.retrieve`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.memories.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.models.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)
`discoveryengine.models.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)
`discoveryengine.models.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.models.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.models.pause`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)
`discoveryengine.models.resume`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)
`discoveryengine.models.tune`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)
`discoveryengine.models.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)
`discoveryengine.notebooks.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Restricted User (`roles/discoveryengine.agentspaceRestrictedUser`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM User (`roles/discoveryengine.notebookLmUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.notebooks.generateGuide`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.notebooks.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.notebooks.getAnalytics`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Support User (`roles/iam.supportUser`)
`discoveryengine.notebooks.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.notebooks.interactSources`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.notebooks.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine User (`roles/discoveryengine.user`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Restricted User (`roles/discoveryengine.agentspaceRestrictedUser`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM User (`roles/discoveryengine.notebookLmUser`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.notebooks.removeSelf`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`)
`discoveryengine.notebooks.setIamPolicy`	Owner (`roles/owner`) Security Admin (`roles/iam.securityAdmin`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`)
`discoveryengine.notebooks.update`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`)
`discoveryengine.notes.create`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`)
`discoveryengine.notes.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`)
`discoveryengine.notes.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.notes.update`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`)
`discoveryengine.notificationMessages.ackAll`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.notificationMessages.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.notificationMessages.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.podcasts.create`	Owner (`roles/owner`) Editor (`roles/editor`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.projectOverageConfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Business AI Code Service Agent (`roles/businessaicode.serviceAgent`)
`discoveryengine.projects.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.projects.provision`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.projects.reportConsentChange`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.projects.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.rankingConfigs.rank`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (`roles/ces.serviceAgent`) Vector Search Service Agent (`roles/vectorsearch.serviceAgent`)
`discoveryengine.sampleQueries.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)
`discoveryengine.sampleQueries.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)
`discoveryengine.sampleQueries.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.sampleQueries.import`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)
`discoveryengine.sampleQueries.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.sampleQueries.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)
`discoveryengine.sampleQuerySets.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)
`discoveryengine.sampleQuerySets.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)
`discoveryengine.sampleQuerySets.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.sampleQuerySets.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.sampleQuerySets.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)
`discoveryengine.schemas.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.schemas.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.schemas.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (`roles/ces.serviceAgent`) Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.schemas.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Customer Engagement Suite Service Agent (`roles/ces.serviceAgent`) Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.schemas.preview`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.schemas.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.schemas.validate`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.servingConfigs.answer`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`discoveryengine.servingConfigs.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.servingConfigs.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.servingConfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.servingConfigs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.servingConfigs.recommend`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.servingConfigs.search`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Extension Service Agent (`roles/aiplatform.extensionServiceAgent`) Customer Engagement Suite Service Agent (`roles/ces.serviceAgent`) Dialogflow Service Agent (`roles/dialogflow.serviceAgent`) Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`) SecLM Service Agent (`roles/seclm.serviceAgent`)
`discoveryengine.servingConfigs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.sessions.addContextFile`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.sessions.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.sessions.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.sessions.downloadFile`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.sessions.generateSummary`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.sessions.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.sessions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.sessions.listSessionFileMetadata`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.sessions.recommendQuestions`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.sessions.removeContextFile`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.sessions.search`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.sessions.selectContextFiles`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.sessions.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.sessions.uploadFile`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.sharedContents.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.sharedContents.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.sharedContents.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.sharedContents.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.siteSearchEngines.batchVerifyTargetSites`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.siteSearchEngines.disableAdvancedSiteSearch`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.siteSearchEngines.enableAdvancedSiteSearch`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.siteSearchEngines.fetchDomainVerificationStatus`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Support User (`roles/iam.supportUser`)
`discoveryengine.siteSearchEngines.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.siteSearchEngines.recrawlUris`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.sitemaps.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.sitemaps.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.sitemaps.fetch`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Support User (`roles/iam.supportUser`)
`discoveryengine.sources.checkFreshness`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.sources.create`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`)
`discoveryengine.sources.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`)
`discoveryengine.sources.generateDocumentGuide`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.sources.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.sources.refresh`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`)
`discoveryengine.sources.update`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`)
`discoveryengine.suggestionDenyListEntries.import`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.suggestionDenyListEntries.purge`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.targetSites.batchCreate`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.targetSites.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.targetSites.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.targetSites.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.targetSites.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`discoveryengine.targetSites.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.userEvents.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Restricted User (`roles/discoveryengine.agentspaceRestrictedUser`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`discoveryengine.userEvents.fetchStats`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.userEvents.import`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)
`discoveryengine.userEvents.purge`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.userStores.batchUpdateUserLicenses`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.userStores.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Support User (`roles/iam.supportUser`)
`discoveryengine.userStores.listUserLicenses`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Support User (`roles/iam.supportUser`)
`discoveryengine.userStores.update`	Owner (`roles/owner`) Discovery Engine Admin (`roles/discoveryengine.admin`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`)
`discoveryengine.users.get`	Owner (`roles/owner`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Restricted User (`roles/discoveryengine.agentspaceRestrictedUser`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.users.update`	Owner (`roles/owner`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine User (`roles/discoveryengine.user`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Restricted User (`roles/discoveryengine.agentspaceRestrictedUser`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Podcast API User (`roles/discoveryengine.podcastApiUser`)
`discoveryengine.widgetConfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`) Gemini Enterprise User (`roles/discoveryengine.agentspaceUser`) Gemini Enterprise Viewer (`roles/discoveryengine.agentspaceViewer`) Podcast API User (`roles/discoveryengine.podcastApiUser`) Support User (`roles/iam.supportUser`)
`discoveryengine.widgetConfigs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Gemini Enterprise Admin (`roles/discoveryengine.agentspaceAdmin`) Gemini Enterprise Editor (`roles/discoveryengine.agentspaceEditor`)

Discovery Engine roles and permissions Stay organized with collections Save and categorize content based on your preferences.