Turn off Gemini Cloud Assist

Console

1. To limit access for specific users in your organization, remove Identity and Access Management permissions for Gemini Cloud Assist:

   1. Go to the IAM & Admin page.

      Go to IAM & Admin

   2. In the Principal column, find a principal for which you want to remove access to Gemini Cloud Assist, and then click edit Edit principal in that row.

   3. In the Edit access pane, do the following:

      1. Locate the Gemini for Google Cloud User role, and then click delete Delete role.

      2. Locate the Gemini Cloud Assist User role, and then click delete Delete role.

      3. Locate the Service Usage Consumer role, and then click delete Delete role.

   4. Click Save.

2. Turn off the Gemini Cloud Assist API (geminicloudassist.googleapis.com):

   1. Go to the Enabled APIs & services page.

      Go to Enabled APIs & services

   2. To select the Google Cloud project where you want to disable the Gemini Cloud Assist API, do one of the following:

      • In the Select a recent project section, click a Google Cloud project.

      • Use the Select a resource dialog:

        1. Click Select project.
        2. In the Select a project dialog, click the name of the Google Cloud project for which you want to disable the API.

   3. Click the Gemini Cloud Assist API entry. If you need help finding the API, use the Search field in the Google Cloud console toolbar.

   4. Click stop Disable API.

3. Optional: If you are disabling all Gemini for Google Cloud products, then repeat the previous step to turn off the Gemini for Google Cloud API (cloudaicompanion.googleapis.com).

gcloud

1. In the Google Cloud console, activate Cloud Shell.

   Activate Cloud Shell

2. To limit access for specific users in your organization, remove Identity and Access Management permissions for Gemini Cloud Assist:

   1. Remove the role roles/cloudaicompanion.user using the command gcloud projects remove-iam-policy-binding:

      gcloud projects remove-iam-policy-binding PROJECT_ID \
      --member=PRINCIPAL --role=roles/cloudaicompanion.user
      

      Replace the following:

      • PROJECT_ID: the ID of your Google Cloud project—for example,1234567890.
      • PRINCIPAL: the identifier for the principal—for example, user:cloudysanfrancisco@gmail.com.

      The output is a list of policy bindings.

   2. Repeat the previous step for the following roles:

      • roles/geminicloudassist.user
      • roles/serviceusage.serviceUsageConsumer

3. Turn off the Gemini Cloud Assist API (geminicloudassist.googleapis.com) using the command gcloud services disable:

    gcloud services disable geminicloudassist.googleapis.com
   

   If successful, the command produces output similar to the following:

    Waiting for async operation operations/acf.e9d0943b-55d9-4ac0-8af4-745e1b8983f8 to complete...
    Operation finished successfully.
   

4. Optional: If you are disabling all Gemini for Google Cloud products, then repeat the previous step to turn off the cloudaicompanion.googleapis.com API.

API

These instructions use cURL to call API methods.

1. To limit access for specific users in your organization, remove Identity and Access Management permissions for Gemini Cloud Assist:

   1. Create a JSON file that contains the following information:

        {
          "options": {
            "requestedPolicyVersion": 3
          }
        }
      

   2. Retrieve the existing IAM policy for the project using the projects.getIamPolicy method:

        curl -X POST --data-binary @JSON_FILE_NAME \
          -H "Authorization: Bearer $(gcloud auth print-access-token)" \
          -H "Content-Type: application/json" \
          "https://cloudresourcemanager.googleapis.com/v1/projects/PROJECT_ID:getIamPolicy"
      

      Replace the following:

      • JSON_FILE_NAME: the path for the JSON file that you created in the previous step.

      • PROJECT_ID: the ID for the project.

      If successful, the response returns the project's IAM policy.

   3. Copy the project's IAM policy to an empty JSON file, and remove the users whose access you want to limit. You should remove any such users from the members field for the following fields:

      • "role": "roles/cloudaicompanion.user"
      • "role": "roles/geminicloudassist.user"
      • "role": "roles/serviceusage.serviceUsageConsumer"

   4. Apply the updated IAM policy to the project using the projects.setIamPolicy method:

        curl -X POST --data-binary @JSON_FILE_NAME \
          -H "Authorization: Bearer $(gcloud auth print-access-token)" \
          -H "Content-Type: application/json" \
          "https://cloudresourcemanager.googleapis.com/v1/projects/PROJECT_ID:setIamPolicy"
      

      Replace the following:

      • JSON_FILE_NAME: the path for the JSON file that you created in the previous step.

      • PROJECT_ID: the ID for the project.

      If successful, the response returns the project's updated IAM policy.

2. Turn off the Gemini Cloud Assist API (geminicloudassist.googleapis.com) using the services.disable method:

   curl -X POST \
     -H "Authorization: Bearer $(gcloud auth print-access-token)" \
     "https://serviceusage.googleapis.com/v1/projects/PROJECT_ID/services/geminicloudassist.googleapis.com:disable"
   

   Replace PROJECT_ID with the ID of the project for which you are disabling Gemini Cloud Assist.

   If the command succeeds, it returns a long-running operation, which includes a name field. You can use the value in the name field to check the status of the operation.

3. Optional: If you are disabling all Gemini for Google Cloud products, then repeat the previous step to turn off the cloudaicompanion.googleapis.com API.