roles/discoveryengine.editor
Grants read and write access to all discovery engine resources.
Discovery Engine Editor
['discoveryengine.aclConfigs.get', 'discoveryengine.analytics.acquireDashboardSession', 'discoveryengine.analytics.refreshDashboardSessionTokens', 'discoveryengine.answers.get', 'discoveryengine.branches.get', 'discoveryengine.branches.list', 'discoveryengine.cmekConfigs.get', 'discoveryengine.cmekConfigs.list', 'discoveryengine.collections.get', 'discoveryengine.collections.list', 'discoveryengine.completionConfigs.completeQuery', 'discoveryengine.completionConfigs.get', 'discoveryengine.controls.get', 'discoveryengine.controls.list', 'discoveryengine.conversations.converse', 'discoveryengine.conversations.create', 'discoveryengine.conversations.delete', 'discoveryengine.conversations.get', 'discoveryengine.conversations.list', 'discoveryengine.conversations.update', 'discoveryengine.dataStores.completeQuery', 'discoveryengine.dataStores.get', 'discoveryengine.dataStores.list', 'discoveryengine.documentProcessingConfigs.get', 'discoveryengine.documents.batchGetDocumentsMetadata', 'discoveryengine.documents.create', 'discoveryengine.documents.delete', 'discoveryengine.documents.get', 'discoveryengine.documents.import', 'discoveryengine.documents.list', 'discoveryengine.documents.update', 'discoveryengine.engines.get', 'discoveryengine.engines.list', 'discoveryengine.engines.pause', 'discoveryengine.engines.resume', 'discoveryengine.engines.tune', 'discoveryengine.evaluations.get', 'discoveryengine.evaluations.list', 'discoveryengine.groundingConfigs.check', 'discoveryengine.models.create', 'discoveryengine.models.delete', 'discoveryengine.models.get', 'discoveryengine.models.list', 'discoveryengine.models.pause', 'discoveryengine.models.resume', 'discoveryengine.models.tune', 'discoveryengine.models.update', 'discoveryengine.operations.get', 'discoveryengine.operations.list', 'discoveryengine.projects.get', 'discoveryengine.rankingConfigs.rank', 'discoveryengine.sampleQueries.create', 'discoveryengine.sampleQueries.delete', 'discoveryengine.sampleQueries.get', 'discoveryengine.sampleQueries.import', 'discoveryengine.sampleQueries.list', 'discoveryengine.sampleQueries.update', 'discoveryengine.sampleQuerySets.create', 'discoveryengine.sampleQuerySets.delete', 'discoveryengine.sampleQuerySets.get', 'discoveryengine.sampleQuerySets.list', 'discoveryengine.sampleQuerySets.update', 'discoveryengine.schemas.get', 'discoveryengine.schemas.list', 'discoveryengine.schemas.preview', 'discoveryengine.schemas.validate', 'discoveryengine.servingConfigs.answer', 'discoveryengine.servingConfigs.get', 'discoveryengine.servingConfigs.list', 'discoveryengine.servingConfigs.recommend', 'discoveryengine.servingConfigs.search', 'discoveryengine.sessions.create', 'discoveryengine.sessions.delete', 'discoveryengine.sessions.get', 'discoveryengine.sessions.list', 'discoveryengine.sessions.update', 'discoveryengine.siteSearchEngines.get', 'discoveryengine.targetSites.get', 'discoveryengine.targetSites.list', 'discoveryengine.userEvents.create', 'discoveryengine.userEvents.fetchStats', 'discoveryengine.userEvents.import', 'discoveryengine.widgetConfigs.get', 'discoveryengine.widgetConfigs.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/discoveryengine.viewer
Grants read access to all discovery engine resources.
Discovery Engine Viewer
['discoveryengine.aclConfigs.get', 'discoveryengine.analytics.acquireDashboardSession', 'discoveryengine.analytics.refreshDashboardSessionTokens', 'discoveryengine.answers.get', 'discoveryengine.branches.get', 'discoveryengine.branches.list', 'discoveryengine.cmekConfigs.get', 'discoveryengine.cmekConfigs.list', 'discoveryengine.collections.get', 'discoveryengine.collections.list', 'discoveryengine.completionConfigs.completeQuery', 'discoveryengine.completionConfigs.get', 'discoveryengine.controls.get', 'discoveryengine.controls.list', 'discoveryengine.conversations.converse', 'discoveryengine.conversations.get', 'discoveryengine.conversations.list', 'discoveryengine.dataStores.completeQuery', 'discoveryengine.dataStores.get', 'discoveryengine.dataStores.list', 'discoveryengine.documentProcessingConfigs.get', 'discoveryengine.documents.batchGetDocumentsMetadata', 'discoveryengine.documents.get', 'discoveryengine.documents.list', 'discoveryengine.engines.get', 'discoveryengine.engines.list', 'discoveryengine.evaluations.get', 'discoveryengine.evaluations.list', 'discoveryengine.groundingConfigs.check', 'discoveryengine.models.get', 'discoveryengine.models.list', 'discoveryengine.operations.get', 'discoveryengine.operations.list', 'discoveryengine.projects.get', 'discoveryengine.rankingConfigs.rank', 'discoveryengine.sampleQueries.get', 'discoveryengine.sampleQueries.list', 'discoveryengine.sampleQuerySets.get', 'discoveryengine.sampleQuerySets.list', 'discoveryengine.schemas.get', 'discoveryengine.schemas.list', 'discoveryengine.schemas.preview', 'discoveryengine.schemas.validate', 'discoveryengine.servingConfigs.answer', 'discoveryengine.servingConfigs.get', 'discoveryengine.servingConfigs.list', 'discoveryengine.servingConfigs.recommend', 'discoveryengine.servingConfigs.search', 'discoveryengine.sessions.get', 'discoveryengine.sessions.list', 'discoveryengine.siteSearchEngines.get', 'discoveryengine.targetSites.get', 'discoveryengine.targetSites.list', 'discoveryengine.userEvents.fetchStats', 'discoveryengine.widgetConfigs.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/discoveryengine.admin
Grants full access to all discoveryengine resources.
Discovery Engine Admin
['discoveryengine.aclConfigs.get', 'discoveryengine.aclConfigs.update', 'discoveryengine.analytics.acquireDashboardSession', 'discoveryengine.analytics.refreshDashboardSessionTokens', 'discoveryengine.answers.get', 'discoveryengine.branches.get', 'discoveryengine.branches.list', 'discoveryengine.cmekConfigs.get', 'discoveryengine.cmekConfigs.list', 'discoveryengine.cmekConfigs.update', 'discoveryengine.collections.delete', 'discoveryengine.collections.get', 'discoveryengine.collections.list', 'discoveryengine.completionConfigs.completeQuery', 'discoveryengine.completionConfigs.get', 'discoveryengine.completionConfigs.update', 'discoveryengine.controls.create', 'discoveryengine.controls.delete', 'discoveryengine.controls.get', 'discoveryengine.controls.list', 'discoveryengine.controls.update', 'discoveryengine.conversations.converse', 'discoveryengine.conversations.create', 'discoveryengine.conversations.delete', 'discoveryengine.conversations.get', 'discoveryengine.conversations.list', 'discoveryengine.conversations.update', 'discoveryengine.dataStores.completeQuery', 'discoveryengine.dataStores.create', 'discoveryengine.dataStores.delete', 'discoveryengine.dataStores.enrollSolutions', 'discoveryengine.dataStores.get', 'discoveryengine.dataStores.list', 'discoveryengine.dataStores.trainCustomModel', 'discoveryengine.dataStores.update', 'discoveryengine.documentProcessingConfigs.get', 'discoveryengine.documentProcessingConfigs.update', 'discoveryengine.documents.batchGetDocumentsMetadata', 'discoveryengine.documents.create', 'discoveryengine.documents.delete', 'discoveryengine.documents.get', 'discoveryengine.documents.import', 'discoveryengine.documents.list', 'discoveryengine.documents.purge', 'discoveryengine.documents.update', 'discoveryengine.engines.create', 'discoveryengine.engines.delete', 'discoveryengine.engines.get', 'discoveryengine.engines.list', 'discoveryengine.engines.pause', 'discoveryengine.engines.resume', 'discoveryengine.engines.tune', 'discoveryengine.engines.update', 'discoveryengine.evaluations.create', 'discoveryengine.evaluations.get', 'discoveryengine.evaluations.list', 'discoveryengine.groundingConfigs.check', 'discoveryengine.locations.estimateDataSize', 'discoveryengine.models.create', 'discoveryengine.models.delete', 'discoveryengine.models.get', 'discoveryengine.models.list', 'discoveryengine.models.pause', 'discoveryengine.models.resume', 'discoveryengine.models.tune', 'discoveryengine.models.update', 'discoveryengine.operations.get', 'discoveryengine.operations.list', 'discoveryengine.projects.get', 'discoveryengine.projects.provision', 'discoveryengine.projects.reportConsentChange', 'discoveryengine.rankingConfigs.rank', 'discoveryengine.sampleQueries.create', 'discoveryengine.sampleQueries.delete', 'discoveryengine.sampleQueries.get', 'discoveryengine.sampleQueries.import', 'discoveryengine.sampleQueries.list', 'discoveryengine.sampleQueries.update', 'discoveryengine.sampleQuerySets.create', 'discoveryengine.sampleQuerySets.delete', 'discoveryengine.sampleQuerySets.get', 'discoveryengine.sampleQuerySets.list', 'discoveryengine.sampleQuerySets.update', 'discoveryengine.schemas.create', 'discoveryengine.schemas.delete', 'discoveryengine.schemas.get', 'discoveryengine.schemas.list', 'discoveryengine.schemas.preview', 'discoveryengine.schemas.update', 'discoveryengine.schemas.validate', 'discoveryengine.servingConfigs.answer', 'discoveryengine.servingConfigs.create', 'discoveryengine.servingConfigs.delete', 'discoveryengine.servingConfigs.get', 'discoveryengine.servingConfigs.list', 'discoveryengine.servingConfigs.recommend', 'discoveryengine.servingConfigs.search', 'discoveryengine.servingConfigs.update', 'discoveryengine.sessions.create', 'discoveryengine.sessions.delete', 'discoveryengine.sessions.get', 'discoveryengine.sessions.list', 'discoveryengine.sessions.update', 'discoveryengine.siteSearchEngines.batchVerifyTargetSites', 'discoveryengine.siteSearchEngines.disableAdvancedSiteSearch', 'discoveryengine.siteSearchEngines.enableAdvancedSiteSearch', 'discoveryengine.siteSearchEngines.fetchDomainVerificationStatus', 'discoveryengine.siteSearchEngines.get', 'discoveryengine.siteSearchEngines.recrawlUris', 'discoveryengine.suggestionDenyListEntries.import', 'discoveryengine.suggestionDenyListEntries.purge', 'discoveryengine.targetSites.batchCreate', 'discoveryengine.targetSites.create', 'discoveryengine.targetSites.delete', 'discoveryengine.targetSites.get', 'discoveryengine.targetSites.list', 'discoveryengine.targetSites.update', 'discoveryengine.userEvents.create', 'discoveryengine.userEvents.fetchStats', 'discoveryengine.userEvents.import', 'discoveryengine.userEvents.purge', 'discoveryengine.widgetConfigs.get', 'discoveryengine.widgetConfigs.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/discoveryengine.serviceAgent
Discovery Engine service uploads documents and user events from Cloud Storage and BigQuery, reports results to the customer Cloud Storage bucket, writes logs to customer projects using Cloud Logging, and writes and reads metrics for customer using Cloud Monitoring.
Discovery Engine Service Agent
['alloydb.clusters.export', 'alloydb.databases.list', 'alloydb.instances.get', 'alloydb.operations.get', 'bigquery.datasets.create', 'bigquery.datasets.get', 'bigquery.jobs.create', 'bigquery.jobs.get', 'bigquery.jobs.list', 'bigquery.jobs.update', 'bigquery.tables.create', 'bigquery.tables.export', 'bigquery.tables.get', 'bigquery.tables.getData', 'bigquery.tables.list', 'bigquery.tables.update', 'bigquery.tables.updateData', 'bigtable.tables.readRows', 'bigtable.tables.sampleRowKeys', 'cloudsql.databases.get', 'cloudsql.instances.export', 'cloudsql.instances.get', 'datastore.databases.export', 'datastore.databases.get', 'datastore.databases.getMetadata', 'datastore.operations.get', 'discoveryengine.completionConfigs.completeQuery', 'discoveryengine.conversations.converse', 'discoveryengine.conversations.create', 'discoveryengine.dataStores.completeQuery', 'discoveryengine.servingConfigs.answer', 'discoveryengine.servingConfigs.search', 'discoveryengine.userEvents.create', 'logging.logEntries.create', 'monitoring.metricDescriptors.create', 'monitoring.metricDescriptors.get', 'monitoring.metricDescriptors.list', 'monitoring.monitoredResourceDescriptors.get', 'monitoring.monitoredResourceDescriptors.list', 'monitoring.timeSeries.create', 'monitoring.timeSeries.list', 'spanner.databases.beginReadOnlyTransaction', 'spanner.databases.partitionQuery', 'spanner.databases.select', 'spanner.databases.useDataBoost', 'spanner.sessions.create', 'storage.buckets.create', 'storage.buckets.get', 'storage.buckets.getIamPolicy', 'storage.buckets.setIamPolicy', 'storage.managedFolders.create', 'storage.managedFolders.delete', 'storage.managedFolders.get', 'storage.managedFolders.getIamPolicy', 'storage.managedFolders.list', 'storage.managedFolders.setIamPolicy', 'storage.objects.create', 'storage.objects.delete', 'storage.objects.get', 'storage.objects.list', 'storage.objects.update']
Copy Permissions
GA
roles/discoveryengine.user
Grants user-level access to Discovery Engine resources.
Discovery Engine User
['discoveryengine.answers.get', 'discoveryengine.servingConfigs.answer', 'discoveryengine.servingConfigs.search', 'discoveryengine.sessions.get']
Copy Permissions
BETA