roles/discoveryengine.notebookOwner
Grants full access to a Cloud NotebookLM Notebook.
Cloud NotebookLM Notebook Owner
['discoveryengine.audioOverviews.create', 'discoveryengine.audioOverviews.delete', 'discoveryengine.audioOverviews.get', 'discoveryengine.audioOverviews.getIceConfig', 'discoveryengine.audioOverviews.sendSdpOffer', 'discoveryengine.notebooks.generateGuide', 'discoveryengine.notebooks.get', 'discoveryengine.notebooks.getAnalytics', 'discoveryengine.notebooks.getIamPolicy', 'discoveryengine.notebooks.interactSources', 'discoveryengine.notebooks.list', 'discoveryengine.notebooks.removeSelf', 'discoveryengine.notebooks.setIamPolicy', 'discoveryengine.notebooks.update', 'discoveryengine.notes.create', 'discoveryengine.notes.delete', 'discoveryengine.notes.get', 'discoveryengine.notes.update', 'discoveryengine.sources.checkFreshness', 'discoveryengine.sources.create', 'discoveryengine.sources.delete', 'discoveryengine.sources.generateDocumentGuide', 'discoveryengine.sources.get', 'discoveryengine.sources.refresh', 'discoveryengine.sources.update']
Copy Permissions
BETA
roles/discoveryengine.editor
Grants read and write access to all discovery engine resources.
Discovery Engine Editor
['discoveryengine.aclConfigs.get', 'discoveryengine.agents.create', 'discoveryengine.agents.delete', 'discoveryengine.agents.get', 'discoveryengine.agents.list', 'discoveryengine.agents.update', 'discoveryengine.alertPolicies.get', 'discoveryengine.analytics.acquireDashboardSession', 'discoveryengine.analytics.refreshDashboardSessionTokens', 'discoveryengine.answers.get', 'discoveryengine.assistAnswers.get', 'discoveryengine.assistants.assist', 'discoveryengine.assistants.get', 'discoveryengine.assistants.list', 'discoveryengine.branches.get', 'discoveryengine.branches.list', 'discoveryengine.cmekConfigs.get', 'discoveryengine.cmekConfigs.list', 'discoveryengine.collections.get', 'discoveryengine.collections.list', 'discoveryengine.completionConfigs.completeQuery', 'discoveryengine.completionConfigs.get', 'discoveryengine.connectorRuns.list', 'discoveryengine.controls.get', 'discoveryengine.controls.list', 'discoveryengine.conversations.converse', 'discoveryengine.conversations.create', 'discoveryengine.conversations.delete', 'discoveryengine.conversations.get', 'discoveryengine.conversations.list', 'discoveryengine.conversations.update', 'discoveryengine.dataConnectors.acquireAccessToken', 'discoveryengine.dataConnectors.acquireAndStoreRefreshToken', 'discoveryengine.dataConnectors.buildActionInvocation', 'discoveryengine.dataConnectors.checkRefreshToken', 'discoveryengine.dataConnectors.executeAction', 'discoveryengine.dataConnectors.get', 'discoveryengine.dataConnectors.queryAvailableActions', 'discoveryengine.dataStores.completeQuery', 'discoveryengine.dataStores.get', 'discoveryengine.dataStores.list', 'discoveryengine.dataStores.listCustomModels', 'discoveryengine.dataStores.trainCustomModel', 'discoveryengine.documentProcessingConfigs.get', 'discoveryengine.documents.batchGetDocumentsMetadata', 'discoveryengine.documents.create', 'discoveryengine.documents.delete', 'discoveryengine.documents.get', 'discoveryengine.documents.import', 'discoveryengine.documents.list', 'discoveryengine.documents.update', 'discoveryengine.engines.createEngineUserData', 'discoveryengine.engines.get', 'discoveryengine.engines.list', 'discoveryengine.engines.pause', 'discoveryengine.engines.resume', 'discoveryengine.engines.tune', 'discoveryengine.evaluations.get', 'discoveryengine.evaluations.list', 'discoveryengine.groundingConfigs.check', 'discoveryengine.identityMappingStores.create', 'discoveryengine.identityMappingStores.delete', 'discoveryengine.identityMappingStores.get', 'discoveryengine.identityMappingStores.importIdentityMappings', 'discoveryengine.identityMappingStores.list', 'discoveryengine.identityMappingStores.listIdentityMappings', 'discoveryengine.identityMappingStores.purgeIdentityMappings', 'discoveryengine.licenseConfigs.get', 'discoveryengine.licenseConfigs.list', 'discoveryengine.models.create', 'discoveryengine.models.delete', 'discoveryengine.models.get', 'discoveryengine.models.list', 'discoveryengine.models.pause', 'discoveryengine.models.resume', 'discoveryengine.models.tune', 'discoveryengine.models.update', 'discoveryengine.operations.get', 'discoveryengine.operations.list', 'discoveryengine.projects.get', 'discoveryengine.rankingConfigs.rank', 'discoveryengine.sampleQueries.create', 'discoveryengine.sampleQueries.delete', 'discoveryengine.sampleQueries.get', 'discoveryengine.sampleQueries.import', 'discoveryengine.sampleQueries.list', 'discoveryengine.sampleQueries.update', 'discoveryengine.sampleQuerySets.create', 'discoveryengine.sampleQuerySets.delete', 'discoveryengine.sampleQuerySets.get', 'discoveryengine.sampleQuerySets.list', 'discoveryengine.sampleQuerySets.update', 'discoveryengine.schemas.get', 'discoveryengine.schemas.list', 'discoveryengine.schemas.preview', 'discoveryengine.schemas.validate', 'discoveryengine.servingConfigs.answer', 'discoveryengine.servingConfigs.get', 'discoveryengine.servingConfigs.list', 'discoveryengine.servingConfigs.recommend', 'discoveryengine.servingConfigs.search', 'discoveryengine.sessions.addContextFile', 'discoveryengine.sessions.create', 'discoveryengine.sessions.delete', 'discoveryengine.sessions.downloadFile', 'discoveryengine.sessions.get', 'discoveryengine.sessions.list', 'discoveryengine.sessions.listSessionFileMetadata', 'discoveryengine.sessions.recommendQuestions', 'discoveryengine.sessions.removeContextFile', 'discoveryengine.sessions.search', 'discoveryengine.sessions.selectContextFiles', 'discoveryengine.sessions.update', 'discoveryengine.sessions.uploadFile', 'discoveryengine.siteSearchEngines.get', 'discoveryengine.targetSites.get', 'discoveryengine.targetSites.list', 'discoveryengine.userEvents.create', 'discoveryengine.userEvents.fetchStats', 'discoveryengine.userEvents.import', 'discoveryengine.userStores.get', 'discoveryengine.widgetConfigs.get', 'discoveryengine.widgetConfigs.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/discoveryengine.notebookEditor
Grants read and write access to a Cloud NotebookLM Notebook.
Cloud NotebookLM Notebook Editor
['discoveryengine.audioOverviews.create', 'discoveryengine.audioOverviews.delete', 'discoveryengine.audioOverviews.get', 'discoveryengine.audioOverviews.getIceConfig', 'discoveryengine.audioOverviews.sendSdpOffer', 'discoveryengine.notebooks.generateGuide', 'discoveryengine.notebooks.get', 'discoveryengine.notebooks.getIamPolicy', 'discoveryengine.notebooks.interactSources', 'discoveryengine.notebooks.list', 'discoveryengine.notebooks.removeSelf', 'discoveryengine.notebooks.update', 'discoveryengine.notes.create', 'discoveryengine.notes.delete', 'discoveryengine.notes.get', 'discoveryengine.notes.update', 'discoveryengine.sources.checkFreshness', 'discoveryengine.sources.create', 'discoveryengine.sources.delete', 'discoveryengine.sources.generateDocumentGuide', 'discoveryengine.sources.get', 'discoveryengine.sources.refresh', 'discoveryengine.sources.update']
Copy Permissions
BETA
roles/discoveryengine.agentspaceAdmin
Grants admin-level access to Agentspace resources.
Agentspace Admin
['discoveryengine.aclConfigs.get', 'discoveryengine.aclConfigs.update', 'discoveryengine.agents.create', 'discoveryengine.agents.delete', 'discoveryengine.agents.get', 'discoveryengine.agents.list', 'discoveryengine.agents.update', 'discoveryengine.alertPolicies.create', 'discoveryengine.alertPolicies.get', 'discoveryengine.alertPolicies.update', 'discoveryengine.analytics.acquireDashboardSession', 'discoveryengine.analytics.refreshDashboardSessionTokens', 'discoveryengine.answers.get', 'discoveryengine.assistAnswers.get', 'discoveryengine.assistants.assist', 'discoveryengine.assistants.create', 'discoveryengine.assistants.delete', 'discoveryengine.assistants.get', 'discoveryengine.assistants.list', 'discoveryengine.assistants.update', 'discoveryengine.branches.get', 'discoveryengine.branches.list', 'discoveryengine.cmekConfigs.get', 'discoveryengine.cmekConfigs.list', 'discoveryengine.cmekConfigs.update', 'discoveryengine.collections.delete', 'discoveryengine.collections.get', 'discoveryengine.collections.list', 'discoveryengine.completionConfigs.completeQuery', 'discoveryengine.completionConfigs.get', 'discoveryengine.completionConfigs.update', 'discoveryengine.connectorRuns.cancel', 'discoveryengine.connectorRuns.list', 'discoveryengine.controls.create', 'discoveryengine.controls.delete', 'discoveryengine.controls.get', 'discoveryengine.controls.list', 'discoveryengine.controls.update', 'discoveryengine.conversations.converse', 'discoveryengine.conversations.create', 'discoveryengine.conversations.delete', 'discoveryengine.conversations.get', 'discoveryengine.conversations.list', 'discoveryengine.conversations.update', 'discoveryengine.dataConnectors.acquireAccessToken', 'discoveryengine.dataConnectors.acquireAndStoreRefreshToken', 'discoveryengine.dataConnectors.buildActionInvocation', 'discoveryengine.dataConnectors.checkRefreshToken', 'discoveryengine.dataConnectors.executeAction', 'discoveryengine.dataConnectors.get', 'discoveryengine.dataConnectors.queryAvailableActions', 'discoveryengine.dataConnectors.startConnectorRun', 'discoveryengine.dataConnectors.update', 'discoveryengine.dataStores.completeQuery', 'discoveryengine.dataStores.create', 'discoveryengine.dataStores.delete', 'discoveryengine.dataStores.enrollSolutions', 'discoveryengine.dataStores.get', 'discoveryengine.dataStores.list', 'discoveryengine.dataStores.listCustomModels', 'discoveryengine.dataStores.trainCustomModel', 'discoveryengine.dataStores.update', 'discoveryengine.documentProcessingConfigs.get', 'discoveryengine.documentProcessingConfigs.update', 'discoveryengine.documents.batchGetDocumentsMetadata', 'discoveryengine.documents.create', 'discoveryengine.documents.delete', 'discoveryengine.documents.get', 'discoveryengine.documents.import', 'discoveryengine.documents.list', 'discoveryengine.documents.purge', 'discoveryengine.documents.update', 'discoveryengine.engines.create', 'discoveryengine.engines.createEngineUserData', 'discoveryengine.engines.delete', 'discoveryengine.engines.get', 'discoveryengine.engines.list', 'discoveryengine.engines.pause', 'discoveryengine.engines.resume', 'discoveryengine.engines.tune', 'discoveryengine.engines.update', 'discoveryengine.evaluations.create', 'discoveryengine.evaluations.get', 'discoveryengine.evaluations.list', 'discoveryengine.groundingConfigs.check', 'discoveryengine.identityMappingStores.create', 'discoveryengine.identityMappingStores.delete', 'discoveryengine.identityMappingStores.get', 'discoveryengine.identityMappingStores.importIdentityMappings', 'discoveryengine.identityMappingStores.list', 'discoveryengine.identityMappingStores.listIdentityMappings', 'discoveryengine.identityMappingStores.purgeIdentityMappings', 'discoveryengine.licenseConfigs.create', 'discoveryengine.licenseConfigs.get', 'discoveryengine.licenseConfigs.list', 'discoveryengine.licenseConfigs.update', 'discoveryengine.locations.estimateDataSize', 'discoveryengine.locations.exchangeAuthCredentials', 'discoveryengine.locations.getConnectorSource', 'discoveryengine.locations.listConnectorSources', 'discoveryengine.locations.setUpDataConnector', 'discoveryengine.models.create', 'discoveryengine.models.delete', 'discoveryengine.models.get', 'discoveryengine.models.list', 'discoveryengine.models.pause', 'discoveryengine.models.resume', 'discoveryengine.models.tune', 'discoveryengine.models.update', 'discoveryengine.operations.get', 'discoveryengine.operations.list', 'discoveryengine.projects.get', 'discoveryengine.projects.provision', 'discoveryengine.projects.reportConsentChange', 'discoveryengine.rankingConfigs.rank', 'discoveryengine.sampleQueries.create', 'discoveryengine.sampleQueries.delete', 'discoveryengine.sampleQueries.get', 'discoveryengine.sampleQueries.import', 'discoveryengine.sampleQueries.list', 'discoveryengine.sampleQueries.update', 'discoveryengine.sampleQuerySets.create', 'discoveryengine.sampleQuerySets.delete', 'discoveryengine.sampleQuerySets.get', 'discoveryengine.sampleQuerySets.list', 'discoveryengine.sampleQuerySets.update', 'discoveryengine.schemas.create', 'discoveryengine.schemas.delete', 'discoveryengine.schemas.get', 'discoveryengine.schemas.list', 'discoveryengine.schemas.preview', 'discoveryengine.schemas.update', 'discoveryengine.schemas.validate', 'discoveryengine.servingConfigs.answer', 'discoveryengine.servingConfigs.create', 'discoveryengine.servingConfigs.delete', 'discoveryengine.servingConfigs.get', 'discoveryengine.servingConfigs.list', 'discoveryengine.servingConfigs.recommend', 'discoveryengine.servingConfigs.search', 'discoveryengine.servingConfigs.update', 'discoveryengine.sessions.addContextFile', 'discoveryengine.sessions.create', 'discoveryengine.sessions.delete', 'discoveryengine.sessions.downloadFile', 'discoveryengine.sessions.get', 'discoveryengine.sessions.list', 'discoveryengine.sessions.listSessionFileMetadata', 'discoveryengine.sessions.recommendQuestions', 'discoveryengine.sessions.removeContextFile', 'discoveryengine.sessions.search', 'discoveryengine.sessions.selectContextFiles', 'discoveryengine.sessions.update', 'discoveryengine.sessions.uploadFile', 'discoveryengine.siteSearchEngines.batchVerifyTargetSites', 'discoveryengine.siteSearchEngines.disableAdvancedSiteSearch', 'discoveryengine.siteSearchEngines.enableAdvancedSiteSearch', 'discoveryengine.siteSearchEngines.fetchDomainVerificationStatus', 'discoveryengine.siteSearchEngines.get', 'discoveryengine.siteSearchEngines.recrawlUris', 'discoveryengine.sitemaps.create', 'discoveryengine.sitemaps.delete', 'discoveryengine.sitemaps.fetch', 'discoveryengine.suggestionDenyListEntries.import', 'discoveryengine.suggestionDenyListEntries.purge', 'discoveryengine.targetSites.batchCreate', 'discoveryengine.targetSites.create', 'discoveryengine.targetSites.delete', 'discoveryengine.targetSites.get', 'discoveryengine.targetSites.list', 'discoveryengine.targetSites.update', 'discoveryengine.userEvents.create', 'discoveryengine.userEvents.fetchStats', 'discoveryengine.userEvents.import', 'discoveryengine.userEvents.purge', 'discoveryengine.userStores.batchUpdateUserLicenses', 'discoveryengine.userStores.get', 'discoveryengine.userStores.listUserLicenses', 'discoveryengine.userStores.update', 'discoveryengine.users.get', 'discoveryengine.users.update', 'discoveryengine.widgetConfigs.get', 'discoveryengine.widgetConfigs.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/discoveryengine.notebookViewer
Grants read-only access to a Cloud NotebookLM Notebook.
Cloud NotebookLM Notebook Viewer
['discoveryengine.audioOverviews.get', 'discoveryengine.audioOverviews.getIceConfig', 'discoveryengine.audioOverviews.sendSdpOffer', 'discoveryengine.notebooks.generateGuide', 'discoveryengine.notebooks.get', 'discoveryengine.notebooks.getIamPolicy', 'discoveryengine.notebooks.interactSources', 'discoveryengine.notebooks.list', 'discoveryengine.notebooks.removeSelf', 'discoveryengine.notes.get', 'discoveryengine.sources.checkFreshness', 'discoveryengine.sources.generateDocumentGuide', 'discoveryengine.sources.get']
Copy Permissions
BETA
roles/discoveryengine.notebookLmUser
Grants user-level access to Cloud NotebookLM resources.
Cloud NotebookLM User
['discoveryengine.accounts.create', 'discoveryengine.notebooks.create', 'discoveryengine.notebooks.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/discoveryengine.viewer
Grants read access to all discovery engine resources.
Discovery Engine Viewer
['discoveryengine.aclConfigs.get', 'discoveryengine.agents.get', 'discoveryengine.agents.list', 'discoveryengine.alertPolicies.get', 'discoveryengine.analytics.acquireDashboardSession', 'discoveryengine.analytics.refreshDashboardSessionTokens', 'discoveryengine.answers.get', 'discoveryengine.assistAnswers.get', 'discoveryengine.assistants.get', 'discoveryengine.assistants.list', 'discoveryengine.branches.get', 'discoveryengine.branches.list', 'discoveryengine.cmekConfigs.get', 'discoveryengine.cmekConfigs.list', 'discoveryengine.collections.get', 'discoveryengine.collections.list', 'discoveryengine.completionConfigs.completeQuery', 'discoveryengine.completionConfigs.get', 'discoveryengine.connectorRuns.list', 'discoveryengine.controls.get', 'discoveryengine.controls.list', 'discoveryengine.conversations.converse', 'discoveryengine.conversations.get', 'discoveryengine.conversations.list', 'discoveryengine.dataConnectors.buildActionInvocation', 'discoveryengine.dataConnectors.checkRefreshToken', 'discoveryengine.dataConnectors.get', 'discoveryengine.dataConnectors.queryAvailableActions', 'discoveryengine.dataStores.completeQuery', 'discoveryengine.dataStores.get', 'discoveryengine.dataStores.list', 'discoveryengine.dataStores.listCustomModels', 'discoveryengine.documentProcessingConfigs.get', 'discoveryengine.documents.batchGetDocumentsMetadata', 'discoveryengine.documents.get', 'discoveryengine.documents.list', 'discoveryengine.engines.get', 'discoveryengine.engines.list', 'discoveryengine.evaluations.get', 'discoveryengine.evaluations.list', 'discoveryengine.groundingConfigs.check', 'discoveryengine.identityMappingStores.get', 'discoveryengine.identityMappingStores.list', 'discoveryengine.identityMappingStores.listIdentityMappings', 'discoveryengine.models.get', 'discoveryengine.models.list', 'discoveryengine.operations.get', 'discoveryengine.operations.list', 'discoveryengine.projects.get', 'discoveryengine.rankingConfigs.rank', 'discoveryengine.sampleQueries.get', 'discoveryengine.sampleQueries.list', 'discoveryengine.sampleQuerySets.get', 'discoveryengine.sampleQuerySets.list', 'discoveryengine.schemas.get', 'discoveryengine.schemas.list', 'discoveryengine.schemas.preview', 'discoveryengine.schemas.validate', 'discoveryengine.servingConfigs.answer', 'discoveryengine.servingConfigs.get', 'discoveryengine.servingConfigs.list', 'discoveryengine.servingConfigs.recommend', 'discoveryengine.servingConfigs.search', 'discoveryengine.sessions.downloadFile', 'discoveryengine.sessions.get', 'discoveryengine.sessions.list', 'discoveryengine.sessions.listSessionFileMetadata', 'discoveryengine.sessions.recommendQuestions', 'discoveryengine.siteSearchEngines.get', 'discoveryengine.targetSites.get', 'discoveryengine.targetSites.list', 'discoveryengine.userEvents.fetchStats', 'discoveryengine.userStores.get', 'discoveryengine.widgetConfigs.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/discoveryengine.agentspaceViewer
Grants access to view the details of Agentspace resources.
Agentspace Viewer
['discoveryengine.aclConfigs.get', 'discoveryengine.agents.get', 'discoveryengine.agents.list', 'discoveryengine.alertPolicies.get', 'discoveryengine.analytics.acquireDashboardSession', 'discoveryengine.analytics.refreshDashboardSessionTokens', 'discoveryengine.answers.get', 'discoveryengine.assistAnswers.get', 'discoveryengine.assistants.get', 'discoveryengine.assistants.list', 'discoveryengine.branches.get', 'discoveryengine.branches.list', 'discoveryengine.cmekConfigs.get', 'discoveryengine.cmekConfigs.list', 'discoveryengine.collections.get', 'discoveryengine.collections.list', 'discoveryengine.completionConfigs.completeQuery', 'discoveryengine.completionConfigs.get', 'discoveryengine.connectorRuns.list', 'discoveryengine.controls.get', 'discoveryengine.controls.list', 'discoveryengine.conversations.converse', 'discoveryengine.conversations.get', 'discoveryengine.conversations.list', 'discoveryengine.dataConnectors.buildActionInvocation', 'discoveryengine.dataConnectors.checkRefreshToken', 'discoveryengine.dataConnectors.get', 'discoveryengine.dataConnectors.queryAvailableActions', 'discoveryengine.dataStores.completeQuery', 'discoveryengine.dataStores.get', 'discoveryengine.dataStores.list', 'discoveryengine.dataStores.listCustomModels', 'discoveryengine.documentProcessingConfigs.get', 'discoveryengine.documents.batchGetDocumentsMetadata', 'discoveryengine.documents.get', 'discoveryengine.documents.list', 'discoveryengine.engines.get', 'discoveryengine.engines.list', 'discoveryengine.evaluations.get', 'discoveryengine.evaluations.list', 'discoveryengine.groundingConfigs.check', 'discoveryengine.identityMappingStores.get', 'discoveryengine.identityMappingStores.list', 'discoveryengine.identityMappingStores.listIdentityMappings', 'discoveryengine.models.get', 'discoveryengine.models.list', 'discoveryengine.operations.get', 'discoveryengine.operations.list', 'discoveryengine.projects.get', 'discoveryengine.rankingConfigs.rank', 'discoveryengine.sampleQueries.get', 'discoveryengine.sampleQueries.list', 'discoveryengine.sampleQuerySets.get', 'discoveryengine.sampleQuerySets.list', 'discoveryengine.schemas.get', 'discoveryengine.schemas.list', 'discoveryengine.schemas.preview', 'discoveryengine.schemas.validate', 'discoveryengine.servingConfigs.answer', 'discoveryengine.servingConfigs.get', 'discoveryengine.servingConfigs.list', 'discoveryengine.servingConfigs.recommend', 'discoveryengine.servingConfigs.search', 'discoveryengine.sessions.downloadFile', 'discoveryengine.sessions.get', 'discoveryengine.sessions.list', 'discoveryengine.sessions.listSessionFileMetadata', 'discoveryengine.sessions.recommendQuestions', 'discoveryengine.siteSearchEngines.get', 'discoveryengine.targetSites.get', 'discoveryengine.targetSites.list', 'discoveryengine.userEvents.fetchStats', 'discoveryengine.userStores.get', 'discoveryengine.widgetConfigs.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/discoveryengine.podcastApiUser
Grants user-level access to the Podcast resources.
Podcast API User
['discoveryengine.accounts.create', 'discoveryengine.agents.create', 'discoveryengine.agents.delete', 'discoveryengine.agents.get', 'discoveryengine.agents.list', 'discoveryengine.agents.update', 'discoveryengine.answers.get', 'discoveryengine.assistAnswers.get', 'discoveryengine.assistants.assist', 'discoveryengine.completionConfigs.completeQuery', 'discoveryengine.dataConnectors.acquireAccessToken', 'discoveryengine.dataConnectors.acquireAndStoreRefreshToken', 'discoveryengine.dataConnectors.buildActionInvocation', 'discoveryengine.dataConnectors.checkRefreshToken', 'discoveryengine.dataConnectors.executeAction', 'discoveryengine.dataConnectors.queryAvailableActions', 'discoveryengine.engines.createEngineUserData', 'discoveryengine.engines.get', 'discoveryengine.notebooks.create', 'discoveryengine.notebooks.list', 'discoveryengine.operations.get', 'discoveryengine.podcasts.create', 'discoveryengine.servingConfigs.answer', 'discoveryengine.servingConfigs.recommend', 'discoveryengine.servingConfigs.search', 'discoveryengine.sessions.addContextFile', 'discoveryengine.sessions.create', 'discoveryengine.sessions.delete', 'discoveryengine.sessions.downloadFile', 'discoveryengine.sessions.get', 'discoveryengine.sessions.list', 'discoveryengine.sessions.listSessionFileMetadata', 'discoveryengine.sessions.recommendQuestions', 'discoveryengine.sessions.removeContextFile', 'discoveryengine.sessions.search', 'discoveryengine.sessions.selectContextFiles', 'discoveryengine.sessions.update', 'discoveryengine.sessions.uploadFile', 'discoveryengine.userEvents.create', 'discoveryengine.widgetConfigs.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/discoveryengine.admin
Grants full access to all discoveryengine resources.
Discovery Engine Admin
['discoveryengine.aclConfigs.get', 'discoveryengine.aclConfigs.update', 'discoveryengine.agents.create', 'discoveryengine.agents.delete', 'discoveryengine.agents.get', 'discoveryengine.agents.list', 'discoveryengine.agents.update', 'discoveryengine.alertPolicies.create', 'discoveryengine.alertPolicies.get', 'discoveryengine.alertPolicies.update', 'discoveryengine.analytics.acquireDashboardSession', 'discoveryengine.analytics.refreshDashboardSessionTokens', 'discoveryengine.answers.get', 'discoveryengine.assistAnswers.get', 'discoveryengine.assistants.assist', 'discoveryengine.assistants.create', 'discoveryengine.assistants.delete', 'discoveryengine.assistants.get', 'discoveryengine.assistants.list', 'discoveryengine.assistants.update', 'discoveryengine.branches.get', 'discoveryengine.branches.list', 'discoveryengine.cmekConfigs.get', 'discoveryengine.cmekConfigs.list', 'discoveryengine.cmekConfigs.update', 'discoveryengine.collections.delete', 'discoveryengine.collections.get', 'discoveryengine.collections.list', 'discoveryengine.completionConfigs.completeQuery', 'discoveryengine.completionConfigs.get', 'discoveryengine.completionConfigs.update', 'discoveryengine.connectorRuns.cancel', 'discoveryengine.connectorRuns.list', 'discoveryengine.controls.create', 'discoveryengine.controls.delete', 'discoveryengine.controls.get', 'discoveryengine.controls.list', 'discoveryengine.controls.update', 'discoveryengine.conversations.converse', 'discoveryengine.conversations.create', 'discoveryengine.conversations.delete', 'discoveryengine.conversations.get', 'discoveryengine.conversations.list', 'discoveryengine.conversations.update', 'discoveryengine.dataConnectors.acquireAccessToken', 'discoveryengine.dataConnectors.acquireAndStoreRefreshToken', 'discoveryengine.dataConnectors.buildActionInvocation', 'discoveryengine.dataConnectors.checkRefreshToken', 'discoveryengine.dataConnectors.executeAction', 'discoveryengine.dataConnectors.get', 'discoveryengine.dataConnectors.queryAvailableActions', 'discoveryengine.dataConnectors.startConnectorRun', 'discoveryengine.dataConnectors.update', 'discoveryengine.dataStores.completeQuery', 'discoveryengine.dataStores.create', 'discoveryengine.dataStores.delete', 'discoveryengine.dataStores.enrollSolutions', 'discoveryengine.dataStores.get', 'discoveryengine.dataStores.list', 'discoveryengine.dataStores.listCustomModels', 'discoveryengine.dataStores.trainCustomModel', 'discoveryengine.dataStores.update', 'discoveryengine.documentProcessingConfigs.get', 'discoveryengine.documentProcessingConfigs.update', 'discoveryengine.documents.batchGetDocumentsMetadata', 'discoveryengine.documents.create', 'discoveryengine.documents.delete', 'discoveryengine.documents.get', 'discoveryengine.documents.import', 'discoveryengine.documents.list', 'discoveryengine.documents.purge', 'discoveryengine.documents.update', 'discoveryengine.engines.create', 'discoveryengine.engines.createEngineUserData', 'discoveryengine.engines.delete', 'discoveryengine.engines.get', 'discoveryengine.engines.list', 'discoveryengine.engines.pause', 'discoveryengine.engines.resume', 'discoveryengine.engines.tune', 'discoveryengine.engines.update', 'discoveryengine.evaluations.create', 'discoveryengine.evaluations.get', 'discoveryengine.evaluations.list', 'discoveryengine.groundingConfigs.check', 'discoveryengine.identityMappingStores.create', 'discoveryengine.identityMappingStores.delete', 'discoveryengine.identityMappingStores.get', 'discoveryengine.identityMappingStores.importIdentityMappings', 'discoveryengine.identityMappingStores.list', 'discoveryengine.identityMappingStores.listIdentityMappings', 'discoveryengine.identityMappingStores.purgeIdentityMappings', 'discoveryengine.licenseConfigs.create', 'discoveryengine.licenseConfigs.get', 'discoveryengine.licenseConfigs.list', 'discoveryengine.licenseConfigs.update', 'discoveryengine.locations.estimateDataSize', 'discoveryengine.locations.exchangeAuthCredentials', 'discoveryengine.locations.getConnectorSource', 'discoveryengine.locations.listConnectorSources', 'discoveryengine.locations.setUpDataConnector', 'discoveryengine.models.create', 'discoveryengine.models.delete', 'discoveryengine.models.get', 'discoveryengine.models.list', 'discoveryengine.models.pause', 'discoveryengine.models.resume', 'discoveryengine.models.tune', 'discoveryengine.models.update', 'discoveryengine.operations.get', 'discoveryengine.operations.list', 'discoveryengine.projects.get', 'discoveryengine.projects.provision', 'discoveryengine.projects.reportConsentChange', 'discoveryengine.rankingConfigs.rank', 'discoveryengine.sampleQueries.create', 'discoveryengine.sampleQueries.delete', 'discoveryengine.sampleQueries.get', 'discoveryengine.sampleQueries.import', 'discoveryengine.sampleQueries.list', 'discoveryengine.sampleQueries.update', 'discoveryengine.sampleQuerySets.create', 'discoveryengine.sampleQuerySets.delete', 'discoveryengine.sampleQuerySets.get', 'discoveryengine.sampleQuerySets.list', 'discoveryengine.sampleQuerySets.update', 'discoveryengine.schemas.create', 'discoveryengine.schemas.delete', 'discoveryengine.schemas.get', 'discoveryengine.schemas.list', 'discoveryengine.schemas.preview', 'discoveryengine.schemas.update', 'discoveryengine.schemas.validate', 'discoveryengine.servingConfigs.answer', 'discoveryengine.servingConfigs.create', 'discoveryengine.servingConfigs.delete', 'discoveryengine.servingConfigs.get', 'discoveryengine.servingConfigs.list', 'discoveryengine.servingConfigs.recommend', 'discoveryengine.servingConfigs.search', 'discoveryengine.servingConfigs.update', 'discoveryengine.sessions.addContextFile', 'discoveryengine.sessions.create', 'discoveryengine.sessions.delete', 'discoveryengine.sessions.downloadFile', 'discoveryengine.sessions.get', 'discoveryengine.sessions.list', 'discoveryengine.sessions.listSessionFileMetadata', 'discoveryengine.sessions.recommendQuestions', 'discoveryengine.sessions.removeContextFile', 'discoveryengine.sessions.search', 'discoveryengine.sessions.selectContextFiles', 'discoveryengine.sessions.update', 'discoveryengine.sessions.uploadFile', 'discoveryengine.siteSearchEngines.batchVerifyTargetSites', 'discoveryengine.siteSearchEngines.disableAdvancedSiteSearch', 'discoveryengine.siteSearchEngines.enableAdvancedSiteSearch', 'discoveryengine.siteSearchEngines.fetchDomainVerificationStatus', 'discoveryengine.siteSearchEngines.get', 'discoveryengine.siteSearchEngines.recrawlUris', 'discoveryengine.sitemaps.create', 'discoveryengine.sitemaps.delete', 'discoveryengine.sitemaps.fetch', 'discoveryengine.suggestionDenyListEntries.import', 'discoveryengine.suggestionDenyListEntries.purge', 'discoveryengine.targetSites.batchCreate', 'discoveryengine.targetSites.create', 'discoveryengine.targetSites.delete', 'discoveryengine.targetSites.get', 'discoveryengine.targetSites.list', 'discoveryengine.targetSites.update', 'discoveryengine.userEvents.create', 'discoveryengine.userEvents.fetchStats', 'discoveryengine.userEvents.import', 'discoveryengine.userEvents.purge', 'discoveryengine.userStores.batchUpdateUserLicenses', 'discoveryengine.userStores.get', 'discoveryengine.userStores.listUserLicenses', 'discoveryengine.userStores.update', 'discoveryengine.users.get', 'discoveryengine.users.update', 'discoveryengine.widgetConfigs.get', 'discoveryengine.widgetConfigs.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/discoveryengine.notebookLmOwner
Grants full access to Cloud NotebookLM resources.
Cloud NotebookLM Admin
['discoveryengine.accounts.create', 'discoveryengine.aclConfigs.get', 'discoveryengine.aclConfigs.update', 'discoveryengine.audioOverviews.create', 'discoveryengine.audioOverviews.delete', 'discoveryengine.audioOverviews.get', 'discoveryengine.audioOverviews.getIceConfig', 'discoveryengine.audioOverviews.sendSdpOffer', 'discoveryengine.notebooks.create', 'discoveryengine.notebooks.generateGuide', 'discoveryengine.notebooks.get', 'discoveryengine.notebooks.getAnalytics', 'discoveryengine.notebooks.getIamPolicy', 'discoveryengine.notebooks.interactSources', 'discoveryengine.notebooks.list', 'discoveryengine.notebooks.removeSelf', 'discoveryengine.notebooks.setIamPolicy', 'discoveryengine.notebooks.update', 'discoveryengine.notes.create', 'discoveryengine.notes.delete', 'discoveryengine.notes.get', 'discoveryengine.notes.update', 'discoveryengine.sources.checkFreshness', 'discoveryengine.sources.create', 'discoveryengine.sources.delete', 'discoveryengine.sources.generateDocumentGuide', 'discoveryengine.sources.get', 'discoveryengine.sources.refresh', 'discoveryengine.sources.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/discoveryengine.serviceAgent
Discovery Engine service uploads documents and user events from Cloud Storage and BigQuery, reports results to the customer Cloud Storage bucket, writes logs to customer projects using Cloud Logging, and writes and reads metrics for customer using Cloud Monitoring.
Discovery Engine Service Agent
['aiplatform.executions.create', 'aiplatform.executions.delete', 'aiplatform.executions.update', 'aiplatform.extensions.delete', 'aiplatform.extensions.execute', 'aiplatform.extensions.get', 'aiplatform.extensions.import', 'aiplatform.extensions.list', 'aiplatform.extensions.update', 'aiplatform.operations.list', 'aiplatform.reasoningEngines.create', 'aiplatform.reasoningEngines.delete', 'aiplatform.reasoningEngines.get', 'aiplatform.reasoningEngines.list', 'aiplatform.reasoningEngines.query', 'aiplatform.reasoningEngines.update', 'alloydb.clusters.export', 'alloydb.databases.list', 'alloydb.instances.get', 'alloydb.operations.get', 'bigquery.datasets.create', 'bigquery.datasets.get', 'bigquery.jobs.create', 'bigquery.jobs.get', 'bigquery.jobs.list', 'bigquery.jobs.update', 'bigquery.tables.create', 'bigquery.tables.export', 'bigquery.tables.get', 'bigquery.tables.getData', 'bigquery.tables.list', 'bigquery.tables.update', 'bigquery.tables.updateData', 'bigtable.tables.readRows', 'bigtable.tables.sampleRowKeys', 'cloudsql.databases.get', 'cloudsql.instances.export', 'cloudsql.instances.get', 'datastore.databases.export', 'datastore.databases.get', 'datastore.databases.getMetadata', 'datastore.operations.get', 'dialogflow.sessions.detectIntent', 'discoveryengine.completionConfigs.completeQuery', 'discoveryengine.conversations.converse', 'discoveryengine.conversations.create', 'discoveryengine.dataStores.completeQuery', 'discoveryengine.servingConfigs.answer', 'discoveryengine.servingConfigs.search', 'discoveryengine.userEvents.create', 'integrations.apigeeExecutions.list', 'integrations.apigeeIntegrationVers.get', 'integrations.apigeeIntegrationVers.list', 'integrations.integrationVersions.get', 'integrations.integrationVersions.invoke', 'integrations.integrationVersions.list', 'integrations.integrations.get', 'integrations.integrations.invoke', 'integrations.integrations.list', 'integrations.testCases.get', 'integrations.testCases.invoke', 'integrations.testCases.list', 'logging.logEntries.create', 'modelarmor.templates.useToSanitizeModelResponse', 'modelarmor.templates.useToSanitizeUserPrompt', 'monitoring.metricDescriptors.create', 'monitoring.metricDescriptors.get', 'monitoring.metricDescriptors.list', 'monitoring.monitoredResourceDescriptors.get', 'monitoring.monitoredResourceDescriptors.list', 'monitoring.timeSeries.create', 'monitoring.timeSeries.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'spanner.databases.beginReadOnlyTransaction', 'spanner.databases.partitionQuery', 'spanner.databases.select', 'spanner.databases.useDataBoost', 'spanner.sessions.create', 'storage.buckets.create', 'storage.buckets.get', 'storage.buckets.getIamPolicy', 'storage.buckets.setIamPolicy', 'storage.managedFolders.create', 'storage.managedFolders.delete', 'storage.managedFolders.get', 'storage.managedFolders.getIamPolicy', 'storage.managedFolders.list', 'storage.managedFolders.setIamPolicy', 'storage.objects.create', 'storage.objects.delete', 'storage.objects.get', 'storage.objects.list', 'storage.objects.update']
Copy Permissions
GA
roles/discoveryengine.agentAdmin
Grants admin-level access to Agent resources.
Agent Admin
['discoveryengine.agents.create', 'discoveryengine.agents.delete', 'discoveryengine.agents.get', 'discoveryengine.agents.list', 'discoveryengine.agents.update']
Copy Permissions
BETA
roles/discoveryengine.user
Grants user-level access to Discovery Engine resources.
Discovery Engine User
['discoveryengine.accounts.create', 'discoveryengine.agents.create', 'discoveryengine.agents.delete', 'discoveryengine.agents.get', 'discoveryengine.agents.list', 'discoveryengine.agents.update', 'discoveryengine.answers.get', 'discoveryengine.assistAnswers.get', 'discoveryengine.assistants.assist', 'discoveryengine.completionConfigs.completeQuery', 'discoveryengine.dataConnectors.acquireAccessToken', 'discoveryengine.dataConnectors.acquireAndStoreRefreshToken', 'discoveryengine.dataConnectors.buildActionInvocation', 'discoveryengine.dataConnectors.checkRefreshToken', 'discoveryengine.dataConnectors.executeAction', 'discoveryengine.dataConnectors.queryAvailableActions', 'discoveryengine.engines.createEngineUserData', 'discoveryengine.engines.get', 'discoveryengine.notebooks.create', 'discoveryengine.notebooks.list', 'discoveryengine.servingConfigs.answer', 'discoveryengine.servingConfigs.recommend', 'discoveryengine.servingConfigs.search', 'discoveryengine.sessions.addContextFile', 'discoveryengine.sessions.create', 'discoveryengine.sessions.delete', 'discoveryengine.sessions.downloadFile', 'discoveryengine.sessions.get', 'discoveryengine.sessions.list', 'discoveryengine.sessions.listSessionFileMetadata', 'discoveryengine.sessions.recommendQuestions', 'discoveryengine.sessions.removeContextFile', 'discoveryengine.sessions.search', 'discoveryengine.sessions.selectContextFiles', 'discoveryengine.sessions.update', 'discoveryengine.sessions.uploadFile', 'discoveryengine.userEvents.create', 'discoveryengine.widgetConfigs.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/discoveryengine.agentspaceUser
Grants user-level access to Agentspace resources.
Agentspace User
['discoveryengine.accounts.create', 'discoveryengine.agents.create', 'discoveryengine.agents.delete', 'discoveryengine.agents.get', 'discoveryengine.agents.list', 'discoveryengine.agents.update', 'discoveryengine.answers.get', 'discoveryengine.assistAnswers.get', 'discoveryengine.assistants.assist', 'discoveryengine.completionConfigs.completeQuery', 'discoveryengine.dataConnectors.acquireAccessToken', 'discoveryengine.dataConnectors.acquireAndStoreRefreshToken', 'discoveryengine.dataConnectors.buildActionInvocation', 'discoveryengine.dataConnectors.checkRefreshToken', 'discoveryengine.dataConnectors.executeAction', 'discoveryengine.dataConnectors.queryAvailableActions', 'discoveryengine.engines.createEngineUserData', 'discoveryengine.engines.get', 'discoveryengine.notebooks.create', 'discoveryengine.notebooks.list', 'discoveryengine.servingConfigs.answer', 'discoveryengine.servingConfigs.recommend', 'discoveryengine.servingConfigs.search', 'discoveryengine.sessions.addContextFile', 'discoveryengine.sessions.create', 'discoveryengine.sessions.delete', 'discoveryengine.sessions.downloadFile', 'discoveryengine.sessions.get', 'discoveryengine.sessions.list', 'discoveryengine.sessions.listSessionFileMetadata', 'discoveryengine.sessions.recommendQuestions', 'discoveryengine.sessions.removeContextFile', 'discoveryengine.sessions.search', 'discoveryengine.sessions.selectContextFiles', 'discoveryengine.sessions.update', 'discoveryengine.sessions.uploadFile', 'discoveryengine.userEvents.create', 'discoveryengine.widgetConfigs.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/discoveryengine.agentspaceEditor
Grants access to edit Agentspace resources.
Agentspace Editor
['discoveryengine.aclConfigs.get', 'discoveryengine.agents.create', 'discoveryengine.agents.delete', 'discoveryengine.agents.get', 'discoveryengine.agents.list', 'discoveryengine.agents.update', 'discoveryengine.alertPolicies.get', 'discoveryengine.analytics.acquireDashboardSession', 'discoveryengine.analytics.refreshDashboardSessionTokens', 'discoveryengine.answers.get', 'discoveryengine.assistAnswers.get', 'discoveryengine.assistants.assist', 'discoveryengine.assistants.get', 'discoveryengine.assistants.list', 'discoveryengine.branches.get', 'discoveryengine.branches.list', 'discoveryengine.cmekConfigs.get', 'discoveryengine.cmekConfigs.list', 'discoveryengine.collections.get', 'discoveryengine.collections.list', 'discoveryengine.completionConfigs.completeQuery', 'discoveryengine.completionConfigs.get', 'discoveryengine.connectorRuns.list', 'discoveryengine.controls.get', 'discoveryengine.controls.list', 'discoveryengine.conversations.converse', 'discoveryengine.conversations.create', 'discoveryengine.conversations.delete', 'discoveryengine.conversations.get', 'discoveryengine.conversations.list', 'discoveryengine.conversations.update', 'discoveryengine.dataConnectors.acquireAccessToken', 'discoveryengine.dataConnectors.acquireAndStoreRefreshToken', 'discoveryengine.dataConnectors.buildActionInvocation', 'discoveryengine.dataConnectors.checkRefreshToken', 'discoveryengine.dataConnectors.executeAction', 'discoveryengine.dataConnectors.get', 'discoveryengine.dataConnectors.queryAvailableActions', 'discoveryengine.dataStores.completeQuery', 'discoveryengine.dataStores.get', 'discoveryengine.dataStores.list', 'discoveryengine.dataStores.listCustomModels', 'discoveryengine.dataStores.trainCustomModel', 'discoveryengine.documentProcessingConfigs.get', 'discoveryengine.documents.batchGetDocumentsMetadata', 'discoveryengine.documents.create', 'discoveryengine.documents.delete', 'discoveryengine.documents.get', 'discoveryengine.documents.import', 'discoveryengine.documents.list', 'discoveryengine.documents.update', 'discoveryengine.engines.createEngineUserData', 'discoveryengine.engines.get', 'discoveryengine.engines.list', 'discoveryengine.engines.pause', 'discoveryengine.engines.resume', 'discoveryengine.engines.tune', 'discoveryengine.evaluations.get', 'discoveryengine.evaluations.list', 'discoveryengine.groundingConfigs.check', 'discoveryengine.identityMappingStores.create', 'discoveryengine.identityMappingStores.delete', 'discoveryengine.identityMappingStores.get', 'discoveryengine.identityMappingStores.importIdentityMappings', 'discoveryengine.identityMappingStores.list', 'discoveryengine.identityMappingStores.listIdentityMappings', 'discoveryengine.identityMappingStores.purgeIdentityMappings', 'discoveryengine.licenseConfigs.get', 'discoveryengine.licenseConfigs.list', 'discoveryengine.models.create', 'discoveryengine.models.delete', 'discoveryengine.models.get', 'discoveryengine.models.list', 'discoveryengine.models.pause', 'discoveryengine.models.resume', 'discoveryengine.models.tune', 'discoveryengine.models.update', 'discoveryengine.operations.get', 'discoveryengine.operations.list', 'discoveryengine.projects.get', 'discoveryengine.rankingConfigs.rank', 'discoveryengine.sampleQueries.create', 'discoveryengine.sampleQueries.delete', 'discoveryengine.sampleQueries.get', 'discoveryengine.sampleQueries.import', 'discoveryengine.sampleQueries.list', 'discoveryengine.sampleQueries.update', 'discoveryengine.sampleQuerySets.create', 'discoveryengine.sampleQuerySets.delete', 'discoveryengine.sampleQuerySets.get', 'discoveryengine.sampleQuerySets.list', 'discoveryengine.sampleQuerySets.update', 'discoveryengine.schemas.get', 'discoveryengine.schemas.list', 'discoveryengine.schemas.preview', 'discoveryengine.schemas.validate', 'discoveryengine.servingConfigs.answer', 'discoveryengine.servingConfigs.get', 'discoveryengine.servingConfigs.list', 'discoveryengine.servingConfigs.recommend', 'discoveryengine.servingConfigs.search', 'discoveryengine.sessions.addContextFile', 'discoveryengine.sessions.create', 'discoveryengine.sessions.delete', 'discoveryengine.sessions.downloadFile', 'discoveryengine.sessions.get', 'discoveryengine.sessions.list', 'discoveryengine.sessions.listSessionFileMetadata', 'discoveryengine.sessions.recommendQuestions', 'discoveryengine.sessions.removeContextFile', 'discoveryengine.sessions.search', 'discoveryengine.sessions.selectContextFiles', 'discoveryengine.sessions.update', 'discoveryengine.sessions.uploadFile', 'discoveryengine.siteSearchEngines.get', 'discoveryengine.targetSites.get', 'discoveryengine.targetSites.list', 'discoveryengine.userEvents.create', 'discoveryengine.userEvents.fetchStats', 'discoveryengine.userEvents.import', 'discoveryengine.userStores.get', 'discoveryengine.widgetConfigs.get', 'discoveryengine.widgetConfigs.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA