Sie können die Zugriffssteuerung für KI-Anwendungen auf Projektebene konfigurieren. Wenn Sie den Zugriff auf KI-Anwendungen über die Console gewähren möchten, weisen Sie einem Hauptkonto für das Projekt, das die AI Applications-Engine enthält, die Rolle „Discovery Engine-Administrator“ zu.
Wenn Sie Zugriff auf KI-Anwendungen gewähren möchten, folgen Sie der Anleitung unter Einzelne Rolle zuweisen in der IAM-Dokumentation. Beachten Sie dabei Folgendes:
Wählen Sie in Schritt 2 ein Projekt aus.
Geben Sie in Schritt 4 beim Auswählen einer Rolle Discovery Engine in den Filter ein und klicken Sie dann auf Discovery Engine-Administrator.
Wenn Sie Inhaber des Projekts sind, haben Sie automatisch die Rolle „Discovery Engine-Administrator“ für dieses Projekt.
Informationen zum Gewähren des Zugriffs auf KI-Anwendungen für andere Nutzer, Gruppen und Dienstkonten finden Sie unter Zugriffssteuerung mit IAM.
[[["Leicht verständlich","easyToUnderstand","thumb-up"],["Mein Problem wurde gelöst","solvedMyProblem","thumb-up"],["Sonstiges","otherUp","thumb-up"]],[["Schwer verständlich","hardToUnderstand","thumb-down"],["Informationen oder Beispielcode falsch","incorrectInformationOrSampleCode","thumb-down"],["Benötigte Informationen/Beispiele nicht gefunden","missingTheInformationSamplesINeed","thumb-down"],["Problem mit der Übersetzung","translationIssue","thumb-down"],["Sonstiges","otherDown","thumb-down"]],["Zuletzt aktualisiert: 2025-08-19 (UTC)."],[[["\u003cp\u003eBefore using Vertex AI Search, you must create a Google Cloud project and ensure billing is enabled for it, as well as install and initialize the Google Cloud CLI if you plan to use the API.\u003c/p\u003e\n"],["\u003cp\u003eTo use Vertex AI Agent Builder, you need to activate the service on the Agent Builder page in the Google Cloud console and accept the Discovery Solutions data use terms for each project.\u003c/p\u003e\n"],["\u003cp\u003eAccess control for Vertex AI Agent Builder can be managed at the project level by granting the Discovery Engine Admin role to users, groups, or service accounts, and project owners automatically have this role.\u003c/p\u003e\n"],["\u003cp\u003eTo grant access to other users, groups and service accounts, you should refer to the "Access control with IAM" documentation.\u003c/p\u003e\n"]]],[],null,["# Before you begin\n\nThis page describes the basic start-up tasks that you must complete before\nusing Vertex AI Search.\n\nCreate a project\n----------------\n\nTo create a Google Cloud project for your Vertex AI Search apps and\ndata stores, follow these steps:\n\n1. In the Google Cloud console, on the [project selector\n page](https://console.cloud.google.com/projectselector2/home/dashboard), select or [create a Google Cloud project](/resource-manager/docs/creating-managing-projects).\n\n2. Make sure that billing is enabled for your Google Cloud project. Learn how\n to [check if billing is enabled on a\n project](/billing/docs/how-to/verify-billing-enabled).\n\n3. If you plan to use the API, [install](/sdk/docs/install) and\n [initialize](/sdk/docs/initializing) the Google Cloud CLI.\n\nTurn on AI Applications\n-----------------------\n\nTo use AI Applications, you must activate the AI Applications\nservice.\n\nTo turn on AI Applications, follow these steps:\n\n1. In the Google Cloud console, go to the **AI Applications** page.\n\n [AI Applications](https://console.cloud.google.com/gen-app-builder/start)\n2. Optional: Click **Allow Google to selectively sample model input and\n responses**.\n\n3. Optional: Review the [terms for data use](/retail/data-use-terms).\n\n4. Click **Continue and activate the API**.\n\nAccess control in AI Applications\n---------------------------------\n\nYou can configure access control for AI Applications at the project\nlevel. To grant access to AI Applications using the console, grant the\nDiscovery Engine Admin role to a principal for the project that contains the\nAI Applications engine.\n\nTo grant access to AI Applications, follow the instructions at [Grant a\nsingle role](/iam/docs/granting-changing-revoking-access#iam-grant-single-role-console) in\nthe IAM documentation using the following guidance:\n\n- In step 2, select a project.\n- In step 4, when selecting a role, enter **Discovery Engine** in the filter and then click **Discovery Engine Admin**.\n\nIf you are an owner of the project, you automatically have the Discovery Engine\nAdmin role for that project.\n\nTo grant access to AI Applications for other users, groups, and service\naccounts, see [Access control with IAM](/generative-ai-app-builder/docs/access-control).\n\nIf you are using the API, see\n[Set up authentication on Google Cloud](/generative-ai-app-builder/docs/authentication#on-gcp)\nfor authentication and access control.\n\nWhat's next\n-----------\n\n- [Authenticate to AI Applications](/generative-ai-app-builder/docs/authentication)\n- [Access control with IAM](/generative-ai-app-builder/docs/access-control)"]]