If you plan to use the API, install and
initialize the Google Cloud CLI.
Access control
You can configure access control for Agentspace at the project
level. To grant access to Agentspace using the console, grant the
Discovery Engine Admin role to a principal for the project that contains the
Agentspace engine.
To grant access to Agentspace, follow the instructions at Grant a
single role in the IAM documentation using
the following guidance:
In step 2, select a project.
In step 4, when selecting a role, enter Discovery Engine in the
filter and then click Discovery Engine Admin.
If you are an owner of the project, you automatically have the Discovery Engine
Admin role for that project.
To grant access to Agentspace for other users, groups, and service
accounts, see Access control with IAM.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-03 UTC."],[],[],null,["# Before you begin\n\nThis page describes the basic start-up tasks that you must complete before\nusing Agentspace.\n\nCreate a project\n----------------\n\nTo create a Google Cloud project for your Agentspace apps and\ndata stores, follow these steps:\n\n1. In the Google Cloud console, on the [project selector\n page](https://console.cloud.google.com/projectselector2/home/dashboard), select or [create a Google Cloud project](/resource-manager/docs/creating-managing-projects).\n\n2. [Check whether billing is enabled on your Google Cloud\n project](/billing/docs/how-to/verify-billing-enabled).\n\n3. If you plan to use the API, [install](/sdk/docs/install) and\n [initialize](/sdk/docs/initializing) the Google Cloud CLI.\n\nAccess control\n--------------\n\nYou can configure access control for Agentspace at the project\nlevel. To grant access to Agentspace using the console, grant the\nDiscovery Engine Admin role to a principal for the project that contains the\nAgentspace engine.\n\nTo grant access to Agentspace, follow the instructions at [Grant a\nsingle role](/iam/docs/granting-changing-revoking-access#iam-grant-single-role-console) in the IAM documentation using\nthe following guidance:\n\n- In step 2, select a project.\n- In step 4, when selecting a role, enter **Discovery Engine** in the filter and then click **Discovery Engine Admin**.\n\nIf you are an owner of the project, you automatically have the Discovery Engine\nAdmin role for that project.\n\nTo grant access to Agentspace for other users, groups, and service\naccounts, see [Access control with IAM](/agentspace/docs/access-control).\n\nIf you are using the API, see\n[Set up authentication on Google Cloud](/agentspace/docs/authentication#on-gcp)\nfor authentication and access control.\n\nWhat's next\n-----------\n\n- [Authenticate to Google Agentspace](/agentspace/docs/authentication)\n- [Access control with IAM](/agentspace/docs/access-control)"]]