Discovery Engine roles and permissions
Stay organized with collections Save and categorize content based on your preferences.

This page lists the IAM roles and permissions for Discovery Engine. To search through all roles and permissions, see the role and permission index.

Discovery Engine roles

Role Permissions

Discovery Engine Admin

(roles/discoveryengine.admin)

Grants full access to all discoveryengine resources.

discoveryengine.aclConfigs.*

discoveryengine.aclConfigs.get
discoveryengine.aclConfigs.update

discoveryengine.agents.*

discoveryengine.agents.create
discoveryengine.agents.delete
discoveryengine.agents.get
discoveryengine.agents.list
discoveryengine.agents.update

discoveryengine.analytics.*

discoveryengine.analytics.acquireDashboardSession
discoveryengine.analytics.refreshDashboardSessionTokens

discoveryengine.answers.get

discoveryengine.assistAnswers.get

discoveryengine.assistants.*

discoveryengine.assistants.assist
discoveryengine.assistants.create
discoveryengine.assistants.delete
discoveryengine.assistants.get
discoveryengine.assistants.list
discoveryengine.assistants.update

discoveryengine.branches.*

discoveryengine.branches.get
discoveryengine.branches.list

discoveryengine.cmekConfigs.*

discoveryengine.cmekConfigs.get
discoveryengine.cmekConfigs.list
discoveryengine.cmekConfigs.update

discoveryengine.collections.*

discoveryengine.collections.delete
discoveryengine.collections.get
discoveryengine.collections.list

discoveryengine.completionConfigs.*

discoveryengine.completionConfigs.completeQuery
discoveryengine.completionConfigs.get
discoveryengine.completionConfigs.update

discoveryengine.connectorRuns.*

discoveryengine.connectorRuns.cancel
discoveryengine.connectorRuns.list

discoveryengine.controls.*

discoveryengine.controls.create
discoveryengine.controls.delete
discoveryengine.controls.get
discoveryengine.controls.list
discoveryengine.controls.update

discoveryengine.conversations.*

discoveryengine.conversations.converse
discoveryengine.conversations.create
discoveryengine.conversations.delete
discoveryengine.conversations.get
discoveryengine.conversations.list
discoveryengine.conversations.update

discoveryengine.dataConnectors.*

discoveryengine.dataConnectors.acquireAccessToken
discoveryengine.dataConnectors.acquireAndStoreRefreshToken
discoveryengine.dataConnectors.buildActionInvocation
discoveryengine.dataConnectors.checkRefreshToken
discoveryengine.dataConnectors.executeAction
discoveryengine.dataConnectors.get
discoveryengine.dataConnectors.queryAvailableActions
discoveryengine.dataConnectors.startConnectorRun
discoveryengine.dataConnectors.update

discoveryengine.dataStores.*

discoveryengine.dataStores.completeQuery
discoveryengine.dataStores.create
discoveryengine.dataStores.delete
discoveryengine.dataStores.enrollSolutions
discoveryengine.dataStores.get
discoveryengine.dataStores.list
discoveryengine.dataStores.listCustomModels
discoveryengine.dataStores.trainCustomModel
discoveryengine.dataStores.update

discoveryengine.documentProcessingConfigs.*

discoveryengine.documentProcessingConfigs.get
discoveryengine.documentProcessingConfigs.update

discoveryengine.documents.*

discoveryengine.documents.batchGetDocumentsMetadata
discoveryengine.documents.create
discoveryengine.documents.delete
discoveryengine.documents.get
discoveryengine.documents.import
discoveryengine.documents.list
discoveryengine.documents.purge
discoveryengine.documents.update

discoveryengine.engines.*

discoveryengine.engines.create
discoveryengine.engines.delete
discoveryengine.engines.get
discoveryengine.engines.list
discoveryengine.engines.pause
discoveryengine.engines.resume
discoveryengine.engines.tune
discoveryengine.engines.update

discoveryengine.evaluations.*

discoveryengine.evaluations.create
discoveryengine.evaluations.get
discoveryengine.evaluations.list

discoveryengine.groundingConfigs.check

discoveryengine.identityMappingStores.*

discoveryengine.identityMappingStores.create
discoveryengine.identityMappingStores.delete
discoveryengine.identityMappingStores.get
discoveryengine.identityMappingStores.importIdentityMappings
discoveryengine.identityMappingStores.list
discoveryengine.identityMappingStores.listIdentityMappings
discoveryengine.identityMappingStores.purgeIdentityMappings

discoveryengine.locations.*

discoveryengine.locations.estimateDataSize
discoveryengine.locations.exchangeAuthCredentials
discoveryengine.locations.getConnectorSource
discoveryengine.locations.listConnectorSources
discoveryengine.locations.setUpDataConnector

discoveryengine.models.*

discoveryengine.models.create
discoveryengine.models.delete
discoveryengine.models.get
discoveryengine.models.list
discoveryengine.models.pause
discoveryengine.models.resume
discoveryengine.models.tune
discoveryengine.models.update

discoveryengine.operations.*

discoveryengine.operations.get
discoveryengine.operations.list

discoveryengine.projects.*

discoveryengine.projects.get
discoveryengine.projects.provision
discoveryengine.projects.reportConsentChange

discoveryengine.rankingConfigs.rank

discoveryengine.sampleQueries.*

discoveryengine.sampleQueries.create
discoveryengine.sampleQueries.delete
discoveryengine.sampleQueries.get
discoveryengine.sampleQueries.import
discoveryengine.sampleQueries.list
discoveryengine.sampleQueries.update

discoveryengine.sampleQuerySets.*

discoveryengine.sampleQuerySets.create
discoveryengine.sampleQuerySets.delete
discoveryengine.sampleQuerySets.get
discoveryengine.sampleQuerySets.list
discoveryengine.sampleQuerySets.update

discoveryengine.schemas.*

discoveryengine.schemas.create
discoveryengine.schemas.delete
discoveryengine.schemas.get
discoveryengine.schemas.list
discoveryengine.schemas.preview
discoveryengine.schemas.update
discoveryengine.schemas.validate

discoveryengine.servingConfigs.*

discoveryengine.servingConfigs.answer
discoveryengine.servingConfigs.create
discoveryengine.servingConfigs.delete
discoveryengine.servingConfigs.get
discoveryengine.servingConfigs.list
discoveryengine.servingConfigs.recommend
discoveryengine.servingConfigs.search
discoveryengine.servingConfigs.update

discoveryengine.sessions.*

discoveryengine.sessions.addContextFile
discoveryengine.sessions.create
discoveryengine.sessions.delete
discoveryengine.sessions.downloadFile
discoveryengine.sessions.get
discoveryengine.sessions.list
discoveryengine.sessions.listSessionFileMetadata
discoveryengine.sessions.recommendQuestions
discoveryengine.sessions.removeContextFile
discoveryengine.sessions.selectContextFiles
discoveryengine.sessions.update
discoveryengine.sessions.uploadFile

discoveryengine.siteSearchEngines.*

discoveryengine.siteSearchEngines.batchVerifyTargetSites
discoveryengine.siteSearchEngines.disableAdvancedSiteSearch
discoveryengine.siteSearchEngines.enableAdvancedSiteSearch
discoveryengine.siteSearchEngines.fetchDomainVerificationStatus
discoveryengine.siteSearchEngines.get
discoveryengine.siteSearchEngines.recrawlUris

discoveryengine.sitemaps.*

discoveryengine.sitemaps.create
discoveryengine.sitemaps.delete
discoveryengine.sitemaps.fetch

discoveryengine.suggestionDenyListEntries.*

discoveryengine.suggestionDenyListEntries.import
discoveryengine.suggestionDenyListEntries.purge

discoveryengine.targetSites.*

discoveryengine.targetSites.batchCreate
discoveryengine.targetSites.create
discoveryengine.targetSites.delete
discoveryengine.targetSites.get
discoveryengine.targetSites.list
discoveryengine.targetSites.update

discoveryengine.userEvents.*

discoveryengine.userEvents.create
discoveryengine.userEvents.fetchStats
discoveryengine.userEvents.import
discoveryengine.userEvents.purge

discoveryengine.userStores.*

discoveryengine.userStores.batchUpdateUserLicenses
discoveryengine.userStores.listUserLicenses

discoveryengine.widgetConfigs.*

discoveryengine.widgetConfigs.get
discoveryengine.widgetConfigs.update

resourcemanager.projects.get

resourcemanager.projects.list

Discovery Engine Editor

(roles/discoveryengine.editor)

Grants read and write access to all discovery engine resources.

discoveryengine.aclConfigs.get

discoveryengine.agents.*

discoveryengine.agents.create
discoveryengine.agents.delete
discoveryengine.agents.get
discoveryengine.agents.list
discoveryengine.agents.update

discoveryengine.analytics.*

discoveryengine.analytics.acquireDashboardSession
discoveryengine.analytics.refreshDashboardSessionTokens

discoveryengine.answers.get

discoveryengine.assistAnswers.get

discoveryengine.assistants.assist

discoveryengine.assistants.get

discoveryengine.assistants.list

discoveryengine.branches.*

discoveryengine.branches.get
discoveryengine.branches.list

discoveryengine.cmekConfigs.get

discoveryengine.cmekConfigs.list

discoveryengine.collections.get

discoveryengine.collections.list

discoveryengine.completionConfigs.completeQuery

discoveryengine.completionConfigs.get

discoveryengine.connectorRuns.list

discoveryengine.controls.get

discoveryengine.controls.list

discoveryengine.conversations.*

discoveryengine.conversations.converse
discoveryengine.conversations.create
discoveryengine.conversations.delete
discoveryengine.conversations.get
discoveryengine.conversations.list
discoveryengine.conversations.update

discoveryengine.dataConnectors.acquireAccessToken

discoveryengine.dataConnectors.acquireAndStoreRefreshToken

discoveryengine.dataConnectors.buildActionInvocation

discoveryengine.dataConnectors.checkRefreshToken

discoveryengine.dataConnectors.executeAction

discoveryengine.dataConnectors.get

discoveryengine.dataConnectors.queryAvailableActions

discoveryengine.dataStores.completeQuery

discoveryengine.dataStores.get

discoveryengine.dataStores.list

discoveryengine.dataStores.listCustomModels

discoveryengine.dataStores.trainCustomModel

discoveryengine.documentProcessingConfigs.get

discoveryengine.documents.batchGetDocumentsMetadata

discoveryengine.documents.create

discoveryengine.documents.delete

discoveryengine.documents.get

discoveryengine.documents.import

discoveryengine.documents.list

discoveryengine.documents.update

discoveryengine.engines.get

discoveryengine.engines.list

discoveryengine.engines.pause

discoveryengine.engines.resume

discoveryengine.engines.tune

discoveryengine.evaluations.get

discoveryengine.evaluations.list

discoveryengine.groundingConfigs.check

discoveryengine.identityMappingStores.*

discoveryengine.identityMappingStores.create
discoveryengine.identityMappingStores.delete
discoveryengine.identityMappingStores.get
discoveryengine.identityMappingStores.importIdentityMappings
discoveryengine.identityMappingStores.list
discoveryengine.identityMappingStores.listIdentityMappings
discoveryengine.identityMappingStores.purgeIdentityMappings

discoveryengine.models.*

discoveryengine.models.create
discoveryengine.models.delete
discoveryengine.models.get
discoveryengine.models.list
discoveryengine.models.pause
discoveryengine.models.resume
discoveryengine.models.tune
discoveryengine.models.update

discoveryengine.operations.*

discoveryengine.operations.get
discoveryengine.operations.list

discoveryengine.projects.get

discoveryengine.rankingConfigs.rank

discoveryengine.sampleQueries.*

discoveryengine.sampleQueries.create
discoveryengine.sampleQueries.delete
discoveryengine.sampleQueries.get
discoveryengine.sampleQueries.import
discoveryengine.sampleQueries.list
discoveryengine.sampleQueries.update

discoveryengine.sampleQuerySets.*

discoveryengine.sampleQuerySets.create
discoveryengine.sampleQuerySets.delete
discoveryengine.sampleQuerySets.get
discoveryengine.sampleQuerySets.list
discoveryengine.sampleQuerySets.update

discoveryengine.schemas.get

discoveryengine.schemas.list

discoveryengine.schemas.preview

discoveryengine.schemas.validate

discoveryengine.servingConfigs.answer

discoveryengine.servingConfigs.get

discoveryengine.servingConfigs.list

discoveryengine.servingConfigs.recommend

discoveryengine.servingConfigs.search

discoveryengine.sessions.*

discoveryengine.sessions.addContextFile
discoveryengine.sessions.create
discoveryengine.sessions.delete
discoveryengine.sessions.downloadFile
discoveryengine.sessions.get
discoveryengine.sessions.list
discoveryengine.sessions.listSessionFileMetadata
discoveryengine.sessions.recommendQuestions
discoveryengine.sessions.removeContextFile
discoveryengine.sessions.selectContextFiles
discoveryengine.sessions.update
discoveryengine.sessions.uploadFile

discoveryengine.siteSearchEngines.get

discoveryengine.targetSites.get

discoveryengine.targetSites.list

discoveryengine.userEvents.create

discoveryengine.userEvents.fetchStats

discoveryengine.userEvents.import

discoveryengine.widgetConfigs.*

discoveryengine.widgetConfigs.get
discoveryengine.widgetConfigs.update

resourcemanager.projects.get

resourcemanager.projects.list

Cloud NotebookLM Notebook Editor ^Beta

(roles/discoveryengine.notebookEditor)

Grants read and write access to a Cloud NotebookLM Notebook.

discoveryengine.audioOverviews.*

discoveryengine.audioOverviews.create
discoveryengine.audioOverviews.delete
discoveryengine.audioOverviews.get
discoveryengine.audioOverviews.getIceConfig
discoveryengine.audioOverviews.sendSdpOffer

discoveryengine.notebooks.generateGuide

discoveryengine.notebooks.get

discoveryengine.notebooks.getIamPolicy

discoveryengine.notebooks.interactSources

discoveryengine.notebooks.list

discoveryengine.notebooks.removeSelf

discoveryengine.notebooks.update

discoveryengine.notes.*

discoveryengine.notes.create
discoveryengine.notes.delete
discoveryengine.notes.get
discoveryengine.notes.update

discoveryengine.sources.*

discoveryengine.sources.checkFreshness
discoveryengine.sources.create
discoveryengine.sources.delete
discoveryengine.sources.generateDocumentGuide
discoveryengine.sources.get
discoveryengine.sources.refresh
discoveryengine.sources.update

Cloud NotebookLM Admin ^Beta

(roles/discoveryengine.notebookLmOwner)

Grants full access to Cloud NotebookLM resources.

discoveryengine.accounts.create

discoveryengine.aclConfigs.*

discoveryengine.aclConfigs.get
discoveryengine.aclConfigs.update

discoveryengine.audioOverviews.*

discoveryengine.audioOverviews.create
discoveryengine.audioOverviews.delete
discoveryengine.audioOverviews.get
discoveryengine.audioOverviews.getIceConfig
discoveryengine.audioOverviews.sendSdpOffer

discoveryengine.notebooks.*

discoveryengine.notebooks.create
discoveryengine.notebooks.generateGuide
discoveryengine.notebooks.get
discoveryengine.notebooks.getAnalytics
discoveryengine.notebooks.getIamPolicy
discoveryengine.notebooks.interactSources
discoveryengine.notebooks.list
discoveryengine.notebooks.removeSelf
discoveryengine.notebooks.setIamPolicy
discoveryengine.notebooks.update

discoveryengine.notes.*

discoveryengine.notes.create
discoveryengine.notes.delete
discoveryengine.notes.get
discoveryengine.notes.update

discoveryengine.sources.*

discoveryengine.sources.checkFreshness
discoveryengine.sources.create
discoveryengine.sources.delete
discoveryengine.sources.generateDocumentGuide
discoveryengine.sources.get
discoveryengine.sources.refresh
discoveryengine.sources.update

resourcemanager.projects.get

resourcemanager.projects.list

Cloud NotebookLM User ^Beta

(roles/discoveryengine.notebookLmUser)

Grants user-level access to Cloud NotebookLM resources.

discoveryengine.accounts.create

discoveryengine.notebooks.create

discoveryengine.notebooks.list

resourcemanager.projects.get

resourcemanager.projects.list

Cloud NotebookLM Notebook Owner ^Beta

(roles/discoveryengine.notebookOwner)

Grants full access to a Cloud NotebookLM Notebook.

discoveryengine.audioOverviews.*

discoveryengine.audioOverviews.create
discoveryengine.audioOverviews.delete
discoveryengine.audioOverviews.get
discoveryengine.audioOverviews.getIceConfig
discoveryengine.audioOverviews.sendSdpOffer

discoveryengine.notebooks.generateGuide

discoveryengine.notebooks.get

discoveryengine.notebooks.getAnalytics

discoveryengine.notebooks.getIamPolicy

discoveryengine.notebooks.interactSources

discoveryengine.notebooks.list

discoveryengine.notebooks.removeSelf

discoveryengine.notebooks.setIamPolicy

discoveryengine.notebooks.update

discoveryengine.notes.*

discoveryengine.notes.create
discoveryengine.notes.delete
discoveryengine.notes.get
discoveryengine.notes.update

discoveryengine.sources.*

discoveryengine.sources.checkFreshness
discoveryengine.sources.create
discoveryengine.sources.delete
discoveryengine.sources.generateDocumentGuide
discoveryengine.sources.get
discoveryengine.sources.refresh
discoveryengine.sources.update

Cloud NotebookLM Notebook Viewer ^Beta

(roles/discoveryengine.notebookViewer)

Grants read-only access to a Cloud NotebookLM Notebook.

discoveryengine.audioOverviews.get

discoveryengine.audioOverviews.getIceConfig

discoveryengine.audioOverviews.sendSdpOffer

discoveryengine.notebooks.generateGuide

discoveryengine.notebooks.get

discoveryengine.notebooks.getIamPolicy

discoveryengine.notebooks.interactSources

discoveryengine.notebooks.list

discoveryengine.notebooks.removeSelf

discoveryengine.notes.get

discoveryengine.sources.checkFreshness

discoveryengine.sources.generateDocumentGuide

discoveryengine.sources.get

Discovery Engine Service Agent

(roles/discoveryengine.serviceAgent)

Discovery Engine service uploads documents and user events from Cloud Storage and BigQuery, reports results to the customer Cloud Storage bucket, writes logs to customer projects using Cloud Logging, and writes and reads metrics for customer using Cloud Monitoring.

alloydb.clusters.export

alloydb.databases.list

alloydb.instances.get

alloydb.operations.get

bigquery.datasets.create

bigquery.datasets.get

bigquery.jobs.create

bigquery.jobs.get

bigquery.jobs.list

bigquery.jobs.update

bigquery.tables.create

bigquery.tables.export

bigquery.tables.get

bigquery.tables.getData

bigquery.tables.list

bigquery.tables.update

bigquery.tables.updateData

bigtable.tables.readRows

bigtable.tables.sampleRowKeys

cloudsql.databases.get

cloudsql.instances.export

cloudsql.instances.get

datastore.databases.export

datastore.databases.get

datastore.databases.getMetadata

datastore.operations.get

discoveryengine.completionConfigs.completeQuery

discoveryengine.conversations.converse

discoveryengine.conversations.create

discoveryengine.dataStores.completeQuery

discoveryengine.servingConfigs.answer

discoveryengine.servingConfigs.search

discoveryengine.userEvents.create

integrations.apigeeExecutions.list

integrations.apigeeIntegrationVers.get

integrations.apigeeIntegrationVers.list

integrations.integrationVersions.get

integrations.integrationVersions.invoke

integrations.integrationVersions.list

integrations.integrations.get

integrations.integrations.invoke

integrations.integrations.list

integrations.testCases.get

integrations.testCases.invoke

integrations.testCases.list

logging.logEntries.create

monitoring.metricDescriptors.create

monitoring.metricDescriptors.get

monitoring.metricDescriptors.list

monitoring.monitoredResourceDescriptors.*

monitoring.monitoredResourceDescriptors.get
monitoring.monitoredResourceDescriptors.list

monitoring.timeSeries.*

monitoring.timeSeries.create
monitoring.timeSeries.list

resourcemanager.projects.get

resourcemanager.projects.list

spanner.databases.beginReadOnlyTransaction

spanner.databases.partitionQuery

spanner.databases.select

spanner.databases.useDataBoost

spanner.sessions.create

storage.buckets.create

storage.buckets.get

storage.buckets.getIamPolicy

storage.buckets.setIamPolicy

storage.managedFolders.*

storage.managedFolders.create
storage.managedFolders.delete
storage.managedFolders.get
storage.managedFolders.getIamPolicy
storage.managedFolders.list
storage.managedFolders.setIamPolicy

storage.objects.create

storage.objects.delete

storage.objects.get

storage.objects.list

storage.objects.update

Discovery Engine User

(roles/discoveryengine.user)

Grants user-level access to Discovery Engine resources.

discoveryengine.accounts.create

discoveryengine.agents.*

discoveryengine.agents.create
discoveryengine.agents.delete
discoveryengine.agents.get
discoveryengine.agents.list
discoveryengine.agents.update

discoveryengine.answers.get

discoveryengine.assistAnswers.get

discoveryengine.assistants.assist

discoveryengine.completionConfigs.completeQuery

discoveryengine.dataConnectors.acquireAccessToken

discoveryengine.dataConnectors.acquireAndStoreRefreshToken

discoveryengine.dataConnectors.buildActionInvocation

discoveryengine.dataConnectors.checkRefreshToken

discoveryengine.dataConnectors.executeAction

discoveryengine.dataConnectors.queryAvailableActions

discoveryengine.notebooks.create

discoveryengine.notebooks.list

discoveryengine.servingConfigs.answer

discoveryengine.servingConfigs.recommend

discoveryengine.servingConfigs.search

discoveryengine.sessions.*

discoveryengine.sessions.addContextFile
discoveryengine.sessions.create
discoveryengine.sessions.delete
discoveryengine.sessions.downloadFile
discoveryengine.sessions.get
discoveryengine.sessions.list
discoveryengine.sessions.listSessionFileMetadata
discoveryengine.sessions.recommendQuestions
discoveryengine.sessions.removeContextFile
discoveryengine.sessions.selectContextFiles
discoveryengine.sessions.update
discoveryengine.sessions.uploadFile

discoveryengine.userEvents.create

discoveryengine.widgetConfigs.get

resourcemanager.projects.get

resourcemanager.projects.list

Discovery Engine Viewer

(roles/discoveryengine.viewer)

Grants read access to all discovery engine resources.

discoveryengine.aclConfigs.get

discoveryengine.agents.get

discoveryengine.agents.list

discoveryengine.analytics.*

discoveryengine.analytics.acquireDashboardSession
discoveryengine.analytics.refreshDashboardSessionTokens

discoveryengine.answers.get

discoveryengine.assistAnswers.get

discoveryengine.assistants.get

discoveryengine.assistants.list

discoveryengine.branches.*

discoveryengine.branches.get
discoveryengine.branches.list

discoveryengine.cmekConfigs.get

discoveryengine.cmekConfigs.list

discoveryengine.collections.get

discoveryengine.collections.list

discoveryengine.completionConfigs.completeQuery

discoveryengine.completionConfigs.get

discoveryengine.connectorRuns.list

discoveryengine.controls.get

discoveryengine.controls.list

discoveryengine.conversations.converse

discoveryengine.conversations.get

discoveryengine.conversations.list

discoveryengine.dataConnectors.buildActionInvocation

discoveryengine.dataConnectors.checkRefreshToken

discoveryengine.dataConnectors.get

discoveryengine.dataConnectors.queryAvailableActions

discoveryengine.dataStores.completeQuery

discoveryengine.dataStores.get

discoveryengine.dataStores.list

discoveryengine.dataStores.listCustomModels

discoveryengine.documentProcessingConfigs.get

discoveryengine.documents.batchGetDocumentsMetadata

discoveryengine.documents.get

discoveryengine.documents.list

discoveryengine.engines.get

discoveryengine.engines.list

discoveryengine.evaluations.get

discoveryengine.evaluations.list

discoveryengine.groundingConfigs.check

discoveryengine.identityMappingStores.get

discoveryengine.identityMappingStores.list

discoveryengine.identityMappingStores.listIdentityMappings

discoveryengine.models.get

discoveryengine.models.list

discoveryengine.operations.*

discoveryengine.operations.get
discoveryengine.operations.list

discoveryengine.projects.get

discoveryengine.rankingConfigs.rank

discoveryengine.sampleQueries.get

discoveryengine.sampleQueries.list

discoveryengine.sampleQuerySets.get

discoveryengine.sampleQuerySets.list

discoveryengine.schemas.get

discoveryengine.schemas.list

discoveryengine.schemas.preview

discoveryengine.schemas.validate

discoveryengine.servingConfigs.answer

discoveryengine.servingConfigs.get

discoveryengine.servingConfigs.list

discoveryengine.servingConfigs.recommend

discoveryengine.servingConfigs.search

discoveryengine.sessions.downloadFile

discoveryengine.sessions.get

discoveryengine.sessions.list

discoveryengine.sessions.listSessionFileMetadata

discoveryengine.sessions.recommendQuestions

discoveryengine.siteSearchEngines.get

discoveryengine.targetSites.get

discoveryengine.targetSites.list

discoveryengine.userEvents.fetchStats

discoveryengine.widgetConfigs.get

resourcemanager.projects.get

resourcemanager.projects.list

Discovery Engine permissions

Permission	Included in roles
`discoveryengine.accounts.create`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM User (`roles/discoveryengine.notebookLmUser`) Discovery Engine User (`roles/discoveryengine.user`)
`discoveryengine.aclConfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.aclConfigs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`)
`discoveryengine.agents.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`)
`discoveryengine.agents.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`)
`discoveryengine.agents.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.agents.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`discoveryengine.agents.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`)
`discoveryengine.analytics.acquireDashboardSession`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.analytics.refreshDashboardSessionTokens`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.answers.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.assistAnswers.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.assistants.assist`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`)
`discoveryengine.assistants.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.assistants.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.assistants.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.assistants.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`discoveryengine.assistants.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.audioOverviews.create`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`)
`discoveryengine.audioOverviews.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`)
`discoveryengine.audioOverviews.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`)
`discoveryengine.audioOverviews.getIceConfig`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`)
`discoveryengine.audioOverviews.sendSdpOffer`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`)
`discoveryengine.branches.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.branches.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`discoveryengine.cmekConfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.cmekConfigs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`discoveryengine.cmekConfigs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.collections.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.collections.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.collections.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.completionConfigs.completeQuery`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`discoveryengine.completionConfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.completionConfigs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.connectorRuns.cancel`	Owner (`roles/owner`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.connectorRuns.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`discoveryengine.controls.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.controls.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.controls.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.controls.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`discoveryengine.controls.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.conversations.converse`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`discoveryengine.conversations.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`discoveryengine.conversations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)
`discoveryengine.conversations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.conversations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`discoveryengine.conversations.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)
`discoveryengine.dataConnectors.acquireAccessToken`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`)
`discoveryengine.dataConnectors.acquireAndStoreRefreshToken`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`)
`discoveryengine.dataConnectors.buildActionInvocation`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.dataConnectors.checkRefreshToken`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.dataConnectors.executeAction`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`)
`discoveryengine.dataConnectors.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.dataConnectors.queryAvailableActions`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.dataConnectors.startConnectorRun`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.dataConnectors.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.dataStores.completeQuery`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SecLM Service Agent (`roles/seclm.serviceAgent`) Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`discoveryengine.dataStores.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.dataStores.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.dataStores.enrollSolutions`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.dataStores.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SecLM Service Agent (`roles/seclm.serviceAgent`)
`discoveryengine.dataStores.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. SecLM Service Agent (`roles/seclm.serviceAgent`) Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.dataStores.listCustomModels`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.dataStores.trainCustomModel`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)
`discoveryengine.dataStores.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.documentProcessingConfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.documentProcessingConfigs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.documents.batchGetDocumentsMetadata`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.documents.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.documents.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)
`discoveryengine.documents.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.documents.import`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.documents.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.documents.purge`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.documents.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.engines.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.engines.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.engines.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.engines.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`discoveryengine.engines.pause`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)
`discoveryengine.engines.resume`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)
`discoveryengine.engines.tune`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)
`discoveryengine.engines.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.evaluations.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.evaluations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.evaluations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`discoveryengine.groundingConfigs.check`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.identityMappingStores.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)
`discoveryengine.identityMappingStores.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)
`discoveryengine.identityMappingStores.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.identityMappingStores.importIdentityMappings`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)
`discoveryengine.identityMappingStores.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`discoveryengine.identityMappingStores.listIdentityMappings`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.identityMappingStores.purgeIdentityMappings`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)
`discoveryengine.locations.estimateDataSize`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.locations.exchangeAuthCredentials`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.locations.getConnectorSource`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.locations.listConnectorSources`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.locations.setUpDataConnector`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.models.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)
`discoveryengine.models.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)
`discoveryengine.models.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.models.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`discoveryengine.models.pause`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)
`discoveryengine.models.resume`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)
`discoveryengine.models.tune`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)
`discoveryengine.models.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)
`discoveryengine.notebooks.create`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM User (`roles/discoveryengine.notebookLmUser`) Discovery Engine User (`roles/discoveryengine.user`)
`discoveryengine.notebooks.generateGuide`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`)
`discoveryengine.notebooks.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`)
`discoveryengine.notebooks.getAnalytics`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`)
`discoveryengine.notebooks.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`discoveryengine.notebooks.interactSources`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`)
`discoveryengine.notebooks.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM User (`roles/discoveryengine.notebookLmUser`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`) Discovery Engine User (`roles/discoveryengine.user`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`discoveryengine.notebooks.removeSelf`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`)
`discoveryengine.notebooks.setIamPolicy`	Owner (`roles/owner`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Security Admin (`roles/iam.securityAdmin`)
`discoveryengine.notebooks.update`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`)
`discoveryengine.notes.create`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`)
`discoveryengine.notes.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`)
`discoveryengine.notes.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`)
`discoveryengine.notes.update`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`)
`discoveryengine.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`discoveryengine.projects.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.projects.provision`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.projects.reportConsentChange`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.rankingConfigs.rank`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.sampleQueries.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)
`discoveryengine.sampleQueries.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)
`discoveryengine.sampleQueries.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.sampleQueries.import`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)
`discoveryengine.sampleQueries.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`discoveryengine.sampleQueries.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)
`discoveryengine.sampleQuerySets.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)
`discoveryengine.sampleQuerySets.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)
`discoveryengine.sampleQuerySets.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.sampleQuerySets.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`discoveryengine.sampleQuerySets.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)
`discoveryengine.schemas.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.schemas.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.schemas.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.schemas.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Dialogflow Service Agent (`roles/dialogflow.serviceAgent`)
`discoveryengine.schemas.preview`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.schemas.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.schemas.validate`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.servingConfigs.answer`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`discoveryengine.servingConfigs.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.servingConfigs.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.servingConfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.servingConfigs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`discoveryengine.servingConfigs.recommend`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.servingConfigs.search`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Dialogflow Service Agent (`roles/dialogflow.serviceAgent`) Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`) SecLM Service Agent (`roles/seclm.serviceAgent`) Vertex AI Extension Service Agent (`roles/aiplatform.extensionServiceAgent`)
`discoveryengine.servingConfigs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.sessions.addContextFile`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`)
`discoveryengine.sessions.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`)
`discoveryengine.sessions.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`)
`discoveryengine.sessions.downloadFile`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.sessions.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.sessions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`discoveryengine.sessions.listSessionFileMetadata`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.sessions.recommendQuestions`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.sessions.removeContextFile`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`)
`discoveryengine.sessions.selectContextFiles`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`)
`discoveryengine.sessions.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`)
`discoveryengine.sessions.uploadFile`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`)
`discoveryengine.siteSearchEngines.batchVerifyTargetSites`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.siteSearchEngines.disableAdvancedSiteSearch`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.siteSearchEngines.enableAdvancedSiteSearch`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.siteSearchEngines.fetchDomainVerificationStatus`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.siteSearchEngines.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.siteSearchEngines.recrawlUris`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.sitemaps.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.sitemaps.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.sitemaps.fetch`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.sources.checkFreshness`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`)
`discoveryengine.sources.create`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`)
`discoveryengine.sources.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`)
`discoveryengine.sources.generateDocumentGuide`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`)
`discoveryengine.sources.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`) Cloud NotebookLM Notebook Viewer (`roles/discoveryengine.notebookViewer`)
`discoveryengine.sources.refresh`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`)
`discoveryengine.sources.update`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud NotebookLM Notebook Editor (`roles/discoveryengine.notebookEditor`) Cloud NotebookLM Admin (`roles/discoveryengine.notebookLmOwner`) Cloud NotebookLM Notebook Owner (`roles/discoveryengine.notebookOwner`)
`discoveryengine.suggestionDenyListEntries.import`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.suggestionDenyListEntries.purge`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.targetSites.batchCreate`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.targetSites.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.targetSites.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.targetSites.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.targetSites.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`discoveryengine.targetSites.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.userEvents.create`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Discovery Engine Service Agent (`roles/discoveryengine.serviceAgent`)
`discoveryengine.userEvents.fetchStats`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.userEvents.import`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)
`discoveryengine.userEvents.purge`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.userStores.batchUpdateUserLicenses`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.userStores.listUserLicenses`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`)
`discoveryengine.widgetConfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`) Discovery Engine User (`roles/discoveryengine.user`) Discovery Engine Viewer (`roles/discoveryengine.viewer`)
`discoveryengine.widgetConfigs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Discovery Engine Admin (`roles/discoveryengine.admin`) Discovery Engine Editor (`roles/discoveryengine.editor`)

Discovery Engine roles and permissions Stay organized with collections Save and categorize content based on your preferences.