Customer Engagement Suite with Google AI roles and permissions

This page lists the IAM roles and permissions for Customer Engagement Suite with Google AI. Tosearch through all roles and permissions, see therole andpermission index.

Customer Engagement Suite with Google AI roles

RolePermissions

Gemini Enterprise for Customer Engagement AdminBeta

(roles/ces.admin)

Full access to Gemini Enterprise for Customer Engagement resources.

ces.*

  • ces.agents.create
  • ces.agents.delete
  • ces.agents.get
  • ces.agents.list
  • ces.agents.update
  • ces.appVersions.create
  • ces.appVersions.delete
  • ces.appVersions.get
  • ces.appVersions.list
  • ces.appVersions.restore
  • ces.apps.create
  • ces.apps.delete
  • ces.apps.export
  • ces.apps.get
  • ces.apps.import
  • ces.apps.list
  • ces.apps.update
  • ces.changelogs.get
  • ces.changelogs.list
  • ces.conversations.delete
  • ces.conversations.get
  • ces.conversations.list
  • ces.deployments.create
  • ces.deployments.delete
  • ces.deployments.get
  • ces.deployments.list
  • ces.deployments.update
  • ces.evaluationDatasets.create
  • ces.evaluationDatasets.delete
  • ces.evaluationDatasets.get
  • ces.evaluationDatasets.list
  • ces.evaluationDatasets.update
  • ces.evaluationResults.delete
  • ces.evaluationResults.get
  • ces.evaluationResults.list
  • ces.evaluationRuns.delete
  • ces.evaluationRuns.get
  • ces.evaluationRuns.list
  • ces.evaluations.create
  • ces.evaluations.delete
  • ces.evaluations.get
  • ces.evaluations.list
  • ces.evaluations.update
  • ces.examples.create
  • ces.examples.delete
  • ces.examples.get
  • ces.examples.list
  • ces.examples.update
  • ces.guardrails.create
  • ces.guardrails.delete
  • ces.guardrails.get
  • ces.guardrails.list
  • ces.guardrails.update
  • ces.locations.get
  • ces.locations.list
  • ces.operations.cancel
  • ces.operations.delete
  • ces.operations.get
  • ces.operations.list
  • ces.sessions.bidiRunSession
  • ces.sessions.runSession
  • ces.tools.create
  • ces.tools.delete
  • ces.tools.execute
  • ces.tools.get
  • ces.tools.list
  • ces.tools.update
  • ces.toolsets.create
  • ces.toolsets.delete
  • ces.toolsets.get
  • ces.toolsets.list
  • ces.toolsets.update

contactcenterinsights.*

  • contactcenterinsights.analyses.create
  • contactcenterinsights.analyses.delete
  • contactcenterinsights.analyses.get
  • contactcenterinsights.analyses.list
  • contactcenterinsights.analysisRules.create
  • contactcenterinsights.analysisRules.delete
  • contactcenterinsights.analysisRules.get
  • contactcenterinsights.analysisRules.list
  • contactcenterinsights.analysisRules.update
  • contactcenterinsights.assessmentRules.create
  • contactcenterinsights.assessmentRules.delete
  • contactcenterinsights.assessmentRules.get
  • contactcenterinsights.assessmentRules.list
  • contactcenterinsights.assessmentRules.update
  • contactcenterinsights.assessments.appeal
  • contactcenterinsights.assessments.create
  • contactcenterinsights.assessments.delete
  • contactcenterinsights.assessments.finalize
  • contactcenterinsights.assessments.get
  • contactcenterinsights.assessments.list
  • contactcenterinsights.assessments.publish
  • contactcenterinsights.authorizedAnalyses.create
  • contactcenterinsights.authorizedAnalyses.delete
  • contactcenterinsights.authorizedAnalyses.get
  • contactcenterinsights.authorizedAnalyses.list
  • contactcenterinsights.authorizedAssessments.appeal
  • contactcenterinsights.authorizedAssessments.create
  • contactcenterinsights.authorizedAssessments.delete
  • contactcenterinsights.authorizedAssessments.finalize
  • contactcenterinsights.authorizedAssessments.get
  • contactcenterinsights.authorizedAssessments.list
  • contactcenterinsights.authorizedAssessments.publish
  • contactcenterinsights.authorizedConversations.create
  • contactcenterinsights.authorizedConversations.delete
  • contactcenterinsights.authorizedConversations.generateSignedAudio
  • contactcenterinsights.authorizedConversations.get
  • contactcenterinsights.authorizedConversations.list
  • contactcenterinsights.authorizedConversations.update
  • contactcenterinsights.authorizedConversations.upload
  • contactcenterinsights.authorizedFeedbackLabels.create
  • contactcenterinsights.authorizedFeedbackLabels.delete
  • contactcenterinsights.authorizedFeedbackLabels.download
  • contactcenterinsights.authorizedFeedbackLabels.get
  • contactcenterinsights.authorizedFeedbackLabels.list
  • contactcenterinsights.authorizedFeedbackLabels.update
  • contactcenterinsights.authorizedFeedbackLabels.upload
  • contactcenterinsights.authorizedNotes.create
  • contactcenterinsights.authorizedNotes.delete
  • contactcenterinsights.authorizedNotes.list
  • contactcenterinsights.authorizedNotes.update
  • contactcenterinsights.authorizedOperations.get
  • contactcenterinsights.authorizedOperations.list
  • contactcenterinsights.authorizedViewSets.create
  • contactcenterinsights.authorizedViewSets.delete
  • contactcenterinsights.authorizedViewSets.get
  • contactcenterinsights.authorizedViewSets.list
  • contactcenterinsights.authorizedViewSets.update
  • contactcenterinsights.authorizedViews.create
  • contactcenterinsights.authorizedViews.delete
  • contactcenterinsights.authorizedViews.get
  • contactcenterinsights.authorizedViews.getIamPolicy
  • contactcenterinsights.authorizedViews.list
  • contactcenterinsights.authorizedViews.setIamPolicy
  • contactcenterinsights.authorizedViews.update
  • contactcenterinsights.conversations.create
  • contactcenterinsights.conversations.delete
  • contactcenterinsights.conversations.export
  • contactcenterinsights.conversations.generateSignedAudio
  • contactcenterinsights.conversations.get
  • contactcenterinsights.conversations.list
  • contactcenterinsights.conversations.update
  • contactcenterinsights.conversations.upload
  • contactcenterinsights.datasetAnalyses.create
  • contactcenterinsights.datasetAnalyses.delete
  • contactcenterinsights.datasetAnalyses.get
  • contactcenterinsights.datasetAnalyses.list
  • contactcenterinsights.datasetConversations.create
  • contactcenterinsights.datasetConversations.delete
  • contactcenterinsights.datasetConversations.export
  • contactcenterinsights.datasetConversations.generateSignedAudio
  • contactcenterinsights.datasetConversations.get
  • contactcenterinsights.datasetConversations.list
  • contactcenterinsights.datasetConversations.update
  • contactcenterinsights.datasetConversations.upload
  • contactcenterinsights.datasetFeedbackLabels.create
  • contactcenterinsights.datasetFeedbackLabels.delete
  • contactcenterinsights.datasetFeedbackLabels.download
  • contactcenterinsights.datasetFeedbackLabels.get
  • contactcenterinsights.datasetFeedbackLabels.list
  • contactcenterinsights.datasetFeedbackLabels.update
  • contactcenterinsights.datasetFeedbackLabels.upload
  • contactcenterinsights.datasets.create
  • contactcenterinsights.datasets.delete
  • contactcenterinsights.datasets.get
  • contactcenterinsights.datasets.list
  • contactcenterinsights.datasets.update
  • contactcenterinsights.discoveries.delete
  • contactcenterinsights.discoveries.generate
  • contactcenterinsights.discoveries.get
  • contactcenterinsights.discoveries.list
  • contactcenterinsights.discoveries.update
  • contactcenterinsights.discoveryResults.get
  • contactcenterinsights.discoveryResults.list
  • contactcenterinsights.discoveryRevisions.create
  • contactcenterinsights.discoveryRevisions.get
  • contactcenterinsights.discoveryRevisions.list
  • contactcenterinsights.discoveryWorkspaces.delete
  • contactcenterinsights.discoveryWorkspaces.deploy
  • contactcenterinsights.discoveryWorkspaces.fetchTree
  • contactcenterinsights.discoveryWorkspaces.get
  • contactcenterinsights.discoveryWorkspaces.list
  • contactcenterinsights.discoveryWorkspaces.undeploy
  • contactcenterinsights.encryptionSpecs.get
  • contactcenterinsights.encryptionSpecs.initialize
  • contactcenterinsights.faqEntries.delete
  • contactcenterinsights.faqEntries.get
  • contactcenterinsights.faqEntries.list
  • contactcenterinsights.faqEntries.update
  • contactcenterinsights.faqModels.create
  • contactcenterinsights.faqModels.delete
  • contactcenterinsights.faqModels.get
  • contactcenterinsights.faqModels.list
  • contactcenterinsights.faqModels.update
  • contactcenterinsights.feedbackLabels.create
  • contactcenterinsights.feedbackLabels.delete
  • contactcenterinsights.feedbackLabels.download
  • contactcenterinsights.feedbackLabels.get
  • contactcenterinsights.feedbackLabels.list
  • contactcenterinsights.feedbackLabels.update
  • contactcenterinsights.feedbackLabels.upload
  • contactcenterinsights.issueModels.create
  • contactcenterinsights.issueModels.delete
  • contactcenterinsights.issueModels.deploy
  • contactcenterinsights.issueModels.export
  • contactcenterinsights.issueModels.get
  • contactcenterinsights.issueModels.import
  • contactcenterinsights.issueModels.list
  • contactcenterinsights.issueModels.undeploy
  • contactcenterinsights.issueModels.update
  • contactcenterinsights.issues.create
  • contactcenterinsights.issues.delete
  • contactcenterinsights.issues.get
  • contactcenterinsights.issues.list
  • contactcenterinsights.issues.update
  • contactcenterinsights.notes.create
  • contactcenterinsights.notes.delete
  • contactcenterinsights.notes.list
  • contactcenterinsights.notes.update
  • contactcenterinsights.operations.cancel
  • contactcenterinsights.operations.get
  • contactcenterinsights.operations.list
  • contactcenterinsights.phraseMatchers.create
  • contactcenterinsights.phraseMatchers.delete
  • contactcenterinsights.phraseMatchers.get
  • contactcenterinsights.phraseMatchers.list
  • contactcenterinsights.phraseMatchers.update
  • contactcenterinsights.qaQuestionTags.create
  • contactcenterinsights.qaQuestionTags.delete
  • contactcenterinsights.qaQuestionTags.get
  • contactcenterinsights.qaQuestionTags.list
  • contactcenterinsights.qaQuestionTags.update
  • contactcenterinsights.qaQuestions.create
  • contactcenterinsights.qaQuestions.delete
  • contactcenterinsights.qaQuestions.get
  • contactcenterinsights.qaQuestions.list
  • contactcenterinsights.qaQuestions.update
  • contactcenterinsights.qaScorecardRevisions.bulkUpdateQaQuestions
  • contactcenterinsights.qaScorecardRevisions.create
  • contactcenterinsights.qaScorecardRevisions.delete
  • contactcenterinsights.qaScorecardRevisions.deploy
  • contactcenterinsights.qaScorecardRevisions.get
  • contactcenterinsights.qaScorecardRevisions.list
  • contactcenterinsights.qaScorecardRevisions.tune
  • contactcenterinsights.qaScorecardRevisions.undeploy
  • contactcenterinsights.qaScorecards.create
  • contactcenterinsights.qaScorecards.delete
  • contactcenterinsights.qaScorecards.get
  • contactcenterinsights.qaScorecards.list
  • contactcenterinsights.qaScorecards.update
  • contactcenterinsights.settings.get
  • contactcenterinsights.settings.update
  • contactcenterinsights.views.create
  • contactcenterinsights.views.delete
  • contactcenterinsights.views.get
  • contactcenterinsights.views.list
  • contactcenterinsights.views.update
  • contactcenterinsights.visibilityLabels.list

resourcemanager.projects.get

resourcemanager.projects.list

Gemini Enterprise for Customer Engagement ClientBeta

(roles/ces.client)

Query access to Gemini Enterprise for Customer Engagement agents.

ces.sessions.*

  • ces.sessions.bidiRunSession
  • ces.sessions.runSession

ces.tools.execute

Customer Engagement Suite Service Agent

(roles/ces.serviceAgent)

Allows Customer Engagement Suite Service Account to access to dependent resources.

Warning: Do not grant service agent roles to any principals exceptservice agents.

aiplatform.endpoints.get

aiplatform.endpoints.predict

aiplatform.extensions.execute

aiplatform.extensions.get

aiplatform.models.get

aiplatform.ragCorpora.*

  • aiplatform.ragCorpora.create
  • aiplatform.ragCorpora.delete
  • aiplatform.ragCorpora.get
  • aiplatform.ragCorpora.list
  • aiplatform.ragCorpora.query
  • aiplatform.ragCorpora.update

aiplatform.ragFiles.*

  • aiplatform.ragFiles.delete
  • aiplatform.ragFiles.get
  • aiplatform.ragFiles.import
  • aiplatform.ragFiles.list
  • aiplatform.ragFiles.upload

bigquery.datasets.create

bigquery.datasets.get

bigquery.datasets.updateTag

bigquery.jobs.create

bigquery.tables.create

bigquery.tables.get

bigquery.tables.getData

bigquery.tables.update

bigquery.tables.updateData

ces.sessions.*

  • ces.sessions.bidiRunSession
  • ces.sessions.runSession

ces.tools.execute

cloudfunctions.functions.invoke

connectors.actions.*

  • connectors.actions.execute
  • connectors.actions.list

connectors.connections.executeSqlQuery

connectors.connections.generateOpenAPISpec

connectors.connections.get

connectors.entities.*

  • connectors.entities.create
  • connectors.entities.delete
  • connectors.entities.deleteEntitiesWithConditions
  • connectors.entities.get
  • connectors.entities.list
  • connectors.entities.update
  • connectors.entities.updateEntitiesWithConditions

connectors.entityTypes.list

connectors.operations.get

connectors.versions.get

contactcenterinsights.faqModels.create

contactcenterinsights.operations.get

dialogflow.sessions.*

  • dialogflow.sessions.detectIntent
  • dialogflow.sessions.streamingDetectIntent

discoveryengine.collections.list

discoveryengine.dataStores.create

discoveryengine.dataStores.get

discoveryengine.dataStores.list

discoveryengine.documents.create

discoveryengine.documents.get

discoveryengine.documents.import

discoveryengine.documents.list

discoveryengine.documents.update

discoveryengine.engines.create

discoveryengine.engines.delete

discoveryengine.engines.get

discoveryengine.engines.update

discoveryengine.schemas.get

discoveryengine.schemas.list

discoveryengine.servingConfigs.search

dlp.deidentifyTemplates.get

dlp.deidentifyTemplates.list

dlp.inspectTemplates.get

dlp.inspectTemplates.list

dlp.kms.encrypt

dlp.locations.*

  • dlp.locations.get
  • dlp.locations.list

integrations.integrationVersions.get

integrations.integrations.generateOpenApiSpec

integrations.integrations.get

integrations.integrations.invoke

logging.logEntries.create

logging.logEntries.route

run.jobs.run

run.routes.invoke

serviceusage.services.use

storage.objects.create

storage.objects.delete

storage.objects.get

storage.objects.update

Gemini Enterprise for Customer Engagement ViewerBeta

(roles/ces.viewer)

Read only access to Gemini Enterprise for Customer Engagement resources.

ces.agents.get

ces.agents.list

ces.appVersions.get

ces.appVersions.list

ces.apps.get

ces.apps.list

ces.changelogs.*

  • ces.changelogs.get
  • ces.changelogs.list

ces.conversations.get

ces.conversations.list

ces.deployments.get

ces.deployments.list

ces.evaluationDatasets.get

ces.evaluationDatasets.list

ces.evaluationResults.get

ces.evaluationResults.list

ces.evaluationRuns.get

ces.evaluationRuns.list

ces.evaluations.get

ces.evaluations.list

ces.examples.get

ces.examples.list

ces.guardrails.get

ces.guardrails.list

ces.locations.*

  • ces.locations.get
  • ces.locations.list

ces.operations.get

ces.operations.list

ces.tools.get

ces.tools.list

ces.toolsets.get

ces.toolsets.list

contactcenterinsights.analyses.get

contactcenterinsights.analyses.list

contactcenterinsights.analysisRules.get

contactcenterinsights.analysisRules.list

contactcenterinsights.assessmentRules.get

contactcenterinsights.assessmentRules.list

contactcenterinsights.assessments.get

contactcenterinsights.assessments.list

contactcenterinsights.authorizedAnalyses.get

contactcenterinsights.authorizedAnalyses.list

contactcenterinsights.authorizedAssessments.get

contactcenterinsights.authorizedAssessments.list

contactcenterinsights.authorizedConversations.generateSignedAudio

contactcenterinsights.authorizedConversations.get

contactcenterinsights.authorizedConversations.list

contactcenterinsights.authorizedFeedbackLabels.get

contactcenterinsights.authorizedFeedbackLabels.list

contactcenterinsights.authorizedNotes.list

contactcenterinsights.authorizedOperations.*

  • contactcenterinsights.authorizedOperations.get
  • contactcenterinsights.authorizedOperations.list

contactcenterinsights.authorizedViewSets.get

contactcenterinsights.authorizedViewSets.list

contactcenterinsights.authorizedViews.get

contactcenterinsights.authorizedViews.list

contactcenterinsights.conversations.generateSignedAudio

contactcenterinsights.conversations.get

contactcenterinsights.conversations.list

contactcenterinsights.datasetAnalyses.get

contactcenterinsights.datasetAnalyses.list

contactcenterinsights.datasetConversations.generateSignedAudio

contactcenterinsights.datasetConversations.get

contactcenterinsights.datasetConversations.list

contactcenterinsights.datasetFeedbackLabels.get

contactcenterinsights.datasetFeedbackLabels.list

contactcenterinsights.datasets.get

contactcenterinsights.datasets.list

contactcenterinsights.discoveries.get

contactcenterinsights.discoveries.list

contactcenterinsights.discoveryResults.*

  • contactcenterinsights.discoveryResults.get
  • contactcenterinsights.discoveryResults.list

contactcenterinsights.discoveryRevisions.get

contactcenterinsights.discoveryRevisions.list

contactcenterinsights.discoveryWorkspaces.fetchTree

contactcenterinsights.discoveryWorkspaces.get

contactcenterinsights.discoveryWorkspaces.list

contactcenterinsights.encryptionSpecs.get

contactcenterinsights.faqEntries.get

contactcenterinsights.faqEntries.list

contactcenterinsights.faqModels.get

contactcenterinsights.faqModels.list

contactcenterinsights.feedbackLabels.download

contactcenterinsights.feedbackLabels.get

contactcenterinsights.feedbackLabels.list

contactcenterinsights.issueModels.get

contactcenterinsights.issueModels.list

contactcenterinsights.issues.get

contactcenterinsights.issues.list

contactcenterinsights.notes.list

contactcenterinsights.operations.get

contactcenterinsights.operations.list

contactcenterinsights.phraseMatchers.get

contactcenterinsights.phraseMatchers.list

contactcenterinsights.qaQuestionTags.get

contactcenterinsights.qaQuestionTags.list

contactcenterinsights.qaQuestions.get

contactcenterinsights.qaQuestions.list

contactcenterinsights.qaScorecardRevisions.get

contactcenterinsights.qaScorecardRevisions.list

contactcenterinsights.qaScorecards.get

contactcenterinsights.qaScorecards.list

contactcenterinsights.settings.get

contactcenterinsights.views.get

contactcenterinsights.views.list

contactcenterinsights.visibilityLabels.list

resourcemanager.projects.get

resourcemanager.projects.list

Customer Engagement Suite with Google AI permissions

PermissionIncluded in roles

ces.agents.create

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.agents.delete

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.agents.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Support User (roles/iam.supportUser)

ces.agents.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

ces.agents.update

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.appVersions.create

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.appVersions.delete

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.appVersions.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Support User (roles/iam.supportUser)

ces.appVersions.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

ces.appVersions.restore

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.apps.create

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.apps.delete

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.apps.export

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Support User (roles/iam.supportUser)

ces.apps.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Support User (roles/iam.supportUser)

ces.apps.import

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.apps.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

ces.apps.update

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.changelogs.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Support User (roles/iam.supportUser)

ces.changelogs.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

ces.conversations.delete

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.conversations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Support User (roles/iam.supportUser)

ces.conversations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

ces.deployments.create

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.deployments.delete

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.deployments.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Support User (roles/iam.supportUser)

ces.deployments.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

ces.deployments.update

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.evaluationDatasets.create

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.evaluationDatasets.delete

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.evaluationDatasets.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Support User (roles/iam.supportUser)

ces.evaluationDatasets.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

ces.evaluationDatasets.update

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.evaluationResults.delete

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.evaluationResults.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Support User (roles/iam.supportUser)

ces.evaluationResults.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

ces.evaluationRuns.delete

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.evaluationRuns.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Support User (roles/iam.supportUser)

ces.evaluationRuns.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

ces.evaluations.create

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.evaluations.delete

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.evaluations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Support User (roles/iam.supportUser)

ces.evaluations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

ces.evaluations.update

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.examples.create

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.examples.delete

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.examples.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Support User (roles/iam.supportUser)

ces.examples.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

ces.examples.update

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.guardrails.create

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.guardrails.delete

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.guardrails.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Support User (roles/iam.supportUser)

ces.guardrails.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

ces.guardrails.update

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.locations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Support User (roles/iam.supportUser)

ces.locations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

ces.operations.cancel

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.operations.delete

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.operations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Support User (roles/iam.supportUser)

ces.operations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

ces.sessions.bidiRunSession

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Client (roles/ces.client)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

ces.sessions.runSession

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Client (roles/ces.client)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

ces.tools.create

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.tools.delete

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.tools.execute

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Client (roles/ces.client)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

ces.tools.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Support User (roles/iam.supportUser)

ces.tools.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

ces.tools.update

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.toolsets.create

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.toolsets.delete

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

ces.toolsets.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Support User (roles/iam.supportUser)

ces.toolsets.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Gemini Enterprise for Customer Engagement Viewer (roles/ces.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

ces.toolsets.update

Owner (roles/owner)

Editor (roles/editor)

Gemini Enterprise for Customer Engagement Admin (roles/ces.admin)

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-12-16 UTC.