Discovery Engine roles and permissions

This page lists the IAM roles and permissions for Discovery Engine. To search through all roles and permissions, see the role and permission index.

Discovery Engine roles

Role Permissions

(roles/discoveryengine.admin)

Grants full access to all discoveryengine resources.

discoveryengine.aclConfigs.*

  • discoveryengine.aclConfigs.get
  • discoveryengine.aclConfigs.update

discoveryengine.agents.*

  • discoveryengine.agents.create
  • discoveryengine.agents.delete
  • discoveryengine.agents.get
  • discoveryengine.agents.list
  • discoveryengine.agents.update

discoveryengine.alertPolicies.*

  • discoveryengine.alertPolicies.create
  • discoveryengine.alertPolicies.get
  • discoveryengine.alertPolicies.update

discoveryengine.analytics.*

  • discoveryengine.analytics.acquireDashboardSession
  • discoveryengine.analytics.refreshDashboardSessionTokens

discoveryengine.answers.get

discoveryengine.assistAnswers.get

discoveryengine.assistants.*

  • discoveryengine.assistants.assist
  • discoveryengine.assistants.create
  • discoveryengine.assistants.delete
  • discoveryengine.assistants.get
  • discoveryengine.assistants.list
  • discoveryengine.assistants.update

discoveryengine.branches.*

  • discoveryengine.branches.get
  • discoveryengine.branches.list

discoveryengine.cmekConfigs.*

  • discoveryengine.cmekConfigs.get
  • discoveryengine.cmekConfigs.list
  • discoveryengine.cmekConfigs.update

discoveryengine.collections.*

  • discoveryengine.collections.delete
  • discoveryengine.collections.get
  • discoveryengine.collections.list

discoveryengine.completionConfigs.*

  • discoveryengine.completionConfigs.completeQuery
  • discoveryengine.completionConfigs.get
  • discoveryengine.completionConfigs.update

discoveryengine.connectorRuns.*

  • discoveryengine.connectorRuns.cancel
  • discoveryengine.connectorRuns.list

discoveryengine.controls.*

  • discoveryengine.controls.create
  • discoveryengine.controls.delete
  • discoveryengine.controls.get
  • discoveryengine.controls.list
  • discoveryengine.controls.update

discoveryengine.conversations.*

  • discoveryengine.conversations.converse
  • discoveryengine.conversations.create
  • discoveryengine.conversations.delete
  • discoveryengine.conversations.get
  • discoveryengine.conversations.list
  • discoveryengine.conversations.update

discoveryengine.dataConnectors.*

  • discoveryengine.dataConnectors.acquireAccessToken
  • discoveryengine.dataConnectors.acquireAndStoreRefreshToken
  • discoveryengine.dataConnectors.buildActionInvocation
  • discoveryengine.dataConnectors.checkRefreshToken
  • discoveryengine.dataConnectors.executeAction
  • discoveryengine.dataConnectors.get
  • discoveryengine.dataConnectors.queryAvailableActions
  • discoveryengine.dataConnectors.startConnectorRun
  • discoveryengine.dataConnectors.update

discoveryengine.dataStores.*

  • discoveryengine.dataStores.completeQuery
  • discoveryengine.dataStores.create
  • discoveryengine.dataStores.delete
  • discoveryengine.dataStores.enrollSolutions
  • discoveryengine.dataStores.get
  • discoveryengine.dataStores.list
  • discoveryengine.dataStores.listCustomModels
  • discoveryengine.dataStores.trainCustomModel
  • discoveryengine.dataStores.update

discoveryengine.documentProcessingConfigs.*

  • discoveryengine.documentProcessingConfigs.get
  • discoveryengine.documentProcessingConfigs.update

discoveryengine.documents.*

  • discoveryengine.documents.batchGetDocumentsMetadata
  • discoveryengine.documents.create
  • discoveryengine.documents.delete
  • discoveryengine.documents.get
  • discoveryengine.documents.import
  • discoveryengine.documents.list
  • discoveryengine.documents.purge
  • discoveryengine.documents.update

discoveryengine.engines.*

  • discoveryengine.engines.create
  • discoveryengine.engines.createEngineUserData
  • discoveryengine.engines.delete
  • discoveryengine.engines.get
  • discoveryengine.engines.list
  • discoveryengine.engines.pause
  • discoveryengine.engines.resume
  • discoveryengine.engines.tune
  • discoveryengine.engines.update

discoveryengine.evaluations.*

  • discoveryengine.evaluations.create
  • discoveryengine.evaluations.get
  • discoveryengine.evaluations.list

discoveryengine.groundingConfigs.check

discoveryengine.identityMappingStores.*

  • discoveryengine.identityMappingStores.create
  • discoveryengine.identityMappingStores.delete
  • discoveryengine.identityMappingStores.get
  • discoveryengine.identityMappingStores.importIdentityMappings
  • discoveryengine.identityMappingStores.list
  • discoveryengine.identityMappingStores.listIdentityMappings
  • discoveryengine.identityMappingStores.purgeIdentityMappings

discoveryengine.licenseConfigs.*

  • discoveryengine.licenseConfigs.create
  • discoveryengine.licenseConfigs.get
  • discoveryengine.licenseConfigs.list
  • discoveryengine.licenseConfigs.update

discoveryengine.locations.*

  • discoveryengine.locations.estimateDataSize
  • discoveryengine.locations.exchangeAuthCredentials
  • discoveryengine.locations.getConnectorSource
  • discoveryengine.locations.listConnectorSources
  • discoveryengine.locations.setUpDataConnector

discoveryengine.models.*

  • discoveryengine.models.create
  • discoveryengine.models.delete
  • discoveryengine.models.get
  • discoveryengine.models.list
  • discoveryengine.models.pause
  • discoveryengine.models.resume
  • discoveryengine.models.tune
  • discoveryengine.models.update

discoveryengine.operations.*

  • discoveryengine.operations.get
  • discoveryengine.operations.list

discoveryengine.projects.*

  • discoveryengine.projects.get
  • discoveryengine.projects.provision
  • discoveryengine.projects.reportConsentChange

discoveryengine.rankingConfigs.rank

discoveryengine.sampleQueries.*

  • discoveryengine.sampleQueries.create
  • discoveryengine.sampleQueries.delete
  • discoveryengine.sampleQueries.get
  • discoveryengine.sampleQueries.import
  • discoveryengine.sampleQueries.list
  • discoveryengine.sampleQueries.update

discoveryengine.sampleQuerySets.*

  • discoveryengine.sampleQuerySets.create
  • discoveryengine.sampleQuerySets.delete
  • discoveryengine.sampleQuerySets.get
  • discoveryengine.sampleQuerySets.list
  • discoveryengine.sampleQuerySets.update

discoveryengine.schemas.*

  • discoveryengine.schemas.create
  • discoveryengine.schemas.delete
  • discoveryengine.schemas.get
  • discoveryengine.schemas.list
  • discoveryengine.schemas.preview
  • discoveryengine.schemas.update
  • discoveryengine.schemas.validate

discoveryengine.servingConfigs.*

  • discoveryengine.servingConfigs.answer
  • discoveryengine.servingConfigs.create
  • discoveryengine.servingConfigs.delete
  • discoveryengine.servingConfigs.get
  • discoveryengine.servingConfigs.list
  • discoveryengine.servingConfigs.recommend
  • discoveryengine.servingConfigs.search
  • discoveryengine.servingConfigs.update

discoveryengine.sessions.*

  • discoveryengine.sessions.addContextFile
  • discoveryengine.sessions.create
  • discoveryengine.sessions.delete
  • discoveryengine.sessions.downloadFile
  • discoveryengine.sessions.get
  • discoveryengine.sessions.list
  • discoveryengine.sessions.listSessionFileMetadata
  • discoveryengine.sessions.recommendQuestions
  • discoveryengine.sessions.removeContextFile
  • discoveryengine.sessions.search
  • discoveryengine.sessions.selectContextFiles
  • discoveryengine.sessions.update
  • discoveryengine.sessions.uploadFile

discoveryengine.siteSearchEngines.*

  • discoveryengine.siteSearchEngines.batchVerifyTargetSites
  • discoveryengine.siteSearchEngines.disableAdvancedSiteSearch
  • discoveryengine.siteSearchEngines.enableAdvancedSiteSearch
  • discoveryengine.siteSearchEngines.fetchDomainVerificationStatus
  • discoveryengine.siteSearchEngines.get
  • discoveryengine.siteSearchEngines.recrawlUris

discoveryengine.sitemaps.*

  • discoveryengine.sitemaps.create
  • discoveryengine.sitemaps.delete
  • discoveryengine.sitemaps.fetch

discoveryengine.suggestionDenyListEntries.*

  • discoveryengine.suggestionDenyListEntries.import
  • discoveryengine.suggestionDenyListEntries.purge

discoveryengine.targetSites.*

  • discoveryengine.targetSites.batchCreate
  • discoveryengine.targetSites.create
  • discoveryengine.targetSites.delete
  • discoveryengine.targetSites.get
  • discoveryengine.targetSites.list
  • discoveryengine.targetSites.update

discoveryengine.userEvents.*

  • discoveryengine.userEvents.create
  • discoveryengine.userEvents.fetchStats
  • discoveryengine.userEvents.import
  • discoveryengine.userEvents.purge

discoveryengine.userStores.*

  • discoveryengine.userStores.batchUpdateUserLicenses
  • discoveryengine.userStores.get
  • discoveryengine.userStores.listUserLicenses
  • discoveryengine.userStores.update

discoveryengine.users.*

  • discoveryengine.users.get
  • discoveryengine.users.update

discoveryengine.widgetConfigs.*

  • discoveryengine.widgetConfigs.get
  • discoveryengine.widgetConfigs.update

resourcemanager.projects.get

resourcemanager.projects.list

(roles/discoveryengine.agentAdmin)

Grants admin-level access to Agent resources.

discoveryengine.agents.*

  • discoveryengine.agents.create
  • discoveryengine.agents.delete
  • discoveryengine.agents.get
  • discoveryengine.agents.list
  • discoveryengine.agents.update

(roles/discoveryengine.agentspaceAdmin)

Grants admin-level access to Agentspace resources.

discoveryengine.aclConfigs.*

  • discoveryengine.aclConfigs.get
  • discoveryengine.aclConfigs.update

discoveryengine.agents.*

  • discoveryengine.agents.create
  • discoveryengine.agents.delete
  • discoveryengine.agents.get
  • discoveryengine.agents.list
  • discoveryengine.agents.update

discoveryengine.alertPolicies.*

  • discoveryengine.alertPolicies.create
  • discoveryengine.alertPolicies.get
  • discoveryengine.alertPolicies.update

discoveryengine.analytics.*

  • discoveryengine.analytics.acquireDashboardSession
  • discoveryengine.analytics.refreshDashboardSessionTokens

discoveryengine.answers.get

discoveryengine.assistAnswers.get

discoveryengine.assistants.*

  • discoveryengine.assistants.assist
  • discoveryengine.assistants.create
  • discoveryengine.assistants.delete
  • discoveryengine.assistants.get
  • discoveryengine.assistants.list
  • discoveryengine.assistants.update

discoveryengine.branches.*

  • discoveryengine.branches.get
  • discoveryengine.branches.list

discoveryengine.cmekConfigs.*

  • discoveryengine.cmekConfigs.get
  • discoveryengine.cmekConfigs.list
  • discoveryengine.cmekConfigs.update

discoveryengine.collections.*

  • discoveryengine.collections.delete
  • discoveryengine.collections.get
  • discoveryengine.collections.list

discoveryengine.completionConfigs.*

  • discoveryengine.completionConfigs.completeQuery
  • discoveryengine.completionConfigs.get
  • discoveryengine.completionConfigs.update

discoveryengine.connectorRuns.*

  • discoveryengine.connectorRuns.cancel
  • discoveryengine.connectorRuns.list

discoveryengine.controls.*

  • discoveryengine.controls.create
  • discoveryengine.controls.delete
  • discoveryengine.controls.get
  • discoveryengine.controls.list
  • discoveryengine.controls.update

discoveryengine.conversations.*

  • discoveryengine.conversations.converse
  • discoveryengine.conversations.create
  • discoveryengine.conversations.delete
  • discoveryengine.conversations.get
  • discoveryengine.conversations.list
  • discoveryengine.conversations.update

discoveryengine.dataConnectors.*

  • discoveryengine.dataConnectors.acquireAccessToken
  • discoveryengine.dataConnectors.acquireAndStoreRefreshToken
  • discoveryengine.dataConnectors.buildActionInvocation
  • discoveryengine.dataConnectors.checkRefreshToken
  • discoveryengine.dataConnectors.executeAction
  • discoveryengine.dataConnectors.get
  • discoveryengine.dataConnectors.queryAvailableActions
  • discoveryengine.dataConnectors.startConnectorRun
  • discoveryengine.dataConnectors.update

discoveryengine.dataStores.*

  • discoveryengine.dataStores.completeQuery
  • discoveryengine.dataStores.create
  • discoveryengine.dataStores.delete
  • discoveryengine.dataStores.enrollSolutions
  • discoveryengine.dataStores.get
  • discoveryengine.dataStores.list
  • discoveryengine.dataStores.listCustomModels
  • discoveryengine.dataStores.trainCustomModel
  • discoveryengine.dataStores.update

discoveryengine.documentProcessingConfigs.*

  • discoveryengine.documentProcessingConfigs.get
  • discoveryengine.documentProcessingConfigs.update

discoveryengine.documents.*

  • discoveryengine.documents.batchGetDocumentsMetadata
  • discoveryengine.documents.create
  • discoveryengine.documents.delete
  • discoveryengine.documents.get
  • discoveryengine.documents.import
  • discoveryengine.documents.list
  • discoveryengine.documents.purge
  • discoveryengine.documents.update

discoveryengine.engines.*

  • discoveryengine.engines.create
  • discoveryengine.engines.createEngineUserData
  • discoveryengine.engines.delete
  • discoveryengine.engines.get
  • discoveryengine.engines.list
  • discoveryengine.engines.pause
  • discoveryengine.engines.resume
  • discoveryengine.engines.tune
  • discoveryengine.engines.update

discoveryengine.evaluations.*

  • discoveryengine.evaluations.create
  • discoveryengine.evaluations.get
  • discoveryengine.evaluations.list

discoveryengine.groundingConfigs.check

discoveryengine.identityMappingStores.*

  • discoveryengine.identityMappingStores.create
  • discoveryengine.identityMappingStores.delete
  • discoveryengine.identityMappingStores.get
  • discoveryengine.identityMappingStores.importIdentityMappings
  • discoveryengine.identityMappingStores.list
  • discoveryengine.identityMappingStores.listIdentityMappings
  • discoveryengine.identityMappingStores.purgeIdentityMappings

discoveryengine.licenseConfigs.*

  • discoveryengine.licenseConfigs.create
  • discoveryengine.licenseConfigs.get
  • discoveryengine.licenseConfigs.list
  • discoveryengine.licenseConfigs.update

discoveryengine.locations.*

  • discoveryengine.locations.estimateDataSize
  • discoveryengine.locations.exchangeAuthCredentials
  • discoveryengine.locations.getConnectorSource
  • discoveryengine.locations.listConnectorSources
  • discoveryengine.locations.setUpDataConnector

discoveryengine.models.*

  • discoveryengine.models.create
  • discoveryengine.models.delete
  • discoveryengine.models.get
  • discoveryengine.models.list
  • discoveryengine.models.pause
  • discoveryengine.models.resume
  • discoveryengine.models.tune
  • discoveryengine.models.update

discoveryengine.operations.*

  • discoveryengine.operations.get
  • discoveryengine.operations.list

discoveryengine.projects.*

  • discoveryengine.projects.get
  • discoveryengine.projects.provision
  • discoveryengine.projects.reportConsentChange

discoveryengine.rankingConfigs.rank

discoveryengine.sampleQueries.*

  • discoveryengine.sampleQueries.create
  • discoveryengine.sampleQueries.delete
  • discoveryengine.sampleQueries.get
  • discoveryengine.sampleQueries.import
  • discoveryengine.sampleQueries.list
  • discoveryengine.sampleQueries.update

discoveryengine.sampleQuerySets.*

  • discoveryengine.sampleQuerySets.create
  • discoveryengine.sampleQuerySets.delete
  • discoveryengine.sampleQuerySets.get
  • discoveryengine.sampleQuerySets.list
  • discoveryengine.sampleQuerySets.update

discoveryengine.schemas.*

  • discoveryengine.schemas.create
  • discoveryengine.schemas.delete
  • discoveryengine.schemas.get
  • discoveryengine.schemas.list
  • discoveryengine.schemas.preview
  • discoveryengine.schemas.update
  • discoveryengine.schemas.validate

discoveryengine.servingConfigs.*

  • discoveryengine.servingConfigs.answer
  • discoveryengine.servingConfigs.create
  • discoveryengine.servingConfigs.delete
  • discoveryengine.servingConfigs.get
  • discoveryengine.servingConfigs.list
  • discoveryengine.servingConfigs.recommend
  • discoveryengine.servingConfigs.search
  • discoveryengine.servingConfigs.update

discoveryengine.sessions.*

  • discoveryengine.sessions.addContextFile
  • discoveryengine.sessions.create
  • discoveryengine.sessions.delete
  • discoveryengine.sessions.downloadFile
  • discoveryengine.sessions.get
  • discoveryengine.sessions.list
  • discoveryengine.sessions.listSessionFileMetadata
  • discoveryengine.sessions.recommendQuestions
  • discoveryengine.sessions.removeContextFile
  • discoveryengine.sessions.search
  • discoveryengine.sessions.selectContextFiles
  • discoveryengine.sessions.update
  • discoveryengine.sessions.uploadFile

discoveryengine.siteSearchEngines.*

  • discoveryengine.siteSearchEngines.batchVerifyTargetSites
  • discoveryengine.siteSearchEngines.disableAdvancedSiteSearch
  • discoveryengine.siteSearchEngines.enableAdvancedSiteSearch
  • discoveryengine.siteSearchEngines.fetchDomainVerificationStatus
  • discoveryengine.siteSearchEngines.get
  • discoveryengine.siteSearchEngines.recrawlUris

discoveryengine.sitemaps.*

  • discoveryengine.sitemaps.create
  • discoveryengine.sitemaps.delete
  • discoveryengine.sitemaps.fetch

discoveryengine.suggestionDenyListEntries.*

  • discoveryengine.suggestionDenyListEntries.import
  • discoveryengine.suggestionDenyListEntries.purge

discoveryengine.targetSites.*

  • discoveryengine.targetSites.batchCreate
  • discoveryengine.targetSites.create
  • discoveryengine.targetSites.delete
  • discoveryengine.targetSites.get
  • discoveryengine.targetSites.list
  • discoveryengine.targetSites.update

discoveryengine.userEvents.*

  • discoveryengine.userEvents.create
  • discoveryengine.userEvents.fetchStats
  • discoveryengine.userEvents.import
  • discoveryengine.userEvents.purge

discoveryengine.userStores.*

  • discoveryengine.userStores.batchUpdateUserLicenses
  • discoveryengine.userStores.get
  • discoveryengine.userStores.listUserLicenses
  • discoveryengine.userStores.update

discoveryengine.users.*

  • discoveryengine.users.get
  • discoveryengine.users.update

discoveryengine.widgetConfigs.*

  • discoveryengine.widgetConfigs.get
  • discoveryengine.widgetConfigs.update

resourcemanager.projects.get

resourcemanager.projects.list

(roles/discoveryengine.agentspaceEditor)

Grants access to edit Agentspace resources.

discoveryengine.aclConfigs.get

discoveryengine.agents.*

  • discoveryengine.agents.create
  • discoveryengine.agents.delete
  • discoveryengine.agents.get
  • discoveryengine.agents.list
  • discoveryengine.agents.update

discoveryengine.alertPolicies.get

discoveryengine.analytics.*

  • discoveryengine.analytics.acquireDashboardSession
  • discoveryengine.analytics.refreshDashboardSessionTokens

discoveryengine.answers.get

discoveryengine.assistAnswers.get

discoveryengine.assistants.assist

discoveryengine.assistants.get

discoveryengine.assistants.list

discoveryengine.branches.*

  • discoveryengine.branches.get
  • discoveryengine.branches.list

discoveryengine.cmekConfigs.get

discoveryengine.cmekConfigs.list

discoveryengine.collections.get

discoveryengine.collections.list

discoveryengine.completionConfigs.completeQuery

discoveryengine.completionConfigs.get

discoveryengine.connectorRuns.list

discoveryengine.controls.get

discoveryengine.controls.list

discoveryengine.conversations.*

  • discoveryengine.conversations.converse
  • discoveryengine.conversations.create
  • discoveryengine.conversations.delete
  • discoveryengine.conversations.get
  • discoveryengine.conversations.list
  • discoveryengine.conversations.update

discoveryengine.dataConnectors.acquireAccessToken

discoveryengine.dataConnectors.acquireAndStoreRefreshToken

discoveryengine.dataConnectors.buildActionInvocation

discoveryengine.dataConnectors.checkRefreshToken

discoveryengine.dataConnectors.executeAction

discoveryengine.dataConnectors.get

discoveryengine.dataConnectors.queryAvailableActions

discoveryengine.dataStores.completeQuery

discoveryengine.dataStores.get

discoveryengine.dataStores.list

discoveryengine.dataStores.listCustomModels

discoveryengine.dataStores.trainCustomModel

discoveryengine.documentProcessingConfigs.get

discoveryengine.documents.batchGetDocumentsMetadata

discoveryengine.documents.create

discoveryengine.documents.delete

discoveryengine.documents.get

discoveryengine.documents.import

discoveryengine.documents.list

discoveryengine.documents.update

discoveryengine.engines.createEngineUserData

discoveryengine.engines.get

discoveryengine.engines.list

discoveryengine.engines.pause

discoveryengine.engines.resume

discoveryengine.engines.tune

discoveryengine.evaluations.get

discoveryengine.evaluations.list

discoveryengine.groundingConfigs.check

discoveryengine.identityMappingStores.*

  • discoveryengine.identityMappingStores.create
  • discoveryengine.identityMappingStores.delete
  • discoveryengine.identityMappingStores.get
  • discoveryengine.identityMappingStores.importIdentityMappings
  • discoveryengine.identityMappingStores.list
  • discoveryengine.identityMappingStores.listIdentityMappings
  • discoveryengine.identityMappingStores.purgeIdentityMappings

discoveryengine.licenseConfigs.get

discoveryengine.licenseConfigs.list

discoveryengine.models.*

  • discoveryengine.models.create
  • discoveryengine.models.delete
  • discoveryengine.models.get
  • discoveryengine.models.list
  • discoveryengine.models.pause
  • discoveryengine.models.resume
  • discoveryengine.models.tune
  • discoveryengine.models.update

discoveryengine.operations.*

  • discoveryengine.operations.get
  • discoveryengine.operations.list

discoveryengine.projects.get

discoveryengine.rankingConfigs.rank

discoveryengine.sampleQueries.*

  • discoveryengine.sampleQueries.create
  • discoveryengine.sampleQueries.delete
  • discoveryengine.sampleQueries.get
  • discoveryengine.sampleQueries.import
  • discoveryengine.sampleQueries.list
  • discoveryengine.sampleQueries.update

discoveryengine.sampleQuerySets.*

  • discoveryengine.sampleQuerySets.create
  • discoveryengine.sampleQuerySets.delete
  • discoveryengine.sampleQuerySets.get
  • discoveryengine.sampleQuerySets.list
  • discoveryengine.sampleQuerySets.update

discoveryengine.schemas.get

discoveryengine.schemas.list

discoveryengine.schemas.preview

discoveryengine.schemas.validate

discoveryengine.servingConfigs.answer

discoveryengine.servingConfigs.get

discoveryengine.servingConfigs.list

discoveryengine.servingConfigs.recommend

discoveryengine.servingConfigs.search

discoveryengine.sessions.*

  • discoveryengine.sessions.addContextFile
  • discoveryengine.sessions.create
  • discoveryengine.sessions.delete
  • discoveryengine.sessions.downloadFile
  • discoveryengine.sessions.get
  • discoveryengine.sessions.list
  • discoveryengine.sessions.listSessionFileMetadata
  • discoveryengine.sessions.recommendQuestions
  • discoveryengine.sessions.removeContextFile
  • discoveryengine.sessions.search
  • discoveryengine.sessions.selectContextFiles
  • discoveryengine.sessions.update
  • discoveryengine.sessions.uploadFile

discoveryengine.siteSearchEngines.get

discoveryengine.targetSites.get

discoveryengine.targetSites.list

discoveryengine.userEvents.create

discoveryengine.userEvents.fetchStats

discoveryengine.userEvents.import

discoveryengine.userStores.get

discoveryengine.widgetConfigs.*

  • discoveryengine.widgetConfigs.get
  • discoveryengine.widgetConfigs.update

resourcemanager.projects.get

resourcemanager.projects.list

(roles/discoveryengine.agentspaceUser)

Grants user-level access to Agentspace resources.

discoveryengine.accounts.create

discoveryengine.agents.*

  • discoveryengine.agents.create
  • discoveryengine.agents.delete
  • discoveryengine.agents.get
  • discoveryengine.agents.list
  • discoveryengine.agents.update

discoveryengine.answers.get

discoveryengine.assistAnswers.get

discoveryengine.assistants.assist

discoveryengine.completionConfigs.completeQuery

discoveryengine.dataConnectors.acquireAccessToken

discoveryengine.dataConnectors.acquireAndStoreRefreshToken

discoveryengine.dataConnectors.buildActionInvocation

discoveryengine.dataConnectors.checkRefreshToken

discoveryengine.dataConnectors.executeAction

discoveryengine.dataConnectors.queryAvailableActions

discoveryengine.engines.createEngineUserData

discoveryengine.engines.get

discoveryengine.notebooks.create

discoveryengine.notebooks.list

discoveryengine.servingConfigs.answer

discoveryengine.servingConfigs.recommend

discoveryengine.servingConfigs.search

discoveryengine.sessions.*

  • discoveryengine.sessions.addContextFile
  • discoveryengine.sessions.create
  • discoveryengine.sessions.delete
  • discoveryengine.sessions.downloadFile
  • discoveryengine.sessions.get
  • discoveryengine.sessions.list
  • discoveryengine.sessions.listSessionFileMetadata
  • discoveryengine.sessions.recommendQuestions
  • discoveryengine.sessions.removeContextFile
  • discoveryengine.sessions.search
  • discoveryengine.sessions.selectContextFiles
  • discoveryengine.sessions.update
  • discoveryengine.sessions.uploadFile

discoveryengine.userEvents.create

discoveryengine.widgetConfigs.get

resourcemanager.projects.get

resourcemanager.projects.list

(roles/discoveryengine.agentspaceViewer)

Grants access to view the details of Agentspace resources.

discoveryengine.aclConfigs.get

discoveryengine.agents.get

discoveryengine.agents.list

discoveryengine.alertPolicies.get

discoveryengine.analytics.*

  • discoveryengine.analytics.acquireDashboardSession
  • discoveryengine.analytics.refreshDashboardSessionTokens

discoveryengine.answers.get

discoveryengine.assistAnswers.get

discoveryengine.assistants.get

discoveryengine.assistants.list

discoveryengine.branches.*

  • discoveryengine.branches.get
  • discoveryengine.branches.list

discoveryengine.cmekConfigs.get

discoveryengine.cmekConfigs.list

discoveryengine.collections.get

discoveryengine.collections.list

discoveryengine.completionConfigs.completeQuery

discoveryengine.completionConfigs.get

discoveryengine.connectorRuns.list

discoveryengine.controls.get

discoveryengine.controls.list

discoveryengine.conversations.converse

discoveryengine.conversations.get

discoveryengine.conversations.list

discoveryengine.dataConnectors.buildActionInvocation

discoveryengine.dataConnectors.checkRefreshToken

discoveryengine.dataConnectors.get

discoveryengine.dataConnectors.queryAvailableActions

discoveryengine.dataStores.completeQuery

discoveryengine.dataStores.get

discoveryengine.dataStores.list

discoveryengine.dataStores.listCustomModels

discoveryengine.documentProcessingConfigs.get

discoveryengine.documents.batchGetDocumentsMetadata

discoveryengine.documents.get

discoveryengine.documents.list

discoveryengine.engines.get

discoveryengine.engines.list

discoveryengine.evaluations.get

discoveryengine.evaluations.list

discoveryengine.groundingConfigs.check

discoveryengine.identityMappingStores.get

discoveryengine.identityMappingStores.list

discoveryengine.identityMappingStores.listIdentityMappings

discoveryengine.models.get

discoveryengine.models.list

discoveryengine.operations.*

  • discoveryengine.operations.get
  • discoveryengine.operations.list

discoveryengine.projects.get

discoveryengine.rankingConfigs.rank

discoveryengine.sampleQueries.get

discoveryengine.sampleQueries.list

discoveryengine.sampleQuerySets.get

discoveryengine.sampleQuerySets.list

discoveryengine.schemas.get

discoveryengine.schemas.list

discoveryengine.schemas.preview

discoveryengine.schemas.validate

discoveryengine.servingConfigs.answer

discoveryengine.servingConfigs.get

discoveryengine.servingConfigs.list

discoveryengine.servingConfigs.recommend

discoveryengine.servingConfigs.search

discoveryengine.sessions.downloadFile

discoveryengine.sessions.get

discoveryengine.sessions.list

discoveryengine.sessions.listSessionFileMetadata

discoveryengine.sessions.recommendQuestions

discoveryengine.siteSearchEngines.get

discoveryengine.targetSites.get

discoveryengine.targetSites.list

discoveryengine.userEvents.fetchStats

discoveryengine.userStores.get

discoveryengine.widgetConfigs.get

resourcemanager.projects.get

resourcemanager.projects.list

(roles/discoveryengine.editor)

Grants read and write access to all discovery engine resources.

discoveryengine.aclConfigs.get

discoveryengine.agents.*

  • discoveryengine.agents.create
  • discoveryengine.agents.delete
  • discoveryengine.agents.get
  • discoveryengine.agents.list
  • discoveryengine.agents.update

discoveryengine.alertPolicies.get

discoveryengine.analytics.*

  • discoveryengine.analytics.acquireDashboardSession
  • discoveryengine.analytics.refreshDashboardSessionTokens

discoveryengine.answers.get

discoveryengine.assistAnswers.get

discoveryengine.assistants.assist

discoveryengine.assistants.get

discoveryengine.assistants.list

discoveryengine.branches.*

  • discoveryengine.branches.get
  • discoveryengine.branches.list

discoveryengine.cmekConfigs.get

discoveryengine.cmekConfigs.list

discoveryengine.collections.get

discoveryengine.collections.list

discoveryengine.completionConfigs.completeQuery

discoveryengine.completionConfigs.get

discoveryengine.connectorRuns.list

discoveryengine.controls.get

discoveryengine.controls.list

discoveryengine.conversations.*

  • discoveryengine.conversations.converse
  • discoveryengine.conversations.create
  • discoveryengine.conversations.delete
  • discoveryengine.conversations.get
  • discoveryengine.conversations.list
  • discoveryengine.conversations.update

discoveryengine.dataConnectors.acquireAccessToken

discoveryengine.dataConnectors.acquireAndStoreRefreshToken

discoveryengine.dataConnectors.buildActionInvocation

discoveryengine.dataConnectors.checkRefreshToken

discoveryengine.dataConnectors.executeAction

discoveryengine.dataConnectors.get

discoveryengine.dataConnectors.queryAvailableActions

discoveryengine.dataStores.completeQuery

discoveryengine.dataStores.get

discoveryengine.dataStores.list

discoveryengine.dataStores.listCustomModels

discoveryengine.dataStores.trainCustomModel

discoveryengine.documentProcessingConfigs.get

discoveryengine.documents.batchGetDocumentsMetadata

discoveryengine.documents.create

discoveryengine.documents.delete

discoveryengine.documents.get

discoveryengine.documents.import

discoveryengine.documents.list

discoveryengine.documents.update

discoveryengine.engines.createEngineUserData

discoveryengine.engines.get

discoveryengine.engines.list

discoveryengine.engines.pause

discoveryengine.engines.resume

discoveryengine.engines.tune

discoveryengine.evaluations.get

discoveryengine.evaluations.list

discoveryengine.groundingConfigs.check

discoveryengine.identityMappingStores.*

  • discoveryengine.identityMappingStores.create
  • discoveryengine.identityMappingStores.delete
  • discoveryengine.identityMappingStores.get
  • discoveryengine.identityMappingStores.importIdentityMappings
  • discoveryengine.identityMappingStores.list
  • discoveryengine.identityMappingStores.listIdentityMappings
  • discoveryengine.identityMappingStores.purgeIdentityMappings

discoveryengine.licenseConfigs.get

discoveryengine.licenseConfigs.list

discoveryengine.models.*

  • discoveryengine.models.create
  • discoveryengine.models.delete
  • discoveryengine.models.get
  • discoveryengine.models.list
  • discoveryengine.models.pause
  • discoveryengine.models.resume
  • discoveryengine.models.tune
  • discoveryengine.models.update

discoveryengine.operations.*

  • discoveryengine.operations.get
  • discoveryengine.operations.list

discoveryengine.projects.get

discoveryengine.rankingConfigs.rank

discoveryengine.sampleQueries.*

  • discoveryengine.sampleQueries.create
  • discoveryengine.sampleQueries.delete
  • discoveryengine.sampleQueries.get
  • discoveryengine.sampleQueries.import
  • discoveryengine.sampleQueries.list
  • discoveryengine.sampleQueries.update

discoveryengine.sampleQuerySets.*

  • discoveryengine.sampleQuerySets.create
  • discoveryengine.sampleQuerySets.delete
  • discoveryengine.sampleQuerySets.get
  • discoveryengine.sampleQuerySets.list
  • discoveryengine.sampleQuerySets.update

discoveryengine.schemas.get

discoveryengine.schemas.list

discoveryengine.schemas.preview

discoveryengine.schemas.validate

discoveryengine.servingConfigs.answer

discoveryengine.servingConfigs.get

discoveryengine.servingConfigs.list

discoveryengine.servingConfigs.recommend

discoveryengine.servingConfigs.search

discoveryengine.sessions.*

  • discoveryengine.sessions.addContextFile
  • discoveryengine.sessions.create
  • discoveryengine.sessions.delete
  • discoveryengine.sessions.downloadFile
  • discoveryengine.sessions.get
  • discoveryengine.sessions.list
  • discoveryengine.sessions.listSessionFileMetadata
  • discoveryengine.sessions.recommendQuestions
  • discoveryengine.sessions.removeContextFile
  • discoveryengine.sessions.search
  • discoveryengine.sessions.selectContextFiles
  • discoveryengine.sessions.update
  • discoveryengine.sessions.uploadFile

discoveryengine.siteSearchEngines.get

discoveryengine.targetSites.get

discoveryengine.targetSites.list

discoveryengine.userEvents.create

discoveryengine.userEvents.fetchStats

discoveryengine.userEvents.import

discoveryengine.userStores.get

discoveryengine.widgetConfigs.*

  • discoveryengine.widgetConfigs.get
  • discoveryengine.widgetConfigs.update

resourcemanager.projects.get

resourcemanager.projects.list

(roles/discoveryengine.notebookEditor)

Grants read and write access to a Cloud NotebookLM Notebook.

discoveryengine.audioOverviews.*

  • discoveryengine.audioOverviews.create
  • discoveryengine.audioOverviews.delete
  • discoveryengine.audioOverviews.get
  • discoveryengine.audioOverviews.getIceConfig
  • discoveryengine.audioOverviews.sendSdpOffer

discoveryengine.notebooks.generateGuide

discoveryengine.notebooks.get

discoveryengine.notebooks.getIamPolicy

discoveryengine.notebooks.interactSources

discoveryengine.notebooks.list

discoveryengine.notebooks.removeSelf

discoveryengine.notebooks.update

discoveryengine.notes.*

  • discoveryengine.notes.create
  • discoveryengine.notes.delete
  • discoveryengine.notes.get
  • discoveryengine.notes.update

discoveryengine.sources.*

  • discoveryengine.sources.checkFreshness
  • discoveryengine.sources.create
  • discoveryengine.sources.delete
  • discoveryengine.sources.generateDocumentGuide
  • discoveryengine.sources.get
  • discoveryengine.sources.refresh
  • discoveryengine.sources.update

(roles/discoveryengine.notebookLmOwner)

Grants full access to Cloud NotebookLM resources.

discoveryengine.accounts.create

discoveryengine.aclConfigs.*

  • discoveryengine.aclConfigs.get
  • discoveryengine.aclConfigs.update

discoveryengine.audioOverviews.*

  • discoveryengine.audioOverviews.create
  • discoveryengine.audioOverviews.delete
  • discoveryengine.audioOverviews.get
  • discoveryengine.audioOverviews.getIceConfig
  • discoveryengine.audioOverviews.sendSdpOffer

discoveryengine.notebooks.*

  • discoveryengine.notebooks.create
  • discoveryengine.notebooks.generateGuide
  • discoveryengine.notebooks.get
  • discoveryengine.notebooks.getAnalytics
  • discoveryengine.notebooks.getIamPolicy
  • discoveryengine.notebooks.interactSources
  • discoveryengine.notebooks.list
  • discoveryengine.notebooks.removeSelf
  • discoveryengine.notebooks.setIamPolicy
  • discoveryengine.notebooks.update

discoveryengine.notes.*

  • discoveryengine.notes.create
  • discoveryengine.notes.delete
  • discoveryengine.notes.get
  • discoveryengine.notes.update

discoveryengine.sources.*

  • discoveryengine.sources.checkFreshness
  • discoveryengine.sources.create
  • discoveryengine.sources.delete
  • discoveryengine.sources.generateDocumentGuide
  • discoveryengine.sources.get
  • discoveryengine.sources.refresh
  • discoveryengine.sources.update

resourcemanager.projects.get

resourcemanager.projects.list

(roles/discoveryengine.notebookLmUser)

Grants user-level access to Cloud NotebookLM resources.

discoveryengine.accounts.create

discoveryengine.notebooks.create

discoveryengine.notebooks.list

resourcemanager.projects.get

resourcemanager.projects.list

(roles/discoveryengine.notebookOwner)

Grants full access to a Cloud NotebookLM Notebook.

discoveryengine.audioOverviews.*

  • discoveryengine.audioOverviews.create
  • discoveryengine.audioOverviews.delete
  • discoveryengine.audioOverviews.get
  • discoveryengine.audioOverviews.getIceConfig
  • discoveryengine.audioOverviews.sendSdpOffer

discoveryengine.notebooks.generateGuide

discoveryengine.notebooks.get

discoveryengine.notebooks.getAnalytics

discoveryengine.notebooks.getIamPolicy

discoveryengine.notebooks.interactSources

discoveryengine.notebooks.list

discoveryengine.notebooks.removeSelf

discoveryengine.notebooks.setIamPolicy

discoveryengine.notebooks.update

discoveryengine.notes.*

  • discoveryengine.notes.create
  • discoveryengine.notes.delete
  • discoveryengine.notes.get
  • discoveryengine.notes.update

discoveryengine.sources.*

  • discoveryengine.sources.checkFreshness
  • discoveryengine.sources.create
  • discoveryengine.sources.delete
  • discoveryengine.sources.generateDocumentGuide
  • discoveryengine.sources.get
  • discoveryengine.sources.refresh
  • discoveryengine.sources.update

(roles/discoveryengine.notebookViewer)

Grants read-only access to a Cloud NotebookLM Notebook.

discoveryengine.audioOverviews.get

discoveryengine.audioOverviews.getIceConfig

discoveryengine.audioOverviews.sendSdpOffer

discoveryengine.notebooks.generateGuide

discoveryengine.notebooks.get

discoveryengine.notebooks.getIamPolicy

discoveryengine.notebooks.interactSources

discoveryengine.notebooks.list

discoveryengine.notebooks.removeSelf

discoveryengine.notes.get

discoveryengine.sources.checkFreshness

discoveryengine.sources.generateDocumentGuide

discoveryengine.sources.get

(roles/discoveryengine.podcastApiUser)

Grants user-level access to the Podcast resources.

discoveryengine.accounts.create

discoveryengine.agents.*

  • discoveryengine.agents.create
  • discoveryengine.agents.delete
  • discoveryengine.agents.get
  • discoveryengine.agents.list
  • discoveryengine.agents.update

discoveryengine.answers.get

discoveryengine.assistAnswers.get

discoveryengine.assistants.assist

discoveryengine.completionConfigs.completeQuery

discoveryengine.dataConnectors.acquireAccessToken

discoveryengine.dataConnectors.acquireAndStoreRefreshToken

discoveryengine.dataConnectors.buildActionInvocation

discoveryengine.dataConnectors.checkRefreshToken

discoveryengine.dataConnectors.executeAction

discoveryengine.dataConnectors.queryAvailableActions

discoveryengine.engines.createEngineUserData

discoveryengine.engines.get

discoveryengine.notebooks.create

discoveryengine.notebooks.list

discoveryengine.operations.get

discoveryengine.podcasts.create

discoveryengine.servingConfigs.answer

discoveryengine.servingConfigs.recommend

discoveryengine.servingConfigs.search

discoveryengine.sessions.*

  • discoveryengine.sessions.addContextFile
  • discoveryengine.sessions.create
  • discoveryengine.sessions.delete
  • discoveryengine.sessions.downloadFile
  • discoveryengine.sessions.get
  • discoveryengine.sessions.list
  • discoveryengine.sessions.listSessionFileMetadata
  • discoveryengine.sessions.recommendQuestions
  • discoveryengine.sessions.removeContextFile
  • discoveryengine.sessions.search
  • discoveryengine.sessions.selectContextFiles
  • discoveryengine.sessions.update
  • discoveryengine.sessions.uploadFile

discoveryengine.userEvents.create

discoveryengine.widgetConfigs.get

resourcemanager.projects.get

resourcemanager.projects.list

(roles/discoveryengine.serviceAgent)

Discovery Engine service uploads documents and user events from Cloud Storage and BigQuery, reports results to the customer Cloud Storage bucket, writes logs to customer projects using Cloud Logging, and writes and reads metrics for customer using Cloud Monitoring.

aiplatform.executions.create

aiplatform.executions.delete

aiplatform.executions.update

aiplatform.extensions.*

  • aiplatform.extensions.delete
  • aiplatform.extensions.execute
  • aiplatform.extensions.get
  • aiplatform.extensions.import
  • aiplatform.extensions.list
  • aiplatform.extensions.update

aiplatform.operations.list

aiplatform.reasoningEngines.*

  • aiplatform.reasoningEngines.create
  • aiplatform.reasoningEngines.delete
  • aiplatform.reasoningEngines.get
  • aiplatform.reasoningEngines.list
  • aiplatform.reasoningEngines.query
  • aiplatform.reasoningEngines.update

alloydb.clusters.export

alloydb.databases.list

alloydb.instances.get

alloydb.operations.get

bigquery.datasets.create

bigquery.datasets.get

bigquery.jobs.create

bigquery.jobs.get

bigquery.jobs.list

bigquery.jobs.update

bigquery.tables.create

bigquery.tables.export

bigquery.tables.get

bigquery.tables.getData

bigquery.tables.list

bigquery.tables.update

bigquery.tables.updateData

bigtable.tables.readRows

bigtable.tables.sampleRowKeys

cloudsql.databases.get

cloudsql.instances.export

cloudsql.instances.get

datastore.databases.export

datastore.databases.get

datastore.databases.getMetadata

datastore.operations.get

dialogflow.sessions.detectIntent

discoveryengine.completionConfigs.completeQuery

discoveryengine.conversations.converse

discoveryengine.conversations.create

discoveryengine.dataStores.completeQuery

discoveryengine.servingConfigs.answer

discoveryengine.servingConfigs.search

discoveryengine.userEvents.create

integrations.apigeeExecutions.list

integrations.apigeeIntegrationVers.get

integrations.apigeeIntegrationVers.list

integrations.integrationVersions.get

integrations.integrationVersions.invoke

integrations.integrationVersions.list

integrations.integrations.get

integrations.integrations.invoke

integrations.integrations.list

integrations.testCases.get

integrations.testCases.invoke

integrations.testCases.list

logging.logEntries.create

modelarmor.templates.useToSanitizeModelResponse

modelarmor.templates.useToSanitizeUserPrompt

monitoring.metricDescriptors.create

monitoring.metricDescriptors.get

monitoring.metricDescriptors.list

monitoring.monitoredResourceDescriptors.*

  • monitoring.monitoredResourceDescriptors.get
  • monitoring.monitoredResourceDescriptors.list

monitoring.timeSeries.*

  • monitoring.timeSeries.create
  • monitoring.timeSeries.list

resourcemanager.projects.get

resourcemanager.projects.list

spanner.databases.beginReadOnlyTransaction

spanner.databases.partitionQuery

spanner.databases.select

spanner.databases.useDataBoost

spanner.sessions.create

storage.buckets.create

storage.buckets.get

storage.buckets.getIamPolicy

storage.buckets.setIamPolicy

storage.managedFolders.*

  • storage.managedFolders.create
  • storage.managedFolders.delete
  • storage.managedFolders.get
  • storage.managedFolders.getIamPolicy
  • storage.managedFolders.list
  • storage.managedFolders.setIamPolicy

storage.objects.create

storage.objects.delete

storage.objects.get

storage.objects.list

storage.objects.update

(roles/discoveryengine.user)

Grants user-level access to Discovery Engine resources.

discoveryengine.accounts.create

discoveryengine.agents.*

  • discoveryengine.agents.create
  • discoveryengine.agents.delete
  • discoveryengine.agents.get
  • discoveryengine.agents.list
  • discoveryengine.agents.update

discoveryengine.answers.get

discoveryengine.assistAnswers.get

discoveryengine.assistants.assist

discoveryengine.completionConfigs.completeQuery

discoveryengine.dataConnectors.acquireAccessToken

discoveryengine.dataConnectors.acquireAndStoreRefreshToken

discoveryengine.dataConnectors.buildActionInvocation

discoveryengine.dataConnectors.checkRefreshToken

discoveryengine.dataConnectors.executeAction

discoveryengine.dataConnectors.queryAvailableActions

discoveryengine.engines.createEngineUserData

discoveryengine.engines.get

discoveryengine.notebooks.create

discoveryengine.notebooks.list

discoveryengine.servingConfigs.answer

discoveryengine.servingConfigs.recommend

discoveryengine.servingConfigs.search

discoveryengine.sessions.*

  • discoveryengine.sessions.addContextFile
  • discoveryengine.sessions.create
  • discoveryengine.sessions.delete
  • discoveryengine.sessions.downloadFile
  • discoveryengine.sessions.get
  • discoveryengine.sessions.list
  • discoveryengine.sessions.listSessionFileMetadata
  • discoveryengine.sessions.recommendQuestions
  • discoveryengine.sessions.removeContextFile
  • discoveryengine.sessions.search
  • discoveryengine.sessions.selectContextFiles
  • discoveryengine.sessions.update
  • discoveryengine.sessions.uploadFile

discoveryengine.userEvents.create

discoveryengine.widgetConfigs.get

resourcemanager.projects.get

resourcemanager.projects.list

(roles/discoveryengine.viewer)

Grants read access to all discovery engine resources.

discoveryengine.aclConfigs.get

discoveryengine.agents.get

discoveryengine.agents.list

discoveryengine.alertPolicies.get

discoveryengine.analytics.*

  • discoveryengine.analytics.acquireDashboardSession
  • discoveryengine.analytics.refreshDashboardSessionTokens

discoveryengine.answers.get

discoveryengine.assistAnswers.get

discoveryengine.assistants.get

discoveryengine.assistants.list

discoveryengine.branches.*

  • discoveryengine.branches.get
  • discoveryengine.branches.list

discoveryengine.cmekConfigs.get

discoveryengine.cmekConfigs.list

discoveryengine.collections.get

discoveryengine.collections.list

discoveryengine.completionConfigs.completeQuery

discoveryengine.completionConfigs.get

discoveryengine.connectorRuns.list

discoveryengine.controls.get

discoveryengine.controls.list

discoveryengine.conversations.converse

discoveryengine.conversations.get

discoveryengine.conversations.list

discoveryengine.dataConnectors.buildActionInvocation

discoveryengine.dataConnectors.checkRefreshToken

discoveryengine.dataConnectors.get

discoveryengine.dataConnectors.queryAvailableActions

discoveryengine.dataStores.completeQuery

discoveryengine.dataStores.get

discoveryengine.dataStores.list

discoveryengine.dataStores.listCustomModels

discoveryengine.documentProcessingConfigs.get

discoveryengine.documents.batchGetDocumentsMetadata

discoveryengine.documents.get

discoveryengine.documents.list

discoveryengine.engines.get

discoveryengine.engines.list

discoveryengine.evaluations.get

discoveryengine.evaluations.list

discoveryengine.groundingConfigs.check

discoveryengine.identityMappingStores.get

discoveryengine.identityMappingStores.list

discoveryengine.identityMappingStores.listIdentityMappings

discoveryengine.models.get

discoveryengine.models.list

discoveryengine.operations.*

  • discoveryengine.operations.get
  • discoveryengine.operations.list

discoveryengine.projects.get

discoveryengine.rankingConfigs.rank

discoveryengine.sampleQueries.get

discoveryengine.sampleQueries.list

discoveryengine.sampleQuerySets.get

discoveryengine.sampleQuerySets.list

discoveryengine.schemas.get

discoveryengine.schemas.list

discoveryengine.schemas.preview

discoveryengine.schemas.validate

discoveryengine.servingConfigs.answer

discoveryengine.servingConfigs.get

discoveryengine.servingConfigs.list

discoveryengine.servingConfigs.recommend

discoveryengine.servingConfigs.search

discoveryengine.sessions.downloadFile

discoveryengine.sessions.get

discoveryengine.sessions.list

discoveryengine.sessions.listSessionFileMetadata

discoveryengine.sessions.recommendQuestions

discoveryengine.siteSearchEngines.get

discoveryengine.targetSites.get

discoveryengine.targetSites.list

discoveryengine.userEvents.fetchStats

discoveryengine.userStores.get

discoveryengine.widgetConfigs.get

resourcemanager.projects.get

resourcemanager.projects.list

Discovery Engine permissions

Permission Included in roles

Owner (roles/owner)

Editor (roles/editor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM User (roles/discoveryengine.notebookLmUser)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agent Admin (roles/discoveryengine.agentAdmin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agent Admin (roles/discoveryengine.agentAdmin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agent Admin (roles/discoveryengine.agentAdmin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agent Admin (roles/discoveryengine.agentAdmin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agent Admin (roles/discoveryengine.agentAdmin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Owner (roles/owner)

Editor (roles/editor)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Owner (roles/owner)

Editor (roles/editor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM User (roles/discoveryengine.notebookLmUser)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Agentspace User (roles/discoveryengine.agentspaceUser)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM User (roles/discoveryengine.notebookLmUser)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

Owner (roles/owner)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Security Admin (roles/iam.securityAdmin)

Owner (roles/owner)

Editor (roles/editor)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Owner (roles/owner)

Editor (roles/editor)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Owner (roles/owner)

Editor (roles/editor)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Owner (roles/owner)

Editor (roles/editor)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Owner (roles/owner)

Editor (roles/editor)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Agentspace User (roles/discoveryengine.agentspaceUser)

Agentspace Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agentspace Admin (roles/discoveryengine.agentspaceAdmin)

Agentspace Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)