discoveryengine.accounts.create

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM User (roles/discoveryengine.notebookLmUser)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

discoveryengine.aclConfigs.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.aclConfigs.update

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

discoveryengine.agents.create

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agent Admin (roles/discoveryengine.agentAdmin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Service agent roles

• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)

discoveryengine.agents.delete

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agent Admin (roles/discoveryengine.agentAdmin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

discoveryengine.agents.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agent Admin (roles/discoveryengine.agentAdmin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.agents.getAgentView

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.agents.getIamPolicy

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agent Admin (roles/discoveryengine.agentAdmin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

discoveryengine.agents.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Agent Admin (roles/discoveryengine.agentAdmin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

discoveryengine.agents.listAvailableAgentViews

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.agents.manage

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agent Admin (roles/discoveryengine.agentAdmin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Service agent roles

• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)

discoveryengine.agents.requestReview

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

discoveryengine.agents.setIamPolicy

Owner (roles/owner)

Discovery Engine Admin (roles/discoveryengine.admin)

Agent Admin (roles/discoveryengine.agentAdmin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Security Admin (roles/iam.securityAdmin)

discoveryengine.agents.update

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Agent Admin (roles/discoveryengine.agentAdmin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

discoveryengine.alertPolicies.create

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.alertPolicies.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.alertPolicies.update

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.analytics.acquireDashboardSession

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.analytics.refreshDashboardSessionTokens

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.answers.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.assistAnswers.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.assistants.assist

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

discoveryengine.assistants.create

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.assistants.delete

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.assistants.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.assistants.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

discoveryengine.assistants.update

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.audioOverviews.create

Owner (roles/owner)

Editor (roles/editor)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

discoveryengine.audioOverviews.delete

Owner (roles/owner)

Editor (roles/editor)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

discoveryengine.audioOverviews.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

Support User (roles/iam.supportUser)

discoveryengine.audioOverviews.getIceConfig

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

Support User (roles/iam.supportUser)

discoveryengine.audioOverviews.sendSdpOffer

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

Support User (roles/iam.supportUser)

discoveryengine.billingAccountLicenseConfigs.distribute

Owner (roles/owner)

Billing Account Administrator (roles/billing.admin)

Consumer Procurement Order Administrator (roles/consumerprocurement.orderAdmin)

Consumer Procurement Administrator (roles/consumerprocurement.procurementAdmin)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.billingAccountLicenseConfigs.get

Owner (roles/owner)

Billing Account Administrator (roles/billing.admin)

Billing Account Viewer (roles/billing.viewer)

Consumer Procurement Order Administrator (roles/consumerprocurement.orderAdmin)

Consumer Procurement Order Viewer (roles/consumerprocurement.orderViewer)

Consumer Procurement Administrator (roles/consumerprocurement.procurementAdmin)

Consumer Procurement Viewer (roles/consumerprocurement.procurementViewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.billingAccountLicenseConfigs.list

Owner (roles/owner)

Billing Account Administrator (roles/billing.admin)

Billing Account Viewer (roles/billing.viewer)

Consumer Procurement Order Administrator (roles/consumerprocurement.orderAdmin)

Consumer Procurement Order Viewer (roles/consumerprocurement.orderViewer)

Consumer Procurement Administrator (roles/consumerprocurement.procurementAdmin)

Consumer Procurement Viewer (roles/consumerprocurement.procurementViewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

discoveryengine.billingAccountLicenseConfigs.retract

Owner (roles/owner)

Billing Account Administrator (roles/billing.admin)

Consumer Procurement Order Administrator (roles/consumerprocurement.orderAdmin)

Consumer Procurement Administrator (roles/consumerprocurement.procurementAdmin)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.branches.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.branches.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

discoveryengine.cmekConfigs.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.cmekConfigs.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

discoveryengine.cmekConfigs.update

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.collections.delete

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.collections.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.collections.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• Customer Engagement Suite Service Agent (roles/ces.serviceAgent)

discoveryengine.completionConfigs.completeQuery

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Service agent roles

• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)

discoveryengine.completionConfigs.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.completionConfigs.update

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.completionSuggestions.import

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.completionSuggestions.purge

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.connectorRuns.cancel

Owner (roles/owner)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.connectorRuns.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

discoveryengine.controls.create

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.controls.delete

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.controls.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.controls.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

discoveryengine.controls.update

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.conversations.converse

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Service agent roles

• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)

discoveryengine.conversations.create

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Service agent roles

• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)

discoveryengine.conversations.delete

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

discoveryengine.conversations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.conversations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

discoveryengine.conversations.update

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

discoveryengine.dataConnectors.acquireAccessToken

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Restricted User (roles/discoveryengine.agentspaceRestrictedUser)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

discoveryengine.dataConnectors.acquireAndStoreRefreshToken

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Restricted User (roles/discoveryengine.agentspaceRestrictedUser)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

discoveryengine.dataConnectors.buildActionInvocation

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Restricted User (roles/discoveryengine.agentspaceRestrictedUser)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.dataConnectors.checkRefreshToken

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Restricted User (roles/discoveryengine.agentspaceRestrictedUser)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.dataConnectors.executeAction

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Restricted User (roles/discoveryengine.agentspaceRestrictedUser)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

discoveryengine.dataConnectors.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.dataConnectors.queryAvailableActions

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Restricted User (roles/discoveryengine.agentspaceRestrictedUser)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.dataConnectors.startConnectorRun

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.dataConnectors.update

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.dataStores.completeQuery

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Service agent roles

• SecLM Service Agent (roles/seclm.serviceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)

discoveryengine.dataStores.create

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Service agent roles

• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• Customer Engagement Suite Service Agent (roles/ces.serviceAgent)

discoveryengine.dataStores.delete

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.dataStores.enrollSolutions

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.dataStores.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Service agent roles

• SecLM Service Agent (roles/seclm.serviceAgent)
• Customer Engagement Suite Service Agent (roles/ces.serviceAgent)

discoveryengine.dataStores.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• SecLM Service Agent (roles/seclm.serviceAgent)
• Customer Engagement Suite Service Agent (roles/ces.serviceAgent)

discoveryengine.dataStores.listCustomModels

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.dataStores.trainCustomModel

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

discoveryengine.dataStores.update

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.documentProcessingConfigs.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.documentProcessingConfigs.update

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.documents.batchGetDocumentsMetadata

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.documents.create

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Service agent roles

• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• Customer Engagement Suite Service Agent (roles/ces.serviceAgent)

discoveryengine.documents.delete

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

discoveryengine.documents.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Service agent roles

• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• Customer Engagement Suite Service Agent (roles/ces.serviceAgent)

discoveryengine.documents.import

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Service agent roles

• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• Customer Engagement Suite Service Agent (roles/ces.serviceAgent)

discoveryengine.documents.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• Customer Engagement Suite Service Agent (roles/ces.serviceAgent)

discoveryengine.documents.purge

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.documents.update

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Service agent roles

• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• Customer Engagement Suite Service Agent (roles/ces.serviceAgent)

discoveryengine.engines.create

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Service agent roles

• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• Customer Engagement Suite Service Agent (roles/ces.serviceAgent)

discoveryengine.engines.createEngineUserData

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

discoveryengine.engines.delete

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Service agent roles

• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• Customer Engagement Suite Service Agent (roles/ces.serviceAgent)

discoveryengine.engines.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Service agent roles

• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• Customer Engagement Suite Service Agent (roles/ces.serviceAgent)

discoveryengine.engines.getIamPolicy

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

discoveryengine.engines.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

discoveryengine.engines.pause

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

discoveryengine.engines.resume

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

discoveryengine.engines.setIamPolicy

Owner (roles/owner)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Security Admin (roles/iam.securityAdmin)

discoveryengine.engines.tune

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

discoveryengine.engines.update

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Service agent roles

• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• Customer Engagement Suite Service Agent (roles/ces.serviceAgent)

discoveryengine.evaluations.create

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.evaluations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.evaluations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

discoveryengine.groundingConfigs.check

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.identityMappingStores.create

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

discoveryengine.identityMappingStores.delete

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

discoveryengine.identityMappingStores.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.identityMappingStores.importIdentityMappings

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

discoveryengine.identityMappingStores.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

discoveryengine.identityMappingStores.listIdentityMappings

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.identityMappingStores.purgeIdentityMappings

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

discoveryengine.licenseConfigs.create

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.licenseConfigs.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Support User (roles/iam.supportUser)

discoveryengine.licenseConfigs.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

discoveryengine.licenseConfigs.update

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.locations.completeExternalIdentities

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM User (roles/discoveryengine.notebookLmUser)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.locations.estimateDataSize

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Support User (roles/iam.supportUser)

discoveryengine.locations.exchangeAuthCredentials

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Support User (roles/iam.supportUser)

discoveryengine.locations.getConnectorSource

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Support User (roles/iam.supportUser)

discoveryengine.locations.listConnectorSources

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Support User (roles/iam.supportUser)

discoveryengine.locations.setUpDataConnector

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.models.create

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

discoveryengine.models.delete

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

discoveryengine.models.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.models.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

discoveryengine.models.pause

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

discoveryengine.models.resume

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

discoveryengine.models.tune

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

discoveryengine.models.update

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

discoveryengine.notebooks.create

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM User (roles/discoveryengine.notebookLmUser)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

discoveryengine.notebooks.generateGuide

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

Support User (roles/iam.supportUser)

discoveryengine.notebooks.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

Support User (roles/iam.supportUser)

discoveryengine.notebooks.getAnalytics

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Support User (roles/iam.supportUser)

discoveryengine.notebooks.getIamPolicy

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

discoveryengine.notebooks.interactSources

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

Support User (roles/iam.supportUser)

discoveryengine.notebooks.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM User (roles/discoveryengine.notebookLmUser)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

discoveryengine.notebooks.removeSelf

Owner (roles/owner)

Editor (roles/editor)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

discoveryengine.notebooks.setIamPolicy

Owner (roles/owner)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Security Admin (roles/iam.securityAdmin)

discoveryengine.notebooks.update

Owner (roles/owner)

Editor (roles/editor)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

discoveryengine.notes.create

Owner (roles/owner)

Editor (roles/editor)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

discoveryengine.notes.delete

Owner (roles/owner)

Editor (roles/editor)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

discoveryengine.notes.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

Support User (roles/iam.supportUser)

discoveryengine.notes.update

Owner (roles/owner)

Editor (roles/editor)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

discoveryengine.operations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.operations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

discoveryengine.podcasts.create

Owner (roles/owner)

Editor (roles/editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

discoveryengine.projects.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.projects.provision

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.projects.reportConsentChange

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.rankingConfigs.rank

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.sampleQueries.create

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

discoveryengine.sampleQueries.delete

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

discoveryengine.sampleQueries.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.sampleQueries.import

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

discoveryengine.sampleQueries.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

discoveryengine.sampleQueries.update

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

discoveryengine.sampleQuerySets.create

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

discoveryengine.sampleQuerySets.delete

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

discoveryengine.sampleQuerySets.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.sampleQuerySets.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

discoveryengine.sampleQuerySets.update

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

discoveryengine.schemas.create

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.schemas.delete

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.schemas.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Service agent roles

• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• Customer Engagement Suite Service Agent (roles/ces.serviceAgent)

discoveryengine.schemas.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• Customer Engagement Suite Service Agent (roles/ces.serviceAgent)

discoveryengine.schemas.preview

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.schemas.update

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.schemas.validate

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.servingConfigs.answer

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Service agent roles

• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)

discoveryengine.servingConfigs.create

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.servingConfigs.delete

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.servingConfigs.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.servingConfigs.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

discoveryengine.servingConfigs.recommend

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.servingConfigs.search

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

Service agent roles

• Customer Engagement Suite Service Agent (roles/ces.serviceAgent)
• Dialogflow Service Agent (roles/dialogflow.serviceAgent)
• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)
• SecLM Service Agent (roles/seclm.serviceAgent)
• Vertex AI Extension Service Agent (roles/aiplatform.extensionServiceAgent)

discoveryengine.servingConfigs.update

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.sessions.addContextFile

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

discoveryengine.sessions.create

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

discoveryengine.sessions.delete

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

discoveryengine.sessions.downloadFile

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.sessions.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.sessions.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

discoveryengine.sessions.listSessionFileMetadata

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.sessions.recommendQuestions

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.sessions.removeContextFile

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

discoveryengine.sessions.search

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Support User (roles/iam.supportUser)

discoveryengine.sessions.selectContextFiles

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

discoveryengine.sessions.update

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

discoveryengine.sessions.uploadFile

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

discoveryengine.siteSearchEngines.batchVerifyTargetSites

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.siteSearchEngines.disableAdvancedSiteSearch

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.siteSearchEngines.enableAdvancedSiteSearch

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.siteSearchEngines.fetchDomainVerificationStatus

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Support User (roles/iam.supportUser)

discoveryengine.siteSearchEngines.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.siteSearchEngines.recrawlUris

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.sitemaps.create

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.sitemaps.delete

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.sitemaps.fetch

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Support User (roles/iam.supportUser)

discoveryengine.sources.checkFreshness

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

Support User (roles/iam.supportUser)

discoveryengine.sources.create

Owner (roles/owner)

Editor (roles/editor)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

discoveryengine.sources.delete

Owner (roles/owner)

Editor (roles/editor)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

discoveryengine.sources.generateDocumentGuide

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

Support User (roles/iam.supportUser)

discoveryengine.sources.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

Cloud NotebookLM Notebook Viewer (roles/discoveryengine.notebookViewer)

Support User (roles/iam.supportUser)

discoveryengine.sources.refresh

Owner (roles/owner)

Editor (roles/editor)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

discoveryengine.sources.update

Owner (roles/owner)

Editor (roles/editor)

Cloud NotebookLM Notebook Editor (roles/discoveryengine.notebookEditor)

Cloud NotebookLM Admin (roles/discoveryengine.notebookLmOwner)

Cloud NotebookLM Notebook Owner (roles/discoveryengine.notebookOwner)

discoveryengine.suggestionDenyListEntries.import

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.suggestionDenyListEntries.purge

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.targetSites.batchCreate

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.targetSites.create

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.targetSites.delete

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.targetSites.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.targetSites.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

discoveryengine.targetSites.update

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.userEvents.create

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Restricted User (roles/discoveryengine.agentspaceRestrictedUser)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Service agent roles

• Discovery Engine Service Agent (roles/discoveryengine.serviceAgent)

discoveryengine.userEvents.fetchStats

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.userEvents.import

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)

discoveryengine.userEvents.purge

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.userStores.batchUpdateUserLicenses

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.userStores.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.userStores.listUserLicenses

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Support User (roles/iam.supportUser)

discoveryengine.userStores.update

Owner (roles/owner)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

discoveryengine.users.get

Owner (roles/owner)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Restricted User (roles/discoveryengine.agentspaceRestrictedUser)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

discoveryengine.users.update

Owner (roles/owner)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Restricted User (roles/discoveryengine.agentspaceRestrictedUser)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

discoveryengine.widgetConfigs.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Gemini Enterprise User (roles/discoveryengine.agentspaceUser)

Gemini Enterprise Viewer (roles/discoveryengine.agentspaceViewer)

Discovery Engine Editor (roles/discoveryengine.editor)

Podcast API User (roles/discoveryengine.podcastApiUser)

Discovery Engine User (roles/discoveryengine.user)

Discovery Engine Viewer (roles/discoveryengine.viewer)

Support User (roles/iam.supportUser)

discoveryengine.widgetConfigs.update

Owner (roles/owner)

Editor (roles/editor)

Discovery Engine Admin (roles/discoveryengine.admin)

Gemini Enterprise Admin (roles/discoveryengine.agentspaceAdmin)

Gemini Enterprise Editor (roles/discoveryengine.agentspaceEditor)

Discovery Engine Editor (roles/discoveryengine.editor)