Set up Gemini Cloud Assist in Cloud Billing Stay organized with collections Save and categorize content based on your preferences.
Preview
This product or feature is subject to the "Pre-GA Offerings Terms" in the General Service Terms section of theService Specific Terms. Pre-GA products and features are available "as is" and might have limited support. For more information, see thelaunch stage descriptions.
To set upGemini Cloud Assist in Cloud Billing,perform the following steps:
Enable the Gemini Cloud Assist API in a Google Cloud project.An administrator typically performs this step.
In the Google Cloud project, grant Identity and Access Management (IAM) roles to the same users who access Cloud Billing cost and utilizationdata. An administrator typically performs this step.
For users who need access to Cloud Billing data andGemini Cloud Assist in Cloud Billing,grant IAM roles in the Cloud Billing account that'slinked to the project where the Gemini Cloud Assist API is enabled. An administratortypically performs this step.
Enable the Gemini Cloud Assist API in a Google Cloud project
This section describes the steps required to enable theGemini Cloud Assist API in a Google Cloud project.
Console
To enable the Gemini Cloud Assist API, go to theGemini Cloud Assist API page.
In the project selector, select the project you want to use as a"Gemini" project.
You can enable the Gemini Cloud Assist API in more than oneproject. For Cloud Billing users who havebilling-account-level permissions on the Cloud Billing account, we recommend that you use aFinOps administration project to contain the API.
ClickEnable.
The page updates and shows a status ofAPI Enabled.
gcloud
In the Google Cloud console, activate Cloud Shell.
In the project selector menu, select the project you want to use as a"Gemini" project.
You can enable the Gemini Cloud Assist API in more than oneproject. For Cloud Billing users who havebilling-account-level permissions on the Cloud Billing account, we recommend that you use aFinOps administration project to contain the API.
Enable the Gemini Cloud Assist API usingthe
gcloud services enablecommand:gcloudservicesenablegeminicloudassist.googleapis.comIf you want to enable the Gemini Cloud Assist API in a differentGoogle Cloud project, add the
--projectparameter:gcloudservicesenablegeminicloudassist.googleapis.com--projectPROJECT_IDReplace
PROJECT_IDwith your Google Cloud projectID.The output is similar to the following:
Waiting for async operation operations/acf.2e2fcfce-8327-4984-9040-a67777082687 to complete...Operation finished successfully.
After you enable the Gemini Cloud Assist API in the specifiedGoogle Cloud project, Gemini Cloud Assist is now available toall users who have therequired IAM roles on the specified project.
Grant IAM roles in a Google Cloud project
This section describes the steps to grant the required project permissions touse Gemini Cloud Assist. In the Google Cloud project where youenabled the Gemini Cloud Assist API, grant the followingIAM roles to users(principals)on the project:
- Gemini Cloud Assist User
- Service Usage Consumer
Console
To grant the IAM roles that are required to use Gemini Cloud Assist, go to theIAM & Admin page.
In thePrincipal column, find aprincipal for which you want to enable access to Gemini Cloud Assist, andthen clickEdit principal inthat row.
In theEdit access pane, clickAdd another role.
InSelect a role, selectGemini Cloud Assist User.
ClickAdd another role and selectService Usage Consumer.
ClickSave.
gcloud
In the Google Cloud console, activate Cloud Shell.
In the project selector menu, select a project.
Grant theGemini Cloud Assist User role:
gcloud projects add-iam-policy-bindingPROJECT_ID \ --member=PRINCIPAL --role=roles/geminicloudassist.user
Replace the following:
PROJECT_ID: the ID of yourGoogle Cloud project—for example,1234567890.PRINCIPAL: theidentifier for theprincipal—for example,user:cloudysanfrancisco@gmail.com.
The output is a list of policy bindings that includes the following:
- members: - user:PRINCIPAL role: roles/geminicloudassist.userRepeat the previous step for the role
roles/serviceusage.serviceUsageConsumer.
For more information, seeGrant a single role andgcloud projects add-iam-policy-binding.
All of the users (principals) who are granted these roles can accessGemini Cloud Assist features in the Google Cloud console within thespecified project. If the project users also haveaccess to view Cloud Billing data,they can use Gemini Cloud Assist in Cloud BillingReportsand theFinOps hub to get AI assistance to create cost reports and tosummarize key insights about cloud costs and optimization recommendations.For more information, seeGemini Cloud Assist in Cloud Billing overview.
Advanced IAM setup tasks for projects
Instead of using the Google Cloud console or the gcloud CLI togrant predefined IAM roles on a project, you can do any of thefollowing:
UseIAM REST APIs orIAM client libraries to grant roles.
If you use these interfaces, use the fully qualified role names:
roles/geminicloudassist.userroles/serviceusage.serviceUsageConsumer
For more information about granting roles, seeManage access to projects, folders, and organizations.
Create and grant custom roles.
Anycustom roles forproject permissions that you create need the following permissions toaccess Gemini Cloud Assist:
geminicloudassist.companions.generateChatgeminicloudassist.companions.generateCodeserviceusage.services.use
Grant IAM roles in a Cloud Billing account
For users who need access to Cloud Billing cost data, you need to grantpermissions on the Cloud Billing account that are adequate to accesstheReports page and theFinOps hub. To useGemini Cloud Assist in Cloud Billing, grant users accessto the Cloud Billing account that islinked to the project where the Gemini Cloud Assist API is enabled.
Required permissions: for detailed guidance about the permissionsrequired to access BillingReports, see thePermissions required to access reports section available in the"Analyze billing data and cost trends with Reports" article.
Required permissions: for detailed guidance about the permissionsrequired to access the BillingFinOps hub, see thePermissions required to access the FinOps hub section available in the"Optimize costs with FinOps hub" article.
Grant access: for guidance on how to grant access to aCloud Billing account, see theUpdate user permissions for a Cloud Billing account section available in the"Manage access to Cloud Billing accounts" article.
What's next
- Learn more aboutAI assistance that's available in Gemini Cloud Assist in Cloud Billing.
- Learn more about the differenttypes of generative AI assistance available in Gemini Cloud Assist.
- Learnhow Gemini Cloud Assist uses your data.
- Learn more aboutGoogle Cloud compliance.
Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-02-19 UTC.