[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-28 UTC."],[],[],null,["This page lists the IAM roles and permissions for SecLM. To\nsearch through all roles and permissions, see the [role and\npermission index](/iam/docs/roles-permissions).\n\nSecLM roles\n\n| Role | Permissions |\n|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| SecLM Service Agent (`roles/``seclm.serviceAgent`) Service agent used by SecLM to access resources used by SecLM Workbenches. | **Warning:** Do not grant service agent roles to any principals except [service agents](/iam/docs/service-agents). | `aiplatform.endpoints.predict` `aiplatform.locations.get` `aiplatform.ragCorpora.get` `aiplatform.ragCorpora.list` `aiplatform.ragCorpora.query` `discoveryengine.``dataStores.``completeQuery` `discoveryengine.dataStores.get` `discoveryengine.``dataStores.``list` `discoveryengine.``servingConfigs.``search` |\n\nSecLM permissions\n\nThere are no IAM permissions for this service."]]